diff --git a/Makefile b/Makefile index 7f035e049a2..15b50b0d158 100644 --- a/Makefile +++ b/Makefile @@ -77,6 +77,7 @@ openapi-generate-java-classes: cd kubernetes-model-generator/openshift-model-tuned && mvn -Pgenerate clean install cd kubernetes-model-generator/openshift-model-whereabouts && mvn -Pgenerate clean install cd kubernetes-model-generator/openshift-model-storageversionmigrator && mvn -Pgenerate clean install + cd kubernetes-model-generator/openshift-model-hive && mvn -Pgenerate clean install # Legacy generation of the model: TODO: remove .PHONY: generate-model-legacy diff --git a/kubernetes-model-generator/generateModel.sh b/kubernetes-model-generator/generateModel.sh index e12512d7be7..1fdec32a625 100755 --- a/kubernetes-model-generator/generateModel.sh +++ b/kubernetes-model-generator/generateModel.sh @@ -22,7 +22,6 @@ ABSOLUTE_BASEDIR=$(realpath "$BASEDIR") # Array for all existing modules declare -a modules=( - "openshift-model-hive" "openshift-model-installer" "../extensions/knative/generator" "../extensions/certmanager/generator-v1" diff --git a/kubernetes-model-generator/openapi/generator/cmd/openapi.go b/kubernetes-model-generator/openapi/generator/cmd/openapi.go index 113e82b5e32..8859a2de32e 100644 --- a/kubernetes-model-generator/openapi/generator/cmd/openapi.go +++ b/kubernetes-model-generator/openapi/generator/cmd/openapi.go @@ -27,6 +27,7 @@ import ( openshiftcloudcredentialoperatorv1 "github.com/openshift/cloud-credential-operator/pkg/apis/cloudcredential/v1" openshiftclusternetworkoperatorv1 "github.com/openshift/cluster-network-operator/pkg/apis/network/v1" openshiftclusternodetuningoperatorv1 "github.com/openshift/cluster-node-tuning-operator/pkg/apis/tuned/v1" + openshifthivev1 "github.com/openshift/hive/apis/hive/v1" operatorframeworkv1 "github.com/operator-framework/api/pkg/operators/v1" operatorframeworkv1alpha1 "github.com/operator-framework/api/pkg/operators/v1alpha1" olm "github.com/operator-framework/operator-lifecycle-manager/pkg/package-server/apis/operators/v1" @@ -58,6 +59,7 @@ var openApiRun = func(cobraCmd *cobra.Command, args []string) { openshiftcloudcredentialoperatorv1.GroupVersion.String(), openshiftclusternetworkoperatorv1.GroupVersion.String(), openshiftclusternodetuningoperatorv1.SchemeGroupVersion.String(), + openshifthivev1.SchemeGroupVersion.String(), olm.SchemeGroupVersion.String(), prometheusoperatorv1.SchemeGroupVersion.String(), }) diff --git a/kubernetes-model-generator/openapi/generator/go.mod b/kubernetes-model-generator/openapi/generator/go.mod index cc6d764667d..69914dcd6e0 100644 --- a/kubernetes-model-generator/openapi/generator/go.mod +++ b/kubernetes-model-generator/openapi/generator/go.mod @@ -18,7 +18,7 @@ require ( k8s.io/api v0.31.1 k8s.io/apiextensions-apiserver v0.31.1 k8s.io/apimachinery v0.31.1 - k8s.io/client-go v0.31.1 + k8s.io/client-go v12.0.0+incompatible k8s.io/gengo/v2 v2.0.0-20240911193312-2b36238f13e9 k8s.io/kube-openapi v0.0.0-20240903163716-9e1beecbcb38 k8s.io/metrics v0.30.2 @@ -26,23 +26,28 @@ require ( sigs.k8s.io/kustomize/api v0.17.2 ) -// TODO: WIP while this gets merged or fixed https://github.com/openshift/api/pull/2050 -replace github.com/openshift/api => github.com/marcnuri-forks/api v0.0.0-20240930125604-62d5277244a4 +// Required by some openshift operator dependencies +// Force usage of latest Kuberentes Version +replace ( + github.com/openshift/hive => github.com/openshift/hive v1.1.17-0.20240930213556-2d25383963db // Latest Master + k8s.io/client-go => k8s.io/client-go v0.31.1 + k8s.io/cloud-provider => k8s.io/cloud-provider v0.31.1 + k8s.io/csi-translation-lib => k8s.io/csi-translation-lib v0.31.1 + k8s.io/kube-scheduler => k8s.io/kube-scheduler v0.31.1 + k8s.io/mount-utils => k8s.io/mount-utils v0.31.1 -// TODO: WIP while this gets merged or fixed https://github.com/operator-framework/api/pull/365 -replace github.com/operator-framework/api => github.com/marcnuri-forks/operator-framework-api v0.0.0-20241001140003-cf4aa8da1ffa - -// TODO: WIP while this gets merged or fixed https://github.com/operator-framework/operator-lifecycle-manager/pull/3406 -replace github.com/operator-framework/operator-lifecycle-manager => github.com/marcnuri-forks/operator-lifecycle-manager v0.0.0-20241002090802-7539192fbf96 - -// Required by some openshift operator dependencies, update to latest Kuberentes Version -replace k8s.io/cloud-provider => k8s.io/cloud-provider v0.31.1 - -replace k8s.io/csi-translation-lib => k8s.io/csi-translation-lib v0.31.1 +) -replace k8s.io/kube-scheduler => k8s.io/kube-scheduler v0.31.1 +replace ( + // TODO: WIP while this gets merged or fixed https://github.com/openshift/api/pull/2050 + github.com/openshift/api => github.com/marcnuri-forks/api v0.0.0-20240930125604-62d5277244a4 + // TODO: WIP while this gets merged or fixed https://github.com/operator-framework/api/pull/365 + github.com/operator-framework/api => github.com/marcnuri-forks/operator-framework-api v0.0.0-20241001140003-cf4aa8da1ffa + // TODO: WIP while this gets merged or fixed https://github.com/operator-framework/operator-lifecycle-manager/pull/3406 + github.com/operator-framework/operator-lifecycle-manager => github.com/marcnuri-forks/operator-lifecycle-manager v0.0.0-20241002090802-7539192fbf96 +) -replace k8s.io/mount-utils => k8s.io/mount-utils v0.31.1 +require github.com/openshift/hive/apis v0.0.0-20240930213556-2d25383963db require ( github.com/antlr4-go/antlr/v4 v4.13.0 // indirect @@ -58,9 +63,8 @@ require ( github.com/go-test/deep v1.1.1 // indirect github.com/gogo/protobuf v1.3.2 // indirect github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect - github.com/golang/protobuf v1.5.4 // indirect github.com/google/cel-go v0.20.1 // indirect - github.com/google/gnostic-models v0.6.8 // indirect + github.com/google/gnostic-models v0.6.9-0.20230804172637-c7be7c783f49 // indirect github.com/google/gofuzz v1.2.0 // indirect github.com/h2non/filetype v1.1.3 // indirect github.com/h2non/go-is-svg v0.0.0-20160927212452-35e8c4b0612c // indirect @@ -73,6 +77,7 @@ require ( github.com/modern-go/reflect2 v1.0.2 // indirect github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826 // indirect github.com/onsi/gomega v1.34.2 // indirect + github.com/openshift/custom-resource-status v1.1.3-0.20220503160415-f2fdb4999d87 // indirect github.com/operator-framework/operator-registry v1.47.0 // indirect github.com/perimeterx/marshmallow v1.1.5 // indirect github.com/sirupsen/logrus v1.9.3 // indirect @@ -89,8 +94,8 @@ require ( golang.org/x/text v0.18.0 // indirect golang.org/x/time v0.6.0 // indirect golang.org/x/tools v0.25.0 // indirect - google.golang.org/genproto/googleapis/api v0.0.0-20240604185151-ef581f913117 // indirect - google.golang.org/genproto/googleapis/rpc v0.0.0-20240701130421-f6361c86f094 // indirect + google.golang.org/genproto/googleapis/api v0.0.0-20240711142825-46eb208f015d // indirect + google.golang.org/genproto/googleapis/rpc v0.0.0-20240722135656-d784300faade // indirect google.golang.org/grpc v1.66.0 // indirect google.golang.org/protobuf v1.34.2 // indirect gopkg.in/inf.v0 v0.9.1 // indirect diff --git a/kubernetes-model-generator/openapi/generator/go.sum b/kubernetes-model-generator/openapi/generator/go.sum index 01221b7bc90..5be8001e4a9 100644 --- a/kubernetes-model-generator/openapi/generator/go.sum +++ b/kubernetes-model-generator/openapi/generator/go.sum @@ -1,13 +1,19 @@ +cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw= github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24 h1:bvDV9vkmnHYOMsOr4WLk+Vo07yKIzd94sVoIqshQ4bU= github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24/go.mod h1:8o94RPi1/7XTJvwPpRSzSUedZrtlirdB3r9Z20bi2f8= +github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU= github.com/BurntSushi/toml v1.4.0 h1:kuoIxZQy2WRRk1pttg9asf+WVv6tWQuBNVmK8+nqPr0= github.com/BurntSushi/toml v1.4.0/go.mod h1:ukJfTF/6rtPPRCnwkur4qwRxa8vTRFBF0uk2lLoLwho= github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY= github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU= github.com/Microsoft/hcsshim v0.12.5 h1:bpTInLlDy/nDRWFVcefDZZ1+U8tS+rz3MxjKgu9boo0= github.com/Microsoft/hcsshim v0.12.5/go.mod h1:tIUGego4G1EN5Hb6KC90aDYiUI2dqLSTTOCjVNpOgZ8= +github.com/NYTimes/gziphandler v0.0.0-20170623195520-56545f4a5d46/go.mod h1:3wb06e3pkSAbeQ52E9H9iFoQsEEwGN64994WTCIhntQ= +github.com/PuerkitoBio/purell v1.1.1/go.mod h1:c11w/QuzBsJSee3cPx9rAFu61PvFxuPbtSwDGJws/X0= +github.com/PuerkitoBio/urlesc v0.0.0-20170810143723-de5bf2ad4578/go.mod h1:uGdkoq3SwY9Y+13GIhn11/XLaGBb4BfwItxLd5jeuXE= github.com/antlr4-go/antlr/v4 v4.13.0 h1:lxCg3LAv+EUK6t1i0y1V6/SLeUi0eKEKdhQAlS8TVTI= github.com/antlr4-go/antlr/v4 v4.13.0/go.mod h1:pfChB/xh/Unjila75QW7+VU4TSnWnnk9UTnmpPaOR2g= +github.com/asaskevich/govalidator v0.0.0-20190424111038-f61b66f89f4a/go.mod h1:lB+ZfQJz7igIIfQNfa7Ml4HSf2uFQQRzpGGRXenZAgY= github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so= github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2/go.mod h1:WaHUgvxTVq04UNunO+XhnAqY/wQc+bxr74GqbsZ/Jqw= github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM= @@ -18,8 +24,13 @@ github.com/bshuster-repo/logrus-logstash-hook v1.0.0 h1:e+C0SB5R1pu//O4MQ3f9cFuP github.com/bshuster-repo/logrus-logstash-hook v1.0.0/go.mod h1:zsTqEiSzDgAa/8GZR7E1qaXrhYNDKBYy5/dWPTIflbk= github.com/cenkalti/backoff/v4 v4.3.0 h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK343L8= github.com/cenkalti/backoff/v4 v4.3.0/go.mod h1:Y3VNntkOUPxTVeUxJ/G5vcM//AlwfmyYozVcomhLiZE= +github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU= github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs= github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs= +github.com/chzyer/logex v1.1.10/go.mod h1:+Ywpsq7O8HXn0nuIou7OrIPyXbp3wmkHB+jjWRnGsAI= +github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e/go.mod h1:nSuG5e5PlCu98SY8svDHJxuZscDgtXS6KTTbou5AhLI= +github.com/chzyer/test v0.0.0-20180213035817-a1ea475d72b1/go.mod h1:Q3SI9o4m/ZMnBNeIyt5eFwwo7qiLfzFZmjNmxjkiQlU= +github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw= github.com/containerd/cgroups/v3 v3.0.3 h1:S5ByHZ/h9PMe5IOQoN7E+nMc2UcLEM/V48DGDJ9kip0= github.com/containerd/cgroups/v3 v3.0.3/go.mod h1:8HBe7V3aWGLFPd/k03swSIsGjZhHI2WzJmticMgVuz0= github.com/containerd/containerd v1.7.21 h1:USGXRK1eOC/SX0L195YgxTHb0a00anxajOzgfN0qrCA= @@ -52,6 +63,7 @@ github.com/coreos/go-systemd v0.0.0-20191104093116-d3cd4ed1dbcf h1:iW4rZ826su+pq github.com/coreos/go-systemd/v22 v22.5.0 h1:RrqgGjYQKalulkV8NGVIfkXQf6YYmOyiJKk8iXXhfZs= github.com/coreos/go-systemd/v22 v22.5.0/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc= github.com/cpuguy83/go-md2man/v2 v2.0.4/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o= +github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E= github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM= @@ -78,26 +90,51 @@ github.com/docker/go-metrics v0.0.1 h1:AgB/0SvBxihN0X8OR4SjsblXkbMvalQ8cjmtKQ2rQ github.com/docker/go-metrics v0.0.1/go.mod h1:cG1hvH2utMXtqgqqYE9plW6lDxS3/5ayHzueweSI3Vw= github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4= github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk= +github.com/docopt/docopt-go v0.0.0-20180111231733-ee0de3bc6815/go.mod h1:WwZ+bS3ebgob9U8Nd0kOddGdZWjyMGR8Wziv+TBNwSE= +github.com/elazarl/goproxy v0.0.0-20180725130230-947c36da3153/go.mod h1:/Zj4wYkgs4iZTTu3o/KG3Itv/qCCa8VVMlb3i9OVuzc= +github.com/emicklei/go-restful v0.0.0-20170410110728-ff4f55a20633/go.mod h1:otzb+WCGbkyDHkqmQmT5YD2WR4BBwUdeQoFo8l/7tVs= +github.com/emicklei/go-restful v2.9.5+incompatible/go.mod h1:otzb+WCGbkyDHkqmQmT5YD2WR4BBwUdeQoFo8l/7tVs= +github.com/emicklei/go-restful v2.15.0+incompatible/go.mod h1:otzb+WCGbkyDHkqmQmT5YD2WR4BBwUdeQoFo8l/7tVs= github.com/emicklei/go-restful/v3 v3.12.1 h1:PJMDIM/ak7btuL8Ex0iYET9hxM3CI2sjZtzpL63nKAU= github.com/emicklei/go-restful/v3 v3.12.1/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc= +github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4= +github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c= +github.com/evanphx/json-patch v4.12.0+incompatible/go.mod h1:50XU6AFN0ol/bzJsmQLiYLvXMP4fmwYFNcr97nuDLSk= github.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg= github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U= +github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMoQvtojpjFo= +github.com/fsnotify/fsnotify v1.4.9/go.mod h1:znqG4EE+3YCdAaPaxE2ZRY/06pZUdp0tY4IgpuI1SZQ= github.com/fxamacker/cbor/v2 v2.7.0 h1:iM5WgngdRBanHcxugY4JySA0nk1wZorNOpTgCMedv5E= github.com/fxamacker/cbor/v2 v2.7.0/go.mod h1:pxXPTn3joSm21Gbwsv0w9OSA2y1HFR9qXEeXQVeNoDQ= +github.com/getkin/kin-openapi v0.76.0/go.mod h1:660oXbgy5JFMKreazJaQTw7o+X00qeSyhcnluiMv+Xg= github.com/getkin/kin-openapi v0.125.0 h1:jyQCyf2qXS1qvs2U00xQzkGCqYPhEhZDmSmVt65fXno= github.com/getkin/kin-openapi v0.125.0/go.mod h1:wb1aSZA/iWmorQP9KTAS/phLj/t17B5jT7+fS8ed9NM= +github.com/ghodss/yaml v1.0.0/go.mod h1:4dBDuWmgqj2HViK6kFavaiC9ZROes6MMH2rRYeMEF04= github.com/go-errors/errors v1.4.2 h1:J6MZopCL4uSllY1OfXM374weqZFFItUbrImctkmUxIA= github.com/go-errors/errors v1.4.2/go.mod h1:sIVyrIiJhuEF+Pj9Ebtd6P/rEYROXFi3BopGUQ5a5Og= +github.com/go-logr/logr v0.1.0/go.mod h1:ixOQHD9gLJUVQQ2ZOR7zLEifBX6tGkNJF4QyIY7sIas= +github.com/go-logr/logr v0.2.0/go.mod h1:z6/tIYblkpsD+a4lm/fGIIU9mZ+XfAiaFtq7xTgseGU= +github.com/go-logr/logr v1.2.0/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A= +github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A= github.com/go-logr/logr v1.4.2 h1:6pFjapn8bFcIbiKo3XT4j/BhANplGihG6tvd+8rYgrY= github.com/go-logr/logr v1.4.2/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY= github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag= github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE= +github.com/go-openapi/jsonpointer v0.19.3/go.mod h1:Pl9vOtqEWErmShwVjC8pYs9cog34VGT37dQOVbmoatg= +github.com/go-openapi/jsonpointer v0.19.5/go.mod h1:Pl9vOtqEWErmShwVjC8pYs9cog34VGT37dQOVbmoatg= github.com/go-openapi/jsonpointer v0.21.0 h1:YgdVicSA9vH5RiHs9TZW5oyafXZFc6+2Vc1rr/O9oNQ= github.com/go-openapi/jsonpointer v0.21.0/go.mod h1:IUyH9l/+uyhIYQ/PXVA41Rexl+kOkAPDdXEYns6fzUY= +github.com/go-openapi/jsonreference v0.19.3/go.mod h1:rjx6GuL8TTa9VaixXglHmQmIL98+wF9xc8zWvFonSJ8= +github.com/go-openapi/jsonreference v0.19.5/go.mod h1:RdybgQwPxbL4UEjuAruzK1x3nE69AqPYEJeo/TWfEeg= +github.com/go-openapi/jsonreference v0.19.6/go.mod h1:diGHMEHg2IqXZGKxqyvWdfWU/aim5Dprw5bqpKkTvns= github.com/go-openapi/jsonreference v0.21.0 h1:Rs+Y7hSXT83Jacb7kFyjn4ijOuVGSvOdF2+tg1TRrwQ= github.com/go-openapi/jsonreference v0.21.0/go.mod h1:LmZmgsrTkVg9LG4EaHeY8cBDslNPMo06cago5JNLkm4= +github.com/go-openapi/swag v0.19.5/go.mod h1:POnQmlKehdgb5mhVOsnJFsivZCEZ/vjK9gh66Z9tfKk= +github.com/go-openapi/swag v0.19.14/go.mod h1:QYRuS/SOXUCsnplDa677K7+DxSOj6IPNl/eQntq43wQ= +github.com/go-openapi/swag v0.21.1/go.mod h1:QYRuS/SOXUCsnplDa677K7+DxSOj6IPNl/eQntq43wQ= github.com/go-openapi/swag v0.23.0 h1:vsEVJDUo2hPJ2tu0/Xc+4noaxyEffXNIs3cOULZ+GrE= github.com/go-openapi/swag v0.23.0/go.mod h1:esZ8ITTYEsH1V2trKHjAN8Ai7xHb8RV+YSZ577vPjgQ= +github.com/go-task/slim-sprig v0.0.0-20210107165309-348f09dbbbc0/go.mod h1:fyg7847qk6SyHyPtNmDHnmrv/HOrqktSC+C9fM+CJOE= github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572 h1:tfuBGBXKqDEevZMzYi5KSi8KkcZtzBcTgAUUtapy0OI= github.com/go-task/slim-sprig/v3 v3.0.0 h1:sUs3vkvUymDpBKi3qH1YSqBQk9+9D/8M2mN1vB6EwHI= github.com/go-task/slim-sprig/v3 v3.0.0/go.mod h1:W848ghGpv3Qj3dhTPRyJypKRiqCdHZiAzKg9hl15HA8= @@ -107,28 +144,53 @@ github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q= github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q= github.com/golang-migrate/migrate/v4 v4.17.1 h1:4zQ6iqL6t6AiItphxJctQb3cFqWiSpMnX7wLTPnnYO4= github.com/golang-migrate/migrate/v4 v4.17.1/go.mod h1:m8hinFyWBn0SA4QKHuKh175Pm9wjmxj3S2Mia7dbXzM= +github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q= github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da h1:oI5xCqsCo564l8iNU+DwB5epxmsaqB+rhGL0m5jtYqE= github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc= +github.com/golang/mock v1.1.1/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A= +github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U= +github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U= +github.com/golang/protobuf v1.4.0-rc.1/go.mod h1:ceaxUfeHdC40wWswd/P6IGgMaK3YpKi5j83Wpe3EHw8= +github.com/golang/protobuf v1.4.0-rc.1.0.20200221234624-67d41d38c208/go.mod h1:xKAWHe0F5eneWXFV3EuXVDTCmh+JuBKY0li0aMyXATA= +github.com/golang/protobuf v1.4.0-rc.2/go.mod h1:LlEzMj4AhA7rCAGe4KMBDvJI+AwstrUpVNzEA03Pprs= +github.com/golang/protobuf v1.4.0-rc.4.0.20200313231945-b860323f09d0/go.mod h1:WU3c8KckQ9AFe+yFwt9sWVRKCVIyN9cPHBJSNnbL67w= +github.com/golang/protobuf v1.4.0/go.mod h1:jodUvKwWbYaEsadDk5Fwe5c77LiNKVO9IDvqG2KuDX0= +github.com/golang/protobuf v1.4.1/go.mod h1:U8fpvMrcmy5pZrNK1lt4xCsGvpyWQ/VVv6QDs8UjoX8= +github.com/golang/protobuf v1.4.2/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI= +github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk= +github.com/golang/protobuf v1.5.2/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY= github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek= github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps= github.com/google/cel-go v0.20.1 h1:nDx9r8S3L4pE61eDdt8igGj8rf5kjYR3ILxWIpWNi84= github.com/google/cel-go v0.20.1/go.mod h1:kWcIzTsPX0zmQ+H3TirHstLLf9ep5QTsZBN9u4dOYLg= -github.com/google/gnostic-models v0.6.8 h1:yo/ABAfM5IMRsS1VnXjTBvUb61tFIHozhlYvRgGre9I= -github.com/google/gnostic-models v0.6.8/go.mod h1:5n7qKqH0f5wFt+aWF8CW6pZLLNOfYuF5OpfBSENuI8U= +github.com/google/gnostic-models v0.6.9-0.20230804172637-c7be7c783f49 h1:0VpGH+cDhbDtdcweoyCVsF3fhN8kejK6rFe/2FFX2nU= +github.com/google/gnostic-models v0.6.9-0.20230804172637-c7be7c783f49/go.mod h1:BkkQ4L1KS1xMt2aWSPStnn55ChGC0DPOn2FQYj+f25M= +github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M= +github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU= +github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU= +github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= +github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI= github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg= +github.com/google/gofuzz v1.1.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg= github.com/google/gofuzz v1.2.0 h1:xRy4A+RhZaiKjJ1bPfwQ8sedCA+YS2YcCHW6ec7JMi0= github.com/google/gofuzz v1.2.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg= +github.com/google/pprof v0.0.0-20210407192527-94a9f03dee38/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE= github.com/google/pprof v0.0.0-20240827171923-fa2c70bbbfe5 h1:5iH8iuqE5apketRbSFBy+X1V0o+l+8NF1avt4HWl7cA= github.com/google/pprof v0.0.0-20240827171923-fa2c70bbbfe5/go.mod h1:vavhavw2zAxS5dIdcRluK6cSGGPlZynqzFM8NdvU144= +github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0= github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= +github.com/googleapis/gnostic v0.5.1/go.mod h1:6U4PtQXGIEt/Z3h5MAT7FNofLnw9vXk2cUuW7uA/OeU= +github.com/googleapis/gnostic v0.5.5/go.mod h1:7+EbHbldMins07ALC74bsA81Ovc97DwqyJO1AENw9kA= github.com/gorilla/handlers v1.5.2 h1:cLTUSsNkgcwhgRqvCNmdbRWG0A3N4F+M2nWKdScwyEE= github.com/gorilla/handlers v1.5.2/go.mod h1:dX+xVpaxdSw+q0Qek8SSsl3dfMk3jNddUkMzo0GtH0w= +github.com/gorilla/mux v1.8.0/go.mod h1:DVbg23sWSpFRCP0SfiEN6jmj59UnW/n46BH5rLB71So= github.com/gorilla/mux v1.8.1 h1:TuBL49tXwgrFYWhqrNgrUNEY92u81SPhu7sTdzQEiWY= github.com/gorilla/mux v1.8.1/go.mod h1:AKf9I4AEqPTmMytcMc0KkNouC66V3BtZ4qD5fmWSiMQ= +github.com/gorilla/websocket v1.4.2/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE= github.com/grpc-ecosystem/grpc-gateway v1.16.0 h1:gmcG1KaJ57LophUzW0Hy8NmPhnMZb4M0+kPpLofRdBo= github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0 h1:bkypFPDjIYGfCYD5mRBvpqxfYX1YCS1PXdKYWi8FsN0= github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0/go.mod h1:P+Lt/0by1T8bfcF3z737NnSbmxQAppXMRziHUxPOC8k= @@ -140,6 +202,8 @@ github.com/hashicorp/golang-lru/arc/v2 v2.0.5 h1:l2zaLDubNhW4XO3LnliVj0GXO3+/CGN github.com/hashicorp/golang-lru/arc/v2 v2.0.5/go.mod h1:ny6zBSQZi2JxIeYcv7kt2sH2PXJtirBN7RDhRpxPkxU= github.com/hashicorp/golang-lru/v2 v2.0.5 h1:wW7h1TG88eUIJ2i69gaE3uNVtEPIagzhGvHgwfx2Vm4= github.com/hashicorp/golang-lru/v2 v2.0.5/go.mod h1:QeFd9opnmA6QUJc5vARoKUSoFhyfM2/ZepoAG6RGpeM= +github.com/hpcloud/tail v1.0.0/go.mod h1:ab1qPbhIpdTxEkNHXyeSf5vhxWSCs/tWer42PpOxQnU= +github.com/ianlancetaylor/demangle v0.0.0-20200824232613-28f6c0f3b639/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc= github.com/imdario/mergo v0.3.16 h1:wwQJbIsHYGMUyLSPrEq1CT16AhnhNJQ51+4fdHUnCl4= github.com/imdario/mergo v0.3.16/go.mod h1:WBLT9ZmE3lPoWsEzCh9LPo3TiwVN+ZKEjmz+hD27ysY= github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8= @@ -148,16 +212,24 @@ github.com/invopop/yaml v0.2.0 h1:7zky/qH+O0DwAyoobXUqvVBwgBFRxKoQ/3FjcVpjTMY= github.com/invopop/yaml v0.2.0/go.mod h1:2XuRLgs/ouIrW3XNzuNj7J3Nvu/Dig5MXvbCEdiBN3Q= github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY= github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y= +github.com/json-iterator/go v1.1.6/go.mod h1:+SdeFBvtyEkXs7REEP0seUULqWtbJapLOCVDaaPEHmU= github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM= github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo= github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8= github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck= github.com/klauspost/compress v1.17.9 h1:6KIumPrER1LHsvBVuDa0r5xaG0Es51mhhB9BQB2qeMA= github.com/klauspost/compress v1.17.9/go.mod h1:Di0epgTjJY877eYKx5yC51cX2A2Vl2ibi7bDH9ttBbw= +github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo= +github.com/kr/pretty v0.2.0/go.mod h1:ipq/a2n7PKx3OHsz4KJII5eveXtPO4qwEXGdVfWzfnI= github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE= github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk= +github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ= +github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI= github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY= github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE= +github.com/mailru/easyjson v0.0.0-20190614124828-94de47d64c63/go.mod h1:C1wdFJiN94OJF2b5HbByQZoLdCWB1Yqtg26g4irojpc= +github.com/mailru/easyjson v0.0.0-20190626092158-b2ccc519800e/go.mod h1:C1wdFJiN94OJF2b5HbByQZoLdCWB1Yqtg26g4irojpc= +github.com/mailru/easyjson v0.7.6/go.mod h1:xzfreul335JAWq5oZzymOObrkdz5UnU4kGfJJLY9Nlc= github.com/mailru/easyjson v0.7.7 h1:UGYAvKxe3sBsEDzO8ZeWOSlIQfWFlxbzLZe7hwFURr0= github.com/mailru/easyjson v0.7.7/go.mod h1:xzfreul335JAWq5oZzymOObrkdz5UnU4kGfJJLY9Nlc= github.com/marcnuri-forks/api v0.0.0-20240930125604-62d5277244a4 h1:OVm/tM0Io+jkCLhrYvDL4B6zJb9ueRBX36zt7q9KFOU= @@ -168,8 +240,10 @@ github.com/marcnuri-forks/operator-lifecycle-manager v0.0.0-20241002090802-75391 github.com/marcnuri-forks/operator-lifecycle-manager v0.0.0-20241002090802-7539192fbf96/go.mod h1:ToPwavGeU72yaPYn18qaDo6anPlJvFiAkgXhS39PgPc= github.com/mattn/go-sqlite3 v1.14.23 h1:gbShiuAP1W5j9UOksQ06aiiqPMxYecovVGwmTxWtuw0= github.com/mattn/go-sqlite3 v1.14.23/go.mod h1:Uh1q+B4BYcTPb+yiD3kU8Ct7aC0hY9fxUwlHK0RXw+Y= +github.com/mitchellh/mapstructure v1.1.2/go.mod h1:FVVH3fgwuzCH5S8UJGiWEs2h04kUh9fWfEaFds41c1Y= github.com/moby/locker v1.0.1 h1:fOXqR41zeveg4fFODix+1Ch4mj/gT0NE1XJbp/epuBg= github.com/moby/locker v1.0.1/go.mod h1:S7SDdo5zpBK84bzzVlKr2V0hz+7x9hWbYC/kq7oQppc= +github.com/moby/spdystream v0.2.0/go.mod h1:f7i0iNDQJ059oMTcWxx8MA/zKFIuD/lY+0GqbN2Wy8c= github.com/moby/sys/mountinfo v0.7.2 h1:1shs6aH5s4o5H2zQLn796ADW1wMrIwHsyJ2v9KouLrg= github.com/moby/sys/mountinfo v0.7.2/go.mod h1:1YOa8w8Ih7uW0wALDUgT1dTTSBrZ+HiBLGws92L2RU4= github.com/moby/sys/sequential v0.5.0 h1:OPvI35Lzn9K04PBbCLW0g4LcFAJgHsvXsRyewg5lXtc= @@ -181,14 +255,32 @@ github.com/moby/sys/userns v0.1.0/go.mod h1:IHUYgu/kao6N8YZlp9Cf444ySSvCmDlmzUcY github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q= github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg= github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q= +github.com/modern-go/reflect2 v1.0.1/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0= github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M= github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk= github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826 h1:RWengNIwukTxcDr9M+97sNutRR1RKhG96O6jWumTTnw= github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826/go.mod h1:TaXosZuwdSHYgviHp1DAtfrULt5eUgsSMsZf+YrPgl8= +github.com/munnerz/goautoneg v0.0.0-20120707110453-a547fc61f48d/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ= github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA= github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ= +github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f/go.mod h1:ZdcZmHo+o7JKHSa8/e818NopupXU1YMK5fe1lsApnBw= +github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e/go.mod h1:zD1mROLANZcx1PVRCS0qkT7pwLkGfwJo4zjcN/Tysno= +github.com/nxadm/tail v1.4.4/go.mod h1:kenIhsEOeOJmVchQTgglprH7qJGnHDVpk1VPCcaMI8A= +github.com/nxadm/tail v1.4.8/go.mod h1:+ncqLTQzXmGhMZNUePPaPqPvBxHAIsmXswZKocGu+AU= +github.com/onsi/ginkgo v0.0.0-20170829012221-11459a886d9c/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE= +github.com/onsi/ginkgo v1.6.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE= +github.com/onsi/ginkgo v1.12.1/go.mod h1:zj2OWP4+oCPe1qIXoGWkgMRwljMUYCdkwsT2108oapk= +github.com/onsi/ginkgo v1.14.0/go.mod h1:iSB4RoI2tjJc9BBv4NKIKWKya62Rps+oPG/Lv9klQyY= +github.com/onsi/ginkgo v1.16.4 h1:29JGrr5oVBm5ulCWet69zQkzWipVXIol6ygQUe/EzNc= +github.com/onsi/ginkgo v1.16.4/go.mod h1:dX+/inL/fNMqNlz0e9LfyB9TswhZpCVdJM/Z6Vvnwo0= +github.com/onsi/ginkgo/v2 v2.0.0/go.mod h1:vw5CSIxN1JObi/U8gcbwft7ZxR2dgaR70JSE3/PpL4c= github.com/onsi/ginkgo/v2 v2.20.2 h1:7NVCeyIWROIAheY21RLS+3j2bb52W0W82tkberYytp4= github.com/onsi/ginkgo/v2 v2.20.2/go.mod h1:K9gyxPIlb+aIvnZ8bd9Ak+YP18w3APlR+5coaZoE2ag= +github.com/onsi/gomega v0.0.0-20170829124025-dcabb60a477c/go.mod h1:C1qb7wdrVGGVU+Z6iS04AVkA3Q65CEZX59MT0QO5uiA= +github.com/onsi/gomega v1.7.1/go.mod h1:XdKZgCCFLUoM/7CFJVPcG8C1xQ1AJ0vpAezJrB7JYyY= +github.com/onsi/gomega v1.10.1/go.mod h1:iN09h71vgCQne3DLsj+A5owkum+a2tYe+TOCB1ybHNo= +github.com/onsi/gomega v1.17.0/go.mod h1:HnhC7FXeEQY45zxNK3PPoIUhzk/80Xly9PcubAlGdZY= +github.com/onsi/gomega v1.18.1/go.mod h1:0q+aL8jAiMXy9hbwj2mr5GziHiwhAIQpFmmtT5hitRs= github.com/onsi/gomega v1.34.2 h1:pNCwDkzrsv7MS9kpaQvVb1aVLahQXyJ/Tv5oAZMI3i8= github.com/onsi/gomega v1.34.2/go.mod h1:v1xfxRgk0KIsG+QOdm7p8UosrOzPYRo60fd3B/1Dukc= github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U= @@ -203,6 +295,10 @@ github.com/openshift/cluster-network-operator v0.0.0-20240912134426-a3188633549d github.com/openshift/cluster-network-operator v0.0.0-20240912134426-a3188633549d/go.mod h1:qeN8u3CfzClFoykTdlvn0kKngBuVmb3VvWHA51UxiOI= github.com/openshift/cluster-node-tuning-operator v0.0.0-20241001165112-1685a8fc1376 h1:XOj/kwz+iOCasKM2Y+cDSbb3bRaaIFcJxXb/qYZhKhU= github.com/openshift/cluster-node-tuning-operator v0.0.0-20241001165112-1685a8fc1376/go.mod h1:rXqYaoIJhAbETKVgBxsz7bBstuhPgA3MPvWYMUFMOF8= +github.com/openshift/custom-resource-status v1.1.3-0.20220503160415-f2fdb4999d87 h1:cHyxR+Y8rAMT6m1jQCaYGRwikqahI0OjjUDhFNf3ySQ= +github.com/openshift/custom-resource-status v1.1.3-0.20220503160415-f2fdb4999d87/go.mod h1:DB/Mf2oTeiAmVVX1gN+NEqweonAPY0TKUwADizj8+ZA= +github.com/openshift/hive/apis v0.0.0-20240930213556-2d25383963db h1:81l8GpANADhpr6xuHXi/tfhCOusAJiMBrL35dc3lhrs= +github.com/openshift/hive/apis v0.0.0-20240930213556-2d25383963db/go.mod h1:27UntBsyKUZ9+xMcX6uXLhXsd9U8p/FI0mmIlH7SRG0= github.com/operator-framework/operator-registry v1.47.0 h1:Imr7X/W6FmXczwpIOXfnX8d6Snr1dzwWxkMG+lLAfhg= github.com/operator-framework/operator-registry v1.47.0/go.mod h1:CJ3KcP8uRxtC8l9caM1RsV7r7jYlKAd452tcxcgXyTQ= github.com/otiai10/copy v1.14.0 h1:dCI/t1iTdYGtkvCuBG2BgR6KZa83PTclw4U5n2wAllU= @@ -220,6 +316,7 @@ github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.77.1 h github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.77.1/go.mod h1:D0KY8md81DQKdaR/cXwnhoWB3MYYyc/UjvqE8GFkIvA= github.com/prometheus/client_golang v1.20.4 h1:Tgh3Yr67PaOv/uTqloMsCEdeuFTatm5zIq5+qNN23vI= github.com/prometheus/client_golang v1.20.4/go.mod h1:PIEt8X02hGcP8JWbeHyeZ53Y/jReSnHgO035n//V5WE= +github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA= github.com/prometheus/client_model v0.6.1 h1:ZKSh/rekM+n3CeS952MLRAdFwIKqeY8b62p8ais2e9E= github.com/prometheus/client_model v0.6.1/go.mod h1:OrxVMOVHjw3lKMa8+x6HeMGkHMQyHDk9E3jmP2AmGiY= github.com/prometheus/common v0.59.1 h1:LXb1quJHWm1P6wq/U824uxYi4Sg0oGvNeUm1z5dJoX0= @@ -237,17 +334,21 @@ github.com/rogpeppe/go-internal v1.12.0/go.mod h1:E+RYuTGaKKdloAfM02xzb0FW3Paa99 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM= github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ= github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ= +github.com/spf13/afero v1.2.2/go.mod h1:9ZxEEn6pIJ8Rxe320qSDBk6AsU0r9pR7Q4OcevTdifk= github.com/spf13/cobra v1.8.1 h1:e5/vxKd/rZsfSJMUX1agtjeTDf+qv1/JdBF8gg5k9ZM= github.com/spf13/cobra v1.8.1/go.mod h1:wHxEcudfqmLYa8iTfL+OuZPbBZkmvliBWKIezN3kD9Y= github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= github.com/spf13/pflag v1.0.6-0.20210604193023-d5e0c0615ace h1:9PNP1jnUjRhfmGMlkXHjYPishpcw4jpSt/V/xYY3FMA= github.com/spf13/pflag v1.0.6-0.20210604193023-d5e0c0615ace/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= +github.com/stoewer/go-strcase v1.2.0/go.mod h1:IBiWB2sKIp3wVVQ3Y035++gc+knqhUQag1KpM8ahLw8= github.com/stoewer/go-strcase v1.3.0 h1:g0eASXYtp+yvN9fK8sH94oCIk0fau9uV1/ZdJ0AVEzs= github.com/stoewer/go-strcase v1.3.0/go.mod h1:fAH5hQ5pehh+j3nZfvwdk2RgEgQjAoM8wodgtPmh1xo= github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw= github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo= github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI= +github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA= +github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU= @@ -262,6 +363,9 @@ github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM= github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg= github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= +github.com/yuin/goldmark v1.3.5/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k= +github.com/yuin/goldmark v1.4.0/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k= +github.com/yuin/goldmark v1.4.1/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k= go.etcd.io/bbolt v1.3.11 h1:yGEzV1wPz2yVCLsD8ZAiGHhHVlczyC9d1rP43/VCRJ0= go.etcd.io/bbolt v1.3.11/go.mod h1:dksAq7YMXoljX0xu6VF5DMZGbhYYoLUalEiSySYAS4I= go.opencensus.io v0.24.0 h1:y73uSU6J157QMP2kn2r30vwW1A2W2WFwSCGnAVxeaD0= @@ -305,91 +409,197 @@ golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8U golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= golang.org/x/crypto v0.27.0 h1:GXm2NjJrPaiv/h1tb2UH8QfgC/hOf/+z0p6PT8o1w7A= golang.org/x/crypto v0.27.0/go.mod h1:1Xngt8kV6Dvbssa53Ziq6Eqn0HqbZi5Z6R0ZpwQzt70= +golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20240909161429-701f63a606c0 h1:e66Fs6Z+fZTbFBAxKfP3PALWBtpfqks2bwGcexMxgtk= golang.org/x/exp v0.0.0-20240909161429-701f63a606c0/go.mod h1:2TbTHSBQa924w8M6Xs1QcRcFwyucIwBGpK1p2f1YFFY= +golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE= +golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU= +golang.org/x/lint v0.0.0-20190313153728-d0100b6bd8b3/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc= golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= +golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= +golang.org/x/mod v0.5.1/go.mod h1:5OXOZSfqPIIbmVBIIKWRFfZjPR0E5r58TLhUjH0a2Ro= golang.org/x/mod v0.21.0 h1:vvrHzRwRfVKSiLrG+d4FMl/Qi4ukBCE6kZlTUkDYRT0= golang.org/x/mod v0.21.0/go.mod h1:6SkKJ3Xj0I0BrPOZoBy3bdMptDDU9oJrpohJ3eWZ1fY= +golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= +golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= +golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= +golang.org/x/net v0.0.0-20190213061140-3a22650c66bd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= +golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20190827160401-ba9fcec4b297/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20200520004742-59133d7f0dd7/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A= golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU= +golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4/go.mod h1:p54w0d4576C0XHj96bSt6lcn1PtDYWL6XObtHCRCNQM= +golang.org/x/net v0.0.0-20210421230115-4e50805a0758/go.mod h1:72T/g9IO56b78aLF+1Kcs5dz7/ng1VjMUvfKvpfy+jM= +golang.org/x/net v0.0.0-20210428140749-89ef3d95e781/go.mod h1:OJAsFXCWl8Ukc7SiCT/9KSuxbyM7479/AVlXFRxuMCk= +golang.org/x/net v0.0.0-20210805182204-aaa1db679c0d/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y= +golang.org/x/net v0.0.0-20211015210444-4f30a5c0130f/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y= +golang.org/x/net v0.0.0-20211209124913-491a49abca63/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y= +golang.org/x/net v0.0.0-20220127200216-cd36cc0744dd/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk= golang.org/x/net v0.29.0 h1:5ORfpBpCs4HzDYoodCDBbwHzdR5UrLBZ3sOnUJmFoHo= golang.org/x/net v0.29.0/go.mod h1:gLkgy8jTGERgjzMic6DS9+SP0ajcu6Xu3Orq/SpETg0= +golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.23.0 h1:PbgcYx2W7i4LvjJWEbf0ngHV6qJYr86PkAV3bXdLEbs= golang.org/x/oauth2 v0.23.0/go.mod h1:XYTD2NtWslqkgxebSiOHnXEap4TF09sJSc7H1sXbhtI= +golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.8.0 h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ= golang.org/x/sync v0.8.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= +golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= +golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190904154756-749cb33beabd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20191005200804-aed5e4c7ecf9/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20191120155948-bd437916bb0e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20191204072324-ce4227a45e2e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200519105757-fe76b779f299/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20210112080510-489259a85091/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20210330210617-4fbd30eecc44/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20210420072515-93ed5bcd2bfe/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20210510120138-977fb7262007/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20210809222454-d867a43fc93e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20210831042530-f4d43177bf5e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20211019181941-9d821ace8654/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20211216021012-1d35b9e2eb4e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20220209214540-3681064d5158/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.25.0 h1:r+8e+loiHxRqhXVl6ML1nO3l1+oFoWbnlu2Ehimmi34= golang.org/x/sys v0.25.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= +golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.24.0 h1:Mh5cbb+Zk2hqqXNO7S1iTjEphVL+jb8ZWaqh/g+JWkM= golang.org/x/term v0.24.0/go.mod h1:lOBK/LVxemqiMij05LGJ0tzNr8xlmwBRJ81PX6wVLH8= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= +golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk= golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= +golang.org/x/text v0.3.5/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= +golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= +golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= golang.org/x/text v0.18.0 h1:XvMDiNzPAl0jr17s6W9lcaIhGUfUORdGCNsuLmPG224= golang.org/x/text v0.18.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY= golang.org/x/time v0.6.0 h1:eTDhh4ZXt5Qf0augr54TN6suAUudPcawVZeIAPU7D4U= golang.org/x/time v0.6.0/go.mod h1:3BpzKBy/shNhVucY/MWOyx10tF3SFh9QdLuxbVysPQM= golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= +golang.org/x/tools v0.0.0-20190114222345-bf090417da8b/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= +golang.org/x/tools v0.0.0-20190226205152-f727befe758c/go.mod h1:9Yl7xja0Znq3iFh3HoIrodX9oNMXvdceNzlUR8zjMvY= +golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs= +golang.org/x/tools v0.0.0-20190524140312-2c0ae7006135/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q= golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20200505023115-26f46d2f7ef8/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE= golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE= +golang.org/x/tools v0.0.0-20201224043029-2b0845dc783e/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA= golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA= +golang.org/x/tools v0.1.5/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk= +golang.org/x/tools v0.1.6-0.20210820212750-d4cc65f0b2ff/go.mod h1:YD9qOF0M9xpSpdWTBbzEl5e/RnCefISl8E5Noe10jFM= +golang.org/x/tools v0.1.9/go.mod h1:nABZi5QlRsZVlzPpHl034qft6wpY4eDcsTt5AaioBiU= golang.org/x/tools v0.25.0 h1:oFU9pkj/iJgs+0DT+VMHrx+oBKs/LJMV+Uvg78sl+fE= golang.org/x/tools v0.25.0/go.mod h1:/vtpO8WL1N9cQC3FN5zPqb//fRXskFHbLKk4OW1Q7rg= golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM= +google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4= +google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc= +google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc= +google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013/go.mod h1:NbSheEEYHJ7i3ixzK3sjbqSGDJWnxyFXZblF3eUsNvo= +google.golang.org/genproto v0.0.0-20201019141844-1ed22bb0c154/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= google.golang.org/genproto v0.0.0-20240311173647-c811ad7063a7 h1:ImUcDPHjTrAqNhlOkSocDLfG9rrNHH7w7uoKWPaWZ8s= google.golang.org/genproto v0.0.0-20240311173647-c811ad7063a7/go.mod h1:/3XmxOjePkvmKrHuBy4zNFw7IzxJXtAgdpXi8Ll990U= -google.golang.org/genproto/googleapis/api v0.0.0-20240604185151-ef581f913117 h1:+rdxYoE3E5htTEWIe15GlN6IfvbURM//Jt0mmkmm6ZU= -google.golang.org/genproto/googleapis/api v0.0.0-20240604185151-ef581f913117/go.mod h1:OimBR/bc1wPO9iV4NC2bpyjy3VnAwZh5EBPQdtaE5oo= -google.golang.org/genproto/googleapis/rpc v0.0.0-20240701130421-f6361c86f094 h1:BwIjyKYGsK9dMCBOorzRri8MQwmi7mT9rGHsCEinZkA= -google.golang.org/genproto/googleapis/rpc v0.0.0-20240701130421-f6361c86f094/go.mod h1:Ue6ibwXGpU+dqIcODieyLOcgj7z8+IcskoNIgZxtrFY= +google.golang.org/genproto/googleapis/api v0.0.0-20240711142825-46eb208f015d h1:kHjw/5UfflP/L5EbledDrcG4C2597RtymmGRZvHiCuY= +google.golang.org/genproto/googleapis/api v0.0.0-20240711142825-46eb208f015d/go.mod h1:mw8MG/Qz5wfgYr6VqVCiZcHe/GJEfI+oGGDCohaVgB0= +google.golang.org/genproto/googleapis/rpc v0.0.0-20240722135656-d784300faade h1:oCRSWfwGXQsqlVdErcyTt4A93Y8fo0/9D4b1gnI++qo= +google.golang.org/genproto/googleapis/rpc v0.0.0-20240722135656-d784300faade/go.mod h1:Ue6ibwXGpU+dqIcODieyLOcgj7z8+IcskoNIgZxtrFY= +google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c= +google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg= +google.golang.org/grpc v1.27.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk= google.golang.org/grpc v1.66.0 h1:DibZuoBznOxbDQxRINckZcUvnCEvrW9pcWIE2yF9r1c= google.golang.org/grpc v1.66.0/go.mod h1:s3/l6xSSCURdVfAnL+TqCNMyTDAGN6+lZeVxnZR128Y= +google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8= +google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0= +google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM= +google.golang.org/protobuf v1.20.1-0.20200309200217-e05f789c0967/go.mod h1:A+miEFZTKqfCUM6K7xSMQL9OKL/b6hQv+e19PK+JZNE= +google.golang.org/protobuf v1.21.0/go.mod h1:47Nbq4nVaFHyn7ilMalzfO3qCViNmqZ2kzikPIcrTAo= +google.golang.org/protobuf v1.22.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU= +google.golang.org/protobuf v1.23.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU= +google.golang.org/protobuf v1.23.1-0.20200526195155-81db48ad09cc/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU= +google.golang.org/protobuf v1.24.0/go.mod h1:r/3tXBNzIEhYS9I1OUVjXDlt8tc493IdKGjtUeSXeh4= +google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw= +google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc= +google.golang.org/protobuf v1.27.1/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc= google.golang.org/protobuf v1.34.2 h1:6xV6lTsCfpGD21XK49h7MhtcApnLqkfYgPcdHftf6hg= google.golang.org/protobuf v1.34.2/go.mod h1:qYOHts0dSfpeUzUFpOMr/WGzszTmLH+DiWniOlNbLDw= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= +gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= +gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= +gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk= gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q= +gopkg.in/fsnotify.v1 v1.4.7/go.mod h1:Tz8NjZHkW78fSQdbUxIjBTcgA1z1m8ZHf0WmKUhAMys= gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc= gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw= +gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw= +gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= +gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= +gopkg.in/yaml.v2 v2.2.4/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= +gopkg.in/yaml.v2 v2.3.0/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY= gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ= gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= +gopkg.in/yaml.v3 v3.0.0-20200615113413-eeeca48fe776/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= +gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= gopkg.in/yaml.v3 v3.0.0/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA= gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= +honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4= +honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4= +k8s.io/api v0.23.3/go.mod h1:w258XdGyvCmnBj/vGzQMj6kzdufJZVUwEM1U2fRJwSQ= k8s.io/api v0.31.1 h1:Xe1hX/fPW3PXYYv8BlozYqw63ytA92snr96zMW9gWTU= k8s.io/api v0.31.1/go.mod h1:sbN1g6eY6XVLeqNsZGLnI5FwVseTrZX7Fv3O26rhAaI= k8s.io/apiextensions-apiserver v0.31.1 h1:L+hwULvXx+nvTYX/MKM3kKMZyei+UiSXQWciX/N6E40= k8s.io/apiextensions-apiserver v0.31.1/go.mod h1:tWMPR3sgW+jsl2xm9v7lAyRF1rYEK71i9G5dRtkknoQ= +k8s.io/apimachinery v0.23.3/go.mod h1:BEuFMMBaIbcOqVIJqNZJXGFTP4W6AycEpb5+m/97hrM= k8s.io/apimachinery v0.31.1 h1:mhcUBbj7KUjaVhyXILglcVjuS4nYXiwC+KKFBgIVy7U= k8s.io/apimachinery v0.31.1/go.mod h1:rsPdaZJfTfLsNJSQzNHQvYoTmxhoOEofxtOsF3rtsMo= k8s.io/apiserver v0.31.1 h1:Sars5ejQDCRBY5f7R3QFHdqN3s61nhkpaX8/k1iEw1c= k8s.io/apiserver v0.31.1/go.mod h1:lzDhpeToamVZJmmFlaLwdYZwd7zB+WYRYIboqA1kGxM= k8s.io/client-go v0.31.1 h1:f0ugtWSbWpxHR7sjVpQwuvw9a3ZKLXX0u0itkFXufb0= k8s.io/client-go v0.31.1/go.mod h1:sKI8871MJN2OyeqRlmA4W4KM9KBdBUpDLu/43eGemCg= +k8s.io/code-generator v0.23.3/go.mod h1:S0Q1JVA+kSzTI1oUvbKAxZY/DYbA/ZUb4Uknog12ETk= k8s.io/component-base v0.31.1 h1:UpOepcrX3rQ3ab5NB6g5iP0tvsgJWzxTyAo20sgYSy8= k8s.io/component-base v0.31.1/go.mod h1:WGeaw7t/kTsqpVTaCoVEtillbqAhF2/JgvO0LDOMa0w= +k8s.io/gengo v0.0.0-20210813121822-485abfe95c7c/go.mod h1:FiNAH4ZV3gBg2Kwh89tzAEV2be7d5xI0vBa/VySYy3E= +k8s.io/gengo v0.0.0-20211129171323-c02415ce4185/go.mod h1:FiNAH4ZV3gBg2Kwh89tzAEV2be7d5xI0vBa/VySYy3E= k8s.io/gengo/v2 v2.0.0-20240911193312-2b36238f13e9 h1:si3PfKm8dDYxgfbeA6orqrtLkvvIeH8UqffFJDl0bz4= k8s.io/gengo/v2 v2.0.0-20240911193312-2b36238f13e9/go.mod h1:EJykeLsmFC60UQbYJezXkEsG2FLrt0GPNkU5iK5GWxU= +k8s.io/klog/v2 v2.0.0/go.mod h1:PBfzABfn139FHAV07az/IF9Wp1bkk3vpT2XSJ76fSDE= +k8s.io/klog/v2 v2.2.0/go.mod h1:Od+F08eJP+W3HUb4pSrPpgp9DGU4GzlpG/TmITuYh/Y= +k8s.io/klog/v2 v2.30.0/go.mod h1:y1WjHnz7Dj687irZUWR/WLkLc5N1YHtjLdmgWjndZn0= +k8s.io/klog/v2 v2.40.1/go.mod h1:y1WjHnz7Dj687irZUWR/WLkLc5N1YHtjLdmgWjndZn0= k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk= k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE= +k8s.io/kube-openapi v0.0.0-20211115234752-e816edb12b65/go.mod h1:sX9MT8g7NVZM5lVL/j8QyCCJe8YSMW30QvGZWaCIDIk= +k8s.io/kube-openapi v0.0.0-20220124234850-424119656bbf/go.mod h1:sX9MT8g7NVZM5lVL/j8QyCCJe8YSMW30QvGZWaCIDIk= k8s.io/kube-openapi v0.0.0-20240903163716-9e1beecbcb38 h1:1dWzkmJrrprYvjGwh9kEUxmcUV/CtNU8QM7h1FLWQOo= k8s.io/kube-openapi v0.0.0-20240903163716-9e1beecbcb38/go.mod h1:coRQXBK9NxO98XUv3ZD6AK3xzHCxV6+b7lrquKwaKzA= k8s.io/metrics v0.30.2 h1:zj4kIPTCfEbY0RHEogpA7QtlItU7xaO11+Gz1zVDxlc= k8s.io/metrics v0.30.2/go.mod h1:GpoO5XTy/g8CclVLtgA5WTrr2Cy5vCsqr5Xa/0ETWIk= +k8s.io/utils v0.0.0-20210802155522-efc7438f0176/go.mod h1:jPW/WVKK9YHAvNhRxK0md/EJ228hCsBRufyofKtW8HA= +k8s.io/utils v0.0.0-20211116205334-6203023598ed/go.mod h1:jPW/WVKK9YHAvNhRxK0md/EJ228hCsBRufyofKtW8HA= k8s.io/utils v0.0.0-20240902221715-702e33fdd3c3 h1:b2FmK8YH+QEwq/Sy2uAEhmqL5nPfGYbJOcaqjeYYZoA= k8s.io/utils v0.0.0-20240902221715-702e33fdd3c3/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0= sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.30.3 h1:2770sDpzrjjsAtVhSeUFseziht227YAWYHLGNM8QPwY= @@ -398,13 +608,18 @@ sigs.k8s.io/controller-runtime v0.19.0 h1:nWVM7aq+Il2ABxwiCizrVDSlmDcshi9llbaFbC sigs.k8s.io/controller-runtime v0.19.0/go.mod h1:iRmWllt8IlaLjvTTDLhRBXIEtkCK6hwVBJJsYS9Ajf4= sigs.k8s.io/gateway-api v1.1.0 h1:DsLDXCi6jR+Xz8/xd0Z1PYl2Pn0TyaFMOPPZIj4inDM= sigs.k8s.io/gateway-api v1.1.0/go.mod h1:ZH4lHrL2sDi0FHZ9jjneb8kKnGzFWyrTya35sWUTrRs= +sigs.k8s.io/json v0.0.0-20211020170558-c049b76a60c6/go.mod h1:p4QtZmO4uMYipTQNzagwnNoseA6OxSUutVw05NhYDRs= sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd h1:EDPBXCAspyGV4jQlpZSudPeMmr1bNJefnuqLsRAsHZo= sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd/go.mod h1:B8JuhiUyNFVKdsE8h686QcCxMaH6HrOAZj4vswFpcB0= sigs.k8s.io/kustomize/api v0.17.2 h1:E7/Fjk7V5fboiuijoZHgs4aHuexi5Y2loXlVOAVAG5g= sigs.k8s.io/kustomize/api v0.17.2/go.mod h1:UWTz9Ct+MvoeQsHcJ5e+vziRRkwimm3HytpZgIYqye0= sigs.k8s.io/kustomize/kyaml v0.17.1 h1:TnxYQxFXzbmNG6gOINgGWQt09GghzgTP6mIurOgrLCQ= sigs.k8s.io/kustomize/kyaml v0.17.1/go.mod h1:9V0mCjIEYjlXuCdYsSXvyoy2BTsLESH7TlGV81S282U= +sigs.k8s.io/structured-merge-diff/v4 v4.0.2/go.mod h1:bJZC9H9iH24zzfZ/41RGcq60oK1F7G282QMXDPYydCw= +sigs.k8s.io/structured-merge-diff/v4 v4.2.1/go.mod h1:j/nl6xW8vLS49O8YvXW1ocPhZawJtm+Yrr7PPRQ0Vg4= sigs.k8s.io/structured-merge-diff/v4 v4.4.1 h1:150L+0vs/8DA78h1u02ooW1/fFq/Lwr+sGiqlzvrtq4= sigs.k8s.io/structured-merge-diff/v4 v4.4.1/go.mod h1:N8hJocpFajUSSeSJ9bOZ77VzejKZaXsTtZo4/u7Io08= +sigs.k8s.io/yaml v1.2.0/go.mod h1:yfXDCHCao9+ENCvLSE62v9VSji2MKu5jeNfTrofGhJc= +sigs.k8s.io/yaml v1.3.0/go.mod h1:GeOyir5tyXNByN85N/dRIT9es5UQNerPYEKK56eTBm8= sigs.k8s.io/yaml v1.4.0 h1:Mk1wCc2gy/F0THH0TAp1QYyJNzRm2KCLy3o5ASXVI5E= sigs.k8s.io/yaml v1.4.0/go.mod h1:Ejl7/uTz7PSA4eKMyQCUTnhZYNmLIl+5c2lQPGR2BPY= diff --git a/kubernetes-model-generator/openapi/generator/pkg/openshift/openshift.go b/kubernetes-model-generator/openapi/generator/pkg/openshift/openshift.go index cce7c00c666..0030a7c868f 100644 --- a/kubernetes-model-generator/openapi/generator/pkg/openshift/openshift.go +++ b/kubernetes-model-generator/openapi/generator/pkg/openshift/openshift.go @@ -29,7 +29,10 @@ var PackagePatterns = []string{ "github.com/openshift/cloud-credential-operator/pkg/apis/.../v...", "github.com/openshift/cluster-network-operator/pkg/apis/.../v...", "github.com/openshift/cluster-node-tuning-operator/pkg/apis/tuned/v...", + "github.com/openshift/hive/apis/hive/v...", "github.com/operator-framework/api/pkg/operators/v...", "github.com/operator-framework/operator-lifecycle-manager/pkg/package-server/apis/operators/v...", "github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v...", + // Support types required by some APIs such as (github.com/openshift/hive) + "github.com/openshift/custom-resource-status/conditions/v...", } diff --git a/kubernetes-model-generator/openapi/generator/tools/generator/openapi.go b/kubernetes-model-generator/openapi/generator/tools/generator/openapi.go index d73a67a6e28..63593229ecb 100644 --- a/kubernetes-model-generator/openapi/generator/tools/generator/openapi.go +++ b/kubernetes-model-generator/openapi/generator/tools/generator/openapi.go @@ -26,6 +26,7 @@ import ( openshiftcloudcredentialoperatorv1 "github.com/openshift/cloud-credential-operator/pkg/apis/cloudcredential/v1" openshiftclusternetworkoperatorv1 "github.com/openshift/cluster-network-operator/pkg/apis/network/v1" openshiftclusternodetuningoperatorv1 "github.com/openshift/cluster-node-tuning-operator/pkg/apis/tuned/v1" + openshifthivev1 "github.com/openshift/hive/apis/hive/v1" operatorframeworkv1 "github.com/operator-framework/api/pkg/operators/v1" operatorframeworkv1alpha1 "github.com/operator-framework/api/pkg/operators/v1alpha1" olm "github.com/operator-framework/operator-lifecycle-manager/pkg/package-server/apis/operators/v1" @@ -44,6 +45,7 @@ func main() { openshiftcloudcredentialoperatorv1.GroupVersion.String(), openshiftclusternetworkoperatorv1.GroupVersion.String(), openshiftclusternodetuningoperatorv1.SchemeGroupVersion.String(), + openshifthivev1.SchemeGroupVersion.String(), olm.SchemeGroupVersion.String(), prometheusoperatorv1.SchemeGroupVersion.String(), }) diff --git a/kubernetes-model-generator/openapi/maven-plugin/src/main/java/io/fabric8/kubernetes/schema/generator/ImportManager.java b/kubernetes-model-generator/openapi/maven-plugin/src/main/java/io/fabric8/kubernetes/schema/generator/ImportManager.java index 2e38efaaedf..e5c4dd2ec0c 100644 --- a/kubernetes-model-generator/openapi/maven-plugin/src/main/java/io/fabric8/kubernetes/schema/generator/ImportManager.java +++ b/kubernetes-model-generator/openapi/maven-plugin/src/main/java/io/fabric8/kubernetes/schema/generator/ImportManager.java @@ -42,9 +42,27 @@ default void addAllImports(Collection allImports) { * @return true if the given simple class name is already imported as part of a different package, false otherwise. */ default boolean hasSimpleClassName(String className) { - final String simpleClassName = className.substring(className.lastIndexOf('.') + 1); + final String simpleClassName = simpleClassName(className); return getImports().stream() .filter(i -> !Objects.equals(i, className)) .anyMatch(i -> i.endsWith("." + simpleClassName)); } + + /** + * Returns the simple class name of the + * given fully qualified class name. + *

+ * Example: + * 

+   *     simpleClassName("io.fabric8.kubernetes.api.model.Pod") -> "Pod"
+   *     simpleClassName("java.lang.String") -> "String"
+   *
+ *

+ * + * @param className the fully qualified class name. + * @return the simple class name. + */ + default String simpleClassName(String className) { + return className.substring(className.lastIndexOf('.') + 1); + } } diff --git a/kubernetes-model-generator/openapi/maven-plugin/src/main/java/io/fabric8/kubernetes/schema/generator/model/TemplateContext.java b/kubernetes-model-generator/openapi/maven-plugin/src/main/java/io/fabric8/kubernetes/schema/generator/model/TemplateContext.java index bcf6083bccd..91df348de7a 100644 --- a/kubernetes-model-generator/openapi/maven-plugin/src/main/java/io/fabric8/kubernetes/schema/generator/model/TemplateContext.java +++ b/kubernetes-model-generator/openapi/maven-plugin/src/main/java/io/fabric8/kubernetes/schema/generator/model/TemplateContext.java @@ -72,4 +72,13 @@ boolean isNamespaced() { return getApiVersion() != null && getApiVersion().isNamespaced(); } + @Override + public boolean hasSimpleClassName(String className) { + // If the provided class name matches the current class simple name it means that we'll need the fully + // qualified class name to avoid conflicts. + if (simpleClassName(className).equals(classSimpleName)) { + return true; + } + return ImportManager.super.hasSimpleClassName(className); + } } diff --git a/kubernetes-model-generator/openapi/schemas/openshift-generated.json b/kubernetes-model-generator/openapi/schemas/openshift-generated.json index f831a3c2413..8f361b80e29 100644 --- a/kubernetes-model-generator/openapi/schemas/openshift-generated.json +++ b/kubernetes-model-generator/openapi/schemas/openshift-generated.json @@ -14968,132 +14968,194 @@ "Scope": "Namespaced" } }, - "io.k8s.api.admission.v1.AdmissionRequest": { - "description": "AdmissionRequest describes the admission.Attributes for the admission request.", + "com.github.openshift.custom-resource-status.conditions.v1.Condition": { + "description": "Condition represents the state of the operator's reconciliation functionality.", "type": "object", "required": [ - "uid", - "kind", - "resource", - "operation", - "userInfo" + "type", + "status" ], "properties": { - "dryRun": { - "description": "DryRun indicates that modifications will definitely not be persisted for this request. Defaults to false.", - "type": "boolean" + "lastHeartbeatTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "kind": { - "description": "Kind is the fully-qualified type of object being submitted (for example, v1.Pod or autoscaling.v1.Scale)", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind" + "lastTransitionTime": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "name": { - "description": "Name is the name of the object as presented in the request. On a CREATE operation, the client may omit name and rely on the server to generate the name. If that is the case, this field will contain an empty string.", + "message": { "type": "string" }, - "namespace": { - "description": "Namespace is the namespace associated with the request (if any).", + "reason": { "type": "string" }, - "object": { - "description": "Object is the object from the incoming request.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "oldObject": { - "description": "OldObject is the existing object. Only populated for DELETE and UPDATE requests.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operation": { - "description": "Operation is the operation being performed. This may be different than the operation requested. e.g. a patch can result in either a CREATE or UPDATE Operation.", + "status": { "type": "string", "default": "" }, - "options": { - "description": "Options is the operation option structure of the operation being performed. e.g. `meta.k8s.io/v1.DeleteOptions` or `meta.k8s.io/v1.CreateOptions`. This may be different than the options the caller provided. e.g. for a patch request the performed Operation might be a CREATE, in which case the Options will a `meta.k8s.io/v1.CreateOptions` even though the caller provided `meta.k8s.io/v1.PatchOptions`.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "requestKind": { - "description": "RequestKind is the fully-qualified type of the original API request (for example, v1.Pod or autoscaling.v1.Scale). If this is specified and differs from the value in \"kind\", an equivalent match and conversion was performed.\n\nFor example, if deployments can be modified via apps/v1 and apps/v1beta1, and a webhook registered a rule of `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]` and `matchPolicy: Equivalent`, an API request to apps/v1beta1 deployments would be converted and sent to the webhook with `kind: {group:\"apps\", version:\"v1\", kind:\"Deployment\"}` (matching the rule the webhook registered for), and `requestKind: {group:\"apps\", version:\"v1beta1\", kind:\"Deployment\"}` (indicating the kind of the original API request).\n\nSee documentation for the \"matchPolicy\" field in the webhook configuration type for more details.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind" - }, - "requestResource": { - "description": "RequestResource is the fully-qualified resource of the original API request (for example, v1.pods). If this is specified and differs from the value in \"resource\", an equivalent match and conversion was performed.\n\nFor example, if deployments can be modified via apps/v1 and apps/v1beta1, and a webhook registered a rule of `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]` and `matchPolicy: Equivalent`, an API request to apps/v1beta1 deployments would be converted and sent to the webhook with `resource: {group:\"apps\", version:\"v1\", resource:\"deployments\"}` (matching the resource the webhook registered for), and `requestResource: {group:\"apps\", version:\"v1beta1\", resource:\"deployments\"}` (indicating the resource of the original API request).\n\nSee documentation for the \"matchPolicy\" field in the webhook configuration type.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionResource" - }, - "requestSubResource": { - "description": "RequestSubResource is the name of the subresource of the original API request, if any (for example, \"status\" or \"scale\") If this is specified and differs from the value in \"subResource\", an equivalent match and conversion was performed. See documentation for the \"matchPolicy\" field in the webhook configuration type.", + "type": { + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "Condition", + "Scope": "Namespaced" + } + }, + "com.github.openshift.hive.apis.hive.v1.agent.BareMetalPlatform": { + "description": "BareMetalPlatform defines agent based install configuration specific to bare metal clusters. Can only be used with spec.installStrategy.agent.", + "type": "object", + "required": [ + "agentSelector" + ], + "properties": { + "agentSelector": { + "description": "AgentSelector is a label selector used for associating relevant custom resources with this cluster. (Agent, BareMetalHost, etc)", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "agent", + "Kind": "BareMetalPlatform", + "Scope": "Namespaced" + } + }, + "com.github.openshift.hive.apis.hive.v1.aws.AssumeRole": { + "description": "AssumeRole stores information for the IAM role that needs to be assumed using an existing AWS session.", + "type": "object", + "required": [ + "roleARN" + ], + "properties": { + "externalID": { + "description": "ExternalID is random string generated by platform so that assume role is protected from confused deputy problem. more info: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html", "type": "string" }, - "resource": { - "description": "Resource is the fully-qualified resource being requested (for example, v1.pods)", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionResource" + "roleARN": { + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "aws", + "Kind": "AssumeRole", + "Scope": "Namespaced" + } + }, + "com.github.openshift.hive.apis.hive.v1.aws.EC2Metadata": { + "description": "EC2Metadata defines the metadata service interaction options for an ec2 instance. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html", + "type": "object", + "properties": { + "authentication": { + "description": "Authentication determines whether or not the host requires the use of authentication when interacting with the metadata service. When using authentication, this enforces v2 interaction method (IMDSv2) with the metadata service. When omitted, this means the user has no opinion and the value is left to the platform to choose a good default, which is subject to change over time. The current default is optional. At this point this field represents `HttpTokens` parameter from `InstanceMetadataOptionsRequest` structure in AWS EC2 API https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_InstanceMetadataOptionsRequest.html", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "aws", + "Kind": "EC2Metadata", + "Scope": "Namespaced" + } + }, + "com.github.openshift.hive.apis.hive.v1.aws.EC2RootVolume": { + "description": "EC2RootVolume defines the storage for an ec2 instance.", + "type": "object", + "required": [ + "size", + "type" + ], + "properties": { + "iops": { + "description": "IOPS defines the iops for the storage.", + "type": "integer", + "format": "int32" }, - "subResource": { - "description": "SubResource is the subresource being requested, if any (for example, \"status\" or \"scale\")", + "kmsKeyARN": { + "description": "The KMS key that will be used to encrypt the EBS volume. If no key is provided the default KMS key for the account will be used. https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetEbsDefaultKmsKeyId.html", "type": "string" }, - "uid": { - "description": "UID is an identifier for the individual request/response. It allows us to distinguish instances of requests which are otherwise identical (parallel requests, requests when earlier requests did not modify etc) The UID is meant to track the round trip (request/response) between the KAS and the WebHook, not the user request. It is suitable for correlating log entries between the webhook and apiserver, for either auditing or debugging.", + "size": { + "description": "Size defines the size of the storage.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "type": { + "description": "Type defines the type of the storage.", "type": "string", "default": "" - }, - "userInfo": { - "description": "UserInfo is information about the requesting user", - "default": {}, - "$ref": "#/definitions/io.k8s.api.authentication.v1.UserInfo" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admission.k8s.io", - "Version": "v1", - "Kind": "AdmissionRequest", + "Group": "", + "Version": "aws", + "Kind": "EC2RootVolume", "Scope": "Namespaced" } }, - "io.k8s.api.admission.v1.AdmissionResponse": { - "description": "AdmissionResponse describes an admission response.", + "com.github.openshift.hive.apis.hive.v1.aws.MachinePoolPlatform": { + "description": "MachinePoolPlatform stores the configuration for a machine pool installed on AWS.", "type": "object", "required": [ - "uid", - "allowed" + "type", + "rootVolume" ], "properties": { - "allowed": { - "description": "Allowed indicates whether or not the admission request was permitted.", - "type": "boolean", - "default": false - }, - "auditAnnotations": { - "description": "AuditAnnotations is an unstructured key value map set by remote admission controller (e.g. error=image-blacklisted). MutatingAdmissionWebhook and ValidatingAdmissionWebhook admission controller will prefix the keys with admission webhook name (e.g. imagepolicy.example.com/error=image-blacklisted). AuditAnnotations will be provided by the admission webhook to add additional context to the audit log for this request.", - "type": "object", - "additionalProperties": { + "additionalSecurityGroupIDs": { + "description": "AdditionalSecurityGroupIDs contains IDs of additional security groups for machines, where each ID is presented in the format sg-xxxx.", + "type": "array", + "items": { "type": "string", "default": "" } }, - "patch": { - "description": "The patch body. Currently we only support \"JSONPatch\" which implements RFC 6902.", - "type": "string", - "format": "byte" + "metadataService": { + "description": "EC2MetadataOptions defines metadata service interaction options for EC2 instances in the machine pool.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.EC2Metadata" }, - "patchType": { - "description": "The type of Patch. Currently we only allow \"JSONPatch\".", - "type": "string" + "rootVolume": { + "description": "EC2RootVolume defines the storage for ec2 instance.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.EC2RootVolume" }, - "status": { - "description": "Result contains extra details into why an admission request was denied. This field IS NOT consulted in any way if \"Allowed\" is \"true\".", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + "spotMarketOptions": { + "description": "SpotMarketOptions allows users to configure instances to be run using AWS Spot instances.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.SpotMarketOptions" }, - "uid": { - "description": "UID is an identifier for the individual request/response. This must be copied over from the corresponding AdmissionRequest.", + "subnets": { + "description": "Subnets is the list of IDs of subnets to which to attach the machines. There must be exactly one subnet for each availability zone used. These subnets may be public or private. As a special case, for consistency with install-config, you may specify exactly one private and one public subnet for each availability zone. In this case, the public subnets will be filtered out and only the private subnets will be used. If empty/omitted, we will look for subnets in each availability zone tagged with Name=\u003cclusterID\u003e-private-\u003caz\u003e (legacy terraform) or \u003cclusterID\u003e-subnet-private-\u003caz\u003e (CAPA).", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "type": { + "description": "InstanceType defines the ec2 instance type. eg. m4-large", "type": "string", "default": "" }, - "warnings": { - "description": "warnings is a list of warning messages to return to the requesting API client. Warning messages describe a problem the client making the API request should correct or be aware of. Limit warnings to 120 characters if possible. Warnings over 256 characters and large numbers of warnings may be truncated.", + "userTags": { + "description": "UserTags contains the user defined tags to be supplied for the ec2 instance. Note that these will be merged with ClusterDeployment.Spec.Platform.AWS.UserTags, with this field taking precedence when keys collide.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "zones": { + "description": "Zones is list of availability zones that can be used.", "type": "array", "items": { "type": "string", @@ -15103,1988 +15165,1629 @@ }, "x-fabric8-info": { "Type": "nested", - "Group": "admission.k8s.io", - "Version": "v1", - "Kind": "AdmissionResponse", + "Group": "", + "Version": "aws", + "Kind": "MachinePoolPlatform", "Scope": "Namespaced" } }, - "io.k8s.api.admission.v1.AdmissionReview": { - "description": "AdmissionReview describes an admission review request/response.", + "com.github.openshift.hive.apis.hive.v1.aws.Metadata": { + "description": "Metadata contains AWS metadata (e.g. for uninstalling the cluster).", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "hostedZoneRole": { + "description": "HostedZoneRole is the role to assume when performing operations on a hosted zone owned by another account.", "type": "string" - }, - "request": { - "description": "Request describes the attributes for the admission request.", - "$ref": "#/definitions/io.k8s.api.admission.v1.AdmissionRequest" - }, - "response": { - "description": "Response describes the attributes for the admission response.", - "$ref": "#/definitions/io.k8s.api.admission.v1.AdmissionResponse" } }, "x-fabric8-info": { - "Type": "object", - "Group": "admission.k8s.io", - "Version": "v1", - "Kind": "AdmissionReview", + "Type": "nested", + "Group": "", + "Version": "aws", + "Kind": "Metadata", "Scope": "Namespaced" } }, - "io.k8s.api.admission.v1beta1.AdmissionRequest": { - "description": "AdmissionRequest describes the admission.Attributes for the admission request.", + "com.github.openshift.hive.apis.hive.v1.aws.Platform": { + "description": "Platform stores all the global configuration that all machinesets use.", "type": "object", "required": [ - "uid", - "kind", - "resource", - "operation", - "userInfo" + "region" ], "properties": { - "dryRun": { - "description": "DryRun indicates that modifications will definitely not be persisted for this request. Defaults to false.", - "type": "boolean" - }, - "kind": { - "description": "Kind is the fully-qualified type of object being submitted (for example, v1.Pod or autoscaling.v1.Scale)", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind" - }, - "name": { - "description": "Name is the name of the object as presented in the request. On a CREATE operation, the client may omit name and rely on the server to generate the name. If that is the case, this field will contain an empty string.", - "type": "string" - }, - "namespace": { - "description": "Namespace is the namespace associated with the request (if any).", - "type": "string" - }, - "object": { - "description": "Object is the object from the incoming request.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "oldObject": { - "description": "OldObject is the existing object. Only populated for DELETE and UPDATE requests.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operation": { - "description": "Operation is the operation being performed. This may be different than the operation requested. e.g. a patch can result in either a CREATE or UPDATE Operation.", - "type": "string", - "default": "" - }, - "options": { - "description": "Options is the operation option structure of the operation being performed. e.g. `meta.k8s.io/v1.DeleteOptions` or `meta.k8s.io/v1.CreateOptions`. This may be different than the options the caller provided. e.g. for a patch request the performed Operation might be a CREATE, in which case the Options will a `meta.k8s.io/v1.CreateOptions` even though the caller provided `meta.k8s.io/v1.PatchOptions`.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "credentialsAssumeRole": { + "description": "CredentialsAssumeRole refers to the IAM role that must be assumed to obtain AWS account access for the cluster operations.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.AssumeRole" }, - "requestKind": { - "description": "RequestKind is the fully-qualified type of the original API request (for example, v1.Pod or autoscaling.v1.Scale). If this is specified and differs from the value in \"kind\", an equivalent match and conversion was performed.\n\nFor example, if deployments can be modified via apps/v1 and apps/v1beta1, and a webhook registered a rule of `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]` and `matchPolicy: Equivalent`, an API request to apps/v1beta1 deployments would be converted and sent to the webhook with `kind: {group:\"apps\", version:\"v1\", kind:\"Deployment\"}` (matching the rule the webhook registered for), and `requestKind: {group:\"apps\", version:\"v1beta1\", kind:\"Deployment\"}` (indicating the kind of the original API request).\n\nSee documentation for the \"matchPolicy\" field in the webhook configuration type for more details.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind" - }, - "requestResource": { - "description": "RequestResource is the fully-qualified resource of the original API request (for example, v1.pods). If this is specified and differs from the value in \"resource\", an equivalent match and conversion was performed.\n\nFor example, if deployments can be modified via apps/v1 and apps/v1beta1, and a webhook registered a rule of `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]` and `matchPolicy: Equivalent`, an API request to apps/v1beta1 deployments would be converted and sent to the webhook with `resource: {group:\"apps\", version:\"v1\", resource:\"deployments\"}` (matching the resource the webhook registered for), and `requestResource: {group:\"apps\", version:\"v1beta1\", resource:\"deployments\"}` (indicating the resource of the original API request).\n\nSee documentation for the \"matchPolicy\" field in the webhook configuration type.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionResource" - }, - "requestSubResource": { - "description": "RequestSubResource is the name of the subresource of the original API request, if any (for example, \"status\" or \"scale\") If this is specified and differs from the value in \"subResource\", an equivalent match and conversion was performed. See documentation for the \"matchPolicy\" field in the webhook configuration type.", - "type": "string" - }, - "resource": { - "description": "Resource is the fully-qualified resource being requested (for example, v1.pods)", + "credentialsSecretRef": { + "description": "CredentialsSecretRef refers to a secret that contains the AWS account access credentials.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionResource" + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "subResource": { - "description": "SubResource is the subresource being requested, if any (for example, \"status\" or \"scale\")", - "type": "string" + "privateLink": { + "description": "PrivateLink allows uses to enable access to the cluster's API server using AWS PrivateLink. AWS PrivateLink includes a pair of VPC Endpoint Service and VPC Endpoint accross AWS accounts and allows clients to connect to services using AWS's internal networking instead of the Internet.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.PrivateLinkAccess" }, - "uid": { - "description": "UID is an identifier for the individual request/response. It allows us to distinguish instances of requests which are otherwise identical (parallel requests, requests when earlier requests did not modify etc) The UID is meant to track the round trip (request/response) between the KAS and the WebHook, not the user request. It is suitable for correlating log entries between the webhook and apiserver, for either auditing or debugging.", + "region": { + "description": "Region specifies the AWS region where the cluster will be created.", "type": "string", "default": "" }, - "userInfo": { - "description": "UserInfo is information about the requesting user", - "default": {}, - "$ref": "#/definitions/io.k8s.api.authentication.v1.UserInfo" + "userTags": { + "description": "UserTags specifies additional tags for AWS resources created for the cluster.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "admission.k8s.io", - "Version": "v1beta1", - "Kind": "AdmissionRequest", + "Group": "", + "Version": "aws", + "Kind": "Platform", "Scope": "Namespaced" } }, - "io.k8s.api.admission.v1beta1.AdmissionResponse": { - "description": "AdmissionResponse describes an admission response.", + "com.github.openshift.hive.apis.hive.v1.aws.PlatformStatus": { + "description": "PlatformStatus contains the observed state on AWS platform.", + "type": "object", + "properties": { + "privateLink": { + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.PrivateLinkAccessStatus" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "aws", + "Kind": "PlatformStatus", + "Scope": "Namespaced" + } + }, + "com.github.openshift.hive.apis.hive.v1.aws.PrivateLinkAccess": { + "description": "PrivateLinkAccess configures access to the cluster API using AWS PrivateLink", "type": "object", "required": [ - "uid", - "allowed" + "enabled" ], "properties": { - "allowed": { - "description": "Allowed indicates whether or not the admission request was permitted.", - "type": "boolean", - "default": false - }, - "auditAnnotations": { - "description": "AuditAnnotations is an unstructured key value map set by remote admission controller (e.g. error=image-blacklisted). MutatingAdmissionWebhook and ValidatingAdmissionWebhook admission controller will prefix the keys with admission webhook name (e.g. imagepolicy.example.com/error=image-blacklisted). AuditAnnotations will be provided by the admission webhook to add additional context to the audit log for this request.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "patch": { - "description": "The patch body. Currently we only support \"JSONPatch\" which implements RFC 6902.", - "type": "string", - "format": "byte" - }, - "patchType": { - "description": "The type of Patch. Currently we only allow \"JSONPatch\".", - "type": "string" - }, - "status": { - "description": "Result contains extra details into why an admission request was denied. This field IS NOT consulted in any way if \"Allowed\" is \"true\".", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" - }, - "uid": { - "description": "UID is an identifier for the individual request/response. This should be copied over from the corresponding AdmissionRequest.", - "type": "string", - "default": "" - }, - "warnings": { - "description": "warnings is a list of warning messages to return to the requesting API client. Warning messages describe a problem the client making the API request should correct or be aware of. Limit warnings to 120 characters if possible. Warnings over 256 characters and large numbers of warnings may be truncated.", + "additionalAllowedPrincipals": { + "description": "AdditionalAllowedPrincipals is a list of additional allowed principal ARNs to be configured for the Private Link cluster's VPC Endpoint Service. ARNs provided as AdditionalAllowedPrincipals will be configured for the cluster's VPC Endpoint Service in addition to the IAM entity used by Hive.", "type": "array", "items": { "type": "string", "default": "" } + }, + "enabled": { + "type": "boolean", + "default": false } }, "x-fabric8-info": { "Type": "nested", - "Group": "admission.k8s.io", - "Version": "v1beta1", - "Kind": "AdmissionResponse", + "Group": "", + "Version": "aws", + "Kind": "PrivateLinkAccess", "Scope": "Namespaced" } }, - "io.k8s.api.admission.v1beta1.AdmissionReview": { - "description": "AdmissionReview describes an admission review request/response.", + "com.github.openshift.hive.apis.hive.v1.aws.PrivateLinkAccessStatus": { + "description": "PrivateLinkAccessStatus contains the observed state for PrivateLinkAccess resources.", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "hostedZoneID": { "type": "string" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "vpcEndpointID": { "type": "string" }, - "request": { - "description": "Request describes the attributes for the admission request.", - "$ref": "#/definitions/io.k8s.api.admission.v1beta1.AdmissionRequest" - }, - "response": { - "description": "Response describes the attributes for the admission response.", - "$ref": "#/definitions/io.k8s.api.admission.v1beta1.AdmissionResponse" + "vpcEndpointService": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.VPCEndpointService" } }, "x-fabric8-info": { - "Type": "object", - "Group": "admission.k8s.io", - "Version": "v1beta1", - "Kind": "AdmissionReview", + "Type": "nested", + "Group": "", + "Version": "aws", + "Kind": "PrivateLinkAccessStatus", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.AuditAnnotation": { - "description": "AuditAnnotation describes how to produce an audit annotation for an API request.", + "com.github.openshift.hive.apis.hive.v1.aws.SpotMarketOptions": { + "description": "SpotMarketOptions defines the options available to a user when configuring Machines to run on Spot instances. Most users should provide an empty struct.", "type": "object", - "required": [ - "key", - "valueExpression" - ], "properties": { - "key": { - "description": "key specifies the audit annotation key. The audit annotation keys of a ValidatingAdmissionPolicy must be unique. The key must be a qualified name ([A-Za-z0-9][-A-Za-z0-9_.]*) no more than 63 bytes in length.\n\nThe key is combined with the resource name of the ValidatingAdmissionPolicy to construct an audit annotation key: \"{ValidatingAdmissionPolicy name}/{key}\".\n\nIf an admission webhook uses the same resource name as this ValidatingAdmissionPolicy and the same audit annotation key, the annotation key will be identical. In this case, the first annotation written with the key will be included in the audit event and all subsequent annotations with the same key will be discarded.\n\nRequired.", - "type": "string", - "default": "" - }, - "valueExpression": { - "description": "valueExpression represents the expression which is evaluated by CEL to produce an audit annotation value. The expression must evaluate to either a string or null value. If the expression evaluates to a string, the audit annotation is included with the string value. If the expression evaluates to null or empty string the audit annotation will be omitted. The valueExpression may be no longer than 5kb in length. If the result of the valueExpression is more than 10kb in length, it will be truncated to 10kb.\n\nIf multiple ValidatingAdmissionPolicyBinding resources match an API request, then the valueExpression will be evaluated for each binding. All unique values produced by the valueExpressions will be joined together in a comma-separated list.\n\nRequired.", - "type": "string", - "default": "" + "maxPrice": { + "description": "The maximum price the user is willing to pay for their instances Default: On-Demand price", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "AuditAnnotation", + "Group": "", + "Version": "aws", + "Kind": "SpotMarketOptions", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.ExpressionWarning": { - "description": "ExpressionWarning is a warning information that targets a specific expression.", + "com.github.openshift.hive.apis.hive.v1.aws.VPCEndpointService": { "type": "object", - "required": [ - "fieldRef", - "warning" - ], "properties": { - "fieldRef": { - "description": "The path to the field that refers the expression. For example, the reference to the expression of the first item of validations is \"spec.validations[0].expression\"", - "type": "string", - "default": "" + "additionalAllowedPrincipals": { + "description": "AdditionalAllowedPrincipals is a list of additional allowed principal ARNs that have been configured for the Private Link cluster's VPC Endpoint Service. This list in Status is used to determine if a sync of Allowed Principals is needed outside of the regular reconcile period of 2hrs.", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "warning": { - "description": "The content of type checking information in a human-readable form. Each line of the warning contains the type that the expression is checked against, followed by the type check error from the compiler.", - "type": "string", - "default": "" + "defaultAllowedPrincipal": { + "description": "DefaultAllowedPrincipal is the ARN of the IAM entity used by Hive as configured for the Private Link cluster's VPC Endpoint Service.", + "type": "string" + }, + "id": { + "type": "string" + }, + "name": { + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "ExpressionWarning", + "Group": "", + "Version": "aws", + "Kind": "VPCEndpointService", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.MatchCondition": { - "description": "MatchCondition represents a condition which must by fulfilled for a request to be sent to a webhook.", + "com.github.openshift.hive.apis.hive.v1.azure.DiskEncryptionSet": { + "description": "DiskEncryptionSet defines the configuration for a disk encryption set.", "type": "object", "required": [ - "name", - "expression" + "resourceGroup", + "name" ], "properties": { - "expression": { - "description": "Expression represents the expression which will be evaluated by CEL. Must evaluate to bool. CEL expressions have access to the contents of the AdmissionRequest and Authorizer, organized into CEL variables:\n\n'object' - The object from the incoming request. The value is null for DELETE requests. 'oldObject' - The existing object. The value is null for CREATE requests. 'request' - Attributes of the admission request(/pkg/apis/admission/types.go#AdmissionRequest). 'authorizer' - A CEL Authorizer. May be used to perform authorization checks for the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n'authorizer.requestResource' - A CEL ResourceCheck constructed from the 'authorizer' and configured with the\n request resource.\nDocumentation on CEL: https://kubernetes.io/docs/reference/using-api/cel/\n\nRequired.", + "name": { + "description": "Name is the name of the disk encryption set.", "type": "string", "default": "" }, - "name": { - "description": "Name is an identifier for this match condition, used for strategic merging of MatchConditions, as well as providing an identifier for logging purposes. A good name should be descriptive of the associated expression. Name must be a qualified name consisting of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character (e.g. 'MyName', or 'my.name', or '123-abc', regex used for validation is '([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9]') with an optional DNS subdomain prefix and '/' (e.g. 'example.com/MyName')\n\nRequired.", + "resourceGroup": { + "description": "ResourceGroup defines the Azure resource group used by the disk encryption set.", "type": "string", "default": "" + }, + "subscriptionId": { + "description": "SubscriptionID defines the Azure subscription the disk encryption set is in.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "MatchCondition", + "Group": "", + "Version": "azure", + "Kind": "DiskEncryptionSet", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.MatchResources": { - "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)", + "com.github.openshift.hive.apis.hive.v1.azure.MachinePool": { + "description": "MachinePool stores the configuration for a machine pool installed on Azure.", "type": "object", + "required": [ + "type", + "osDisk" + ], "properties": { - "excludeResourceRules": { - "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.NamedRuleWithOperations" - }, - "x-kubernetes-list-type": "atomic" + "computeSubnet": { + "description": "ComputeSubnet specifies an existing subnet for use by compute nodes. If omitted, the default (${infraID}-worker-subnet) will be used.", + "type": "string" }, - "matchPolicy": { - "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"\n\nPossible enum values:\n - `\"Equivalent\"` means requests should be sent to the webhook if they modify a resource listed in rules via another API group or version.\n - `\"Exact\"` means requests should only be sent to the webhook if they exactly match a given rule.", + "networkResourceGroupName": { + "description": "NetworkResourceGroupName specifies the network resource group that contains an existing VNet. Ignored unless VirtualNetwork is also specified.", + "type": "string" + }, + "osDisk": { + "description": "OSDisk defines the storage for instance.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.azure.OSDisk" + }, + "osImage": { + "description": "OSImage defines the image to use for the OS.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.azure.OSImage" + }, + "type": { + "description": "InstanceType defines the azure instance type. eg. Standard_DS_V2", "type": "string", - "enum": [ - "Equivalent", - "Exact" - ] + "default": "" }, - "namespaceSelector": { - "description": "NamespaceSelector decides whether to run the admission control policy on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the policy.\n\nFor example, to run the webhook on any objects whose namespace is not associated with \"runlevel\" of \"0\" or \"1\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"runlevel\",\n \"operator\": \"NotIn\",\n \"values\": [\n \"0\",\n \"1\"\n ]\n }\n ]\n}\n\nIf instead you want to only run the policy on any objects whose namespace is associated with the \"environment\" of \"prod\" or \"staging\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"environment\",\n \"operator\": \"In\",\n \"values\": [\n \"prod\",\n \"staging\"\n ]\n }\n ]\n}\n\nSee https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ for more examples of label selectors.\n\nDefault to the empty LabelSelector, which matches everything.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "virtualNetwork": { + "description": "VirtualNetwork specifies the name of an existing VNet for the Machines to use If omitted, the default (${infraID}-vnet) will be used.", + "type": "string" }, - "objectSelector": { - "description": "ObjectSelector decides whether to run the validation based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the cel validation, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "vmNetworkingType": { + "description": "VMNetworkingType specifies whether to enable accelerated networking. Accelerated networking enables single root I/O virtualization (SR-IOV) to a VM, greatly improving its networking performance. eg. values: \"Accelerated\", \"Basic\"", + "type": "string" }, - "resourceRules": { - "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.", + "zones": { + "description": "Zones is list of availability zones that can be used. eg. [\"1\", \"2\", \"3\"]", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.NamedRuleWithOperations" - }, - "x-kubernetes-list-type": "atomic" + "type": "string", + "default": "" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "MatchResources", + "Group": "", + "Version": "azure", + "Kind": "MachinePool", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.admissionregistration.v1.MutatingWebhook": { - "description": "MutatingWebhook describes an admission webhook and the resources and operations it applies to.", + "com.github.openshift.hive.apis.hive.v1.azure.Metadata": { + "description": "Metadata contains Azure metadata (e.g. for uninstalling the cluster).", "type": "object", "required": [ - "name", - "clientConfig", - "sideEffects", - "admissionReviewVersions" + "resourceGroupName" ], "properties": { - "admissionReviewVersions": { - "description": "AdmissionReviewVersions is an ordered list of preferred `AdmissionReview` versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "clientConfig": { - "description": "ClientConfig defines how to communicate with the hook. Required", - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.WebhookClientConfig" - }, - "failurePolicy": { - "description": "FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Fail.\n\nPossible enum values:\n - `\"Fail\"` means that an error calling the webhook causes the admission to fail.\n - `\"Ignore\"` means that an error calling the webhook is ignored.", - "type": "string", - "enum": [ - "Fail", - "Ignore" - ] + "resourceGroupName": { + "description": "ResourceGroupName is the name of the resource group in which the cluster resources were created.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "azure", + "Kind": "Metadata", + "Scope": "Namespaced" + } + }, + "com.github.openshift.hive.apis.hive.v1.azure.OSDisk": { + "description": "OSDisk defines the disk for machines on Azure.", + "type": "object", + "required": [ + "diskSizeGB" + ], + "properties": { + "diskEncryptionSet": { + "description": "DiskEncryptionSet defines a disk encryption set.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.azure.DiskEncryptionSet" }, - "matchConditions": { - "description": "MatchConditions is a list of conditions that must be met for a request to be sent to this webhook. Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed.\n\nThe exact matching logic is (in order):\n 1. If ANY matchCondition evaluates to FALSE, the webhook is skipped.\n 2. If ALL matchConditions evaluate to TRUE, the webhook is called.\n 3. If any matchCondition evaluates to an error (but none are FALSE):\n - If failurePolicy=Fail, reject the request\n - If failurePolicy=Ignore, the error is ignored and the webhook is skipped", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MatchCondition" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" + "diskSizeGB": { + "description": "DiskSizeGB defines the size of disk in GB.", + "type": "integer", + "format": "int32", + "default": 0 }, - "matchPolicy": { - "description": "matchPolicy defines how the \"rules\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook.\n\nDefaults to \"Equivalent\"\n\nPossible enum values:\n - `\"Equivalent\"` means requests should be sent to the webhook if they modify a resource listed in rules via another API group or version.\n - `\"Exact\"` means requests should only be sent to the webhook if they exactly match a given rule.", + "diskType": { + "description": "DiskType defines the type of disk. For control plane nodes, the valid values are Premium_LRS and StandardSSD_LRS. Default is Premium_LRS.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "azure", + "Kind": "OSDisk", + "Scope": "Namespaced" + } + }, + "com.github.openshift.hive.apis.hive.v1.azure.OSImage": { + "description": "OSImage is the image to use for the OS of a machine.", + "type": "object", + "required": [ + "publisher", + "offer", + "sku", + "version" + ], + "properties": { + "offer": { + "description": "Offer is the offer of the image.", "type": "string", - "enum": [ - "Equivalent", - "Exact" - ] + "default": "" }, - "name": { - "description": "The name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where \"imagepolicy\" is the name of the webhook, and kubernetes.io is the name of the organization. Required.", + "publisher": { + "description": "Publisher is the publisher of the image.", "type": "string", "default": "" }, - "namespaceSelector": { - "description": "NamespaceSelector decides whether to run the webhook on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the webhook.\n\nFor example, to run the webhook on any objects whose namespace is not associated with \"runlevel\" of \"0\" or \"1\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"runlevel\",\n \"operator\": \"NotIn\",\n \"values\": [\n \"0\",\n \"1\"\n ]\n }\n ]\n}\n\nIf instead you want to only run the webhook on any objects whose namespace is associated with the \"environment\" of \"prod\" or \"staging\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"environment\",\n \"operator\": \"In\",\n \"values\": [\n \"prod\",\n \"staging\"\n ]\n }\n ]\n}\n\nSee https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ for more examples of label selectors.\n\nDefault to the empty LabelSelector, which matches everything.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "objectSelector": { - "description": "ObjectSelector decides whether to run the webhook based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the webhook, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "reinvocationPolicy": { - "description": "reinvocationPolicy indicates whether this webhook should be called multiple times as part of a single admission evaluation. Allowed values are \"Never\" and \"IfNeeded\".\n\nNever: the webhook will not be called more than once in a single admission evaluation.\n\nIfNeeded: the webhook will be called at least one additional time as part of the admission evaluation if the object being admitted is modified by other admission plugins after the initial webhook call. Webhooks that specify this option *must* be idempotent, able to process objects they previously admitted. Note: * the number of additional invocations is not guaranteed to be exactly one. * if additional invocations result in further modifications to the object, webhooks are not guaranteed to be invoked again. * webhooks that use this option may be reordered to minimize the number of additional invocations. * to validate an object after all mutations are guaranteed complete, use a validating admission webhook instead.\n\nDefaults to \"Never\".\n\nPossible enum values:\n - `\"IfNeeded\"` indicates that the webhook may be called at least one additional time as part of the admission evaluation if the object being admitted is modified by other admission plugins after the initial webhook call.\n - `\"Never\"` indicates that the webhook must not be called more than once in a single admission evaluation.", + "sku": { + "description": "SKU is the SKU of the image.", "type": "string", - "enum": [ - "IfNeeded", - "Never" - ] - }, - "rules": { - "description": "Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks from putting the cluster in a state which cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.RuleWithOperations" - }, - "x-kubernetes-list-type": "atomic" + "default": "" }, - "sideEffects": { - "description": "SideEffects states whether this webhook has side effects. Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1 may also specify Some or Unknown). Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some.\n\nPossible enum values:\n - `\"None\"` means that calling the webhook will have no side effects.\n - `\"NoneOnDryRun\"` means that calling the webhook will possibly have side effects, but if the request being reviewed has the dry-run attribute, the side effects will be suppressed.\n - `\"Some\"` means that calling the webhook will possibly have side effects. If a request with the dry-run attribute would trigger a call to this webhook, the request will instead fail.\n - `\"Unknown\"` means that no information is known about the side effects of calling the webhook. If a request with the dry-run attribute would trigger a call to this webhook, the request will instead fail.", + "version": { + "description": "Version is the version of the image.", "type": "string", - "enum": [ - "None", - "NoneOnDryRun", - "Some", - "Unknown" - ] - }, - "timeoutSeconds": { - "description": "TimeoutSeconds specifies the timeout for this webhook. After the timeout passes, the webhook call will be ignored or the API call will fail based on the failure policy. The timeout value must be between 1 and 30 seconds. Default to 10 seconds.", - "type": "integer", - "format": "int32" + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "MutatingWebhook", + "Group": "", + "Version": "azure", + "Kind": "OSImage", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration": { - "description": "MutatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and may change the object.", + "com.github.openshift.hive.apis.hive.v1.azure.Platform": { + "description": "Platform stores all the global configuration that all machinesets use.", "type": "object", + "required": [ + "credentialsSecretRef", + "region" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "baseDomainResourceGroupName": { + "description": "BaseDomainResourceGroupName specifies the resource group where the azure DNS zone for the base domain is found", "type": "string" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "cloudName": { + "description": "cloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK with the appropriate Azure API endpoints. If empty, the value is equal to \"AzurePublicCloud\".", "type": "string" }, - "metadata": { - "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.", + "credentialsSecretRef": { + "description": "CredentialsSecretRef refers to a secret that contains the Azure account access credentials.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "webhooks": { - "description": "Webhooks is a list of webhooks and the affected resources and operations.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhook" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" + "region": { + "description": "Region specifies the Azure region where the cluster will be created.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "MutatingWebhookConfiguration", - "Scope": "Clustered" + "Type": "nested", + "Group": "", + "Version": "azure", + "Kind": "Platform", + "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.MutatingWebhookConfigurationList": { - "description": "MutatingWebhookConfigurationList is a list of MutatingWebhookConfiguration.", + "com.github.openshift.hive.apis.hive.v1.baremetal.Platform": { + "description": "Platform stores the global configuration for the cluster.", "type": "object", "required": [ - "items" + "libvirtSSHPrivateKeySecretRef" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "List of MutatingWebhookConfiguration.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "libvirtSSHPrivateKeySecretRef": { + "description": "LibvirtSSHPrivateKeySecretRef is the reference to the secret that contains the private SSH key to use for access to the libvirt provisioning host. The SSH private key is expected to be in the secret data under the \"ssh-privatekey\" key.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" } }, "x-fabric8-info": { - "Type": "list", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "MutatingWebhookConfigurationList", + "Type": "nested", + "Group": "", + "Version": "baremetal", + "Kind": "Platform", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.NamedRuleWithOperations": { - "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.", + "com.github.openshift.hive.apis.hive.v1.gcp.EncryptionKeyReference": { + "description": "EncryptionKeyReference describes the encryptionKey to use for a disk's encryption.", "type": "object", "properties": { - "apiGroups": { - "description": "APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "apiVersions": { - "description": "APIVersions is the API versions the resources belong to. '*' is all versions. If '*' is present, the length of the slice must be one. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "operations": { - "description": "Operations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and any future admission operations that are added. If '*' is present, the length of the slice must be one. Required.", - "type": "array", - "items": { - "type": "string", - "default": "", - "enum": [ - "*", - "CONNECT", - "CREATE", - "DELETE", - "UPDATE" - ] - }, - "x-kubernetes-list-type": "atomic" - }, - "resourceNames": { - "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "resources": { - "description": "Resources is a list of resources this rule applies to.\n\nFor example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources.\n\nIf wildcard is present, the validation rule will ensure resources do not overlap with each other.\n\nDepending on the enclosing object, subresources might not be allowed. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "kmsKey": { + "description": "KMSKey is a reference to a KMS Key to use for the encryption.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.KMSKeyReference" }, - "scope": { - "description": "scope specifies the scope of this rule. Valid values are \"Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. \"Namespaced\" means that only namespaced resources will match this rule. \"*\" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is \"*\".", + "kmsKeyServiceAccount": { + "description": "KMSKeyServiceAccount is the service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used. See https://cloud.google.com/compute/docs/access/service-accounts#compute_engine_service_account for details on the default service account.", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "NamedRuleWithOperations", + "Group": "", + "Version": "gcp", + "Kind": "EncryptionKeyReference", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.admissionregistration.v1.ParamKind": { - "description": "ParamKind is a tuple of Group Kind and Version.", + "com.github.openshift.hive.apis.hive.v1.gcp.KMSKeyReference": { + "description": "KMSKeyReference gathers required fields for looking up a GCP KMS Key", "type": "object", + "required": [ + "name", + "keyRing", + "location" + ], "properties": { - "apiVersion": { - "description": "APIVersion is the API group version the resources belong to. In format of \"group/version\". Required.", - "type": "string" + "keyRing": { + "description": "KeyRing is the name of the KMS Key Ring which the KMS Key belongs to.", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is the API kind the resources belong to. Required.", + "location": { + "description": "Location is the GCP location in which the Key Ring exists.", + "type": "string", + "default": "" + }, + "name": { + "description": "Name is the name of the customer managed encryption key to be used for the disk encryption.", + "type": "string", + "default": "" + }, + "projectID": { + "description": "ProjectID is the ID of the Project in which the KMS Key Ring exists. Defaults to the VM ProjectID if not set.", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "ParamKind", + "Group": "", + "Version": "gcp", + "Kind": "KMSKeyReference", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.admissionregistration.v1.ParamRef": { - "description": "ParamRef describes how to locate the params to be used as input to expressions of rules applied by a policy binding.", + "com.github.openshift.hive.apis.hive.v1.gcp.MachinePool": { + "description": "MachinePool stores the configuration for a machine pool installed on GCP.", "type": "object", + "required": [ + "type" + ], "properties": { - "name": { - "description": "name is the name of the resource being referenced.\n\nOne of `name` or `selector` must be set, but `name` and `selector` are mutually exclusive properties. If one is set, the other must be unset.\n\nA single parameter used for all admission requests can be configured by setting the `name` field, leaving `selector` blank, and setting namespace if `paramKind` is namespace-scoped.", + "networkProjectID": { + "description": "NetworkProjectID specifies which project the network and subnets exist in when they are not in the main ProjectID.", "type": "string" }, - "namespace": { - "description": "namespace is the namespace of the referenced resource. Allows limiting the search for params to a specific namespace. Applies to both `name` and `selector` fields.\n\nA per-namespace parameter may be used by specifying a namespace-scoped `paramKind` in the policy and leaving this field empty.\n\n- If `paramKind` is cluster-scoped, this field MUST be unset. Setting this field results in a configuration error.\n\n- If `paramKind` is namespace-scoped, the namespace of the object being evaluated for admission will be used when this field is left unset. Take care that if this is left empty the binding must not match any cluster-scoped resources, which will result in an error.", + "onHostMaintenance": { + "description": "OnHostMaintenance determines the behavior when a maintenance event occurs that might cause the instance to reboot. This is required to be set to \"Terminate\" if you want to provision machine with attached GPUs. Otherwise, allowed values are \"Migrate\" and \"Terminate\". If omitted, the platform chooses a default, which is subject to change over time, currently that default is \"Migrate\".", "type": "string" }, - "parameterNotFoundAction": { - "description": "`parameterNotFoundAction` controls the behavior of the binding when the resource exists, and name or selector is valid, but there are no parameters matched by the binding. If the value is set to `Allow`, then no matched parameters will be treated as successful validation by the binding. If set to `Deny`, then no matched parameters will be subject to the `failurePolicy` of the policy.\n\nAllowed values are `Allow` or `Deny`\n\nRequired", + "osDisk": { + "description": "OSDisk defines the storage for instances.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.OSDisk" + }, + "secureBoot": { + "description": "SecureBoot Defines whether the instance should have secure boot enabled. Verifies the digital signature of all boot components, and halts the boot process if signature verification fails. If omitted, the platform chooses a default, which is subject to change over time. Currently that default is \"Disabled\".", "type": "string" }, - "selector": { - "description": "selector can be used to match multiple param objects based on their labels. Supply selector: {} to match all resources of the ParamKind.\n\nIf multiple params are found, they are all evaluated with the policy expressions and the results are ANDed together.\n\nOne of `name` or `selector` must be set, but `name` and `selector` are mutually exclusive properties. If one is set, the other must be unset.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "ParamRef", - "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" - }, - "io.k8s.api.admissionregistration.v1.Rule": { - "description": "Rule is a tuple of APIGroups, APIVersion, and Resources.It is recommended to make sure that all the tuple expansions are valid.", - "type": "object", - "properties": { - "apiGroups": { - "description": "APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "serviceAccount": { + "description": "ServiceAccount is the email of a gcp service account to be attached to worker nodes in order to provide the permissions required by the cloud provider. For the default worker MachinePool, it is the user's responsibility to match this to the value provided in the install-config.", + "type": "string" }, - "apiVersions": { - "description": "APIVersions is the API versions the resources belong to. '*' is all versions. If '*' is present, the length of the slice must be one. Required.", + "type": { + "description": "InstanceType defines the GCP instance type. eg. n1-standard-4", + "type": "string", + "default": "" + }, + "userTags": { + "description": "userTags has additional keys and values that we will add as tags to the providerSpec of MachineSets that we creates on GCP. Tag key and tag value should be the shortnames of the tag key and tag value resource. Consumer is responsible for using this only for spokes where custom tags are supported.", "type": "array", "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "default": {}, + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.UserTag" + } }, - "resources": { - "description": "Resources is a list of resources this rule applies to.\n\nFor example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources.\n\nIf wildcard is present, the validation rule will ensure resources do not overlap with each other.\n\nDepending on the enclosing object, subresources might not be allowed. Required.", + "zones": { + "description": "Zones is list of availability zones that can be used.", "type": "array", "items": { "type": "string", "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "scope": { - "description": "scope specifies the scope of this rule. Valid values are \"Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. \"Namespaced\" means that only namespaced resources will match this rule. \"*\" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is \"*\".", + } + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "gcp", + "Kind": "MachinePool", + "Scope": "Namespaced" + } + }, + "com.github.openshift.hive.apis.hive.v1.gcp.Metadata": { + "description": "Metadata contains GCP metadata (e.g. for uninstalling the cluster).", + "type": "object", + "properties": { + "networkProjectID": { + "description": "NetworkProjectID is used for shared VPC setups", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "Rule", + "Group": "", + "Version": "gcp", + "Kind": "Metadata", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.RuleWithOperations": { - "description": "RuleWithOperations is a tuple of Operations and Resources. It is recommended to make sure that all the tuple expansions are valid.", + "com.github.openshift.hive.apis.hive.v1.gcp.OSDisk": { + "description": "OSDisk defines the disk for machines on GCP.", "type": "object", "properties": { - "apiGroups": { - "description": "APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "apiVersions": { - "description": "APIVersions is the API versions the resources belong to. '*' is all versions. If '*' is present, the length of the slice must be one. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "operations": { - "description": "Operations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and any future admission operations that are added. If '*' is present, the length of the slice must be one. Required.", - "type": "array", - "items": { - "type": "string", - "default": "", - "enum": [ - "*", - "CONNECT", - "CREATE", - "DELETE", - "UPDATE" - ] - }, - "x-kubernetes-list-type": "atomic" - }, - "resources": { - "description": "Resources is a list of resources this rule applies to.\n\nFor example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources.\n\nIf wildcard is present, the validation rule will ensure resources do not overlap with each other.\n\nDepending on the enclosing object, subresources might not be allowed. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "diskSizeGB": { + "description": "DiskSizeGB defines the size of disk in GB. Defaulted internally to 128.", + "type": "integer", + "format": "int64" }, - "scope": { - "description": "scope specifies the scope of this rule. Valid values are \"Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. \"Namespaced\" means that only namespaced resources will match this rule. \"*\" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is \"*\".", + "diskType": { + "description": "DiskType defines the type of disk. The valid values are pd-standard and pd-ssd. Defaulted internally to pd-ssd.", "type": "string" + }, + "encryptionKey": { + "description": "EncryptionKey defines the KMS key to be used to encrypt the disk.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.EncryptionKeyReference" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "RuleWithOperations", + "Group": "", + "Version": "gcp", + "Kind": "OSDisk", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.ServiceReference": { - "description": "ServiceReference holds a reference to Service.legacy.k8s.io", + "com.github.openshift.hive.apis.hive.v1.gcp.Platform": { + "description": "Platform stores all the global configuration that all machinesets use.", "type": "object", "required": [ - "namespace", - "name" + "region" ], "properties": { - "name": { - "description": "`name` is the name of the service. Required", - "type": "string", - "default": "" + "credentialsSecretRef": { + "description": "CredentialsSecretRef refers to a secret that contains the GCP account access credentials.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "namespace": { - "description": "`namespace` is the namespace of the service. Required", + "privateServiceConnect": { + "description": "PrivateSericeConnect allows users to enable access to the cluster's API server using GCP Private Service Connect. It includes a forwarding rule paired with a Service Attachment across GCP accounts and allows clients to connect to services using GCP internal networking of using public load balancers.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.PrivateServiceConnect" + }, + "region": { + "description": "Region specifies the GCP region where the cluster will be created.", "type": "string", "default": "" - }, - "path": { - "description": "`path` is an optional URL path which will be sent in any request to this service.", - "type": "string" - }, - "port": { - "description": "If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).", - "type": "integer", - "format": "int32" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "ServiceReference", + "Group": "", + "Version": "gcp", + "Kind": "Platform", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.TypeChecking": { - "description": "TypeChecking contains results of type checking the expressions in the ValidatingAdmissionPolicy", + "com.github.openshift.hive.apis.hive.v1.gcp.PlatformStatus": { + "description": "PlatformStatus contains the observed state on GCP platform.", "type": "object", "properties": { - "expressionWarnings": { - "description": "The type checking warnings for each expression.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ExpressionWarning" - }, - "x-kubernetes-list-type": "atomic" + "privateServiceConnect": { + "description": "PrivateServiceConnect contains the private service connect resource references", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.PrivateServiceConnectStatus" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "TypeChecking", + "Group": "", + "Version": "gcp", + "Kind": "PlatformStatus", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicy": { - "description": "ValidatingAdmissionPolicy describes the definition of an admission validation policy that accepts or rejects an object without changing it.", + "com.github.openshift.hive.apis.hive.v1.gcp.PrivateServiceConnect": { + "description": "PrivateServiceConnectAccess configures access to the cluster API using GCP Private Service Connect", "type": "object", + "required": [ + "enabled" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "Specification of the desired behavior of the ValidatingAdmissionPolicy.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicySpec" + "enabled": { + "description": "Enabled specifies if Private Service Connect is to be enabled on the cluster.", + "type": "boolean", + "default": false }, - "status": { - "description": "The status of the ValidatingAdmissionPolicy, including warnings that are useful to determine if the policy behaves in the expected way. Populated by the system. Read-only.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicyStatus" + "serviceAttachment": { + "description": "ServiceAttachment configures the service attachment to be used by the cluster.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.ServiceAttachment" } }, "x-fabric8-info": { - "Type": "object", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "ValidatingAdmissionPolicy", - "Scope": "Clustered" + "Type": "nested", + "Group": "", + "Version": "gcp", + "Kind": "PrivateServiceConnect", + "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicyBinding": { - "description": "ValidatingAdmissionPolicyBinding binds the ValidatingAdmissionPolicy with paramerized resources. ValidatingAdmissionPolicyBinding and parameter CRDs together define how cluster administrators configure policies for clusters.\n\nFor a given admission request, each binding will cause its policy to be evaluated N times, where N is 1 for policies/bindings that don't use params, otherwise N is the number of parameters selected by the binding.\n\nThe CEL expressions of a policy must have a computed CEL cost below the maximum CEL budget. Each evaluation of the policy is given an independent CEL cost budget. Adding/removing policies, bindings, or params can not affect whether a given (policy, binding, param) combination is within its own CEL budget.", + "com.github.openshift.hive.apis.hive.v1.gcp.PrivateServiceConnectStatus": { + "description": "PrivateServiceConnectStatus contains the observed state for PrivateServiceConnect resources.", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "endpoint": { + "description": "Endpoint is the selfLink of the endpoint created for the cluster.", "type": "string" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "endpointAddress": { + "description": "EndpointAddress is the selfLink of the address created for the cluster endpoint.", "type": "string" }, - "metadata": { - "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "serviceAttachment": { + "description": "ServiceAttachment is the selfLink of the service attachment created for the clsuter.", + "type": "string" }, - "spec": { - "description": "Specification of the desired behavior of the ValidatingAdmissionPolicyBinding.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicyBindingSpec" + "serviceAttachmentFirewall": { + "description": "ServiceAttachmentFirewall is the selfLink of the firewall that allows traffic between the service attachment and the cluster's internal api load balancer.", + "type": "string" + }, + "serviceAttachmentSubnet": { + "description": "ServiceAttachmentSubnet is the selfLink of the subnet that will contain the service attachment.", + "type": "string" } }, "x-fabric8-info": { - "Type": "object", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "ValidatingAdmissionPolicyBinding", - "Scope": "Clustered" + "Type": "nested", + "Group": "", + "Version": "gcp", + "Kind": "PrivateServiceConnectStatus", + "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicyBindingList": { - "description": "ValidatingAdmissionPolicyBindingList is a list of ValidatingAdmissionPolicyBinding.", + "com.github.openshift.hive.apis.hive.v1.gcp.ServiceAttachment": { + "description": "ServiceAttachment configures the service attachment to be used by the cluster", "type": "object", - "required": [ - "items" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "List of PolicyBinding.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicyBinding" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "subnet": { + "description": "Subnet configures the subnetwork that contains the service attachment.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.ServiceAttachmentSubnet" } }, "x-fabric8-info": { - "Type": "list", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "ValidatingAdmissionPolicyBindingList", + "Type": "nested", + "Group": "", + "Version": "gcp", + "Kind": "ServiceAttachment", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicyBindingSpec": { - "description": "ValidatingAdmissionPolicyBindingSpec is the specification of the ValidatingAdmissionPolicyBinding.", + "com.github.openshift.hive.apis.hive.v1.gcp.ServiceAttachmentSubnet": { + "description": "ServiceAttachmentSubnet configures the subnetwork used by the service attachment", "type": "object", "properties": { - "matchResources": { - "description": "MatchResources declares what resources match this binding and will be validated by it. Note that this is intersected with the policy's matchConstraints, so only requests that are matched by the policy can be selected by this. If this is unset, all resources matched by the policy are validated by this binding When resourceRules is unset, it does not constrain resource matching. If a resource is matched by the other fields of this object, it will be validated. Note that this is differs from ValidatingAdmissionPolicy matchConstraints, where resourceRules are required.", - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MatchResources" - }, - "paramRef": { - "description": "paramRef specifies the parameter resource used to configure the admission control policy. It should point to a resource of the type specified in ParamKind of the bound ValidatingAdmissionPolicy. If the policy specifies a ParamKind and the resource referred to by ParamRef does not exist, this binding is considered mis-configured and the FailurePolicy of the ValidatingAdmissionPolicy applied. If the policy does not specify a ParamKind then this field is ignored, and the rules are evaluated without a param.", - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ParamRef" - }, - "policyName": { - "description": "PolicyName references a ValidatingAdmissionPolicy name which the ValidatingAdmissionPolicyBinding binds to. If the referenced resource does not exist, this binding is considered invalid and will be ignored Required.", + "cidr": { + "description": "Cidr specifies the cidr to use when creating a service attachment subnet.", "type": "string" }, - "validationActions": { - "description": "validationActions declares how Validations of the referenced ValidatingAdmissionPolicy are enforced. If a validation evaluates to false it is always enforced according to these actions.\n\nFailures defined by the ValidatingAdmissionPolicy's FailurePolicy are enforced according to these actions only if the FailurePolicy is set to Fail, otherwise the failures are ignored. This includes compilation errors, runtime errors and misconfigurations of the policy.\n\nvalidationActions is declared as a set of action values. Order does not matter. validationActions may not contain duplicates of the same action.\n\nThe supported actions values are:\n\n\"Deny\" specifies that a validation failure results in a denied request.\n\n\"Warn\" specifies that a validation failure is reported to the request client in HTTP Warning headers, with a warning code of 299. Warnings can be sent both for allowed or denied admission responses.\n\n\"Audit\" specifies that a validation failure is included in the published audit event for the request. The audit event will contain a `validation.policy.admission.k8s.io/validation_failure` audit annotation with a value containing the details of the validation failures, formatted as a JSON list of objects, each with the following fields: - message: The validation failure message string - policy: The resource name of the ValidatingAdmissionPolicy - binding: The resource name of the ValidatingAdmissionPolicyBinding - expressionIndex: The index of the failed validations in the ValidatingAdmissionPolicy - validationActions: The enforcement actions enacted for the validation failure Example audit annotation: `\"validation.policy.admission.k8s.io/validation_failure\": \"[{\\\"message\\\": \\\"Invalid value\\\", {\\\"policy\\\": \\\"policy.example.com\\\", {\\\"binding\\\": \\\"policybinding.example.com\\\", {\\\"expressionIndex\\\": \\\"1\\\", {\\\"validationActions\\\": [\\\"Audit\\\"]}]\"`\n\nClients should expect to handle additional values by ignoring any values not recognized.\n\n\"Deny\" and \"Warn\" may not be used together since this combination needlessly duplicates the validation failure both in the API response body and the HTTP warning headers.\n\nRequired.", - "type": "array", - "items": { - "type": "string", - "default": "", - "enum": [ - "Audit", - "Deny", - "Warn" - ] - }, - "x-kubernetes-list-type": "set" + "existing": { + "description": "Existing specifies a pre-existing subnet to use instead of creating a new service attachment subnet. This is required when using BYO VPCs. It must be in the same region as the api-int load balancer, be configured with a purpose of \"Private Service Connect\", and have sufficient routing and firewall rules to access the api-int load balancer.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.ServiceAttachmentSubnetExisting" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "ValidatingAdmissionPolicyBindingSpec", + "Group": "", + "Version": "gcp", + "Kind": "ServiceAttachmentSubnet", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicyList": { - "description": "ValidatingAdmissionPolicyList is a list of ValidatingAdmissionPolicy.", + "com.github.openshift.hive.apis.hive.v1.gcp.ServiceAttachmentSubnetExisting": { + "description": "ServiceAttachmentSubnetExisting describes the existing subnet.", "type": "object", "required": [ - "items" + "name" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "List of ValidatingAdmissionPolicy.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicy" - } + "name": { + "description": "Name specifies the name of the existing subnet.", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "project": { + "description": "Project specifies the project the subnet exists in. This is required for Shared VPC.", "type": "string" - }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "list", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "ValidatingAdmissionPolicyList", + "Type": "nested", + "Group": "", + "Version": "gcp", + "Kind": "ServiceAttachmentSubnetExisting", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicySpec": { - "description": "ValidatingAdmissionPolicySpec is the specification of the desired behavior of the AdmissionPolicy.", + "com.github.openshift.hive.apis.hive.v1.gcp.UserTag": { + "description": "UserTag is a tag to apply to GCP resources created for the cluster.", "type": "object", + "required": [ + "parentID", + "key", + "value" + ], "properties": { - "auditAnnotations": { - "description": "auditAnnotations contains CEL expressions which are used to produce audit annotations for the audit event of the API request. validations and auditAnnotations may not both be empty; a least one of validations or auditAnnotations is required.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.AuditAnnotation" - }, - "x-kubernetes-list-type": "atomic" - }, - "failurePolicy": { - "description": "failurePolicy defines how to handle failures for the admission policy. Failures can occur from CEL expression parse errors, type check errors, runtime errors and invalid or mis-configured policy definitions or bindings.\n\nA policy is invalid if spec.paramKind refers to a non-existent Kind. A binding is invalid if spec.paramRef.name refers to a non-existent resource.\n\nfailurePolicy does not define how validations that evaluate to false are handled.\n\nWhen failurePolicy is set to Fail, ValidatingAdmissionPolicyBinding validationActions define how failures are enforced.\n\nAllowed values are Ignore or Fail. Defaults to Fail.\n\nPossible enum values:\n - `\"Fail\"` means that an error calling the webhook causes the admission to fail.\n - `\"Ignore\"` means that an error calling the webhook is ignored.", + "key": { + "description": "key is the key part of the tag. A tag key can have a maximum of 63 characters and cannot be empty. Tag key must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `._-`.", "type": "string", - "enum": [ - "Fail", - "Ignore" - ] - }, - "matchConditions": { - "description": "MatchConditions is a list of conditions that must be met for a request to be validated. Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed.\n\nIf a parameter object is provided, it can be accessed via the `params` handle in the same manner as validation expressions.\n\nThe exact matching logic is (in order):\n 1. If ANY matchCondition evaluates to FALSE, the policy is skipped.\n 2. If ALL matchConditions evaluate to TRUE, the policy is evaluated.\n 3. If any matchCondition evaluates to an error (but none are FALSE):\n - If failurePolicy=Fail, reject the request\n - If failurePolicy=Ignore, the policy is skipped", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MatchCondition" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" - }, - "matchConstraints": { - "description": "MatchConstraints specifies what resources this policy is designed to validate. The AdmissionPolicy cares about a request if it matches _all_ Constraints. However, in order to prevent clusters from being put into an unstable state that cannot be recovered from via the API ValidatingAdmissionPolicy cannot match ValidatingAdmissionPolicy and ValidatingAdmissionPolicyBinding. Required.", - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MatchResources" - }, - "paramKind": { - "description": "ParamKind specifies the kind of resources used to parameterize this policy. If absent, there are no parameters for this policy and the param CEL variable will not be provided to validation expressions. If ParamKind refers to a non-existent kind, this policy definition is mis-configured and the FailurePolicy is applied. If paramKind is specified but paramRef is unset in ValidatingAdmissionPolicyBinding, the params variable will be null.", - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ParamKind" + "default": "" }, - "validations": { - "description": "Validations contain CEL expressions which is used to apply the validation. Validations and AuditAnnotations may not both be empty; a minimum of one Validations or AuditAnnotations is required.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.Validation" - }, - "x-kubernetes-list-type": "atomic" + "parentID": { + "description": "parentID is the ID of the hierarchical resource where the tags are defined, e.g. at the Organization or the Project level. To find the Organization ID or Project ID refer to the following pages: https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id, https://cloud.google.com/resource-manager/docs/creating-managing-projects#identifying_projects. An OrganizationID must consist of decimal numbers, and cannot have leading zeroes. A ProjectID must be 6 to 30 characters in length, can only contain lowercase letters, numbers, and hyphens, and must start with a letter, and cannot end with a hyphen.", + "type": "string", + "default": "" }, - "variables": { - "description": "Variables contain definitions of variables that can be used in composition of other expressions. Each variable is defined as a named CEL expression. The variables defined here will be available under `variables` in other expressions of the policy except MatchConditions because MatchConditions are evaluated before the rest of the policy.\n\nThe expression of a variable can refer to other variables defined earlier in the list but not those after. Thus, Variables must be sorted by the order of first appearance and acyclic.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.Variable" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" + "value": { + "description": "value is the value part of the tag. A tag value can have a maximum of 63 characters and cannot be empty. Tag value must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `_-.@%=+:,*#\u0026(){}[]` and spaces.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "ValidatingAdmissionPolicySpec", + "Group": "", + "Version": "gcp", + "Kind": "UserTag", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicyStatus": { - "description": "ValidatingAdmissionPolicyStatus represents the status of an admission validation policy.", + "com.github.openshift.hive.apis.hive.v1.ibmcloud.BootVolume": { + "description": "BootVolume stores the configuration for an individual machine's boot volume.", "type": "object", "properties": { - "conditions": { - "description": "The conditions represent the latest available observations of a policy's current state.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "observedGeneration": { - "description": "The generation observed by the controller.", - "type": "integer", - "format": "int64" - }, - "typeChecking": { - "description": "The results of type checking for each expression. Presence of this field indicates the completion of the type checking.", - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.TypeChecking" + "encryptionKey": { + "description": "EncryptionKey is the CRN referencing a Key Protect or Hyper Protect Crypto Services key to use for volume encryption. If not specified, a provider managed encryption key will be used.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "ValidatingAdmissionPolicyStatus", + "Group": "", + "Version": "ibmcloud", + "Kind": "BootVolume", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.ValidatingWebhook": { - "description": "ValidatingWebhook describes an admission webhook and the resources and operations it applies to.", + "com.github.openshift.hive.apis.hive.v1.ibmcloud.DedicatedHost": { + "description": "DedicatedHost stores the configuration for the machine's dedicated host platform.", "type": "object", - "required": [ - "name", - "clientConfig", - "sideEffects", - "admissionReviewVersions" - ], "properties": { - "admissionReviewVersions": { - "description": "AdmissionReviewVersions is an ordered list of preferred `AdmissionReview` versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "clientConfig": { - "description": "ClientConfig defines how to communicate with the hook. Required", - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.WebhookClientConfig" - }, - "failurePolicy": { - "description": "FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Fail.\n\nPossible enum values:\n - `\"Fail\"` means that an error calling the webhook causes the admission to fail.\n - `\"Ignore\"` means that an error calling the webhook is ignored.", - "type": "string", - "enum": [ - "Fail", - "Ignore" - ] - }, - "matchConditions": { - "description": "MatchConditions is a list of conditions that must be met for a request to be sent to this webhook. Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed.\n\nThe exact matching logic is (in order):\n 1. If ANY matchCondition evaluates to FALSE, the webhook is skipped.\n 2. If ALL matchConditions evaluate to TRUE, the webhook is called.\n 3. If any matchCondition evaluates to an error (but none are FALSE):\n - If failurePolicy=Fail, reject the request\n - If failurePolicy=Ignore, the error is ignored and the webhook is skipped", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MatchCondition" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" - }, - "matchPolicy": { - "description": "matchPolicy defines how the \"rules\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook.\n\nDefaults to \"Equivalent\"\n\nPossible enum values:\n - `\"Equivalent\"` means requests should be sent to the webhook if they modify a resource listed in rules via another API group or version.\n - `\"Exact\"` means requests should only be sent to the webhook if they exactly match a given rule.", - "type": "string", - "enum": [ - "Equivalent", - "Exact" - ] - }, "name": { - "description": "The name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where \"imagepolicy\" is the name of the webhook, and kubernetes.io is the name of the organization. Required.", - "type": "string", - "default": "" - }, - "namespaceSelector": { - "description": "NamespaceSelector decides whether to run the webhook on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the webhook.\n\nFor example, to run the webhook on any objects whose namespace is not associated with \"runlevel\" of \"0\" or \"1\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"runlevel\",\n \"operator\": \"NotIn\",\n \"values\": [\n \"0\",\n \"1\"\n ]\n }\n ]\n}\n\nIf instead you want to only run the webhook on any objects whose namespace is associated with the \"environment\" of \"prod\" or \"staging\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"environment\",\n \"operator\": \"In\",\n \"values\": [\n \"prod\",\n \"staging\"\n ]\n }\n ]\n}\n\nSee https://kubernetes.io/docs/concepts/overview/working-with-objects/labels for more examples of label selectors.\n\nDefault to the empty LabelSelector, which matches everything.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "objectSelector": { - "description": "ObjectSelector decides whether to run the webhook based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the webhook, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "rules": { - "description": "Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks from putting the cluster in a state which cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.RuleWithOperations" - }, - "x-kubernetes-list-type": "atomic" - }, - "sideEffects": { - "description": "SideEffects states whether this webhook has side effects. Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1 may also specify Some or Unknown). Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some.\n\nPossible enum values:\n - `\"None\"` means that calling the webhook will have no side effects.\n - `\"NoneOnDryRun\"` means that calling the webhook will possibly have side effects, but if the request being reviewed has the dry-run attribute, the side effects will be suppressed.\n - `\"Some\"` means that calling the webhook will possibly have side effects. If a request with the dry-run attribute would trigger a call to this webhook, the request will instead fail.\n - `\"Unknown\"` means that no information is known about the side effects of calling the webhook. If a request with the dry-run attribute would trigger a call to this webhook, the request will instead fail.", - "type": "string", - "enum": [ - "None", - "NoneOnDryRun", - "Some", - "Unknown" - ] + "description": "Name is the name of the dedicated host to provision the machine on. If specified, machines will be created on pre-existing dedicated host.", + "type": "string" }, - "timeoutSeconds": { - "description": "TimeoutSeconds specifies the timeout for this webhook. After the timeout passes, the webhook call will be ignored or the API call will fail based on the failure policy. The timeout value must be between 1 and 30 seconds. Default to 10 seconds.", - "type": "integer", - "format": "int32" + "profile": { + "description": "Profile is the profile ID for the dedicated host. If specified, new dedicated host will be created for machines.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "ValidatingWebhook", + "Group": "", + "Version": "ibmcloud", + "Kind": "DedicatedHost", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.ValidatingWebhookConfiguration": { - "description": "ValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it.", + "com.github.openshift.hive.apis.hive.v1.ibmcloud.MachinePool": { + "description": "MachinePool stores the configuration for a machine pool installed on IBM Cloud.", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "bootVolume": { + "description": "BootVolume is the configuration for the machine's boot volume.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.ibmcloud.BootVolume" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "dedicatedHosts": { + "description": "DedicatedHosts is the configuration for the machine's dedicated host and profile.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.ibmcloud.DedicatedHost" + } }, - "metadata": { - "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "type": { + "description": "InstanceType is the VSI machine profile.", + "type": "string" }, - "webhooks": { - "description": "Webhooks is a list of webhooks and the affected resources and operations.", + "zones": { + "description": "Zones is the list of availability zones used for machines in the pool.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhook" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" + "type": "string", + "default": "" + } } }, "x-fabric8-info": { - "Type": "object", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "ValidatingWebhookConfiguration", - "Scope": "Clustered" + "Type": "nested", + "Group": "", + "Version": "ibmcloud", + "Kind": "MachinePool", + "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.ValidatingWebhookConfigurationList": { - "description": "ValidatingWebhookConfigurationList is a list of ValidatingWebhookConfiguration.", + "com.github.openshift.hive.apis.hive.v1.ibmcloud.Platform": { + "description": "Platform stores all the global configuration that all machinesets use.", "type": "object", "required": [ - "items" + "credentialsSecretRef", + "region" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "accountID": { + "description": "AccountID is the IBM Cloud Account ID. AccountID is DEPRECATED and is gathered via the IBM Cloud API for the provided credentials. This field will be ignored.", "type": "string" }, - "items": { - "description": "List of ValidatingWebhookConfiguration.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhookConfiguration" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "cisInstanceCRN": { + "description": "CISInstanceCRN is the IBM Cloud Internet Services Instance CRN CISInstanceCRN is DEPRECATED and gathered via the IBM Cloud API for the provided credentials and cluster deployment base domain. This field will be ignored.", "type": "string" }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "credentialsSecretRef": { + "description": "CredentialsSecretRef refers to a secret that contains IBM Cloud account access credentials.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "region": { + "description": "Region specifies the IBM Cloud region where the cluster will be created.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "list", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "ValidatingWebhookConfigurationList", + "Type": "nested", + "Group": "", + "Version": "ibmcloud", + "Kind": "Platform", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.Validation": { - "description": "Validation specifies the CEL expression which is used to apply the validation.", + "com.github.openshift.hive.apis.hive.v1.metricsconfig.MetricsConfig": { "type": "object", - "required": [ - "expression" - ], "properties": { - "expression": { - "description": "Expression represents the expression which will be evaluated by CEL. ref: https://github.com/google/cel-spec CEL expressions have access to the contents of the API request/response, organized into CEL variables as well as some other useful variables:\n\n- 'object' - The object from the incoming request. The value is null for DELETE requests. - 'oldObject' - The existing object. The value is null for CREATE requests. - 'request' - Attributes of the API request([ref](/pkg/apis/admission/types.go#AdmissionRequest)). - 'params' - Parameter resource referred to by the policy binding being evaluated. Only populated if the policy has a ParamKind. - 'namespaceObject' - The namespace object that the incoming object belongs to. The value is null for cluster-scoped resources. - 'variables' - Map of composited variables, from its name to its lazily evaluated value.\n For example, a variable named 'foo' can be accessed as 'variables.foo'.\n- 'authorizer' - A CEL Authorizer. May be used to perform authorization checks for the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n- 'authorizer.requestResource' - A CEL ResourceCheck constructed from the 'authorizer' and configured with the\n request resource.\n\nThe `apiVersion`, `kind`, `metadata.name` and `metadata.generateName` are always accessible from the root of the object. No other metadata properties are accessible.\n\nOnly property names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*` are accessible. Accessible property names are escaped according to the following rules when accessed in the expression: - '__' escapes to '__underscores__' - '.' escapes to '__dot__' - '-' escapes to '__dash__' - '/' escapes to '__slash__' - Property names that exactly match a CEL RESERVED keyword escape to '__{keyword}__'. The keywords are:\n\t \"true\", \"false\", \"null\", \"in\", \"as\", \"break\", \"const\", \"continue\", \"else\", \"for\", \"function\", \"if\",\n\t \"import\", \"let\", \"loop\", \"package\", \"namespace\", \"return\".\nExamples:\n - Expression accessing a property named \"namespace\": {\"Expression\": \"object.__namespace__ \u003e 0\"}\n - Expression accessing a property named \"x-prop\": {\"Expression\": \"object.x__dash__prop \u003e 0\"}\n - Expression accessing a property named \"redact__d\": {\"Expression\": \"object.redact__underscores__d \u003e 0\"}\n\nEquality on arrays with list type of 'set' or 'map' ignores element order, i.e. [1, 2] == [2, 1]. Concatenation on arrays with x-kubernetes-list-type use the semantics of the list type:\n - 'set': `X + Y` performs a union where the array positions of all elements in `X` are preserved and\n non-intersecting elements in `Y` are appended, retaining their partial order.\n - 'map': `X + Y` performs a merge where the array positions of all keys in `X` are preserved but the values\n are overwritten by values in `Y` when the key sets of `X` and `Y` intersect. Elements in `Y` with\n non-intersecting keys are appended, retaining their partial order.\nRequired.", - "type": "string", - "default": "" - }, - "message": { - "description": "Message represents the message displayed when validation fails. The message is required if the Expression contains line breaks. The message must not contain line breaks. If unset, the message is \"failed rule: {Rule}\". e.g. \"must be a URL with the host matching spec.host\" If the Expression contains line breaks. Message is required. The message must not contain line breaks. If unset, the message is \"failed Expression: {Expression}\".", - "type": "string" - }, - "messageExpression": { - "description": "messageExpression declares a CEL expression that evaluates to the validation failure message that is returned when this rule fails. Since messageExpression is used as a failure message, it must evaluate to a string. If both message and messageExpression are present on a validation, then messageExpression will be used if validation fails. If messageExpression results in a runtime error, the runtime error is logged, and the validation failure message is produced as if the messageExpression field were unset. If messageExpression evaluates to an empty string, a string with only spaces, or a string that contains line breaks, then the validation failure message will also be produced as if the messageExpression field were unset, and the fact that messageExpression produced an empty string/string with only spaces/string with line breaks will be logged. messageExpression has access to all the same variables as the `expression` except for 'authorizer' and 'authorizer.requestResource'. Example: \"object.x must be less than max (\"+string(params.max)+\")\"", - "type": "string" + "additionalClusterDeploymentLabels": { + "description": "AdditionalClusterDeploymentLabels allows configuration of additional labels to be applied to certain metrics. The keys can be any string value suitable for a metric label (see https://prometheus.io/docs/concepts/data_model/#metric-names-and-labels). The values can be any ClusterDeployment label key (from metadata.labels). When observing an affected metric, hive will label it with the specified metric key, and copy the value from the specified ClusterDeployment label. For example, including {\"ocp_major_version\": \"hive.openshift.io/version-major\"} will cause affected metrics to include a label key ocp_major_version with the value from the hive.openshift.io/version-major ClusterDeployment label -- e.g. \"4\". NOTE: Avoid ClusterDeployment labels whose values are unbounded, such as those representing cluster names or IDs, as these will cause your prometheus database to grow indefinitely. Affected metrics are those whose type implements the metricsWithDynamicLabels interface found in pkg/controller/metrics/metrics_with_dynamic_labels.go", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } }, - "reason": { - "description": "Reason represents a machine-readable description of why this validation failed. If this is the first validation in the list to fail, this reason, as well as the corresponding HTTP response code, are used in the HTTP response to the client. The currently supported reasons are: \"Unauthorized\", \"Forbidden\", \"Invalid\", \"RequestEntityTooLarge\". If not set, StatusReasonInvalid is used in the response to the client.", - "type": "string" + "metricsWithDuration": { + "description": "Optional metrics and their configurations", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.metricsconfig.MetricsWithDuration" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "Validation", + "Group": "", + "Version": "metricsconfig", + "Kind": "MetricsConfig", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1.Variable": { - "description": "Variable is the definition of a variable that is used for composition. A variable is defined as a named expression.", + "com.github.openshift.hive.apis.hive.v1.metricsconfig.MetricsWithDuration": { + "description": "MetricsWithDuration represents metrics that report time as values,like transition seconds. The purpose of these metrics should be to track outliers - ensure their duration is not set too low.", "type": "object", "required": [ "name", - "expression" + "duration" ], "properties": { - "expression": { - "description": "Expression is the expression that will be evaluated as the value of the variable. The CEL expression has access to the same identifiers as the CEL expressions in Validation.", - "type": "string", - "default": "" + "duration": { + "description": "Duration is the minimum time taken - the relevant metric will be logged only if the value reported by that metric is more than the time mentioned here. For example, if a user opts-in for current clusters stopping and mentions 1 hour here, only the clusters stopping for more than an hour will be reported. This is a Duration value; see https://pkg.go.dev/time#ParseDuration for accepted formats.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" }, "name": { - "description": "Name is the name of the variable. The name must be a valid CEL identifier and unique among all variables. The variable can be accessed in other expressions through `variables` For example, if name is \"foo\", the variable will be available as `variables.foo`", + "description": "Name of the metric. It will correspond to an optional relevant metric in hive", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "Variable", + "Group": "", + "Version": "metricsconfig", + "Kind": "MetricsWithDuration", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.admissionregistration.v1.WebhookClientConfig": { - "description": "WebhookClientConfig contains the information to make a TLS connection with the webhook", + "com.github.openshift.hive.apis.hive.v1.none.Platform": { + "description": "Platform defines agent based install configuration for platform-agnostic clusters. Can only be used with spec.installStrategy.agent.", "type": "object", - "properties": { - "caBundle": { - "description": "`caBundle` is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.", - "type": "string", - "format": "byte" - }, - "service": { - "description": "`service` is a reference to the service for this webhook. Either `service` or `url` must be specified.\n\nIf the webhook is running within the cluster, then you should use `service`.", - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ServiceReference" - }, - "url": { - "description": "`url` gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.\n\nThe `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.\n\nPlease note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster.\n\nThe scheme must be \"https\"; the URL must begin with \"https://\".\n\nA path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.\n\nAttempting to use a user or basic auth e.g. \"user:password@\" is not allowed. Fragments (\"#...\") and query parameters (\"?...\") are not allowed, either.", - "type": "string" - } - }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1", - "Kind": "WebhookClientConfig", + "Group": "", + "Version": "none", + "Kind": "Platform", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1alpha1.AuditAnnotation": { - "description": "AuditAnnotation describes how to produce an audit annotation for an API request.", + "com.github.openshift.hive.apis.hive.v1.openstack.MachinePool": { + "description": "MachinePool stores the configuration for a machine pool installed on OpenStack.", "type": "object", "required": [ - "key", - "valueExpression" + "flavor" ], "properties": { - "key": { - "description": "key specifies the audit annotation key. The audit annotation keys of a ValidatingAdmissionPolicy must be unique. The key must be a qualified name ([A-Za-z0-9][-A-Za-z0-9_.]*) no more than 63 bytes in length.\n\nThe key is combined with the resource name of the ValidatingAdmissionPolicy to construct an audit annotation key: \"{ValidatingAdmissionPolicy name}/{key}\".\n\nIf an admission webhook uses the same resource name as this ValidatingAdmissionPolicy and the same audit annotation key, the annotation key will be identical. In this case, the first annotation written with the key will be included in the audit event and all subsequent annotations with the same key will be discarded.\n\nRequired.", + "flavor": { + "description": "Flavor defines the OpenStack Nova flavor. eg. m1.large The json key here differs from the installer which uses both \"computeFlavor\" and type \"type\" depending on which type you're looking at, and the resulting field on the MachineSet is \"flavor\". We are opting to stay consistent with the end result.", "type": "string", "default": "" }, - "valueExpression": { - "description": "valueExpression represents the expression which is evaluated by CEL to produce an audit annotation value. The expression must evaluate to either a string or null value. If the expression evaluates to a string, the audit annotation is included with the string value. If the expression evaluates to null or empty string the audit annotation will be omitted. The valueExpression may be no longer than 5kb in length. If the result of the valueExpression is more than 10kb in length, it will be truncated to 10kb.\n\nIf multiple ValidatingAdmissionPolicyBinding resources match an API request, then the valueExpression will be evaluated for each binding. All unique values produced by the valueExpressions will be joined together in a comma-separated list.\n\nRequired.", - "type": "string", - "default": "" + "rootVolume": { + "description": "RootVolume defines the root volume for instances in the machine pool. The instances use ephemeral disks if not set.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.openstack.RootVolume" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1alpha1", - "Kind": "AuditAnnotation", + "Group": "", + "Version": "openstack", + "Kind": "MachinePool", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1alpha1.ExpressionWarning": { - "description": "ExpressionWarning is a warning information that targets a specific expression.", + "com.github.openshift.hive.apis.hive.v1.openstack.Platform": { + "description": "Platform stores all the global OpenStack configuration", "type": "object", "required": [ - "fieldRef", - "warning" + "credentialsSecretRef", + "cloud" ], "properties": { - "fieldRef": { - "description": "The path to the field that refers the expression. For example, the reference to the expression of the first item of validations is \"spec.validations[0].expression\"", - "type": "string", - "default": "" + "certificatesSecretRef": { + "description": "CertificatesSecretRef refers to a secret that contains CA certificates necessary for communicating with the OpenStack. There is additional configuration required for the OpenShift cluster to trust the certificates provided in this secret. The \"clouds.yaml\" file included in the credentialsSecretRef Secret must also include a reference to the certificate bundle file for the OpenShift cluster being created to trust the OpenStack endpoints. The \"clouds.yaml\" file must set the \"cacert\" field to either \"/etc/openstack-ca/\u003ckey name containing the trust bundle in credentialsSecretRef Secret\u003e\" or \"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\".\n\nFor example, \"\"\"clouds.yaml clouds:\n shiftstack:\n auth: ...\n cacert: \"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\"\n\"\"\"", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "warning": { - "description": "The content of type checking information in a human-readable form. Each line of the warning contains the type that the expression is checked against, followed by the type check error from the compiler.", + "cloud": { + "description": "Cloud will be used to indicate the OS_CLOUD value to use the right section from the clouds.yaml in the CredentialsSecretRef.", "type": "string", "default": "" + }, + "credentialsSecretRef": { + "description": "CredentialsSecretRef refers to a secret that contains the OpenStack account access credentials.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "trunkSupport": { + "description": "TrunkSupport indicates whether or not to use trunk ports in your OpenShift cluster.", + "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1alpha1", - "Kind": "ExpressionWarning", + "Group": "", + "Version": "openstack", + "Kind": "Platform", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1alpha1.MatchCondition": { + "com.github.openshift.hive.apis.hive.v1.openstack.RootVolume": { + "description": "RootVolume defines the storage for an instance.", "type": "object", "required": [ - "name", - "expression" + "size", + "type" ], "properties": { - "expression": { - "description": "Expression represents the expression which will be evaluated by CEL. Must evaluate to bool. CEL expressions have access to the contents of the AdmissionRequest and Authorizer, organized into CEL variables:\n\n'object' - The object from the incoming request. The value is null for DELETE requests. 'oldObject' - The existing object. The value is null for CREATE requests. 'request' - Attributes of the admission request(/pkg/apis/admission/types.go#AdmissionRequest). 'authorizer' - A CEL Authorizer. May be used to perform authorization checks for the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n'authorizer.requestResource' - A CEL ResourceCheck constructed from the 'authorizer' and configured with the\n request resource.\nDocumentation on CEL: https://kubernetes.io/docs/reference/using-api/cel/\n\nRequired.", - "type": "string", - "default": "" + "size": { + "description": "Size defines the size of the volume in gibibytes (GiB). Required", + "type": "integer", + "format": "int32", + "default": 0 }, - "name": { - "description": "Name is an identifier for this match condition, used for strategic merging of MatchConditions, as well as providing an identifier for logging purposes. A good name should be descriptive of the associated expression. Name must be a qualified name consisting of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character (e.g. 'MyName', or 'my.name', or '123-abc', regex used for validation is '([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9]') with an optional DNS subdomain prefix and '/' (e.g. 'example.com/MyName')\n\nRequired.", + "type": { + "description": "Type defines the type of the volume. Required", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1alpha1", - "Kind": "MatchCondition", + "Group": "", + "Version": "openstack", + "Kind": "RootVolume", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1alpha1.MatchResources": { - "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)", + "com.github.openshift.hive.apis.hive.v1.ovirt.CPU": { + "description": "CPU defines the VM cpu, made of (Sockets * Cores).", "type": "object", + "required": [ + "sockets", + "cores" + ], "properties": { - "excludeResourceRules": { - "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.NamedRuleWithOperations" - }, - "x-kubernetes-list-type": "atomic" - }, - "matchPolicy": { - "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"\n\nPossible enum values:\n - `\"Equivalent\"` means requests should be sent to the webhook if they modify a resource listed in rules via another API group or version.\n - `\"Exact\"` means requests should only be sent to the webhook if they exactly match a given rule.", - "type": "string", - "enum": [ - "Equivalent", - "Exact" - ] - }, - "namespaceSelector": { - "description": "NamespaceSelector decides whether to run the admission control policy on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the policy.\n\nFor example, to run the webhook on any objects whose namespace is not associated with \"runlevel\" of \"0\" or \"1\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"runlevel\",\n \"operator\": \"NotIn\",\n \"values\": [\n \"0\",\n \"1\"\n ]\n }\n ]\n}\n\nIf instead you want to only run the policy on any objects whose namespace is associated with the \"environment\" of \"prod\" or \"staging\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"environment\",\n \"operator\": \"In\",\n \"values\": [\n \"prod\",\n \"staging\"\n ]\n }\n ]\n}\n\nSee https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ for more examples of label selectors.\n\nDefault to the empty LabelSelector, which matches everything.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "objectSelector": { - "description": "ObjectSelector decides whether to run the validation based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the cel validation, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "cores": { + "description": "Cores is the number of cores per socket. Total CPUs is (Sockets * Cores)", + "type": "integer", + "format": "int32", + "default": 0 }, - "resourceRules": { - "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.NamedRuleWithOperations" - }, - "x-kubernetes-list-type": "atomic" + "sockets": { + "description": "Sockets is the number of sockets for a VM. Total CPUs is (Sockets * Cores)", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1alpha1", - "Kind": "MatchResources", + "Group": "", + "Version": "ovirt", + "Kind": "CPU", "Scope": "Namespaced" + } + }, + "com.github.openshift.hive.apis.hive.v1.ovirt.Disk": { + "description": "Disk defines a VM disk", + "type": "object", + "required": [ + "sizeGB" + ], + "properties": { + "sizeGB": { + "description": "SizeGB size of the bootable disk in GiB.", + "type": "integer", + "format": "int64", + "default": 0 + } }, - "x-kubernetes-map-type": "atomic" + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "ovirt", + "Kind": "Disk", + "Scope": "Namespaced" + } }, - "io.k8s.api.admissionregistration.v1alpha1.NamedRuleWithOperations": { - "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.", + "com.github.openshift.hive.apis.hive.v1.ovirt.MachinePool": { + "description": "MachinePool stores the configuration for a machine pool installed on ovirt.", "type": "object", "properties": { - "apiGroups": { - "description": "APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "apiVersions": { - "description": "APIVersions is the API versions the resources belong to. '*' is all versions. If '*' is present, the length of the slice must be one. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "operations": { - "description": "Operations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and any future admission operations that are added. If '*' is present, the length of the slice must be one. Required.", - "type": "array", - "items": { - "type": "string", - "default": "", - "enum": [ - "*", - "CONNECT", - "CREATE", - "DELETE", - "UPDATE" - ] - }, - "x-kubernetes-list-type": "atomic" + "cpu": { + "description": "CPU defines the VM CPU.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.ovirt.CPU" }, - "resourceNames": { - "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "memoryMB": { + "description": "MemoryMB is the size of a VM's memory in MiBs.", + "type": "integer", + "format": "int32" }, - "resources": { - "description": "Resources is a list of resources this rule applies to.\n\nFor example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources.\n\nIf wildcard is present, the validation rule will ensure resources do not overlap with each other.\n\nDepending on the enclosing object, subresources might not be allowed. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "osDisk": { + "description": "OSDisk is the the root disk of the node.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.ovirt.Disk" }, - "scope": { - "description": "scope specifies the scope of this rule. Valid values are \"Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. \"Namespaced\" means that only namespaced resources will match this rule. \"*\" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is \"*\".", + "vmType": { + "description": "VMType defines the workload type of the VM.", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1alpha1", - "Kind": "NamedRuleWithOperations", + "Group": "", + "Version": "ovirt", + "Kind": "MachinePool", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.admissionregistration.v1alpha1.ParamKind": { - "description": "ParamKind is a tuple of Group Kind and Version.", + "com.github.openshift.hive.apis.hive.v1.ovirt.Platform": { + "description": "Platform stores all the global oVirt configuration", "type": "object", + "required": [ + "ovirt_cluster_id", + "credentialsSecretRef", + "certificatesSecretRef", + "storage_domain_id" + ], "properties": { - "apiVersion": { - "description": "APIVersion is the API group version the resources belong to. In format of \"group/version\". Required.", - "type": "string" + "certificatesSecretRef": { + "description": "CertificatesSecretRef refers to a secret that contains the oVirt CA certificates necessary for communicating with oVirt.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "kind": { - "description": "Kind is the API kind the resources belong to. Required.", + "credentialsSecretRef": { + "description": "CredentialsSecretRef refers to a secret that contains the oVirt account access credentials with fields: ovirt_url, ovirt_username, ovirt_password, ovirt_ca_bundle", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "ovirt_cluster_id": { + "description": "The target cluster under which all VMs will run", + "type": "string", + "default": "" + }, + "ovirt_network_name": { + "description": "The target network of all the network interfaces of the nodes. Omitting defaults to ovirtmgmt network which is a default network for evert ovirt cluster.", "type": "string" + }, + "storage_domain_id": { + "description": "The target storage domain under which all VM disk would be created.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1alpha1", - "Kind": "ParamKind", + "Group": "", + "Version": "ovirt", + "Kind": "Platform", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.admissionregistration.v1alpha1.ParamRef": { - "description": "ParamRef describes how to locate the params to be used as input to expressions of rules applied by a policy binding.", + "com.github.openshift.hive.apis.hive.v1.vsphere.MachinePool": { + "description": "MachinePool stores the configuration for a machine pool installed on vSphere.", "type": "object", + "required": [ + "cpus", + "coresPerSocket", + "memoryMB", + "osDisk" + ], "properties": { - "name": { - "description": "`name` is the name of the resource being referenced.\n\n`name` and `selector` are mutually exclusive properties. If one is set, the other must be unset.", - "type": "string" + "coresPerSocket": { + "description": "NumCoresPerSocket is the number of cores per socket in a vm. The number of vCPUs on the vm will be NumCPUs/NumCoresPerSocket.", + "type": "integer", + "format": "int32", + "default": 0 }, - "namespace": { - "description": "namespace is the namespace of the referenced resource. Allows limiting the search for params to a specific namespace. Applies to both `name` and `selector` fields.\n\nA per-namespace parameter may be used by specifying a namespace-scoped `paramKind` in the policy and leaving this field empty.\n\n- If `paramKind` is cluster-scoped, this field MUST be unset. Setting this field results in a configuration error.\n\n- If `paramKind` is namespace-scoped, the namespace of the object being evaluated for admission will be used when this field is left unset. Take care that if this is left empty the binding must not match any cluster-scoped resources, which will result in an error.", - "type": "string" + "cpus": { + "description": "NumCPUs is the total number of virtual processor cores to assign a vm.", + "type": "integer", + "format": "int32", + "default": 0 }, - "parameterNotFoundAction": { - "description": "`parameterNotFoundAction` controls the behavior of the binding when the resource exists, and name or selector is valid, but there are no parameters matched by the binding. If the value is set to `Allow`, then no matched parameters will be treated as successful validation by the binding. If set to `Deny`, then no matched parameters will be subject to the `failurePolicy` of the policy.\n\nAllowed values are `Allow` or `Deny` Default to `Deny`\n\nPossible enum values:\n - `\"Allow\"` Ignore means that an error finding params for a binding is ignored\n - `\"Deny\"` Fail means that an error finding params for a binding is ignored", - "type": "string", - "enum": [ - "Allow", - "Deny" - ] + "memoryMB": { + "description": "Memory is the size of a VM's memory in MB.", + "type": "integer", + "format": "int64", + "default": 0 }, - "selector": { - "description": "selector can be used to match multiple param objects based on their labels. Supply selector: {} to match all resources of the ParamKind.\n\nIf multiple params are found, they are all evaluated with the policy expressions and the results are ANDed together.\n\nOne of `name` or `selector` must be set, but `name` and `selector` are mutually exclusive properties. If one is set, the other must be unset.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "osDisk": { + "description": "OSDisk defines the storage for instance.", + "default": {}, + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.vsphere.OSDisk" + }, + "resourcePool": { + "description": "ResourcePool is the name of the resource pool that will be used for virtual machines. If it is not present, a default value will be used.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1alpha1", - "Kind": "ParamRef", + "Group": "", + "Version": "vsphere", + "Kind": "MachinePool", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.admissionregistration.v1alpha1.TypeChecking": { - "description": "TypeChecking contains results of type checking the expressions in the ValidatingAdmissionPolicy", + "com.github.openshift.hive.apis.hive.v1.vsphere.OSDisk": { + "description": "OSDisk defines the disk for a virtual machine.", "type": "object", + "required": [ + "diskSizeGB" + ], "properties": { - "expressionWarnings": { - "description": "The type checking warnings for each expression.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.ExpressionWarning" - }, - "x-kubernetes-list-type": "atomic" + "diskSizeGB": { + "description": "DiskSizeGB defines the size of disk in GB.", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1alpha1", - "Kind": "TypeChecking", + "Group": "", + "Version": "vsphere", + "Kind": "OSDisk", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicy": { - "description": "ValidatingAdmissionPolicy describes the definition of an admission validation policy that accepts or rejects an object without changing it.", + "com.github.openshift.hive.apis.hive.v1.vsphere.Platform": { + "description": "Platform stores any global configuration used for vSphere platforms.", "type": "object", + "required": [ + "vCenter", + "credentialsSecretRef", + "certificatesSecretRef", + "datacenter", + "defaultDatastore" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "certificatesSecretRef": { + "description": "CertificatesSecretRef refers to a secret that contains the vSphere CA certificates necessary for communicating with the VCenter.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "cluster": { + "description": "Cluster is the name of the cluster virtual machines will be cloned into.", "type": "string" }, - "metadata": { - "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.", + "credentialsSecretRef": { + "description": "CredentialsSecretRef refers to a secret that contains the vSphere account access credentials: GOVC_USERNAME, GOVC_PASSWORD fields.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "spec": { - "description": "Specification of the desired behavior of the ValidatingAdmissionPolicy.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicySpec" + "datacenter": { + "description": "Datacenter is the name of the datacenter to use in the vCenter.", + "type": "string", + "default": "" }, - "status": { - "description": "The status of the ValidatingAdmissionPolicy, including warnings that are useful to determine if the policy behaves in the expected way. Populated by the system. Read-only.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyStatus" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "admissionregistration.k8s.io", - "Version": "v1alpha1", - "Kind": "ValidatingAdmissionPolicy", - "Scope": "Clustered" - } - }, - "io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyBinding": { - "description": "ValidatingAdmissionPolicyBinding binds the ValidatingAdmissionPolicy with paramerized resources. ValidatingAdmissionPolicyBinding and parameter CRDs together define how cluster administrators configure policies for clusters.\n\nFor a given admission request, each binding will cause its policy to be evaluated N times, where N is 1 for policies/bindings that don't use params, otherwise N is the number of parameters selected by the binding.\n\nThe CEL expressions of a policy must have a computed CEL cost below the maximum CEL budget. Each evaluation of the policy is given an independent CEL cost budget. Adding/removing policies, bindings, or params can not affect whether a given (policy, binding, param) combination is within its own CEL budget.", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "defaultDatastore": { + "description": "DefaultDatastore is the default datastore to use for provisioning volumes.", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "folder": { + "description": "Folder is the name of the folder that will be used and/or created for virtual machines.", "type": "string" }, - "metadata": { - "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "network": { + "description": "Network specifies the name of the network to be used by the cluster.", + "type": "string" }, - "spec": { - "description": "Specification of the desired behavior of the ValidatingAdmissionPolicyBinding.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyBindingSpec" + "vCenter": { + "description": "VCenter is the domain name or IP address of the vCenter.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "admissionregistration.k8s.io", - "Version": "v1alpha1", - "Kind": "ValidatingAdmissionPolicyBinding", - "Scope": "Clustered" + "Type": "nested", + "Group": "", + "Version": "vsphere", + "Kind": "Platform", + "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyBindingList": { - "description": "ValidatingAdmissionPolicyBindingList is a list of ValidatingAdmissionPolicyBinding.", + "io.k8s.api.admission.v1.AdmissionRequest": { + "description": "AdmissionRequest describes the admission.Attributes for the admission request.", "type": "object", "required": [ - "items" + "uid", + "kind", + "resource", + "operation", + "userInfo" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "dryRun": { + "description": "DryRun indicates that modifications will definitely not be persisted for this request. Defaults to false.", + "type": "boolean" + }, + "kind": { + "description": "Kind is the fully-qualified type of object being submitted (for example, v1.Pod or autoscaling.v1.Scale)", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind" + }, + "name": { + "description": "Name is the name of the object as presented in the request. On a CREATE operation, the client may omit name and rely on the server to generate the name. If that is the case, this field will contain an empty string.", "type": "string" }, - "items": { - "description": "List of PolicyBinding.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyBinding" - } + "namespace": { + "description": "Namespace is the namespace associated with the request (if any).", + "type": "string" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "object": { + "description": "Object is the object from the incoming request.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + }, + "oldObject": { + "description": "OldObject is the existing object. Only populated for DELETE and UPDATE requests.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + }, + "operation": { + "description": "Operation is the operation being performed. This may be different than the operation requested. e.g. a patch can result in either a CREATE or UPDATE Operation.", + "type": "string", + "default": "" + }, + "options": { + "description": "Options is the operation option structure of the operation being performed. e.g. `meta.k8s.io/v1.DeleteOptions` or `meta.k8s.io/v1.CreateOptions`. This may be different than the options the caller provided. e.g. for a patch request the performed Operation might be a CREATE, in which case the Options will a `meta.k8s.io/v1.CreateOptions` even though the caller provided `meta.k8s.io/v1.PatchOptions`.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + }, + "requestKind": { + "description": "RequestKind is the fully-qualified type of the original API request (for example, v1.Pod or autoscaling.v1.Scale). If this is specified and differs from the value in \"kind\", an equivalent match and conversion was performed.\n\nFor example, if deployments can be modified via apps/v1 and apps/v1beta1, and a webhook registered a rule of `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]` and `matchPolicy: Equivalent`, an API request to apps/v1beta1 deployments would be converted and sent to the webhook with `kind: {group:\"apps\", version:\"v1\", kind:\"Deployment\"}` (matching the rule the webhook registered for), and `requestKind: {group:\"apps\", version:\"v1beta1\", kind:\"Deployment\"}` (indicating the kind of the original API request).\n\nSee documentation for the \"matchPolicy\" field in the webhook configuration type for more details.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind" + }, + "requestResource": { + "description": "RequestResource is the fully-qualified resource of the original API request (for example, v1.pods). If this is specified and differs from the value in \"resource\", an equivalent match and conversion was performed.\n\nFor example, if deployments can be modified via apps/v1 and apps/v1beta1, and a webhook registered a rule of `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]` and `matchPolicy: Equivalent`, an API request to apps/v1beta1 deployments would be converted and sent to the webhook with `resource: {group:\"apps\", version:\"v1\", resource:\"deployments\"}` (matching the resource the webhook registered for), and `requestResource: {group:\"apps\", version:\"v1beta1\", resource:\"deployments\"}` (indicating the resource of the original API request).\n\nSee documentation for the \"matchPolicy\" field in the webhook configuration type.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionResource" + }, + "requestSubResource": { + "description": "RequestSubResource is the name of the subresource of the original API request, if any (for example, \"status\" or \"scale\") If this is specified and differs from the value in \"subResource\", an equivalent match and conversion was performed. See documentation for the \"matchPolicy\" field in the webhook configuration type.", "type": "string" }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "resource": { + "description": "Resource is the fully-qualified resource being requested (for example, v1.pods)", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionResource" + }, + "subResource": { + "description": "SubResource is the subresource being requested, if any (for example, \"status\" or \"scale\")", + "type": "string" + }, + "uid": { + "description": "UID is an identifier for the individual request/response. It allows us to distinguish instances of requests which are otherwise identical (parallel requests, requests when earlier requests did not modify etc) The UID is meant to track the round trip (request/response) between the KAS and the WebHook, not the user request. It is suitable for correlating log entries between the webhook and apiserver, for either auditing or debugging.", + "type": "string", + "default": "" + }, + "userInfo": { + "description": "UserInfo is information about the requesting user", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authentication.v1.UserInfo" } }, "x-fabric8-info": { - "Type": "list", - "Group": "admissionregistration.k8s.io", - "Version": "v1alpha1", - "Kind": "ValidatingAdmissionPolicyBindingList", + "Type": "nested", + "Group": "admission.k8s.io", + "Version": "v1", + "Kind": "AdmissionRequest", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyBindingSpec": { - "description": "ValidatingAdmissionPolicyBindingSpec is the specification of the ValidatingAdmissionPolicyBinding.", + "io.k8s.api.admission.v1.AdmissionResponse": { + "description": "AdmissionResponse describes an admission response.", "type": "object", + "required": [ + "uid", + "allowed" + ], "properties": { - "matchResources": { - "description": "MatchResources declares what resources match this binding and will be validated by it. Note that this is intersected with the policy's matchConstraints, so only requests that are matched by the policy can be selected by this. If this is unset, all resources matched by the policy are validated by this binding When resourceRules is unset, it does not constrain resource matching. If a resource is matched by the other fields of this object, it will be validated. Note that this is differs from ValidatingAdmissionPolicy matchConstraints, where resourceRules are required.", - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.MatchResources" + "allowed": { + "description": "Allowed indicates whether or not the admission request was permitted.", + "type": "boolean", + "default": false }, - "paramRef": { - "description": "paramRef specifies the parameter resource used to configure the admission control policy. It should point to a resource of the type specified in ParamKind of the bound ValidatingAdmissionPolicy. If the policy specifies a ParamKind and the resource referred to by ParamRef does not exist, this binding is considered mis-configured and the FailurePolicy of the ValidatingAdmissionPolicy applied. If the policy does not specify a ParamKind then this field is ignored, and the rules are evaluated without a param.", - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.ParamRef" + "auditAnnotations": { + "description": "AuditAnnotations is an unstructured key value map set by remote admission controller (e.g. error=image-blacklisted). MutatingAdmissionWebhook and ValidatingAdmissionWebhook admission controller will prefix the keys with admission webhook name (e.g. imagepolicy.example.com/error=image-blacklisted). AuditAnnotations will be provided by the admission webhook to add additional context to the audit log for this request.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } }, - "policyName": { - "description": "PolicyName references a ValidatingAdmissionPolicy name which the ValidatingAdmissionPolicyBinding binds to. If the referenced resource does not exist, this binding is considered invalid and will be ignored Required.", + "patch": { + "description": "The patch body. Currently we only support \"JSONPatch\" which implements RFC 6902.", + "type": "string", + "format": "byte" + }, + "patchType": { + "description": "The type of Patch. Currently we only allow \"JSONPatch\".", "type": "string" }, - "validationActions": { - "description": "validationActions declares how Validations of the referenced ValidatingAdmissionPolicy are enforced. If a validation evaluates to false it is always enforced according to these actions.\n\nFailures defined by the ValidatingAdmissionPolicy's FailurePolicy are enforced according to these actions only if the FailurePolicy is set to Fail, otherwise the failures are ignored. This includes compilation errors, runtime errors and misconfigurations of the policy.\n\nvalidationActions is declared as a set of action values. Order does not matter. validationActions may not contain duplicates of the same action.\n\nThe supported actions values are:\n\n\"Deny\" specifies that a validation failure results in a denied request.\n\n\"Warn\" specifies that a validation failure is reported to the request client in HTTP Warning headers, with a warning code of 299. Warnings can be sent both for allowed or denied admission responses.\n\n\"Audit\" specifies that a validation failure is included in the published audit event for the request. The audit event will contain a `validation.policy.admission.k8s.io/validation_failure` audit annotation with a value containing the details of the validation failures, formatted as a JSON list of objects, each with the following fields: - message: The validation failure message string - policy: The resource name of the ValidatingAdmissionPolicy - binding: The resource name of the ValidatingAdmissionPolicyBinding - expressionIndex: The index of the failed validations in the ValidatingAdmissionPolicy - validationActions: The enforcement actions enacted for the validation failure Example audit annotation: `\"validation.policy.admission.k8s.io/validation_failure\": \"[{\\\"message\\\": \\\"Invalid value\\\", {\\\"policy\\\": \\\"policy.example.com\\\", {\\\"binding\\\": \\\"policybinding.example.com\\\", {\\\"expressionIndex\\\": \\\"1\\\", {\\\"validationActions\\\": [\\\"Audit\\\"]}]\"`\n\nClients should expect to handle additional values by ignoring any values not recognized.\n\n\"Deny\" and \"Warn\" may not be used together since this combination needlessly duplicates the validation failure both in the API response body and the HTTP warning headers.\n\nRequired.", + "status": { + "description": "Result contains extra details into why an admission request was denied. This field IS NOT consulted in any way if \"Allowed\" is \"true\".", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" + }, + "uid": { + "description": "UID is an identifier for the individual request/response. This must be copied over from the corresponding AdmissionRequest.", + "type": "string", + "default": "" + }, + "warnings": { + "description": "warnings is a list of warning messages to return to the requesting API client. Warning messages describe a problem the client making the API request should correct or be aware of. Limit warnings to 120 characters if possible. Warnings over 256 characters and large numbers of warnings may be truncated.", "type": "array", "items": { "type": "string", - "default": "", - "enum": [ - "Audit", - "Deny", - "Warn" - ] - }, - "x-kubernetes-list-type": "set" + "default": "" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1alpha1", - "Kind": "ValidatingAdmissionPolicyBindingSpec", + "Group": "admission.k8s.io", + "Version": "v1", + "Kind": "AdmissionResponse", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyList": { - "description": "ValidatingAdmissionPolicyList is a list of ValidatingAdmissionPolicy.", + "io.k8s.api.admission.v1.AdmissionReview": { + "description": "AdmissionReview describes an admission review request/response.", "type": "object", - "required": [ - "items" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "List of ValidatingAdmissionPolicy.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicy" - } - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "request": { + "description": "Request describes the attributes for the admission request.", + "$ref": "#/definitions/io.k8s.api.admission.v1.AdmissionRequest" + }, + "response": { + "description": "Response describes the attributes for the admission response.", + "$ref": "#/definitions/io.k8s.api.admission.v1.AdmissionResponse" } }, "x-fabric8-info": { - "Type": "list", - "Group": "admissionregistration.k8s.io", - "Version": "v1alpha1", - "Kind": "ValidatingAdmissionPolicyList", + "Type": "object", + "Group": "admission.k8s.io", + "Version": "v1", + "Kind": "AdmissionReview", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicySpec": { - "description": "ValidatingAdmissionPolicySpec is the specification of the desired behavior of the AdmissionPolicy.", + "io.k8s.api.admission.v1beta1.AdmissionRequest": { + "description": "AdmissionRequest describes the admission.Attributes for the admission request.", "type": "object", + "required": [ + "uid", + "kind", + "resource", + "operation", + "userInfo" + ], "properties": { - "auditAnnotations": { - "description": "auditAnnotations contains CEL expressions which are used to produce audit annotations for the audit event of the API request. validations and auditAnnotations may not both be empty; a least one of validations or auditAnnotations is required.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.AuditAnnotation" - }, - "x-kubernetes-list-type": "atomic" + "dryRun": { + "description": "DryRun indicates that modifications will definitely not be persisted for this request. Defaults to false.", + "type": "boolean" }, - "failurePolicy": { - "description": "failurePolicy defines how to handle failures for the admission policy. Failures can occur from CEL expression parse errors, type check errors, runtime errors and invalid or mis-configured policy definitions or bindings.\n\nA policy is invalid if spec.paramKind refers to a non-existent Kind. A binding is invalid if spec.paramRef.name refers to a non-existent resource.\n\nfailurePolicy does not define how validations that evaluate to false are handled.\n\nWhen failurePolicy is set to Fail, ValidatingAdmissionPolicyBinding validationActions define how failures are enforced.\n\nAllowed values are Ignore or Fail. Defaults to Fail.\n\nPossible enum values:\n - `\"Fail\"` means that an error calling the webhook causes the admission to fail.\n - `\"Ignore\"` means that an error calling the webhook is ignored.", - "type": "string", - "enum": [ - "Fail", - "Ignore" - ] + "kind": { + "description": "Kind is the fully-qualified type of object being submitted (for example, v1.Pod or autoscaling.v1.Scale)", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind" }, - "matchConditions": { - "description": "MatchConditions is a list of conditions that must be met for a request to be validated. Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed.\n\nIf a parameter object is provided, it can be accessed via the `params` handle in the same manner as validation expressions.\n\nThe exact matching logic is (in order):\n 1. If ANY matchCondition evaluates to FALSE, the policy is skipped.\n 2. If ALL matchConditions evaluate to TRUE, the policy is evaluated.\n 3. If any matchCondition evaluates to an error (but none are FALSE):\n - If failurePolicy=Fail, reject the request\n - If failurePolicy=Ignore, the policy is skipped", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.MatchCondition" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" + "name": { + "description": "Name is the name of the object as presented in the request. On a CREATE operation, the client may omit name and rely on the server to generate the name. If that is the case, this field will contain an empty string.", + "type": "string" }, - "matchConstraints": { - "description": "MatchConstraints specifies what resources this policy is designed to validate. The AdmissionPolicy cares about a request if it matches _all_ Constraints. However, in order to prevent clusters from being put into an unstable state that cannot be recovered from via the API ValidatingAdmissionPolicy cannot match ValidatingAdmissionPolicy and ValidatingAdmissionPolicyBinding. Required.", - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.MatchResources" + "namespace": { + "description": "Namespace is the namespace associated with the request (if any).", + "type": "string" }, - "paramKind": { - "description": "ParamKind specifies the kind of resources used to parameterize this policy. If absent, there are no parameters for this policy and the param CEL variable will not be provided to validation expressions. If ParamKind refers to a non-existent kind, this policy definition is mis-configured and the FailurePolicy is applied. If paramKind is specified but paramRef is unset in ValidatingAdmissionPolicyBinding, the params variable will be null.", - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.ParamKind" + "object": { + "description": "Object is the object from the incoming request.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" }, - "validations": { - "description": "Validations contain CEL expressions which is used to apply the validation. Validations and AuditAnnotations may not both be empty; a minimum of one Validations or AuditAnnotations is required.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.Validation" - }, - "x-kubernetes-list-type": "atomic" + "oldObject": { + "description": "OldObject is the existing object. Only populated for DELETE and UPDATE requests.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" }, - "variables": { - "description": "Variables contain definitions of variables that can be used in composition of other expressions. Each variable is defined as a named CEL expression. The variables defined here will be available under `variables` in other expressions of the policy except MatchConditions because MatchConditions are evaluated before the rest of the policy.\n\nThe expression of a variable can refer to other variables defined earlier in the list but not those after. Thus, Variables must be sorted by the order of first appearance and acyclic.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.Variable" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1alpha1", - "Kind": "ValidatingAdmissionPolicySpec", - "Scope": "Namespaced" - } - }, - "io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyStatus": { - "description": "ValidatingAdmissionPolicyStatus represents the status of a ValidatingAdmissionPolicy.", - "type": "object", - "properties": { - "conditions": { - "description": "The conditions represent the latest available observations of a policy's current state.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" + "operation": { + "description": "Operation is the operation being performed. This may be different than the operation requested. e.g. a patch can result in either a CREATE or UPDATE Operation.", + "type": "string", + "default": "" }, - "observedGeneration": { - "description": "The generation observed by the controller.", - "type": "integer", - "format": "int64" + "options": { + "description": "Options is the operation option structure of the operation being performed. e.g. `meta.k8s.io/v1.DeleteOptions` or `meta.k8s.io/v1.CreateOptions`. This may be different than the options the caller provided. e.g. for a patch request the performed Operation might be a CREATE, in which case the Options will a `meta.k8s.io/v1.CreateOptions` even though the caller provided `meta.k8s.io/v1.PatchOptions`.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" }, - "typeChecking": { - "description": "The results of type checking for each expression. Presence of this field indicates the completion of the type checking.", - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.TypeChecking" + "requestKind": { + "description": "RequestKind is the fully-qualified type of the original API request (for example, v1.Pod or autoscaling.v1.Scale). If this is specified and differs from the value in \"kind\", an equivalent match and conversion was performed.\n\nFor example, if deployments can be modified via apps/v1 and apps/v1beta1, and a webhook registered a rule of `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]` and `matchPolicy: Equivalent`, an API request to apps/v1beta1 deployments would be converted and sent to the webhook with `kind: {group:\"apps\", version:\"v1\", kind:\"Deployment\"}` (matching the rule the webhook registered for), and `requestKind: {group:\"apps\", version:\"v1beta1\", kind:\"Deployment\"}` (indicating the kind of the original API request).\n\nSee documentation for the \"matchPolicy\" field in the webhook configuration type for more details.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind" + }, + "requestResource": { + "description": "RequestResource is the fully-qualified resource of the original API request (for example, v1.pods). If this is specified and differs from the value in \"resource\", an equivalent match and conversion was performed.\n\nFor example, if deployments can be modified via apps/v1 and apps/v1beta1, and a webhook registered a rule of `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]` and `matchPolicy: Equivalent`, an API request to apps/v1beta1 deployments would be converted and sent to the webhook with `resource: {group:\"apps\", version:\"v1\", resource:\"deployments\"}` (matching the resource the webhook registered for), and `requestResource: {group:\"apps\", version:\"v1beta1\", resource:\"deployments\"}` (indicating the resource of the original API request).\n\nSee documentation for the \"matchPolicy\" field in the webhook configuration type.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionResource" + }, + "requestSubResource": { + "description": "RequestSubResource is the name of the subresource of the original API request, if any (for example, \"status\" or \"scale\") If this is specified and differs from the value in \"subResource\", an equivalent match and conversion was performed. See documentation for the \"matchPolicy\" field in the webhook configuration type.", + "type": "string" + }, + "resource": { + "description": "Resource is the fully-qualified resource being requested (for example, v1.pods)", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionResource" + }, + "subResource": { + "description": "SubResource is the subresource being requested, if any (for example, \"status\" or \"scale\")", + "type": "string" + }, + "uid": { + "description": "UID is an identifier for the individual request/response. It allows us to distinguish instances of requests which are otherwise identical (parallel requests, requests when earlier requests did not modify etc) The UID is meant to track the round trip (request/response) between the KAS and the WebHook, not the user request. It is suitable for correlating log entries between the webhook and apiserver, for either auditing or debugging.", + "type": "string", + "default": "" + }, + "userInfo": { + "description": "UserInfo is information about the requesting user", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authentication.v1.UserInfo" } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1alpha1", - "Kind": "ValidatingAdmissionPolicyStatus", + "Group": "admission.k8s.io", + "Version": "v1beta1", + "Kind": "AdmissionRequest", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1alpha1.Validation": { - "description": "Validation specifies the CEL expression which is used to apply the validation.", + "io.k8s.api.admission.v1beta1.AdmissionResponse": { + "description": "AdmissionResponse describes an admission response.", "type": "object", "required": [ - "expression" + "uid", + "allowed" ], "properties": { - "expression": { - "description": "Expression represents the expression which will be evaluated by CEL. ref: https://github.com/google/cel-spec CEL expressions have access to the contents of the API request/response, organized into CEL variables as well as some other useful variables:\n\n- 'object' - The object from the incoming request. The value is null for DELETE requests. - 'oldObject' - The existing object. The value is null for CREATE requests. - 'request' - Attributes of the API request([ref](/pkg/apis/admission/types.go#AdmissionRequest)). - 'params' - Parameter resource referred to by the policy binding being evaluated. Only populated if the policy has a ParamKind. - 'namespaceObject' - The namespace object that the incoming object belongs to. The value is null for cluster-scoped resources. - 'variables' - Map of composited variables, from its name to its lazily evaluated value.\n For example, a variable named 'foo' can be accessed as 'variables.foo'.\n- 'authorizer' - A CEL Authorizer. May be used to perform authorization checks for the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n- 'authorizer.requestResource' - A CEL ResourceCheck constructed from the 'authorizer' and configured with the\n request resource.\n\nThe `apiVersion`, `kind`, `metadata.name` and `metadata.generateName` are always accessible from the root of the object. No other metadata properties are accessible.\n\nOnly property names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*` are accessible. Accessible property names are escaped according to the following rules when accessed in the expression: - '__' escapes to '__underscores__' - '.' escapes to '__dot__' - '-' escapes to '__dash__' - '/' escapes to '__slash__' - Property names that exactly match a CEL RESERVED keyword escape to '__{keyword}__'. The keywords are:\n\t \"true\", \"false\", \"null\", \"in\", \"as\", \"break\", \"const\", \"continue\", \"else\", \"for\", \"function\", \"if\",\n\t \"import\", \"let\", \"loop\", \"package\", \"namespace\", \"return\".\nExamples:\n - Expression accessing a property named \"namespace\": {\"Expression\": \"object.__namespace__ \u003e 0\"}\n - Expression accessing a property named \"x-prop\": {\"Expression\": \"object.x__dash__prop \u003e 0\"}\n - Expression accessing a property named \"redact__d\": {\"Expression\": \"object.redact__underscores__d \u003e 0\"}\n\nEquality on arrays with list type of 'set' or 'map' ignores element order, i.e. [1, 2] == [2, 1]. Concatenation on arrays with x-kubernetes-list-type use the semantics of the list type:\n - 'set': `X + Y` performs a union where the array positions of all elements in `X` are preserved and\n non-intersecting elements in `Y` are appended, retaining their partial order.\n - 'map': `X + Y` performs a merge where the array positions of all keys in `X` are preserved but the values\n are overwritten by values in `Y` when the key sets of `X` and `Y` intersect. Elements in `Y` with\n non-intersecting keys are appended, retaining their partial order.\nRequired.", + "allowed": { + "description": "Allowed indicates whether or not the admission request was permitted.", + "type": "boolean", + "default": false + }, + "auditAnnotations": { + "description": "AuditAnnotations is an unstructured key value map set by remote admission controller (e.g. error=image-blacklisted). MutatingAdmissionWebhook and ValidatingAdmissionWebhook admission controller will prefix the keys with admission webhook name (e.g. imagepolicy.example.com/error=image-blacklisted). AuditAnnotations will be provided by the admission webhook to add additional context to the audit log for this request.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "patch": { + "description": "The patch body. Currently we only support \"JSONPatch\" which implements RFC 6902.", "type": "string", - "default": "" + "format": "byte" }, - "message": { - "description": "Message represents the message displayed when validation fails. The message is required if the Expression contains line breaks. The message must not contain line breaks. If unset, the message is \"failed rule: {Rule}\". e.g. \"must be a URL with the host matching spec.host\" If the Expression contains line breaks. Message is required. The message must not contain line breaks. If unset, the message is \"failed Expression: {Expression}\".", + "patchType": { + "description": "The type of Patch. Currently we only allow \"JSONPatch\".", "type": "string" }, - "messageExpression": { - "description": "messageExpression declares a CEL expression that evaluates to the validation failure message that is returned when this rule fails. Since messageExpression is used as a failure message, it must evaluate to a string. If both message and messageExpression are present on a validation, then messageExpression will be used if validation fails. If messageExpression results in a runtime error, the runtime error is logged, and the validation failure message is produced as if the messageExpression field were unset. If messageExpression evaluates to an empty string, a string with only spaces, or a string that contains line breaks, then the validation failure message will also be produced as if the messageExpression field were unset, and the fact that messageExpression produced an empty string/string with only spaces/string with line breaks will be logged. messageExpression has access to all the same variables as the `expression` except for 'authorizer' and 'authorizer.requestResource'. Example: \"object.x must be less than max (\"+string(params.max)+\")\"", - "type": "string" + "status": { + "description": "Result contains extra details into why an admission request was denied. This field IS NOT consulted in any way if \"Allowed\" is \"true\".", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Status" }, - "reason": { - "description": "Reason represents a machine-readable description of why this validation failed. If this is the first validation in the list to fail, this reason, as well as the corresponding HTTP response code, are used in the HTTP response to the client. The currently supported reasons are: \"Unauthorized\", \"Forbidden\", \"Invalid\", \"RequestEntityTooLarge\". If not set, StatusReasonInvalid is used in the response to the client.", - "type": "string" + "uid": { + "description": "UID is an identifier for the individual request/response. This should be copied over from the corresponding AdmissionRequest.", + "type": "string", + "default": "" + }, + "warnings": { + "description": "warnings is a list of warning messages to return to the requesting API client. Warning messages describe a problem the client making the API request should correct or be aware of. Limit warnings to 120 characters if possible. Warnings over 256 characters and large numbers of warnings may be truncated.", + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1alpha1", - "Kind": "Validation", + "Group": "admission.k8s.io", + "Version": "v1beta1", + "Kind": "AdmissionResponse", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1alpha1.Variable": { - "description": "Variable is the definition of a variable that is used for composition.", + "io.k8s.api.admission.v1beta1.AdmissionReview": { + "description": "AdmissionReview describes an admission review request/response.", "type": "object", - "required": [ - "name", - "expression" - ], "properties": { - "expression": { - "description": "Expression is the expression that will be evaluated as the value of the variable. The CEL expression has access to the same identifiers as the CEL expressions in Validation.", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "name": { - "description": "Name is the name of the variable. The name must be a valid CEL identifier and unique among all variables. The variable can be accessed in other expressions through `variables` For example, if name is \"foo\", the variable will be available as `variables.foo`", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "request": { + "description": "Request describes the attributes for the admission request.", + "$ref": "#/definitions/io.k8s.api.admission.v1beta1.AdmissionRequest" + }, + "response": { + "description": "Response describes the attributes for the admission response.", + "$ref": "#/definitions/io.k8s.api.admission.v1beta1.AdmissionResponse" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "admissionregistration.k8s.io", - "Version": "v1alpha1", - "Kind": "Variable", + "Type": "object", + "Group": "admission.k8s.io", + "Version": "v1beta1", + "Kind": "AdmissionReview", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1beta1.AuditAnnotation": { + "io.k8s.api.admissionregistration.v1.AuditAnnotation": { "description": "AuditAnnotation describes how to produce an audit annotation for an API request.", "type": "object", "required": [ @@ -17106,12 +16809,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "AuditAnnotation", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1beta1.ExpressionWarning": { + "io.k8s.api.admissionregistration.v1.ExpressionWarning": { "description": "ExpressionWarning is a warning information that targets a specific expression.", "type": "object", "required": [ @@ -17133,13 +16836,13 @@ "x-fabric8-info": { "Type": "nested", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "ExpressionWarning", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1beta1.MatchCondition": { - "description": "MatchCondition represents a condition which must be fulfilled for a request to be sent to a webhook.", + "io.k8s.api.admissionregistration.v1.MatchCondition": { + "description": "MatchCondition represents a condition which must by fulfilled for a request to be sent to a webhook.", "type": "object", "required": [ "name", @@ -17160,12 +16863,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "MatchCondition", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1beta1.MatchResources": { + "io.k8s.api.admissionregistration.v1.MatchResources": { "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)", "type": "object", "properties": { @@ -17174,13 +16877,17 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.NamedRuleWithOperations" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.NamedRuleWithOperations" }, "x-kubernetes-list-type": "atomic" }, "matchPolicy": { - "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"", - "type": "string" + "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"\n\nPossible enum values:\n - `\"Equivalent\"` means requests should be sent to the webhook if they modify a resource listed in rules via another API group or version.\n - `\"Exact\"` means requests should only be sent to the webhook if they exactly match a given rule.", + "type": "string", + "enum": [ + "Equivalent", + "Exact" + ] }, "namespaceSelector": { "description": "NamespaceSelector decides whether to run the admission control policy on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the policy.\n\nFor example, to run the webhook on any objects whose namespace is not associated with \"runlevel\" of \"0\" or \"1\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"runlevel\",\n \"operator\": \"NotIn\",\n \"values\": [\n \"0\",\n \"1\"\n ]\n }\n ]\n}\n\nIf instead you want to only run the policy on any objects whose namespace is associated with the \"environment\" of \"prod\" or \"staging\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"environment\",\n \"operator\": \"In\",\n \"values\": [\n \"prod\",\n \"staging\"\n ]\n }\n ]\n}\n\nSee https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ for more examples of label selectors.\n\nDefault to the empty LabelSelector, which matches everything.", @@ -17195,7 +16902,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.NamedRuleWithOperations" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.NamedRuleWithOperations" }, "x-kubernetes-list-type": "atomic" } @@ -17203,22 +16910,24 @@ "x-fabric8-info": { "Type": "nested", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "MatchResources", "Scope": "Namespaced" }, "x-kubernetes-map-type": "atomic" }, - "io.k8s.api.admissionregistration.v1beta1.MutatingWebhook": { + "io.k8s.api.admissionregistration.v1.MutatingWebhook": { "description": "MutatingWebhook describes an admission webhook and the resources and operations it applies to.", "type": "object", "required": [ "name", - "clientConfig" + "clientConfig", + "sideEffects", + "admissionReviewVersions" ], "properties": { "admissionReviewVersions": { - "description": "AdmissionReviewVersions is an ordered list of preferred `AdmissionReview` versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy. Default to `['v1beta1']`.", + "description": "AdmissionReviewVersions is an ordered list of preferred `AdmissionReview` versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy.", "type": "array", "items": { "type": "string", @@ -17229,18 +16938,22 @@ "clientConfig": { "description": "ClientConfig defines how to communicate with the hook. Required", "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.WebhookClientConfig" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.WebhookClientConfig" }, "failurePolicy": { - "description": "FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Ignore.", - "type": "string" + "description": "FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Fail.\n\nPossible enum values:\n - `\"Fail\"` means that an error calling the webhook causes the admission to fail.\n - `\"Ignore\"` means that an error calling the webhook is ignored.", + "type": "string", + "enum": [ + "Fail", + "Ignore" + ] }, "matchConditions": { "description": "MatchConditions is a list of conditions that must be met for a request to be sent to this webhook. Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed.\n\nThe exact matching logic is (in order):\n 1. If ANY matchCondition evaluates to FALSE, the webhook is skipped.\n 2. If ALL matchConditions evaluate to TRUE, the webhook is called.\n 3. If any matchCondition evaluates to an error (but none are FALSE):\n - If failurePolicy=Fail, reject the request\n - If failurePolicy=Ignore, the error is ignored and the webhook is skipped", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MatchCondition" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MatchCondition" }, "x-kubernetes-list-map-keys": [ "name" @@ -17250,8 +16963,12 @@ "x-kubernetes-patch-strategy": "merge" }, "matchPolicy": { - "description": "matchPolicy defines how the \"rules\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook.\n\nDefaults to \"Exact\"", - "type": "string" + "description": "matchPolicy defines how the \"rules\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook.\n\nDefaults to \"Equivalent\"\n\nPossible enum values:\n - `\"Equivalent\"` means requests should be sent to the webhook if they modify a resource listed in rules via another API group or version.\n - `\"Exact\"` means requests should only be sent to the webhook if they exactly match a given rule.", + "type": "string", + "enum": [ + "Equivalent", + "Exact" + ] }, "name": { "description": "The name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where \"imagepolicy\" is the name of the webhook, and kubernetes.io is the name of the organization. Required.", @@ -17267,8 +16984,12 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" }, "reinvocationPolicy": { - "description": "reinvocationPolicy indicates whether this webhook should be called multiple times as part of a single admission evaluation. Allowed values are \"Never\" and \"IfNeeded\".\n\nNever: the webhook will not be called more than once in a single admission evaluation.\n\nIfNeeded: the webhook will be called at least one additional time as part of the admission evaluation if the object being admitted is modified by other admission plugins after the initial webhook call. Webhooks that specify this option *must* be idempotent, able to process objects they previously admitted. Note: * the number of additional invocations is not guaranteed to be exactly one. * if additional invocations result in further modifications to the object, webhooks are not guaranteed to be invoked again. * webhooks that use this option may be reordered to minimize the number of additional invocations. * to validate an object after all mutations are guaranteed complete, use a validating admission webhook instead.\n\nDefaults to \"Never\".", - "type": "string" + "description": "reinvocationPolicy indicates whether this webhook should be called multiple times as part of a single admission evaluation. Allowed values are \"Never\" and \"IfNeeded\".\n\nNever: the webhook will not be called more than once in a single admission evaluation.\n\nIfNeeded: the webhook will be called at least one additional time as part of the admission evaluation if the object being admitted is modified by other admission plugins after the initial webhook call. Webhooks that specify this option *must* be idempotent, able to process objects they previously admitted. Note: * the number of additional invocations is not guaranteed to be exactly one. * if additional invocations result in further modifications to the object, webhooks are not guaranteed to be invoked again. * webhooks that use this option may be reordered to minimize the number of additional invocations. * to validate an object after all mutations are guaranteed complete, use a validating admission webhook instead.\n\nDefaults to \"Never\".\n\nPossible enum values:\n - `\"IfNeeded\"` indicates that the webhook may be called at least one additional time as part of the admission evaluation if the object being admitted is modified by other admission plugins after the initial webhook call.\n - `\"Never\"` indicates that the webhook must not be called more than once in a single admission evaluation.", + "type": "string", + "enum": [ + "IfNeeded", + "Never" + ] }, "rules": { "description": "Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks from putting the cluster in a state which cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects.", @@ -17280,11 +17001,17 @@ "x-kubernetes-list-type": "atomic" }, "sideEffects": { - "description": "SideEffects states whether this webhook has side effects. Acceptable values are: Unknown, None, Some, NoneOnDryRun Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some. Defaults to Unknown.", - "type": "string" + "description": "SideEffects states whether this webhook has side effects. Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1 may also specify Some or Unknown). Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some.\n\nPossible enum values:\n - `\"None\"` means that calling the webhook will have no side effects.\n - `\"NoneOnDryRun\"` means that calling the webhook will possibly have side effects, but if the request being reviewed has the dry-run attribute, the side effects will be suppressed.\n - `\"Some\"` means that calling the webhook will possibly have side effects. If a request with the dry-run attribute would trigger a call to this webhook, the request will instead fail.\n - `\"Unknown\"` means that no information is known about the side effects of calling the webhook. If a request with the dry-run attribute would trigger a call to this webhook, the request will instead fail.", + "type": "string", + "enum": [ + "None", + "NoneOnDryRun", + "Some", + "Unknown" + ] }, "timeoutSeconds": { - "description": "TimeoutSeconds specifies the timeout for this webhook. After the timeout passes, the webhook call will be ignored or the API call will fail based on the failure policy. The timeout value must be between 1 and 30 seconds. Default to 30 seconds.", + "description": "TimeoutSeconds specifies the timeout for this webhook. After the timeout passes, the webhook call will be ignored or the API call will fail based on the failure policy. The timeout value must be between 1 and 30 seconds. Default to 10 seconds.", "type": "integer", "format": "int32" } @@ -17292,13 +17019,13 @@ "x-fabric8-info": { "Type": "nested", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "MutatingWebhook", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfiguration": { - "description": "MutatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and may change the object. Deprecated in v1.16, planned for removal in v1.19. Use admissionregistration.k8s.io/v1 MutatingWebhookConfiguration instead.", + "io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration": { + "description": "MutatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and may change the object.", "type": "object", "properties": { "apiVersion": { @@ -17319,7 +17046,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhook" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhook" }, "x-kubernetes-list-map-keys": [ "name" @@ -17332,12 +17059,12 @@ "x-fabric8-info": { "Type": "object", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "MutatingWebhookConfiguration", "Scope": "Clustered" } }, - "io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfigurationList": { + "io.k8s.api.admissionregistration.v1.MutatingWebhookConfigurationList": { "description": "MutatingWebhookConfigurationList is a list of MutatingWebhookConfiguration.", "type": "object", "required": [ @@ -17353,7 +17080,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfiguration" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MutatingWebhookConfiguration" } }, "kind": { @@ -17369,12 +17096,12 @@ "x-fabric8-info": { "Type": "list", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "MutatingWebhookConfigurationList", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1beta1.NamedRuleWithOperations": { + "io.k8s.api.admissionregistration.v1.NamedRuleWithOperations": { "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.", "type": "object", "properties": { @@ -17438,13 +17165,13 @@ "x-fabric8-info": { "Type": "nested", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "NamedRuleWithOperations", "Scope": "Namespaced" }, "x-kubernetes-map-type": "atomic" }, - "io.k8s.api.admissionregistration.v1beta1.ParamKind": { + "io.k8s.api.admissionregistration.v1.ParamKind": { "description": "ParamKind is a tuple of Group Kind and Version.", "type": "object", "properties": { @@ -17460,13 +17187,13 @@ "x-fabric8-info": { "Type": "nested", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "ParamKind", "Scope": "Namespaced" }, "x-kubernetes-map-type": "atomic" }, - "io.k8s.api.admissionregistration.v1beta1.ParamRef": { + "io.k8s.api.admissionregistration.v1.ParamRef": { "description": "ParamRef describes how to locate the params to be used as input to expressions of rules applied by a policy binding.", "type": "object", "properties": { @@ -17490,13 +17217,117 @@ "x-fabric8-info": { "Type": "nested", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "ParamRef", "Scope": "Namespaced" }, "x-kubernetes-map-type": "atomic" }, - "io.k8s.api.admissionregistration.v1beta1.ServiceReference": { + "io.k8s.api.admissionregistration.v1.Rule": { + "description": "Rule is a tuple of APIGroups, APIVersion, and Resources.It is recommended to make sure that all the tuple expansions are valid.", + "type": "object", + "properties": { + "apiGroups": { + "description": "APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "apiVersions": { + "description": "APIVersions is the API versions the resources belong to. '*' is all versions. If '*' is present, the length of the slice must be one. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "resources": { + "description": "Resources is a list of resources this rule applies to.\n\nFor example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources.\n\nIf wildcard is present, the validation rule will ensure resources do not overlap with each other.\n\nDepending on the enclosing object, subresources might not be allowed. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "scope": { + "description": "scope specifies the scope of this rule. Valid values are \"Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. \"Namespaced\" means that only namespaced resources will match this rule. \"*\" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is \"*\".", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "admissionregistration.k8s.io", + "Version": "v1", + "Kind": "Rule", + "Scope": "Namespaced" + } + }, + "io.k8s.api.admissionregistration.v1.RuleWithOperations": { + "description": "RuleWithOperations is a tuple of Operations and Resources. It is recommended to make sure that all the tuple expansions are valid.", + "type": "object", + "properties": { + "apiGroups": { + "description": "APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "apiVersions": { + "description": "APIVersions is the API versions the resources belong to. '*' is all versions. If '*' is present, the length of the slice must be one. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "operations": { + "description": "Operations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and any future admission operations that are added. If '*' is present, the length of the slice must be one. Required.", + "type": "array", + "items": { + "type": "string", + "default": "", + "enum": [ + "*", + "CONNECT", + "CREATE", + "DELETE", + "UPDATE" + ] + }, + "x-kubernetes-list-type": "atomic" + }, + "resources": { + "description": "Resources is a list of resources this rule applies to.\n\nFor example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources.\n\nIf wildcard is present, the validation rule will ensure resources do not overlap with each other.\n\nDepending on the enclosing object, subresources might not be allowed. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "scope": { + "description": "scope specifies the scope of this rule. Valid values are \"Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. \"Namespaced\" means that only namespaced resources will match this rule. \"*\" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is \"*\".", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "admissionregistration.k8s.io", + "Version": "v1", + "Kind": "RuleWithOperations", + "Scope": "Namespaced" + } + }, + "io.k8s.api.admissionregistration.v1.ServiceReference": { "description": "ServiceReference holds a reference to Service.legacy.k8s.io", "type": "object", "required": [ @@ -17527,12 +17358,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "ServiceReference", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1beta1.TypeChecking": { + "io.k8s.api.admissionregistration.v1.TypeChecking": { "description": "TypeChecking contains results of type checking the expressions in the ValidatingAdmissionPolicy", "type": "object", "properties": { @@ -17541,7 +17372,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ExpressionWarning" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ExpressionWarning" }, "x-kubernetes-list-type": "atomic" } @@ -17549,12 +17380,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "TypeChecking", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicy": { + "io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicy": { "description": "ValidatingAdmissionPolicy describes the definition of an admission validation policy that accepts or rejects an object without changing it.", "type": "object", "properties": { @@ -17574,23 +17405,23 @@ "spec": { "description": "Specification of the desired behavior of the ValidatingAdmissionPolicy.", "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicySpec" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicySpec" }, "status": { "description": "The status of the ValidatingAdmissionPolicy, including warnings that are useful to determine if the policy behaves in the expected way. Populated by the system. Read-only.", "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyStatus" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicyStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "ValidatingAdmissionPolicy", "Scope": "Clustered" } }, - "io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyBinding": { + "io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicyBinding": { "description": "ValidatingAdmissionPolicyBinding binds the ValidatingAdmissionPolicy with paramerized resources. ValidatingAdmissionPolicyBinding and parameter CRDs together define how cluster administrators configure policies for clusters.\n\nFor a given admission request, each binding will cause its policy to be evaluated N times, where N is 1 for policies/bindings that don't use params, otherwise N is the number of parameters selected by the binding.\n\nThe CEL expressions of a policy must have a computed CEL cost below the maximum CEL budget. Each evaluation of the policy is given an independent CEL cost budget. Adding/removing policies, bindings, or params can not affect whether a given (policy, binding, param) combination is within its own CEL budget.", "type": "object", "properties": { @@ -17610,18 +17441,18 @@ "spec": { "description": "Specification of the desired behavior of the ValidatingAdmissionPolicyBinding.", "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyBindingSpec" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicyBindingSpec" } }, "x-fabric8-info": { "Type": "object", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "ValidatingAdmissionPolicyBinding", "Scope": "Clustered" } }, - "io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyBindingList": { + "io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicyBindingList": { "description": "ValidatingAdmissionPolicyBindingList is a list of ValidatingAdmissionPolicyBinding.", "type": "object", "required": [ @@ -17637,7 +17468,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyBinding" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicyBinding" } }, "kind": { @@ -17653,22 +17484,22 @@ "x-fabric8-info": { "Type": "list", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "ValidatingAdmissionPolicyBindingList", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyBindingSpec": { + "io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicyBindingSpec": { "description": "ValidatingAdmissionPolicyBindingSpec is the specification of the ValidatingAdmissionPolicyBinding.", "type": "object", "properties": { "matchResources": { "description": "MatchResources declares what resources match this binding and will be validated by it. Note that this is intersected with the policy's matchConstraints, so only requests that are matched by the policy can be selected by this. If this is unset, all resources matched by the policy are validated by this binding When resourceRules is unset, it does not constrain resource matching. If a resource is matched by the other fields of this object, it will be validated. Note that this is differs from ValidatingAdmissionPolicy matchConstraints, where resourceRules are required.", - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MatchResources" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MatchResources" }, "paramRef": { "description": "paramRef specifies the parameter resource used to configure the admission control policy. It should point to a resource of the type specified in ParamKind of the bound ValidatingAdmissionPolicy. If the policy specifies a ParamKind and the resource referred to by ParamRef does not exist, this binding is considered mis-configured and the FailurePolicy of the ValidatingAdmissionPolicy applied. If the policy does not specify a ParamKind then this field is ignored, and the rules are evaluated without a param.", - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ParamRef" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ParamRef" }, "policyName": { "description": "PolicyName references a ValidatingAdmissionPolicy name which the ValidatingAdmissionPolicyBinding binds to. If the referenced resource does not exist, this binding is considered invalid and will be ignored Required.", @@ -17692,12 +17523,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "ValidatingAdmissionPolicyBindingSpec", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyList": { + "io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicyList": { "description": "ValidatingAdmissionPolicyList is a list of ValidatingAdmissionPolicy.", "type": "object", "required": [ @@ -17713,7 +17544,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicy" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicy" } }, "kind": { @@ -17729,12 +17560,12 @@ "x-fabric8-info": { "Type": "list", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "ValidatingAdmissionPolicyList", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicySpec": { + "io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicySpec": { "description": "ValidatingAdmissionPolicySpec is the specification of the desired behavior of the AdmissionPolicy.", "type": "object", "properties": { @@ -17743,20 +17574,24 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.AuditAnnotation" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.AuditAnnotation" }, "x-kubernetes-list-type": "atomic" }, "failurePolicy": { - "description": "failurePolicy defines how to handle failures for the admission policy. Failures can occur from CEL expression parse errors, type check errors, runtime errors and invalid or mis-configured policy definitions or bindings.\n\nA policy is invalid if spec.paramKind refers to a non-existent Kind. A binding is invalid if spec.paramRef.name refers to a non-existent resource.\n\nfailurePolicy does not define how validations that evaluate to false are handled.\n\nWhen failurePolicy is set to Fail, ValidatingAdmissionPolicyBinding validationActions define how failures are enforced.\n\nAllowed values are Ignore or Fail. Defaults to Fail.", - "type": "string" + "description": "failurePolicy defines how to handle failures for the admission policy. Failures can occur from CEL expression parse errors, type check errors, runtime errors and invalid or mis-configured policy definitions or bindings.\n\nA policy is invalid if spec.paramKind refers to a non-existent Kind. A binding is invalid if spec.paramRef.name refers to a non-existent resource.\n\nfailurePolicy does not define how validations that evaluate to false are handled.\n\nWhen failurePolicy is set to Fail, ValidatingAdmissionPolicyBinding validationActions define how failures are enforced.\n\nAllowed values are Ignore or Fail. Defaults to Fail.\n\nPossible enum values:\n - `\"Fail\"` means that an error calling the webhook causes the admission to fail.\n - `\"Ignore\"` means that an error calling the webhook is ignored.", + "type": "string", + "enum": [ + "Fail", + "Ignore" + ] }, "matchConditions": { "description": "MatchConditions is a list of conditions that must be met for a request to be validated. Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed.\n\nIf a parameter object is provided, it can be accessed via the `params` handle in the same manner as validation expressions.\n\nThe exact matching logic is (in order):\n 1. If ANY matchCondition evaluates to FALSE, the policy is skipped.\n 2. If ALL matchConditions evaluate to TRUE, the policy is evaluated.\n 3. If any matchCondition evaluates to an error (but none are FALSE):\n - If failurePolicy=Fail, reject the request\n - If failurePolicy=Ignore, the policy is skipped", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MatchCondition" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MatchCondition" }, "x-kubernetes-list-map-keys": [ "name" @@ -17767,18 +17602,18 @@ }, "matchConstraints": { "description": "MatchConstraints specifies what resources this policy is designed to validate. The AdmissionPolicy cares about a request if it matches _all_ Constraints. However, in order to prevent clusters from being put into an unstable state that cannot be recovered from via the API ValidatingAdmissionPolicy cannot match ValidatingAdmissionPolicy and ValidatingAdmissionPolicyBinding. Required.", - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MatchResources" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MatchResources" }, "paramKind": { "description": "ParamKind specifies the kind of resources used to parameterize this policy. If absent, there are no parameters for this policy and the param CEL variable will not be provided to validation expressions. If ParamKind refers to a non-existent kind, this policy definition is mis-configured and the FailurePolicy is applied. If paramKind is specified but paramRef is unset in ValidatingAdmissionPolicyBinding, the params variable will be null.", - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ParamKind" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ParamKind" }, "validations": { "description": "Validations contain CEL expressions which is used to apply the validation. Validations and AuditAnnotations may not both be empty; a minimum of one Validations or AuditAnnotations is required.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.Validation" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.Validation" }, "x-kubernetes-list-type": "atomic" }, @@ -17787,7 +17622,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.Variable" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.Variable" }, "x-kubernetes-list-map-keys": [ "name" @@ -17800,12 +17635,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "ValidatingAdmissionPolicySpec", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyStatus": { + "io.k8s.api.admissionregistration.v1.ValidatingAdmissionPolicyStatus": { "description": "ValidatingAdmissionPolicyStatus represents the status of an admission validation policy.", "type": "object", "properties": { @@ -17828,27 +17663,29 @@ }, "typeChecking": { "description": "The results of type checking for each expression. Presence of this field indicates the completion of the type checking.", - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.TypeChecking" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.TypeChecking" } }, "x-fabric8-info": { "Type": "nested", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "ValidatingAdmissionPolicyStatus", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1beta1.ValidatingWebhook": { + "io.k8s.api.admissionregistration.v1.ValidatingWebhook": { "description": "ValidatingWebhook describes an admission webhook and the resources and operations it applies to.", "type": "object", "required": [ "name", - "clientConfig" + "clientConfig", + "sideEffects", + "admissionReviewVersions" ], "properties": { "admissionReviewVersions": { - "description": "AdmissionReviewVersions is an ordered list of preferred `AdmissionReview` versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy. Default to `['v1beta1']`.", + "description": "AdmissionReviewVersions is an ordered list of preferred `AdmissionReview` versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy.", "type": "array", "items": { "type": "string", @@ -17859,18 +17696,22 @@ "clientConfig": { "description": "ClientConfig defines how to communicate with the hook. Required", "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.WebhookClientConfig" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.WebhookClientConfig" }, "failurePolicy": { - "description": "FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Ignore.", - "type": "string" - }, - "matchConditions": { - "description": "MatchConditions is a list of conditions that must be met for a request to be sent to this webhook. Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed.\n\nThe exact matching logic is (in order):\n 1. If ANY matchCondition evaluates to FALSE, the webhook is skipped.\n 2. If ALL matchConditions evaluate to TRUE, the webhook is called.\n 3. If any matchCondition evaluates to an error (but none are FALSE):\n - If failurePolicy=Fail, reject the request\n - If failurePolicy=Ignore, the error is ignored and the webhook is skipped", + "description": "FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Fail.\n\nPossible enum values:\n - `\"Fail\"` means that an error calling the webhook causes the admission to fail.\n - `\"Ignore\"` means that an error calling the webhook is ignored.", + "type": "string", + "enum": [ + "Fail", + "Ignore" + ] + }, + "matchConditions": { + "description": "MatchConditions is a list of conditions that must be met for a request to be sent to this webhook. Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed.\n\nThe exact matching logic is (in order):\n 1. If ANY matchCondition evaluates to FALSE, the webhook is skipped.\n 2. If ALL matchConditions evaluate to TRUE, the webhook is called.\n 3. If any matchCondition evaluates to an error (but none are FALSE):\n - If failurePolicy=Fail, reject the request\n - If failurePolicy=Ignore, the error is ignored and the webhook is skipped", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MatchCondition" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.MatchCondition" }, "x-kubernetes-list-map-keys": [ "name" @@ -17880,8 +17721,12 @@ "x-kubernetes-patch-strategy": "merge" }, "matchPolicy": { - "description": "matchPolicy defines how the \"rules\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook.\n\nDefaults to \"Exact\"", - "type": "string" + "description": "matchPolicy defines how the \"rules\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook.\n\nDefaults to \"Equivalent\"\n\nPossible enum values:\n - `\"Equivalent\"` means requests should be sent to the webhook if they modify a resource listed in rules via another API group or version.\n - `\"Exact\"` means requests should only be sent to the webhook if they exactly match a given rule.", + "type": "string", + "enum": [ + "Equivalent", + "Exact" + ] }, "name": { "description": "The name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where \"imagepolicy\" is the name of the webhook, and kubernetes.io is the name of the organization. Required.", @@ -17906,12 +17751,17 @@ "x-kubernetes-list-type": "atomic" }, "sideEffects": { - "description": "SideEffects states whether this webhook has side effects. Acceptable values are: Unknown, None, Some, NoneOnDryRun Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some. Defaults to Unknown.", + "description": "SideEffects states whether this webhook has side effects. Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1 may also specify Some or Unknown). Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some.\n\nPossible enum values:\n - `\"None\"` means that calling the webhook will have no side effects.\n - `\"NoneOnDryRun\"` means that calling the webhook will possibly have side effects, but if the request being reviewed has the dry-run attribute, the side effects will be suppressed.\n - `\"Some\"` means that calling the webhook will possibly have side effects. If a request with the dry-run attribute would trigger a call to this webhook, the request will instead fail.\n - `\"Unknown\"` means that no information is known about the side effects of calling the webhook. If a request with the dry-run attribute would trigger a call to this webhook, the request will instead fail.", "type": "string", - "x-kubernetes-list-type": "atomic" + "enum": [ + "None", + "NoneOnDryRun", + "Some", + "Unknown" + ] }, "timeoutSeconds": { - "description": "TimeoutSeconds specifies the timeout for this webhook. After the timeout passes, the webhook call will be ignored or the API call will fail based on the failure policy. The timeout value must be between 1 and 30 seconds. Default to 30 seconds.", + "description": "TimeoutSeconds specifies the timeout for this webhook. After the timeout passes, the webhook call will be ignored or the API call will fail based on the failure policy. The timeout value must be between 1 and 30 seconds. Default to 10 seconds.", "type": "integer", "format": "int32" } @@ -17919,13 +17769,13 @@ "x-fabric8-info": { "Type": "nested", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "ValidatingWebhook", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration": { - "description": "ValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it. Deprecated in v1.16, planned for removal in v1.19. Use admissionregistration.k8s.io/v1 ValidatingWebhookConfiguration instead.", + "io.k8s.api.admissionregistration.v1.ValidatingWebhookConfiguration": { + "description": "ValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it.", "type": "object", "properties": { "apiVersion": { @@ -17946,7 +17796,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhook" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhook" }, "x-kubernetes-list-map-keys": [ "name" @@ -17959,12 +17809,12 @@ "x-fabric8-info": { "Type": "object", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "ValidatingWebhookConfiguration", "Scope": "Clustered" } }, - "io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfigurationList": { + "io.k8s.api.admissionregistration.v1.ValidatingWebhookConfigurationList": { "description": "ValidatingWebhookConfigurationList is a list of ValidatingWebhookConfiguration.", "type": "object", "required": [ @@ -17980,7 +17830,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ValidatingWebhookConfiguration" } }, "kind": { @@ -17996,12 +17846,12 @@ "x-fabric8-info": { "Type": "list", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "ValidatingWebhookConfigurationList", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1beta1.Validation": { + "io.k8s.api.admissionregistration.v1.Validation": { "description": "Validation specifies the CEL expression which is used to apply the validation.", "type": "object", "required": [ @@ -18029,12 +17879,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "Validation", "Scope": "Namespaced" } }, - "io.k8s.api.admissionregistration.v1beta1.Variable": { + "io.k8s.api.admissionregistration.v1.Variable": { "description": "Variable is the definition of a variable that is used for composition. A variable is defined as a named expression.", "type": "object", "required": [ @@ -18056,13 +17906,13 @@ "x-fabric8-info": { "Type": "nested", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "Variable", "Scope": "Namespaced" }, "x-kubernetes-map-type": "atomic" }, - "io.k8s.api.admissionregistration.v1beta1.WebhookClientConfig": { + "io.k8s.api.admissionregistration.v1.WebhookClientConfig": { "description": "WebhookClientConfig contains the information to make a TLS connection with the webhook", "type": "object", "properties": { @@ -18073,7 +17923,7 @@ }, "service": { "description": "`service` is a reference to the service for this webhook. Either `service` or `url` must be specified.\n\nIf the webhook is running within the cluster, then you should use `service`.", - "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ServiceReference" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.ServiceReference" }, "url": { "description": "`url` gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.\n\nThe `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.\n\nPlease note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster.\n\nThe scheme must be \"https\"; the URL must begin with \"https://\".\n\nA path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.\n\nAttempting to use a user or basic auth e.g. \"user:password@\" is not allowed. Fragments (\"#...\") and query parameters (\"?...\") are not allowed, either.", @@ -18083,251 +17933,325 @@ "x-fabric8-info": { "Type": "nested", "Group": "admissionregistration.k8s.io", - "Version": "v1beta1", + "Version": "v1", "Kind": "WebhookClientConfig", "Scope": "Namespaced" } }, - "io.k8s.api.apidiscovery.v2.APIGroupDiscovery": { - "description": "APIGroupDiscovery holds information about which resources are being served for all version of the API Group. It contains a list of APIVersionDiscovery that holds a list of APIResourceDiscovery types served for a version. Versions are in descending order of preference, with the first version being the preferred entry.", + "io.k8s.api.admissionregistration.v1alpha1.AuditAnnotation": { + "description": "AuditAnnotation describes how to produce an audit annotation for an API request.", "type": "object", + "required": [ + "key", + "valueExpression" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "key": { + "description": "key specifies the audit annotation key. The audit annotation keys of a ValidatingAdmissionPolicy must be unique. The key must be a qualified name ([A-Za-z0-9][-A-Za-z0-9_.]*) no more than 63 bytes in length.\n\nThe key is combined with the resource name of the ValidatingAdmissionPolicy to construct an audit annotation key: \"{ValidatingAdmissionPolicy name}/{key}\".\n\nIf an admission webhook uses the same resource name as this ValidatingAdmissionPolicy and the same audit annotation key, the annotation key will be identical. In this case, the first annotation written with the key will be included in the audit event and all subsequent annotations with the same key will be discarded.\n\nRequired.", + "type": "string", + "default": "" }, - "metadata": { - "description": "Standard object's metadata. The only field completed will be name. For instance, resourceVersion will be empty. name is the name of the API group whose discovery information is presented here. name is allowed to be \"\" to represent the legacy, ungroupified resources. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "valueExpression": { + "description": "valueExpression represents the expression which is evaluated by CEL to produce an audit annotation value. The expression must evaluate to either a string or null value. If the expression evaluates to a string, the audit annotation is included with the string value. If the expression evaluates to null or empty string the audit annotation will be omitted. The valueExpression may be no longer than 5kb in length. If the result of the valueExpression is more than 10kb in length, it will be truncated to 10kb.\n\nIf multiple ValidatingAdmissionPolicyBinding resources match an API request, then the valueExpression will be evaluated for each binding. All unique values produced by the valueExpressions will be joined together in a comma-separated list.\n\nRequired.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "admissionregistration.k8s.io", + "Version": "v1alpha1", + "Kind": "AuditAnnotation", + "Scope": "Namespaced" + } + }, + "io.k8s.api.admissionregistration.v1alpha1.ExpressionWarning": { + "description": "ExpressionWarning is a warning information that targets a specific expression.", + "type": "object", + "required": [ + "fieldRef", + "warning" + ], + "properties": { + "fieldRef": { + "description": "The path to the field that refers the expression. For example, the reference to the expression of the first item of validations is \"spec.validations[0].expression\"", + "type": "string", + "default": "" }, - "versions": { - "description": "versions are the versions supported in this group. They are sorted in descending order of preference, with the preferred version being the first entry.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.apidiscovery.v2.APIVersionDiscovery" - }, - "x-kubernetes-list-map-keys": [ - "version" - ], - "x-kubernetes-list-type": "map" + "warning": { + "description": "The content of type checking information in a human-readable form. Each line of the warning contains the type that the expression is checked against, followed by the type check error from the compiler.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "apidiscovery.k8s.io", - "Version": "v2", - "Kind": "APIGroupDiscovery", + "Type": "nested", + "Group": "admissionregistration.k8s.io", + "Version": "v1alpha1", + "Kind": "ExpressionWarning", "Scope": "Namespaced" } }, - "io.k8s.api.apidiscovery.v2.APIGroupDiscoveryList": { - "description": "APIGroupDiscoveryList is a resource containing a list of APIGroupDiscovery. This is one of the types able to be returned from the /api and /apis endpoint and contains an aggregated list of API resources (built-ins, Custom Resource Definitions, resources from aggregated servers) that a cluster supports.", + "io.k8s.api.admissionregistration.v1alpha1.MatchCondition": { "type": "object", "required": [ - "items" + "name", + "expression" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "expression": { + "description": "Expression represents the expression which will be evaluated by CEL. Must evaluate to bool. CEL expressions have access to the contents of the AdmissionRequest and Authorizer, organized into CEL variables:\n\n'object' - The object from the incoming request. The value is null for DELETE requests. 'oldObject' - The existing object. The value is null for CREATE requests. 'request' - Attributes of the admission request(/pkg/apis/admission/types.go#AdmissionRequest). 'authorizer' - A CEL Authorizer. May be used to perform authorization checks for the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n'authorizer.requestResource' - A CEL ResourceCheck constructed from the 'authorizer' and configured with the\n request resource.\nDocumentation on CEL: https://kubernetes.io/docs/reference/using-api/cel/\n\nRequired.", + "type": "string", + "default": "" }, - "items": { - "description": "items is the list of groups for discovery. The groups are listed in priority order.", + "name": { + "description": "Name is an identifier for this match condition, used for strategic merging of MatchConditions, as well as providing an identifier for logging purposes. A good name should be descriptive of the associated expression. Name must be a qualified name consisting of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character (e.g. 'MyName', or 'my.name', or '123-abc', regex used for validation is '([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9]') with an optional DNS subdomain prefix and '/' (e.g. 'example.com/MyName')\n\nRequired.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "admissionregistration.k8s.io", + "Version": "v1alpha1", + "Kind": "MatchCondition", + "Scope": "Namespaced" + } + }, + "io.k8s.api.admissionregistration.v1alpha1.MatchResources": { + "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)", + "type": "object", + "properties": { + "excludeResourceRules": { + "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apidiscovery.v2.APIGroupDiscovery" - } + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.NamedRuleWithOperations" + }, + "x-kubernetes-list-type": "atomic" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "matchPolicy": { + "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"\n\nPossible enum values:\n - `\"Equivalent\"` means requests should be sent to the webhook if they modify a resource listed in rules via another API group or version.\n - `\"Exact\"` means requests should only be sent to the webhook if they exactly match a given rule.", + "type": "string", + "enum": [ + "Equivalent", + "Exact" + ] }, - "metadata": { - "description": "ResourceVersion will not be set, because this does not have a replayable ordering among multiple apiservers. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "namespaceSelector": { + "description": "NamespaceSelector decides whether to run the admission control policy on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the policy.\n\nFor example, to run the webhook on any objects whose namespace is not associated with \"runlevel\" of \"0\" or \"1\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"runlevel\",\n \"operator\": \"NotIn\",\n \"values\": [\n \"0\",\n \"1\"\n ]\n }\n ]\n}\n\nIf instead you want to only run the policy on any objects whose namespace is associated with the \"environment\" of \"prod\" or \"staging\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"environment\",\n \"operator\": \"In\",\n \"values\": [\n \"prod\",\n \"staging\"\n ]\n }\n ]\n}\n\nSee https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ for more examples of label selectors.\n\nDefault to the empty LabelSelector, which matches everything.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "objectSelector": { + "description": "ObjectSelector decides whether to run the validation based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the cel validation, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "resourceRules": { + "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.NamedRuleWithOperations" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { - "Type": "list", - "Group": "apidiscovery.k8s.io", - "Version": "v2", - "Kind": "APIGroupDiscoveryList", + "Type": "nested", + "Group": "admissionregistration.k8s.io", + "Version": "v1alpha1", + "Kind": "MatchResources", "Scope": "Namespaced" - } + }, + "x-kubernetes-map-type": "atomic" }, - "io.k8s.api.apidiscovery.v2.APIResourceDiscovery": { - "description": "APIResourceDiscovery provides information about an API resource for discovery.", + "io.k8s.api.admissionregistration.v1alpha1.NamedRuleWithOperations": { + "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.", "type": "object", - "required": [ - "resource", - "scope", - "singularResource", - "verbs" - ], "properties": { - "categories": { - "description": "categories is a list of the grouped resources this resource belongs to (e.g. 'all'). Clients may use this to simplify acting on multiple resource types at once.", + "apiGroups": { + "description": "APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-list-type": "set" - }, - "resource": { - "description": "resource is the plural name of the resource. This is used in the URL path and is the unique identifier for this resource across all versions in the API group. Resources with non-empty groups are located at /apis/\u003cAPIGroupDiscovery.objectMeta.name\u003e/\u003cAPIVersionDiscovery.version\u003e/\u003cAPIResourceDiscovery.Resource\u003e Resources with empty groups are located at /api/v1/\u003cAPIResourceDiscovery.Resource\u003e", - "type": "string", - "default": "" - }, - "responseKind": { - "description": "responseKind describes the group, version, and kind of the serialization schema for the object type this endpoint typically returns. APIs may return other objects types at their discretion, such as error conditions, requests for alternate representations, or other operation specific behavior. This value will be null or empty if an APIService reports subresources but supports no operations on the parent resource", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind" - }, - "scope": { - "description": "scope indicates the scope of a resource, either Cluster or Namespaced", - "type": "string", - "default": "" + "x-kubernetes-list-type": "atomic" }, - "shortNames": { - "description": "shortNames is a list of suggested short names of the resource.", + "apiVersions": { + "description": "APIVersions is the API versions the resources belong to. '*' is all versions. If '*' is present, the length of the slice must be one. Required.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-list-type": "set" + "x-kubernetes-list-type": "atomic" }, - "singularResource": { - "description": "singularResource is the singular name of the resource. This allows clients to handle plural and singular opaquely. For many clients the singular form of the resource will be more understandable to users reading messages and should be used when integrating the name of the resource into a sentence. The command line tool kubectl, for example, allows use of the singular resource name in place of plurals. The singular form of a resource should always be an optional element - when in doubt use the canonical resource name.", - "type": "string", - "default": "" + "operations": { + "description": "Operations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and any future admission operations that are added. If '*' is present, the length of the slice must be one. Required.", + "type": "array", + "items": { + "type": "string", + "default": "", + "enum": [ + "*", + "CONNECT", + "CREATE", + "DELETE", + "UPDATE" + ] + }, + "x-kubernetes-list-type": "atomic" }, - "subresources": { - "description": "subresources is a list of subresources provided by this resource. Subresources are located at /apis/\u003cAPIGroupDiscovery.objectMeta.name\u003e/\u003cAPIVersionDiscovery.version\u003e/\u003cAPIResourceDiscovery.Resource\u003e/name-of-instance/\u003cAPIResourceDiscovery.subresources[i].subresource\u003e", + "resourceNames": { + "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.apidiscovery.v2.APISubresourceDiscovery" + "type": "string", + "default": "" }, - "x-kubernetes-list-map-keys": [ - "subresource" - ], - "x-kubernetes-list-type": "map" + "x-kubernetes-list-type": "atomic" }, - "verbs": { - "description": "verbs is a list of supported API operation types (this includes but is not limited to get, list, watch, create, update, patch, delete, deletecollection, and proxy).", + "resources": { + "description": "Resources is a list of resources this rule applies to.\n\nFor example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources.\n\nIf wildcard is present, the validation rule will ensure resources do not overlap with each other.\n\nDepending on the enclosing object, subresources might not be allowed. Required.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-list-type": "set" + "x-kubernetes-list-type": "atomic" + }, + "scope": { + "description": "scope specifies the scope of this rule. Valid values are \"Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. \"Namespaced\" means that only namespaced resources will match this rule. \"*\" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is \"*\".", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "apidiscovery.k8s.io", - "Version": "v2", - "Kind": "APIResourceDiscovery", + "Group": "admissionregistration.k8s.io", + "Version": "v1alpha1", + "Kind": "NamedRuleWithOperations", "Scope": "Namespaced" - } + }, + "x-kubernetes-map-type": "atomic" }, - "io.k8s.api.apidiscovery.v2.APISubresourceDiscovery": { - "description": "APISubresourceDiscovery provides information about an API subresource for discovery.", + "io.k8s.api.admissionregistration.v1alpha1.ParamKind": { + "description": "ParamKind is a tuple of Group Kind and Version.", "type": "object", - "required": [ - "subresource", - "verbs" - ], "properties": { - "acceptedTypes": { - "description": "acceptedTypes describes the kinds that this endpoint accepts. Subresources may accept the standard content types or define custom negotiation schemes. The list may not be exhaustive for all operations.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind" - }, - "x-kubernetes-list-map-keys": [ - "group", - "version", - "kind" - ], - "x-kubernetes-list-type": "map" + "apiVersion": { + "description": "APIVersion is the API group version the resources belong to. In format of \"group/version\". Required.", + "type": "string" }, - "responseKind": { - "description": "responseKind describes the group, version, and kind of the serialization schema for the object type this endpoint typically returns. Some subresources do not return normal resources, these will have null or empty return types.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind" + "kind": { + "description": "Kind is the API kind the resources belong to. Required.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "admissionregistration.k8s.io", + "Version": "v1alpha1", + "Kind": "ParamKind", + "Scope": "Namespaced" + }, + "x-kubernetes-map-type": "atomic" + }, + "io.k8s.api.admissionregistration.v1alpha1.ParamRef": { + "description": "ParamRef describes how to locate the params to be used as input to expressions of rules applied by a policy binding.", + "type": "object", + "properties": { + "name": { + "description": "`name` is the name of the resource being referenced.\n\n`name` and `selector` are mutually exclusive properties. If one is set, the other must be unset.", + "type": "string" }, - "subresource": { - "description": "subresource is the name of the subresource. This is used in the URL path and is the unique identifier for this resource across all versions.", + "namespace": { + "description": "namespace is the namespace of the referenced resource. Allows limiting the search for params to a specific namespace. Applies to both `name` and `selector` fields.\n\nA per-namespace parameter may be used by specifying a namespace-scoped `paramKind` in the policy and leaving this field empty.\n\n- If `paramKind` is cluster-scoped, this field MUST be unset. Setting this field results in a configuration error.\n\n- If `paramKind` is namespace-scoped, the namespace of the object being evaluated for admission will be used when this field is left unset. Take care that if this is left empty the binding must not match any cluster-scoped resources, which will result in an error.", + "type": "string" + }, + "parameterNotFoundAction": { + "description": "`parameterNotFoundAction` controls the behavior of the binding when the resource exists, and name or selector is valid, but there are no parameters matched by the binding. If the value is set to `Allow`, then no matched parameters will be treated as successful validation by the binding. If set to `Deny`, then no matched parameters will be subject to the `failurePolicy` of the policy.\n\nAllowed values are `Allow` or `Deny` Default to `Deny`\n\nPossible enum values:\n - `\"Allow\"` Ignore means that an error finding params for a binding is ignored\n - `\"Deny\"` Fail means that an error finding params for a binding is ignored", "type": "string", - "default": "" + "enum": [ + "Allow", + "Deny" + ] }, - "verbs": { - "description": "verbs is a list of supported API operation types (this includes but is not limited to get, list, watch, create, update, patch, delete, deletecollection, and proxy). Subresources may define custom verbs outside the standard Kubernetes verb set. Clients should expect the behavior of standard verbs to align with Kubernetes interaction conventions.", + "selector": { + "description": "selector can be used to match multiple param objects based on their labels. Supply selector: {} to match all resources of the ParamKind.\n\nIf multiple params are found, they are all evaluated with the policy expressions and the results are ANDed together.\n\nOne of `name` or `selector` must be set, but `name` and `selector` are mutually exclusive properties. If one is set, the other must be unset.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "admissionregistration.k8s.io", + "Version": "v1alpha1", + "Kind": "ParamRef", + "Scope": "Namespaced" + }, + "x-kubernetes-map-type": "atomic" + }, + "io.k8s.api.admissionregistration.v1alpha1.TypeChecking": { + "description": "TypeChecking contains results of type checking the expressions in the ValidatingAdmissionPolicy", + "type": "object", + "properties": { + "expressionWarnings": { + "description": "The type checking warnings for each expression.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.ExpressionWarning" }, - "x-kubernetes-list-type": "set" + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "apidiscovery.k8s.io", - "Version": "v2", - "Kind": "APISubresourceDiscovery", + "Group": "admissionregistration.k8s.io", + "Version": "v1alpha1", + "Kind": "TypeChecking", "Scope": "Namespaced" } }, - "io.k8s.api.apidiscovery.v2.APIVersionDiscovery": { - "description": "APIVersionDiscovery holds a list of APIResourceDiscovery types that are served for a particular version within an API Group.", + "io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicy": { + "description": "ValidatingAdmissionPolicy describes the definition of an admission validation policy that accepts or rejects an object without changing it.", "type": "object", - "required": [ - "version" - ], "properties": { - "freshness": { - "description": "freshness marks whether a group version's discovery document is up to date. \"Current\" indicates the discovery document was recently refreshed. \"Stale\" indicates the discovery document could not be retrieved and the returned discovery document may be significantly out of date. Clients that require the latest version of the discovery information be retrieved before performing an operation should not use the aggregated document", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "resources": { - "description": "resources is a list of APIResourceDiscovery objects for the corresponding group version.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.apidiscovery.v2.APIResourceDiscovery" - }, - "x-kubernetes-list-map-keys": [ - "resource" - ], - "x-kubernetes-list-type": "map" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "version": { - "description": "version is the name of the version within a group version.", - "type": "string", - "default": "" + "metadata": { + "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "Specification of the desired behavior of the ValidatingAdmissionPolicy.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicySpec" + }, + "status": { + "description": "The status of the ValidatingAdmissionPolicy, including warnings that are useful to determine if the policy behaves in the expected way. Populated by the system. Read-only.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "apidiscovery.k8s.io", - "Version": "v2", - "Kind": "APIVersionDiscovery", - "Scope": "Namespaced" + "Type": "object", + "Group": "admissionregistration.k8s.io", + "Version": "v1alpha1", + "Kind": "ValidatingAdmissionPolicy", + "Scope": "Clustered" } }, - "io.k8s.api.apidiscovery.v2beta1.APIGroupDiscovery": { - "description": "APIGroupDiscovery holds information about which resources are being served for all version of the API Group. It contains a list of APIVersionDiscovery that holds a list of APIResourceDiscovery types served for a version. Versions are in descending order of preference, with the first version being the preferred entry.", + "io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyBinding": { + "description": "ValidatingAdmissionPolicyBinding binds the ValidatingAdmissionPolicy with paramerized resources. ValidatingAdmissionPolicyBinding and parameter CRDs together define how cluster administrators configure policies for clusters.\n\nFor a given admission request, each binding will cause its policy to be evaluated N times, where N is 1 for policies/bindings that don't use params, otherwise N is the number of parameters selected by the binding.\n\nThe CEL expressions of a policy must have a computed CEL cost below the maximum CEL budget. Each evaluation of the policy is given an independent CEL cost budget. Adding/removing policies, bindings, or params can not affect whether a given (policy, binding, param) combination is within its own CEL budget.", "type": "object", "properties": { "apiVersion": { @@ -18339,33 +18263,26 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. The only field completed will be name. For instance, resourceVersion will be empty. name is the name of the API group whose discovery information is presented here. name is allowed to be \"\" to represent the legacy, ungroupified resources. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "versions": { - "description": "versions are the versions supported in this group. They are sorted in descending order of preference, with the preferred version being the first entry.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.apidiscovery.v2beta1.APIVersionDiscovery" - }, - "x-kubernetes-list-map-keys": [ - "version" - ], - "x-kubernetes-list-type": "map" + "spec": { + "description": "Specification of the desired behavior of the ValidatingAdmissionPolicyBinding.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyBindingSpec" } }, "x-fabric8-info": { "Type": "object", - "Group": "apidiscovery.k8s.io", - "Version": "v2beta1", - "Kind": "APIGroupDiscovery", - "Scope": "Namespaced" + "Group": "admissionregistration.k8s.io", + "Version": "v1alpha1", + "Kind": "ValidatingAdmissionPolicyBinding", + "Scope": "Clustered" } }, - "io.k8s.api.apidiscovery.v2beta1.APIGroupDiscoveryList": { - "description": "APIGroupDiscoveryList is a resource containing a list of APIGroupDiscovery. This is one of the types able to be returned from the /api and /apis endpoint and contains an aggregated list of API resources (built-ins, Custom Resource Definitions, resources from aggregated servers) that a cluster supports.", + "io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyBindingList": { + "description": "ValidatingAdmissionPolicyBindingList is a list of ValidatingAdmissionPolicyBinding.", "type": "object", "required": [ "items" @@ -18376,11 +18293,11 @@ "type": "string" }, "items": { - "description": "items is the list of groups for discovery. The groups are listed in priority order.", + "description": "List of PolicyBinding.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apidiscovery.v2beta1.APIGroupDiscovery" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyBinding" } }, "kind": { @@ -18388,475 +18305,479 @@ "type": "string" }, "metadata": { - "description": "ResourceVersion will not be set, because this does not have a replayable ordering among multiple apiservers. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "apidiscovery.k8s.io", - "Version": "v2beta1", - "Kind": "APIGroupDiscoveryList", + "Group": "admissionregistration.k8s.io", + "Version": "v1alpha1", + "Kind": "ValidatingAdmissionPolicyBindingList", "Scope": "Namespaced" } }, - "io.k8s.api.apidiscovery.v2beta1.APIResourceDiscovery": { - "description": "APIResourceDiscovery provides information about an API resource for discovery.", + "io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyBindingSpec": { + "description": "ValidatingAdmissionPolicyBindingSpec is the specification of the ValidatingAdmissionPolicyBinding.", "type": "object", - "required": [ - "resource", - "scope", - "singularResource", - "verbs" - ], "properties": { - "categories": { - "description": "categories is a list of the grouped resources this resource belongs to (e.g. 'all'). Clients may use this to simplify acting on multiple resource types at once.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "resource": { - "description": "resource is the plural name of the resource. This is used in the URL path and is the unique identifier for this resource across all versions in the API group. Resources with non-empty groups are located at /apis/\u003cAPIGroupDiscovery.objectMeta.name\u003e/\u003cAPIVersionDiscovery.version\u003e/\u003cAPIResourceDiscovery.Resource\u003e Resources with empty groups are located at /api/v1/\u003cAPIResourceDiscovery.Resource\u003e", - "type": "string", - "default": "" + "matchResources": { + "description": "MatchResources declares what resources match this binding and will be validated by it. Note that this is intersected with the policy's matchConstraints, so only requests that are matched by the policy can be selected by this. If this is unset, all resources matched by the policy are validated by this binding When resourceRules is unset, it does not constrain resource matching. If a resource is matched by the other fields of this object, it will be validated. Note that this is differs from ValidatingAdmissionPolicy matchConstraints, where resourceRules are required.", + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.MatchResources" }, - "responseKind": { - "description": "responseKind describes the group, version, and kind of the serialization schema for the object type this endpoint typically returns. APIs may return other objects types at their discretion, such as error conditions, requests for alternate representations, or other operation specific behavior. This value will be null or empty if an APIService reports subresources but supports no operations on the parent resource", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind" + "paramRef": { + "description": "paramRef specifies the parameter resource used to configure the admission control policy. It should point to a resource of the type specified in ParamKind of the bound ValidatingAdmissionPolicy. If the policy specifies a ParamKind and the resource referred to by ParamRef does not exist, this binding is considered mis-configured and the FailurePolicy of the ValidatingAdmissionPolicy applied. If the policy does not specify a ParamKind then this field is ignored, and the rules are evaluated without a param.", + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.ParamRef" }, - "scope": { - "description": "scope indicates the scope of a resource, either Cluster or Namespaced", - "type": "string", - "default": "" + "policyName": { + "description": "PolicyName references a ValidatingAdmissionPolicy name which the ValidatingAdmissionPolicyBinding binds to. If the referenced resource does not exist, this binding is considered invalid and will be ignored Required.", + "type": "string" }, - "shortNames": { - "description": "shortNames is a list of suggested short names of the resource.", + "validationActions": { + "description": "validationActions declares how Validations of the referenced ValidatingAdmissionPolicy are enforced. If a validation evaluates to false it is always enforced according to these actions.\n\nFailures defined by the ValidatingAdmissionPolicy's FailurePolicy are enforced according to these actions only if the FailurePolicy is set to Fail, otherwise the failures are ignored. This includes compilation errors, runtime errors and misconfigurations of the policy.\n\nvalidationActions is declared as a set of action values. Order does not matter. validationActions may not contain duplicates of the same action.\n\nThe supported actions values are:\n\n\"Deny\" specifies that a validation failure results in a denied request.\n\n\"Warn\" specifies that a validation failure is reported to the request client in HTTP Warning headers, with a warning code of 299. Warnings can be sent both for allowed or denied admission responses.\n\n\"Audit\" specifies that a validation failure is included in the published audit event for the request. The audit event will contain a `validation.policy.admission.k8s.io/validation_failure` audit annotation with a value containing the details of the validation failures, formatted as a JSON list of objects, each with the following fields: - message: The validation failure message string - policy: The resource name of the ValidatingAdmissionPolicy - binding: The resource name of the ValidatingAdmissionPolicyBinding - expressionIndex: The index of the failed validations in the ValidatingAdmissionPolicy - validationActions: The enforcement actions enacted for the validation failure Example audit annotation: `\"validation.policy.admission.k8s.io/validation_failure\": \"[{\\\"message\\\": \\\"Invalid value\\\", {\\\"policy\\\": \\\"policy.example.com\\\", {\\\"binding\\\": \\\"policybinding.example.com\\\", {\\\"expressionIndex\\\": \\\"1\\\", {\\\"validationActions\\\": [\\\"Audit\\\"]}]\"`\n\nClients should expect to handle additional values by ignoring any values not recognized.\n\n\"Deny\" and \"Warn\" may not be used together since this combination needlessly duplicates the validation failure both in the API response body and the HTTP warning headers.\n\nRequired.", "type": "array", "items": { "type": "string", - "default": "" + "default": "", + "enum": [ + "Audit", + "Deny", + "Warn" + ] }, "x-kubernetes-list-type": "set" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "admissionregistration.k8s.io", + "Version": "v1alpha1", + "Kind": "ValidatingAdmissionPolicyBindingSpec", + "Scope": "Namespaced" + } + }, + "io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyList": { + "description": "ValidatingAdmissionPolicyList is a list of ValidatingAdmissionPolicy.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "singularResource": { - "description": "singularResource is the singular name of the resource. This allows clients to handle plural and singular opaquely. For many clients the singular form of the resource will be more understandable to users reading messages and should be used when integrating the name of the resource into a sentence. The command line tool kubectl, for example, allows use of the singular resource name in place of plurals. The singular form of a resource should always be an optional element - when in doubt use the canonical resource name.", - "type": "string", - "default": "" - }, - "subresources": { - "description": "subresources is a list of subresources provided by this resource. Subresources are located at /apis/\u003cAPIGroupDiscovery.objectMeta.name\u003e/\u003cAPIVersionDiscovery.version\u003e/\u003cAPIResourceDiscovery.Resource\u003e/name-of-instance/\u003cAPIResourceDiscovery.subresources[i].subresource\u003e", + "items": { + "description": "List of ValidatingAdmissionPolicy.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apidiscovery.v2beta1.APISubresourceDiscovery" - }, - "x-kubernetes-list-map-keys": [ - "subresource" - ], - "x-kubernetes-list-type": "map" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicy" + } }, - "verbs": { - "description": "verbs is a list of supported API operation types (this includes but is not limited to get, list, watch, create, update, patch, delete, deletecollection, and proxy).", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "apidiscovery.k8s.io", - "Version": "v2beta1", - "Kind": "APIResourceDiscovery", + "Type": "list", + "Group": "admissionregistration.k8s.io", + "Version": "v1alpha1", + "Kind": "ValidatingAdmissionPolicyList", "Scope": "Namespaced" } }, - "io.k8s.api.apidiscovery.v2beta1.APISubresourceDiscovery": { - "description": "APISubresourceDiscovery provides information about an API subresource for discovery.", + "io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicySpec": { + "description": "ValidatingAdmissionPolicySpec is the specification of the desired behavior of the AdmissionPolicy.", "type": "object", - "required": [ - "subresource", - "verbs" - ], "properties": { - "acceptedTypes": { - "description": "acceptedTypes describes the kinds that this endpoint accepts. Subresources may accept the standard content types or define custom negotiation schemes. The list may not be exhaustive for all operations.", + "auditAnnotations": { + "description": "auditAnnotations contains CEL expressions which are used to produce audit annotations for the audit event of the API request. validations and auditAnnotations may not both be empty; a least one of validations or auditAnnotations is required.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.AuditAnnotation" + }, + "x-kubernetes-list-type": "atomic" + }, + "failurePolicy": { + "description": "failurePolicy defines how to handle failures for the admission policy. Failures can occur from CEL expression parse errors, type check errors, runtime errors and invalid or mis-configured policy definitions or bindings.\n\nA policy is invalid if spec.paramKind refers to a non-existent Kind. A binding is invalid if spec.paramRef.name refers to a non-existent resource.\n\nfailurePolicy does not define how validations that evaluate to false are handled.\n\nWhen failurePolicy is set to Fail, ValidatingAdmissionPolicyBinding validationActions define how failures are enforced.\n\nAllowed values are Ignore or Fail. Defaults to Fail.\n\nPossible enum values:\n - `\"Fail\"` means that an error calling the webhook causes the admission to fail.\n - `\"Ignore\"` means that an error calling the webhook is ignored.", + "type": "string", + "enum": [ + "Fail", + "Ignore" + ] + }, + "matchConditions": { + "description": "MatchConditions is a list of conditions that must be met for a request to be validated. Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed.\n\nIf a parameter object is provided, it can be accessed via the `params` handle in the same manner as validation expressions.\n\nThe exact matching logic is (in order):\n 1. If ANY matchCondition evaluates to FALSE, the policy is skipped.\n 2. If ALL matchConditions evaluate to TRUE, the policy is evaluated.\n 3. If any matchCondition evaluates to an error (but none are FALSE):\n - If failurePolicy=Fail, reject the request\n - If failurePolicy=Ignore, the policy is skipped", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.MatchCondition" }, "x-kubernetes-list-map-keys": [ - "group", - "version", - "kind" + "name" ], - "x-kubernetes-list-type": "map" + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" }, - "responseKind": { - "description": "responseKind describes the group, version, and kind of the serialization schema for the object type this endpoint typically returns. Some subresources do not return normal resources, these will have null or empty return types.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind" + "matchConstraints": { + "description": "MatchConstraints specifies what resources this policy is designed to validate. The AdmissionPolicy cares about a request if it matches _all_ Constraints. However, in order to prevent clusters from being put into an unstable state that cannot be recovered from via the API ValidatingAdmissionPolicy cannot match ValidatingAdmissionPolicy and ValidatingAdmissionPolicyBinding. Required.", + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.MatchResources" }, - "subresource": { - "description": "subresource is the name of the subresource. This is used in the URL path and is the unique identifier for this resource across all versions.", - "type": "string", - "default": "" + "paramKind": { + "description": "ParamKind specifies the kind of resources used to parameterize this policy. If absent, there are no parameters for this policy and the param CEL variable will not be provided to validation expressions. If ParamKind refers to a non-existent kind, this policy definition is mis-configured and the FailurePolicy is applied. If paramKind is specified but paramRef is unset in ValidatingAdmissionPolicyBinding, the params variable will be null.", + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.ParamKind" }, - "verbs": { - "description": "verbs is a list of supported API operation types (this includes but is not limited to get, list, watch, create, update, patch, delete, deletecollection, and proxy). Subresources may define custom verbs outside the standard Kubernetes verb set. Clients should expect the behavior of standard verbs to align with Kubernetes interaction conventions.", + "validations": { + "description": "Validations contain CEL expressions which is used to apply the validation. Validations and AuditAnnotations may not both be empty; a minimum of one Validations or AuditAnnotations is required.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.Validation" }, - "x-kubernetes-list-type": "set" + "x-kubernetes-list-type": "atomic" + }, + "variables": { + "description": "Variables contain definitions of variables that can be used in composition of other expressions. Each variable is defined as a named CEL expression. The variables defined here will be available under `variables` in other expressions of the policy except MatchConditions because MatchConditions are evaluated before the rest of the policy.\n\nThe expression of a variable can refer to other variables defined earlier in the list but not those after. Thus, Variables must be sorted by the order of first appearance and acyclic.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.Variable" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" } }, "x-fabric8-info": { "Type": "nested", - "Group": "apidiscovery.k8s.io", - "Version": "v2beta1", - "Kind": "APISubresourceDiscovery", + "Group": "admissionregistration.k8s.io", + "Version": "v1alpha1", + "Kind": "ValidatingAdmissionPolicySpec", "Scope": "Namespaced" } }, - "io.k8s.api.apidiscovery.v2beta1.APIVersionDiscovery": { - "description": "APIVersionDiscovery holds a list of APIResourceDiscovery types that are served for a particular version within an API Group.", + "io.k8s.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyStatus": { + "description": "ValidatingAdmissionPolicyStatus represents the status of a ValidatingAdmissionPolicy.", "type": "object", - "required": [ - "version" - ], "properties": { - "freshness": { - "description": "freshness marks whether a group version's discovery document is up to date. \"Current\" indicates the discovery document was recently refreshed. \"Stale\" indicates the discovery document could not be retrieved and the returned discovery document may be significantly out of date. Clients that require the latest version of the discovery information be retrieved before performing an operation should not use the aggregated document", - "type": "string" - }, - "resources": { - "description": "resources is a list of APIResourceDiscovery objects for the corresponding group version.", + "conditions": { + "description": "The conditions represent the latest available observations of a policy's current state.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apidiscovery.v2beta1.APIResourceDiscovery" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" }, "x-kubernetes-list-map-keys": [ - "resource" + "type" ], "x-kubernetes-list-type": "map" }, - "version": { - "description": "version is the name of the version within a group version.", - "type": "string", - "default": "" + "observedGeneration": { + "description": "The generation observed by the controller.", + "type": "integer", + "format": "int64" + }, + "typeChecking": { + "description": "The results of type checking for each expression. Presence of this field indicates the completion of the type checking.", + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.TypeChecking" } }, "x-fabric8-info": { "Type": "nested", - "Group": "apidiscovery.k8s.io", - "Version": "v2beta1", - "Kind": "APIVersionDiscovery", + "Group": "admissionregistration.k8s.io", + "Version": "v1alpha1", + "Kind": "ValidatingAdmissionPolicyStatus", "Scope": "Namespaced" } }, - "io.k8s.api.apiserverinternal.v1alpha1.ServerStorageVersion": { - "description": "An API server instance reports the version it can decode and the version it encodes objects to when persisting objects in the backend.", + "io.k8s.api.admissionregistration.v1alpha1.Validation": { + "description": "Validation specifies the CEL expression which is used to apply the validation.", "type": "object", + "required": [ + "expression" + ], "properties": { - "apiServerID": { - "description": "The ID of the reporting API server.", - "type": "string" + "expression": { + "description": "Expression represents the expression which will be evaluated by CEL. ref: https://github.com/google/cel-spec CEL expressions have access to the contents of the API request/response, organized into CEL variables as well as some other useful variables:\n\n- 'object' - The object from the incoming request. The value is null for DELETE requests. - 'oldObject' - The existing object. The value is null for CREATE requests. - 'request' - Attributes of the API request([ref](/pkg/apis/admission/types.go#AdmissionRequest)). - 'params' - Parameter resource referred to by the policy binding being evaluated. Only populated if the policy has a ParamKind. - 'namespaceObject' - The namespace object that the incoming object belongs to. The value is null for cluster-scoped resources. - 'variables' - Map of composited variables, from its name to its lazily evaluated value.\n For example, a variable named 'foo' can be accessed as 'variables.foo'.\n- 'authorizer' - A CEL Authorizer. May be used to perform authorization checks for the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n- 'authorizer.requestResource' - A CEL ResourceCheck constructed from the 'authorizer' and configured with the\n request resource.\n\nThe `apiVersion`, `kind`, `metadata.name` and `metadata.generateName` are always accessible from the root of the object. No other metadata properties are accessible.\n\nOnly property names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*` are accessible. Accessible property names are escaped according to the following rules when accessed in the expression: - '__' escapes to '__underscores__' - '.' escapes to '__dot__' - '-' escapes to '__dash__' - '/' escapes to '__slash__' - Property names that exactly match a CEL RESERVED keyword escape to '__{keyword}__'. The keywords are:\n\t \"true\", \"false\", \"null\", \"in\", \"as\", \"break\", \"const\", \"continue\", \"else\", \"for\", \"function\", \"if\",\n\t \"import\", \"let\", \"loop\", \"package\", \"namespace\", \"return\".\nExamples:\n - Expression accessing a property named \"namespace\": {\"Expression\": \"object.__namespace__ \u003e 0\"}\n - Expression accessing a property named \"x-prop\": {\"Expression\": \"object.x__dash__prop \u003e 0\"}\n - Expression accessing a property named \"redact__d\": {\"Expression\": \"object.redact__underscores__d \u003e 0\"}\n\nEquality on arrays with list type of 'set' or 'map' ignores element order, i.e. [1, 2] == [2, 1]. Concatenation on arrays with x-kubernetes-list-type use the semantics of the list type:\n - 'set': `X + Y` performs a union where the array positions of all elements in `X` are preserved and\n non-intersecting elements in `Y` are appended, retaining their partial order.\n - 'map': `X + Y` performs a merge where the array positions of all keys in `X` are preserved but the values\n are overwritten by values in `Y` when the key sets of `X` and `Y` intersect. Elements in `Y` with\n non-intersecting keys are appended, retaining their partial order.\nRequired.", + "type": "string", + "default": "" }, - "decodableVersions": { - "description": "The API server can decode objects encoded in these versions. The encodingVersion must be included in the decodableVersions.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "message": { + "description": "Message represents the message displayed when validation fails. The message is required if the Expression contains line breaks. The message must not contain line breaks. If unset, the message is \"failed rule: {Rule}\". e.g. \"must be a URL with the host matching spec.host\" If the Expression contains line breaks. Message is required. The message must not contain line breaks. If unset, the message is \"failed Expression: {Expression}\".", + "type": "string" }, - "encodingVersion": { - "description": "The API server encodes the object to this version when persisting it in the backend (e.g., etcd).", + "messageExpression": { + "description": "messageExpression declares a CEL expression that evaluates to the validation failure message that is returned when this rule fails. Since messageExpression is used as a failure message, it must evaluate to a string. If both message and messageExpression are present on a validation, then messageExpression will be used if validation fails. If messageExpression results in a runtime error, the runtime error is logged, and the validation failure message is produced as if the messageExpression field were unset. If messageExpression evaluates to an empty string, a string with only spaces, or a string that contains line breaks, then the validation failure message will also be produced as if the messageExpression field were unset, and the fact that messageExpression produced an empty string/string with only spaces/string with line breaks will be logged. messageExpression has access to all the same variables as the `expression` except for 'authorizer' and 'authorizer.requestResource'. Example: \"object.x must be less than max (\"+string(params.max)+\")\"", "type": "string" }, - "servedVersions": { - "description": "The API server can serve these versions. DecodableVersions must include all ServedVersions.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "reason": { + "description": "Reason represents a machine-readable description of why this validation failed. If this is the first validation in the list to fail, this reason, as well as the corresponding HTTP response code, are used in the HTTP response to the client. The currently supported reasons are: \"Unauthorized\", \"Forbidden\", \"Invalid\", \"RequestEntityTooLarge\". If not set, StatusReasonInvalid is used in the response to the client.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "internal.apiserver.k8s.io", + "Group": "admissionregistration.k8s.io", "Version": "v1alpha1", - "Kind": "ServerStorageVersion", + "Kind": "Validation", "Scope": "Namespaced" } }, - "io.k8s.api.apiserverinternal.v1alpha1.StorageVersion": { - "description": "Storage version of a specific resource.", + "io.k8s.api.admissionregistration.v1alpha1.Variable": { + "description": "Variable is the definition of a variable that is used for composition.", "type": "object", "required": [ - "spec", - "status" + "name", + "expression" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "The name is \u003cgroup\u003e.\u003cresource\u003e.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "Spec is an empty spec. It is here to comply with Kubernetes API style.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersionSpec" + "expression": { + "description": "Expression is the expression that will be evaluated as the value of the variable. The CEL expression has access to the same identifiers as the CEL expressions in Validation.", + "type": "string", + "default": "" }, - "status": { - "description": "API server instances report the version they can decode and the version they encode objects to when persisting objects in the backend.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersionStatus" + "name": { + "description": "Name is the name of the variable. The name must be a valid CEL identifier and unique among all variables. The variable can be accessed in other expressions through `variables` For example, if name is \"foo\", the variable will be available as `variables.foo`", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "internal.apiserver.k8s.io", + "Type": "nested", + "Group": "admissionregistration.k8s.io", "Version": "v1alpha1", - "Kind": "StorageVersion", - "Scope": "Clustered" + "Kind": "Variable", + "Scope": "Namespaced" } }, - "io.k8s.api.apiserverinternal.v1alpha1.StorageVersionCondition": { - "description": "Describes the state of the storageVersion at a certain point.", + "io.k8s.api.admissionregistration.v1beta1.AuditAnnotation": { + "description": "AuditAnnotation describes how to produce an audit annotation for an API request.", "type": "object", "required": [ - "type", - "status", - "reason", - "message" + "key", + "valueExpression" ], "properties": { - "lastTransitionTime": { - "description": "Last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "A human readable message indicating details about the transition.", - "type": "string" - }, - "observedGeneration": { - "description": "If set, this represents the .metadata.generation that the condition was set based upon.", - "type": "integer", - "format": "int64" - }, - "reason": { - "description": "The reason for the condition's last transition.", - "type": "string", - "default": "" - }, - "status": { - "description": "Status of the condition, one of True, False, Unknown.", + "key": { + "description": "key specifies the audit annotation key. The audit annotation keys of a ValidatingAdmissionPolicy must be unique. The key must be a qualified name ([A-Za-z0-9][-A-Za-z0-9_.]*) no more than 63 bytes in length.\n\nThe key is combined with the resource name of the ValidatingAdmissionPolicy to construct an audit annotation key: \"{ValidatingAdmissionPolicy name}/{key}\".\n\nIf an admission webhook uses the same resource name as this ValidatingAdmissionPolicy and the same audit annotation key, the annotation key will be identical. In this case, the first annotation written with the key will be included in the audit event and all subsequent annotations with the same key will be discarded.\n\nRequired.", "type": "string", "default": "" }, - "type": { - "description": "Type of the condition.", + "valueExpression": { + "description": "valueExpression represents the expression which is evaluated by CEL to produce an audit annotation value. The expression must evaluate to either a string or null value. If the expression evaluates to a string, the audit annotation is included with the string value. If the expression evaluates to null or empty string the audit annotation will be omitted. The valueExpression may be no longer than 5kb in length. If the result of the valueExpression is more than 10kb in length, it will be truncated to 10kb.\n\nIf multiple ValidatingAdmissionPolicyBinding resources match an API request, then the valueExpression will be evaluated for each binding. All unique values produced by the valueExpressions will be joined together in a comma-separated list.\n\nRequired.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "internal.apiserver.k8s.io", - "Version": "v1alpha1", - "Kind": "StorageVersionCondition", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "AuditAnnotation", "Scope": "Namespaced" } }, - "io.k8s.api.apiserverinternal.v1alpha1.StorageVersionList": { - "description": "A list of StorageVersions.", + "io.k8s.api.admissionregistration.v1beta1.ExpressionWarning": { + "description": "ExpressionWarning is a warning information that targets a specific expression.", "type": "object", "required": [ - "items" + "fieldRef", + "warning" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "Items holds a list of StorageVersion", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersion" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "fieldRef": { + "description": "The path to the field that refers the expression. For example, the reference to the expression of the first item of validations is \"spec.validations[0].expression\"", + "type": "string", + "default": "" }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "warning": { + "description": "The content of type checking information in a human-readable form. Each line of the warning contains the type that the expression is checked against, followed by the type check error from the compiler.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "list", - "Group": "internal.apiserver.k8s.io", - "Version": "v1alpha1", - "Kind": "StorageVersionList", + "Type": "nested", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "ExpressionWarning", "Scope": "Namespaced" } }, - "io.k8s.api.apiserverinternal.v1alpha1.StorageVersionSpec": { - "description": "StorageVersionSpec is an empty spec.", + "io.k8s.api.admissionregistration.v1beta1.MatchCondition": { + "description": "MatchCondition represents a condition which must be fulfilled for a request to be sent to a webhook.", "type": "object", + "required": [ + "name", + "expression" + ], + "properties": { + "expression": { + "description": "Expression represents the expression which will be evaluated by CEL. Must evaluate to bool. CEL expressions have access to the contents of the AdmissionRequest and Authorizer, organized into CEL variables:\n\n'object' - The object from the incoming request. The value is null for DELETE requests. 'oldObject' - The existing object. The value is null for CREATE requests. 'request' - Attributes of the admission request(/pkg/apis/admission/types.go#AdmissionRequest). 'authorizer' - A CEL Authorizer. May be used to perform authorization checks for the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n'authorizer.requestResource' - A CEL ResourceCheck constructed from the 'authorizer' and configured with the\n request resource.\nDocumentation on CEL: https://kubernetes.io/docs/reference/using-api/cel/\n\nRequired.", + "type": "string", + "default": "" + }, + "name": { + "description": "Name is an identifier for this match condition, used for strategic merging of MatchConditions, as well as providing an identifier for logging purposes. A good name should be descriptive of the associated expression. Name must be a qualified name consisting of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character (e.g. 'MyName', or 'my.name', or '123-abc', regex used for validation is '([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9]') with an optional DNS subdomain prefix and '/' (e.g. 'example.com/MyName')\n\nRequired.", + "type": "string", + "default": "" + } + }, "x-fabric8-info": { "Type": "nested", - "Group": "internal.apiserver.k8s.io", - "Version": "v1alpha1", - "Kind": "StorageVersionSpec", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "MatchCondition", "Scope": "Namespaced" } }, - "io.k8s.api.apiserverinternal.v1alpha1.StorageVersionStatus": { - "description": "API server instances report the versions they can decode and the version they encode objects to when persisting objects in the backend.", + "io.k8s.api.admissionregistration.v1beta1.MatchResources": { + "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)", "type": "object", "properties": { - "commonEncodingVersion": { - "description": "If all API server instances agree on the same encoding storage version, then this field is set to that version. Otherwise this field is left empty. API servers should finish updating its storageVersionStatus entry before serving write operations, so that this field will be in sync with the reality.", - "type": "string" - }, - "conditions": { - "description": "The latest available observations of the storageVersion's state.", + "excludeResourceRules": { + "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersionCondition" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.NamedRuleWithOperations" }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" + "x-kubernetes-list-type": "atomic" }, - "storageVersions": { - "description": "The reported versions per API server instance.", + "matchPolicy": { + "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"", + "type": "string" + }, + "namespaceSelector": { + "description": "NamespaceSelector decides whether to run the admission control policy on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the policy.\n\nFor example, to run the webhook on any objects whose namespace is not associated with \"runlevel\" of \"0\" or \"1\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"runlevel\",\n \"operator\": \"NotIn\",\n \"values\": [\n \"0\",\n \"1\"\n ]\n }\n ]\n}\n\nIf instead you want to only run the policy on any objects whose namespace is associated with the \"environment\" of \"prod\" or \"staging\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"environment\",\n \"operator\": \"In\",\n \"values\": [\n \"prod\",\n \"staging\"\n ]\n }\n ]\n}\n\nSee https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ for more examples of label selectors.\n\nDefault to the empty LabelSelector, which matches everything.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "objectSelector": { + "description": "ObjectSelector decides whether to run the validation based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the cel validation, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "resourceRules": { + "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apiserverinternal.v1alpha1.ServerStorageVersion" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.NamedRuleWithOperations" }, - "x-kubernetes-list-map-keys": [ - "apiServerID" - ], - "x-kubernetes-list-type": "map" + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "internal.apiserver.k8s.io", - "Version": "v1alpha1", - "Kind": "StorageVersionStatus", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "MatchResources", "Scope": "Namespaced" - } + }, + "x-kubernetes-map-type": "atomic" }, - "io.k8s.api.apps.v1.ControllerRevision": { - "description": "ControllerRevision implements an immutable snapshot of state data. Clients are responsible for serializing and deserializing the objects that contain their internal state. Once a ControllerRevision has been successfully created, it can not be updated. The API Server will fail validation of all requests that attempt to mutate the Data field. ControllerRevisions may, however, be deleted. Note that, due to its use by both the DaemonSet and StatefulSet controllers for update and rollback, this object is beta. However, it may be subject to name and representation changes in future releases, and clients should not depend on its stability. It is primarily for internal use by controllers.", + "io.k8s.api.admissionregistration.v1beta1.MutatingWebhook": { + "description": "MutatingWebhook describes an admission webhook and the resources and operations it applies to.", "type": "object", "required": [ - "revision" + "name", + "clientConfig" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "admissionReviewVersions": { + "description": "AdmissionReviewVersions is an ordered list of preferred `AdmissionReview` versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy. Default to `['v1beta1']`.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "data": { - "description": "Data is the serialized representation of the state.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "clientConfig": { + "description": "ClientConfig defines how to communicate with the hook. Required", + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.WebhookClientConfig" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "failurePolicy": { + "description": "FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Ignore.", "type": "string" }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "matchConditions": { + "description": "MatchConditions is a list of conditions that must be met for a request to be sent to this webhook. Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed.\n\nThe exact matching logic is (in order):\n 1. If ANY matchCondition evaluates to FALSE, the webhook is skipped.\n 2. If ALL matchConditions evaluate to TRUE, the webhook is called.\n 3. If any matchCondition evaluates to an error (but none are FALSE):\n - If failurePolicy=Fail, reject the request\n - If failurePolicy=Ignore, the error is ignored and the webhook is skipped", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MatchCondition" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" }, - "revision": { - "description": "Revision indicates the revision of the state represented by Data.", - "type": "integer", - "format": "int64", - "default": 0 - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "", - "Version": "v1", - "Kind": "ControllerRevision", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1.ControllerRevisionList": { - "description": "ControllerRevisionList is a resource containing a list of ControllerRevision objects.", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "matchPolicy": { + "description": "matchPolicy defines how the \"rules\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook.\n\nDefaults to \"Exact\"", "type": "string" }, - "items": { - "description": "Items is the list of ControllerRevisions", + "name": { + "description": "The name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where \"imagepolicy\" is the name of the webhook, and kubernetes.io is the name of the organization. Required.", + "type": "string", + "default": "" + }, + "namespaceSelector": { + "description": "NamespaceSelector decides whether to run the webhook on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the webhook.\n\nFor example, to run the webhook on any objects whose namespace is not associated with \"runlevel\" of \"0\" or \"1\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"runlevel\",\n \"operator\": \"NotIn\",\n \"values\": [\n \"0\",\n \"1\"\n ]\n }\n ]\n}\n\nIf instead you want to only run the webhook on any objects whose namespace is associated with the \"environment\" of \"prod\" or \"staging\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"environment\",\n \"operator\": \"In\",\n \"values\": [\n \"prod\",\n \"staging\"\n ]\n }\n ]\n}\n\nSee https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ for more examples of label selectors.\n\nDefault to the empty LabelSelector, which matches everything.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "objectSelector": { + "description": "ObjectSelector decides whether to run the webhook based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the webhook, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "reinvocationPolicy": { + "description": "reinvocationPolicy indicates whether this webhook should be called multiple times as part of a single admission evaluation. Allowed values are \"Never\" and \"IfNeeded\".\n\nNever: the webhook will not be called more than once in a single admission evaluation.\n\nIfNeeded: the webhook will be called at least one additional time as part of the admission evaluation if the object being admitted is modified by other admission plugins after the initial webhook call. Webhooks that specify this option *must* be idempotent, able to process objects they previously admitted. Note: * the number of additional invocations is not guaranteed to be exactly one. * if additional invocations result in further modifications to the object, webhooks are not guaranteed to be invoked again. * webhooks that use this option may be reordered to minimize the number of additional invocations. * to validate an object after all mutations are guaranteed complete, use a validating admission webhook instead.\n\nDefaults to \"Never\".", + "type": "string" + }, + "rules": { + "description": "Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks from putting the cluster in a state which cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1.ControllerRevision" - } + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.RuleWithOperations" + }, + "x-kubernetes-list-type": "atomic" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "sideEffects": { + "description": "SideEffects states whether this webhook has side effects. Acceptable values are: Unknown, None, Some, NoneOnDryRun Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some. Defaults to Unknown.", "type": "string" }, - "metadata": { - "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "timeoutSeconds": { + "description": "TimeoutSeconds specifies the timeout for this webhook. After the timeout passes, the webhook call will be ignored or the API call will fail based on the failure policy. The timeout value must be between 1 and 30 seconds. Default to 30 seconds.", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { - "Type": "list", - "Group": "", - "Version": "v1", - "Kind": "ControllerRevisionList", + "Type": "nested", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "MutatingWebhook", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1.DaemonSet": { - "description": "DaemonSet represents the configuration of a daemon set.", + "io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfiguration": { + "description": "MutatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and may change the object. Deprecated in v1.16, planned for removal in v1.19. Use admissionregistration.k8s.io/v1 MutatingWebhookConfiguration instead.", "type": "object", "properties": { "apiVersion": { @@ -18868,70 +18789,35 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "spec": { - "description": "The desired behavior of this daemon set. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSetSpec" - }, - "status": { - "description": "The current status of this daemon set. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSetStatus" + "webhooks": { + "description": "Webhooks is a list of webhooks and the affected resources and operations.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhook" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" } }, "x-fabric8-info": { "Type": "object", - "Group": "", - "Version": "v1", - "Kind": "DaemonSet", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1.DaemonSetCondition": { - "description": "DaemonSetCondition describes the state of a DaemonSet at a certain point.", - "type": "object", - "required": [ - "type", - "status" - ], - "properties": { - "lastTransitionTime": { - "description": "Last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "A human readable message indicating details about the transition.", - "type": "string" - }, - "reason": { - "description": "The reason for the condition's last transition.", - "type": "string" - }, - "status": { - "description": "Status of the condition, one of True, False, Unknown.", - "type": "string", - "default": "" - }, - "type": { - "description": "Type of DaemonSet condition.", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "DaemonSetCondition", - "Scope": "Namespaced" + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "MutatingWebhookConfiguration", + "Scope": "Clustered" } }, - "io.k8s.api.apps.v1.DaemonSetList": { - "description": "DaemonSetList is a collection of daemon sets.", + "io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfigurationList": { + "description": "MutatingWebhookConfigurationList is a list of MutatingWebhookConfiguration.", "type": "object", "required": [ "items" @@ -18942,11 +18828,11 @@ "type": "string" }, "items": { - "description": "A list of daemon sets.", + "description": "List of MutatingWebhookConfiguration.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSet" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MutatingWebhookConfiguration" } }, "kind": { @@ -18954,169 +18840,201 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "", - "Version": "v1", - "Kind": "DaemonSetList", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "MutatingWebhookConfigurationList", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1.DaemonSetSpec": { - "description": "DaemonSetSpec is the specification of a daemon set.", + "io.k8s.api.admissionregistration.v1beta1.NamedRuleWithOperations": { + "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.", "type": "object", - "required": [ - "selector", - "template" - ], "properties": { - "minReadySeconds": { - "description": "The minimum number of seconds for which a newly created DaemonSet pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready).", - "type": "integer", - "format": "int32" + "apiGroups": { + "description": "APIGroups is the API groups the resources belong to. '*' is all groups. If '*' is present, the length of the slice must be one. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "revisionHistoryLimit": { - "description": "The number of old history to retain to allow rollback. This is a pointer to distinguish between explicit zero and not specified. Defaults to 10.", - "type": "integer", - "format": "int32" + "apiVersions": { + "description": "APIVersions is the API versions the resources belong to. '*' is all versions. If '*' is present, the length of the slice must be one. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "selector": { - "description": "A label query over pods that are managed by the daemon set. Must match in order to be controlled. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "operations": { + "description": "Operations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and any future admission operations that are added. If '*' is present, the length of the slice must be one. Required.", + "type": "array", + "items": { + "type": "string", + "default": "", + "enum": [ + "*", + "CONNECT", + "CREATE", + "DELETE", + "UPDATE" + ] + }, + "x-kubernetes-list-type": "atomic" }, - "template": { - "description": "An object that describes the pod that will be created. The DaemonSet will create exactly one copy of this pod on every node that matches the template's node selector (or on every node if no node selector is specified). The only allowed template.spec.restartPolicy value is \"Always\". More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" + "resourceNames": { + "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "updateStrategy": { - "description": "An update strategy to replace existing DaemonSet pods with new pods.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSetUpdateStrategy" + "resources": { + "description": "Resources is a list of resources this rule applies to.\n\nFor example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources.\n\nIf wildcard is present, the validation rule will ensure resources do not overlap with each other.\n\nDepending on the enclosing object, subresources might not be allowed. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "scope": { + "description": "scope specifies the scope of this rule. Valid values are \"Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped resources will match this rule. Namespace API objects are cluster-scoped. \"Namespaced\" means that only namespaced resources will match this rule. \"*\" means that there are no scope restrictions. Subresources match the scope of their parent resource. Default is \"*\".", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "DaemonSetSpec", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "NamedRuleWithOperations", "Scope": "Namespaced" - } + }, + "x-kubernetes-map-type": "atomic" }, - "io.k8s.api.apps.v1.DaemonSetStatus": { - "description": "DaemonSetStatus represents the current status of a daemon set.", + "io.k8s.api.admissionregistration.v1beta1.ParamKind": { + "description": "ParamKind is a tuple of Group Kind and Version.", "type": "object", - "required": [ - "currentNumberScheduled", - "numberMisscheduled", - "desiredNumberScheduled", - "numberReady" - ], "properties": { - "collisionCount": { - "description": "Count of hash collisions for the DaemonSet. The DaemonSet controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ControllerRevision.", - "type": "integer", - "format": "int32" - }, - "conditions": { - "description": "Represents the latest available observations of a DaemonSet's current state.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSetCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "currentNumberScheduled": { - "description": "The number of nodes that are running at least 1 daemon pod and are supposed to run the daemon pod. More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/", - "type": "integer", - "format": "int32", - "default": 0 + "apiVersion": { + "description": "APIVersion is the API group version the resources belong to. In format of \"group/version\". Required.", + "type": "string" }, - "desiredNumberScheduled": { - "description": "The total number of nodes that should be running the daemon pod (including nodes correctly running the daemon pod). More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/", - "type": "integer", - "format": "int32", - "default": 0 + "kind": { + "description": "Kind is the API kind the resources belong to. Required.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "ParamKind", + "Scope": "Namespaced" + }, + "x-kubernetes-map-type": "atomic" + }, + "io.k8s.api.admissionregistration.v1beta1.ParamRef": { + "description": "ParamRef describes how to locate the params to be used as input to expressions of rules applied by a policy binding.", + "type": "object", + "properties": { + "name": { + "description": "name is the name of the resource being referenced.\n\nOne of `name` or `selector` must be set, but `name` and `selector` are mutually exclusive properties. If one is set, the other must be unset.\n\nA single parameter used for all admission requests can be configured by setting the `name` field, leaving `selector` blank, and setting namespace if `paramKind` is namespace-scoped.", + "type": "string" }, - "numberAvailable": { - "description": "The number of nodes that should be running the daemon pod and have one or more of the daemon pod running and available (ready for at least spec.minReadySeconds)", - "type": "integer", - "format": "int32" + "namespace": { + "description": "namespace is the namespace of the referenced resource. Allows limiting the search for params to a specific namespace. Applies to both `name` and `selector` fields.\n\nA per-namespace parameter may be used by specifying a namespace-scoped `paramKind` in the policy and leaving this field empty.\n\n- If `paramKind` is cluster-scoped, this field MUST be unset. Setting this field results in a configuration error.\n\n- If `paramKind` is namespace-scoped, the namespace of the object being evaluated for admission will be used when this field is left unset. Take care that if this is left empty the binding must not match any cluster-scoped resources, which will result in an error.", + "type": "string" }, - "numberMisscheduled": { - "description": "The number of nodes that are running the daemon pod, but are not supposed to run the daemon pod. More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/", - "type": "integer", - "format": "int32", - "default": 0 + "parameterNotFoundAction": { + "description": "`parameterNotFoundAction` controls the behavior of the binding when the resource exists, and name or selector is valid, but there are no parameters matched by the binding. If the value is set to `Allow`, then no matched parameters will be treated as successful validation by the binding. If set to `Deny`, then no matched parameters will be subject to the `failurePolicy` of the policy.\n\nAllowed values are `Allow` or `Deny`\n\nRequired", + "type": "string" }, - "numberReady": { - "description": "numberReady is the number of nodes that should be running the daemon pod and have one or more of the daemon pod running with a Ready Condition.", - "type": "integer", - "format": "int32", - "default": 0 + "selector": { + "description": "selector can be used to match multiple param objects based on their labels. Supply selector: {} to match all resources of the ParamKind.\n\nIf multiple params are found, they are all evaluated with the policy expressions and the results are ANDed together.\n\nOne of `name` or `selector` must be set, but `name` and `selector` are mutually exclusive properties. If one is set, the other must be unset.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "ParamRef", + "Scope": "Namespaced" + }, + "x-kubernetes-map-type": "atomic" + }, + "io.k8s.api.admissionregistration.v1beta1.ServiceReference": { + "description": "ServiceReference holds a reference to Service.legacy.k8s.io", + "type": "object", + "required": [ + "namespace", + "name" + ], + "properties": { + "name": { + "description": "`name` is the name of the service. Required", + "type": "string", + "default": "" }, - "numberUnavailable": { - "description": "The number of nodes that should be running the daemon pod and have none of the daemon pod running and available (ready for at least spec.minReadySeconds)", - "type": "integer", - "format": "int32" + "namespace": { + "description": "`namespace` is the namespace of the service. Required", + "type": "string", + "default": "" }, - "observedGeneration": { - "description": "The most recent generation observed by the daemon set controller.", - "type": "integer", - "format": "int64" + "path": { + "description": "`path` is an optional URL path which will be sent in any request to this service.", + "type": "string" }, - "updatedNumberScheduled": { - "description": "The total number of nodes that are running updated daemon pod", + "port": { + "description": "If specified, the port on the service that hosting webhook. Default to 443 for backward compatibility. `port` should be a valid port number (1-65535, inclusive).", "type": "integer", "format": "int32" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "DaemonSetStatus", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "ServiceReference", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1.DaemonSetUpdateStrategy": { - "description": "DaemonSetUpdateStrategy is a struct used to control the update strategy for a DaemonSet.", + "io.k8s.api.admissionregistration.v1beta1.TypeChecking": { + "description": "TypeChecking contains results of type checking the expressions in the ValidatingAdmissionPolicy", "type": "object", "properties": { - "rollingUpdate": { - "description": "Rolling update config params. Present only if type = \"RollingUpdate\".", - "$ref": "#/definitions/io.k8s.api.apps.v1.RollingUpdateDaemonSet" - }, - "type": { - "description": "Type of daemon set update. Can be \"RollingUpdate\" or \"OnDelete\". Default is RollingUpdate.\n\nPossible enum values:\n - `\"OnDelete\"` Replace the old daemons only when it's killed\n - `\"RollingUpdate\"` Replace the old daemons by new ones using rolling update i.e replace them on each node one after the other.", - "type": "string", - "enum": [ - "OnDelete", - "RollingUpdate" - ] + "expressionWarnings": { + "description": "The type checking warnings for each expression.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ExpressionWarning" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "DaemonSetUpdateStrategy", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "TypeChecking", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1.Deployment": { - "description": "Deployment enables declarative updates for Pods and ReplicaSets.", + "io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicy": { + "description": "ValidatingAdmissionPolicy describes the definition of an admission validation policy that accepts or rejects an object without changing it.", "type": "object", "properties": { "apiVersion": { @@ -19128,74 +19046,62 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "Specification of the desired behavior of the Deployment.", + "description": "Specification of the desired behavior of the ValidatingAdmissionPolicy.", "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1.DeploymentSpec" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicySpec" }, "status": { - "description": "Most recently observed status of the Deployment.", + "description": "The status of the ValidatingAdmissionPolicy, including warnings that are useful to determine if the policy behaves in the expected way. Populated by the system. Read-only.", "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1.DeploymentStatus" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "", - "Version": "v1", - "Kind": "Deployment", - "Scope": "Namespaced" + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "ValidatingAdmissionPolicy", + "Scope": "Clustered" } }, - "io.k8s.api.apps.v1.DeploymentCondition": { - "description": "DeploymentCondition describes the state of a deployment at a certain point.", + "io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyBinding": { + "description": "ValidatingAdmissionPolicyBinding binds the ValidatingAdmissionPolicy with paramerized resources. ValidatingAdmissionPolicyBinding and parameter CRDs together define how cluster administrators configure policies for clusters.\n\nFor a given admission request, each binding will cause its policy to be evaluated N times, where N is 1 for policies/bindings that don't use params, otherwise N is the number of parameters selected by the binding.\n\nThe CEL expressions of a policy must have a computed CEL cost below the maximum CEL budget. Each evaluation of the policy is given an independent CEL cost budget. Adding/removing policies, bindings, or params can not affect whether a given (policy, binding, param) combination is within its own CEL budget.", "type": "object", - "required": [ - "type", - "status" - ], "properties": { - "lastTransitionTime": { - "description": "Last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "lastUpdateTime": { - "description": "The last time this condition was updated.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "A human readable message indicating details about the transition.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "reason": { - "description": "The reason for the condition's last transition.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "status": { - "description": "Status of the condition, one of True, False, Unknown.", - "type": "string", - "default": "" + "metadata": { + "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "type": { - "description": "Type of deployment condition.", - "type": "string", - "default": "" + "spec": { + "description": "Specification of the desired behavior of the ValidatingAdmissionPolicyBinding.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyBindingSpec" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "DeploymentCondition", - "Scope": "Namespaced" + "Type": "object", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "ValidatingAdmissionPolicyBinding", + "Scope": "Clustered" } }, - "io.k8s.api.apps.v1.DeploymentList": { - "description": "DeploymentList is a list of Deployments.", + "io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyBindingList": { + "description": "ValidatingAdmissionPolicyBindingList is a list of ValidatingAdmissionPolicyBinding.", "type": "object", "required": [ "items" @@ -19206,11 +19112,11 @@ "type": "string" }, "items": { - "description": "Items is the list of Deployments.", + "description": "List of PolicyBinding.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1.Deployment" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyBinding" } }, "kind": { @@ -19218,239 +19124,327 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata.", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "", - "Version": "v1", - "Kind": "DeploymentList", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "ValidatingAdmissionPolicyBindingList", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1.DeploymentSpec": { - "description": "DeploymentSpec is the specification of the desired behavior of the Deployment.", + "io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyBindingSpec": { + "description": "ValidatingAdmissionPolicyBindingSpec is the specification of the ValidatingAdmissionPolicyBinding.", "type": "object", - "required": [ - "selector", - "template" - ], "properties": { - "minReadySeconds": { - "description": "Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", - "type": "integer", - "format": "int32" + "matchResources": { + "description": "MatchResources declares what resources match this binding and will be validated by it. Note that this is intersected with the policy's matchConstraints, so only requests that are matched by the policy can be selected by this. If this is unset, all resources matched by the policy are validated by this binding When resourceRules is unset, it does not constrain resource matching. If a resource is matched by the other fields of this object, it will be validated. Note that this is differs from ValidatingAdmissionPolicy matchConstraints, where resourceRules are required.", + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MatchResources" }, - "paused": { - "description": "Indicates that the deployment is paused.", - "type": "boolean" - }, - "progressDeadlineSeconds": { - "description": "The maximum time in seconds for a deployment to make progress before it is considered to be failed. The deployment controller will continue to process failed deployments and a condition with a ProgressDeadlineExceeded reason will be surfaced in the deployment status. Note that progress will not be estimated during the time a deployment is paused. Defaults to 600s.", - "type": "integer", - "format": "int32" + "paramRef": { + "description": "paramRef specifies the parameter resource used to configure the admission control policy. It should point to a resource of the type specified in ParamKind of the bound ValidatingAdmissionPolicy. If the policy specifies a ParamKind and the resource referred to by ParamRef does not exist, this binding is considered mis-configured and the FailurePolicy of the ValidatingAdmissionPolicy applied. If the policy does not specify a ParamKind then this field is ignored, and the rules are evaluated without a param.", + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ParamRef" }, - "replicas": { - "description": "Number of desired pods. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.", - "type": "integer", - "format": "int32" + "policyName": { + "description": "PolicyName references a ValidatingAdmissionPolicy name which the ValidatingAdmissionPolicyBinding binds to. If the referenced resource does not exist, this binding is considered invalid and will be ignored Required.", + "type": "string" }, - "revisionHistoryLimit": { - "description": "The number of old ReplicaSets to retain to allow rollback. This is a pointer to distinguish between explicit zero and not specified. Defaults to 10.", - "type": "integer", - "format": "int32" + "validationActions": { + "description": "validationActions declares how Validations of the referenced ValidatingAdmissionPolicy are enforced. If a validation evaluates to false it is always enforced according to these actions.\n\nFailures defined by the ValidatingAdmissionPolicy's FailurePolicy are enforced according to these actions only if the FailurePolicy is set to Fail, otherwise the failures are ignored. This includes compilation errors, runtime errors and misconfigurations of the policy.\n\nvalidationActions is declared as a set of action values. Order does not matter. validationActions may not contain duplicates of the same action.\n\nThe supported actions values are:\n\n\"Deny\" specifies that a validation failure results in a denied request.\n\n\"Warn\" specifies that a validation failure is reported to the request client in HTTP Warning headers, with a warning code of 299. Warnings can be sent both for allowed or denied admission responses.\n\n\"Audit\" specifies that a validation failure is included in the published audit event for the request. The audit event will contain a `validation.policy.admission.k8s.io/validation_failure` audit annotation with a value containing the details of the validation failures, formatted as a JSON list of objects, each with the following fields: - message: The validation failure message string - policy: The resource name of the ValidatingAdmissionPolicy - binding: The resource name of the ValidatingAdmissionPolicyBinding - expressionIndex: The index of the failed validations in the ValidatingAdmissionPolicy - validationActions: The enforcement actions enacted for the validation failure Example audit annotation: `\"validation.policy.admission.k8s.io/validation_failure\": \"[{\\\"message\\\": \\\"Invalid value\\\", {\\\"policy\\\": \\\"policy.example.com\\\", {\\\"binding\\\": \\\"policybinding.example.com\\\", {\\\"expressionIndex\\\": \\\"1\\\", {\\\"validationActions\\\": [\\\"Audit\\\"]}]\"`\n\nClients should expect to handle additional values by ignoring any values not recognized.\n\n\"Deny\" and \"Warn\" may not be used together since this combination needlessly duplicates the validation failure both in the API response body and the HTTP warning headers.\n\nRequired.", + "type": "array", + "items": { + "type": "string", + "default": "", + "enum": [ + "Audit", + "Deny", + "Warn" + ] + }, + "x-kubernetes-list-type": "set" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "ValidatingAdmissionPolicyBindingSpec", + "Scope": "Namespaced" + } + }, + "io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyList": { + "description": "ValidatingAdmissionPolicyList is a list of ValidatingAdmissionPolicy.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "selector": { - "description": "Label selector for pods. Existing ReplicaSets whose pods are selected by this will be the ones affected by this deployment. It must match the pod template's labels.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "items": { + "description": "List of ValidatingAdmissionPolicy.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicy" + } }, - "strategy": { - "description": "The deployment strategy to use to replace existing pods with new ones.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1.DeploymentStrategy", - "x-kubernetes-patch-strategy": "retainKeys" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "template": { - "description": "Template describes the pods that will be created. The only allowed template.spec.restartPolicy value is \"Always\".", + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "DeploymentSpec", + "Type": "list", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "ValidatingAdmissionPolicyList", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1.DeploymentStatus": { - "description": "DeploymentStatus is the most recently observed status of the Deployment.", + "io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicySpec": { + "description": "ValidatingAdmissionPolicySpec is the specification of the desired behavior of the AdmissionPolicy.", "type": "object", "properties": { - "availableReplicas": { - "description": "Total number of available pods (ready for at least minReadySeconds) targeted by this deployment.", - "type": "integer", - "format": "int32" + "auditAnnotations": { + "description": "auditAnnotations contains CEL expressions which are used to produce audit annotations for the audit event of the API request. validations and auditAnnotations may not both be empty; a least one of validations or auditAnnotations is required.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.AuditAnnotation" + }, + "x-kubernetes-list-type": "atomic" }, - "collisionCount": { - "description": "Count of hash collisions for the Deployment. The Deployment controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ReplicaSet.", - "type": "integer", - "format": "int32" + "failurePolicy": { + "description": "failurePolicy defines how to handle failures for the admission policy. Failures can occur from CEL expression parse errors, type check errors, runtime errors and invalid or mis-configured policy definitions or bindings.\n\nA policy is invalid if spec.paramKind refers to a non-existent Kind. A binding is invalid if spec.paramRef.name refers to a non-existent resource.\n\nfailurePolicy does not define how validations that evaluate to false are handled.\n\nWhen failurePolicy is set to Fail, ValidatingAdmissionPolicyBinding validationActions define how failures are enforced.\n\nAllowed values are Ignore or Fail. Defaults to Fail.", + "type": "string" }, - "conditions": { - "description": "Represents the latest available observations of a deployment's current state.", + "matchConditions": { + "description": "MatchConditions is a list of conditions that must be met for a request to be validated. Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed.\n\nIf a parameter object is provided, it can be accessed via the `params` handle in the same manner as validation expressions.\n\nThe exact matching logic is (in order):\n 1. If ANY matchCondition evaluates to FALSE, the policy is skipped.\n 2. If ALL matchConditions evaluate to TRUE, the policy is evaluated.\n 3. If any matchCondition evaluates to an error (but none are FALSE):\n - If failurePolicy=Fail, reject the request\n - If failurePolicy=Ignore, the policy is skipped", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1.DeploymentCondition" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MatchCondition" }, "x-kubernetes-list-map-keys": [ - "type" + "name" ], "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-merge-key": "name", "x-kubernetes-patch-strategy": "merge" }, - "observedGeneration": { - "description": "The generation observed by the deployment controller.", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas is the number of pods targeted by this Deployment with a Ready Condition.", - "type": "integer", - "format": "int32" + "matchConstraints": { + "description": "MatchConstraints specifies what resources this policy is designed to validate. The AdmissionPolicy cares about a request if it matches _all_ Constraints. However, in order to prevent clusters from being put into an unstable state that cannot be recovered from via the API ValidatingAdmissionPolicy cannot match ValidatingAdmissionPolicy and ValidatingAdmissionPolicyBinding. Required.", + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MatchResources" }, - "replicas": { - "description": "Total number of non-terminated pods targeted by this deployment (their labels match the selector).", - "type": "integer", - "format": "int32" + "paramKind": { + "description": "ParamKind specifies the kind of resources used to parameterize this policy. If absent, there are no parameters for this policy and the param CEL variable will not be provided to validation expressions. If ParamKind refers to a non-existent kind, this policy definition is mis-configured and the FailurePolicy is applied. If paramKind is specified but paramRef is unset in ValidatingAdmissionPolicyBinding, the params variable will be null.", + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ParamKind" }, - "unavailableReplicas": { - "description": "Total number of unavailable pods targeted by this deployment. This is the total number of pods that are still required for the deployment to have 100% available capacity. They may either be pods that are running but not yet available or pods that still have not been created.", - "type": "integer", - "format": "int32" + "validations": { + "description": "Validations contain CEL expressions which is used to apply the validation. Validations and AuditAnnotations may not both be empty; a minimum of one Validations or AuditAnnotations is required.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.Validation" + }, + "x-kubernetes-list-type": "atomic" }, - "updatedReplicas": { - "description": "Total number of non-terminated pods targeted by this deployment that have the desired template spec.", - "type": "integer", - "format": "int32" + "variables": { + "description": "Variables contain definitions of variables that can be used in composition of other expressions. Each variable is defined as a named CEL expression. The variables defined here will be available under `variables` in other expressions of the policy except MatchConditions because MatchConditions are evaluated before the rest of the policy.\n\nThe expression of a variable can refer to other variables defined earlier in the list but not those after. Thus, Variables must be sorted by the order of first appearance and acyclic.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.Variable" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "DeploymentStatus", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "ValidatingAdmissionPolicySpec", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1.DeploymentStrategy": { - "description": "DeploymentStrategy describes how to replace existing pods with new ones.", + "io.k8s.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyStatus": { + "description": "ValidatingAdmissionPolicyStatus represents the status of an admission validation policy.", "type": "object", "properties": { - "rollingUpdate": { - "description": "Rolling update config params. Present only if DeploymentStrategyType = RollingUpdate.", - "$ref": "#/definitions/io.k8s.api.apps.v1.RollingUpdateDeployment" + "conditions": { + "description": "The conditions represent the latest available observations of a policy's current state.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" }, - "type": { - "description": "Type of deployment. Can be \"Recreate\" or \"RollingUpdate\". Default is RollingUpdate.\n\nPossible enum values:\n - `\"Recreate\"` Kill all existing pods before creating new ones.\n - `\"RollingUpdate\"` Replace the old ReplicaSets by new one using rolling update i.e gradually scale down the old ReplicaSets and scale up the new one.", - "type": "string", - "enum": [ - "Recreate", - "RollingUpdate" - ] + "observedGeneration": { + "description": "The generation observed by the controller.", + "type": "integer", + "format": "int64" + }, + "typeChecking": { + "description": "The results of type checking for each expression. Presence of this field indicates the completion of the type checking.", + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.TypeChecking" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "DeploymentStrategy", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "ValidatingAdmissionPolicyStatus", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1.ReplicaSet": { - "description": "ReplicaSet ensures that a specified number of pod replicas are running at any given time.", + "io.k8s.api.admissionregistration.v1beta1.ValidatingWebhook": { + "description": "ValidatingWebhook describes an admission webhook and the resources and operations it applies to.", "type": "object", + "required": [ + "name", + "clientConfig" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "admissionReviewVersions": { + "description": "AdmissionReviewVersions is an ordered list of preferred `AdmissionReview` versions the Webhook expects. API server will try to use first version in the list which it supports. If none of the versions specified in this list supported by API server, validation will fail for this object. If a persisted webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail and be subject to the failure policy. Default to `['v1beta1']`.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "clientConfig": { + "description": "ClientConfig defines how to communicate with the hook. Required", + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.WebhookClientConfig" + }, + "failurePolicy": { + "description": "FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Ignore.", "type": "string" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "matchConditions": { + "description": "MatchConditions is a list of conditions that must be met for a request to be sent to this webhook. Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed.\n\nThe exact matching logic is (in order):\n 1. If ANY matchCondition evaluates to FALSE, the webhook is skipped.\n 2. If ALL matchConditions evaluate to TRUE, the webhook is called.\n 3. If any matchCondition evaluates to an error (but none are FALSE):\n - If failurePolicy=Fail, reject the request\n - If failurePolicy=Ignore, the error is ignored and the webhook is skipped", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.MatchCondition" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + }, + "matchPolicy": { + "description": "matchPolicy defines how the \"rules\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook.\n\nDefaults to \"Exact\"", "type": "string" }, - "metadata": { - "description": "If the Labels of a ReplicaSet are empty, they are defaulted to be the same as the Pod(s) that the ReplicaSet manages. Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "name": { + "description": "The name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where \"imagepolicy\" is the name of the webhook, and kubernetes.io is the name of the organization. Required.", + "type": "string", + "default": "" }, - "spec": { - "description": "Spec defines the specification of the desired behavior of the ReplicaSet. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSetSpec" + "namespaceSelector": { + "description": "NamespaceSelector decides whether to run the webhook on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the webhook.\n\nFor example, to run the webhook on any objects whose namespace is not associated with \"runlevel\" of \"0\" or \"1\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"runlevel\",\n \"operator\": \"NotIn\",\n \"values\": [\n \"0\",\n \"1\"\n ]\n }\n ]\n}\n\nIf instead you want to only run the webhook on any objects whose namespace is associated with the \"environment\" of \"prod\" or \"staging\"; you will set the selector as follows: \"namespaceSelector\": {\n \"matchExpressions\": [\n {\n \"key\": \"environment\",\n \"operator\": \"In\",\n \"values\": [\n \"prod\",\n \"staging\"\n ]\n }\n ]\n}\n\nSee https://kubernetes.io/docs/concepts/overview/working-with-objects/labels for more examples of label selectors.\n\nDefault to the empty LabelSelector, which matches everything.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" }, - "status": { - "description": "Status is the most recently observed status of the ReplicaSet. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSetStatus" + "objectSelector": { + "description": "ObjectSelector decides whether to run the webhook based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the webhook, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "rules": { + "description": "Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks from putting the cluster in a state which cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1.RuleWithOperations" + }, + "x-kubernetes-list-type": "atomic" + }, + "sideEffects": { + "description": "SideEffects states whether this webhook has side effects. Acceptable values are: Unknown, None, Some, NoneOnDryRun Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission chain and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some. Defaults to Unknown.", + "type": "string", + "x-kubernetes-list-type": "atomic" + }, + "timeoutSeconds": { + "description": "TimeoutSeconds specifies the timeout for this webhook. After the timeout passes, the webhook call will be ignored or the API call will fail based on the failure policy. The timeout value must be between 1 and 30 seconds. Default to 30 seconds.", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { - "Type": "object", - "Group": "", - "Version": "v1", - "Kind": "ReplicaSet", + "Type": "nested", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "ValidatingWebhook", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1.ReplicaSetCondition": { - "description": "ReplicaSetCondition describes the state of a replica set at a certain point.", + "io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration": { + "description": "ValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it. Deprecated in v1.16, planned for removal in v1.19. Use admissionregistration.k8s.io/v1 ValidatingWebhookConfiguration instead.", "type": "object", - "required": [ - "type", - "status" - ], "properties": { - "lastTransitionTime": { - "description": "The last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "A human readable message indicating details about the transition.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "reason": { - "description": "The reason for the condition's last transition.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "status": { - "description": "Status of the condition, one of True, False, Unknown.", - "type": "string", - "default": "" + "metadata": { + "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "type": { - "description": "Type of replica set condition.", - "type": "string", - "default": "" + "webhooks": { + "description": "Webhooks is a list of webhooks and the affected resources and operations.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhook" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "ReplicaSetCondition", - "Scope": "Namespaced" + "Type": "object", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "ValidatingWebhookConfiguration", + "Scope": "Clustered" } }, - "io.k8s.api.apps.v1.ReplicaSetList": { - "description": "ReplicaSetList is a collection of ReplicaSets.", + "io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfigurationList": { + "description": "ValidatingWebhookConfigurationList is a list of ValidatingWebhookConfiguration.", "type": "object", "required": [ "items" @@ -19461,11 +19455,11 @@ "type": "string" }, "items": { - "description": "List of ReplicaSets. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller", + "description": "List of ValidatingWebhookConfiguration.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSet" + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ValidatingWebhookConfiguration" } }, "kind": { @@ -19480,169 +19474,101 @@ }, "x-fabric8-info": { "Type": "list", - "Group": "", - "Version": "v1", - "Kind": "ReplicaSetList", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "ValidatingWebhookConfigurationList", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1.ReplicaSetSpec": { - "description": "ReplicaSetSpec is the specification of a ReplicaSet.", + "io.k8s.api.admissionregistration.v1beta1.Validation": { + "description": "Validation specifies the CEL expression which is used to apply the validation.", "type": "object", "required": [ - "selector" + "expression" ], "properties": { - "minReadySeconds": { - "description": "Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", - "type": "integer", - "format": "int32" + "expression": { + "description": "Expression represents the expression which will be evaluated by CEL. ref: https://github.com/google/cel-spec CEL expressions have access to the contents of the API request/response, organized into CEL variables as well as some other useful variables:\n\n- 'object' - The object from the incoming request. The value is null for DELETE requests. - 'oldObject' - The existing object. The value is null for CREATE requests. - 'request' - Attributes of the API request([ref](/pkg/apis/admission/types.go#AdmissionRequest)). - 'params' - Parameter resource referred to by the policy binding being evaluated. Only populated if the policy has a ParamKind. - 'namespaceObject' - The namespace object that the incoming object belongs to. The value is null for cluster-scoped resources. - 'variables' - Map of composited variables, from its name to its lazily evaluated value.\n For example, a variable named 'foo' can be accessed as 'variables.foo'.\n- 'authorizer' - A CEL Authorizer. May be used to perform authorization checks for the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n- 'authorizer.requestResource' - A CEL ResourceCheck constructed from the 'authorizer' and configured with the\n request resource.\n\nThe `apiVersion`, `kind`, `metadata.name` and `metadata.generateName` are always accessible from the root of the object. No other metadata properties are accessible.\n\nOnly property names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*` are accessible. Accessible property names are escaped according to the following rules when accessed in the expression: - '__' escapes to '__underscores__' - '.' escapes to '__dot__' - '-' escapes to '__dash__' - '/' escapes to '__slash__' - Property names that exactly match a CEL RESERVED keyword escape to '__{keyword}__'. The keywords are:\n\t \"true\", \"false\", \"null\", \"in\", \"as\", \"break\", \"const\", \"continue\", \"else\", \"for\", \"function\", \"if\",\n\t \"import\", \"let\", \"loop\", \"package\", \"namespace\", \"return\".\nExamples:\n - Expression accessing a property named \"namespace\": {\"Expression\": \"object.__namespace__ \u003e 0\"}\n - Expression accessing a property named \"x-prop\": {\"Expression\": \"object.x__dash__prop \u003e 0\"}\n - Expression accessing a property named \"redact__d\": {\"Expression\": \"object.redact__underscores__d \u003e 0\"}\n\nEquality on arrays with list type of 'set' or 'map' ignores element order, i.e. [1, 2] == [2, 1]. Concatenation on arrays with x-kubernetes-list-type use the semantics of the list type:\n - 'set': `X + Y` performs a union where the array positions of all elements in `X` are preserved and\n non-intersecting elements in `Y` are appended, retaining their partial order.\n - 'map': `X + Y` performs a merge where the array positions of all keys in `X` are preserved but the values\n are overwritten by values in `Y` when the key sets of `X` and `Y` intersect. Elements in `Y` with\n non-intersecting keys are appended, retaining their partial order.\nRequired.", + "type": "string", + "default": "" }, - "replicas": { - "description": "Replicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. Defaults to 1. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller/#what-is-a-replicationcontroller", - "type": "integer", - "format": "int32" + "message": { + "description": "Message represents the message displayed when validation fails. The message is required if the Expression contains line breaks. The message must not contain line breaks. If unset, the message is \"failed rule: {Rule}\". e.g. \"must be a URL with the host matching spec.host\" If the Expression contains line breaks. Message is required. The message must not contain line breaks. If unset, the message is \"failed Expression: {Expression}\".", + "type": "string" }, - "selector": { - "description": "Selector is a label query over pods that should match the replica count. Label keys and values that must match in order to be controlled by this replica set. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "messageExpression": { + "description": "messageExpression declares a CEL expression that evaluates to the validation failure message that is returned when this rule fails. Since messageExpression is used as a failure message, it must evaluate to a string. If both message and messageExpression are present on a validation, then messageExpression will be used if validation fails. If messageExpression results in a runtime error, the runtime error is logged, and the validation failure message is produced as if the messageExpression field were unset. If messageExpression evaluates to an empty string, a string with only spaces, or a string that contains line breaks, then the validation failure message will also be produced as if the messageExpression field were unset, and the fact that messageExpression produced an empty string/string with only spaces/string with line breaks will be logged. messageExpression has access to all the same variables as the `expression` except for 'authorizer' and 'authorizer.requestResource'. Example: \"object.x must be less than max (\"+string(params.max)+\")\"", + "type": "string" }, - "template": { - "description": "Template is the object that describes the pod that will be created if insufficient replicas are detected. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" + "reason": { + "description": "Reason represents a machine-readable description of why this validation failed. If this is the first validation in the list to fail, this reason, as well as the corresponding HTTP response code, are used in the HTTP response to the client. The currently supported reasons are: \"Unauthorized\", \"Forbidden\", \"Invalid\", \"RequestEntityTooLarge\". If not set, StatusReasonInvalid is used in the response to the client.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "ReplicaSetSpec", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "Validation", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1.ReplicaSetStatus": { - "description": "ReplicaSetStatus represents the current status of a ReplicaSet.", + "io.k8s.api.admissionregistration.v1beta1.Variable": { + "description": "Variable is the definition of a variable that is used for composition. A variable is defined as a named expression.", "type": "object", "required": [ - "replicas" + "name", + "expression" ], "properties": { - "availableReplicas": { - "description": "The number of available replicas (ready for at least minReadySeconds) for this replica set.", - "type": "integer", - "format": "int32" - }, - "conditions": { - "description": "Represents the latest available observations of a replica set's current state.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSetCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "fullyLabeledReplicas": { - "description": "The number of pods that have labels matching the labels of the pod template of the replicaset.", - "type": "integer", - "format": "int32" - }, - "observedGeneration": { - "description": "ObservedGeneration reflects the generation of the most recently observed ReplicaSet.", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas is the number of pods targeted by this ReplicaSet with a Ready Condition.", - "type": "integer", - "format": "int32" + "expression": { + "description": "Expression is the expression that will be evaluated as the value of the variable. The CEL expression has access to the same identifiers as the CEL expressions in Validation.", + "type": "string", + "default": "" }, - "replicas": { - "description": "Replicas is the most recently observed number of replicas. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller/#what-is-a-replicationcontroller", - "type": "integer", - "format": "int32", - "default": 0 + "name": { + "description": "Name is the name of the variable. The name must be a valid CEL identifier and unique among all variables. The variable can be accessed in other expressions through `variables` For example, if name is \"foo\", the variable will be available as `variables.foo`", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "ReplicaSetStatus", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "Variable", "Scope": "Namespaced" - } + }, + "x-kubernetes-map-type": "atomic" }, - "io.k8s.api.apps.v1.RollingUpdateDaemonSet": { - "description": "Spec to control the desired behavior of daemon set rolling update.", + "io.k8s.api.admissionregistration.v1beta1.WebhookClientConfig": { + "description": "WebhookClientConfig contains the information to make a TLS connection with the webhook", "type": "object", "properties": { - "maxSurge": { - "description": "The maximum number of nodes with an existing available DaemonSet pod that can have an updated DaemonSet pod during during an update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up to a minimum of 1. Default value is 0. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their a new pod created before the old pod is marked as deleted. The update starts by launching new pods on 30% of nodes. Once an updated pod is available (Ready for at least minReadySeconds) the old DaemonSet pod on that node is marked deleted. If the old pod becomes unavailable for any reason (Ready transitions to false, is evicted, or is drained) an updated pod is immediatedly created on that node without considering surge limits. Allowing surge implies the possibility that the resources consumed by the daemonset on any given node can double if the readiness check fails, and so resource intensive daemonsets should take into account that they may cause evictions during disruption.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + "caBundle": { + "description": "`caBundle` is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.", + "type": "string", + "format": "byte" }, - "maxUnavailable": { - "description": "The maximum number of DaemonSet pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of total number of DaemonSet pods at the start of the update (ex: 10%). Absolute number is calculated from percentage by rounding up. This cannot be 0 if MaxSurge is 0 Default value is 1. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their pods stopped for an update at any given time. The update starts by stopping at most 30% of those DaemonSet pods and then brings up new DaemonSet pods in their place. Once the new pods are available, it then proceeds onto other DaemonSet pods, thus ensuring that at least 70% of original number of DaemonSet pods are available at all times during the update.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + "service": { + "description": "`service` is a reference to the service for this webhook. Either `service` or `url` must be specified.\n\nIf the webhook is running within the cluster, then you should use `service`.", + "$ref": "#/definitions/io.k8s.api.admissionregistration.v1beta1.ServiceReference" + }, + "url": { + "description": "`url` gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.\n\nThe `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.\n\nPlease note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster.\n\nThe scheme must be \"https\"; the URL must begin with \"https://\".\n\nA path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.\n\nAttempting to use a user or basic auth e.g. \"user:password@\" is not allowed. Fragments (\"#...\") and query parameters (\"?...\") are not allowed, either.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "RollingUpdateDaemonSet", + "Group": "admissionregistration.k8s.io", + "Version": "v1beta1", + "Kind": "WebhookClientConfig", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1.RollingUpdateDeployment": { - "description": "Spec to control the desired behavior of rolling update.", - "type": "object", - "properties": { - "maxSurge": { - "description": "The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up. Defaults to 25%. Example: when this is set to 30%, the new ReplicaSet can be scaled up immediately when the rolling update starts, such that the total number of old and new pods do not exceed 130% of desired pods. Once old pods have been killed, new ReplicaSet can be scaled up further, ensuring that total number of pods running at any time during the update is at most 130% of desired pods.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" - }, - "maxUnavailable": { - "description": "The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. This can not be 0 if MaxSurge is 0. Defaults to 25%. Example: when this is set to 30%, the old ReplicaSet can be scaled down to 70% of desired pods immediately when the rolling update starts. Once new pods are ready, old ReplicaSet can be scaled down further, followed by scaling up the new ReplicaSet, ensuring that the total number of pods available at all times during the update is at least 70% of desired pods.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "RollingUpdateDeployment", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1.RollingUpdateStatefulSetStrategy": { - "description": "RollingUpdateStatefulSetStrategy is used to communicate parameter for RollingUpdateStatefulSetStrategyType.", - "type": "object", - "properties": { - "maxUnavailable": { - "description": "The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding up. This can not be 0. Defaults to 1. This field is alpha-level and is only honored by servers that enable the MaxUnavailableStatefulSet feature. The field applies to all pods in the range 0 to Replicas-1. That means if there is any unavailable pod in the range 0 to Replicas-1, it will be counted towards MaxUnavailable.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" - }, - "partition": { - "description": "Partition indicates the ordinal at which the StatefulSet should be partitioned for updates. During a rolling update, all pods from ordinal Replicas-1 to Partition are updated. All pods from ordinal Partition-1 to 0 remain untouched. This is helpful in being able to do a canary based deployment. The default value is 0.", - "type": "integer", - "format": "int32" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "RollingUpdateStatefulSetStrategy", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1.StatefulSet": { - "description": "StatefulSet represents a set of pods with consistent identities. Identities are defined as:\n - Network: A single stable DNS and hostname.\n - Storage: As many VolumeClaims as requested.\n\nThe StatefulSet guarantees that a given network identity will always map to the same storage identity.", + "io.k8s.api.apidiscovery.v2.APIGroupDiscovery": { + "description": "APIGroupDiscovery holds information about which resources are being served for all version of the API Group. It contains a list of APIVersionDiscovery that holds a list of APIResourceDiscovery types served for a version. Versions are in descending order of preference, with the first version being the preferred entry.", "type": "object", "properties": { "apiVersion": { @@ -19654,70 +19580,33 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata. The only field completed will be name. For instance, resourceVersion will be empty. name is the name of the API group whose discovery information is presented here. name is allowed to be \"\" to represent the legacy, ungroupified resources. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "spec": { - "description": "Spec defines the desired identities of pods in this set.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSetSpec" - }, - "status": { - "description": "Status is the current status of Pods in this StatefulSet. This data may be out of date by some window of time.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSetStatus" + "versions": { + "description": "versions are the versions supported in this group. They are sorted in descending order of preference, with the preferred version being the first entry.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.apidiscovery.v2.APIVersionDiscovery" + }, + "x-kubernetes-list-map-keys": [ + "version" + ], + "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "object", - "Group": "", - "Version": "v1", - "Kind": "StatefulSet", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1.StatefulSetCondition": { - "description": "StatefulSetCondition describes the state of a statefulset at a certain point.", - "type": "object", - "required": [ - "type", - "status" - ], - "properties": { - "lastTransitionTime": { - "description": "Last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "A human readable message indicating details about the transition.", - "type": "string" - }, - "reason": { - "description": "The reason for the condition's last transition.", - "type": "string" - }, - "status": { - "description": "Status of the condition, one of True, False, Unknown.", - "type": "string", - "default": "" - }, - "type": { - "description": "Type of statefulset condition.", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "StatefulSetCondition", + "Group": "apidiscovery.k8s.io", + "Version": "v2", + "Kind": "APIGroupDiscovery", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1.StatefulSetList": { - "description": "StatefulSetList is a collection of StatefulSets.", + "io.k8s.api.apidiscovery.v2.APIGroupDiscoveryList": { + "description": "APIGroupDiscoveryList is a resource containing a list of APIGroupDiscovery. This is one of the types able to be returned from the /api and /apis endpoint and contains an aggregated list of API resources (built-ins, Custom Resource Definitions, resources from aggregated servers) that a cluster supports.", "type": "object", "required": [ "items" @@ -19728,11 +19617,11 @@ "type": "string" }, "items": { - "description": "Items is the list of stateful sets.", + "description": "items is the list of groups for discovery. The groups are listed in priority order.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSet" + "$ref": "#/definitions/io.k8s.api.apidiscovery.v2.APIGroupDiscovery" } }, "kind": { @@ -19740,277 +19629,222 @@ "type": "string" }, "metadata": { - "description": "Standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "ResourceVersion will not be set, because this does not have a replayable ordering among multiple apiservers. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "", - "Version": "v1", - "Kind": "StatefulSetList", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1.StatefulSetOrdinals": { - "description": "StatefulSetOrdinals describes the policy used for replica ordinal assignment in this StatefulSet.", - "type": "object", - "properties": { - "start": { - "description": "start is the number representing the first replica's index. It may be used to number replicas from an alternate index (eg: 1-indexed) over the default 0-indexed names, or to orchestrate progressive movement of replicas from one StatefulSet to another. If set, replica indices will be in the range:\n [.spec.ordinals.start, .spec.ordinals.start + .spec.replicas).\nIf unset, defaults to 0. Replica indices will be in the range:\n [0, .spec.replicas).", - "type": "integer", - "format": "int32", - "default": 0 - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "StatefulSetOrdinals", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1.StatefulSetPersistentVolumeClaimRetentionPolicy": { - "description": "StatefulSetPersistentVolumeClaimRetentionPolicy describes the policy used for PVCs created from the StatefulSet VolumeClaimTemplates.", - "type": "object", - "properties": { - "whenDeleted": { - "description": "WhenDeleted specifies what happens to PVCs created from StatefulSet VolumeClaimTemplates when the StatefulSet is deleted. The default policy of `Retain` causes PVCs to not be affected by StatefulSet deletion. The `Delete` policy causes those PVCs to be deleted.", - "type": "string" - }, - "whenScaled": { - "description": "WhenScaled specifies what happens to PVCs created from StatefulSet VolumeClaimTemplates when the StatefulSet is scaled down. The default policy of `Retain` causes PVCs to not be affected by a scaledown. The `Delete` policy causes the associated PVCs for any excess pods above the replica count to be deleted.", - "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "StatefulSetPersistentVolumeClaimRetentionPolicy", + "Group": "apidiscovery.k8s.io", + "Version": "v2", + "Kind": "APIGroupDiscoveryList", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1.StatefulSetSpec": { - "description": "A StatefulSetSpec is the specification of a StatefulSet.", + "io.k8s.api.apidiscovery.v2.APIResourceDiscovery": { + "description": "APIResourceDiscovery provides information about an API resource for discovery.", "type": "object", "required": [ - "selector", - "template", - "serviceName" + "resource", + "scope", + "singularResource", + "verbs" ], "properties": { - "minReadySeconds": { - "description": "Minimum number of seconds for which a newly created pod should be ready without any of its container crashing for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", - "type": "integer", - "format": "int32" - }, - "ordinals": { - "description": "ordinals controls the numbering of replica indices in a StatefulSet. The default ordinals behavior assigns a \"0\" index to the first replica and increments the index by one for each additional replica requested.", - "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSetOrdinals" - }, - "persistentVolumeClaimRetentionPolicy": { - "description": "persistentVolumeClaimRetentionPolicy describes the lifecycle of persistent volume claims created from volumeClaimTemplates. By default, all persistent volume claims are created as needed and retained until manually deleted. This policy allows the lifecycle to be altered, for example by deleting persistent volume claims when their stateful set is deleted, or when their pod is scaled down. This requires the StatefulSetAutoDeletePVC feature gate to be enabled, which is beta.", - "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSetPersistentVolumeClaimRetentionPolicy" + "categories": { + "description": "categories is a list of the grouped resources this resource belongs to (e.g. 'all'). Clients may use this to simplify acting on multiple resource types at once.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "podManagementPolicy": { - "description": "podManagementPolicy controls how pods are created during initial scale up, when replacing pods on nodes, or when scaling down. The default policy is `OrderedReady`, where pods are created in increasing order (pod-0, then pod-1, etc) and the controller will wait until each pod is ready before continuing. When scaling down, the pods are removed in the opposite order. The alternative policy is `Parallel` which will create pods in parallel to match the desired scale without waiting, and on scale down will delete all pods at once.\n\nPossible enum values:\n - `\"OrderedReady\"` will create pods in strictly increasing order on scale up and strictly decreasing order on scale down, progressing only when the previous pod is ready or terminated. At most one pod will be changed at any time.\n - `\"Parallel\"` will create and delete pods as soon as the stateful set replica count is changed, and will not wait for pods to be ready or complete termination.", + "resource": { + "description": "resource is the plural name of the resource. This is used in the URL path and is the unique identifier for this resource across all versions in the API group. Resources with non-empty groups are located at /apis/\u003cAPIGroupDiscovery.objectMeta.name\u003e/\u003cAPIVersionDiscovery.version\u003e/\u003cAPIResourceDiscovery.Resource\u003e Resources with empty groups are located at /api/v1/\u003cAPIResourceDiscovery.Resource\u003e", "type": "string", - "enum": [ - "OrderedReady", - "Parallel" - ] - }, - "replicas": { - "description": "replicas is the desired number of replicas of the given Template. These are replicas in the sense that they are instantiations of the same Template, but individual replicas also have a consistent identity. If unspecified, defaults to 1.", - "type": "integer", - "format": "int32" - }, - "revisionHistoryLimit": { - "description": "revisionHistoryLimit is the maximum number of revisions that will be maintained in the StatefulSet's revision history. The revision history consists of all revisions not represented by a currently applied StatefulSetSpec version. The default value is 10.", - "type": "integer", - "format": "int32" + "default": "" }, - "selector": { - "description": "selector is a label query over pods that should match the replica count. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "responseKind": { + "description": "responseKind describes the group, version, and kind of the serialization schema for the object type this endpoint typically returns. APIs may return other objects types at their discretion, such as error conditions, requests for alternate representations, or other operation specific behavior. This value will be null or empty if an APIService reports subresources but supports no operations on the parent resource", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind" }, - "serviceName": { - "description": "serviceName is the name of the service that governs this StatefulSet. This service must exist before the StatefulSet, and is responsible for the network identity of the set. Pods get DNS/hostnames that follow the pattern: pod-specific-string.serviceName.default.svc.cluster.local where \"pod-specific-string\" is managed by the StatefulSet controller.", + "scope": { + "description": "scope indicates the scope of a resource, either Cluster or Namespaced", "type": "string", "default": "" }, - "template": { - "description": "template is the object that describes the pod that will be created if insufficient replicas are detected. Each pod stamped out by the StatefulSet will fulfill this Template, but have a unique identity from the rest of the StatefulSet. Each pod will be named with the format \u003cstatefulsetname\u003e-\u003cpodindex\u003e. For example, a pod in a StatefulSet named \"web\" with index number \"3\" would be named \"web-3\". The only allowed template.spec.restartPolicy value is \"Always\".", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" + "shortNames": { + "description": "shortNames is a list of suggested short names of the resource.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "updateStrategy": { - "description": "updateStrategy indicates the StatefulSetUpdateStrategy that will be employed to update Pods in the StatefulSet when a revision is made to Template.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSetUpdateStrategy" + "singularResource": { + "description": "singularResource is the singular name of the resource. This allows clients to handle plural and singular opaquely. For many clients the singular form of the resource will be more understandable to users reading messages and should be used when integrating the name of the resource into a sentence. The command line tool kubectl, for example, allows use of the singular resource name in place of plurals. The singular form of a resource should always be an optional element - when in doubt use the canonical resource name.", + "type": "string", + "default": "" }, - "volumeClaimTemplates": { - "description": "volumeClaimTemplates is a list of claims that pods are allowed to reference. The StatefulSet controller is responsible for mapping network identities to claims in a way that maintains the identity of a pod. Every claim in this list must have at least one matching (by name) volumeMount in one container in the template. A claim in this list takes precedence over any volumes in the template, with the same name.", + "subresources": { + "description": "subresources is a list of subresources provided by this resource. Subresources are located at /apis/\u003cAPIGroupDiscovery.objectMeta.name\u003e/\u003cAPIVersionDiscovery.version\u003e/\u003cAPIResourceDiscovery.Resource\u003e/name-of-instance/\u003cAPIResourceDiscovery.subresources[i].subresource\u003e", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + "$ref": "#/definitions/io.k8s.api.apidiscovery.v2.APISubresourceDiscovery" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-map-keys": [ + "subresource" + ], + "x-kubernetes-list-type": "map" + }, + "verbs": { + "description": "verbs is a list of supported API operation types (this includes but is not limited to get, list, watch, create, update, patch, delete, deletecollection, and proxy).", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "StatefulSetSpec", + "Group": "apidiscovery.k8s.io", + "Version": "v2", + "Kind": "APIResourceDiscovery", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1.StatefulSetStatus": { - "description": "StatefulSetStatus represents the current state of a StatefulSet.", + "io.k8s.api.apidiscovery.v2.APISubresourceDiscovery": { + "description": "APISubresourceDiscovery provides information about an API subresource for discovery.", "type": "object", "required": [ - "replicas" + "subresource", + "verbs" ], "properties": { - "availableReplicas": { - "description": "Total number of available pods (ready for at least minReadySeconds) targeted by this statefulset.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "collisionCount": { - "description": "collisionCount is the count of hash collisions for the StatefulSet. The StatefulSet controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ControllerRevision.", - "type": "integer", - "format": "int32" - }, - "conditions": { - "description": "Represents the latest available observations of a statefulset's current state.", + "acceptedTypes": { + "description": "acceptedTypes describes the kinds that this endpoint accepts. Subresources may accept the standard content types or define custom negotiation schemes. The list may not be exhaustive for all operations.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSetCondition" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind" }, "x-kubernetes-list-map-keys": [ - "type" + "group", + "version", + "kind" ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "currentReplicas": { - "description": "currentReplicas is the number of Pods created by the StatefulSet controller from the StatefulSet version indicated by currentRevision.", - "type": "integer", - "format": "int32" - }, - "currentRevision": { - "description": "currentRevision, if not empty, indicates the version of the StatefulSet used to generate Pods in the sequence [0,currentReplicas).", - "type": "string" - }, - "observedGeneration": { - "description": "observedGeneration is the most recent generation observed for this StatefulSet. It corresponds to the StatefulSet's generation, which is updated on mutation by the API Server.", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas is the number of pods created for this StatefulSet with a Ready Condition.", - "type": "integer", - "format": "int32" + "x-kubernetes-list-type": "map" }, - "replicas": { - "description": "replicas is the number of Pods created by the StatefulSet controller.", - "type": "integer", - "format": "int32", - "default": 0 + "responseKind": { + "description": "responseKind describes the group, version, and kind of the serialization schema for the object type this endpoint typically returns. Some subresources do not return normal resources, these will have null or empty return types.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind" }, - "updateRevision": { - "description": "updateRevision, if not empty, indicates the version of the StatefulSet used to generate Pods in the sequence [replicas-updatedReplicas,replicas)", - "type": "string" + "subresource": { + "description": "subresource is the name of the subresource. This is used in the URL path and is the unique identifier for this resource across all versions.", + "type": "string", + "default": "" }, - "updatedReplicas": { - "description": "updatedReplicas is the number of Pods created by the StatefulSet controller from the StatefulSet version indicated by updateRevision.", - "type": "integer", - "format": "int32" + "verbs": { + "description": "verbs is a list of supported API operation types (this includes but is not limited to get, list, watch, create, update, patch, delete, deletecollection, and proxy). Subresources may define custom verbs outside the standard Kubernetes verb set. Clients should expect the behavior of standard verbs to align with Kubernetes interaction conventions.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "StatefulSetStatus", + "Group": "apidiscovery.k8s.io", + "Version": "v2", + "Kind": "APISubresourceDiscovery", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1.StatefulSetUpdateStrategy": { - "description": "StatefulSetUpdateStrategy indicates the strategy that the StatefulSet controller will use to perform updates. It includes any additional parameters necessary to perform the update for the indicated strategy.", + "io.k8s.api.apidiscovery.v2.APIVersionDiscovery": { + "description": "APIVersionDiscovery holds a list of APIResourceDiscovery types that are served for a particular version within an API Group.", "type": "object", + "required": [ + "version" + ], "properties": { - "rollingUpdate": { - "description": "RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType.", - "$ref": "#/definitions/io.k8s.api.apps.v1.RollingUpdateStatefulSetStrategy" + "freshness": { + "description": "freshness marks whether a group version's discovery document is up to date. \"Current\" indicates the discovery document was recently refreshed. \"Stale\" indicates the discovery document could not be retrieved and the returned discovery document may be significantly out of date. Clients that require the latest version of the discovery information be retrieved before performing an operation should not use the aggregated document", + "type": "string" }, - "type": { - "description": "Type indicates the type of the StatefulSetUpdateStrategy. Default is RollingUpdate.\n\nPossible enum values:\n - `\"OnDelete\"` triggers the legacy behavior. Version tracking and ordered rolling restarts are disabled. Pods are recreated from the StatefulSetSpec when they are manually deleted. When a scale operation is performed with this strategy,specification version indicated by the StatefulSet's currentRevision.\n - `\"RollingUpdate\"` indicates that update will be applied to all Pods in the StatefulSet with respect to the StatefulSet ordering constraints. When a scale operation is performed with this strategy, new Pods will be created from the specification version indicated by the StatefulSet's updateRevision.", + "resources": { + "description": "resources is a list of APIResourceDiscovery objects for the corresponding group version.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.apidiscovery.v2.APIResourceDiscovery" + }, + "x-kubernetes-list-map-keys": [ + "resource" + ], + "x-kubernetes-list-type": "map" + }, + "version": { + "description": "version is the name of the version within a group version.", "type": "string", - "enum": [ - "OnDelete", - "RollingUpdate" - ] + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "StatefulSetUpdateStrategy", + "Group": "apidiscovery.k8s.io", + "Version": "v2", + "Kind": "APIVersionDiscovery", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta1.ControllerRevision": { - "description": "DEPRECATED - This group version of ControllerRevision is deprecated by apps/v1beta2/ControllerRevision. See the release notes for more information. ControllerRevision implements an immutable snapshot of state data. Clients are responsible for serializing and deserializing the objects that contain their internal state. Once a ControllerRevision has been successfully created, it can not be updated. The API Server will fail validation of all requests that attempt to mutate the Data field. ControllerRevisions may, however, be deleted. Note that, due to its use by both the DaemonSet and StatefulSet controllers for update and rollback, this object is beta. However, it may be subject to name and representation changes in future releases, and clients should not depend on its stability. It is primarily for internal use by controllers.", + "io.k8s.api.apidiscovery.v2beta1.APIGroupDiscovery": { + "description": "APIGroupDiscovery holds information about which resources are being served for all version of the API Group. It contains a list of APIVersionDiscovery that holds a list of APIResourceDiscovery types served for a version. Versions are in descending order of preference, with the first version being the preferred entry.", "type": "object", - "required": [ - "revision" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "data": { - "description": "data is the serialized representation of the state.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata. The only field completed will be name. For instance, resourceVersion will be empty. name is the name of the API group whose discovery information is presented here. name is allowed to be \"\" to represent the legacy, ungroupified resources. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "revision": { - "description": "revision indicates the revision of the state represented by Data.", - "type": "integer", - "format": "int64", - "default": 0 + "versions": { + "description": "versions are the versions supported in this group. They are sorted in descending order of preference, with the preferred version being the first entry.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.apidiscovery.v2beta1.APIVersionDiscovery" + }, + "x-kubernetes-list-map-keys": [ + "version" + ], + "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "object", - "Group": "", - "Version": "v1beta1", - "Kind": "ControllerRevision", + "Group": "apidiscovery.k8s.io", + "Version": "v2beta1", + "Kind": "APIGroupDiscovery", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta1.ControllerRevisionList": { - "description": "ControllerRevisionList is a resource containing a list of ControllerRevision objects.", + "io.k8s.api.apidiscovery.v2beta1.APIGroupDiscoveryList": { + "description": "APIGroupDiscoveryList is a resource containing a list of APIGroupDiscovery. This is one of the types able to be returned from the /api and /apis endpoint and contains an aggregated list of API resources (built-ins, Custom Resource Definitions, resources from aggregated servers) that a cluster supports.", "type": "object", "required": [ "items" @@ -20021,11 +19855,11 @@ "type": "string" }, "items": { - "description": "Items is the list of ControllerRevisions", + "description": "items is the list of groups for discovery. The groups are listed in priority order.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta1.ControllerRevision" + "$ref": "#/definitions/io.k8s.api.apidiscovery.v2beta1.APIGroupDiscovery" } }, "kind": { @@ -20033,472 +19867,228 @@ "type": "string" }, "metadata": { - "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "ResourceVersion will not be set, because this does not have a replayable ordering among multiple apiservers. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "", - "Version": "v1beta1", - "Kind": "ControllerRevisionList", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1beta1.Deployment": { - "description": "DEPRECATED - This group version of Deployment is deprecated by apps/v1beta2/Deployment. See the release notes for more information. Deployment enables declarative updates for Pods and ReplicaSets.", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard object metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "Specification of the desired behavior of the Deployment.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta1.DeploymentSpec" - }, - "status": { - "description": "Most recently observed status of the Deployment.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta1.DeploymentStatus" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "", - "Version": "v1beta1", - "Kind": "Deployment", + "Group": "apidiscovery.k8s.io", + "Version": "v2beta1", + "Kind": "APIGroupDiscoveryList", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta1.DeploymentCondition": { - "description": "DeploymentCondition describes the state of a deployment at a certain point.", + "io.k8s.api.apidiscovery.v2beta1.APIResourceDiscovery": { + "description": "APIResourceDiscovery provides information about an API resource for discovery.", "type": "object", "required": [ - "type", - "status" + "resource", + "scope", + "singularResource", + "verbs" ], "properties": { - "lastTransitionTime": { - "description": "Last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "categories": { + "description": "categories is a list of the grouped resources this resource belongs to (e.g. 'all'). Clients may use this to simplify acting on multiple resource types at once.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "lastUpdateTime": { - "description": "The last time this condition was updated.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "resource": { + "description": "resource is the plural name of the resource. This is used in the URL path and is the unique identifier for this resource across all versions in the API group. Resources with non-empty groups are located at /apis/\u003cAPIGroupDiscovery.objectMeta.name\u003e/\u003cAPIVersionDiscovery.version\u003e/\u003cAPIResourceDiscovery.Resource\u003e Resources with empty groups are located at /api/v1/\u003cAPIResourceDiscovery.Resource\u003e", + "type": "string", + "default": "" }, - "message": { - "description": "A human readable message indicating details about the transition.", - "type": "string" + "responseKind": { + "description": "responseKind describes the group, version, and kind of the serialization schema for the object type this endpoint typically returns. APIs may return other objects types at their discretion, such as error conditions, requests for alternate representations, or other operation specific behavior. This value will be null or empty if an APIService reports subresources but supports no operations on the parent resource", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind" }, - "reason": { - "description": "The reason for the condition's last transition.", - "type": "string" - }, - "status": { - "description": "Status of the condition, one of True, False, Unknown.", + "scope": { + "description": "scope indicates the scope of a resource, either Cluster or Namespaced", "type": "string", "default": "" }, - "type": { - "description": "Type of deployment condition.", + "shortNames": { + "description": "shortNames is a list of suggested short names of the resource.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" + }, + "singularResource": { + "description": "singularResource is the singular name of the resource. This allows clients to handle plural and singular opaquely. For many clients the singular form of the resource will be more understandable to users reading messages and should be used when integrating the name of the resource into a sentence. The command line tool kubectl, for example, allows use of the singular resource name in place of plurals. The singular form of a resource should always be an optional element - when in doubt use the canonical resource name.", "type": "string", "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "DeploymentCondition", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1beta1.DeploymentList": { - "description": "DeploymentList is a list of Deployments.", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" }, - "items": { - "description": "Items is the list of Deployments.", + "subresources": { + "description": "subresources is a list of subresources provided by this resource. Subresources are located at /apis/\u003cAPIGroupDiscovery.objectMeta.name\u003e/\u003cAPIVersionDiscovery.version\u003e/\u003cAPIResourceDiscovery.Resource\u003e/name-of-instance/\u003cAPIResourceDiscovery.subresources[i].subresource\u003e", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta1.Deployment" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "$ref": "#/definitions/io.k8s.api.apidiscovery.v2beta1.APISubresourceDiscovery" + }, + "x-kubernetes-list-map-keys": [ + "subresource" + ], + "x-kubernetes-list-type": "map" }, - "metadata": { - "description": "Standard list metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "verbs": { + "description": "verbs is a list of supported API operation types (this includes but is not limited to get, list, watch, create, update, patch, delete, deletecollection, and proxy).", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" } }, "x-fabric8-info": { - "Type": "list", - "Group": "", - "Version": "v1beta1", - "Kind": "DeploymentList", + "Type": "nested", + "Group": "apidiscovery.k8s.io", + "Version": "v2beta1", + "Kind": "APIResourceDiscovery", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta1.DeploymentRollback": { - "description": "DEPRECATED. DeploymentRollback stores the information required to rollback a deployment.", + "io.k8s.api.apidiscovery.v2beta1.APISubresourceDiscovery": { + "description": "APISubresourceDiscovery provides information about an API subresource for discovery.", "type": "object", "required": [ - "name", - "rollbackTo" + "subresource", + "verbs" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "acceptedTypes": { + "description": "acceptedTypes describes the kinds that this endpoint accepts. Subresources may accept the standard content types or define custom negotiation schemes. The list may not be exhaustive for all operations.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind" + }, + "x-kubernetes-list-map-keys": [ + "group", + "version", + "kind" + ], + "x-kubernetes-list-type": "map" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "responseKind": { + "description": "responseKind describes the group, version, and kind of the serialization schema for the object type this endpoint typically returns. Some subresources do not return normal resources, these will have null or empty return types.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind" }, - "name": { - "description": "Required: This must match the Name of a deployment.", + "subresource": { + "description": "subresource is the name of the subresource. This is used in the URL path and is the unique identifier for this resource across all versions.", "type": "string", "default": "" }, - "rollbackTo": { - "description": "The config of this deployment rollback.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta1.RollbackConfig" - }, - "updatedAnnotations": { - "description": "The annotations to be updated to a deployment", - "type": "object", - "additionalProperties": { + "verbs": { + "description": "verbs is a list of supported API operation types (this includes but is not limited to get, list, watch, create, update, patch, delete, deletecollection, and proxy). Subresources may define custom verbs outside the standard Kubernetes verb set. Clients should expect the behavior of standard verbs to align with Kubernetes interaction conventions.", + "type": "array", + "items": { "type": "string", "default": "" - } + }, + "x-kubernetes-list-type": "set" } }, "x-fabric8-info": { - "Type": "object", - "Group": "", - "Version": "v1beta1", - "Kind": "DeploymentRollback", + "Type": "nested", + "Group": "apidiscovery.k8s.io", + "Version": "v2beta1", + "Kind": "APISubresourceDiscovery", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta1.DeploymentSpec": { - "description": "DeploymentSpec is the specification of the desired behavior of the Deployment.", + "io.k8s.api.apidiscovery.v2beta1.APIVersionDiscovery": { + "description": "APIVersionDiscovery holds a list of APIResourceDiscovery types that are served for a particular version within an API Group.", "type": "object", "required": [ - "template" + "version" ], "properties": { - "minReadySeconds": { - "description": "minReadySeconds is the minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", - "type": "integer", - "format": "int32" - }, - "paused": { - "description": "paused indicates that the deployment is paused.", - "type": "boolean" - }, - "progressDeadlineSeconds": { - "description": "progressDeadlineSeconds is the maximum time in seconds for a deployment to make progress before it is considered to be failed. The deployment controller will continue to process failed deployments and a condition with a ProgressDeadlineExceeded reason will be surfaced in the deployment status. Note that progress will not be estimated during the time a deployment is paused. Defaults to 600s.", - "type": "integer", - "format": "int32" - }, - "replicas": { - "description": "replicas is the number of desired pods. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.", - "type": "integer", - "format": "int32" - }, - "revisionHistoryLimit": { - "description": "revisionHistoryLimit is the number of old ReplicaSets to retain to allow rollback. This is a pointer to distinguish between explicit zero and not specified. Defaults to 2.", - "type": "integer", - "format": "int32" - }, - "rollbackTo": { - "description": "DEPRECATED. rollbackTo is the config this deployment is rolling back to. Will be cleared after rollback is done.", - "$ref": "#/definitions/io.k8s.api.apps.v1beta1.RollbackConfig" - }, - "selector": { - "description": "selector is the label selector for pods. Existing ReplicaSets whose pods are selected by this will be the ones affected by this deployment.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "strategy": { - "description": "The deployment strategy to use to replace existing pods with new ones.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta1.DeploymentStrategy", - "x-kubernetes-patch-strategy": "retainKeys" - }, - "template": { - "description": "Template describes the pods that will be created. The only allowed template.spec.restartPolicy value is \"Always\".", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "DeploymentSpec", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1beta1.DeploymentStatus": { - "description": "DeploymentStatus is the most recently observed status of the Deployment.", - "type": "object", - "properties": { - "availableReplicas": { - "description": "Total number of available pods (ready for at least minReadySeconds) targeted by this deployment.", - "type": "integer", - "format": "int32" - }, - "collisionCount": { - "description": "collisionCount is the count of hash collisions for the Deployment. The Deployment controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ReplicaSet.", - "type": "integer", - "format": "int32" + "freshness": { + "description": "freshness marks whether a group version's discovery document is up to date. \"Current\" indicates the discovery document was recently refreshed. \"Stale\" indicates the discovery document could not be retrieved and the returned discovery document may be significantly out of date. Clients that require the latest version of the discovery information be retrieved before performing an operation should not use the aggregated document", + "type": "string" }, - "conditions": { - "description": "Conditions represent the latest available observations of a deployment's current state.", + "resources": { + "description": "resources is a list of APIResourceDiscovery objects for the corresponding group version.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta1.DeploymentCondition" + "$ref": "#/definitions/io.k8s.api.apidiscovery.v2beta1.APIResourceDiscovery" }, "x-kubernetes-list-map-keys": [ - "type" + "resource" ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "observedGeneration": { - "description": "observedGeneration is the generation observed by the deployment controller.", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas is the number of pods targeted by this Deployment controller with a Ready Condition.", - "type": "integer", - "format": "int32" - }, - "replicas": { - "description": "replicas is the total number of non-terminated pods targeted by this deployment (their labels match the selector).", - "type": "integer", - "format": "int32" - }, - "unavailableReplicas": { - "description": "unavailableReplicas is the total number of unavailable pods targeted by this deployment. This is the total number of pods that are still required for the deployment to have 100% available capacity. They may either be pods that are running but not yet available or pods that still have not been created.", - "type": "integer", - "format": "int32" + "x-kubernetes-list-type": "map" }, - "updatedReplicas": { - "description": "updatedReplicas is the total number of non-terminated pods targeted by this deployment that have the desired template spec.", - "type": "integer", - "format": "int32" + "version": { + "description": "version is the name of the version within a group version.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "DeploymentStatus", + "Group": "apidiscovery.k8s.io", + "Version": "v2beta1", + "Kind": "APIVersionDiscovery", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta1.DeploymentStrategy": { - "description": "DeploymentStrategy describes how to replace existing pods with new ones.", + "io.k8s.api.apiserverinternal.v1alpha1.ServerStorageVersion": { + "description": "An API server instance reports the version it can decode and the version it encodes objects to when persisting objects in the backend.", "type": "object", "properties": { - "rollingUpdate": { - "description": "Rolling update config params. Present only if DeploymentStrategyType = RollingUpdate.", - "$ref": "#/definitions/io.k8s.api.apps.v1beta1.RollingUpdateDeployment" - }, - "type": { - "description": "Type of deployment. Can be \"Recreate\" or \"RollingUpdate\". Default is RollingUpdate.", + "apiServerID": { + "description": "The ID of the reporting API server.", "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "DeploymentStrategy", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1beta1.RollbackConfig": { - "description": "DEPRECATED.", - "type": "object", - "properties": { - "revision": { - "description": "The revision to rollback to. If set to 0, rollback to the last revision.", - "type": "integer", - "format": "int64" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "RollbackConfig", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1beta1.RollingUpdateDeployment": { - "description": "Spec to control the desired behavior of rolling update.", - "type": "object", - "properties": { - "maxSurge": { - "description": "The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up. Defaults to 25%. Example: when this is set to 30%, the new ReplicaSet can be scaled up immediately when the rolling update starts, such that the total number of old and new pods do not exceed 130% of desired pods. Once old pods have been killed, new ReplicaSet can be scaled up further, ensuring that total number of pods running at any time during the update is at most 130% of desired pods.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" - }, - "maxUnavailable": { - "description": "The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. This can not be 0 if MaxSurge is 0. Defaults to 25%. Example: when this is set to 30%, the old ReplicaSet can be scaled down to 70% of desired pods immediately when the rolling update starts. Once new pods are ready, old ReplicaSet can be scaled down further, followed by scaling up the new ReplicaSet, ensuring that the total number of pods available at all times during the update is at least 70% of desired pods.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "RollingUpdateDeployment", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1beta1.RollingUpdateStatefulSetStrategy": { - "description": "RollingUpdateStatefulSetStrategy is used to communicate parameter for RollingUpdateStatefulSetStrategyType.", - "type": "object", - "properties": { - "maxUnavailable": { - "description": "maxUnavailable is the maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding up. This can not be 0. Defaults to 1. This field is alpha-level and is only honored by servers that enable the MaxUnavailableStatefulSet feature. The field applies to all pods in the range 0 to Replicas-1. That means if there is any unavailable pod in the range 0 to Replicas-1, it will be counted towards MaxUnavailable.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" }, - "partition": { - "description": "Partition indicates the ordinal at which the StatefulSet should be partitioned for updates. During a rolling update, all pods from ordinal Replicas-1 to Partition are updated. All pods from ordinal Partition-1 to 0 remain untouched. This is helpful in being able to do a canary based deployment. The default value is 0.", - "type": "integer", - "format": "int32" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "RollingUpdateStatefulSetStrategy", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1beta1.Scale": { - "description": "Scale represents a scaling request for a resource.", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "decodableVersions": { + "description": "The API server can decode objects encoded in these versions. The encodingVersion must be included in the decodableVersions.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "encodingVersion": { + "description": "The API server encodes the object to this version when persisting it in the backend (e.g., etcd).", "type": "string" }, - "metadata": { - "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec defines the behavior of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta1.ScaleSpec" - }, - "status": { - "description": "status defines current status of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. Read-only.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta1.ScaleStatus" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "", - "Version": "v1beta1", - "Kind": "Scale", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1beta1.ScaleSpec": { - "description": "ScaleSpec describes the attributes of a scale subresource", - "type": "object", - "properties": { - "replicas": { - "description": "replicas is the number of observed instances of the scaled object.", - "type": "integer", - "format": "int32" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "ScaleSpec", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1beta1.ScaleStatus": { - "description": "ScaleStatus represents the current status of a scale subresource.", - "type": "object", - "required": [ - "replicas" - ], - "properties": { - "replicas": { - "description": "replias is the actual number of observed instances of the scaled object.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "selector": { - "description": "selector is a label query over pods that should match the replicas count. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/", - "type": "object", - "additionalProperties": { + "servedVersions": { + "description": "The API server can serve these versions. DecodableVersions must include all ServedVersions.", + "type": "array", + "items": { "type": "string", "default": "" - } - }, - "targetSelector": { - "description": "targetSelector is the label selector for pods that should match the replicas count. This is a serializated version of both map-based and more expressive set-based selectors. This is done to avoid introspection in the clients. The string will be in the same format as the query-param syntax. If the target type only supports map-based selectors, both this field and map-based selector field are populated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", - "type": "string" + }, + "x-kubernetes-list-type": "set" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "ScaleStatus", + "Group": "internal.apiserver.k8s.io", + "Version": "v1alpha1", + "Kind": "ServerStorageVersion", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta1.StatefulSet": { - "description": "DEPRECATED - This group version of StatefulSet is deprecated by apps/v1beta2/StatefulSet. See the release notes for more information. StatefulSet represents a set of pods with consistent identities. Identities are defined as:\n - Network: A single stable DNS and hostname.\n - Storage: As many VolumeClaims as requested.\n\nThe StatefulSet guarantees that a given network identity will always map to the same storage identity.", + "io.k8s.api.apiserverinternal.v1alpha1.StorageVersion": { + "description": "Storage version of a specific resource.", "type": "object", + "required": [ + "spec", + "status" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -20509,34 +20099,37 @@ "type": "string" }, "metadata": { + "description": "The name is \u003cgroup\u003e.\u003cresource\u003e.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "Spec defines the desired identities of pods in this set.", + "description": "Spec is an empty spec. It is here to comply with Kubernetes API style.", "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta1.StatefulSetSpec" + "$ref": "#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersionSpec" }, "status": { - "description": "Status is the current status of Pods in this StatefulSet. This data may be out of date by some window of time.", + "description": "API server instances report the version they can decode and the version they encode objects to when persisting objects in the backend.", "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta1.StatefulSetStatus" + "$ref": "#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersionStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "", - "Version": "v1beta1", - "Kind": "StatefulSet", - "Scope": "Namespaced" + "Group": "internal.apiserver.k8s.io", + "Version": "v1alpha1", + "Kind": "StorageVersion", + "Scope": "Clustered" } }, - "io.k8s.api.apps.v1beta1.StatefulSetCondition": { - "description": "StatefulSetCondition describes the state of a statefulset at a certain point.", + "io.k8s.api.apiserverinternal.v1alpha1.StorageVersionCondition": { + "description": "Describes the state of the storageVersion at a certain point.", "type": "object", "required": [ "type", - "status" + "status", + "reason", + "message" ], "properties": { "lastTransitionTime": { @@ -20547,9 +20140,15 @@ "description": "A human readable message indicating details about the transition.", "type": "string" }, + "observedGeneration": { + "description": "If set, this represents the .metadata.generation that the condition was set based upon.", + "type": "integer", + "format": "int64" + }, "reason": { "description": "The reason for the condition's last transition.", - "type": "string" + "type": "string", + "default": "" }, "status": { "description": "Status of the condition, one of True, False, Unknown.", @@ -20557,21 +20156,21 @@ "default": "" }, "type": { - "description": "Type of statefulset condition.", + "description": "Type of the condition.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "StatefulSetCondition", + "Group": "internal.apiserver.k8s.io", + "Version": "v1alpha1", + "Kind": "StorageVersionCondition", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta1.StatefulSetList": { - "description": "StatefulSetList is a collection of StatefulSets.", + "io.k8s.api.apiserverinternal.v1alpha1.StorageVersionList": { + "description": "A list of StorageVersions.", "type": "object", "required": [ "items" @@ -20582,10 +20181,11 @@ "type": "string" }, "items": { + "description": "Items holds a list of StorageVersion", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta1.StatefulSet" + "$ref": "#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersion" } }, "kind": { @@ -20593,228 +20193,73 @@ "type": "string" }, "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "", - "Version": "v1beta1", - "Kind": "StatefulSetList", + "Group": "internal.apiserver.k8s.io", + "Version": "v1alpha1", + "Kind": "StorageVersionList", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta1.StatefulSetOrdinals": { - "description": "StatefulSetOrdinals describes the policy used for replica ordinal assignment in this StatefulSet.", + "io.k8s.api.apiserverinternal.v1alpha1.StorageVersionSpec": { + "description": "StorageVersionSpec is an empty spec.", "type": "object", - "properties": { - "start": { - "description": "start is the number representing the first replica's index. It may be used to number replicas from an alternate index (eg: 1-indexed) over the default 0-indexed names, or to orchestrate progressive movement of replicas from one StatefulSet to another. If set, replica indices will be in the range:\n [.spec.ordinals.start, .spec.ordinals.start + .spec.replicas).\nIf unset, defaults to 0. Replica indices will be in the range:\n [0, .spec.replicas).", - "type": "integer", - "format": "int32", - "default": 0 - } - }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "StatefulSetOrdinals", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1beta1.StatefulSetPersistentVolumeClaimRetentionPolicy": { - "description": "StatefulSetPersistentVolumeClaimRetentionPolicy describes the policy used for PVCs created from the StatefulSet VolumeClaimTemplates.", - "type": "object", - "properties": { - "whenDeleted": { - "description": "whenDeleted specifies what happens to PVCs created from StatefulSet VolumeClaimTemplates when the StatefulSet is deleted. The default policy of `Retain` causes PVCs to not be affected by StatefulSet deletion. The `Delete` policy causes those PVCs to be deleted.", - "type": "string" - }, - "whenScaled": { - "description": "whenScaled specifies what happens to PVCs created from StatefulSet VolumeClaimTemplates when the StatefulSet is scaled down. The default policy of `Retain` causes PVCs to not be affected by a scaledown. The `Delete` policy causes the associated PVCs for any excess pods above the replica count to be deleted.", - "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "StatefulSetPersistentVolumeClaimRetentionPolicy", + "Group": "internal.apiserver.k8s.io", + "Version": "v1alpha1", + "Kind": "StorageVersionSpec", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta1.StatefulSetSpec": { - "description": "A StatefulSetSpec is the specification of a StatefulSet.", + "io.k8s.api.apiserverinternal.v1alpha1.StorageVersionStatus": { + "description": "API server instances report the versions they can decode and the version they encode objects to when persisting objects in the backend.", "type": "object", - "required": [ - "template", - "serviceName" - ], "properties": { - "minReadySeconds": { - "description": "minReadySeconds is the minimum number of seconds for which a newly created pod should be ready without any of its container crashing for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", - "type": "integer", - "format": "int32" - }, - "ordinals": { - "description": "ordinals controls the numbering of replica indices in a StatefulSet. The default ordinals behavior assigns a \"0\" index to the first replica and increments the index by one for each additional replica requested.", - "$ref": "#/definitions/io.k8s.api.apps.v1beta1.StatefulSetOrdinals" - }, - "persistentVolumeClaimRetentionPolicy": { - "description": "PersistentVolumeClaimRetentionPolicy describes the policy used for PVCs created from the StatefulSet VolumeClaimTemplates. This requires the StatefulSetAutoDeletePVC feature gate to be enabled, which is alpha.", - "$ref": "#/definitions/io.k8s.api.apps.v1beta1.StatefulSetPersistentVolumeClaimRetentionPolicy" - }, - "podManagementPolicy": { - "description": "podManagementPolicy controls how pods are created during initial scale up, when replacing pods on nodes, or when scaling down. The default policy is `OrderedReady`, where pods are created in increasing order (pod-0, then pod-1, etc) and the controller will wait until each pod is ready before continuing. When scaling down, the pods are removed in the opposite order. The alternative policy is `Parallel` which will create pods in parallel to match the desired scale without waiting, and on scale down will delete all pods at once.", + "commonEncodingVersion": { + "description": "If all API server instances agree on the same encoding storage version, then this field is set to that version. Otherwise this field is left empty. API servers should finish updating its storageVersionStatus entry before serving write operations, so that this field will be in sync with the reality.", "type": "string" }, - "replicas": { - "description": "replicas is the desired number of replicas of the given Template. These are replicas in the sense that they are instantiations of the same Template, but individual replicas also have a consistent identity. If unspecified, defaults to 1.", - "type": "integer", - "format": "int32" - }, - "revisionHistoryLimit": { - "description": "revisionHistoryLimit is the maximum number of revisions that will be maintained in the StatefulSet's revision history. The revision history consists of all revisions not represented by a currently applied StatefulSetSpec version. The default value is 10.", - "type": "integer", - "format": "int32" - }, - "selector": { - "description": "selector is a label query over pods that should match the replica count. If empty, defaulted to labels on the pod template. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "serviceName": { - "description": "serviceName is the name of the service that governs this StatefulSet. This service must exist before the StatefulSet, and is responsible for the network identity of the set. Pods get DNS/hostnames that follow the pattern: pod-specific-string.serviceName.default.svc.cluster.local where \"pod-specific-string\" is managed by the StatefulSet controller.", - "type": "string", - "default": "" - }, - "template": { - "description": "template is the object that describes the pod that will be created if insufficient replicas are detected. Each pod stamped out by the StatefulSet will fulfill this Template, but have a unique identity from the rest of the StatefulSet. Each pod will be named with the format \u003cstatefulsetname\u003e-\u003cpodindex\u003e. For example, a pod in a StatefulSet named \"web\" with index number \"3\" would be named \"web-3\".", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" - }, - "updateStrategy": { - "description": "updateStrategy indicates the StatefulSetUpdateStrategy that will be employed to update Pods in the StatefulSet when a revision is made to Template.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta1.StatefulSetUpdateStrategy" - }, - "volumeClaimTemplates": { - "description": "volumeClaimTemplates is a list of claims that pods are allowed to reference. The StatefulSet controller is responsible for mapping network identities to claims in a way that maintains the identity of a pod. Every claim in this list must have at least one matching (by name) volumeMount in one container in the template. A claim in this list takes precedence over any volumes in the template, with the same name.", + "conditions": { + "description": "The latest available observations of the storageVersion's state.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + "$ref": "#/definitions/io.k8s.api.apiserverinternal.v1alpha1.StorageVersionCondition" }, - "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "StatefulSetSpec", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1beta1.StatefulSetStatus": { - "description": "StatefulSetStatus represents the current state of a StatefulSet.", - "type": "object", - "required": [ - "replicas" - ], - "properties": { - "availableReplicas": { - "description": "availableReplicas is the total number of available pods (ready for at least minReadySeconds) targeted by this StatefulSet.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "collisionCount": { - "description": "collisionCount is the count of hash collisions for the StatefulSet. The StatefulSet controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ControllerRevision.", - "type": "integer", - "format": "int32" + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" }, - "conditions": { - "description": "conditions represent the latest available observations of a statefulset's current state.", + "storageVersions": { + "description": "The reported versions per API server instance.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta1.StatefulSetCondition" + "$ref": "#/definitions/io.k8s.api.apiserverinternal.v1alpha1.ServerStorageVersion" }, "x-kubernetes-list-map-keys": [ - "type" + "apiServerID" ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "currentReplicas": { - "description": "currentReplicas is the number of Pods created by the StatefulSet controller from the StatefulSet version indicated by currentRevision.", - "type": "integer", - "format": "int32" - }, - "currentRevision": { - "description": "currentRevision, if not empty, indicates the version of the StatefulSet used to generate Pods in the sequence [0,currentReplicas).", - "type": "string" - }, - "observedGeneration": { - "description": "observedGeneration is the most recent generation observed for this StatefulSet. It corresponds to the StatefulSet's generation, which is updated on mutation by the API Server.", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas is the number of pods created by this StatefulSet controller with a Ready Condition.", - "type": "integer", - "format": "int32" - }, - "replicas": { - "description": "replicas is the number of Pods created by the StatefulSet controller.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "updateRevision": { - "description": "updateRevision, if not empty, indicates the version of the StatefulSet used to generate Pods in the sequence [replicas-updatedReplicas,replicas)", - "type": "string" - }, - "updatedReplicas": { - "description": "updatedReplicas is the number of Pods created by the StatefulSet controller from the StatefulSet version indicated by updateRevision.", - "type": "integer", - "format": "int32" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "StatefulSetStatus", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1beta1.StatefulSetUpdateStrategy": { - "description": "StatefulSetUpdateStrategy indicates the strategy that the StatefulSet controller will use to perform updates. It includes any additional parameters necessary to perform the update for the indicated strategy.", - "type": "object", - "properties": { - "rollingUpdate": { - "description": "RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType.", - "$ref": "#/definitions/io.k8s.api.apps.v1beta1.RollingUpdateStatefulSetStrategy" - }, - "type": { - "description": "Type indicates the type of the StatefulSetUpdateStrategy.", - "type": "string" + "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "StatefulSetUpdateStrategy", + "Group": "internal.apiserver.k8s.io", + "Version": "v1alpha1", + "Kind": "StorageVersionStatus", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.ControllerRevision": { - "description": "DEPRECATED - This group version of ControllerRevision is deprecated by apps/v1/ControllerRevision. See the release notes for more information. ControllerRevision implements an immutable snapshot of state data. Clients are responsible for serializing and deserializing the objects that contain their internal state. Once a ControllerRevision has been successfully created, it can not be updated. The API Server will fail validation of all requests that attempt to mutate the Data field. ControllerRevisions may, however, be deleted. Note that, due to its use by both the DaemonSet and StatefulSet controllers for update and rollback, this object is beta. However, it may be subject to name and representation changes in future releases, and clients should not depend on its stability. It is primarily for internal use by controllers.", + "io.k8s.api.apps.v1.ControllerRevision": { + "description": "ControllerRevision implements an immutable snapshot of state data. Clients are responsible for serializing and deserializing the objects that contain their internal state. Once a ControllerRevision has been successfully created, it can not be updated. The API Server will fail validation of all requests that attempt to mutate the Data field. ControllerRevisions may, however, be deleted. Note that, due to its use by both the DaemonSet and StatefulSet controllers for update and rollback, this object is beta. However, it may be subject to name and representation changes in future releases, and clients should not depend on its stability. It is primarily for internal use by controllers.", "type": "object", "required": [ "revision" @@ -20847,12 +20292,12 @@ "x-fabric8-info": { "Type": "object", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "ControllerRevision", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.ControllerRevisionList": { + "io.k8s.api.apps.v1.ControllerRevisionList": { "description": "ControllerRevisionList is a resource containing a list of ControllerRevision objects.", "type": "object", "required": [ @@ -20868,7 +20313,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.ControllerRevision" + "$ref": "#/definitions/io.k8s.api.apps.v1.ControllerRevision" } }, "kind": { @@ -20884,13 +20329,13 @@ "x-fabric8-info": { "Type": "list", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "ControllerRevisionList", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.DaemonSet": { - "description": "DEPRECATED - This group version of DaemonSet is deprecated by apps/v1/DaemonSet. See the release notes for more information. DaemonSet represents the configuration of a daemon set.", + "io.k8s.api.apps.v1.DaemonSet": { + "description": "DaemonSet represents the configuration of a daemon set.", "type": "object", "properties": { "apiVersion": { @@ -20909,23 +20354,23 @@ "spec": { "description": "The desired behavior of this daemon set. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.DaemonSetSpec" + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSetSpec" }, "status": { "description": "The current status of this daemon set. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.DaemonSetStatus" + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSetStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "DaemonSet", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.DaemonSetCondition": { + "io.k8s.api.apps.v1.DaemonSetCondition": { "description": "DaemonSetCondition describes the state of a DaemonSet at a certain point.", "type": "object", "required": [ @@ -20959,12 +20404,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "DaemonSetCondition", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.DaemonSetList": { + "io.k8s.api.apps.v1.DaemonSetList": { "description": "DaemonSetList is a collection of daemon sets.", "type": "object", "required": [ @@ -20980,7 +20425,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.DaemonSet" + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSet" } }, "kind": { @@ -20996,12 +20441,12 @@ "x-fabric8-info": { "Type": "list", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "DaemonSetList", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.DaemonSetSpec": { + "io.k8s.api.apps.v1.DaemonSetSpec": { "description": "DaemonSetSpec is the specification of a daemon set.", "type": "object", "required": [ @@ -21031,18 +20476,18 @@ "updateStrategy": { "description": "An update strategy to replace existing DaemonSet pods with new pods.", "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.DaemonSetUpdateStrategy" + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSetUpdateStrategy" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "DaemonSetSpec", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.DaemonSetStatus": { + "io.k8s.api.apps.v1.DaemonSetStatus": { "description": "DaemonSetStatus represents the current status of a daemon set.", "type": "object", "required": [ @@ -21062,7 +20507,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.DaemonSetCondition" + "$ref": "#/definitions/io.k8s.api.apps.v1.DaemonSetCondition" }, "x-kubernetes-list-map-keys": [ "type" @@ -21095,7 +20540,7 @@ "default": 0 }, "numberReady": { - "description": "Total number of nodes that should be running the daemon pod and have one or more of the daemon pod running with a Ready Condition by passing the readinessProbe.", + "description": "numberReady is the number of nodes that should be running the daemon pod and have one or more of the daemon pod running with a Ready Condition.", "type": "integer", "format": "int32", "default": 0 @@ -21119,34 +20564,38 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "DaemonSetStatus", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.DaemonSetUpdateStrategy": { + "io.k8s.api.apps.v1.DaemonSetUpdateStrategy": { "description": "DaemonSetUpdateStrategy is a struct used to control the update strategy for a DaemonSet.", "type": "object", "properties": { "rollingUpdate": { "description": "Rolling update config params. Present only if type = \"RollingUpdate\".", - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.RollingUpdateDaemonSet" + "$ref": "#/definitions/io.k8s.api.apps.v1.RollingUpdateDaemonSet" }, "type": { - "description": "Type of daemon set update. Can be \"RollingUpdate\" or \"OnDelete\". Default is RollingUpdate.", - "type": "string" + "description": "Type of daemon set update. Can be \"RollingUpdate\" or \"OnDelete\". Default is RollingUpdate.\n\nPossible enum values:\n - `\"OnDelete\"` Replace the old daemons only when it's killed\n - `\"RollingUpdate\"` Replace the old daemons by new ones using rolling update i.e replace them on each node one after the other.", + "type": "string", + "enum": [ + "OnDelete", + "RollingUpdate" + ] } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "DaemonSetUpdateStrategy", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.Deployment": { - "description": "DEPRECATED - This group version of Deployment is deprecated by apps/v1/Deployment. See the release notes for more information. Deployment enables declarative updates for Pods and ReplicaSets.", + "io.k8s.api.apps.v1.Deployment": { + "description": "Deployment enables declarative updates for Pods and ReplicaSets.", "type": "object", "properties": { "apiVersion": { @@ -21158,30 +20607,30 @@ "type": "string" }, "metadata": { - "description": "Standard object metadata.", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { "description": "Specification of the desired behavior of the Deployment.", "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.DeploymentSpec" + "$ref": "#/definitions/io.k8s.api.apps.v1.DeploymentSpec" }, "status": { "description": "Most recently observed status of the Deployment.", "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.DeploymentStatus" + "$ref": "#/definitions/io.k8s.api.apps.v1.DeploymentStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "Deployment", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.DeploymentCondition": { + "io.k8s.api.apps.v1.DeploymentCondition": { "description": "DeploymentCondition describes the state of a deployment at a certain point.", "type": "object", "required": [ @@ -21219,12 +20668,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "DeploymentCondition", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.DeploymentList": { + "io.k8s.api.apps.v1.DeploymentList": { "description": "DeploymentList is a list of Deployments.", "type": "object", "required": [ @@ -21240,7 +20689,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.Deployment" + "$ref": "#/definitions/io.k8s.api.apps.v1.Deployment" } }, "kind": { @@ -21256,12 +20705,12 @@ "x-fabric8-info": { "Type": "list", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "DeploymentList", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.DeploymentSpec": { + "io.k8s.api.apps.v1.DeploymentSpec": { "description": "DeploymentSpec is the specification of the desired behavior of the Deployment.", "type": "object", "required": [ @@ -21300,7 +20749,7 @@ "strategy": { "description": "The deployment strategy to use to replace existing pods with new ones.", "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.DeploymentStrategy", + "$ref": "#/definitions/io.k8s.api.apps.v1.DeploymentStrategy", "x-kubernetes-patch-strategy": "retainKeys" }, "template": { @@ -21312,12 +20761,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "DeploymentSpec", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.DeploymentStatus": { + "io.k8s.api.apps.v1.DeploymentStatus": { "description": "DeploymentStatus is the most recently observed status of the Deployment.", "type": "object", "properties": { @@ -21336,7 +20785,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.DeploymentCondition" + "$ref": "#/definitions/io.k8s.api.apps.v1.DeploymentCondition" }, "x-kubernetes-list-map-keys": [ "type" @@ -21351,7 +20800,7 @@ "format": "int64" }, "readyReplicas": { - "description": "readyReplicas is the number of pods targeted by this Deployment controller with a Ready Condition.", + "description": "readyReplicas is the number of pods targeted by this Deployment with a Ready Condition.", "type": "integer", "format": "int32" }, @@ -21374,34 +20823,38 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "DeploymentStatus", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.DeploymentStrategy": { + "io.k8s.api.apps.v1.DeploymentStrategy": { "description": "DeploymentStrategy describes how to replace existing pods with new ones.", "type": "object", "properties": { "rollingUpdate": { "description": "Rolling update config params. Present only if DeploymentStrategyType = RollingUpdate.", - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.RollingUpdateDeployment" + "$ref": "#/definitions/io.k8s.api.apps.v1.RollingUpdateDeployment" }, "type": { - "description": "Type of deployment. Can be \"Recreate\" or \"RollingUpdate\". Default is RollingUpdate.", - "type": "string" + "description": "Type of deployment. Can be \"Recreate\" or \"RollingUpdate\". Default is RollingUpdate.\n\nPossible enum values:\n - `\"Recreate\"` Kill all existing pods before creating new ones.\n - `\"RollingUpdate\"` Replace the old ReplicaSets by new one using rolling update i.e gradually scale down the old ReplicaSets and scale up the new one.", + "type": "string", + "enum": [ + "Recreate", + "RollingUpdate" + ] } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "DeploymentStrategy", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.ReplicaSet": { - "description": "DEPRECATED - This group version of ReplicaSet is deprecated by apps/v1/ReplicaSet. See the release notes for more information. ReplicaSet ensures that a specified number of pod replicas are running at any given time.", + "io.k8s.api.apps.v1.ReplicaSet": { + "description": "ReplicaSet ensures that a specified number of pod replicas are running at any given time.", "type": "object", "properties": { "apiVersion": { @@ -21420,23 +20873,23 @@ "spec": { "description": "Spec defines the specification of the desired behavior of the ReplicaSet. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.ReplicaSetSpec" + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSetSpec" }, "status": { "description": "Status is the most recently observed status of the ReplicaSet. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.ReplicaSetStatus" + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSetStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "ReplicaSet", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.ReplicaSetCondition": { + "io.k8s.api.apps.v1.ReplicaSetCondition": { "description": "ReplicaSetCondition describes the state of a replica set at a certain point.", "type": "object", "required": [ @@ -21470,12 +20923,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "ReplicaSetCondition", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.ReplicaSetList": { + "io.k8s.api.apps.v1.ReplicaSetList": { "description": "ReplicaSetList is a collection of ReplicaSets.", "type": "object", "required": [ @@ -21491,7 +20944,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.ReplicaSet" + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSet" } }, "kind": { @@ -21507,12 +20960,12 @@ "x-fabric8-info": { "Type": "list", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "ReplicaSetList", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.ReplicaSetSpec": { + "io.k8s.api.apps.v1.ReplicaSetSpec": { "description": "ReplicaSetSpec is the specification of a ReplicaSet.", "type": "object", "required": [ @@ -21542,12 +20995,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "ReplicaSetSpec", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.ReplicaSetStatus": { + "io.k8s.api.apps.v1.ReplicaSetStatus": { "description": "ReplicaSetStatus represents the current status of a ReplicaSet.", "type": "object", "required": [ @@ -21564,7 +21017,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.ReplicaSetCondition" + "$ref": "#/definitions/io.k8s.api.apps.v1.ReplicaSetCondition" }, "x-kubernetes-list-map-keys": [ "type" @@ -21584,7 +21037,7 @@ "format": "int64" }, "readyReplicas": { - "description": "readyReplicas is the number of pods targeted by this ReplicaSet controller with a Ready Condition.", + "description": "readyReplicas is the number of pods targeted by this ReplicaSet with a Ready Condition.", "type": "integer", "format": "int32" }, @@ -21598,12 +21051,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "ReplicaSetStatus", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.RollingUpdateDaemonSet": { + "io.k8s.api.apps.v1.RollingUpdateDaemonSet": { "description": "Spec to control the desired behavior of daemon set rolling update.", "type": "object", "properties": { @@ -21619,12 +21072,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "RollingUpdateDaemonSet", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.RollingUpdateDeployment": { + "io.k8s.api.apps.v1.RollingUpdateDeployment": { "description": "Spec to control the desired behavior of rolling update.", "type": "object", "properties": { @@ -21640,12 +21093,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "RollingUpdateDeployment", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.RollingUpdateStatefulSetStrategy": { + "io.k8s.api.apps.v1.RollingUpdateStatefulSetStrategy": { "description": "RollingUpdateStatefulSetStrategy is used to communicate parameter for RollingUpdateStatefulSetStrategyType.", "type": "object", "properties": { @@ -21662,102 +21115,13 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "RollingUpdateStatefulSetStrategy", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.Scale": { - "description": "Scale represents a scaling request for a resource.", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "defines the behavior of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.ScaleSpec" - }, - "status": { - "description": "current status of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. Read-only.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.ScaleStatus" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "", - "Version": "v1beta2", - "Kind": "Scale", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1beta2.ScaleSpec": { - "description": "ScaleSpec describes the attributes of a scale subresource", - "type": "object", - "properties": { - "replicas": { - "description": "desired number of instances for the scaled object.", - "type": "integer", - "format": "int32" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1beta2", - "Kind": "ScaleSpec", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1beta2.ScaleStatus": { - "description": "ScaleStatus represents the current status of a scale subresource.", - "type": "object", - "required": [ - "replicas" - ], - "properties": { - "replicas": { - "description": "actual number of observed instances of the scaled object.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "selector": { - "description": "selector is a label query over pods that should match the replicas count. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - }, - "x-kubernetes-map-type": "atomic" - }, - "targetSelector": { - "description": "label selector for pods that should match the replicas count. This is a serializated version of both map-based and more expressive set-based selectors. This is done to avoid introspection in the clients. The string will be in the same format as the query-param syntax. If the target type only supports map-based selectors, both this field and map-based selector field are populated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", - "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1beta2", - "Kind": "ScaleStatus", - "Scope": "Namespaced" - } - }, - "io.k8s.api.apps.v1beta2.StatefulSet": { - "description": "DEPRECATED - This group version of StatefulSet is deprecated by apps/v1/StatefulSet. See the release notes for more information. StatefulSet represents a set of pods with consistent identities. Identities are defined as:\n - Network: A single stable DNS and hostname.\n - Storage: As many VolumeClaims as requested.\n\nThe StatefulSet guarantees that a given network identity will always map to the same storage identity.", + "io.k8s.api.apps.v1.StatefulSet": { + "description": "StatefulSet represents a set of pods with consistent identities. Identities are defined as:\n - Network: A single stable DNS and hostname.\n - Storage: As many VolumeClaims as requested.\n\nThe StatefulSet guarantees that a given network identity will always map to the same storage identity.", "type": "object", "properties": { "apiVersion": { @@ -21769,29 +21133,30 @@ "type": "string" }, "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { "description": "Spec defines the desired identities of pods in this set.", "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.StatefulSetSpec" + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSetSpec" }, "status": { "description": "Status is the current status of Pods in this StatefulSet. This data may be out of date by some window of time.", "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.StatefulSetStatus" + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSetStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "StatefulSet", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.StatefulSetCondition": { + "io.k8s.api.apps.v1.StatefulSetCondition": { "description": "StatefulSetCondition describes the state of a statefulset at a certain point.", "type": "object", "required": [ @@ -21825,12 +21190,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "StatefulSetCondition", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.StatefulSetList": { + "io.k8s.api.apps.v1.StatefulSetList": { "description": "StatefulSetList is a collection of StatefulSets.", "type": "object", "required": [ @@ -21842,10 +21207,11 @@ "type": "string" }, "items": { + "description": "Items is the list of stateful sets.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.StatefulSet" + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSet" } }, "kind": { @@ -21853,6 +21219,7 @@ "type": "string" }, "metadata": { + "description": "Standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } @@ -21860,12 +21227,12 @@ "x-fabric8-info": { "Type": "list", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "StatefulSetList", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.StatefulSetOrdinals": { + "io.k8s.api.apps.v1.StatefulSetOrdinals": { "description": "StatefulSetOrdinals describes the policy used for replica ordinal assignment in this StatefulSet.", "type": "object", "properties": { @@ -21879,12 +21246,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "StatefulSetOrdinals", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.StatefulSetPersistentVolumeClaimRetentionPolicy": { + "io.k8s.api.apps.v1.StatefulSetPersistentVolumeClaimRetentionPolicy": { "description": "StatefulSetPersistentVolumeClaimRetentionPolicy describes the policy used for PVCs created from the StatefulSet VolumeClaimTemplates.", "type": "object", "properties": { @@ -21900,12 +21267,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "StatefulSetPersistentVolumeClaimRetentionPolicy", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.StatefulSetSpec": { + "io.k8s.api.apps.v1.StatefulSetSpec": { "description": "A StatefulSetSpec is the specification of a StatefulSet.", "type": "object", "required": [ @@ -21921,15 +21288,19 @@ }, "ordinals": { "description": "ordinals controls the numbering of replica indices in a StatefulSet. The default ordinals behavior assigns a \"0\" index to the first replica and increments the index by one for each additional replica requested.", - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.StatefulSetOrdinals" + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSetOrdinals" }, "persistentVolumeClaimRetentionPolicy": { - "description": "PersistentVolumeClaimRetentionPolicy describes the policy used for PVCs created from the StatefulSet VolumeClaimTemplates. This requires the StatefulSetAutoDeletePVC feature gate to be enabled, which is alpha.", - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.StatefulSetPersistentVolumeClaimRetentionPolicy" + "description": "persistentVolumeClaimRetentionPolicy describes the lifecycle of persistent volume claims created from volumeClaimTemplates. By default, all persistent volume claims are created as needed and retained until manually deleted. This policy allows the lifecycle to be altered, for example by deleting persistent volume claims when their stateful set is deleted, or when their pod is scaled down. This requires the StatefulSetAutoDeletePVC feature gate to be enabled, which is beta.", + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSetPersistentVolumeClaimRetentionPolicy" }, "podManagementPolicy": { - "description": "podManagementPolicy controls how pods are created during initial scale up, when replacing pods on nodes, or when scaling down. The default policy is `OrderedReady`, where pods are created in increasing order (pod-0, then pod-1, etc) and the controller will wait until each pod is ready before continuing. When scaling down, the pods are removed in the opposite order. The alternative policy is `Parallel` which will create pods in parallel to match the desired scale without waiting, and on scale down will delete all pods at once.", - "type": "string" + "description": "podManagementPolicy controls how pods are created during initial scale up, when replacing pods on nodes, or when scaling down. The default policy is `OrderedReady`, where pods are created in increasing order (pod-0, then pod-1, etc) and the controller will wait until each pod is ready before continuing. When scaling down, the pods are removed in the opposite order. The alternative policy is `Parallel` which will create pods in parallel to match the desired scale without waiting, and on scale down will delete all pods at once.\n\nPossible enum values:\n - `\"OrderedReady\"` will create pods in strictly increasing order on scale up and strictly decreasing order on scale down, progressing only when the previous pod is ready or terminated. At most one pod will be changed at any time.\n - `\"Parallel\"` will create and delete pods as soon as the stateful set replica count is changed, and will not wait for pods to be ready or complete termination.", + "type": "string", + "enum": [ + "OrderedReady", + "Parallel" + ] }, "replicas": { "description": "replicas is the desired number of replicas of the given Template. These are replicas in the sense that they are instantiations of the same Template, but individual replicas also have a consistent identity. If unspecified, defaults to 1.", @@ -21958,7 +21329,7 @@ "updateStrategy": { "description": "updateStrategy indicates the StatefulSetUpdateStrategy that will be employed to update Pods in the StatefulSet when a revision is made to Template.", "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.StatefulSetUpdateStrategy" + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSetUpdateStrategy" }, "volumeClaimTemplates": { "description": "volumeClaimTemplates is a list of claims that pods are allowed to reference. The StatefulSet controller is responsible for mapping network identities to claims in a way that maintains the identity of a pod. Every claim in this list must have at least one matching (by name) volumeMount in one container in the template. A claim in this list takes precedence over any volumes in the template, with the same name.", @@ -21973,12 +21344,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "StatefulSetSpec", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.StatefulSetStatus": { + "io.k8s.api.apps.v1.StatefulSetStatus": { "description": "StatefulSetStatus represents the current state of a StatefulSet.", "type": "object", "required": [ @@ -21986,7 +21357,7 @@ ], "properties": { "availableReplicas": { - "description": "Total number of available pods (ready for at least minReadySeconds) targeted by this StatefulSet.", + "description": "Total number of available pods (ready for at least minReadySeconds) targeted by this statefulset.", "type": "integer", "format": "int32", "default": 0 @@ -22001,7 +21372,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.StatefulSetCondition" + "$ref": "#/definitions/io.k8s.api.apps.v1.StatefulSetCondition" }, "x-kubernetes-list-map-keys": [ "type" @@ -22025,7 +21396,7 @@ "format": "int64" }, "readyReplicas": { - "description": "readyReplicas is the number of pods created by this StatefulSet controller with a Ready Condition.", + "description": "readyReplicas is the number of pods created for this StatefulSet with a Ready Condition.", "type": "integer", "format": "int32" }, @@ -22048,116 +21419,115 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "StatefulSetStatus", "Scope": "Namespaced" } }, - "io.k8s.api.apps.v1beta2.StatefulSetUpdateStrategy": { + "io.k8s.api.apps.v1.StatefulSetUpdateStrategy": { "description": "StatefulSetUpdateStrategy indicates the strategy that the StatefulSet controller will use to perform updates. It includes any additional parameters necessary to perform the update for the indicated strategy.", "type": "object", "properties": { "rollingUpdate": { "description": "RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType.", - "$ref": "#/definitions/io.k8s.api.apps.v1beta2.RollingUpdateStatefulSetStrategy" + "$ref": "#/definitions/io.k8s.api.apps.v1.RollingUpdateStatefulSetStrategy" }, "type": { - "description": "Type indicates the type of the StatefulSetUpdateStrategy. Default is RollingUpdate.", - "type": "string" + "description": "Type indicates the type of the StatefulSetUpdateStrategy. Default is RollingUpdate.\n\nPossible enum values:\n - `\"OnDelete\"` triggers the legacy behavior. Version tracking and ordered rolling restarts are disabled. Pods are recreated from the StatefulSetSpec when they are manually deleted. When a scale operation is performed with this strategy,specification version indicated by the StatefulSet's currentRevision.\n - `\"RollingUpdate\"` indicates that update will be applied to all Pods in the StatefulSet with respect to the StatefulSet ordering constraints. When a scale operation is performed with this strategy, new Pods will be created from the specification version indicated by the StatefulSet's updateRevision.", + "type": "string", + "enum": [ + "OnDelete", + "RollingUpdate" + ] } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta2", + "Version": "v1", "Kind": "StatefulSetUpdateStrategy", "Scope": "Namespaced" } }, - "io.k8s.api.authentication.v1.BoundObjectReference": { - "description": "BoundObjectReference is a reference to an object that a token is bound to.", + "io.k8s.api.apps.v1beta1.ControllerRevision": { + "description": "DEPRECATED - This group version of ControllerRevision is deprecated by apps/v1beta2/ControllerRevision. See the release notes for more information. ControllerRevision implements an immutable snapshot of state data. Clients are responsible for serializing and deserializing the objects that contain their internal state. Once a ControllerRevision has been successfully created, it can not be updated. The API Server will fail validation of all requests that attempt to mutate the Data field. ControllerRevisions may, however, be deleted. Note that, due to its use by both the DaemonSet and StatefulSet controllers for update and rollback, this object is beta. However, it may be subject to name and representation changes in future releases, and clients should not depend on its stability. It is primarily for internal use by controllers.", "type": "object", + "required": [ + "revision" + ], "properties": { "apiVersion": { - "description": "API version of the referent.", + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "data": { + "description": "data is the serialized representation of the state.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + }, "kind": { - "description": "Kind of the referent. Valid kinds are 'Pod' and 'Secret'.", + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "name": { - "description": "Name of the referent.", - "type": "string" + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "uid": { - "description": "UID of the referent.", - "type": "string" + "revision": { + "description": "revision indicates the revision of the state represented by Data.", + "type": "integer", + "format": "int64", + "default": 0 } }, "x-fabric8-info": { - "Type": "nested", - "Group": "authentication.k8s.io", - "Version": "v1", - "Kind": "BoundObjectReference", + "Type": "object", + "Group": "", + "Version": "v1beta1", + "Kind": "ControllerRevision", "Scope": "Namespaced" } }, - "io.k8s.api.authentication.v1.SelfSubjectReview": { - "description": "SelfSubjectReview contains the user information that the kube-apiserver has about the user making this request. When using impersonation, users will receive the user info of the user being impersonated. If impersonation or request header authentication is used, any extra keys will have their case ignored and returned as lowercase.", + "io.k8s.api.apps.v1beta1.ControllerRevisionList": { + "description": "ControllerRevisionList is a resource containing a list of ControllerRevision objects.", "type": "object", + "required": [ + "items" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "items": { + "description": "Items is the list of ControllerRevisions", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.apps.v1beta1.ControllerRevision" + } + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "status": { - "description": "Status is filled in by the server with the user attributes.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.authentication.v1.SelfSubjectReviewStatus" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "authentication.k8s.io", - "Version": "v1", - "Kind": "SelfSubjectReview", - "Scope": "Clustered" - } - }, - "io.k8s.api.authentication.v1.SelfSubjectReviewStatus": { - "description": "SelfSubjectReviewStatus is filled by the kube-apiserver and sent back to a user.", - "type": "object", - "properties": { - "userInfo": { - "description": "User attributes of the user making this request.", + "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.api.authentication.v1.UserInfo" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "authentication.k8s.io", - "Version": "v1", - "Kind": "SelfSubjectReviewStatus", + "Type": "list", + "Group": "", + "Version": "v1beta1", + "Kind": "ControllerRevisionList", "Scope": "Namespaced" } }, - "io.k8s.api.authentication.v1.TokenRequest": { - "description": "TokenRequest requests a token for a given service account.", + "io.k8s.api.apps.v1beta1.Deployment": { + "description": "DEPRECATED - This group version of Deployment is deprecated by apps/v1beta2/Deployment. See the release notes for more information. Deployment enables declarative updates for Pods and ReplicaSets.", "type": "object", - "required": [ - "spec" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -22168,94 +21538,115 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object metadata.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "Spec holds information about the request being evaluated", + "description": "Specification of the desired behavior of the Deployment.", "default": {}, - "$ref": "#/definitions/io.k8s.api.authentication.v1.TokenRequestSpec" + "$ref": "#/definitions/io.k8s.api.apps.v1beta1.DeploymentSpec" }, "status": { - "description": "Status is filled in by the server and indicates whether the token can be authenticated.", + "description": "Most recently observed status of the Deployment.", "default": {}, - "$ref": "#/definitions/io.k8s.api.authentication.v1.TokenRequestStatus" + "$ref": "#/definitions/io.k8s.api.apps.v1beta1.DeploymentStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "authentication.k8s.io", - "Version": "v1", - "Kind": "TokenRequest", + "Group": "", + "Version": "v1beta1", + "Kind": "Deployment", "Scope": "Namespaced" } }, - "io.k8s.api.authentication.v1.TokenRequestSpec": { - "description": "TokenRequestSpec contains client provided parameters of a token request.", + "io.k8s.api.apps.v1beta1.DeploymentCondition": { + "description": "DeploymentCondition describes the state of a deployment at a certain point.", "type": "object", "required": [ - "audiences" + "type", + "status" ], "properties": { - "audiences": { - "description": "Audiences are the intendend audiences of the token. A recipient of a token must identify themself with an identifier in the list of audiences of the token, and otherwise should reject the token. A token issued for multiple audiences may be used to authenticate against any of the audiences listed but implies a high degree of trust between the target audiences.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "lastTransitionTime": { + "description": "Last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "boundObjectRef": { - "description": "BoundObjectRef is a reference to an object that the token will be bound to. The token will only be valid for as long as the bound object exists. NOTE: The API server's TokenReview endpoint will validate the BoundObjectRef, but other audiences may not. Keep ExpirationSeconds small if you want prompt revocation.", - "$ref": "#/definitions/io.k8s.api.authentication.v1.BoundObjectReference" + "lastUpdateTime": { + "description": "The last time this condition was updated.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "expirationSeconds": { - "description": "ExpirationSeconds is the requested duration of validity of the request. The token issuer may return a token with a different validity duration so a client needs to check the 'expiration' field in a response.", - "type": "integer", - "format": "int64" + "message": { + "description": "A human readable message indicating details about the transition.", + "type": "string" + }, + "reason": { + "description": "The reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status of the condition, one of True, False, Unknown.", + "type": "string", + "default": "" + }, + "type": { + "description": "Type of deployment condition.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authentication.k8s.io", - "Version": "v1", - "Kind": "TokenRequestSpec", + "Group": "", + "Version": "v1beta1", + "Kind": "DeploymentCondition", "Scope": "Namespaced" } }, - "io.k8s.api.authentication.v1.TokenRequestStatus": { - "description": "TokenRequestStatus is the result of a token request.", + "io.k8s.api.apps.v1beta1.DeploymentList": { + "description": "DeploymentList is a list of Deployments.", "type": "object", "required": [ - "token", - "expirationTimestamp" + "items" ], "properties": { - "expirationTimestamp": { - "description": "ExpirationTimestamp is the time of expiration of the returned token.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "token": { - "description": "Token is the opaque bearer token.", - "type": "string", - "default": "" + "items": { + "description": "Items is the list of Deployments.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.apps.v1beta1.Deployment" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "authentication.k8s.io", - "Version": "v1", - "Kind": "TokenRequestStatus", + "Type": "list", + "Group": "", + "Version": "v1beta1", + "Kind": "DeploymentList", "Scope": "Namespaced" } }, - "io.k8s.api.authentication.v1.TokenReview": { - "description": "TokenReview attempts to authenticate a token to a known user. Note: TokenReview requests may be cached by the webhook token authenticator plugin in the kube-apiserver.", + "io.k8s.api.apps.v1beta1.DeploymentRollback": { + "description": "DEPRECATED. DeploymentRollback stores the information required to rollback a deployment.", "type": "object", "required": [ - "spec" + "name", + "rollbackTo" ], "properties": { "apiVersion": { @@ -22266,236 +21657,239 @@ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "name": { + "description": "Required: This must match the Name of a deployment.", + "type": "string", + "default": "" }, - "spec": { - "description": "Spec holds information about the request being evaluated", + "rollbackTo": { + "description": "The config of this deployment rollback.", "default": {}, - "$ref": "#/definitions/io.k8s.api.authentication.v1.TokenReviewSpec" + "$ref": "#/definitions/io.k8s.api.apps.v1beta1.RollbackConfig" }, - "status": { - "description": "Status is filled in by the server and indicates whether the request can be authenticated.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.authentication.v1.TokenReviewStatus" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "authentication.k8s.io", - "Version": "v1", - "Kind": "TokenReview", - "Scope": "Clustered" - } - }, - "io.k8s.api.authentication.v1.TokenReviewSpec": { - "description": "TokenReviewSpec is a description of the token authentication request.", - "type": "object", - "properties": { - "audiences": { - "description": "Audiences is a list of the identifiers that the resource server presented with the token identifies as. Audience-aware token authenticators will verify that the token was intended for at least one of the audiences in this list. If no audiences are provided, the audience will default to the audience of the Kubernetes apiserver.", - "type": "array", - "items": { + "updatedAnnotations": { + "description": "The annotations to be updated to a deployment", + "type": "object", + "additionalProperties": { "type": "string", "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "token": { - "description": "Token is the opaque bearer token.", - "type": "string" + } } }, "x-fabric8-info": { - "Type": "nested", - "Group": "authentication.k8s.io", - "Version": "v1", - "Kind": "TokenReviewSpec", + "Type": "object", + "Group": "", + "Version": "v1beta1", + "Kind": "DeploymentRollback", "Scope": "Namespaced" } }, - "io.k8s.api.authentication.v1.TokenReviewStatus": { - "description": "TokenReviewStatus is the result of the token authentication request.", + "io.k8s.api.apps.v1beta1.DeploymentSpec": { + "description": "DeploymentSpec is the specification of the desired behavior of the Deployment.", "type": "object", + "required": [ + "template" + ], "properties": { - "audiences": { - "description": "Audiences are audience identifiers chosen by the authenticator that are compatible with both the TokenReview and token. An identifier is any identifier in the intersection of the TokenReviewSpec audiences and the token's audiences. A client of the TokenReview API that sets the spec.audiences field should validate that a compatible audience identifier is returned in the status.audiences field to ensure that the TokenReview server is audience aware. If a TokenReview returns an empty status.audience field where status.authenticated is \"true\", the token is valid against the audience of the Kubernetes API server.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "minReadySeconds": { + "description": "minReadySeconds is the minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", + "type": "integer", + "format": "int32" }, - "authenticated": { - "description": "Authenticated indicates that the token was associated with a known user.", + "paused": { + "description": "paused indicates that the deployment is paused.", "type": "boolean" }, - "error": { - "description": "Error indicates that the token couldn't be checked", - "type": "string" + "progressDeadlineSeconds": { + "description": "progressDeadlineSeconds is the maximum time in seconds for a deployment to make progress before it is considered to be failed. The deployment controller will continue to process failed deployments and a condition with a ProgressDeadlineExceeded reason will be surfaced in the deployment status. Note that progress will not be estimated during the time a deployment is paused. Defaults to 600s.", + "type": "integer", + "format": "int32" }, - "user": { - "description": "User is the UserInfo associated with the provided token.", + "replicas": { + "description": "replicas is the number of desired pods. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.", + "type": "integer", + "format": "int32" + }, + "revisionHistoryLimit": { + "description": "revisionHistoryLimit is the number of old ReplicaSets to retain to allow rollback. This is a pointer to distinguish between explicit zero and not specified. Defaults to 2.", + "type": "integer", + "format": "int32" + }, + "rollbackTo": { + "description": "DEPRECATED. rollbackTo is the config this deployment is rolling back to. Will be cleared after rollback is done.", + "$ref": "#/definitions/io.k8s.api.apps.v1beta1.RollbackConfig" + }, + "selector": { + "description": "selector is the label selector for pods. Existing ReplicaSets whose pods are selected by this will be the ones affected by this deployment.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "strategy": { + "description": "The deployment strategy to use to replace existing pods with new ones.", "default": {}, - "$ref": "#/definitions/io.k8s.api.authentication.v1.UserInfo" + "$ref": "#/definitions/io.k8s.api.apps.v1beta1.DeploymentStrategy", + "x-kubernetes-patch-strategy": "retainKeys" + }, + "template": { + "description": "Template describes the pods that will be created. The only allowed template.spec.restartPolicy value is \"Always\".", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authentication.k8s.io", - "Version": "v1", - "Kind": "TokenReviewStatus", + "Group": "", + "Version": "v1beta1", + "Kind": "DeploymentSpec", "Scope": "Namespaced" } }, - "io.k8s.api.authentication.v1.UserInfo": { - "description": "UserInfo holds the information about the user needed to implement the user.Info interface.", + "io.k8s.api.apps.v1beta1.DeploymentStatus": { + "description": "DeploymentStatus is the most recently observed status of the Deployment.", "type": "object", "properties": { - "extra": { - "description": "Any additional information provided by the authenticator.", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } + "availableReplicas": { + "description": "Total number of available pods (ready for at least minReadySeconds) targeted by this deployment.", + "type": "integer", + "format": "int32" }, - "groups": { - "description": "The names of groups this user is a part of.", + "collisionCount": { + "description": "collisionCount is the count of hash collisions for the Deployment. The Deployment controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ReplicaSet.", + "type": "integer", + "format": "int32" + }, + "conditions": { + "description": "Conditions represent the latest available observations of a deployment's current state.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.k8s.api.apps.v1beta1.DeploymentCondition" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" }, - "uid": { - "description": "A unique value that identifies this user across time. If this user is deleted and another user by the same name is added, they will have different UIDs.", - "type": "string" + "observedGeneration": { + "description": "observedGeneration is the generation observed by the deployment controller.", + "type": "integer", + "format": "int64" }, - "username": { - "description": "The name that uniquely identifies this user among all active users.", - "type": "string" + "readyReplicas": { + "description": "readyReplicas is the number of pods targeted by this Deployment controller with a Ready Condition.", + "type": "integer", + "format": "int32" + }, + "replicas": { + "description": "replicas is the total number of non-terminated pods targeted by this deployment (their labels match the selector).", + "type": "integer", + "format": "int32" + }, + "unavailableReplicas": { + "description": "unavailableReplicas is the total number of unavailable pods targeted by this deployment. This is the total number of pods that are still required for the deployment to have 100% available capacity. They may either be pods that are running but not yet available or pods that still have not been created.", + "type": "integer", + "format": "int32" + }, + "updatedReplicas": { + "description": "updatedReplicas is the total number of non-terminated pods targeted by this deployment that have the desired template spec.", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authentication.k8s.io", - "Version": "v1", - "Kind": "UserInfo", + "Group": "", + "Version": "v1beta1", + "Kind": "DeploymentStatus", "Scope": "Namespaced" } }, - "io.k8s.api.authentication.v1alpha1.SelfSubjectReview": { - "description": "SelfSubjectReview contains the user information that the kube-apiserver has about the user making this request. When using impersonation, users will receive the user info of the user being impersonated. If impersonation or request header authentication is used, any extra keys will have their case ignored and returned as lowercase.", + "io.k8s.api.apps.v1beta1.DeploymentStrategy": { + "description": "DeploymentStrategy describes how to replace existing pods with new ones.", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "rollingUpdate": { + "description": "Rolling update config params. Present only if DeploymentStrategyType = RollingUpdate.", + "$ref": "#/definitions/io.k8s.api.apps.v1beta1.RollingUpdateDeployment" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": { + "description": "Type of deployment. Can be \"Recreate\" or \"RollingUpdate\". Default is RollingUpdate.", "type": "string" - }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "status": { - "description": "Status is filled in by the server with the user attributes.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.authentication.v1alpha1.SelfSubjectReviewStatus" } }, "x-fabric8-info": { - "Type": "object", - "Group": "authentication.k8s.io", - "Version": "v1alpha1", - "Kind": "SelfSubjectReview", - "Scope": "Clustered" + "Type": "nested", + "Group": "", + "Version": "v1beta1", + "Kind": "DeploymentStrategy", + "Scope": "Namespaced" } }, - "io.k8s.api.authentication.v1alpha1.SelfSubjectReviewStatus": { - "description": "SelfSubjectReviewStatus is filled by the kube-apiserver and sent back to a user.", + "io.k8s.api.apps.v1beta1.RollbackConfig": { + "description": "DEPRECATED.", "type": "object", "properties": { - "userInfo": { - "description": "User attributes of the user making this request.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.authentication.v1.UserInfo" + "revision": { + "description": "The revision to rollback to. If set to 0, rollback to the last revision.", + "type": "integer", + "format": "int64" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authentication.k8s.io", - "Version": "v1alpha1", - "Kind": "SelfSubjectReviewStatus", + "Group": "", + "Version": "v1beta1", + "Kind": "RollbackConfig", "Scope": "Namespaced" } }, - "io.k8s.api.authentication.v1beta1.SelfSubjectReview": { - "description": "SelfSubjectReview contains the user information that the kube-apiserver has about the user making this request. When using impersonation, users will receive the user info of the user being impersonated. If impersonation or request header authentication is used, any extra keys will have their case ignored and returned as lowercase.", + "io.k8s.api.apps.v1beta1.RollingUpdateDeployment": { + "description": "Spec to control the desired behavior of rolling update.", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "maxSurge": { + "description": "The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up. Defaults to 25%. Example: when this is set to 30%, the new ReplicaSet can be scaled up immediately when the rolling update starts, such that the total number of old and new pods do not exceed 130% of desired pods. Once old pods have been killed, new ReplicaSet can be scaled up further, ensuring that total number of pods running at any time during the update is at most 130% of desired pods.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" }, - "status": { - "description": "Status is filled in by the server with the user attributes.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.authentication.v1beta1.SelfSubjectReviewStatus" + "maxUnavailable": { + "description": "The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. This can not be 0 if MaxSurge is 0. Defaults to 25%. Example: when this is set to 30%, the old ReplicaSet can be scaled down to 70% of desired pods immediately when the rolling update starts. Once new pods are ready, old ReplicaSet can be scaled down further, followed by scaling up the new ReplicaSet, ensuring that the total number of pods available at all times during the update is at least 70% of desired pods.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" } }, "x-fabric8-info": { - "Type": "object", - "Group": "authentication.k8s.io", + "Type": "nested", + "Group": "", "Version": "v1beta1", - "Kind": "SelfSubjectReview", - "Scope": "Clustered" + "Kind": "RollingUpdateDeployment", + "Scope": "Namespaced" } }, - "io.k8s.api.authentication.v1beta1.SelfSubjectReviewStatus": { - "description": "SelfSubjectReviewStatus is filled by the kube-apiserver and sent back to a user.", + "io.k8s.api.apps.v1beta1.RollingUpdateStatefulSetStrategy": { + "description": "RollingUpdateStatefulSetStrategy is used to communicate parameter for RollingUpdateStatefulSetStrategyType.", "type": "object", "properties": { - "userInfo": { - "description": "User attributes of the user making this request.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.authentication.v1.UserInfo" + "maxUnavailable": { + "description": "maxUnavailable is the maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding up. This can not be 0. Defaults to 1. This field is alpha-level and is only honored by servers that enable the MaxUnavailableStatefulSet feature. The field applies to all pods in the range 0 to Replicas-1. That means if there is any unavailable pod in the range 0 to Replicas-1, it will be counted towards MaxUnavailable.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + }, + "partition": { + "description": "Partition indicates the ordinal at which the StatefulSet should be partitioned for updates. During a rolling update, all pods from ordinal Replicas-1 to Partition are updated. All pods from ordinal Partition-1 to 0 remain untouched. This is helpful in being able to do a canary based deployment. The default value is 0.", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authentication.k8s.io", + "Group": "", "Version": "v1beta1", - "Kind": "SelfSubjectReviewStatus", + "Kind": "RollingUpdateStatefulSetStrategy", "Scope": "Namespaced" } }, - "io.k8s.api.authentication.v1beta1.TokenReview": { - "description": "TokenReview attempts to authenticate a token to a known user. Note: TokenReview requests may be cached by the webhook token authenticator plugin in the kube-apiserver.", + "io.k8s.api.apps.v1beta1.Scale": { + "description": "Scale represents a scaling request for a resource.", "type": "object", - "required": [ - "spec" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -22506,500 +21900,477 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "Spec holds information about the request being evaluated", + "description": "spec defines the behavior of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.", "default": {}, - "$ref": "#/definitions/io.k8s.api.authentication.v1beta1.TokenReviewSpec" + "$ref": "#/definitions/io.k8s.api.apps.v1beta1.ScaleSpec" }, "status": { - "description": "Status is filled in by the server and indicates whether the token can be authenticated.", + "description": "status defines current status of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. Read-only.", "default": {}, - "$ref": "#/definitions/io.k8s.api.authentication.v1beta1.TokenReviewStatus" + "$ref": "#/definitions/io.k8s.api.apps.v1beta1.ScaleStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "authentication.k8s.io", + "Group": "", "Version": "v1beta1", - "Kind": "TokenReview", - "Scope": "Clustered" + "Kind": "Scale", + "Scope": "Namespaced" } }, - "io.k8s.api.authentication.v1beta1.TokenReviewSpec": { - "description": "TokenReviewSpec is a description of the token authentication request.", + "io.k8s.api.apps.v1beta1.ScaleSpec": { + "description": "ScaleSpec describes the attributes of a scale subresource", "type": "object", "properties": { - "audiences": { - "description": "Audiences is a list of the identifiers that the resource server presented with the token identifies as. Audience-aware token authenticators will verify that the token was intended for at least one of the audiences in this list. If no audiences are provided, the audience will default to the audience of the Kubernetes apiserver.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "token": { - "description": "Token is the opaque bearer token.", - "type": "string" + "replicas": { + "description": "replicas is the number of observed instances of the scaled object.", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authentication.k8s.io", + "Group": "", "Version": "v1beta1", - "Kind": "TokenReviewSpec", + "Kind": "ScaleSpec", "Scope": "Namespaced" } }, - "io.k8s.api.authentication.v1beta1.TokenReviewStatus": { - "description": "TokenReviewStatus is the result of the token authentication request.", + "io.k8s.api.apps.v1beta1.ScaleStatus": { + "description": "ScaleStatus represents the current status of a scale subresource.", "type": "object", + "required": [ + "replicas" + ], "properties": { - "audiences": { - "description": "Audiences are audience identifiers chosen by the authenticator that are compatible with both the TokenReview and token. An identifier is any identifier in the intersection of the TokenReviewSpec audiences and the token's audiences. A client of the TokenReview API that sets the spec.audiences field should validate that a compatible audience identifier is returned in the status.audiences field to ensure that the TokenReview server is audience aware. If a TokenReview returns an empty status.audience field where status.authenticated is \"true\", the token is valid against the audience of the Kubernetes API server.", - "type": "array", - "items": { + "replicas": { + "description": "replias is the actual number of observed instances of the scaled object.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "selector": { + "description": "selector is a label query over pods that should match the replicas count. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/", + "type": "object", + "additionalProperties": { "type": "string", "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "authenticated": { - "description": "Authenticated indicates that the token was associated with a known user.", - "type": "boolean" + } }, - "error": { - "description": "Error indicates that the token couldn't be checked", + "targetSelector": { + "description": "targetSelector is the label selector for pods that should match the replicas count. This is a serializated version of both map-based and more expressive set-based selectors. This is done to avoid introspection in the clients. The string will be in the same format as the query-param syntax. If the target type only supports map-based selectors, both this field and map-based selector field are populated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", "type": "string" - }, - "user": { - "description": "User is the UserInfo associated with the provided token.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.authentication.v1beta1.UserInfo" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authentication.k8s.io", + "Group": "", "Version": "v1beta1", - "Kind": "TokenReviewStatus", + "Kind": "ScaleStatus", "Scope": "Namespaced" } }, - "io.k8s.api.authentication.v1beta1.UserInfo": { - "description": "UserInfo holds the information about the user needed to implement the user.Info interface.", + "io.k8s.api.apps.v1beta1.StatefulSet": { + "description": "DEPRECATED - This group version of StatefulSet is deprecated by apps/v1beta2/StatefulSet. See the release notes for more information. StatefulSet represents a set of pods with consistent identities. Identities are defined as:\n - Network: A single stable DNS and hostname.\n - Storage: As many VolumeClaims as requested.\n\nThe StatefulSet guarantees that a given network identity will always map to the same storage identity.", "type": "object", "properties": { - "extra": { - "description": "Any additional information provided by the authenticator.", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, - "groups": { - "description": "The names of groups this user is a part of.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "uid": { - "description": "A unique value that identifies this user across time. If this user is deleted and another user by the same name is added, they will have different UIDs.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "username": { - "description": "The name that uniquely identifies this user among all active users.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + }, + "metadata": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "Spec defines the desired identities of pods in this set.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.apps.v1beta1.StatefulSetSpec" + }, + "status": { + "description": "Status is the current status of Pods in this StatefulSet. This data may be out of date by some window of time.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.apps.v1beta1.StatefulSetStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "authentication.k8s.io", + "Type": "object", + "Group": "", "Version": "v1beta1", - "Kind": "UserInfo", + "Kind": "StatefulSet", "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1.FieldSelectorAttributes": { - "description": "FieldSelectorAttributes indicates a field limited access. Webhook authors are encouraged to * ensure rawSelector and requirements are not both set * consider the requirements field if set * not try to parse or consider the rawSelector field if set. This is to avoid another CVE-2022-2880 (i.e. getting different systems to agree on how exactly to parse a query is not something we want), see https://www.oxeye.io/resources/golang-parameter-smuggling-attack for more details. For the *SubjectAccessReview endpoints of the kube-apiserver: * If rawSelector is empty and requirements are empty, the request is not limited. * If rawSelector is present and requirements are empty, the rawSelector will be parsed and limited if the parsing succeeds. * If rawSelector is empty and requirements are present, the requirements should be honored * If rawSelector is present and requirements are present, the request is invalid.", + "io.k8s.api.apps.v1beta1.StatefulSetCondition": { + "description": "StatefulSetCondition describes the state of a statefulset at a certain point.", "type": "object", + "required": [ + "type", + "status" + ], "properties": { - "rawSelector": { - "description": "rawSelector is the serialization of a field selector that would be included in a query parameter. Webhook implementations are encouraged to ignore rawSelector. The kube-apiserver's *SubjectAccessReview will parse the rawSelector as long as the requirements are not present.", + "lastTransitionTime": { + "description": "Last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "A human readable message indicating details about the transition.", "type": "string" }, - "requirements": { - "description": "requirements is the parsed interpretation of a field selector. All requirements must be met for a resource instance to match the selector. Webhook implementations should handle requirements, but how to handle them is up to the webhook. Since requirements can only limit the request, it is safe to authorize as unlimited request if the requirements are not understood.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.FieldSelectorRequirement" - }, - "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "authorization.k8s.io", - "Version": "v1", - "Kind": "FieldSelectorAttributes", - "Scope": "Namespaced" - } - }, - "io.k8s.api.authorization.v1.LabelSelectorAttributes": { - "description": "LabelSelectorAttributes indicates a label limited access. Webhook authors are encouraged to * ensure rawSelector and requirements are not both set * consider the requirements field if set * not try to parse or consider the rawSelector field if set. This is to avoid another CVE-2022-2880 (i.e. getting different systems to agree on how exactly to parse a query is not something we want), see https://www.oxeye.io/resources/golang-parameter-smuggling-attack for more details. For the *SubjectAccessReview endpoints of the kube-apiserver: * If rawSelector is empty and requirements are empty, the request is not limited. * If rawSelector is present and requirements are empty, the rawSelector will be parsed and limited if the parsing succeeds. * If rawSelector is empty and requirements are present, the requirements should be honored * If rawSelector is present and requirements are present, the request is invalid.", - "type": "object", - "properties": { - "rawSelector": { - "description": "rawSelector is the serialization of a field selector that would be included in a query parameter. Webhook implementations are encouraged to ignore rawSelector. The kube-apiserver's *SubjectAccessReview will parse the rawSelector as long as the requirements are not present.", + "reason": { + "description": "The reason for the condition's last transition.", "type": "string" }, - "requirements": { - "description": "requirements is the parsed interpretation of a label selector. All requirements must be met for a resource instance to match the selector. Webhook implementations should handle requirements, but how to handle them is up to the webhook. Since requirements can only limit the request, it is safe to authorize as unlimited request if the requirements are not understood.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelectorRequirement" - }, - "x-kubernetes-list-type": "atomic" + "status": { + "description": "Status of the condition, one of True, False, Unknown.", + "type": "string", + "default": "" + }, + "type": { + "description": "Type of statefulset condition.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authorization.k8s.io", - "Version": "v1", - "Kind": "LabelSelectorAttributes", + "Group": "", + "Version": "v1beta1", + "Kind": "StatefulSetCondition", "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1.LocalSubjectAccessReview": { - "description": "LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.", + "io.k8s.api.apps.v1beta1.StatefulSetList": { + "description": "StatefulSetList is a collection of StatefulSets.", "type": "object", "required": [ - "spec" + "items" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "items": { + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.apps.v1beta1.StatefulSet" + } + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewSpec" - }, - "status": { - "description": "Status is filled in by the server and indicates whether the request is allowed or not", "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewStatus" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "object", - "Group": "authorization.k8s.io", - "Version": "v1", - "Kind": "LocalSubjectAccessReview", + "Type": "list", + "Group": "", + "Version": "v1beta1", + "Kind": "StatefulSetList", "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1.NonResourceAttributes": { - "description": "NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface", + "io.k8s.api.apps.v1beta1.StatefulSetOrdinals": { + "description": "StatefulSetOrdinals describes the policy used for replica ordinal assignment in this StatefulSet.", "type": "object", "properties": { - "path": { - "description": "Path is the URL path of the request", - "type": "string" - }, - "verb": { - "description": "Verb is the standard HTTP verb", - "type": "string" + "start": { + "description": "start is the number representing the first replica's index. It may be used to number replicas from an alternate index (eg: 1-indexed) over the default 0-indexed names, or to orchestrate progressive movement of replicas from one StatefulSet to another. If set, replica indices will be in the range:\n [.spec.ordinals.start, .spec.ordinals.start + .spec.replicas).\nIf unset, defaults to 0. Replica indices will be in the range:\n [0, .spec.replicas).", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "authorization.k8s.io", - "Version": "v1", - "Kind": "NonResourceAttributes", + "Group": "", + "Version": "v1beta1", + "Kind": "StatefulSetOrdinals", "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1.NonResourceRule": { - "description": "NonResourceRule holds information that describes a rule for the non-resource", + "io.k8s.api.apps.v1beta1.StatefulSetPersistentVolumeClaimRetentionPolicy": { + "description": "StatefulSetPersistentVolumeClaimRetentionPolicy describes the policy used for PVCs created from the StatefulSet VolumeClaimTemplates.", "type": "object", - "required": [ - "verbs" - ], "properties": { - "nonResourceURLs": { - "description": "NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path. \"*\" means all.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "whenDeleted": { + "description": "whenDeleted specifies what happens to PVCs created from StatefulSet VolumeClaimTemplates when the StatefulSet is deleted. The default policy of `Retain` causes PVCs to not be affected by StatefulSet deletion. The `Delete` policy causes those PVCs to be deleted.", + "type": "string" }, - "verbs": { - "description": "Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options. \"*\" means all.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "whenScaled": { + "description": "whenScaled specifies what happens to PVCs created from StatefulSet VolumeClaimTemplates when the StatefulSet is scaled down. The default policy of `Retain` causes PVCs to not be affected by a scaledown. The `Delete` policy causes the associated PVCs for any excess pods above the replica count to be deleted.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authorization.k8s.io", - "Version": "v1", - "Kind": "NonResourceRule", + "Group": "", + "Version": "v1beta1", + "Kind": "StatefulSetPersistentVolumeClaimRetentionPolicy", "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1.ResourceAttributes": { - "description": "ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface", + "io.k8s.api.apps.v1beta1.StatefulSetSpec": { + "description": "A StatefulSetSpec is the specification of a StatefulSet.", "type": "object", + "required": [ + "template", + "serviceName" + ], "properties": { - "fieldSelector": { - "description": "fieldSelector describes the limitation on access based on field. It can only limit access, not broaden it.\n\nThis field is alpha-level. To use this field, you must enable the `AuthorizeWithSelectors` feature gate (disabled by default).", - "$ref": "#/definitions/io.k8s.api.authorization.v1.FieldSelectorAttributes" - }, - "group": { - "description": "Group is the API Group of the Resource. \"*\" means all.", - "type": "string" + "minReadySeconds": { + "description": "minReadySeconds is the minimum number of seconds for which a newly created pod should be ready without any of its container crashing for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", + "type": "integer", + "format": "int32" }, - "labelSelector": { - "description": "labelSelector describes the limitation on access based on labels. It can only limit access, not broaden it.\n\nThis field is alpha-level. To use this field, you must enable the `AuthorizeWithSelectors` feature gate (disabled by default).", - "$ref": "#/definitions/io.k8s.api.authorization.v1.LabelSelectorAttributes" + "ordinals": { + "description": "ordinals controls the numbering of replica indices in a StatefulSet. The default ordinals behavior assigns a \"0\" index to the first replica and increments the index by one for each additional replica requested.", + "$ref": "#/definitions/io.k8s.api.apps.v1beta1.StatefulSetOrdinals" }, - "name": { - "description": "Name is the name of the resource being requested for a \"get\" or deleted for a \"delete\". \"\" (empty) means all.", - "type": "string" + "persistentVolumeClaimRetentionPolicy": { + "description": "PersistentVolumeClaimRetentionPolicy describes the policy used for PVCs created from the StatefulSet VolumeClaimTemplates. This requires the StatefulSetAutoDeletePVC feature gate to be enabled, which is alpha.", + "$ref": "#/definitions/io.k8s.api.apps.v1beta1.StatefulSetPersistentVolumeClaimRetentionPolicy" }, - "namespace": { - "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces \"\" (empty) is defaulted for LocalSubjectAccessReviews \"\" (empty) is empty for cluster-scoped resources \"\" (empty) means \"all\" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview", + "podManagementPolicy": { + "description": "podManagementPolicy controls how pods are created during initial scale up, when replacing pods on nodes, or when scaling down. The default policy is `OrderedReady`, where pods are created in increasing order (pod-0, then pod-1, etc) and the controller will wait until each pod is ready before continuing. When scaling down, the pods are removed in the opposite order. The alternative policy is `Parallel` which will create pods in parallel to match the desired scale without waiting, and on scale down will delete all pods at once.", "type": "string" }, - "resource": { - "description": "Resource is one of the existing resource types. \"*\" means all.", - "type": "string" + "replicas": { + "description": "replicas is the desired number of replicas of the given Template. These are replicas in the sense that they are instantiations of the same Template, but individual replicas also have a consistent identity. If unspecified, defaults to 1.", + "type": "integer", + "format": "int32" }, - "subresource": { - "description": "Subresource is one of the existing resource types. \"\" means none.", - "type": "string" + "revisionHistoryLimit": { + "description": "revisionHistoryLimit is the maximum number of revisions that will be maintained in the StatefulSet's revision history. The revision history consists of all revisions not represented by a currently applied StatefulSetSpec version. The default value is 10.", + "type": "integer", + "format": "int32" }, - "verb": { - "description": "Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. \"*\" means all.", - "type": "string" + "selector": { + "description": "selector is a label query over pods that should match the replica count. If empty, defaulted to labels on the pod template. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" }, - "version": { - "description": "Version is the API Version of the Resource. \"*\" means all.", - "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "authorization.k8s.io", - "Version": "v1", - "Kind": "ResourceAttributes", - "Scope": "Namespaced" - } - }, - "io.k8s.api.authorization.v1.ResourceRule": { - "description": "ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.", - "type": "object", - "required": [ - "verbs" - ], - "properties": { - "apiGroups": { - "description": "APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. \"*\" means all.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "serviceName": { + "description": "serviceName is the name of the service that governs this StatefulSet. This service must exist before the StatefulSet, and is responsible for the network identity of the set. Pods get DNS/hostnames that follow the pattern: pod-specific-string.serviceName.default.svc.cluster.local where \"pod-specific-string\" is managed by the StatefulSet controller.", + "type": "string", + "default": "" }, - "resourceNames": { - "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed. \"*\" means all.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "template": { + "description": "template is the object that describes the pod that will be created if insufficient replicas are detected. Each pod stamped out by the StatefulSet will fulfill this Template, but have a unique identity from the rest of the StatefulSet. Each pod will be named with the format \u003cstatefulsetname\u003e-\u003cpodindex\u003e. For example, a pod in a StatefulSet named \"web\" with index number \"3\" would be named \"web-3\".", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" }, - "resources": { - "description": "Resources is a list of resources this rule applies to. \"*\" means all in the specified apiGroups.\n \"*/foo\" represents the subresource 'foo' for all resources in the specified apiGroups.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "updateStrategy": { + "description": "updateStrategy indicates the StatefulSetUpdateStrategy that will be employed to update Pods in the StatefulSet when a revision is made to Template.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.apps.v1beta1.StatefulSetUpdateStrategy" }, - "verbs": { - "description": "Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy. \"*\" means all.", + "volumeClaimTemplates": { + "description": "volumeClaimTemplates is a list of claims that pods are allowed to reference. The StatefulSet controller is responsible for mapping network identities to claims in a way that maintains the identity of a pod. Every claim in this list must have at least one matching (by name) volumeMount in one container in the template. A claim in this list takes precedence over any volumes in the template, with the same name.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" }, "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authorization.k8s.io", - "Version": "v1", - "Kind": "ResourceRule", + "Group": "", + "Version": "v1beta1", + "Kind": "StatefulSetSpec", "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1.SelfSubjectAccessReview": { - "description": "SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means \"in all namespaces\". Self is a special case, because users should always be able to check whether they can perform an action", + "io.k8s.api.apps.v1beta1.StatefulSetStatus": { + "description": "StatefulSetStatus represents the current state of a StatefulSet.", "type": "object", "required": [ - "spec" + "replicas" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "availableReplicas": { + "description": "availableReplicas is the total number of available pods (ready for at least minReadySeconds) targeted by this StatefulSet.", + "type": "integer", + "format": "int32", + "default": 0 }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "collisionCount": { + "description": "collisionCount is the count of hash collisions for the StatefulSet. The StatefulSet controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ControllerRevision.", + "type": "integer", + "format": "int32" + }, + "conditions": { + "description": "conditions represent the latest available observations of a statefulset's current state.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.apps.v1beta1.StatefulSetCondition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "currentReplicas": { + "description": "currentReplicas is the number of Pods created by the StatefulSet controller from the StatefulSet version indicated by currentRevision.", + "type": "integer", + "format": "int32" + }, + "currentRevision": { + "description": "currentRevision, if not empty, indicates the version of the StatefulSet used to generate Pods in the sequence [0,currentReplicas).", "type": "string" }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "observedGeneration": { + "description": "observedGeneration is the most recent generation observed for this StatefulSet. It corresponds to the StatefulSet's generation, which is updated on mutation by the API Server.", + "type": "integer", + "format": "int64" }, - "spec": { - "description": "Spec holds information about the request being evaluated. user and groups must be empty", - "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1.SelfSubjectAccessReviewSpec" + "readyReplicas": { + "description": "readyReplicas is the number of pods created by this StatefulSet controller with a Ready Condition.", + "type": "integer", + "format": "int32" }, - "status": { - "description": "Status is filled in by the server and indicates whether the request is allowed or not", - "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewStatus" + "replicas": { + "description": "replicas is the number of Pods created by the StatefulSet controller.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "updateRevision": { + "description": "updateRevision, if not empty, indicates the version of the StatefulSet used to generate Pods in the sequence [replicas-updatedReplicas,replicas)", + "type": "string" + }, + "updatedReplicas": { + "description": "updatedReplicas is the number of Pods created by the StatefulSet controller from the StatefulSet version indicated by updateRevision.", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { - "Type": "object", - "Group": "authorization.k8s.io", - "Version": "v1", - "Kind": "SelfSubjectAccessReview", - "Scope": "Clustered" + "Type": "nested", + "Group": "", + "Version": "v1beta1", + "Kind": "StatefulSetStatus", + "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1.SelfSubjectAccessReviewSpec": { - "description": "SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set", + "io.k8s.api.apps.v1beta1.StatefulSetUpdateStrategy": { + "description": "StatefulSetUpdateStrategy indicates the strategy that the StatefulSet controller will use to perform updates. It includes any additional parameters necessary to perform the update for the indicated strategy.", "type": "object", "properties": { - "nonResourceAttributes": { - "description": "NonResourceAttributes describes information for a non-resource access request", - "$ref": "#/definitions/io.k8s.api.authorization.v1.NonResourceAttributes" + "rollingUpdate": { + "description": "RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType.", + "$ref": "#/definitions/io.k8s.api.apps.v1beta1.RollingUpdateStatefulSetStrategy" }, - "resourceAttributes": { - "description": "ResourceAuthorizationAttributes describes information for a resource access request", - "$ref": "#/definitions/io.k8s.api.authorization.v1.ResourceAttributes" + "type": { + "description": "Type indicates the type of the StatefulSetUpdateStrategy.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authorization.k8s.io", - "Version": "v1", - "Kind": "SelfSubjectAccessReviewSpec", + "Group": "", + "Version": "v1beta1", + "Kind": "StatefulSetUpdateStrategy", "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1.SelfSubjectRulesReview": { - "description": "SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.", + "io.k8s.api.apps.v1beta2.ControllerRevision": { + "description": "DEPRECATED - This group version of ControllerRevision is deprecated by apps/v1/ControllerRevision. See the release notes for more information. ControllerRevision implements an immutable snapshot of state data. Clients are responsible for serializing and deserializing the objects that contain their internal state. Once a ControllerRevision has been successfully created, it can not be updated. The API Server will fail validation of all requests that attempt to mutate the Data field. ControllerRevisions may, however, be deleted. Note that, due to its use by both the DaemonSet and StatefulSet controllers for update and rollback, this object is beta. However, it may be subject to name and representation changes in future releases, and clients should not depend on its stability. It is primarily for internal use by controllers.", "type": "object", "required": [ - "spec" + "revision" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "data": { + "description": "Data is the serialized representation of the state.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "spec": { - "description": "Spec holds information about the request being evaluated.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1.SelfSubjectRulesReviewSpec" - }, - "status": { - "description": "Status is filled in by the server and indicates the set of actions a user can perform.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectRulesReviewStatus" + "revision": { + "description": "Revision indicates the revision of the state represented by Data.", + "type": "integer", + "format": "int64", + "default": 0 } }, "x-fabric8-info": { "Type": "object", - "Group": "authorization.k8s.io", - "Version": "v1", - "Kind": "SelfSubjectRulesReview", - "Scope": "Clustered" + "Group": "", + "Version": "v1beta2", + "Kind": "ControllerRevision", + "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1.SelfSubjectRulesReviewSpec": { - "description": "SelfSubjectRulesReviewSpec defines the specification for SelfSubjectRulesReview.", + "io.k8s.api.apps.v1beta2.ControllerRevisionList": { + "description": "ControllerRevisionList is a resource containing a list of ControllerRevision objects.", "type": "object", + "required": [ + "items" + ], "properties": { - "namespace": { - "description": "Namespace to evaluate rules for. Required.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is the list of ControllerRevisions", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.ControllerRevision" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + }, + "metadata": { + "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "authorization.k8s.io", - "Version": "v1", - "Kind": "SelfSubjectRulesReviewSpec", + "Type": "list", + "Group": "", + "Version": "v1beta2", + "Kind": "ControllerRevisionList", "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1.SubjectAccessReview": { - "description": "SubjectAccessReview checks whether or not a user or group can perform an action.", + "io.k8s.api.apps.v1beta2.DaemonSet": { + "description": "DEPRECATED - This group version of DaemonSet is deprecated by apps/v1/DaemonSet. See the release notes for more information. DaemonSet represents the configuration of a daemon set.", "type": "object", - "required": [ - "spec" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -23010,357 +22381,252 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "Spec holds information about the request being evaluated", + "description": "The desired behavior of this daemon set. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewSpec" + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.DaemonSetSpec" }, "status": { - "description": "Status is filled in by the server and indicates whether the request is allowed or not", + "description": "The current status of this daemon set. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewStatus" + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.DaemonSetStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "authorization.k8s.io", - "Version": "v1", - "Kind": "SubjectAccessReview", - "Scope": "Clustered" - } - }, - "io.k8s.api.authorization.v1.SubjectAccessReviewSpec": { - "description": "SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set", - "type": "object", - "properties": { - "extra": { - "description": "Extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here.", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, - "groups": { - "description": "Groups is the groups you're testing for.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "nonResourceAttributes": { - "description": "NonResourceAttributes describes information for a non-resource access request", - "$ref": "#/definitions/io.k8s.api.authorization.v1.NonResourceAttributes" - }, - "resourceAttributes": { - "description": "ResourceAuthorizationAttributes describes information for a resource access request", - "$ref": "#/definitions/io.k8s.api.authorization.v1.ResourceAttributes" - }, - "uid": { - "description": "UID information about the requesting user.", - "type": "string" - }, - "user": { - "description": "User is the user you're testing for. If you specify \"User\" but not \"Groups\", then is it interpreted as \"What if User were not a member of any groups", - "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "authorization.k8s.io", - "Version": "v1", - "Kind": "SubjectAccessReviewSpec", + "Group": "", + "Version": "v1beta2", + "Kind": "DaemonSet", "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1.SubjectAccessReviewStatus": { - "description": "SubjectAccessReviewStatus", + "io.k8s.api.apps.v1beta2.DaemonSetCondition": { + "description": "DaemonSetCondition describes the state of a DaemonSet at a certain point.", "type": "object", "required": [ - "allowed" + "type", + "status" ], "properties": { - "allowed": { - "description": "Allowed is required. True if the action would be allowed, false otherwise.", - "type": "boolean", - "default": false - }, - "denied": { - "description": "Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.", - "type": "boolean" + "lastTransitionTime": { + "description": "Last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "evaluationError": { - "description": "EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.", + "message": { + "description": "A human readable message indicating details about the transition.", "type": "string" }, "reason": { - "description": "Reason is optional. It indicates why a request was allowed or denied.", + "description": "The reason for the condition's last transition.", "type": "string" + }, + "status": { + "description": "Status of the condition, one of True, False, Unknown.", + "type": "string", + "default": "" + }, + "type": { + "description": "Type of DaemonSet condition.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authorization.k8s.io", - "Version": "v1", - "Kind": "SubjectAccessReviewStatus", + "Group": "", + "Version": "v1beta2", + "Kind": "DaemonSetCondition", "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1.SubjectRulesReviewStatus": { - "description": "SubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.", + "io.k8s.api.apps.v1beta2.DaemonSetList": { + "description": "DaemonSetList is a collection of daemon sets.", "type": "object", "required": [ - "resourceRules", - "nonResourceRules", - "incomplete" + "items" ], "properties": { - "evaluationError": { - "description": "EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "incomplete": { - "description": "Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.", - "type": "boolean", - "default": false - }, - "nonResourceRules": { - "description": "NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.", + "items": { + "description": "A list of daemon sets.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1.NonResourceRule" - }, - "x-kubernetes-list-type": "atomic" + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.DaemonSet" + } }, - "resourceRules": { - "description": "ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1.ResourceRule" - }, - "x-kubernetes-list-type": "atomic" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "authorization.k8s.io", - "Version": "v1", - "Kind": "SubjectRulesReviewStatus", + "Type": "list", + "Group": "", + "Version": "v1beta2", + "Kind": "DaemonSetList", "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1beta1.LocalSubjectAccessReview": { - "description": "LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.", + "io.k8s.api.apps.v1beta2.DaemonSetSpec": { + "description": "DaemonSetSpec is the specification of a daemon set.", "type": "object", "required": [ - "spec" + "selector", + "template" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "minReadySeconds": { + "description": "The minimum number of seconds for which a newly created DaemonSet pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready).", + "type": "integer", + "format": "int32" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "revisionHistoryLimit": { + "description": "The number of old history to retain to allow rollback. This is a pointer to distinguish between explicit zero and not specified. Defaults to 10.", + "type": "integer", + "format": "int32" }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "selector": { + "description": "A label query over pods that are managed by the daemon set. Must match in order to be controlled. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" }, - "spec": { - "description": "Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted.", + "template": { + "description": "An object that describes the pod that will be created. The DaemonSet will create exactly one copy of this pod on every node that matches the template's node selector (or on every node if no node selector is specified). The only allowed template.spec.restartPolicy value is \"Always\". More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template", "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReviewSpec" + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" }, - "status": { - "description": "Status is filled in by the server and indicates whether the request is allowed or not", + "updateStrategy": { + "description": "An update strategy to replace existing DaemonSet pods with new pods.", "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReviewStatus" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "authorization.k8s.io", - "Version": "v1beta1", - "Kind": "LocalSubjectAccessReview", - "Scope": "Namespaced" - } - }, - "io.k8s.api.authorization.v1beta1.NonResourceAttributes": { - "description": "NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface", - "type": "object", - "properties": { - "path": { - "description": "Path is the URL path of the request", - "type": "string" - }, - "verb": { - "description": "Verb is the standard HTTP verb", - "type": "string" + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.DaemonSetUpdateStrategy" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authorization.k8s.io", - "Version": "v1beta1", - "Kind": "NonResourceAttributes", + "Group": "", + "Version": "v1beta2", + "Kind": "DaemonSetSpec", "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1beta1.NonResourceRule": { - "description": "NonResourceRule holds information that describes a rule for the non-resource", + "io.k8s.api.apps.v1beta2.DaemonSetStatus": { + "description": "DaemonSetStatus represents the current status of a daemon set.", "type": "object", "required": [ - "verbs" + "currentNumberScheduled", + "numberMisscheduled", + "desiredNumberScheduled", + "numberReady" ], "properties": { - "nonResourceURLs": { - "description": "NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path. \"*\" means all.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "collisionCount": { + "description": "Count of hash collisions for the DaemonSet. The DaemonSet controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ControllerRevision.", + "type": "integer", + "format": "int32" }, - "verbs": { - "description": "Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options. \"*\" means all.", + "conditions": { + "description": "Represents the latest available observations of a DaemonSet's current state.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.DaemonSetCondition" }, - "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "authorization.k8s.io", - "Version": "v1beta1", - "Kind": "NonResourceRule", - "Scope": "Namespaced" - } - }, - "io.k8s.api.authorization.v1beta1.ResourceAttributes": { - "description": "ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface", - "type": "object", - "properties": { - "fieldSelector": { - "description": "fieldSelector describes the limitation on access based on field. It can only limit access, not broaden it.", - "$ref": "#/definitions/io.k8s.api.authorization.v1.FieldSelectorAttributes" + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" }, - "group": { - "description": "Group is the API Group of the Resource. \"*\" means all.", - "type": "string" + "currentNumberScheduled": { + "description": "The number of nodes that are running at least 1 daemon pod and are supposed to run the daemon pod. More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/", + "type": "integer", + "format": "int32", + "default": 0 }, - "labelSelector": { - "description": "labelSelector describes the limitation on access based on labels. It can only limit access, not broaden it.", - "$ref": "#/definitions/io.k8s.api.authorization.v1.LabelSelectorAttributes" + "desiredNumberScheduled": { + "description": "The total number of nodes that should be running the daemon pod (including nodes correctly running the daemon pod). More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/", + "type": "integer", + "format": "int32", + "default": 0 }, - "name": { - "description": "Name is the name of the resource being requested for a \"get\" or deleted for a \"delete\". \"\" (empty) means all.", - "type": "string" + "numberAvailable": { + "description": "The number of nodes that should be running the daemon pod and have one or more of the daemon pod running and available (ready for at least spec.minReadySeconds)", + "type": "integer", + "format": "int32" }, - "namespace": { - "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces \"\" (empty) is defaulted for LocalSubjectAccessReviews \"\" (empty) is empty for cluster-scoped resources \"\" (empty) means \"all\" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview", - "type": "string" + "numberMisscheduled": { + "description": "The number of nodes that are running the daemon pod, but are not supposed to run the daemon pod. More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/", + "type": "integer", + "format": "int32", + "default": 0 }, - "resource": { - "description": "Resource is one of the existing resource types. \"*\" means all.", - "type": "string" + "numberReady": { + "description": "Total number of nodes that should be running the daemon pod and have one or more of the daemon pod running with a Ready Condition by passing the readinessProbe.", + "type": "integer", + "format": "int32", + "default": 0 }, - "subresource": { - "description": "Subresource is one of the existing resource types. \"\" means none.", - "type": "string" + "numberUnavailable": { + "description": "The number of nodes that should be running the daemon pod and have none of the daemon pod running and available (ready for at least spec.minReadySeconds)", + "type": "integer", + "format": "int32" }, - "verb": { - "description": "Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. \"*\" means all.", - "type": "string" + "observedGeneration": { + "description": "The most recent generation observed by the daemon set controller.", + "type": "integer", + "format": "int64" }, - "version": { - "description": "Version is the API Version of the Resource. \"*\" means all.", - "type": "string" + "updatedNumberScheduled": { + "description": "The total number of nodes that are running updated daemon pod", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authorization.k8s.io", - "Version": "v1beta1", - "Kind": "ResourceAttributes", + "Group": "", + "Version": "v1beta2", + "Kind": "DaemonSetStatus", "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1beta1.ResourceRule": { - "description": "ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.", + "io.k8s.api.apps.v1beta2.DaemonSetUpdateStrategy": { + "description": "DaemonSetUpdateStrategy is a struct used to control the update strategy for a DaemonSet.", "type": "object", - "required": [ - "verbs" - ], "properties": { - "apiGroups": { - "description": "APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. \"*\" means all.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "resourceNames": { - "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed. \"*\" means all.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "resources": { - "description": "Resources is a list of resources this rule applies to. \"*\" means all in the specified apiGroups.\n \"*/foo\" represents the subresource 'foo' for all resources in the specified apiGroups.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "rollingUpdate": { + "description": "Rolling update config params. Present only if type = \"RollingUpdate\".", + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.RollingUpdateDaemonSet" }, - "verbs": { - "description": "Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy. \"*\" means all.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "type": { + "description": "Type of daemon set update. Can be \"RollingUpdate\" or \"OnDelete\". Default is RollingUpdate.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authorization.k8s.io", - "Version": "v1beta1", - "Kind": "ResourceRule", + "Group": "", + "Version": "v1beta2", + "Kind": "DaemonSetUpdateStrategy", "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1beta1.SelfSubjectAccessReview": { - "description": "SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means \"in all namespaces\". Self is a special case, because users should always be able to check whether they can perform an action", + "io.k8s.api.apps.v1beta2.Deployment": { + "description": "DEPRECATED - This group version of Deployment is deprecated by apps/v1/Deployment. See the release notes for more information. Deployment enables declarative updates for Pods and ReplicaSets.", "type": "object", - "required": [ - "spec" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -23371,446 +22637,606 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object metadata.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "Spec holds information about the request being evaluated. user and groups must be empty", + "description": "Specification of the desired behavior of the Deployment.", "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectAccessReviewSpec" + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.DeploymentSpec" }, "status": { - "description": "Status is filled in by the server and indicates whether the request is allowed or not", + "description": "Most recently observed status of the Deployment.", "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReviewStatus" + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.DeploymentStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "authorization.k8s.io", - "Version": "v1beta1", - "Kind": "SelfSubjectAccessReview", - "Scope": "Clustered" + "Group": "", + "Version": "v1beta2", + "Kind": "Deployment", + "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1beta1.SelfSubjectAccessReviewSpec": { - "description": "SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set", + "io.k8s.api.apps.v1beta2.DeploymentCondition": { + "description": "DeploymentCondition describes the state of a deployment at a certain point.", "type": "object", + "required": [ + "type", + "status" + ], "properties": { - "nonResourceAttributes": { - "description": "NonResourceAttributes describes information for a non-resource access request", - "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.NonResourceAttributes" + "lastTransitionTime": { + "description": "Last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "resourceAttributes": { - "description": "ResourceAuthorizationAttributes describes information for a resource access request", - "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.ResourceAttributes" + "lastUpdateTime": { + "description": "The last time this condition was updated.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "A human readable message indicating details about the transition.", + "type": "string" + }, + "reason": { + "description": "The reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status of the condition, one of True, False, Unknown.", + "type": "string", + "default": "" + }, + "type": { + "description": "Type of deployment condition.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authorization.k8s.io", - "Version": "v1beta1", - "Kind": "SelfSubjectAccessReviewSpec", + "Group": "", + "Version": "v1beta2", + "Kind": "DeploymentCondition", "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1beta1.SelfSubjectRulesReview": { - "description": "SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.", + "io.k8s.api.apps.v1beta2.DeploymentList": { + "description": "DeploymentList is a list of Deployments.", "type": "object", "required": [ - "spec" + "items" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "items": { + "description": "Items is the list of Deployments.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.Deployment" + } + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "Spec holds information about the request being evaluated.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectRulesReviewSpec" - }, - "status": { - "description": "Status is filled in by the server and indicates the set of actions a user can perform.", + "description": "Standard list metadata.", "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectRulesReviewStatus" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "authorization.k8s.io", - "Version": "v1beta1", - "Kind": "SelfSubjectRulesReview", - "Scope": "Clustered" - } - }, - "io.k8s.api.authorization.v1beta1.SelfSubjectRulesReviewSpec": { - "description": "SelfSubjectRulesReviewSpec defines the specification for SelfSubjectRulesReview.", - "type": "object", - "properties": { - "namespace": { - "description": "Namespace to evaluate rules for. Required.", - "type": "string" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "authorization.k8s.io", - "Version": "v1beta1", - "Kind": "SelfSubjectRulesReviewSpec", + "Type": "list", + "Group": "", + "Version": "v1beta2", + "Kind": "DeploymentList", "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1beta1.SubjectAccessReview": { - "description": "SubjectAccessReview checks whether or not a user or group can perform an action.", + "io.k8s.api.apps.v1beta2.DeploymentSpec": { + "description": "DeploymentSpec is the specification of the desired behavior of the Deployment.", "type": "object", "required": [ - "spec" + "selector", + "template" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "minReadySeconds": { + "description": "Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", + "type": "integer", + "format": "int32" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "paused": { + "description": "Indicates that the deployment is paused.", + "type": "boolean" }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "progressDeadlineSeconds": { + "description": "The maximum time in seconds for a deployment to make progress before it is considered to be failed. The deployment controller will continue to process failed deployments and a condition with a ProgressDeadlineExceeded reason will be surfaced in the deployment status. Note that progress will not be estimated during the time a deployment is paused. Defaults to 600s.", + "type": "integer", + "format": "int32" }, - "spec": { - "description": "Spec holds information about the request being evaluated", + "replicas": { + "description": "Number of desired pods. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.", + "type": "integer", + "format": "int32" + }, + "revisionHistoryLimit": { + "description": "The number of old ReplicaSets to retain to allow rollback. This is a pointer to distinguish between explicit zero and not specified. Defaults to 10.", + "type": "integer", + "format": "int32" + }, + "selector": { + "description": "Label selector for pods. Existing ReplicaSets whose pods are selected by this will be the ones affected by this deployment. It must match the pod template's labels.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "strategy": { + "description": "The deployment strategy to use to replace existing pods with new ones.", "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReviewSpec" + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.DeploymentStrategy", + "x-kubernetes-patch-strategy": "retainKeys" }, - "status": { - "description": "Status is filled in by the server and indicates whether the request is allowed or not", + "template": { + "description": "Template describes the pods that will be created. The only allowed template.spec.restartPolicy value is \"Always\".", "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReviewStatus" + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" } }, "x-fabric8-info": { - "Type": "object", - "Group": "authorization.k8s.io", - "Version": "v1beta1", - "Kind": "SubjectAccessReview", - "Scope": "Clustered" + "Type": "nested", + "Group": "", + "Version": "v1beta2", + "Kind": "DeploymentSpec", + "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1beta1.SubjectAccessReviewSpec": { - "description": "SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set", + "io.k8s.api.apps.v1beta2.DeploymentStatus": { + "description": "DeploymentStatus is the most recently observed status of the Deployment.", "type": "object", "properties": { - "extra": { - "description": "Extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here.", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } + "availableReplicas": { + "description": "Total number of available pods (ready for at least minReadySeconds) targeted by this deployment.", + "type": "integer", + "format": "int32" }, - "group": { - "description": "Groups is the groups you're testing for.", + "collisionCount": { + "description": "Count of hash collisions for the Deployment. The Deployment controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ReplicaSet.", + "type": "integer", + "format": "int32" + }, + "conditions": { + "description": "Represents the latest available observations of a deployment's current state.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.DeploymentCondition" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" }, - "nonResourceAttributes": { - "description": "NonResourceAttributes describes information for a non-resource access request", - "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.NonResourceAttributes" + "observedGeneration": { + "description": "The generation observed by the deployment controller.", + "type": "integer", + "format": "int64" }, - "resourceAttributes": { - "description": "ResourceAuthorizationAttributes describes information for a resource access request", - "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.ResourceAttributes" + "readyReplicas": { + "description": "readyReplicas is the number of pods targeted by this Deployment controller with a Ready Condition.", + "type": "integer", + "format": "int32" }, - "uid": { - "description": "UID information about the requesting user.", - "type": "string" + "replicas": { + "description": "Total number of non-terminated pods targeted by this deployment (their labels match the selector).", + "type": "integer", + "format": "int32" }, - "user": { - "description": "User is the user you're testing for. If you specify \"User\" but not \"Group\", then is it interpreted as \"What if User were not a member of any groups", - "type": "string" + "unavailableReplicas": { + "description": "Total number of unavailable pods targeted by this deployment. This is the total number of pods that are still required for the deployment to have 100% available capacity. They may either be pods that are running but not yet available or pods that still have not been created.", + "type": "integer", + "format": "int32" + }, + "updatedReplicas": { + "description": "Total number of non-terminated pods targeted by this deployment that have the desired template spec.", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authorization.k8s.io", - "Version": "v1beta1", - "Kind": "SubjectAccessReviewSpec", + "Group": "", + "Version": "v1beta2", + "Kind": "DeploymentStatus", "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1beta1.SubjectAccessReviewStatus": { - "description": "SubjectAccessReviewStatus", + "io.k8s.api.apps.v1beta2.DeploymentStrategy": { + "description": "DeploymentStrategy describes how to replace existing pods with new ones.", "type": "object", - "required": [ - "allowed" - ], "properties": { - "allowed": { - "description": "Allowed is required. True if the action would be allowed, false otherwise.", - "type": "boolean", - "default": false - }, - "denied": { - "description": "Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.", - "type": "boolean" - }, - "evaluationError": { - "description": "EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.", - "type": "string" + "rollingUpdate": { + "description": "Rolling update config params. Present only if DeploymentStrategyType = RollingUpdate.", + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.RollingUpdateDeployment" }, - "reason": { - "description": "Reason is optional. It indicates why a request was allowed or denied.", + "type": { + "description": "Type of deployment. Can be \"Recreate\" or \"RollingUpdate\". Default is RollingUpdate.", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authorization.k8s.io", - "Version": "v1beta1", - "Kind": "SubjectAccessReviewStatus", + "Group": "", + "Version": "v1beta2", + "Kind": "DeploymentStrategy", "Scope": "Namespaced" } }, - "io.k8s.api.authorization.v1beta1.SubjectRulesReviewStatus": { - "description": "SubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.", + "io.k8s.api.apps.v1beta2.ReplicaSet": { + "description": "DEPRECATED - This group version of ReplicaSet is deprecated by apps/v1/ReplicaSet. See the release notes for more information. ReplicaSet ensures that a specified number of pod replicas are running at any given time.", "type": "object", - "required": [ - "resourceRules", - "nonResourceRules", - "incomplete" - ], "properties": { - "evaluationError": { - "description": "EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "incomplete": { - "description": "Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.", - "type": "boolean", - "default": false - }, - "nonResourceRules": { - "description": "NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.NonResourceRule" - }, - "x-kubernetes-list-type": "atomic" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "resourceRules": { - "description": "ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.ResourceRule" - }, - "x-kubernetes-list-type": "atomic" + "metadata": { + "description": "If the Labels of a ReplicaSet are empty, they are defaulted to be the same as the Pod(s) that the ReplicaSet manages. Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "Spec defines the specification of the desired behavior of the ReplicaSet. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.ReplicaSetSpec" + }, + "status": { + "description": "Status is the most recently observed status of the ReplicaSet. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.ReplicaSetStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "authorization.k8s.io", - "Version": "v1beta1", - "Kind": "SubjectRulesReviewStatus", + "Type": "object", + "Group": "", + "Version": "v1beta2", + "Kind": "ReplicaSet", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v1.ContainerResourceMetricSource": { - "description": "ContainerResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in the requests and limits, describing a single container in each of the pods of the current scale target(e.g. CPU or memory). The values will be averaged together before being compared to the target. Such metrics are built into Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. Only one \"target\" type should be set.", + "io.k8s.api.apps.v1beta2.ReplicaSetCondition": { + "description": "ReplicaSetCondition describes the state of a replica set at a certain point.", "type": "object", "required": [ - "name", - "container" + "type", + "status" ], "properties": { - "container": { - "description": "container is the name of the container in the pods of the scaling target.", + "lastTransitionTime": { + "description": "The last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "A human readable message indicating details about the transition.", + "type": "string" + }, + "reason": { + "description": "The reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status of the condition, one of True, False, Unknown.", "type": "string", "default": "" }, - "name": { - "description": "name is the name of the resource in question.", + "type": { + "description": "Type of replica set condition.", "type": "string", "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1beta2", + "Kind": "ReplicaSetCondition", + "Scope": "Namespaced" + } + }, + "io.k8s.api.apps.v1beta2.ReplicaSetList": { + "description": "ReplicaSetList is a collection of ReplicaSets.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "targetAverageUtilization": { - "description": "targetAverageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.", + "items": { + "description": "List of ReplicaSets. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.ReplicaSet" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "", + "Version": "v1beta2", + "Kind": "ReplicaSetList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.apps.v1beta2.ReplicaSetSpec": { + "description": "ReplicaSetSpec is the specification of a ReplicaSet.", + "type": "object", + "required": [ + "selector" + ], + "properties": { + "minReadySeconds": { + "description": "Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", "type": "integer", "format": "int32" }, - "targetAverageValue": { - "description": "targetAverageValue is the target value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the \"pods\" metric source type.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "replicas": { + "description": "Replicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. Defaults to 1. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller/#what-is-a-replicationcontroller", + "type": "integer", + "format": "int32" + }, + "selector": { + "description": "Selector is a label query over pods that should match the replica count. Label keys and values that must match in order to be controlled by this replica set. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "template": { + "description": "Template is the object that describes the pod that will be created if insufficient replicas are detected. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "ContainerResourceMetricSource", + "Version": "v1beta2", + "Kind": "ReplicaSetSpec", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v1.ContainerResourceMetricStatus": { - "description": "ContainerResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "io.k8s.api.apps.v1beta2.ReplicaSetStatus": { + "description": "ReplicaSetStatus represents the current status of a ReplicaSet.", "type": "object", "required": [ - "name", - "currentAverageValue", - "container" + "replicas" ], "properties": { - "container": { - "description": "container is the name of the container in the pods of the scaling taget", - "type": "string", - "default": "" + "availableReplicas": { + "description": "The number of available replicas (ready for at least minReadySeconds) for this replica set.", + "type": "integer", + "format": "int32" }, - "currentAverageUtilization": { - "description": "currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. It will only be present if `targetAverageValue` was set in the corresponding metric specification.", + "conditions": { + "description": "Represents the latest available observations of a replica set's current state.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.ReplicaSetCondition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "fullyLabeledReplicas": { + "description": "The number of pods that have labels matching the labels of the pod template of the replicaset.", "type": "integer", "format": "int32" }, - "currentAverageValue": { - "description": "currentAverageValue is the current value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the \"pods\" metric source type. It will always be set, regardless of the corresponding metric specification.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "observedGeneration": { + "description": "ObservedGeneration reflects the generation of the most recently observed ReplicaSet.", + "type": "integer", + "format": "int64" }, - "name": { - "description": "name is the name of the resource in question.", - "type": "string", - "default": "" + "readyReplicas": { + "description": "readyReplicas is the number of pods targeted by this ReplicaSet controller with a Ready Condition.", + "type": "integer", + "format": "int32" + }, + "replicas": { + "description": "Replicas is the most recently observed number of replicas. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller/#what-is-a-replicationcontroller", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "ContainerResourceMetricStatus", + "Version": "v1beta2", + "Kind": "ReplicaSetStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v1.CrossVersionObjectReference": { - "description": "CrossVersionObjectReference contains enough information to let you identify the referred resource.", + "io.k8s.api.apps.v1beta2.RollingUpdateDaemonSet": { + "description": "Spec to control the desired behavior of daemon set rolling update.", "type": "object", - "required": [ - "kind", - "name" - ], "properties": { - "apiVersion": { - "description": "apiVersion is the API version of the referent", - "type": "string" + "maxSurge": { + "description": "The maximum number of nodes with an existing available DaemonSet pod that can have an updated DaemonSet pod during during an update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up to a minimum of 1. Default value is 0. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their a new pod created before the old pod is marked as deleted. The update starts by launching new pods on 30% of nodes. Once an updated pod is available (Ready for at least minReadySeconds) the old DaemonSet pod on that node is marked deleted. If the old pod becomes unavailable for any reason (Ready transitions to false, is evicted, or is drained) an updated pod is immediatedly created on that node without considering surge limits. Allowing surge implies the possibility that the resources consumed by the daemonset on any given node can double if the readiness check fails, and so resource intensive daemonsets should take into account that they may cause evictions during disruption.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" }, - "kind": { - "description": "kind is the kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string", - "default": "" + "maxUnavailable": { + "description": "The maximum number of DaemonSet pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of total number of DaemonSet pods at the start of the update (ex: 10%). Absolute number is calculated from percentage by rounding up. This cannot be 0 if MaxSurge is 0 Default value is 1. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their pods stopped for an update at any given time. The update starts by stopping at most 30% of those DaemonSet pods and then brings up new DaemonSet pods in their place. Once the new pods are available, it then proceeds onto other DaemonSet pods, thus ensuring that at least 70% of original number of DaemonSet pods are available at all times during the update.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1beta2", + "Kind": "RollingUpdateDaemonSet", + "Scope": "Namespaced" + } + }, + "io.k8s.api.apps.v1beta2.RollingUpdateDeployment": { + "description": "Spec to control the desired behavior of rolling update.", + "type": "object", + "properties": { + "maxSurge": { + "description": "The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up. Defaults to 25%. Example: when this is set to 30%, the new ReplicaSet can be scaled up immediately when the rolling update starts, such that the total number of old and new pods do not exceed 130% of desired pods. Once old pods have been killed, new ReplicaSet can be scaled up further, ensuring that total number of pods running at any time during the update is at most 130% of desired pods.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" }, - "name": { - "description": "name is the name of the referent; More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - "type": "string", - "default": "" + "maxUnavailable": { + "description": "The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. This can not be 0 if MaxSurge is 0. Defaults to 25%. Example: when this is set to 30%, the old ReplicaSet can be scaled down to 70% of desired pods immediately when the rolling update starts. Once new pods are ready, old ReplicaSet can be scaled down further, followed by scaling up the new ReplicaSet, ensuring that the total number of pods available at all times during the update is at least 70% of desired pods.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "CrossVersionObjectReference", + "Version": "v1beta2", + "Kind": "RollingUpdateDeployment", "Scope": "Namespaced" + } + }, + "io.k8s.api.apps.v1beta2.RollingUpdateStatefulSetStrategy": { + "description": "RollingUpdateStatefulSetStrategy is used to communicate parameter for RollingUpdateStatefulSetStrategyType.", + "type": "object", + "properties": { + "maxUnavailable": { + "description": "The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding up. This can not be 0. Defaults to 1. This field is alpha-level and is only honored by servers that enable the MaxUnavailableStatefulSet feature. The field applies to all pods in the range 0 to Replicas-1. That means if there is any unavailable pod in the range 0 to Replicas-1, it will be counted towards MaxUnavailable.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + }, + "partition": { + "description": "Partition indicates the ordinal at which the StatefulSet should be partitioned for updates. During a rolling update, all pods from ordinal Replicas-1 to Partition are updated. All pods from ordinal Partition-1 to 0 remain untouched. This is helpful in being able to do a canary based deployment. The default value is 0.", + "type": "integer", + "format": "int32" + } }, - "x-kubernetes-map-type": "atomic" + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1beta2", + "Kind": "RollingUpdateStatefulSetStrategy", + "Scope": "Namespaced" + } }, - "io.k8s.api.autoscaling.v1.ExternalMetricSource": { - "description": "ExternalMetricSource indicates how to scale on a metric not associated with any Kubernetes object (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).", + "io.k8s.api.apps.v1beta2.Scale": { + "description": "Scale represents a scaling request for a resource.", "type": "object", - "required": [ - "metricName" - ], "properties": { - "metricName": { - "description": "metricName is the name of the metric in question.", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "metricSelector": { - "description": "metricSelector is used to identify a specific time series within a given metric.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "targetAverageValue": { - "description": "targetAverageValue is the target per-pod value of global metric (as a quantity). Mutually exclusive with TargetValue.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "metadata": { + "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "targetValue": { - "description": "targetValue is the target value of the metric (as a quantity). Mutually exclusive with TargetAverageValue.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "spec": { + "description": "defines the behavior of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.ScaleSpec" + }, + "status": { + "description": "current status of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. Read-only.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.ScaleStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1beta2", + "Kind": "Scale", + "Scope": "Namespaced" + } + }, + "io.k8s.api.apps.v1beta2.ScaleSpec": { + "description": "ScaleSpec describes the attributes of a scale subresource", + "type": "object", + "properties": { + "replicas": { + "description": "desired number of instances for the scaled object.", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "ExternalMetricSource", + "Version": "v1beta2", + "Kind": "ScaleSpec", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v1.ExternalMetricStatus": { - "description": "ExternalMetricStatus indicates the current value of a global metric not associated with any Kubernetes object.", + "io.k8s.api.apps.v1beta2.ScaleStatus": { + "description": "ScaleStatus represents the current status of a scale subresource.", "type": "object", "required": [ - "metricName", - "currentValue" + "replicas" ], "properties": { - "currentAverageValue": { - "description": "currentAverageValue is the current value of metric averaged over autoscaled pods.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - }, - "currentValue": { - "description": "currentValue is the current value of the metric (as a quantity)", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "replicas": { + "description": "actual number of observed instances of the scaled object.", + "type": "integer", + "format": "int32", + "default": 0 }, - "metricName": { - "description": "metricName is the name of a metric used for autoscaling in metric system.", - "type": "string", - "default": "" + "selector": { + "description": "selector is a label query over pods that should match the replicas count. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + }, + "x-kubernetes-map-type": "atomic" }, - "metricSelector": { - "description": "metricSelector is used to identify a specific time series within a given metric.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "targetSelector": { + "description": "label selector for pods that should match the replicas count. This is a serializated version of both map-based and more expressive set-based selectors. This is done to avoid introspection in the clients. The string will be in the same format as the query-param syntax. If the target type only supports map-based selectors, both this field and map-based selector field are populated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "ExternalMetricStatus", + "Version": "v1beta2", + "Kind": "ScaleStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler": { - "description": "configuration of a horizontal pod autoscaler.", + "io.k8s.api.apps.v1beta2.StatefulSet": { + "description": "DEPRECATED - This group version of StatefulSet is deprecated by apps/v1/StatefulSet. See the release notes for more information. StatefulSet represents a set of pods with consistent identities. Identities are defined as:\n - Network: A single stable DNS and hostname.\n - Storage: As many VolumeClaims as requested.\n\nThe StatefulSet guarantees that a given network identity will always map to the same storage identity.", "type": "object", "properties": { "apiVersion": { @@ -23822,31 +23248,30 @@ "type": "string" }, "metadata": { - "description": "Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec defines the behaviour of autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.", + "description": "Spec defines the desired identities of pods in this set.", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerSpec" + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.StatefulSetSpec" }, "status": { - "description": "status is the current information about the autoscaler.", + "description": "Status is the current status of Pods in this StatefulSet. This data may be out of date by some window of time.", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerStatus" + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.StatefulSetStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "", - "Version": "v1", - "Kind": "HorizontalPodAutoscaler", + "Version": "v1beta2", + "Kind": "StatefulSet", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerCondition": { - "description": "HorizontalPodAutoscalerCondition describes the state of a HorizontalPodAutoscaler at a certain point.", + "io.k8s.api.apps.v1beta2.StatefulSetCondition": { + "description": "StatefulSetCondition describes the state of a statefulset at a certain point.", "type": "object", "required": [ "type", @@ -23854,24 +23279,24 @@ ], "properties": { "lastTransitionTime": { - "description": "lastTransitionTime is the last time the condition transitioned from one status to another", + "description": "Last time the condition transitioned from one status to another.", "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, "message": { - "description": "message is a human-readable explanation containing details about the transition", + "description": "A human readable message indicating details about the transition.", "type": "string" }, "reason": { - "description": "reason is the reason for the condition's last transition.", + "description": "The reason for the condition's last transition.", "type": "string" }, "status": { - "description": "status is the status of the condition (True, False, Unknown)", + "description": "Status of the condition, one of True, False, Unknown.", "type": "string", "default": "" }, "type": { - "description": "type describes the current condition", + "description": "Type of statefulset condition.", "type": "string", "default": "" } @@ -23879,13 +23304,13 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "HorizontalPodAutoscalerCondition", + "Version": "v1beta2", + "Kind": "StatefulSetCondition", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerList": { - "description": "list of horizontal pod autoscaler objects.", + "io.k8s.api.apps.v1beta2.StatefulSetList": { + "description": "StatefulSetList is a collection of StatefulSets.", "type": "object", "required": [ "items" @@ -23896,11 +23321,10 @@ "type": "string" }, "items": { - "description": "items is the list of horizontal pod autoscaler objects.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler" + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.StatefulSet" } }, "kind": { @@ -23908,7 +23332,6 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } @@ -23916,392 +23339,403 @@ "x-fabric8-info": { "Type": "list", "Group": "", - "Version": "v1", - "Kind": "HorizontalPodAutoscalerList", + "Version": "v1beta2", + "Kind": "StatefulSetList", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerSpec": { - "description": "specification of a horizontal pod autoscaler.", + "io.k8s.api.apps.v1beta2.StatefulSetOrdinals": { + "description": "StatefulSetOrdinals describes the policy used for replica ordinal assignment in this StatefulSet.", "type": "object", - "required": [ - "scaleTargetRef", - "maxReplicas" - ], "properties": { - "maxReplicas": { - "description": "maxReplicas is the upper limit for the number of pods that can be set by the autoscaler; cannot be smaller than MinReplicas.", + "start": { + "description": "start is the number representing the first replica's index. It may be used to number replicas from an alternate index (eg: 1-indexed) over the default 0-indexed names, or to orchestrate progressive movement of replicas from one StatefulSet to another. If set, replica indices will be in the range:\n [.spec.ordinals.start, .spec.ordinals.start + .spec.replicas).\nIf unset, defaults to 0. Replica indices will be in the range:\n [0, .spec.replicas).", "type": "integer", "format": "int32", "default": 0 - }, - "minReplicas": { - "description": "minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down. It defaults to 1 pod. minReplicas is allowed to be 0 if the alpha feature gate HPAScaleToZero is enabled and at least one Object or External metric is configured. Scaling is active as long as at least one metric value is available.", - "type": "integer", - "format": "int32" - }, - "scaleTargetRef": { - "description": "reference to scaled resource; horizontal pod autoscaler will learn the current resource consumption and will set the desired number of pods by using its Scale subresource.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v1.CrossVersionObjectReference" - }, - "targetCPUUtilizationPercentage": { - "description": "targetCPUUtilizationPercentage is the target average CPU utilization (represented as a percentage of requested CPU) over all the pods; if not specified the default autoscaling policy will be used.", - "type": "integer", - "format": "int32" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "HorizontalPodAutoscalerSpec", + "Version": "v1beta2", + "Kind": "StatefulSetOrdinals", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerStatus": { - "description": "current status of a horizontal pod autoscaler", + "io.k8s.api.apps.v1beta2.StatefulSetPersistentVolumeClaimRetentionPolicy": { + "description": "StatefulSetPersistentVolumeClaimRetentionPolicy describes the policy used for PVCs created from the StatefulSet VolumeClaimTemplates.", "type": "object", - "required": [ - "currentReplicas", - "desiredReplicas" - ], "properties": { - "currentCPUUtilizationPercentage": { - "description": "currentCPUUtilizationPercentage is the current average CPU utilization over all pods, represented as a percentage of requested CPU, e.g. 70 means that an average pod is using now 70% of its requested CPU.", - "type": "integer", - "format": "int32" - }, - "currentReplicas": { - "description": "currentReplicas is the current number of replicas of pods managed by this autoscaler.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "desiredReplicas": { - "description": "desiredReplicas is the desired number of replicas of pods managed by this autoscaler.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "lastScaleTime": { - "description": "lastScaleTime is the last time the HorizontalPodAutoscaler scaled the number of pods; used by the autoscaler to control how often the number of pods is changed.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "whenDeleted": { + "description": "WhenDeleted specifies what happens to PVCs created from StatefulSet VolumeClaimTemplates when the StatefulSet is deleted. The default policy of `Retain` causes PVCs to not be affected by StatefulSet deletion. The `Delete` policy causes those PVCs to be deleted.", + "type": "string" }, - "observedGeneration": { - "description": "observedGeneration is the most recent generation observed by this autoscaler.", - "type": "integer", - "format": "int64" + "whenScaled": { + "description": "WhenScaled specifies what happens to PVCs created from StatefulSet VolumeClaimTemplates when the StatefulSet is scaled down. The default policy of `Retain` causes PVCs to not be affected by a scaledown. The `Delete` policy causes the associated PVCs for any excess pods above the replica count to be deleted.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "HorizontalPodAutoscalerStatus", + "Version": "v1beta2", + "Kind": "StatefulSetPersistentVolumeClaimRetentionPolicy", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v1.MetricSpec": { - "description": "MetricSpec specifies how to scale based on a single metric (only `type` and one other matching field should be set at once).", + "io.k8s.api.apps.v1beta2.StatefulSetSpec": { + "description": "A StatefulSetSpec is the specification of a StatefulSet.", "type": "object", "required": [ - "type" + "selector", + "template", + "serviceName" ], "properties": { - "containerResource": { - "description": "containerResource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod of the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. This is an alpha feature and can be enabled by the HPAContainerMetrics feature flag.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ContainerResourceMetricSource" - }, - "external": { - "description": "external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).", - "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ExternalMetricSource" + "minReadySeconds": { + "description": "Minimum number of seconds for which a newly created pod should be ready without any of its container crashing for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", + "type": "integer", + "format": "int32" }, - "object": { - "description": "object refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object).", - "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ObjectMetricSource" + "ordinals": { + "description": "ordinals controls the numbering of replica indices in a StatefulSet. The default ordinals behavior assigns a \"0\" index to the first replica and increments the index by one for each additional replica requested.", + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.StatefulSetOrdinals" }, - "pods": { - "description": "pods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v1.PodsMetricSource" + "persistentVolumeClaimRetentionPolicy": { + "description": "PersistentVolumeClaimRetentionPolicy describes the policy used for PVCs created from the StatefulSet VolumeClaimTemplates. This requires the StatefulSetAutoDeletePVC feature gate to be enabled, which is alpha.", + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.StatefulSetPersistentVolumeClaimRetentionPolicy" }, - "resource": { - "description": "resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ResourceMetricSource" + "podManagementPolicy": { + "description": "podManagementPolicy controls how pods are created during initial scale up, when replacing pods on nodes, or when scaling down. The default policy is `OrderedReady`, where pods are created in increasing order (pod-0, then pod-1, etc) and the controller will wait until each pod is ready before continuing. When scaling down, the pods are removed in the opposite order. The alternative policy is `Parallel` which will create pods in parallel to match the desired scale without waiting, and on scale down will delete all pods at once.", + "type": "string" }, - "type": { - "description": "type is the type of metric source. It should be one of \"ContainerResource\", \"External\", \"Object\", \"Pods\" or \"Resource\", each mapping to a matching field in the object. Note: \"ContainerResource\" type is available on when the feature-gate HPAContainerMetrics is enabled\n\nPossible enum values:\n - `\"ContainerResource\"` is a resource metric known to Kubernetes, as specified in requests and limits, describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics (the \"pods\" source).\n - `\"External\"` is a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).\n - `\"Object\"` is a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).\n - `\"Pods\"` is a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.\n - `\"Resource\"` is a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics (the \"pods\" source).", + "replicas": { + "description": "replicas is the desired number of replicas of the given Template. These are replicas in the sense that they are instantiations of the same Template, but individual replicas also have a consistent identity. If unspecified, defaults to 1.", + "type": "integer", + "format": "int32" + }, + "revisionHistoryLimit": { + "description": "revisionHistoryLimit is the maximum number of revisions that will be maintained in the StatefulSet's revision history. The revision history consists of all revisions not represented by a currently applied StatefulSetSpec version. The default value is 10.", + "type": "integer", + "format": "int32" + }, + "selector": { + "description": "selector is a label query over pods that should match the replica count. It must match the pod template's labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "serviceName": { + "description": "serviceName is the name of the service that governs this StatefulSet. This service must exist before the StatefulSet, and is responsible for the network identity of the set. Pods get DNS/hostnames that follow the pattern: pod-specific-string.serviceName.default.svc.cluster.local where \"pod-specific-string\" is managed by the StatefulSet controller.", "type": "string", - "default": "", - "enum": [ - "ContainerResource", - "External", - "Object", - "Pods", - "Resource" - ] + "default": "" + }, + "template": { + "description": "template is the object that describes the pod that will be created if insufficient replicas are detected. Each pod stamped out by the StatefulSet will fulfill this Template, but have a unique identity from the rest of the StatefulSet. Each pod will be named with the format \u003cstatefulsetname\u003e-\u003cpodindex\u003e. For example, a pod in a StatefulSet named \"web\" with index number \"3\" would be named \"web-3\". The only allowed template.spec.restartPolicy value is \"Always\".", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" + }, + "updateStrategy": { + "description": "updateStrategy indicates the StatefulSetUpdateStrategy that will be employed to update Pods in the StatefulSet when a revision is made to Template.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.StatefulSetUpdateStrategy" + }, + "volumeClaimTemplates": { + "description": "volumeClaimTemplates is a list of claims that pods are allowed to reference. The StatefulSet controller is responsible for mapping network identities to claims in a way that maintains the identity of a pod. Every claim in this list must have at least one matching (by name) volumeMount in one container in the template. A claim in this list takes precedence over any volumes in the template, with the same name.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "MetricSpec", + "Version": "v1beta2", + "Kind": "StatefulSetSpec", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v1.MetricStatus": { - "description": "MetricStatus describes the last-read state of a single metric.", + "io.k8s.api.apps.v1beta2.StatefulSetStatus": { + "description": "StatefulSetStatus represents the current state of a StatefulSet.", "type": "object", "required": [ - "type" + "replicas" ], "properties": { - "containerResource": { - "description": "containerResource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ContainerResourceMetricStatus" + "availableReplicas": { + "description": "Total number of available pods (ready for at least minReadySeconds) targeted by this StatefulSet.", + "type": "integer", + "format": "int32", + "default": 0 }, - "external": { - "description": "external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).", - "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ExternalMetricStatus" + "collisionCount": { + "description": "collisionCount is the count of hash collisions for the StatefulSet. The StatefulSet controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ControllerRevision.", + "type": "integer", + "format": "int32" }, - "object": { - "description": "object refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object).", - "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ObjectMetricStatus" + "conditions": { + "description": "Represents the latest available observations of a statefulset's current state.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.StatefulSetCondition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" }, - "pods": { - "description": "pods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v1.PodsMetricStatus" + "currentReplicas": { + "description": "currentReplicas is the number of Pods created by the StatefulSet controller from the StatefulSet version indicated by currentRevision.", + "type": "integer", + "format": "int32" }, - "resource": { - "description": "resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ResourceMetricStatus" + "currentRevision": { + "description": "currentRevision, if not empty, indicates the version of the StatefulSet used to generate Pods in the sequence [0,currentReplicas).", + "type": "string" }, - "type": { - "description": "type is the type of metric source. It will be one of \"ContainerResource\", \"External\", \"Object\", \"Pods\" or \"Resource\", each corresponds to a matching field in the object. Note: \"ContainerResource\" type is available on when the feature-gate HPAContainerMetrics is enabled\n\nPossible enum values:\n - `\"ContainerResource\"` is a resource metric known to Kubernetes, as specified in requests and limits, describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics (the \"pods\" source).\n - `\"External\"` is a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).\n - `\"Object\"` is a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).\n - `\"Pods\"` is a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.\n - `\"Resource\"` is a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics (the \"pods\" source).", - "type": "string", - "default": "", - "enum": [ - "ContainerResource", - "External", - "Object", - "Pods", - "Resource" - ] + "observedGeneration": { + "description": "observedGeneration is the most recent generation observed for this StatefulSet. It corresponds to the StatefulSet's generation, which is updated on mutation by the API Server.", + "type": "integer", + "format": "int64" + }, + "readyReplicas": { + "description": "readyReplicas is the number of pods created by this StatefulSet controller with a Ready Condition.", + "type": "integer", + "format": "int32" + }, + "replicas": { + "description": "replicas is the number of Pods created by the StatefulSet controller.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "updateRevision": { + "description": "updateRevision, if not empty, indicates the version of the StatefulSet used to generate Pods in the sequence [replicas-updatedReplicas,replicas)", + "type": "string" + }, + "updatedReplicas": { + "description": "updatedReplicas is the number of Pods created by the StatefulSet controller from the StatefulSet version indicated by updateRevision.", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "MetricStatus", + "Version": "v1beta2", + "Kind": "StatefulSetStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v1.ObjectMetricSource": { - "description": "ObjectMetricSource indicates how to scale on a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).", + "io.k8s.api.apps.v1beta2.StatefulSetUpdateStrategy": { + "description": "StatefulSetUpdateStrategy indicates the strategy that the StatefulSet controller will use to perform updates. It includes any additional parameters necessary to perform the update for the indicated strategy.", "type": "object", - "required": [ - "target", - "metricName", - "targetValue" - ], "properties": { - "averageValue": { - "description": "averageValue is the target value of the average of the metric across all relevant pods (as a quantity)", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - }, - "metricName": { - "description": "metricName is the name of the metric in question.", - "type": "string", - "default": "" - }, - "selector": { - "description": "selector is the string-encoded form of a standard kubernetes label selector for the given metric. When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping When unset, just the metricName will be used to gather metrics.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "target": { - "description": "target is the described Kubernetes object.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v1.CrossVersionObjectReference" + "rollingUpdate": { + "description": "RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType.", + "$ref": "#/definitions/io.k8s.api.apps.v1beta2.RollingUpdateStatefulSetStrategy" }, - "targetValue": { - "description": "targetValue is the target value of the metric (as a quantity).", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "type": { + "description": "Type indicates the type of the StatefulSetUpdateStrategy. Default is RollingUpdate.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "ObjectMetricSource", + "Version": "v1beta2", + "Kind": "StatefulSetUpdateStrategy", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v1.ObjectMetricStatus": { - "description": "ObjectMetricStatus indicates the current value of a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).", + "io.k8s.api.authentication.v1.BoundObjectReference": { + "description": "BoundObjectReference is a reference to an object that a token is bound to.", "type": "object", - "required": [ - "target", - "metricName", - "currentValue" - ], "properties": { - "averageValue": { - "description": "averageValue is the current value of the average of the metric across all relevant pods (as a quantity)", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - }, - "currentValue": { - "description": "currentValue is the current value of the metric (as a quantity).", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "apiVersion": { + "description": "API version of the referent.", + "type": "string" }, - "metricName": { - "description": "metricName is the name of the metric in question.", - "type": "string", - "default": "" + "kind": { + "description": "Kind of the referent. Valid kinds are 'Pod' and 'Secret'.", + "type": "string" }, - "selector": { - "description": "selector is the string-encoded form of a standard kubernetes label selector for the given metric When set in the ObjectMetricSource, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "name": { + "description": "Name of the referent.", + "type": "string" }, - "target": { - "description": "target is the described Kubernetes object.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v1.CrossVersionObjectReference" + "uid": { + "description": "UID of the referent.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "authentication.k8s.io", "Version": "v1", - "Kind": "ObjectMetricStatus", + "Kind": "BoundObjectReference", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v1.PodsMetricSource": { - "description": "PodsMetricSource indicates how to scale on a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.", + "io.k8s.api.authentication.v1.SelfSubjectReview": { + "description": "SelfSubjectReview contains the user information that the kube-apiserver has about the user making this request. When using impersonation, users will receive the user info of the user being impersonated. If impersonation or request header authentication is used, any extra keys will have their case ignored and returned as lowercase.", "type": "object", - "required": [ - "metricName", - "targetAverageValue" - ], "properties": { - "metricName": { - "description": "metricName is the name of the metric in question", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "selector": { - "description": "selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping When unset, just the metricName will be used to gather metrics.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "targetAverageValue": { - "description": "targetAverageValue is the target value of the average of the metric across all relevant pods (as a quantity)", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "status": { + "description": "Status is filled in by the server with the user attributes.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authentication.v1.SelfSubjectReviewStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "authentication.k8s.io", + "Version": "v1", + "Kind": "SelfSubjectReview", + "Scope": "Clustered" + } + }, + "io.k8s.api.authentication.v1.SelfSubjectReviewStatus": { + "description": "SelfSubjectReviewStatus is filled by the kube-apiserver and sent back to a user.", + "type": "object", + "properties": { + "userInfo": { + "description": "User attributes of the user making this request.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authentication.v1.UserInfo" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "authentication.k8s.io", "Version": "v1", - "Kind": "PodsMetricSource", + "Kind": "SelfSubjectReviewStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v1.PodsMetricStatus": { - "description": "PodsMetricStatus indicates the current value of a metric describing each pod in the current scale target (for example, transactions-processed-per-second).", + "io.k8s.api.authentication.v1.TokenRequest": { + "description": "TokenRequest requests a token for a given service account.", "type": "object", "required": [ - "metricName", - "currentAverageValue" + "spec" ], "properties": { - "currentAverageValue": { - "description": "currentAverageValue is the current value of the average of the metric across all relevant pods (as a quantity)", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "metricName": { - "description": "metricName is the name of the metric in question", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "selector": { - "description": "selector is the string-encoded form of a standard kubernetes label selector for the given metric When set in the PodsMetricSource, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "Spec holds information about the request being evaluated", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authentication.v1.TokenRequestSpec" + }, + "status": { + "description": "Status is filled in by the server and indicates whether the token can be authenticated.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authentication.v1.TokenRequestStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", + "Type": "object", + "Group": "authentication.k8s.io", "Version": "v1", - "Kind": "PodsMetricStatus", + "Kind": "TokenRequest", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v1.ResourceMetricSource": { - "description": "ResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). The values will be averaged together before being compared to the target. Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. Only one \"target\" type should be set.", + "io.k8s.api.authentication.v1.TokenRequestSpec": { + "description": "TokenRequestSpec contains client provided parameters of a token request.", "type": "object", "required": [ - "name" + "audiences" ], "properties": { - "name": { - "description": "name is the name of the resource in question.", - "type": "string", - "default": "" + "audiences": { + "description": "Audiences are the intendend audiences of the token. A recipient of a token must identify themself with an identifier in the list of audiences of the token, and otherwise should reject the token. A token issued for multiple audiences may be used to authenticate against any of the audiences listed but implies a high degree of trust between the target audiences.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "targetAverageUtilization": { - "description": "targetAverageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.", - "type": "integer", - "format": "int32" + "boundObjectRef": { + "description": "BoundObjectRef is a reference to an object that the token will be bound to. The token will only be valid for as long as the bound object exists. NOTE: The API server's TokenReview endpoint will validate the BoundObjectRef, but other audiences may not. Keep ExpirationSeconds small if you want prompt revocation.", + "$ref": "#/definitions/io.k8s.api.authentication.v1.BoundObjectReference" }, - "targetAverageValue": { - "description": "targetAverageValue is the target value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the \"pods\" metric source type.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "expirationSeconds": { + "description": "ExpirationSeconds is the requested duration of validity of the request. The token issuer may return a token with a different validity duration so a client needs to check the 'expiration' field in a response.", + "type": "integer", + "format": "int64" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "authentication.k8s.io", "Version": "v1", - "Kind": "ResourceMetricSource", + "Kind": "TokenRequestSpec", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v1.ResourceMetricStatus": { - "description": "ResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "io.k8s.api.authentication.v1.TokenRequestStatus": { + "description": "TokenRequestStatus is the result of a token request.", "type": "object", "required": [ - "name", - "currentAverageValue" + "token", + "expirationTimestamp" ], "properties": { - "currentAverageUtilization": { - "description": "currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. It will only be present if `targetAverageValue` was set in the corresponding metric specification.", - "type": "integer", - "format": "int32" - }, - "currentAverageValue": { - "description": "currentAverageValue is the current value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the \"pods\" metric source type. It will always be set, regardless of the corresponding metric specification.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "expirationTimestamp": { + "description": "ExpirationTimestamp is the time of expiration of the returned token.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "name": { - "description": "name is the name of the resource in question.", + "token": { + "description": "Token is the opaque bearer token.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "authentication.k8s.io", "Version": "v1", - "Kind": "ResourceMetricStatus", + "Kind": "TokenRequestStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v1.Scale": { - "description": "Scale represents a scaling request for a resource.", + "io.k8s.api.authentication.v1.TokenReview": { + "description": "TokenReview attempts to authenticate a token to a known user. Note: TokenReview requests may be cached by the webhook token authenticator plugin in the kube-apiserver.", "type": "object", + "required": [ + "spec" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -24312,1043 +23746,1100 @@ "type": "string" }, "metadata": { - "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec defines the behavior of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.", + "description": "Spec holds information about the request being evaluated", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ScaleSpec" + "$ref": "#/definitions/io.k8s.api.authentication.v1.TokenReviewSpec" }, "status": { - "description": "status is the current status of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. Read-only.", + "description": "Status is filled in by the server and indicates whether the request can be authenticated.", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ScaleStatus" + "$ref": "#/definitions/io.k8s.api.authentication.v1.TokenReviewStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "", + "Group": "authentication.k8s.io", "Version": "v1", - "Kind": "Scale", - "Scope": "Namespaced" + "Kind": "TokenReview", + "Scope": "Clustered" } }, - "io.k8s.api.autoscaling.v1.ScaleSpec": { - "description": "ScaleSpec describes the attributes of a scale subresource.", + "io.k8s.api.authentication.v1.TokenReviewSpec": { + "description": "TokenReviewSpec is a description of the token authentication request.", "type": "object", "properties": { - "replicas": { - "description": "replicas is the desired number of instances for the scaled object.", - "type": "integer", - "format": "int32" + "audiences": { + "description": "Audiences is a list of the identifiers that the resource server presented with the token identifies as. Audience-aware token authenticators will verify that the token was intended for at least one of the audiences in this list. If no audiences are provided, the audience will default to the audience of the Kubernetes apiserver.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "token": { + "description": "Token is the opaque bearer token.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "authentication.k8s.io", "Version": "v1", - "Kind": "ScaleSpec", + "Kind": "TokenReviewSpec", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v1.ScaleStatus": { - "description": "ScaleStatus represents the current status of a scale subresource.", + "io.k8s.api.authentication.v1.TokenReviewStatus": { + "description": "TokenReviewStatus is the result of the token authentication request.", "type": "object", - "required": [ - "replicas" - ], "properties": { - "replicas": { - "description": "replicas is the actual number of observed instances of the scaled object.", - "type": "integer", - "format": "int32", - "default": 0 + "audiences": { + "description": "Audiences are audience identifiers chosen by the authenticator that are compatible with both the TokenReview and token. An identifier is any identifier in the intersection of the TokenReviewSpec audiences and the token's audiences. A client of the TokenReview API that sets the spec.audiences field should validate that a compatible audience identifier is returned in the status.audiences field to ensure that the TokenReview server is audience aware. If a TokenReview returns an empty status.audience field where status.authenticated is \"true\", the token is valid against the audience of the Kubernetes API server.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "selector": { - "description": "selector is the label query over pods that should match the replicas count. This is same as the label selector but in the string format to avoid introspection by clients. The string will be in the same format as the query-param syntax. More info about label selectors: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/", + "authenticated": { + "description": "Authenticated indicates that the token was associated with a known user.", + "type": "boolean" + }, + "error": { + "description": "Error indicates that the token couldn't be checked", "type": "string" + }, + "user": { + "description": "User is the UserInfo associated with the provided token.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authentication.v1.UserInfo" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "authentication.k8s.io", "Version": "v1", - "Kind": "ScaleStatus", + "Kind": "TokenReviewStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2.ContainerResourceMetricSource": { - "description": "ContainerResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). The values will be averaged together before being compared to the target. Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. Only one \"target\" type should be set.", + "io.k8s.api.authentication.v1.UserInfo": { + "description": "UserInfo holds the information about the user needed to implement the user.Info interface.", "type": "object", - "required": [ - "name", - "target", - "container" - ], "properties": { - "container": { - "description": "container is the name of the container in the pods of the scaling target", - "type": "string", - "default": "" - }, - "name": { - "description": "name is the name of the resource in question.", - "type": "string", - "default": "" - }, - "target": { - "description": "target specifies the target value for the given metric", - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricTarget" + "extra": { + "description": "Any additional information provided by the authenticator.", + "type": "object", + "additionalProperties": { + "type": "array", + "items": { + "type": "string", + "default": "" + } + } + }, + "groups": { + "description": "The names of groups this user is a part of.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "uid": { + "description": "A unique value that identifies this user across time. If this user is deleted and another user by the same name is added, they will have different UIDs.", + "type": "string" + }, + "username": { + "description": "The name that uniquely identifies this user among all active users.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "ContainerResourceMetricSource", + "Group": "authentication.k8s.io", + "Version": "v1", + "Kind": "UserInfo", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2.ContainerResourceMetricStatus": { - "description": "ContainerResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "io.k8s.api.authentication.v1alpha1.SelfSubjectReview": { + "description": "SelfSubjectReview contains the user information that the kube-apiserver has about the user making this request. When using impersonation, users will receive the user info of the user being impersonated. If impersonation or request header authentication is used, any extra keys will have their case ignored and returned as lowercase.", "type": "object", - "required": [ - "name", - "current", - "container" - ], "properties": { - "container": { - "description": "container is the name of the container in the pods of the scaling target", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "current": { - "description": "current contains the current value for the given metric", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricValueStatus" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "name": { - "description": "name is the name of the resource in question.", - "type": "string", - "default": "" + "status": { + "description": "Status is filled in by the server with the user attributes.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authentication.v1alpha1.SelfSubjectReviewStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "authentication.k8s.io", + "Version": "v1alpha1", + "Kind": "SelfSubjectReview", + "Scope": "Clustered" + } + }, + "io.k8s.api.authentication.v1alpha1.SelfSubjectReviewStatus": { + "description": "SelfSubjectReviewStatus is filled by the kube-apiserver and sent back to a user.", + "type": "object", + "properties": { + "userInfo": { + "description": "User attributes of the user making this request.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authentication.v1.UserInfo" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "ContainerResourceMetricStatus", + "Group": "authentication.k8s.io", + "Version": "v1alpha1", + "Kind": "SelfSubjectReviewStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2.CrossVersionObjectReference": { - "description": "CrossVersionObjectReference contains enough information to let you identify the referred resource.", + "io.k8s.api.authentication.v1beta1.SelfSubjectReview": { + "description": "SelfSubjectReview contains the user information that the kube-apiserver has about the user making this request. When using impersonation, users will receive the user info of the user being impersonated. If impersonation or request header authentication is used, any extra keys will have their case ignored and returned as lowercase.", "type": "object", - "required": [ - "kind", - "name" - ], "properties": { "apiVersion": { - "description": "apiVersion is the API version of the referent", + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, "kind": { - "description": "kind is the kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string", - "default": "" + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "name": { - "description": "name is the name of the referent; More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - "type": "string", - "default": "" + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "status": { + "description": "Status is filled in by the server with the user attributes.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authentication.v1beta1.SelfSubjectReviewStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "CrossVersionObjectReference", - "Scope": "Namespaced" + "Type": "object", + "Group": "authentication.k8s.io", + "Version": "v1beta1", + "Kind": "SelfSubjectReview", + "Scope": "Clustered" } }, - "io.k8s.api.autoscaling.v2.ExternalMetricSource": { - "description": "ExternalMetricSource indicates how to scale on a metric not associated with any Kubernetes object (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).", + "io.k8s.api.authentication.v1beta1.SelfSubjectReviewStatus": { + "description": "SelfSubjectReviewStatus is filled by the kube-apiserver and sent back to a user.", "type": "object", - "required": [ - "metric", - "target" - ], "properties": { - "metric": { - "description": "metric identifies the target metric by name and selector", - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricIdentifier" - }, - "target": { - "description": "target specifies the target value for the given metric", + "userInfo": { + "description": "User attributes of the user making this request.", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricTarget" + "$ref": "#/definitions/io.k8s.api.authentication.v1.UserInfo" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "ExternalMetricSource", + "Group": "authentication.k8s.io", + "Version": "v1beta1", + "Kind": "SelfSubjectReviewStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2.ExternalMetricStatus": { - "description": "ExternalMetricStatus indicates the current value of a global metric not associated with any Kubernetes object.", + "io.k8s.api.authentication.v1beta1.TokenReview": { + "description": "TokenReview attempts to authenticate a token to a known user. Note: TokenReview requests may be cached by the webhook token authenticator plugin in the kube-apiserver.", "type": "object", "required": [ - "metric", - "current" + "spec" ], "properties": { - "current": { - "description": "current contains the current value for the given metric", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricValueStatus" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "metric": { - "description": "metric identifies the target metric by name and selector", + "spec": { + "description": "Spec holds information about the request being evaluated", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricIdentifier" + "$ref": "#/definitions/io.k8s.api.authentication.v1beta1.TokenReviewSpec" + }, + "status": { + "description": "Status is filled in by the server and indicates whether the token can be authenticated.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authentication.v1beta1.TokenReviewStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "ExternalMetricStatus", - "Scope": "Namespaced" + "Type": "object", + "Group": "authentication.k8s.io", + "Version": "v1beta1", + "Kind": "TokenReview", + "Scope": "Clustered" } }, - "io.k8s.api.autoscaling.v2.HPAScalingPolicy": { - "description": "HPAScalingPolicy is a single policy which must hold true for a specified past interval.", + "io.k8s.api.authentication.v1beta1.TokenReviewSpec": { + "description": "TokenReviewSpec is a description of the token authentication request.", "type": "object", - "required": [ - "type", - "value", - "periodSeconds" - ], "properties": { - "periodSeconds": { - "description": "periodSeconds specifies the window of time for which the policy should hold true. PeriodSeconds must be greater than zero and less than or equal to 1800 (30 min).", - "type": "integer", - "format": "int32", - "default": 0 - }, - "type": { - "description": "type is used to specify the scaling policy.", - "type": "string", - "default": "" + "audiences": { + "description": "Audiences is a list of the identifiers that the resource server presented with the token identifies as. Audience-aware token authenticators will verify that the token was intended for at least one of the audiences in this list. If no audiences are provided, the audience will default to the audience of the Kubernetes apiserver.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "value": { - "description": "value contains the amount of change which is permitted by the policy. It must be greater than zero", - "type": "integer", - "format": "int32", - "default": 0 + "token": { + "description": "Token is the opaque bearer token.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "HPAScalingPolicy", + "Group": "authentication.k8s.io", + "Version": "v1beta1", + "Kind": "TokenReviewSpec", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2.HPAScalingRules": { - "description": "HPAScalingRules configures the scaling behavior for one direction. These Rules are applied after calculating DesiredReplicas from metrics for the HPA. They can limit the scaling velocity by specifying scaling policies. They can prevent flapping by specifying the stabilization window, so that the number of replicas is not set instantly, instead, the safest value from the stabilization window is chosen.", + "io.k8s.api.authentication.v1beta1.TokenReviewStatus": { + "description": "TokenReviewStatus is the result of the token authentication request.", "type": "object", "properties": { - "policies": { - "description": "policies is a list of potential scaling polices which can be used during scaling. At least one policy must be specified, otherwise the HPAScalingRules will be discarded as invalid", + "audiences": { + "description": "Audiences are audience identifiers chosen by the authenticator that are compatible with both the TokenReview and token. An identifier is any identifier in the intersection of the TokenReviewSpec audiences and the token's audiences. A client of the TokenReview API that sets the spec.audiences field should validate that a compatible audience identifier is returned in the status.audiences field to ensure that the TokenReview server is audience aware. If a TokenReview returns an empty status.audience field where status.authenticated is \"true\", the token is valid against the audience of the Kubernetes API server.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.HPAScalingPolicy" + "type": "string", + "default": "" }, "x-kubernetes-list-type": "atomic" }, - "selectPolicy": { - "description": "selectPolicy is used to specify which policy should be used. If not set, the default value Max is used.", + "authenticated": { + "description": "Authenticated indicates that the token was associated with a known user.", + "type": "boolean" + }, + "error": { + "description": "Error indicates that the token couldn't be checked", "type": "string" }, - "stabilizationWindowSeconds": { - "description": "stabilizationWindowSeconds is the number of seconds for which past recommendations should be considered while scaling up or scaling down. StabilizationWindowSeconds must be greater than or equal to zero and less than or equal to 3600 (one hour). If not set, use the default values: - For scale up: 0 (i.e. no stabilization is done). - For scale down: 300 (i.e. the stabilization window is 300 seconds long).", - "type": "integer", - "format": "int32" + "user": { + "description": "User is the UserInfo associated with the provided token.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authentication.v1beta1.UserInfo" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "HPAScalingRules", + "Group": "authentication.k8s.io", + "Version": "v1beta1", + "Kind": "TokenReviewStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2.HorizontalPodAutoscaler": { - "description": "HorizontalPodAutoscaler is the configuration for a horizontal pod autoscaler, which automatically manages the replica count of any resource implementing the scale subresource based on the metrics specified.", + "io.k8s.api.authentication.v1beta1.UserInfo": { + "description": "UserInfo holds the information about the user needed to implement the user.Info interface.", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "extra": { + "description": "Any additional information provided by the authenticator.", + "type": "object", + "additionalProperties": { + "type": "array", + "items": { + "type": "string", + "default": "" + } + } }, - "metadata": { - "description": "metadata is the standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "groups": { + "description": "The names of groups this user is a part of.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "spec": { - "description": "spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.HorizontalPodAutoscalerSpec" + "uid": { + "description": "A unique value that identifies this user across time. If this user is deleted and another user by the same name is added, they will have different UIDs.", + "type": "string" }, - "status": { - "description": "status is the current information about the autoscaler.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.HorizontalPodAutoscalerStatus" + "username": { + "description": "The name that uniquely identifies this user among all active users.", + "type": "string" } }, "x-fabric8-info": { - "Type": "object", - "Group": "", - "Version": "v2", - "Kind": "HorizontalPodAutoscaler", + "Type": "nested", + "Group": "authentication.k8s.io", + "Version": "v1beta1", + "Kind": "UserInfo", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2.HorizontalPodAutoscalerBehavior": { - "description": "HorizontalPodAutoscalerBehavior configures the scaling behavior of the target in both Up and Down directions (scaleUp and scaleDown fields respectively).", + "io.k8s.api.authorization.v1.FieldSelectorAttributes": { + "description": "FieldSelectorAttributes indicates a field limited access. Webhook authors are encouraged to * ensure rawSelector and requirements are not both set * consider the requirements field if set * not try to parse or consider the rawSelector field if set. This is to avoid another CVE-2022-2880 (i.e. getting different systems to agree on how exactly to parse a query is not something we want), see https://www.oxeye.io/resources/golang-parameter-smuggling-attack for more details. For the *SubjectAccessReview endpoints of the kube-apiserver: * If rawSelector is empty and requirements are empty, the request is not limited. * If rawSelector is present and requirements are empty, the rawSelector will be parsed and limited if the parsing succeeds. * If rawSelector is empty and requirements are present, the requirements should be honored * If rawSelector is present and requirements are present, the request is invalid.", "type": "object", "properties": { - "scaleDown": { - "description": "scaleDown is scaling policy for scaling Down. If not set, the default value is to allow to scale down to minReplicas pods, with a 300 second stabilization window (i.e., the highest recommendation for the last 300sec is used).", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.HPAScalingRules" + "rawSelector": { + "description": "rawSelector is the serialization of a field selector that would be included in a query parameter. Webhook implementations are encouraged to ignore rawSelector. The kube-apiserver's *SubjectAccessReview will parse the rawSelector as long as the requirements are not present.", + "type": "string" }, - "scaleUp": { - "description": "scaleUp is scaling policy for scaling Up. If not set, the default value is the higher of:\n * increase no more than 4 pods per 60 seconds\n * double the number of pods per 60 seconds\nNo stabilization is used.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.HPAScalingRules" + "requirements": { + "description": "requirements is the parsed interpretation of a field selector. All requirements must be met for a resource instance to match the selector. Webhook implementations should handle requirements, but how to handle them is up to the webhook. Since requirements can only limit the request, it is safe to authorize as unlimited request if the requirements are not understood.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.FieldSelectorRequirement" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "HorizontalPodAutoscalerBehavior", + "Group": "authorization.k8s.io", + "Version": "v1", + "Kind": "FieldSelectorAttributes", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2.HorizontalPodAutoscalerCondition": { - "description": "HorizontalPodAutoscalerCondition describes the state of a HorizontalPodAutoscaler at a certain point.", + "io.k8s.api.authorization.v1.LabelSelectorAttributes": { + "description": "LabelSelectorAttributes indicates a label limited access. Webhook authors are encouraged to * ensure rawSelector and requirements are not both set * consider the requirements field if set * not try to parse or consider the rawSelector field if set. This is to avoid another CVE-2022-2880 (i.e. getting different systems to agree on how exactly to parse a query is not something we want), see https://www.oxeye.io/resources/golang-parameter-smuggling-attack for more details. For the *SubjectAccessReview endpoints of the kube-apiserver: * If rawSelector is empty and requirements are empty, the request is not limited. * If rawSelector is present and requirements are empty, the rawSelector will be parsed and limited if the parsing succeeds. * If rawSelector is empty and requirements are present, the requirements should be honored * If rawSelector is present and requirements are present, the request is invalid.", "type": "object", - "required": [ - "type", - "status" - ], "properties": { - "lastTransitionTime": { - "description": "lastTransitionTime is the last time the condition transitioned from one status to another", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "message is a human-readable explanation containing details about the transition", - "type": "string" - }, - "reason": { - "description": "reason is the reason for the condition's last transition.", + "rawSelector": { + "description": "rawSelector is the serialization of a field selector that would be included in a query parameter. Webhook implementations are encouraged to ignore rawSelector. The kube-apiserver's *SubjectAccessReview will parse the rawSelector as long as the requirements are not present.", "type": "string" }, - "status": { - "description": "status is the status of the condition (True, False, Unknown)", - "type": "string", - "default": "" - }, - "type": { - "description": "type describes the current condition", - "type": "string", - "default": "" + "requirements": { + "description": "requirements is the parsed interpretation of a label selector. All requirements must be met for a resource instance to match the selector. Webhook implementations should handle requirements, but how to handle them is up to the webhook. Since requirements can only limit the request, it is safe to authorize as unlimited request if the requirements are not understood.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelectorRequirement" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "HorizontalPodAutoscalerCondition", + "Group": "authorization.k8s.io", + "Version": "v1", + "Kind": "LabelSelectorAttributes", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2.HorizontalPodAutoscalerList": { - "description": "HorizontalPodAutoscalerList is a list of horizontal pod autoscaler objects.", + "io.k8s.api.authorization.v1.LocalSubjectAccessReview": { + "description": "LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.", "type": "object", "required": [ - "items" + "spec" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "items is the list of horizontal pod autoscaler objects.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.HorizontalPodAutoscaler" - } - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "metadata is the standard list metadata.", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewSpec" + }, + "status": { + "description": "Status is filled in by the server and indicates whether the request is allowed or not", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewStatus" } }, "x-fabric8-info": { - "Type": "list", - "Group": "", - "Version": "v2", - "Kind": "HorizontalPodAutoscalerList", + "Type": "object", + "Group": "authorization.k8s.io", + "Version": "v1", + "Kind": "LocalSubjectAccessReview", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2.HorizontalPodAutoscalerSpec": { - "description": "HorizontalPodAutoscalerSpec describes the desired functionality of the HorizontalPodAutoscaler.", + "io.k8s.api.authorization.v1.NonResourceAttributes": { + "description": "NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface", "type": "object", - "required": [ - "scaleTargetRef", - "maxReplicas" - ], "properties": { - "behavior": { - "description": "behavior configures the scaling behavior of the target in both Up and Down directions (scaleUp and scaleDown fields respectively). If not set, the default HPAScalingRules for scale up and scale down are used.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.HorizontalPodAutoscalerBehavior" - }, - "maxReplicas": { - "description": "maxReplicas is the upper limit for the number of replicas to which the autoscaler can scale up. It cannot be less that minReplicas.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "metrics": { - "description": "metrics contains the specifications for which to use to calculate the desired replica count (the maximum replica count across all metrics will be used). The desired replica count is calculated multiplying the ratio between the target value and the current value by the current number of pods. Ergo, metrics used must decrease as the pod count is increased, and vice-versa. See the individual metric source types for more information about how each type of metric must respond. If not set, the default metric will be set to 80% average CPU utilization.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricSpec" - }, - "x-kubernetes-list-type": "atomic" - }, - "minReplicas": { - "description": "minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down. It defaults to 1 pod. minReplicas is allowed to be 0 if the alpha feature gate HPAScaleToZero is enabled and at least one Object or External metric is configured. Scaling is active as long as at least one metric value is available.", - "type": "integer", - "format": "int32" + "path": { + "description": "Path is the URL path of the request", + "type": "string" }, - "scaleTargetRef": { - "description": "scaleTargetRef points to the target resource to scale, and is used to the pods for which metrics should be collected, as well as to actually change the replica count.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.CrossVersionObjectReference" + "verb": { + "description": "Verb is the standard HTTP verb", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "HorizontalPodAutoscalerSpec", + "Group": "authorization.k8s.io", + "Version": "v1", + "Kind": "NonResourceAttributes", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2.HorizontalPodAutoscalerStatus": { - "description": "HorizontalPodAutoscalerStatus describes the current status of a horizontal pod autoscaler.", + "io.k8s.api.authorization.v1.NonResourceRule": { + "description": "NonResourceRule holds information that describes a rule for the non-resource", "type": "object", "required": [ - "desiredReplicas" + "verbs" ], "properties": { - "conditions": { - "description": "conditions is the set of conditions required for this autoscaler to scale its target, and indicates whether or not those conditions are met.", + "nonResourceURLs": { + "description": "NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path. \"*\" means all.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.HorizontalPodAutoscalerCondition" + "type": "string", + "default": "" }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "x-kubernetes-list-type": "atomic" }, - "currentMetrics": { - "description": "currentMetrics is the last read state of the metrics used by this autoscaler.", + "verbs": { + "description": "Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options. \"*\" means all.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricStatus" + "type": "string", + "default": "" }, "x-kubernetes-list-type": "atomic" - }, - "currentReplicas": { - "description": "currentReplicas is current number of replicas of pods managed by this autoscaler, as last seen by the autoscaler.", - "type": "integer", - "format": "int32" - }, - "desiredReplicas": { - "description": "desiredReplicas is the desired number of replicas of pods managed by this autoscaler, as last calculated by the autoscaler.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "lastScaleTime": { - "description": "lastScaleTime is the last time the HorizontalPodAutoscaler scaled the number of pods, used by the autoscaler to control how often the number of pods is changed.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "observedGeneration": { - "description": "observedGeneration is the most recent generation observed by this autoscaler.", - "type": "integer", - "format": "int64" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "HorizontalPodAutoscalerStatus", + "Group": "authorization.k8s.io", + "Version": "v1", + "Kind": "NonResourceRule", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2.MetricIdentifier": { - "description": "MetricIdentifier defines the name and optionally selector for a metric", + "io.k8s.api.authorization.v1.ResourceAttributes": { + "description": "ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface", "type": "object", - "required": [ - "name" - ], "properties": { - "name": { - "description": "name is the name of the given metric", - "type": "string", - "default": "" + "fieldSelector": { + "description": "fieldSelector describes the limitation on access based on field. It can only limit access, not broaden it.\n\nThis field is alpha-level. To use this field, you must enable the `AuthorizeWithSelectors` feature gate (disabled by default).", + "$ref": "#/definitions/io.k8s.api.authorization.v1.FieldSelectorAttributes" }, - "selector": { - "description": "selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "MetricIdentifier", - "Scope": "Namespaced" - } - }, - "io.k8s.api.autoscaling.v2.MetricSpec": { - "description": "MetricSpec specifies how to scale based on a single metric (only `type` and one other matching field should be set at once).", - "type": "object", - "required": [ - "type" - ], - "properties": { - "containerResource": { - "description": "containerResource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod of the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. This is an alpha feature and can be enabled by the HPAContainerMetrics feature flag.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.ContainerResourceMetricSource" + "group": { + "description": "Group is the API Group of the Resource. \"*\" means all.", + "type": "string" }, - "external": { - "description": "external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.ExternalMetricSource" + "labelSelector": { + "description": "labelSelector describes the limitation on access based on labels. It can only limit access, not broaden it.\n\nThis field is alpha-level. To use this field, you must enable the `AuthorizeWithSelectors` feature gate (disabled by default).", + "$ref": "#/definitions/io.k8s.api.authorization.v1.LabelSelectorAttributes" }, - "object": { - "description": "object refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object).", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.ObjectMetricSource" + "name": { + "description": "Name is the name of the resource being requested for a \"get\" or deleted for a \"delete\". \"\" (empty) means all.", + "type": "string" }, - "pods": { - "description": "pods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.PodsMetricSource" + "namespace": { + "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces \"\" (empty) is defaulted for LocalSubjectAccessReviews \"\" (empty) is empty for cluster-scoped resources \"\" (empty) means \"all\" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview", + "type": "string" }, "resource": { - "description": "resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.ResourceMetricSource" + "description": "Resource is one of the existing resource types. \"*\" means all.", + "type": "string" }, - "type": { - "description": "type is the type of metric source. It should be one of \"ContainerResource\", \"External\", \"Object\", \"Pods\" or \"Resource\", each mapping to a matching field in the object. Note: \"ContainerResource\" type is available on when the feature-gate HPAContainerMetrics is enabled", - "type": "string", - "default": "" + "subresource": { + "description": "Subresource is one of the existing resource types. \"\" means none.", + "type": "string" + }, + "verb": { + "description": "Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. \"*\" means all.", + "type": "string" + }, + "version": { + "description": "Version is the API Version of the Resource. \"*\" means all.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "MetricSpec", + "Group": "authorization.k8s.io", + "Version": "v1", + "Kind": "ResourceAttributes", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2.MetricStatus": { - "description": "MetricStatus describes the last-read state of a single metric.", + "io.k8s.api.authorization.v1.ResourceRule": { + "description": "ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.", "type": "object", "required": [ - "type" + "verbs" ], "properties": { - "containerResource": { - "description": "container resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.ContainerResourceMetricStatus" - }, - "external": { - "description": "external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.ExternalMetricStatus" - }, - "object": { - "description": "object refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object).", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.ObjectMetricStatus" + "apiGroups": { + "description": "APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. \"*\" means all.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "pods": { - "description": "pods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.PodsMetricStatus" + "resourceNames": { + "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed. \"*\" means all.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "resource": { - "description": "resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.ResourceMetricStatus" + "resources": { + "description": "Resources is a list of resources this rule applies to. \"*\" means all in the specified apiGroups.\n \"*/foo\" represents the subresource 'foo' for all resources in the specified apiGroups.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "type": { - "description": "type is the type of metric source. It will be one of \"ContainerResource\", \"External\", \"Object\", \"Pods\" or \"Resource\", each corresponds to a matching field in the object. Note: \"ContainerResource\" type is available on when the feature-gate HPAContainerMetrics is enabled", - "type": "string", - "default": "" + "verbs": { + "description": "Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy. \"*\" means all.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "MetricStatus", + "Group": "authorization.k8s.io", + "Version": "v1", + "Kind": "ResourceRule", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2.MetricTarget": { - "description": "MetricTarget defines the target value, average value, or average utilization of a specific metric", + "io.k8s.api.authorization.v1.SelfSubjectAccessReview": { + "description": "SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means \"in all namespaces\". Self is a special case, because users should always be able to check whether they can perform an action", "type": "object", "required": [ - "type" + "spec" ], "properties": { - "averageUtilization": { - "description": "averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type", - "type": "integer", - "format": "int32" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "averageValue": { - "description": "averageValue is the target value of the average of the metric across all relevant pods (as a quantity)", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "type": { - "description": "type represents whether the metric type is Utilization, Value, or AverageValue", - "type": "string", - "default": "" + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "value": { - "description": "value is the target value of the metric (as a quantity).", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "spec": { + "description": "Spec holds information about the request being evaluated. user and groups must be empty", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authorization.v1.SelfSubjectAccessReviewSpec" + }, + "status": { + "description": "Status is filled in by the server and indicates whether the request is allowed or not", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "MetricTarget", - "Scope": "Namespaced" + "Type": "object", + "Group": "authorization.k8s.io", + "Version": "v1", + "Kind": "SelfSubjectAccessReview", + "Scope": "Clustered" } }, - "io.k8s.api.autoscaling.v2.MetricValueStatus": { - "description": "MetricValueStatus holds the current value for a metric", + "io.k8s.api.authorization.v1.SelfSubjectAccessReviewSpec": { + "description": "SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set", "type": "object", "properties": { - "averageUtilization": { - "description": "currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.", - "type": "integer", - "format": "int32" - }, - "averageValue": { - "description": "averageValue is the current value of the average of the metric across all relevant pods (as a quantity)", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "nonResourceAttributes": { + "description": "NonResourceAttributes describes information for a non-resource access request", + "$ref": "#/definitions/io.k8s.api.authorization.v1.NonResourceAttributes" }, - "value": { - "description": "value is the current value of the metric (as a quantity).", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "resourceAttributes": { + "description": "ResourceAuthorizationAttributes describes information for a resource access request", + "$ref": "#/definitions/io.k8s.api.authorization.v1.ResourceAttributes" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "MetricValueStatus", + "Group": "authorization.k8s.io", + "Version": "v1", + "Kind": "SelfSubjectAccessReviewSpec", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2.ObjectMetricSource": { - "description": "ObjectMetricSource indicates how to scale on a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).", + "io.k8s.api.authorization.v1.SelfSubjectRulesReview": { + "description": "SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.", "type": "object", "required": [ - "describedObject", - "target", - "metric" + "spec" ], "properties": { - "describedObject": { - "description": "describedObject specifies the descriptions of a object,such as kind,name apiVersion", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.CrossVersionObjectReference" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "metric": { - "description": "metric identifies the target metric by name and selector", + "spec": { + "description": "Spec holds information about the request being evaluated.", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricIdentifier" + "$ref": "#/definitions/io.k8s.api.authorization.v1.SelfSubjectRulesReviewSpec" }, - "target": { - "description": "target specifies the target value for the given metric", + "status": { + "description": "Status is filled in by the server and indicates the set of actions a user can perform.", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricTarget" + "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectRulesReviewStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "ObjectMetricSource", - "Scope": "Namespaced" + "Type": "object", + "Group": "authorization.k8s.io", + "Version": "v1", + "Kind": "SelfSubjectRulesReview", + "Scope": "Clustered" } }, - "io.k8s.api.autoscaling.v2.ObjectMetricStatus": { - "description": "ObjectMetricStatus indicates the current value of a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).", + "io.k8s.api.authorization.v1.SelfSubjectRulesReviewSpec": { + "description": "SelfSubjectRulesReviewSpec defines the specification for SelfSubjectRulesReview.", "type": "object", - "required": [ - "metric", - "current", - "describedObject" - ], "properties": { - "current": { - "description": "current contains the current value for the given metric", - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricValueStatus" - }, - "describedObject": { - "description": "DescribedObject specifies the descriptions of a object,such as kind,name apiVersion", - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.CrossVersionObjectReference" - }, - "metric": { - "description": "metric identifies the target metric by name and selector", - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricIdentifier" + "namespace": { + "description": "Namespace to evaluate rules for. Required.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "ObjectMetricStatus", + "Group": "authorization.k8s.io", + "Version": "v1", + "Kind": "SelfSubjectRulesReviewSpec", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2.PodsMetricSource": { - "description": "PodsMetricSource indicates how to scale on a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.", + "io.k8s.api.authorization.v1.SubjectAccessReview": { + "description": "SubjectAccessReview checks whether or not a user or group can perform an action.", "type": "object", "required": [ - "metric", - "target" + "spec" ], "properties": { - "metric": { - "description": "metric identifies the target metric by name and selector", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricIdentifier" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "target": { - "description": "target specifies the target value for the given metric", + "spec": { + "description": "Spec holds information about the request being evaluated", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricTarget" + "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewSpec" + }, + "status": { + "description": "Status is filled in by the server and indicates whether the request is allowed or not", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "PodsMetricSource", - "Scope": "Namespaced" + "Type": "object", + "Group": "authorization.k8s.io", + "Version": "v1", + "Kind": "SubjectAccessReview", + "Scope": "Clustered" } }, - "io.k8s.api.autoscaling.v2.PodsMetricStatus": { - "description": "PodsMetricStatus indicates the current value of a metric describing each pod in the current scale target (for example, transactions-processed-per-second).", + "io.k8s.api.authorization.v1.SubjectAccessReviewSpec": { + "description": "SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set", "type": "object", - "required": [ - "metric", - "current" - ], "properties": { - "current": { - "description": "current contains the current value for the given metric", - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricValueStatus" + "extra": { + "description": "Extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here.", + "type": "object", + "additionalProperties": { + "type": "array", + "items": { + "type": "string", + "default": "" + } + } }, - "metric": { - "description": "metric identifies the target metric by name and selector", - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricIdentifier" + "groups": { + "description": "Groups is the groups you're testing for.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "nonResourceAttributes": { + "description": "NonResourceAttributes describes information for a non-resource access request", + "$ref": "#/definitions/io.k8s.api.authorization.v1.NonResourceAttributes" + }, + "resourceAttributes": { + "description": "ResourceAuthorizationAttributes describes information for a resource access request", + "$ref": "#/definitions/io.k8s.api.authorization.v1.ResourceAttributes" + }, + "uid": { + "description": "UID information about the requesting user.", + "type": "string" + }, + "user": { + "description": "User is the user you're testing for. If you specify \"User\" but not \"Groups\", then is it interpreted as \"What if User were not a member of any groups", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "PodsMetricStatus", + "Group": "authorization.k8s.io", + "Version": "v1", + "Kind": "SubjectAccessReviewSpec", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2.ResourceMetricSource": { - "description": "ResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). The values will be averaged together before being compared to the target. Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. Only one \"target\" type should be set.", + "io.k8s.api.authorization.v1.SubjectAccessReviewStatus": { + "description": "SubjectAccessReviewStatus", "type": "object", "required": [ - "name", - "target" + "allowed" ], "properties": { - "name": { - "description": "name is the name of the resource in question.", - "type": "string", - "default": "" + "allowed": { + "description": "Allowed is required. True if the action would be allowed, false otherwise.", + "type": "boolean", + "default": false }, - "target": { - "description": "target specifies the target value for the given metric", - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricTarget" + "denied": { + "description": "Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.", + "type": "boolean" + }, + "evaluationError": { + "description": "EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.", + "type": "string" + }, + "reason": { + "description": "Reason is optional. It indicates why a request was allowed or denied.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "ResourceMetricSource", + "Group": "authorization.k8s.io", + "Version": "v1", + "Kind": "SubjectAccessReviewStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2.ResourceMetricStatus": { - "description": "ResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "io.k8s.api.authorization.v1.SubjectRulesReviewStatus": { + "description": "SubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.", "type": "object", "required": [ - "name", - "current" + "resourceRules", + "nonResourceRules", + "incomplete" ], "properties": { - "current": { - "description": "current contains the current value for the given metric", - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricValueStatus" + "evaluationError": { + "description": "EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.", + "type": "string" }, - "name": { - "description": "name is the name of the resource in question.", - "type": "string", - "default": "" + "incomplete": { + "description": "Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.", + "type": "boolean", + "default": false + }, + "nonResourceRules": { + "description": "NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.authorization.v1.NonResourceRule" + }, + "x-kubernetes-list-type": "atomic" + }, + "resourceRules": { + "description": "ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.authorization.v1.ResourceRule" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2", - "Kind": "ResourceMetricStatus", + "Group": "authorization.k8s.io", + "Version": "v1", + "Kind": "SubjectRulesReviewStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta1.ContainerResourceMetricSource": { - "description": "ContainerResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). The values will be averaged together before being compared to the target. Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. Only one \"target\" type should be set.", + "io.k8s.api.authorization.v1beta1.LocalSubjectAccessReview": { + "description": "LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.", "type": "object", "required": [ - "name", - "container" + "spec" ], "properties": { - "container": { - "description": "container is the name of the container in the pods of the scaling target", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "name": { - "description": "name is the name of the resource in question.", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "targetAverageUtilization": { - "description": "targetAverageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.", - "type": "integer", - "format": "int32" + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "targetAverageValue": { - "description": "targetAverageValue is the target value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the \"pods\" metric source type.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "spec": { + "description": "Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReviewSpec" + }, + "status": { + "description": "Status is filled in by the server and indicates whether the request is allowed or not", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReviewStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v2beta1", - "Kind": "ContainerResourceMetricSource", + "Type": "object", + "Group": "authorization.k8s.io", + "Version": "v1beta1", + "Kind": "LocalSubjectAccessReview", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta1.ContainerResourceMetricStatus": { - "description": "ContainerResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "io.k8s.api.authorization.v1beta1.NonResourceAttributes": { + "description": "NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface", "type": "object", - "required": [ - "name", - "currentAverageValue", - "container" - ], "properties": { - "container": { - "description": "container is the name of the container in the pods of the scaling target", - "type": "string", - "default": "" - }, - "currentAverageUtilization": { - "description": "currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. It will only be present if `targetAverageValue` was set in the corresponding metric specification.", - "type": "integer", - "format": "int32" - }, - "currentAverageValue": { - "description": "currentAverageValue is the current value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the \"pods\" metric source type. It will always be set, regardless of the corresponding metric specification.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "path": { + "description": "Path is the URL path of the request", + "type": "string" }, - "name": { - "description": "name is the name of the resource in question.", - "type": "string", - "default": "" + "verb": { + "description": "Verb is the standard HTTP verb", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2beta1", - "Kind": "ContainerResourceMetricStatus", + "Group": "authorization.k8s.io", + "Version": "v1beta1", + "Kind": "NonResourceAttributes", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta1.CrossVersionObjectReference": { - "description": "CrossVersionObjectReference contains enough information to let you identify the referred resource.", + "io.k8s.api.authorization.v1beta1.NonResourceRule": { + "description": "NonResourceRule holds information that describes a rule for the non-resource", "type": "object", "required": [ - "kind", - "name" + "verbs" ], "properties": { - "apiVersion": { - "description": "API version of the referent", - "type": "string" - }, - "kind": { - "description": "Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string", - "default": "" + "nonResourceURLs": { + "description": "NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path. \"*\" means all.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "name": { - "description": "Name of the referent; More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - "type": "string", - "default": "" + "verbs": { + "description": "Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options. \"*\" means all.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2beta1", - "Kind": "CrossVersionObjectReference", + "Group": "authorization.k8s.io", + "Version": "v1beta1", + "Kind": "NonResourceRule", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta1.ExternalMetricSource": { - "description": "ExternalMetricSource indicates how to scale on a metric not associated with any Kubernetes object (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster). Exactly one \"target\" type should be set.", + "io.k8s.api.authorization.v1beta1.ResourceAttributes": { + "description": "ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface", "type": "object", - "required": [ - "metricName" - ], "properties": { - "metricName": { - "description": "metricName is the name of the metric in question.", - "type": "string", - "default": "" + "fieldSelector": { + "description": "fieldSelector describes the limitation on access based on field. It can only limit access, not broaden it.", + "$ref": "#/definitions/io.k8s.api.authorization.v1.FieldSelectorAttributes" }, - "metricSelector": { - "description": "metricSelector is used to identify a specific time series within a given metric.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "group": { + "description": "Group is the API Group of the Resource. \"*\" means all.", + "type": "string" }, - "targetAverageValue": { - "description": "targetAverageValue is the target per-pod value of global metric (as a quantity). Mutually exclusive with TargetValue.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "labelSelector": { + "description": "labelSelector describes the limitation on access based on labels. It can only limit access, not broaden it.", + "$ref": "#/definitions/io.k8s.api.authorization.v1.LabelSelectorAttributes" }, - "targetValue": { - "description": "targetValue is the target value of the metric (as a quantity). Mutually exclusive with TargetAverageValue.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "name": { + "description": "Name is the name of the resource being requested for a \"get\" or deleted for a \"delete\". \"\" (empty) means all.", + "type": "string" + }, + "namespace": { + "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces \"\" (empty) is defaulted for LocalSubjectAccessReviews \"\" (empty) is empty for cluster-scoped resources \"\" (empty) means \"all\" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview", + "type": "string" + }, + "resource": { + "description": "Resource is one of the existing resource types. \"*\" means all.", + "type": "string" + }, + "subresource": { + "description": "Subresource is one of the existing resource types. \"\" means none.", + "type": "string" + }, + "verb": { + "description": "Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. \"*\" means all.", + "type": "string" + }, + "version": { + "description": "Version is the API Version of the Resource. \"*\" means all.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2beta1", - "Kind": "ExternalMetricSource", + "Group": "authorization.k8s.io", + "Version": "v1beta1", + "Kind": "ResourceAttributes", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta1.ExternalMetricStatus": { - "description": "ExternalMetricStatus indicates the current value of a global metric not associated with any Kubernetes object.", + "io.k8s.api.authorization.v1beta1.ResourceRule": { + "description": "ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.", "type": "object", "required": [ - "metricName", - "currentValue" + "verbs" ], "properties": { - "currentAverageValue": { - "description": "currentAverageValue is the current value of metric averaged over autoscaled pods.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "apiGroups": { + "description": "APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. \"*\" means all.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "currentValue": { - "description": "currentValue is the current value of the metric (as a quantity)", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "resourceNames": { + "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed. \"*\" means all.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "metricName": { - "description": "metricName is the name of a metric used for autoscaling in metric system.", - "type": "string", - "default": "" + "resources": { + "description": "Resources is a list of resources this rule applies to. \"*\" means all in the specified apiGroups.\n \"*/foo\" represents the subresource 'foo' for all resources in the specified apiGroups.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "metricSelector": { - "description": "metricSelector is used to identify a specific time series within a given metric.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "verbs": { + "description": "Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy. \"*\" means all.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2beta1", - "Kind": "ExternalMetricStatus", + "Group": "authorization.k8s.io", + "Version": "v1beta1", + "Kind": "ResourceRule", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler": { - "description": "HorizontalPodAutoscaler is the configuration for a horizontal pod autoscaler, which automatically manages the replica count of any resource implementing the scale subresource based on the metrics specified.", + "io.k8s.api.authorization.v1beta1.SelfSubjectAccessReview": { + "description": "SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means \"in all namespaces\". Self is a special case, because users should always be able to check whether they can perform an action", "type": "object", + "required": [ + "spec" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -25359,245 +24850,686 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.", + "description": "Spec holds information about the request being evaluated. user and groups must be empty", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerSpec" + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectAccessReviewSpec" }, "status": { - "description": "status is the current information about the autoscaler.", + "description": "Status is filled in by the server and indicates whether the request is allowed or not", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerStatus" + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReviewStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "", - "Version": "v2beta1", - "Kind": "HorizontalPodAutoscaler", + "Group": "authorization.k8s.io", + "Version": "v1beta1", + "Kind": "SelfSubjectAccessReview", + "Scope": "Clustered" + } + }, + "io.k8s.api.authorization.v1beta1.SelfSubjectAccessReviewSpec": { + "description": "SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set", + "type": "object", + "properties": { + "nonResourceAttributes": { + "description": "NonResourceAttributes describes information for a non-resource access request", + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.NonResourceAttributes" + }, + "resourceAttributes": { + "description": "ResourceAuthorizationAttributes describes information for a resource access request", + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.ResourceAttributes" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "authorization.k8s.io", + "Version": "v1beta1", + "Kind": "SelfSubjectAccessReviewSpec", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerCondition": { - "description": "HorizontalPodAutoscalerCondition describes the state of a HorizontalPodAutoscaler at a certain point.", + "io.k8s.api.authorization.v1beta1.SelfSubjectRulesReview": { + "description": "SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.", "type": "object", "required": [ - "type", - "status" + "spec" ], "properties": { - "lastTransitionTime": { - "description": "lastTransitionTime is the last time the condition transitioned from one status to another", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "message is a human-readable explanation containing details about the transition", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "reason": { - "description": "reason is the reason for the condition's last transition.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "status": { - "description": "status is the status of the condition (True, False, Unknown)", - "type": "string", - "default": "" + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "type": { - "description": "type describes the current condition", - "type": "string", - "default": "" + "spec": { + "description": "Spec holds information about the request being evaluated.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SelfSubjectRulesReviewSpec" + }, + "status": { + "description": "Status is filled in by the server and indicates the set of actions a user can perform.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectRulesReviewStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "authorization.k8s.io", + "Version": "v1beta1", + "Kind": "SelfSubjectRulesReview", + "Scope": "Clustered" + } + }, + "io.k8s.api.authorization.v1beta1.SelfSubjectRulesReviewSpec": { + "description": "SelfSubjectRulesReviewSpec defines the specification for SelfSubjectRulesReview.", + "type": "object", + "properties": { + "namespace": { + "description": "Namespace to evaluate rules for. Required.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2beta1", - "Kind": "HorizontalPodAutoscalerCondition", + "Group": "authorization.k8s.io", + "Version": "v1beta1", + "Kind": "SelfSubjectRulesReviewSpec", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerList": { - "description": "HorizontalPodAutoscaler is a list of horizontal pod autoscaler objects.", + "io.k8s.api.authorization.v1beta1.SubjectAccessReview": { + "description": "SubjectAccessReview checks whether or not a user or group can perform an action.", "type": "object", "required": [ - "items" + "spec" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "items is the list of horizontal pod autoscaler objects.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler" - } - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "metadata is the standard list metadata.", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "Spec holds information about the request being evaluated", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReviewSpec" + }, + "status": { + "description": "Status is filled in by the server and indicates whether the request is allowed or not", + "default": {}, + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.SubjectAccessReviewStatus" } }, "x-fabric8-info": { - "Type": "list", - "Group": "", - "Version": "v2beta1", - "Kind": "HorizontalPodAutoscalerList", - "Scope": "Namespaced" + "Type": "object", + "Group": "authorization.k8s.io", + "Version": "v1beta1", + "Kind": "SubjectAccessReview", + "Scope": "Clustered" } }, - "io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerSpec": { - "description": "HorizontalPodAutoscalerSpec describes the desired functionality of the HorizontalPodAutoscaler.", + "io.k8s.api.authorization.v1beta1.SubjectAccessReviewSpec": { + "description": "SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set", "type": "object", - "required": [ - "scaleTargetRef", - "maxReplicas" - ], "properties": { - "maxReplicas": { - "description": "maxReplicas is the upper limit for the number of replicas to which the autoscaler can scale up. It cannot be less that minReplicas.", - "type": "integer", - "format": "int32", - "default": 0 + "extra": { + "description": "Extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here.", + "type": "object", + "additionalProperties": { + "type": "array", + "items": { + "type": "string", + "default": "" + } + } }, - "metrics": { - "description": "metrics contains the specifications for which to use to calculate the desired replica count (the maximum replica count across all metrics will be used). The desired replica count is calculated multiplying the ratio between the target value and the current value by the current number of pods. Ergo, metrics used must decrease as the pod count is increased, and vice-versa. See the individual metric source types for more information about how each type of metric must respond.", + "group": { + "description": "Groups is the groups you're testing for.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.MetricSpec" + "type": "string", + "default": "" }, "x-kubernetes-list-type": "atomic" }, - "minReplicas": { - "description": "minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down. It defaults to 1 pod. minReplicas is allowed to be 0 if the alpha feature gate HPAScaleToZero is enabled and at least one Object or External metric is configured. Scaling is active as long as at least one metric value is available.", - "type": "integer", - "format": "int32" + "nonResourceAttributes": { + "description": "NonResourceAttributes describes information for a non-resource access request", + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.NonResourceAttributes" }, - "scaleTargetRef": { - "description": "scaleTargetRef points to the target resource to scale, and is used to the pods for which metrics should be collected, as well as to actually change the replica count.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.CrossVersionObjectReference" + "resourceAttributes": { + "description": "ResourceAuthorizationAttributes describes information for a resource access request", + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.ResourceAttributes" + }, + "uid": { + "description": "UID information about the requesting user.", + "type": "string" + }, + "user": { + "description": "User is the user you're testing for. If you specify \"User\" but not \"Group\", then is it interpreted as \"What if User were not a member of any groups", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2beta1", - "Kind": "HorizontalPodAutoscalerSpec", + "Group": "authorization.k8s.io", + "Version": "v1beta1", + "Kind": "SubjectAccessReviewSpec", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerStatus": { - "description": "HorizontalPodAutoscalerStatus describes the current status of a horizontal pod autoscaler.", + "io.k8s.api.authorization.v1beta1.SubjectAccessReviewStatus": { + "description": "SubjectAccessReviewStatus", "type": "object", "required": [ - "currentReplicas", - "desiredReplicas" + "allowed" ], "properties": { - "conditions": { - "description": "conditions is the set of conditions required for this autoscaler to scale its target, and indicates whether or not those conditions are met.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerCondition" - }, - "x-kubernetes-list-type": "atomic" - }, - "currentMetrics": { - "description": "currentMetrics is the last read state of the metrics used by this autoscaler.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.MetricStatus" - }, - "x-kubernetes-list-type": "atomic" - }, - "currentReplicas": { - "description": "currentReplicas is current number of replicas of pods managed by this autoscaler, as last seen by the autoscaler.", - "type": "integer", - "format": "int32", - "default": 0 + "allowed": { + "description": "Allowed is required. True if the action would be allowed, false otherwise.", + "type": "boolean", + "default": false }, - "desiredReplicas": { - "description": "desiredReplicas is the desired number of replicas of pods managed by this autoscaler, as last calculated by the autoscaler.", - "type": "integer", - "format": "int32", - "default": 0 + "denied": { + "description": "Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.", + "type": "boolean" }, - "lastScaleTime": { - "description": "lastScaleTime is the last time the HorizontalPodAutoscaler scaled the number of pods, used by the autoscaler to control how often the number of pods is changed.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "evaluationError": { + "description": "EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.", + "type": "string" }, - "observedGeneration": { - "description": "observedGeneration is the most recent generation observed by this autoscaler.", - "type": "integer", - "format": "int64" + "reason": { + "description": "Reason is optional. It indicates why a request was allowed or denied.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v2beta1", - "Kind": "HorizontalPodAutoscalerStatus", + "Group": "authorization.k8s.io", + "Version": "v1beta1", + "Kind": "SubjectAccessReviewStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta1.MetricSpec": { - "description": "MetricSpec specifies how to scale based on a single metric (only `type` and one other matching field should be set at once).", + "io.k8s.api.authorization.v1beta1.SubjectRulesReviewStatus": { + "description": "SubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.", "type": "object", "required": [ - "type" + "resourceRules", + "nonResourceRules", + "incomplete" ], "properties": { - "containerResource": { - "description": "container resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod of the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. This is an alpha feature and can be enabled by the HPAContainerMetrics feature flag.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ContainerResourceMetricSource" + "evaluationError": { + "description": "EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.", + "type": "string" + }, + "incomplete": { + "description": "Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.", + "type": "boolean", + "default": false + }, + "nonResourceRules": { + "description": "NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.NonResourceRule" + }, + "x-kubernetes-list-type": "atomic" + }, + "resourceRules": { + "description": "ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.authorization.v1beta1.ResourceRule" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "authorization.k8s.io", + "Version": "v1beta1", + "Kind": "SubjectRulesReviewStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.autoscaling.v1.ContainerResourceMetricSource": { + "description": "ContainerResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in the requests and limits, describing a single container in each of the pods of the current scale target(e.g. CPU or memory). The values will be averaged together before being compared to the target. Such metrics are built into Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. Only one \"target\" type should be set.", + "type": "object", + "required": [ + "name", + "container" + ], + "properties": { + "container": { + "description": "container is the name of the container in the pods of the scaling target.", + "type": "string", + "default": "" + }, + "name": { + "description": "name is the name of the resource in question.", + "type": "string", + "default": "" + }, + "targetAverageUtilization": { + "description": "targetAverageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.", + "type": "integer", + "format": "int32" + }, + "targetAverageValue": { + "description": "targetAverageValue is the target value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the \"pods\" metric source type.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ContainerResourceMetricSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.autoscaling.v1.ContainerResourceMetricStatus": { + "description": "ContainerResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "type": "object", + "required": [ + "name", + "currentAverageValue", + "container" + ], + "properties": { + "container": { + "description": "container is the name of the container in the pods of the scaling taget", + "type": "string", + "default": "" + }, + "currentAverageUtilization": { + "description": "currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. It will only be present if `targetAverageValue` was set in the corresponding metric specification.", + "type": "integer", + "format": "int32" + }, + "currentAverageValue": { + "description": "currentAverageValue is the current value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the \"pods\" metric source type. It will always be set, regardless of the corresponding metric specification.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "name": { + "description": "name is the name of the resource in question.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ContainerResourceMetricStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.autoscaling.v1.CrossVersionObjectReference": { + "description": "CrossVersionObjectReference contains enough information to let you identify the referred resource.", + "type": "object", + "required": [ + "kind", + "name" + ], + "properties": { + "apiVersion": { + "description": "apiVersion is the API version of the referent", + "type": "string" + }, + "kind": { + "description": "kind is the kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string", + "default": "" + }, + "name": { + "description": "name is the name of the referent; More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "CrossVersionObjectReference", + "Scope": "Namespaced" + }, + "x-kubernetes-map-type": "atomic" + }, + "io.k8s.api.autoscaling.v1.ExternalMetricSource": { + "description": "ExternalMetricSource indicates how to scale on a metric not associated with any Kubernetes object (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).", + "type": "object", + "required": [ + "metricName" + ], + "properties": { + "metricName": { + "description": "metricName is the name of the metric in question.", + "type": "string", + "default": "" + }, + "metricSelector": { + "description": "metricSelector is used to identify a specific time series within a given metric.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "targetAverageValue": { + "description": "targetAverageValue is the target per-pod value of global metric (as a quantity). Mutually exclusive with TargetValue.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "targetValue": { + "description": "targetValue is the target value of the metric (as a quantity). Mutually exclusive with TargetAverageValue.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ExternalMetricSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.autoscaling.v1.ExternalMetricStatus": { + "description": "ExternalMetricStatus indicates the current value of a global metric not associated with any Kubernetes object.", + "type": "object", + "required": [ + "metricName", + "currentValue" + ], + "properties": { + "currentAverageValue": { + "description": "currentAverageValue is the current value of metric averaged over autoscaled pods.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "currentValue": { + "description": "currentValue is the current value of the metric (as a quantity)", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "metricName": { + "description": "metricName is the name of a metric used for autoscaling in metric system.", + "type": "string", + "default": "" + }, + "metricSelector": { + "description": "metricSelector is used to identify a specific time series within a given metric.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ExternalMetricStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler": { + "description": "configuration of a horizontal pod autoscaler.", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "spec defines the behaviour of autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerSpec" + }, + "status": { + "description": "status is the current information about the autoscaler.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "HorizontalPodAutoscaler", + "Scope": "Namespaced" + } + }, + "io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerCondition": { + "description": "HorizontalPodAutoscalerCondition describes the state of a HorizontalPodAutoscaler at a certain point.", + "type": "object", + "required": [ + "type", + "status" + ], + "properties": { + "lastTransitionTime": { + "description": "lastTransitionTime is the last time the condition transitioned from one status to another", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "message is a human-readable explanation containing details about the transition", + "type": "string" + }, + "reason": { + "description": "reason is the reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "status is the status of the condition (True, False, Unknown)", + "type": "string", + "default": "" + }, + "type": { + "description": "type describes the current condition", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "HorizontalPodAutoscalerCondition", + "Scope": "Namespaced" + } + }, + "io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerList": { + "description": "list of horizontal pod autoscaler objects.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is the list of horizontal pod autoscaler objects.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.HorizontalPodAutoscaler" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "", + "Version": "v1", + "Kind": "HorizontalPodAutoscalerList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerSpec": { + "description": "specification of a horizontal pod autoscaler.", + "type": "object", + "required": [ + "scaleTargetRef", + "maxReplicas" + ], + "properties": { + "maxReplicas": { + "description": "maxReplicas is the upper limit for the number of pods that can be set by the autoscaler; cannot be smaller than MinReplicas.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "minReplicas": { + "description": "minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down. It defaults to 1 pod. minReplicas is allowed to be 0 if the alpha feature gate HPAScaleToZero is enabled and at least one Object or External metric is configured. Scaling is active as long as at least one metric value is available.", + "type": "integer", + "format": "int32" + }, + "scaleTargetRef": { + "description": "reference to scaled resource; horizontal pod autoscaler will learn the current resource consumption and will set the desired number of pods by using its Scale subresource.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.CrossVersionObjectReference" + }, + "targetCPUUtilizationPercentage": { + "description": "targetCPUUtilizationPercentage is the target average CPU utilization (represented as a percentage of requested CPU) over all the pods; if not specified the default autoscaling policy will be used.", + "type": "integer", + "format": "int32" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "HorizontalPodAutoscalerSpec", + "Scope": "Namespaced" + } + }, + "io.k8s.api.autoscaling.v1.HorizontalPodAutoscalerStatus": { + "description": "current status of a horizontal pod autoscaler", + "type": "object", + "required": [ + "currentReplicas", + "desiredReplicas" + ], + "properties": { + "currentCPUUtilizationPercentage": { + "description": "currentCPUUtilizationPercentage is the current average CPU utilization over all pods, represented as a percentage of requested CPU, e.g. 70 means that an average pod is using now 70% of its requested CPU.", + "type": "integer", + "format": "int32" + }, + "currentReplicas": { + "description": "currentReplicas is the current number of replicas of pods managed by this autoscaler.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "desiredReplicas": { + "description": "desiredReplicas is the desired number of replicas of pods managed by this autoscaler.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "lastScaleTime": { + "description": "lastScaleTime is the last time the HorizontalPodAutoscaler scaled the number of pods; used by the autoscaler to control how often the number of pods is changed.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "observedGeneration": { + "description": "observedGeneration is the most recent generation observed by this autoscaler.", + "type": "integer", + "format": "int64" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "HorizontalPodAutoscalerStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.autoscaling.v1.MetricSpec": { + "description": "MetricSpec specifies how to scale based on a single metric (only `type` and one other matching field should be set at once).", + "type": "object", + "required": [ + "type" + ], + "properties": { + "containerResource": { + "description": "containerResource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod of the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. This is an alpha feature and can be enabled by the HPAContainerMetrics feature flag.", + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ContainerResourceMetricSource" }, "external": { "description": "external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ExternalMetricSource" + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ExternalMetricSource" }, "object": { "description": "object refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object).", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ObjectMetricSource" + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ObjectMetricSource" }, "pods": { "description": "pods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.PodsMetricSource" + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.PodsMetricSource" }, "resource": { "description": "resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ResourceMetricSource" + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ResourceMetricSource" }, "type": { - "description": "type is the type of metric source. It should be one of \"ContainerResource\", \"External\", \"Object\", \"Pods\" or \"Resource\", each mapping to a matching field in the object. Note: \"ContainerResource\" type is available on when the feature-gate HPAContainerMetrics is enabled", + "description": "type is the type of metric source. It should be one of \"ContainerResource\", \"External\", \"Object\", \"Pods\" or \"Resource\", each mapping to a matching field in the object. Note: \"ContainerResource\" type is available on when the feature-gate HPAContainerMetrics is enabled\n\nPossible enum values:\n - `\"ContainerResource\"` is a resource metric known to Kubernetes, as specified in requests and limits, describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics (the \"pods\" source).\n - `\"External\"` is a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).\n - `\"Object\"` is a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).\n - `\"Pods\"` is a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.\n - `\"Resource\"` is a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics (the \"pods\" source).", "type": "string", - "default": "" + "default": "", + "enum": [ + "ContainerResource", + "External", + "Object", + "Pods", + "Resource" + ] } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta1", + "Version": "v1", "Kind": "MetricSpec", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta1.MetricStatus": { + "io.k8s.api.autoscaling.v1.MetricStatus": { "description": "MetricStatus describes the last-read state of a single metric.", "type": "object", "required": [ @@ -25605,40 +25537,47 @@ ], "properties": { "containerResource": { - "description": "container resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ContainerResourceMetricStatus" + "description": "containerResource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ContainerResourceMetricStatus" }, "external": { "description": "external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ExternalMetricStatus" + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ExternalMetricStatus" }, "object": { "description": "object refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object).", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ObjectMetricStatus" + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ObjectMetricStatus" }, "pods": { "description": "pods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.PodsMetricStatus" + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.PodsMetricStatus" }, "resource": { "description": "resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ResourceMetricStatus" + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ResourceMetricStatus" }, "type": { - "description": "type is the type of metric source. It will be one of \"ContainerResource\", \"External\", \"Object\", \"Pods\" or \"Resource\", each corresponds to a matching field in the object. Note: \"ContainerResource\" type is available on when the feature-gate HPAContainerMetrics is enabled", + "description": "type is the type of metric source. It will be one of \"ContainerResource\", \"External\", \"Object\", \"Pods\" or \"Resource\", each corresponds to a matching field in the object. Note: \"ContainerResource\" type is available on when the feature-gate HPAContainerMetrics is enabled\n\nPossible enum values:\n - `\"ContainerResource\"` is a resource metric known to Kubernetes, as specified in requests and limits, describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics (the \"pods\" source).\n - `\"External\"` is a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).\n - `\"Object\"` is a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).\n - `\"Pods\"` is a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.\n - `\"Resource\"` is a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics (the \"pods\" source).", "type": "string", - "default": "" + "default": "", + "enum": [ + "ContainerResource", + "External", + "Object", + "Pods", + "Resource" + ] } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta1", + "Version": "v1", "Kind": "MetricStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta1.ObjectMetricSource": { + "io.k8s.api.autoscaling.v1.ObjectMetricSource": { "description": "ObjectMetricSource indicates how to scale on a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).", "type": "object", "required": [ @@ -25657,13 +25596,13 @@ "default": "" }, "selector": { - "description": "selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping When unset, just the metricName will be used to gather metrics.", + "description": "selector is the string-encoded form of a standard kubernetes label selector for the given metric. When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping When unset, just the metricName will be used to gather metrics.", "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" }, "target": { "description": "target is the described Kubernetes object.", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.CrossVersionObjectReference" + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.CrossVersionObjectReference" }, "targetValue": { "description": "targetValue is the target value of the metric (as a quantity).", @@ -25673,12 +25612,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta1", + "Version": "v1", "Kind": "ObjectMetricSource", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta1.ObjectMetricStatus": { + "io.k8s.api.autoscaling.v1.ObjectMetricStatus": { "description": "ObjectMetricStatus indicates the current value of a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).", "type": "object", "required": [ @@ -25707,18 +25646,18 @@ "target": { "description": "target is the described Kubernetes object.", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.CrossVersionObjectReference" + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.CrossVersionObjectReference" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta1", + "Version": "v1", "Kind": "ObjectMetricStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta1.PodsMetricSource": { + "io.k8s.api.autoscaling.v1.PodsMetricSource": { "description": "PodsMetricSource indicates how to scale on a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.", "type": "object", "required": [ @@ -25743,12 +25682,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta1", + "Version": "v1", "Kind": "PodsMetricSource", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta1.PodsMetricStatus": { + "io.k8s.api.autoscaling.v1.PodsMetricStatus": { "description": "PodsMetricStatus indicates the current value of a metric describing each pod in the current scale target (for example, transactions-processed-per-second).", "type": "object", "required": [ @@ -25773,12 +25712,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta1", + "Version": "v1", "Kind": "PodsMetricStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta1.ResourceMetricSource": { + "io.k8s.api.autoscaling.v1.ResourceMetricSource": { "description": "ResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). The values will be averaged together before being compared to the target. Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. Only one \"target\" type should be set.", "type": "object", "required": [ @@ -25803,12 +25742,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta1", + "Version": "v1", "Kind": "ResourceMetricSource", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta1.ResourceMetricStatus": { + "io.k8s.api.autoscaling.v1.ResourceMetricStatus": { "description": "ResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", "type": "object", "required": [ @@ -25834,45 +25773,125 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta1", + "Version": "v1", "Kind": "ResourceMetricStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.ContainerResourceMetricSource": { - "description": "ContainerResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). The values will be averaged together before being compared to the target. Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. Only one \"target\" type should be set.", + "io.k8s.api.autoscaling.v1.Scale": { + "description": "Scale represents a scaling request for a resource.", "type": "object", - "required": [ - "name", - "target", - "container" - ], "properties": { - "container": { - "description": "container is the name of the container in the pods of the scaling target", - "type": "string", - "default": "" - }, - "name": { - "description": "name is the name of the resource in question.", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "target": { + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "spec defines the behavior of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ScaleSpec" + }, + "status": { + "description": "status is the current status of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. Read-only.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v1.ScaleStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "Scale", + "Scope": "Namespaced" + } + }, + "io.k8s.api.autoscaling.v1.ScaleSpec": { + "description": "ScaleSpec describes the attributes of a scale subresource.", + "type": "object", + "properties": { + "replicas": { + "description": "replicas is the desired number of instances for the scaled object.", + "type": "integer", + "format": "int32" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ScaleSpec", + "Scope": "Namespaced" + } + }, + "io.k8s.api.autoscaling.v1.ScaleStatus": { + "description": "ScaleStatus represents the current status of a scale subresource.", + "type": "object", + "required": [ + "replicas" + ], + "properties": { + "replicas": { + "description": "replicas is the actual number of observed instances of the scaled object.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "selector": { + "description": "selector is the label query over pods that should match the replicas count. This is same as the label selector but in the string format to avoid introspection by clients. The string will be in the same format as the query-param syntax. More info about label selectors: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ScaleStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.autoscaling.v2.ContainerResourceMetricSource": { + "description": "ContainerResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). The values will be averaged together before being compared to the target. Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. Only one \"target\" type should be set.", + "type": "object", + "required": [ + "name", + "target", + "container" + ], + "properties": { + "container": { + "description": "container is the name of the container in the pods of the scaling target", + "type": "string", + "default": "" + }, + "name": { + "description": "name is the name of the resource in question.", + "type": "string", + "default": "" + }, + "target": { "description": "target specifies the target value for the given metric", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricTarget" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricTarget" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "ContainerResourceMetricSource", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.ContainerResourceMetricStatus": { + "io.k8s.api.autoscaling.v2.ContainerResourceMetricStatus": { "description": "ContainerResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", "type": "object", "required": [ @@ -25889,7 +25908,7 @@ "current": { "description": "current contains the current value for the given metric", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricValueStatus" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricValueStatus" }, "name": { "description": "name is the name of the resource in question.", @@ -25900,12 +25919,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "ContainerResourceMetricStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.CrossVersionObjectReference": { + "io.k8s.api.autoscaling.v2.CrossVersionObjectReference": { "description": "CrossVersionObjectReference contains enough information to let you identify the referred resource.", "type": "object", "required": [ @@ -25931,12 +25950,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "CrossVersionObjectReference", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.ExternalMetricSource": { + "io.k8s.api.autoscaling.v2.ExternalMetricSource": { "description": "ExternalMetricSource indicates how to scale on a metric not associated with any Kubernetes object (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).", "type": "object", "required": [ @@ -25947,23 +25966,23 @@ "metric": { "description": "metric identifies the target metric by name and selector", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricIdentifier" }, "target": { "description": "target specifies the target value for the given metric", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricTarget" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricTarget" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "ExternalMetricSource", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.ExternalMetricStatus": { + "io.k8s.api.autoscaling.v2.ExternalMetricStatus": { "description": "ExternalMetricStatus indicates the current value of a global metric not associated with any Kubernetes object.", "type": "object", "required": [ @@ -25974,23 +25993,23 @@ "current": { "description": "current contains the current value for the given metric", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricValueStatus" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricValueStatus" }, "metric": { "description": "metric identifies the target metric by name and selector", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricIdentifier" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "ExternalMetricStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.HPAScalingPolicy": { + "io.k8s.api.autoscaling.v2.HPAScalingPolicy": { "description": "HPAScalingPolicy is a single policy which must hold true for a specified past interval.", "type": "object", "required": [ @@ -26020,12 +26039,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "HPAScalingPolicy", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.HPAScalingRules": { + "io.k8s.api.autoscaling.v2.HPAScalingRules": { "description": "HPAScalingRules configures the scaling behavior for one direction. These Rules are applied after calculating DesiredReplicas from metrics for the HPA. They can limit the scaling velocity by specifying scaling policies. They can prevent flapping by specifying the stabilization window, so that the number of replicas is not set instantly, instead, the safest value from the stabilization window is chosen.", "type": "object", "properties": { @@ -26034,12 +26053,12 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HPAScalingPolicy" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.HPAScalingPolicy" }, "x-kubernetes-list-type": "atomic" }, "selectPolicy": { - "description": "selectPolicy is used to specify which policy should be used. If not set, the default value MaxPolicySelect is used.", + "description": "selectPolicy is used to specify which policy should be used. If not set, the default value Max is used.", "type": "string" }, "stabilizationWindowSeconds": { @@ -26051,12 +26070,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "HPAScalingRules", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler": { + "io.k8s.api.autoscaling.v2.HorizontalPodAutoscaler": { "description": "HorizontalPodAutoscaler is the configuration for a horizontal pod autoscaler, which automatically manages the replica count of any resource implementing the scale subresource based on the metrics specified.", "type": "object", "properties": { @@ -26076,44 +26095,44 @@ "spec": { "description": "spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerSpec" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.HorizontalPodAutoscalerSpec" }, "status": { "description": "status is the current information about the autoscaler.", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerStatus" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.HorizontalPodAutoscalerStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "HorizontalPodAutoscaler", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerBehavior": { + "io.k8s.api.autoscaling.v2.HorizontalPodAutoscalerBehavior": { "description": "HorizontalPodAutoscalerBehavior configures the scaling behavior of the target in both Up and Down directions (scaleUp and scaleDown fields respectively).", "type": "object", "properties": { "scaleDown": { "description": "scaleDown is scaling policy for scaling Down. If not set, the default value is to allow to scale down to minReplicas pods, with a 300 second stabilization window (i.e., the highest recommendation for the last 300sec is used).", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HPAScalingRules" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.HPAScalingRules" }, "scaleUp": { "description": "scaleUp is scaling policy for scaling Up. If not set, the default value is the higher of:\n * increase no more than 4 pods per 60 seconds\n * double the number of pods per 60 seconds\nNo stabilization is used.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HPAScalingRules" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.HPAScalingRules" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "HorizontalPodAutoscalerBehavior", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerCondition": { + "io.k8s.api.autoscaling.v2.HorizontalPodAutoscalerCondition": { "description": "HorizontalPodAutoscalerCondition describes the state of a HorizontalPodAutoscaler at a certain point.", "type": "object", "required": [ @@ -26147,12 +26166,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "HorizontalPodAutoscalerCondition", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerList": { + "io.k8s.api.autoscaling.v2.HorizontalPodAutoscalerList": { "description": "HorizontalPodAutoscalerList is a list of horizontal pod autoscaler objects.", "type": "object", "required": [ @@ -26168,7 +26187,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.HorizontalPodAutoscaler" } }, "kind": { @@ -26184,12 +26203,12 @@ "x-fabric8-info": { "Type": "list", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "HorizontalPodAutoscalerList", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerSpec": { + "io.k8s.api.autoscaling.v2.HorizontalPodAutoscalerSpec": { "description": "HorizontalPodAutoscalerSpec describes the desired functionality of the HorizontalPodAutoscaler.", "type": "object", "required": [ @@ -26199,7 +26218,7 @@ "properties": { "behavior": { "description": "behavior configures the scaling behavior of the target in both Up and Down directions (scaleUp and scaleDown fields respectively). If not set, the default HPAScalingRules for scale up and scale down are used.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerBehavior" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.HorizontalPodAutoscalerBehavior" }, "maxReplicas": { "description": "maxReplicas is the upper limit for the number of replicas to which the autoscaler can scale up. It cannot be less that minReplicas.", @@ -26212,7 +26231,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricSpec" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricSpec" }, "x-kubernetes-list-type": "atomic" }, @@ -26224,22 +26243,21 @@ "scaleTargetRef": { "description": "scaleTargetRef points to the target resource to scale, and is used to the pods for which metrics should be collected, as well as to actually change the replica count.", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.CrossVersionObjectReference" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.CrossVersionObjectReference" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "HorizontalPodAutoscalerSpec", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerStatus": { + "io.k8s.api.autoscaling.v2.HorizontalPodAutoscalerStatus": { "description": "HorizontalPodAutoscalerStatus describes the current status of a horizontal pod autoscaler.", "type": "object", "required": [ - "currentReplicas", "desiredReplicas" ], "properties": { @@ -26248,24 +26266,28 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerCondition" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.HorizontalPodAutoscalerCondition" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" }, "currentMetrics": { "description": "currentMetrics is the last read state of the metrics used by this autoscaler.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricStatus" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricStatus" }, "x-kubernetes-list-type": "atomic" }, "currentReplicas": { "description": "currentReplicas is current number of replicas of pods managed by this autoscaler, as last seen by the autoscaler.", "type": "integer", - "format": "int32", - "default": 0 + "format": "int32" }, "desiredReplicas": { "description": "desiredReplicas is the desired number of replicas of pods managed by this autoscaler, as last calculated by the autoscaler.", @@ -26286,12 +26308,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "HorizontalPodAutoscalerStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.MetricIdentifier": { + "io.k8s.api.autoscaling.v2.MetricIdentifier": { "description": "MetricIdentifier defines the name and optionally selector for a metric", "type": "object", "required": [ @@ -26311,12 +26333,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "MetricIdentifier", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.MetricSpec": { + "io.k8s.api.autoscaling.v2.MetricSpec": { "description": "MetricSpec specifies how to scale based on a single metric (only `type` and one other matching field should be set at once).", "type": "object", "required": [ @@ -26324,24 +26346,24 @@ ], "properties": { "containerResource": { - "description": "container resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod of the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. This is an alpha feature and can be enabled by the HPAContainerMetrics feature flag.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ContainerResourceMetricSource" + "description": "containerResource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod of the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. This is an alpha feature and can be enabled by the HPAContainerMetrics feature flag.", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.ContainerResourceMetricSource" }, "external": { "description": "external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ExternalMetricSource" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.ExternalMetricSource" }, "object": { "description": "object refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object).", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ObjectMetricSource" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.ObjectMetricSource" }, "pods": { "description": "pods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.PodsMetricSource" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.PodsMetricSource" }, "resource": { "description": "resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ResourceMetricSource" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.ResourceMetricSource" }, "type": { "description": "type is the type of metric source. It should be one of \"ContainerResource\", \"External\", \"Object\", \"Pods\" or \"Resource\", each mapping to a matching field in the object. Note: \"ContainerResource\" type is available on when the feature-gate HPAContainerMetrics is enabled", @@ -26352,12 +26374,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "MetricSpec", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.MetricStatus": { + "io.k8s.api.autoscaling.v2.MetricStatus": { "description": "MetricStatus describes the last-read state of a single metric.", "type": "object", "required": [ @@ -26365,24 +26387,24 @@ ], "properties": { "containerResource": { - "description": "containerResource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ContainerResourceMetricStatus" + "description": "container resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.ContainerResourceMetricStatus" }, "external": { "description": "external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ExternalMetricStatus" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.ExternalMetricStatus" }, "object": { "description": "object refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object).", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ObjectMetricStatus" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.ObjectMetricStatus" }, "pods": { "description": "pods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.PodsMetricStatus" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.PodsMetricStatus" }, "resource": { "description": "resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ResourceMetricStatus" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.ResourceMetricStatus" }, "type": { "description": "type is the type of metric source. It will be one of \"ContainerResource\", \"External\", \"Object\", \"Pods\" or \"Resource\", each corresponds to a matching field in the object. Note: \"ContainerResource\" type is available on when the feature-gate HPAContainerMetrics is enabled", @@ -26393,12 +26415,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "MetricStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.MetricTarget": { + "io.k8s.api.autoscaling.v2.MetricTarget": { "description": "MetricTarget defines the target value, average value, or average utilization of a specific metric", "type": "object", "required": [ @@ -26427,17 +26449,17 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "MetricTarget", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.MetricValueStatus": { + "io.k8s.api.autoscaling.v2.MetricValueStatus": { "description": "MetricValueStatus holds the current value for a metric", "type": "object", "properties": { "averageUtilization": { - "description": "averageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.", + "description": "currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.", "type": "integer", "format": "int32" }, @@ -26453,12 +26475,12 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "MetricValueStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.ObjectMetricSource": { + "io.k8s.api.autoscaling.v2.ObjectMetricSource": { "description": "ObjectMetricSource indicates how to scale on a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).", "type": "object", "required": [ @@ -26468,29 +26490,30 @@ ], "properties": { "describedObject": { + "description": "describedObject specifies the descriptions of a object,such as kind,name apiVersion", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.CrossVersionObjectReference" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.CrossVersionObjectReference" }, "metric": { "description": "metric identifies the target metric by name and selector", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricIdentifier" }, "target": { "description": "target specifies the target value for the given metric", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricTarget" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricTarget" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "ObjectMetricSource", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.ObjectMetricStatus": { + "io.k8s.api.autoscaling.v2.ObjectMetricStatus": { "description": "ObjectMetricStatus indicates the current value of a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).", "type": "object", "required": [ @@ -26502,27 +26525,28 @@ "current": { "description": "current contains the current value for the given metric", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricValueStatus" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricValueStatus" }, "describedObject": { + "description": "DescribedObject specifies the descriptions of a object,such as kind,name apiVersion", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.CrossVersionObjectReference" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.CrossVersionObjectReference" }, "metric": { "description": "metric identifies the target metric by name and selector", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricIdentifier" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "ObjectMetricStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.PodsMetricSource": { + "io.k8s.api.autoscaling.v2.PodsMetricSource": { "description": "PodsMetricSource indicates how to scale on a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.", "type": "object", "required": [ @@ -26533,23 +26557,23 @@ "metric": { "description": "metric identifies the target metric by name and selector", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricIdentifier" }, "target": { "description": "target specifies the target value for the given metric", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricTarget" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricTarget" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "PodsMetricSource", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.PodsMetricStatus": { + "io.k8s.api.autoscaling.v2.PodsMetricStatus": { "description": "PodsMetricStatus indicates the current value of a metric describing each pod in the current scale target (for example, transactions-processed-per-second).", "type": "object", "required": [ @@ -26560,23 +26584,23 @@ "current": { "description": "current contains the current value for the given metric", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricValueStatus" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricValueStatus" }, "metric": { "description": "metric identifies the target metric by name and selector", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricIdentifier" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "PodsMetricStatus", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.ResourceMetricSource": { + "io.k8s.api.autoscaling.v2.ResourceMetricSource": { "description": "ResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). The values will be averaged together before being compared to the target. Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. Only one \"target\" type should be set.", "type": "object", "required": [ @@ -26592,18 +26616,18 @@ "target": { "description": "target specifies the target value for the given metric", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricTarget" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricTarget" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "ResourceMetricSource", "Scope": "Namespaced" } }, - "io.k8s.api.autoscaling.v2beta2.ResourceMetricStatus": { + "io.k8s.api.autoscaling.v2.ResourceMetricStatus": { "description": "ResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", "type": "object", "required": [ @@ -26614,7 +26638,7 @@ "current": { "description": "current contains the current value for the given metric", "default": {}, - "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricValueStatus" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2.MetricValueStatus" }, "name": { "description": "name is the name of the resource in question.", @@ -26625,175 +26649,184 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v2beta2", + "Version": "v2", "Kind": "ResourceMetricStatus", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1.CronJob": { - "description": "CronJob represents the configuration of a single cron job.", + "io.k8s.api.autoscaling.v2beta1.ContainerResourceMetricSource": { + "description": "ContainerResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). The values will be averaged together before being compared to the target. Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. Only one \"target\" type should be set.", "type": "object", + "required": [ + "name", + "container" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "container": { + "description": "container is the name of the container in the pods of the scaling target", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "name": { + "description": "name is the name of the resource in question.", + "type": "string", + "default": "" }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "targetAverageUtilization": { + "description": "targetAverageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.", + "type": "integer", + "format": "int32" }, - "spec": { - "description": "Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.batch.v1.CronJobSpec" + "targetAverageValue": { + "description": "targetAverageValue is the target value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the \"pods\" metric source type.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v2beta1", + "Kind": "ContainerResourceMetricSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.autoscaling.v2beta1.ContainerResourceMetricStatus": { + "description": "ContainerResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "type": "object", + "required": [ + "name", + "currentAverageValue", + "container" + ], + "properties": { + "container": { + "description": "container is the name of the container in the pods of the scaling target", + "type": "string", + "default": "" }, - "status": { - "description": "Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.batch.v1.CronJobStatus" + "currentAverageUtilization": { + "description": "currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. It will only be present if `targetAverageValue` was set in the corresponding metric specification.", + "type": "integer", + "format": "int32" + }, + "currentAverageValue": { + "description": "currentAverageValue is the current value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the \"pods\" metric source type. It will always be set, regardless of the corresponding metric specification.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "name": { + "description": "name is the name of the resource in question.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", + "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "CronJob", + "Version": "v2beta1", + "Kind": "ContainerResourceMetricStatus", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1.CronJobList": { - "description": "CronJobList is a collection of cron jobs.", + "io.k8s.api.autoscaling.v2beta1.CrossVersionObjectReference": { + "description": "CrossVersionObjectReference contains enough information to let you identify the referred resource.", "type": "object", "required": [ - "items" + "kind", + "name" ], "properties": { "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "description": "API version of the referent", "type": "string" }, - "items": { - "description": "items is the list of CronJobs.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.batch.v1.CronJob" - } - }, "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "description": "Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string", + "default": "" }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "name": { + "description": "Name of the referent; More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "list", + "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "CronJobList", + "Version": "v2beta1", + "Kind": "CrossVersionObjectReference", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1.CronJobSpec": { - "description": "CronJobSpec describes how the job execution will look like and when it will actually run.", + "io.k8s.api.autoscaling.v2beta1.ExternalMetricSource": { + "description": "ExternalMetricSource indicates how to scale on a metric not associated with any Kubernetes object (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster). Exactly one \"target\" type should be set.", "type": "object", "required": [ - "schedule", - "jobTemplate" + "metricName" ], "properties": { - "concurrencyPolicy": { - "description": "Specifies how to treat concurrent executions of a Job. Valid values are:\n\n- \"Allow\" (default): allows CronJobs to run concurrently; - \"Forbid\": forbids concurrent runs, skipping next run if previous run hasn't finished yet; - \"Replace\": cancels currently running job and replaces it with a new one\n\nPossible enum values:\n - `\"Allow\"` allows CronJobs to run concurrently.\n - `\"Forbid\"` forbids concurrent runs, skipping next run if previous hasn't finished yet.\n - `\"Replace\"` cancels currently running job and replaces it with a new one.", - "type": "string", - "enum": [ - "Allow", - "Forbid", - "Replace" - ] - }, - "failedJobsHistoryLimit": { - "description": "The number of failed finished jobs to retain. Value must be non-negative integer. Defaults to 1.", - "type": "integer", - "format": "int32" - }, - "jobTemplate": { - "description": "Specifies the job that will be created when executing a CronJob.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.batch.v1.JobTemplateSpec" - }, - "schedule": { - "description": "The schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.", + "metricName": { + "description": "metricName is the name of the metric in question.", "type": "string", "default": "" }, - "startingDeadlineSeconds": { - "description": "Optional deadline in seconds for starting the job if it misses scheduled time for any reason. Missed jobs executions will be counted as failed ones.", - "type": "integer", - "format": "int64" - }, - "successfulJobsHistoryLimit": { - "description": "The number of successful finished jobs to retain. Value must be non-negative integer. Defaults to 3.", - "type": "integer", - "format": "int32" + "metricSelector": { + "description": "metricSelector is used to identify a specific time series within a given metric.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" }, - "suspend": { - "description": "This flag tells the controller to suspend subsequent executions, it does not apply to already started executions. Defaults to false.", - "type": "boolean" + "targetAverageValue": { + "description": "targetAverageValue is the target per-pod value of global metric (as a quantity). Mutually exclusive with TargetValue.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" }, - "timeZone": { - "description": "The time zone name for the given schedule, see https://en.wikipedia.org/wiki/List_of_tz_database_time_zones. If not specified, this will default to the time zone of the kube-controller-manager process. The set of valid time zone names and the time zone offset is loaded from the system-wide time zone database by the API server during CronJob validation and the controller manager during execution. If no system-wide time zone database can be found a bundled version of the database is used instead. If the time zone name becomes invalid during the lifetime of a CronJob or due to a change in host configuration, the controller will stop creating new new Jobs and will create a system event with the reason UnknownTimeZone. More information can be found in https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/#time-zones", - "type": "string" + "targetValue": { + "description": "targetValue is the target value of the metric (as a quantity). Mutually exclusive with TargetAverageValue.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "CronJobSpec", + "Version": "v2beta1", + "Kind": "ExternalMetricSource", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1.CronJobStatus": { - "description": "CronJobStatus represents the current state of a cron job.", + "io.k8s.api.autoscaling.v2beta1.ExternalMetricStatus": { + "description": "ExternalMetricStatus indicates the current value of a global metric not associated with any Kubernetes object.", "type": "object", + "required": [ + "metricName", + "currentValue" + ], "properties": { - "active": { - "description": "A list of pointers to currently running jobs.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "x-kubernetes-list-type": "atomic" + "currentAverageValue": { + "description": "currentAverageValue is the current value of metric averaged over autoscaled pods.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" }, - "lastScheduleTime": { - "description": "Information when was the last time the job was successfully scheduled.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "currentValue": { + "description": "currentValue is the current value of the metric (as a quantity)", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" }, - "lastSuccessfulTime": { - "description": "Information when was the last time the job successfully completed.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "metricName": { + "description": "metricName is the name of a metric used for autoscaling in metric system.", + "type": "string", + "default": "" + }, + "metricSelector": { + "description": "metricSelector is used to identify a specific time series within a given metric.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "CronJobStatus", + "Version": "v2beta1", + "Kind": "ExternalMetricStatus", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1.Job": { - "description": "Job represents the configuration of a single job.", + "io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler": { + "description": "HorizontalPodAutoscaler is the configuration for a horizontal pod autoscaler, which automatically manages the replica count of any resource implementing the scale subresource based on the metrics specified.", "type": "object", "properties": { "apiVersion": { @@ -26805,60 +26838,56 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "metadata is the standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "Specification of the desired behavior of a job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.", "default": {}, - "$ref": "#/definitions/io.k8s.api.batch.v1.JobSpec" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerSpec" }, "status": { - "description": "Current status of a job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "status is the current information about the autoscaler.", "default": {}, - "$ref": "#/definitions/io.k8s.api.batch.v1.JobStatus" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "", - "Version": "v1", - "Kind": "Job", + "Version": "v2beta1", + "Kind": "HorizontalPodAutoscaler", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1.JobCondition": { - "description": "JobCondition describes current state of a job.", + "io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerCondition": { + "description": "HorizontalPodAutoscalerCondition describes the state of a HorizontalPodAutoscaler at a certain point.", "type": "object", "required": [ "type", "status" ], "properties": { - "lastProbeTime": { - "description": "Last time the condition was checked.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, "lastTransitionTime": { - "description": "Last time the condition transit from one status to another.", + "description": "lastTransitionTime is the last time the condition transitioned from one status to another", "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, "message": { - "description": "Human readable message indicating details about last transition.", + "description": "message is a human-readable explanation containing details about the transition", "type": "string" }, "reason": { - "description": "(brief) reason for the condition's last transition.", + "description": "reason is the reason for the condition's last transition.", "type": "string" }, "status": { - "description": "Status of the condition, one of True, False, Unknown.", + "description": "status is the status of the condition (True, False, Unknown)", "type": "string", "default": "" }, "type": { - "description": "Type of job condition, Complete or Failed.", + "description": "type describes the current condition", "type": "string", "default": "" } @@ -26866,13 +26895,13 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "JobCondition", + "Version": "v2beta1", + "Kind": "HorizontalPodAutoscalerCondition", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1.JobList": { - "description": "JobList is a collection of jobs.", + "io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerList": { + "description": "HorizontalPodAutoscaler is a list of horizontal pod autoscaler objects.", "type": "object", "required": [ "items" @@ -26883,11 +26912,11 @@ "type": "string" }, "items": { - "description": "items is the list of Jobs.", + "description": "items is the list of horizontal pod autoscaler objects.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.batch.v1.Job" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscaler" } }, "kind": { @@ -26895,7 +26924,7 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "metadata is the standard list metadata.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } @@ -26903,595 +26932,612 @@ "x-fabric8-info": { "Type": "list", "Group": "", - "Version": "v1", - "Kind": "JobList", + "Version": "v2beta1", + "Kind": "HorizontalPodAutoscalerList", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1.JobSpec": { - "description": "JobSpec describes how the job execution will look like.", + "io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerSpec": { + "description": "HorizontalPodAutoscalerSpec describes the desired functionality of the HorizontalPodAutoscaler.", "type": "object", "required": [ - "template" + "scaleTargetRef", + "maxReplicas" ], "properties": { - "activeDeadlineSeconds": { - "description": "Specifies the duration in seconds relative to the startTime that the job may be continuously active before the system tries to terminate it; value must be positive integer. If a Job is suspended (at creation or through an update), this timer will effectively be stopped and reset when the Job is resumed again.", - "type": "integer", - "format": "int64" - }, - "backoffLimit": { - "description": "Specifies the number of retries before marking this job failed. Defaults to 6", - "type": "integer", - "format": "int32" - }, - "backoffLimitPerIndex": { - "description": "Specifies the limit for the number of retries within an index before marking this index as failed. When enabled the number of failures per index is kept in the pod's batch.kubernetes.io/job-index-failure-count annotation. It can only be set when Job's completionMode=Indexed, and the Pod's restart policy is Never. The field is immutable. This field is beta-level. It can be used when the `JobBackoffLimitPerIndex` feature gate is enabled (enabled by default).", - "type": "integer", - "format": "int32" - }, - "completionMode": { - "description": "completionMode specifies how Pod completions are tracked. It can be `NonIndexed` (default) or `Indexed`.\n\n`NonIndexed` means that the Job is considered complete when there have been .spec.completions successfully completed Pods. Each Pod completion is homologous to each other.\n\n`Indexed` means that the Pods of a Job get an associated completion index from 0 to (.spec.completions - 1), available in the annotation batch.kubernetes.io/job-completion-index. The Job is considered complete when there is one successfully completed Pod for each index. When value is `Indexed`, .spec.completions must be specified and `.spec.parallelism` must be less than or equal to 10^5. In addition, The Pod name takes the form `$(job-name)-$(index)-$(random-string)`, the Pod hostname takes the form `$(job-name)-$(index)`.\n\nMore completion modes can be added in the future. If the Job controller observes a mode that it doesn't recognize, which is possible during upgrades due to version skew, the controller skips updates for the Job.\n\nPossible enum values:\n - `\"Indexed\"` is a Job completion mode. In this mode, the Pods of a Job get an associated completion index from 0 to (.spec.completions - 1). The Job is considered complete when a Pod completes for each completion index.\n - `\"NonIndexed\"` is a Job completion mode. In this mode, the Job is considered complete when there have been .spec.completions successfully completed Pods. Pod completions are homologous to each other.", - "type": "string", - "enum": [ - "Indexed", - "NonIndexed" - ] - }, - "completions": { - "description": "Specifies the desired number of successfully finished pods the job should be run with. Setting to null means that the success of any pod signals the success of all pods, and allows parallelism to have any positive value. Setting to 1 means that parallelism is limited to 1 and the success of that pod signals the success of the job. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/", + "maxReplicas": { + "description": "maxReplicas is the upper limit for the number of replicas to which the autoscaler can scale up. It cannot be less that minReplicas.", "type": "integer", - "format": "int32" - }, - "managedBy": { - "description": "ManagedBy field indicates the controller that manages a Job. The k8s Job controller reconciles jobs which don't have this field at all or the field value is the reserved string `kubernetes.io/job-controller`, but skips reconciling Jobs with a custom value for this field. The value must be a valid domain-prefixed path (e.g. acme.io/foo) - all characters before the first \"/\" must be a valid subdomain as defined by RFC 1123. All characters trailing the first \"/\" must be valid HTTP Path characters as defined by RFC 3986. The value cannot exceed 63 characters. This field is immutable.\n\nThis field is alpha-level. The job controller accepts setting the field when the feature gate JobManagedBy is enabled (disabled by default).", - "type": "string" - }, - "manualSelector": { - "description": "manualSelector controls generation of pod labels and pod selectors. Leave `manualSelector` unset unless you are certain what you are doing. When false or unset, the system pick labels unique to this job and appends those labels to the pod template. When true, the user is responsible for picking unique labels and specifying the selector. Failure to pick a unique label may cause this and other jobs to not function correctly. However, You may see `manualSelector=true` in jobs that were created with the old `extensions/v1beta1` API. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/#specifying-your-own-pod-selector", - "type": "boolean" + "format": "int32", + "default": 0 }, - "maxFailedIndexes": { - "description": "Specifies the maximal number of failed indexes before marking the Job as failed, when backoffLimitPerIndex is set. Once the number of failed indexes exceeds this number the entire Job is marked as Failed and its execution is terminated. When left as null the job continues execution of all of its indexes and is marked with the `Complete` Job condition. It can only be specified when backoffLimitPerIndex is set. It can be null or up to completions. It is required and must be less than or equal to 10^4 when is completions greater than 10^5. This field is beta-level. It can be used when the `JobBackoffLimitPerIndex` feature gate is enabled (enabled by default).", - "type": "integer", - "format": "int32" + "metrics": { + "description": "metrics contains the specifications for which to use to calculate the desired replica count (the maximum replica count across all metrics will be used). The desired replica count is calculated multiplying the ratio between the target value and the current value by the current number of pods. Ergo, metrics used must decrease as the pod count is increased, and vice-versa. See the individual metric source types for more information about how each type of metric must respond.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.MetricSpec" + }, + "x-kubernetes-list-type": "atomic" }, - "parallelism": { - "description": "Specifies the maximum desired number of pods the job should run at any given time. The actual number of pods running in steady state will be less than this number when ((.spec.completions - .status.successful) \u003c .spec.parallelism), i.e. when the work left to do is less than max parallelism. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/", + "minReplicas": { + "description": "minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down. It defaults to 1 pod. minReplicas is allowed to be 0 if the alpha feature gate HPAScaleToZero is enabled and at least one Object or External metric is configured. Scaling is active as long as at least one metric value is available.", "type": "integer", "format": "int32" }, - "podFailurePolicy": { - "description": "Specifies the policy of handling failed pods. In particular, it allows to specify the set of actions and conditions which need to be satisfied to take the associated action. If empty, the default behaviour applies - the counter of failed pods, represented by the jobs's .status.failed field, is incremented and it is checked against the backoffLimit. This field cannot be used in combination with restartPolicy=OnFailure.", - "$ref": "#/definitions/io.k8s.api.batch.v1.PodFailurePolicy" - }, - "podReplacementPolicy": { - "description": "podReplacementPolicy specifies when to create replacement Pods. Possible values are: - TerminatingOrFailed means that we recreate pods\n when they are terminating (has a metadata.deletionTimestamp) or failed.\n- Failed means to wait until a previously created Pod is fully terminated (has phase\n Failed or Succeeded) before creating a replacement Pod.\n\nWhen using podFailurePolicy, Failed is the the only allowed value. TerminatingOrFailed and Failed are allowed values when podFailurePolicy is not in use. This is an beta field. To use this, enable the JobPodReplacementPolicy feature toggle. This is on by default.\n\nPossible enum values:\n - `\"Failed\"` means to wait until a previously created Pod is fully terminated (has phase Failed or Succeeded) before creating a replacement Pod.\n - `\"TerminatingOrFailed\"` means that we recreate pods when they are terminating (has a metadata.deletionTimestamp) or failed.", - "type": "string", - "enum": [ - "Failed", - "TerminatingOrFailed" - ] - }, - "selector": { - "description": "A label query over pods that should match the pod count. Normally, the system sets this field for you. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "successPolicy": { - "description": "successPolicy specifies the policy when the Job can be declared as succeeded. If empty, the default behavior applies - the Job is declared as succeeded only when the number of succeeded pods equals to the completions. When the field is specified, it must be immutable and works only for the Indexed Jobs. Once the Job meets the SuccessPolicy, the lingering pods are terminated.\n\nThis field is beta-level. To use this field, you must enable the `JobSuccessPolicy` feature gate (enabled by default).", - "$ref": "#/definitions/io.k8s.api.batch.v1.SuccessPolicy" - }, - "suspend": { - "description": "suspend specifies whether the Job controller should create Pods or not. If a Job is created with suspend set to true, no Pods are created by the Job controller. If a Job is suspended after creation (i.e. the flag goes from false to true), the Job controller will delete all active Pods associated with this Job. Users must design their workload to gracefully handle this. Suspending a Job will reset the StartTime field of the Job, effectively resetting the ActiveDeadlineSeconds timer too. Defaults to false.", - "type": "boolean" - }, - "template": { - "description": "Describes the pod that will be created when executing a job. The only allowed template.spec.restartPolicy values are \"Never\" or \"OnFailure\". More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/", + "scaleTargetRef": { + "description": "scaleTargetRef points to the target resource to scale, and is used to the pods for which metrics should be collected, as well as to actually change the replica count.", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" - }, - "ttlSecondsAfterFinished": { - "description": "ttlSecondsAfterFinished limits the lifetime of a Job that has finished execution (either Complete or Failed). If this field is set, ttlSecondsAfterFinished after the Job finishes, it is eligible to be automatically deleted. When the Job is being deleted, its lifecycle guarantees (e.g. finalizers) will be honored. If this field is unset, the Job won't be automatically deleted. If this field is set to zero, the Job becomes eligible to be deleted immediately after it finishes.", - "type": "integer", - "format": "int32" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.CrossVersionObjectReference" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "JobSpec", + "Version": "v2beta1", + "Kind": "HorizontalPodAutoscalerSpec", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1.JobStatus": { - "description": "JobStatus represents the current state of a Job.", + "io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerStatus": { + "description": "HorizontalPodAutoscalerStatus describes the current status of a horizontal pod autoscaler.", "type": "object", + "required": [ + "currentReplicas", + "desiredReplicas" + ], "properties": { - "active": { - "description": "The number of pending and running pods which are not terminating (without a deletionTimestamp). The value is zero for finished jobs.", - "type": "integer", - "format": "int32" - }, - "completedIndexes": { - "description": "completedIndexes holds the completed indexes when .spec.completionMode = \"Indexed\" in a text format. The indexes are represented as decimal integers separated by commas. The numbers are listed in increasing order. Three or more consecutive numbers are compressed and represented by the first and last element of the series, separated by a hyphen. For example, if the completed indexes are 1, 3, 4, 5 and 7, they are represented as \"1,3-5,7\".", - "type": "string" - }, - "completionTime": { - "description": "Represents time when the job was completed. It is not guaranteed to be set in happens-before order across separate operations. It is represented in RFC3339 form and is in UTC. The completion time is set when the job finishes successfully, and only then. The value cannot be updated or removed. The value indicates the same or later point in time as the startTime field.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, "conditions": { - "description": "The latest available observations of an object's current state. When a Job fails, one of the conditions will have type \"Failed\" and status true. When a Job is suspended, one of the conditions will have type \"Suspended\" and status true; when the Job is resumed, the status of this condition will become false. When a Job is completed, one of the conditions will have type \"Complete\" and status true.\n\nA job is considered finished when it is in a terminal condition, either \"Complete\" or \"Failed\". A Job cannot have both the \"Complete\" and \"Failed\" conditions. Additionally, it cannot be in the \"Complete\" and \"FailureTarget\" conditions. The \"Complete\", \"Failed\" and \"FailureTarget\" conditions cannot be disabled.\n\nMore info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/", + "description": "conditions is the set of conditions required for this autoscaler to scale its target, and indicates whether or not those conditions are met.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.batch.v1.JobCondition" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.HorizontalPodAutoscalerCondition" }, - "x-kubernetes-list-type": "atomic", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "x-kubernetes-list-type": "atomic" }, - "failed": { - "description": "The number of pods which reached phase Failed. The value increases monotonically.", - "type": "integer", - "format": "int32" + "currentMetrics": { + "description": "currentMetrics is the last read state of the metrics used by this autoscaler.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.MetricStatus" + }, + "x-kubernetes-list-type": "atomic" }, - "failedIndexes": { - "description": "FailedIndexes holds the failed indexes when spec.backoffLimitPerIndex is set. The indexes are represented in the text format analogous as for the `completedIndexes` field, ie. they are kept as decimal integers separated by commas. The numbers are listed in increasing order. Three or more consecutive numbers are compressed and represented by the first and last element of the series, separated by a hyphen. For example, if the failed indexes are 1, 3, 4, 5 and 7, they are represented as \"1,3-5,7\". The set of failed indexes cannot overlap with the set of completed indexes.\n\nThis field is beta-level. It can be used when the `JobBackoffLimitPerIndex` feature gate is enabled (enabled by default).", - "type": "string" + "currentReplicas": { + "description": "currentReplicas is current number of replicas of pods managed by this autoscaler, as last seen by the autoscaler.", + "type": "integer", + "format": "int32", + "default": 0 }, - "ready": { - "description": "The number of active pods which have a Ready condition and are not terminating (without a deletionTimestamp).", + "desiredReplicas": { + "description": "desiredReplicas is the desired number of replicas of pods managed by this autoscaler, as last calculated by the autoscaler.", "type": "integer", - "format": "int32" + "format": "int32", + "default": 0 }, - "startTime": { - "description": "Represents time when the job controller started processing a job. When a Job is created in the suspended state, this field is not set until the first time it is resumed. This field is reset every time a Job is resumed from suspension. It is represented in RFC3339 form and is in UTC.\n\nOnce set, the field can only be removed when the job is suspended. The field cannot be modified while the job is unsuspended or finished.", + "lastScaleTime": { + "description": "lastScaleTime is the last time the HorizontalPodAutoscaler scaled the number of pods, used by the autoscaler to control how often the number of pods is changed.", "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "succeeded": { - "description": "The number of pods which reached phase Succeeded. The value increases monotonically for a given spec. However, it may decrease in reaction to scale down of elastic indexed jobs.", - "type": "integer", - "format": "int32" - }, - "terminating": { - "description": "The number of pods which are terminating (in phase Pending or Running and have a deletionTimestamp).\n\nThis field is beta-level. The job controller populates the field when the feature gate JobPodReplacementPolicy is enabled (enabled by default).", + "observedGeneration": { + "description": "observedGeneration is the most recent generation observed by this autoscaler.", "type": "integer", - "format": "int32" - }, - "uncountedTerminatedPods": { - "description": "uncountedTerminatedPods holds the UIDs of Pods that have terminated but the job controller hasn't yet accounted for in the status counters.\n\nThe job controller creates pods with a finalizer. When a pod terminates (succeeded or failed), the controller does three steps to account for it in the job status:\n\n1. Add the pod UID to the arrays in this field. 2. Remove the pod finalizer. 3. Remove the pod UID from the arrays while increasing the corresponding\n counter.\n\nOld jobs might not be tracked using this field, in which case the field remains null. The structure is empty for finished jobs.", - "$ref": "#/definitions/io.k8s.api.batch.v1.UncountedTerminatedPods" + "format": "int64" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "JobStatus", + "Version": "v2beta1", + "Kind": "HorizontalPodAutoscalerStatus", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1.JobTemplateSpec": { - "description": "JobTemplateSpec describes the data a Job should have when created from a template", + "io.k8s.api.autoscaling.v2beta1.MetricSpec": { + "description": "MetricSpec specifies how to scale based on a single metric (only `type` and one other matching field should be set at once).", "type": "object", + "required": [ + "type" + ], "properties": { - "metadata": { - "description": "Standard object's metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "containerResource": { + "description": "container resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod of the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. This is an alpha feature and can be enabled by the HPAContainerMetrics feature flag.", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ContainerResourceMetricSource" }, - "spec": { - "description": "Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.batch.v1.JobSpec" + "external": { + "description": "external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ExternalMetricSource" + }, + "object": { + "description": "object refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object).", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ObjectMetricSource" + }, + "pods": { + "description": "pods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.PodsMetricSource" + }, + "resource": { + "description": "resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ResourceMetricSource" + }, + "type": { + "description": "type is the type of metric source. It should be one of \"ContainerResource\", \"External\", \"Object\", \"Pods\" or \"Resource\", each mapping to a matching field in the object. Note: \"ContainerResource\" type is available on when the feature-gate HPAContainerMetrics is enabled", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "JobTemplateSpec", + "Version": "v2beta1", + "Kind": "MetricSpec", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1.PodFailurePolicy": { - "description": "PodFailurePolicy describes how failed pods influence the backoffLimit.", + "io.k8s.api.autoscaling.v2beta1.MetricStatus": { + "description": "MetricStatus describes the last-read state of a single metric.", "type": "object", "required": [ - "rules" + "type" ], "properties": { - "rules": { - "description": "A list of pod failure policy rules. The rules are evaluated in order. Once a rule matches a Pod failure, the remaining of the rules are ignored. When no rule matches the Pod failure, the default handling applies - the counter of pod failures is incremented and it is checked against the backoffLimit. At most 20 elements are allowed.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.batch.v1.PodFailurePolicyRule" - }, - "x-kubernetes-list-type": "atomic" + "containerResource": { + "description": "container resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ContainerResourceMetricStatus" + }, + "external": { + "description": "external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ExternalMetricStatus" + }, + "object": { + "description": "object refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object).", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ObjectMetricStatus" + }, + "pods": { + "description": "pods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.PodsMetricStatus" + }, + "resource": { + "description": "resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.ResourceMetricStatus" + }, + "type": { + "description": "type is the type of metric source. It will be one of \"ContainerResource\", \"External\", \"Object\", \"Pods\" or \"Resource\", each corresponds to a matching field in the object. Note: \"ContainerResource\" type is available on when the feature-gate HPAContainerMetrics is enabled", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "PodFailurePolicy", + "Version": "v2beta1", + "Kind": "MetricStatus", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1.PodFailurePolicyOnExitCodesRequirement": { - "description": "PodFailurePolicyOnExitCodesRequirement describes the requirement for handling a failed pod based on its container exit codes. In particular, it lookups the .state.terminated.exitCode for each app container and init container status, represented by the .status.containerStatuses and .status.initContainerStatuses fields in the Pod status, respectively. Containers completed with success (exit code 0) are excluded from the requirement check.", + "io.k8s.api.autoscaling.v2beta1.ObjectMetricSource": { + "description": "ObjectMetricSource indicates how to scale on a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).", "type": "object", "required": [ - "operator", - "values" + "target", + "metricName", + "targetValue" ], "properties": { - "containerName": { - "description": "Restricts the check for exit codes to the container with the specified name. When null, the rule applies to all containers. When specified, it should match one the container or initContainer names in the pod template.", - "type": "string" + "averageValue": { + "description": "averageValue is the target value of the average of the metric across all relevant pods (as a quantity)", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" }, - "operator": { - "description": "Represents the relationship between the container exit code(s) and the specified values. Containers completed with success (exit code 0) are excluded from the requirement check. Possible values are:\n\n- In: the requirement is satisfied if at least one container exit code\n (might be multiple if there are multiple containers not restricted\n by the 'containerName' field) is in the set of specified values.\n- NotIn: the requirement is satisfied if at least one container exit code\n (might be multiple if there are multiple containers not restricted\n by the 'containerName' field) is not in the set of specified values.\nAdditional values are considered to be added in the future. Clients should react to an unknown operator by assuming the requirement is not satisfied.\n\nPossible enum values:\n - `\"In\"`\n - `\"NotIn\"`", + "metricName": { + "description": "metricName is the name of the metric in question.", "type": "string", - "default": "", - "enum": [ - "In", - "NotIn" - ] + "default": "" }, - "values": { - "description": "Specifies the set of values. Each returned container exit code (might be multiple in case of multiple containers) is checked against this set of values with respect to the operator. The list of values must be ordered and must not contain duplicates. Value '0' cannot be used for the In operator. At least one element is required. At most 255 elements are allowed.", - "type": "array", - "items": { - "type": "integer", - "format": "int32", - "default": 0 - }, - "x-kubernetes-list-type": "set" + "selector": { + "description": "selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping When unset, just the metricName will be used to gather metrics.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "target": { + "description": "target is the described Kubernetes object.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.CrossVersionObjectReference" + }, + "targetValue": { + "description": "targetValue is the target value of the metric (as a quantity).", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "PodFailurePolicyOnExitCodesRequirement", + "Version": "v2beta1", + "Kind": "ObjectMetricSource", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1.PodFailurePolicyOnPodConditionsPattern": { - "description": "PodFailurePolicyOnPodConditionsPattern describes a pattern for matching an actual pod condition type.", + "io.k8s.api.autoscaling.v2beta1.ObjectMetricStatus": { + "description": "ObjectMetricStatus indicates the current value of a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).", "type": "object", "required": [ - "type", - "status" + "target", + "metricName", + "currentValue" ], "properties": { - "status": { - "description": "Specifies the required Pod condition status. To match a pod condition it is required that the specified status equals the pod condition status. Defaults to True.", - "type": "string", - "default": "" + "averageValue": { + "description": "averageValue is the current value of the average of the metric across all relevant pods (as a quantity)", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" }, - "type": { - "description": "Specifies the required Pod condition type. To match a pod condition it is required that specified type equals the pod condition type.", + "currentValue": { + "description": "currentValue is the current value of the metric (as a quantity).", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "metricName": { + "description": "metricName is the name of the metric in question.", "type": "string", "default": "" + }, + "selector": { + "description": "selector is the string-encoded form of a standard kubernetes label selector for the given metric When set in the ObjectMetricSource, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "target": { + "description": "target is the described Kubernetes object.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta1.CrossVersionObjectReference" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "PodFailurePolicyOnPodConditionsPattern", + "Version": "v2beta1", + "Kind": "ObjectMetricStatus", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1.PodFailurePolicyRule": { - "description": "PodFailurePolicyRule describes how a pod failure is handled when the requirements are met. One of onExitCodes and onPodConditions, but not both, can be used in each rule.", + "io.k8s.api.autoscaling.v2beta1.PodsMetricSource": { + "description": "PodsMetricSource indicates how to scale on a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.", "type": "object", "required": [ - "action" + "metricName", + "targetAverageValue" ], "properties": { - "action": { - "description": "Specifies the action taken on a pod failure when the requirements are satisfied. Possible values are:\n\n- FailJob: indicates that the pod's job is marked as Failed and all\n running pods are terminated.\n- FailIndex: indicates that the pod's index is marked as Failed and will\n not be restarted.\n This value is beta-level. It can be used when the\n `JobBackoffLimitPerIndex` feature gate is enabled (enabled by default).\n- Ignore: indicates that the counter towards the .backoffLimit is not\n incremented and a replacement pod is created.\n- Count: indicates that the pod is handled in the default way - the\n counter towards the .backoffLimit is incremented.\nAdditional values are considered to be added in the future. Clients should react to an unknown action by skipping the rule.\n\nPossible enum values:\n - `\"Count\"` This is an action which might be taken on a pod failure - the pod failure is handled in the default way - the counter towards .backoffLimit, represented by the job's .status.failed field, is incremented.\n - `\"FailIndex\"` This is an action which might be taken on a pod failure - mark the Job's index as failed to avoid restarts within this index. This action can only be used when backoffLimitPerIndex is set. This value is beta-level.\n - `\"FailJob\"` This is an action which might be taken on a pod failure - mark the pod's job as Failed and terminate all running pods.\n - `\"Ignore\"` This is an action which might be taken on a pod failure - the counter towards .backoffLimit, represented by the job's .status.failed field, is not incremented and a replacement pod is created.", + "metricName": { + "description": "metricName is the name of the metric in question", "type": "string", - "default": "", - "enum": [ - "Count", - "FailIndex", - "FailJob", - "Ignore" - ] + "default": "" }, - "onExitCodes": { - "description": "Represents the requirement on the container exit codes.", - "$ref": "#/definitions/io.k8s.api.batch.v1.PodFailurePolicyOnExitCodesRequirement" + "selector": { + "description": "selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping When unset, just the metricName will be used to gather metrics.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" }, - "onPodConditions": { - "description": "Represents the requirement on the pod conditions. The requirement is represented as a list of pod condition patterns. The requirement is satisfied if at least one pattern matches an actual pod condition. At most 20 elements are allowed.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.batch.v1.PodFailurePolicyOnPodConditionsPattern" - }, - "x-kubernetes-list-type": "atomic" + "targetAverageValue": { + "description": "targetAverageValue is the target value of the average of the metric across all relevant pods (as a quantity)", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "PodFailurePolicyRule", + "Version": "v2beta1", + "Kind": "PodsMetricSource", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1.SuccessPolicy": { - "description": "SuccessPolicy describes when a Job can be declared as succeeded based on the success of some indexes.", + "io.k8s.api.autoscaling.v2beta1.PodsMetricStatus": { + "description": "PodsMetricStatus indicates the current value of a metric describing each pod in the current scale target (for example, transactions-processed-per-second).", "type": "object", "required": [ - "rules" + "metricName", + "currentAverageValue" ], "properties": { - "rules": { - "description": "rules represents the list of alternative rules for the declaring the Jobs as successful before `.status.succeeded \u003e= .spec.completions`. Once any of the rules are met, the \"SucceededCriteriaMet\" condition is added, and the lingering pods are removed. The terminal state for such a Job has the \"Complete\" condition. Additionally, these rules are evaluated in order; Once the Job meets one of the rules, other rules are ignored. At most 20 elements are allowed.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.batch.v1.SuccessPolicyRule" - }, - "x-kubernetes-list-type": "atomic" + "currentAverageValue": { + "description": "currentAverageValue is the current value of the average of the metric across all relevant pods (as a quantity)", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "metricName": { + "description": "metricName is the name of the metric in question", + "type": "string", + "default": "" + }, + "selector": { + "description": "selector is the string-encoded form of a standard kubernetes label selector for the given metric When set in the PodsMetricSource, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "SuccessPolicy", + "Version": "v2beta1", + "Kind": "PodsMetricStatus", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1.SuccessPolicyRule": { - "description": "SuccessPolicyRule describes rule for declaring a Job as succeeded. Each rule must have at least one of the \"succeededIndexes\" or \"succeededCount\" specified.", + "io.k8s.api.autoscaling.v2beta1.ResourceMetricSource": { + "description": "ResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). The values will be averaged together before being compared to the target. Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. Only one \"target\" type should be set.", "type": "object", + "required": [ + "name" + ], "properties": { - "succeededCount": { - "description": "succeededCount specifies the minimal required size of the actual set of the succeeded indexes for the Job. When succeededCount is used along with succeededIndexes, the check is constrained only to the set of indexes specified by succeededIndexes. For example, given that succeededIndexes is \"1-4\", succeededCount is \"3\", and completed indexes are \"1\", \"3\", and \"5\", the Job isn't declared as succeeded because only \"1\" and \"3\" indexes are considered in that rules. When this field is null, this doesn't default to any value and is never evaluated at any time. When specified it needs to be a positive integer.", + "name": { + "description": "name is the name of the resource in question.", + "type": "string", + "default": "" + }, + "targetAverageUtilization": { + "description": "targetAverageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.", "type": "integer", "format": "int32" }, - "succeededIndexes": { - "description": "succeededIndexes specifies the set of indexes which need to be contained in the actual set of the succeeded indexes for the Job. The list of indexes must be within 0 to \".spec.completions-1\" and must not contain duplicates. At least one element is required. The indexes are represented as intervals separated by commas. The intervals can be a decimal integer or a pair of decimal integers separated by a hyphen. The number are listed in represented by the first and last element of the series, separated by a hyphen. For example, if the completed indexes are 1, 3, 4, 5 and 7, they are represented as \"1,3-5,7\". When this field is null, this field doesn't default to any value and is never evaluated at any time.", - "type": "string" + "targetAverageValue": { + "description": "targetAverageValue is the target value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the \"pods\" metric source type.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "SuccessPolicyRule", + "Version": "v2beta1", + "Kind": "ResourceMetricSource", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1.UncountedTerminatedPods": { - "description": "UncountedTerminatedPods holds UIDs of Pods that have terminated but haven't been accounted in Job status counters.", + "io.k8s.api.autoscaling.v2beta1.ResourceMetricStatus": { + "description": "ResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", "type": "object", + "required": [ + "name", + "currentAverageValue" + ], "properties": { - "failed": { - "description": "failed holds UIDs of failed Pods.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "currentAverageUtilization": { + "description": "currentAverageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. It will only be present if `targetAverageValue` was set in the corresponding metric specification.", + "type": "integer", + "format": "int32" }, - "succeeded": { - "description": "succeeded holds UIDs of succeeded Pods.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "currentAverageValue": { + "description": "currentAverageValue is the current value of the average of the resource metric across all relevant pods, as a raw value (instead of as a percentage of the request), similar to the \"pods\" metric source type. It will always be set, regardless of the corresponding metric specification.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "name": { + "description": "name is the name of the resource in question.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "UncountedTerminatedPods", + "Version": "v2beta1", + "Kind": "ResourceMetricStatus", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1beta1.CronJob": { - "description": "CronJob represents the configuration of a single cron job.", + "io.k8s.api.autoscaling.v2beta2.ContainerResourceMetricSource": { + "description": "ContainerResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). The values will be averaged together before being compared to the target. Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. Only one \"target\" type should be set.", "type": "object", + "required": [ + "name", + "target", + "container" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "container": { + "description": "container is the name of the container in the pods of the scaling target", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "name": { + "description": "name is the name of the resource in question.", + "type": "string", + "default": "" }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "target": { + "description": "target specifies the target value for the given metric", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricTarget" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v2beta2", + "Kind": "ContainerResourceMetricSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.autoscaling.v2beta2.ContainerResourceMetricStatus": { + "description": "ContainerResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "type": "object", + "required": [ + "name", + "current", + "container" + ], + "properties": { + "container": { + "description": "container is the name of the container in the pods of the scaling target", + "type": "string", + "default": "" }, - "spec": { - "description": "Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "current": { + "description": "current contains the current value for the given metric", "default": {}, - "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJobSpec" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricValueStatus" }, - "status": { - "description": "Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJobStatus" + "name": { + "description": "name is the name of the resource in question.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", + "Type": "nested", "Group": "", - "Version": "v1beta1", - "Kind": "CronJob", + "Version": "v2beta2", + "Kind": "ContainerResourceMetricStatus", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1beta1.CronJobList": { - "description": "CronJobList is a collection of cron jobs.", + "io.k8s.api.autoscaling.v2beta2.CrossVersionObjectReference": { + "description": "CrossVersionObjectReference contains enough information to let you identify the referred resource.", "type": "object", "required": [ - "items" + "kind", + "name" ], "properties": { "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "description": "apiVersion is the API version of the referent", "type": "string" }, - "items": { - "description": "items is the list of CronJobs.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJob" - } - }, "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "description": "kind is the kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string", + "default": "" }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "name": { + "description": "name is the name of the referent; More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "list", + "Type": "nested", "Group": "", - "Version": "v1beta1", - "Kind": "CronJobList", + "Version": "v2beta2", + "Kind": "CrossVersionObjectReference", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1beta1.CronJobSpec": { - "description": "CronJobSpec describes how the job execution will look like and when it will actually run.", + "io.k8s.api.autoscaling.v2beta2.ExternalMetricSource": { + "description": "ExternalMetricSource indicates how to scale on a metric not associated with any Kubernetes object (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).", "type": "object", "required": [ - "schedule", - "jobTemplate" + "metric", + "target" ], "properties": { - "concurrencyPolicy": { - "description": "Specifies how to treat concurrent executions of a Job. Valid values are:\n\n- \"Allow\" (default): allows CronJobs to run concurrently; - \"Forbid\": forbids concurrent runs, skipping next run if previous run hasn't finished yet; - \"Replace\": cancels currently running job and replaces it with a new one", - "type": "string" - }, - "failedJobsHistoryLimit": { - "description": "The number of failed finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.", - "type": "integer", - "format": "int32" - }, - "jobTemplate": { - "description": "Specifies the job that will be created when executing a CronJob.", + "metric": { + "description": "metric identifies the target metric by name and selector", "default": {}, - "$ref": "#/definitions/io.k8s.api.batch.v1beta1.JobTemplateSpec" - }, - "schedule": { - "description": "The schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.", - "type": "string", - "default": "" - }, - "startingDeadlineSeconds": { - "description": "Optional deadline in seconds for starting the job if it misses scheduled time for any reason. Missed jobs executions will be counted as failed ones.", - "type": "integer", - "format": "int64" - }, - "successfulJobsHistoryLimit": { - "description": "The number of successful finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified. Defaults to 3.", - "type": "integer", - "format": "int32" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier" }, - "suspend": { - "description": "This flag tells the controller to suspend subsequent executions, it does not apply to already started executions. Defaults to false.", - "type": "boolean" + "target": { + "description": "target specifies the target value for the given metric", + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricTarget" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v2beta2", + "Kind": "ExternalMetricSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.autoscaling.v2beta2.ExternalMetricStatus": { + "description": "ExternalMetricStatus indicates the current value of a global metric not associated with any Kubernetes object.", + "type": "object", + "required": [ + "metric", + "current" + ], + "properties": { + "current": { + "description": "current contains the current value for the given metric", + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricValueStatus" }, - "timeZone": { - "description": "The time zone name for the given schedule, see https://en.wikipedia.org/wiki/List_of_tz_database_time_zones. If not specified, this will default to the time zone of the kube-controller-manager process. The set of valid time zone names and the time zone offset is loaded from the system-wide time zone database by the API server during CronJob validation and the controller manager during execution. If no system-wide time zone database can be found a bundled version of the database is used instead. If the time zone name becomes invalid during the lifetime of a CronJob or due to a change in host configuration, the controller will stop creating new new Jobs and will create a system event with the reason UnknownTimeZone. More information can be found in https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/#time-zones", - "type": "string" + "metric": { + "description": "metric identifies the target metric by name and selector", + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta1", - "Kind": "CronJobSpec", + "Version": "v2beta2", + "Kind": "ExternalMetricStatus", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1beta1.CronJobStatus": { - "description": "CronJobStatus represents the current state of a cron job.", + "io.k8s.api.autoscaling.v2beta2.HPAScalingPolicy": { + "description": "HPAScalingPolicy is a single policy which must hold true for a specified past interval.", "type": "object", + "required": [ + "type", + "value", + "periodSeconds" + ], "properties": { - "active": { - "description": "A list of pointers to currently running jobs.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "x-kubernetes-list-type": "atomic" + "periodSeconds": { + "description": "periodSeconds specifies the window of time for which the policy should hold true. PeriodSeconds must be greater than zero and less than or equal to 1800 (30 min).", + "type": "integer", + "format": "int32", + "default": 0 }, - "lastScheduleTime": { - "description": "Information when was the last time the job was successfully scheduled.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "type": { + "description": "type is used to specify the scaling policy.", + "type": "string", + "default": "" }, - "lastSuccessfulTime": { - "description": "Information when was the last time the job successfully completed.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "value": { + "description": "value contains the amount of change which is permitted by the policy. It must be greater than zero", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta1", - "Kind": "CronJobStatus", + "Version": "v2beta2", + "Kind": "HPAScalingPolicy", "Scope": "Namespaced" } }, - "io.k8s.api.batch.v1beta1.JobTemplateSpec": { - "description": "JobTemplateSpec describes the data a Job should have when created from a template", + "io.k8s.api.autoscaling.v2beta2.HPAScalingRules": { + "description": "HPAScalingRules configures the scaling behavior for one direction. These Rules are applied after calculating DesiredReplicas from metrics for the HPA. They can limit the scaling velocity by specifying scaling policies. They can prevent flapping by specifying the stabilization window, so that the number of replicas is not set instantly, instead, the safest value from the stabilization window is chosen.", "type": "object", "properties": { - "metadata": { - "description": "Standard object's metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "policies": { + "description": "policies is a list of potential scaling polices which can be used during scaling. At least one policy must be specified, otherwise the HPAScalingRules will be discarded as invalid", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HPAScalingPolicy" + }, + "x-kubernetes-list-type": "atomic" }, - "spec": { - "description": "Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.batch.v1.JobSpec" + "selectPolicy": { + "description": "selectPolicy is used to specify which policy should be used. If not set, the default value MaxPolicySelect is used.", + "type": "string" + }, + "stabilizationWindowSeconds": { + "description": "stabilizationWindowSeconds is the number of seconds for which past recommendations should be considered while scaling up or scaling down. StabilizationWindowSeconds must be greater than or equal to zero and less than or equal to 3600 (one hour). If not set, use the default values: - For scale up: 0 (i.e. no stabilization is done). - For scale down: 300 (i.e. the stabilization window is 300 seconds long).", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1beta1", - "Kind": "JobTemplateSpec", + "Version": "v2beta2", + "Kind": "HPAScalingRules", "Scope": "Namespaced" } }, - "io.k8s.api.certificates.v1.CertificateSigningRequest": { - "description": "CertificateSigningRequest objects provide a mechanism to obtain x509 certificates by submitting a certificate signing request, and having it asynchronously approved and issued.\n\nKubelets use this API to obtain:\n 1. client certificates to authenticate to kube-apiserver (with the \"kubernetes.io/kube-apiserver-client-kubelet\" signerName).\n 2. serving certificates for TLS endpoints kube-apiserver can connect to securely (with the \"kubernetes.io/kubelet-serving\" signerName).\n\nThis API can be used to request client certificates to authenticate to kube-apiserver (with the \"kubernetes.io/kube-apiserver-client\" signerName), or to obtain certificates from custom non-Kubernetes signers.", + "io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler": { + "description": "HorizontalPodAutoscaler is the configuration for a horizontal pod autoscaler, which automatically manages the replica count of any resource implementing the scale subresource based on the metrics specified.", "type": "object", - "required": [ - "spec" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -27502,30 +27548,52 @@ "type": "string" }, "metadata": { + "description": "metadata is the standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec contains the certificate request, and is immutable after creation. Only the request, signerName, expirationSeconds, and usages fields can be set on creation. Other fields are derived by Kubernetes and cannot be modified by users.", + "description": "spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.", "default": {}, - "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestSpec" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerSpec" }, "status": { - "description": "status contains information about whether the request is approved or denied, and the certificate issued by the signer, or the failure condition indicating signer failure.", + "description": "status is the current information about the autoscaler.", "default": {}, - "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestStatus" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "certificates.k8s.io", - "Version": "v1", - "Kind": "CertificateSigningRequest", - "Scope": "Clustered" + "Group": "", + "Version": "v2beta2", + "Kind": "HorizontalPodAutoscaler", + "Scope": "Namespaced" } }, - "io.k8s.api.certificates.v1.CertificateSigningRequestCondition": { - "description": "CertificateSigningRequestCondition describes a condition of a CertificateSigningRequest object", + "io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerBehavior": { + "description": "HorizontalPodAutoscalerBehavior configures the scaling behavior of the target in both Up and Down directions (scaleUp and scaleDown fields respectively).", + "type": "object", + "properties": { + "scaleDown": { + "description": "scaleDown is scaling policy for scaling Down. If not set, the default value is to allow to scale down to minReplicas pods, with a 300 second stabilization window (i.e., the highest recommendation for the last 300sec is used).", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HPAScalingRules" + }, + "scaleUp": { + "description": "scaleUp is scaling policy for scaling Up. If not set, the default value is the higher of:\n * increase no more than 4 pods per 60 seconds\n * double the number of pods per 60 seconds\nNo stabilization is used.", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HPAScalingRules" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v2beta2", + "Kind": "HorizontalPodAutoscalerBehavior", + "Scope": "Namespaced" + } + }, + "io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerCondition": { + "description": "HorizontalPodAutoscalerCondition describes the state of a HorizontalPodAutoscaler at a certain point.", "type": "object", "required": [ "type", @@ -27533,42 +27601,38 @@ ], "properties": { "lastTransitionTime": { - "description": "lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "lastUpdateTime": { - "description": "lastUpdateTime is the time of the last update to this condition", + "description": "lastTransitionTime is the last time the condition transitioned from one status to another", "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, "message": { - "description": "message contains a human readable message with details about the request state", + "description": "message is a human-readable explanation containing details about the transition", "type": "string" }, "reason": { - "description": "reason indicates a brief reason for the request state", + "description": "reason is the reason for the condition's last transition.", "type": "string" }, "status": { - "description": "status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be \"False\" or \"Unknown\".", + "description": "status is the status of the condition (True, False, Unknown)", "type": "string", "default": "" }, "type": { - "description": "type of the condition. Known conditions are \"Approved\", \"Denied\", and \"Failed\".\n\nAn \"Approved\" condition is added via the /approval subresource, indicating the request was approved and should be issued by the signer.\n\nA \"Denied\" condition is added via the /approval subresource, indicating the request was denied and should not be issued by the signer.\n\nA \"Failed\" condition is added via the /status subresource, indicating the signer failed to issue the certificate.\n\nApproved and Denied conditions are mutually exclusive. Approved, Denied, and Failed conditions cannot be removed once added.\n\nOnly one condition of a given type is allowed.", + "description": "type describes the current condition", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "certificates.k8s.io", - "Version": "v1", - "Kind": "CertificateSigningRequestCondition", + "Group": "", + "Version": "v2beta2", + "Kind": "HorizontalPodAutoscalerCondition", "Scope": "Namespaced" } }, - "io.k8s.api.certificates.v1.CertificateSigningRequestList": { - "description": "CertificateSigningRequestList is a collection of CertificateSigningRequest objects", + "io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerList": { + "description": "HorizontalPodAutoscalerList is a list of horizontal pod autoscaler objects.", "type": "object", "required": [ "items" @@ -27579,11 +27643,11 @@ "type": "string" }, "items": { - "description": "items is a collection of CertificateSigningRequest objects", + "description": "items is the list of horizontal pod autoscaler objects.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscaler" } }, "kind": { @@ -27591,453 +27655,462 @@ "type": "string" }, "metadata": { + "description": "metadata is the standard list metadata.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "certificates.k8s.io", - "Version": "v1", - "Kind": "CertificateSigningRequestList", + "Group": "", + "Version": "v2beta2", + "Kind": "HorizontalPodAutoscalerList", "Scope": "Namespaced" } }, - "io.k8s.api.certificates.v1.CertificateSigningRequestSpec": { - "description": "CertificateSigningRequestSpec contains the certificate request.", + "io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerSpec": { + "description": "HorizontalPodAutoscalerSpec describes the desired functionality of the HorizontalPodAutoscaler.", "type": "object", "required": [ - "request", - "signerName" + "scaleTargetRef", + "maxReplicas" ], "properties": { - "expirationSeconds": { - "description": "expirationSeconds is the requested duration of validity of the issued certificate. The certificate signer may issue a certificate with a different validity duration so a client must check the delta between the notBefore and and notAfter fields in the issued certificate to determine the actual duration.\n\nThe v1.22+ in-tree implementations of the well-known Kubernetes signers will honor this field as long as the requested duration is not greater than the maximum duration they will honor per the --cluster-signing-duration CLI flag to the Kubernetes controller manager.\n\nCertificate signers may not honor this field for various reasons:\n\n 1. Old signer that is unaware of the field (such as the in-tree\n implementations prior to v1.22)\n 2. Signer whose configured maximum is shorter than the requested duration\n 3. Signer whose configured minimum is longer than the requested duration\n\nThe minimum valid value for expirationSeconds is 600, i.e. 10 minutes.", - "type": "integer", - "format": "int32" + "behavior": { + "description": "behavior configures the scaling behavior of the target in both Up and Down directions (scaleUp and scaleDown fields respectively). If not set, the default HPAScalingRules for scale up and scale down are used.", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerBehavior" }, - "extra": { - "description": "extra contains extra attributes of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } + "maxReplicas": { + "description": "maxReplicas is the upper limit for the number of replicas to which the autoscaler can scale up. It cannot be less that minReplicas.", + "type": "integer", + "format": "int32", + "default": 0 }, - "groups": { - "description": "groups contains group membership of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.", + "metrics": { + "description": "metrics contains the specifications for which to use to calculate the desired replica count (the maximum replica count across all metrics will be used). The desired replica count is calculated multiplying the ratio between the target value and the current value by the current number of pods. Ergo, metrics used must decrease as the pod count is increased, and vice-versa. See the individual metric source types for more information about how each type of metric must respond. If not set, the default metric will be set to 80% average CPU utilization.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricSpec" }, "x-kubernetes-list-type": "atomic" }, - "request": { - "description": "request contains an x509 certificate signing request encoded in a \"CERTIFICATE REQUEST\" PEM block. When serialized as JSON or YAML, the data is additionally base64-encoded.", - "type": "string", - "format": "byte", - "x-kubernetes-list-type": "atomic" - }, - "signerName": { - "description": "signerName indicates the requested signer, and is a qualified name.\n\nList/watch requests for CertificateSigningRequests can filter on this field using a \"spec.signerName=NAME\" fieldSelector.\n\nWell-known Kubernetes signers are:\n 1. \"kubernetes.io/kube-apiserver-client\": issues client certificates that can be used to authenticate to kube-apiserver.\n Requests for this signer are never auto-approved by kube-controller-manager, can be issued by the \"csrsigning\" controller in kube-controller-manager.\n 2. \"kubernetes.io/kube-apiserver-client-kubelet\": issues client certificates that kubelets use to authenticate to kube-apiserver.\n Requests for this signer can be auto-approved by the \"csrapproving\" controller in kube-controller-manager, and can be issued by the \"csrsigning\" controller in kube-controller-manager.\n 3. \"kubernetes.io/kubelet-serving\" issues serving certificates that kubelets use to serve TLS endpoints, which kube-apiserver can connect to securely.\n Requests for this signer are never auto-approved by kube-controller-manager, and can be issued by the \"csrsigning\" controller in kube-controller-manager.\n\nMore details are available at https://k8s.io/docs/reference/access-authn-authz/certificate-signing-requests/#kubernetes-signers\n\nCustom signerNames can also be specified. The signer defines:\n 1. Trust distribution: how trust (CA bundles) are distributed.\n 2. Permitted subjects: and behavior when a disallowed subject is requested.\n 3. Required, permitted, or forbidden x509 extensions in the request (including whether subjectAltNames are allowed, which types, restrictions on allowed values) and behavior when a disallowed extension is requested.\n 4. Required, permitted, or forbidden key usages / extended key usages.\n 5. Expiration/certificate lifetime: whether it is fixed by the signer, configurable by the admin.\n 6. Whether or not requests for CA certificates are allowed.", - "type": "string", - "default": "" - }, - "uid": { - "description": "uid contains the uid of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.", - "type": "string" - }, - "usages": { - "description": "usages specifies a set of key usages requested in the issued certificate.\n\nRequests for TLS client certificates typically request: \"digital signature\", \"key encipherment\", \"client auth\".\n\nRequests for TLS serving certificates typically request: \"key encipherment\", \"digital signature\", \"server auth\".\n\nValid values are:\n \"signing\", \"digital signature\", \"content commitment\",\n \"key encipherment\", \"key agreement\", \"data encipherment\",\n \"cert sign\", \"crl sign\", \"encipher only\", \"decipher only\", \"any\",\n \"server auth\", \"client auth\",\n \"code signing\", \"email protection\", \"s/mime\",\n \"ipsec end system\", \"ipsec tunnel\", \"ipsec user\",\n \"timestamping\", \"ocsp signing\", \"microsoft sgc\", \"netscape sgc\"", - "type": "array", - "items": { - "type": "string", - "default": "", - "enum": [ - "any", - "cert sign", - "client auth", - "code signing", - "content commitment", - "crl sign", - "data encipherment", - "decipher only", - "digital signature", - "email protection", - "encipher only", - "ipsec end system", - "ipsec tunnel", - "ipsec user", - "key agreement", - "key encipherment", - "microsoft sgc", - "netscape sgc", - "ocsp signing", - "s/mime", - "server auth", - "signing", - "timestamping" - ] - }, - "x-kubernetes-list-type": "atomic" + "minReplicas": { + "description": "minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down. It defaults to 1 pod. minReplicas is allowed to be 0 if the alpha feature gate HPAScaleToZero is enabled and at least one Object or External metric is configured. Scaling is active as long as at least one metric value is available.", + "type": "integer", + "format": "int32" }, - "username": { - "description": "username contains the name of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.", - "type": "string" + "scaleTargetRef": { + "description": "scaleTargetRef points to the target resource to scale, and is used to the pods for which metrics should be collected, as well as to actually change the replica count.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.CrossVersionObjectReference" } }, "x-fabric8-info": { "Type": "nested", - "Group": "certificates.k8s.io", - "Version": "v1", - "Kind": "CertificateSigningRequestSpec", + "Group": "", + "Version": "v2beta2", + "Kind": "HorizontalPodAutoscalerSpec", "Scope": "Namespaced" } }, - "io.k8s.api.certificates.v1.CertificateSigningRequestStatus": { - "description": "CertificateSigningRequestStatus contains conditions used to indicate approved/denied/failed status of the request, and the issued certificate.", + "io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerStatus": { + "description": "HorizontalPodAutoscalerStatus describes the current status of a horizontal pod autoscaler.", "type": "object", + "required": [ + "currentReplicas", + "desiredReplicas" + ], "properties": { - "certificate": { - "description": "certificate is populated with an issued certificate by the signer after an Approved condition is present. This field is set via the /status subresource. Once populated, this field is immutable.\n\nIf the certificate signing request is denied, a condition of type \"Denied\" is added and this field remains empty. If the signer cannot issue the certificate, a condition of type \"Failed\" is added and this field remains empty.\n\nValidation requirements:\n 1. certificate must contain one or more PEM blocks.\n 2. All PEM blocks must have the \"CERTIFICATE\" label, contain no headers, and the encoded data\n must be a BER-encoded ASN.1 Certificate structure as described in section 4 of RFC5280.\n 3. Non-PEM content may appear before or after the \"CERTIFICATE\" PEM blocks and is unvalidated,\n to allow for explanatory text as described in section 5.2 of RFC7468.\n\nIf more than one PEM block is present, and the definition of the requested spec.signerName does not indicate otherwise, the first block is the issued certificate, and subsequent blocks should be treated as intermediate certificates and presented in TLS handshakes.\n\nThe certificate is encoded in PEM format.\n\nWhen serialized as JSON or YAML, the data is additionally base64-encoded, so it consists of:\n\n base64(\n -----BEGIN CERTIFICATE-----\n ...\n -----END CERTIFICATE-----\n )", - "type": "string", - "format": "byte", - "x-kubernetes-list-type": "atomic" - }, "conditions": { - "description": "conditions applied to the request. Known conditions are \"Approved\", \"Denied\", and \"Failed\".", + "description": "conditions is the set of conditions required for this autoscaler to scale its target, and indicates whether or not those conditions are met.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestCondition" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.HorizontalPodAutoscalerCondition" }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "certificates.k8s.io", - "Version": "v1", - "Kind": "CertificateSigningRequestStatus", - "Scope": "Namespaced" - } - }, - "io.k8s.api.certificates.v1alpha1.ClusterTrustBundle": { - "description": "ClusterTrustBundle is a cluster-scoped container for X.509 trust anchors (root certificates).\n\nClusterTrustBundle objects are considered to be readable by any authenticated user in the cluster, because they can be mounted by pods using the `clusterTrustBundle` projection. All service accounts have read access to ClusterTrustBundles by default. Users who only have namespace-level access to a cluster can read ClusterTrustBundles by impersonating a serviceaccount that they have access to.\n\nIt can be optionally associated with a particular assigner, in which case it contains one valid set of trust anchors for that signer. Signers may have multiple associated ClusterTrustBundles; each is an independent set of trust anchors for that signer. Admission control is used to enforce that only users with permissions on the signer can create or modify the corresponding bundle.", - "type": "object", - "required": [ - "spec" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "x-kubernetes-list-type": "atomic" }, - "metadata": { - "description": "metadata contains the object metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "currentMetrics": { + "description": "currentMetrics is the last read state of the metrics used by this autoscaler.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricStatus" + }, + "x-kubernetes-list-type": "atomic" }, - "spec": { - "description": "spec contains the signer (if any) and trust anchors.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.certificates.v1alpha1.ClusterTrustBundleSpec" + "currentReplicas": { + "description": "currentReplicas is current number of replicas of pods managed by this autoscaler, as last seen by the autoscaler.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "desiredReplicas": { + "description": "desiredReplicas is the desired number of replicas of pods managed by this autoscaler, as last calculated by the autoscaler.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "lastScaleTime": { + "description": "lastScaleTime is the last time the HorizontalPodAutoscaler scaled the number of pods, used by the autoscaler to control how often the number of pods is changed.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "observedGeneration": { + "description": "observedGeneration is the most recent generation observed by this autoscaler.", + "type": "integer", + "format": "int64" } }, "x-fabric8-info": { - "Type": "object", - "Group": "certificates.k8s.io", - "Version": "v1alpha1", - "Kind": "ClusterTrustBundle", - "Scope": "Clustered" + "Type": "nested", + "Group": "", + "Version": "v2beta2", + "Kind": "HorizontalPodAutoscalerStatus", + "Scope": "Namespaced" } }, - "io.k8s.api.certificates.v1alpha1.ClusterTrustBundleList": { - "description": "ClusterTrustBundleList is a collection of ClusterTrustBundle objects", + "io.k8s.api.autoscaling.v2beta2.MetricIdentifier": { + "description": "MetricIdentifier defines the name and optionally selector for a metric", "type": "object", "required": [ - "items" + "name" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a collection of ClusterTrustBundle objects", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.certificates.v1alpha1.ClusterTrustBundle" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "name": { + "description": "name is the name of the given metric", + "type": "string", + "default": "" }, - "metadata": { - "description": "metadata contains the list metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "selector": { + "description": "selector is the string-encoded form of a standard kubernetes label selector for the given metric When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping. When unset, just the metricName will be used to gather metrics.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" } }, "x-fabric8-info": { - "Type": "list", - "Group": "certificates.k8s.io", - "Version": "v1alpha1", - "Kind": "ClusterTrustBundleList", + "Type": "nested", + "Group": "", + "Version": "v2beta2", + "Kind": "MetricIdentifier", "Scope": "Namespaced" } }, - "io.k8s.api.certificates.v1alpha1.ClusterTrustBundleSpec": { - "description": "ClusterTrustBundleSpec contains the signer and trust anchors.", + "io.k8s.api.autoscaling.v2beta2.MetricSpec": { + "description": "MetricSpec specifies how to scale based on a single metric (only `type` and one other matching field should be set at once).", "type": "object", "required": [ - "trustBundle" + "type" ], "properties": { - "signerName": { - "description": "signerName indicates the associated signer, if any.\n\nIn order to create or update a ClusterTrustBundle that sets signerName, you must have the following cluster-scoped permission: group=certificates.k8s.io resource=signers resourceName=\u003cthe signer name\u003e verb=attest.\n\nIf signerName is not empty, then the ClusterTrustBundle object must be named with the signer name as a prefix (translating slashes to colons). For example, for the signer name `example.com/foo`, valid ClusterTrustBundle object names include `example.com:foo:abc` and `example.com:foo:v1`.\n\nIf signerName is empty, then the ClusterTrustBundle object's name must not have such a prefix.\n\nList/watch requests for ClusterTrustBundles can filter on this field using a `spec.signerName=NAME` field selector.", - "type": "string" + "containerResource": { + "description": "container resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod of the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. This is an alpha feature and can be enabled by the HPAContainerMetrics feature flag.", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ContainerResourceMetricSource" }, - "trustBundle": { - "description": "trustBundle contains the individual X.509 trust anchors for this bundle, as PEM bundle of PEM-wrapped, DER-formatted X.509 certificates.\n\nThe data must consist only of PEM certificate blocks that parse as valid X.509 certificates. Each certificate must include a basic constraints extension with the CA bit set. The API server will reject objects that contain duplicate certificates, or that use PEM block headers.\n\nUsers of ClusterTrustBundles, including Kubelet, are free to reorder and deduplicate certificate blocks in this file according to their own logic, as well as to drop PEM block headers and inter-block data.", + "external": { + "description": "external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ExternalMetricSource" + }, + "object": { + "description": "object refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object).", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ObjectMetricSource" + }, + "pods": { + "description": "pods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.PodsMetricSource" + }, + "resource": { + "description": "resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ResourceMetricSource" + }, + "type": { + "description": "type is the type of metric source. It should be one of \"ContainerResource\", \"External\", \"Object\", \"Pods\" or \"Resource\", each mapping to a matching field in the object. Note: \"ContainerResource\" type is available on when the feature-gate HPAContainerMetrics is enabled", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "certificates.k8s.io", - "Version": "v1alpha1", - "Kind": "ClusterTrustBundleSpec", + "Group": "", + "Version": "v2beta2", + "Kind": "MetricSpec", "Scope": "Namespaced" } }, - "io.k8s.api.certificates.v1beta1.CertificateSigningRequest": { - "description": "Describes a certificate signing request", + "io.k8s.api.autoscaling.v2beta2.MetricStatus": { + "description": "MetricStatus describes the last-read state of a single metric.", "type": "object", "required": [ - "spec" + "type" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "containerResource": { + "description": "containerResource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing a single container in each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ContainerResourceMetricStatus" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "external": { + "description": "external refers to a global metric that is not associated with any Kubernetes object. It allows autoscaling based on information coming from components running outside of cluster (for example length of queue in cloud messaging service, or QPS from loadbalancer running outside of cluster).", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ExternalMetricStatus" }, - "metadata": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "object": { + "description": "object refers to a metric describing a single kubernetes object (for example, hits-per-second on an Ingress object).", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ObjectMetricStatus" }, - "spec": { - "description": "spec contains the certificate request, and is immutable after creation. Only the request, signerName, expirationSeconds, and usages fields can be set on creation. Other fields are derived by Kubernetes and cannot be modified by users.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequestSpec" + "pods": { + "description": "pods refers to a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.PodsMetricStatus" }, - "status": { - "description": "Derived information about the request.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequestStatus" + "resource": { + "description": "resource refers to a resource metric (such as those specified in requests and limits) known to Kubernetes describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.ResourceMetricStatus" + }, + "type": { + "description": "type is the type of metric source. It will be one of \"ContainerResource\", \"External\", \"Object\", \"Pods\" or \"Resource\", each corresponds to a matching field in the object. Note: \"ContainerResource\" type is available on when the feature-gate HPAContainerMetrics is enabled", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "certificates.k8s.io", - "Version": "v1beta1", - "Kind": "CertificateSigningRequest", - "Scope": "Clustered" + "Type": "nested", + "Group": "", + "Version": "v2beta2", + "Kind": "MetricStatus", + "Scope": "Namespaced" } }, - "io.k8s.api.certificates.v1beta1.CertificateSigningRequestCondition": { + "io.k8s.api.autoscaling.v2beta2.MetricTarget": { + "description": "MetricTarget defines the target value, average value, or average utilization of a specific metric", "type": "object", "required": [ "type" ], "properties": { - "lastTransitionTime": { - "description": "lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "lastUpdateTime": { - "description": "timestamp for the last update to this condition", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "human readable message with details about the request state", - "type": "string" - }, - "reason": { - "description": "brief reason for the request state", - "type": "string" + "averageUtilization": { + "description": "averageUtilization is the target value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods. Currently only valid for Resource metric source type", + "type": "integer", + "format": "int32" }, - "status": { - "description": "Status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be \"False\" or \"Unknown\". Defaults to \"True\". If unset, should be treated as \"True\".", - "type": "string", - "default": "" + "averageValue": { + "description": "averageValue is the target value of the average of the metric across all relevant pods (as a quantity)", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" }, "type": { - "description": "type of the condition. Known conditions include \"Approved\", \"Denied\", and \"Failed\".", + "description": "type represents whether the metric type is Utilization, Value, or AverageValue", "type": "string", "default": "" + }, + "value": { + "description": "value is the target value of the metric (as a quantity).", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" } }, "x-fabric8-info": { "Type": "nested", - "Group": "certificates.k8s.io", - "Version": "v1beta1", - "Kind": "CertificateSigningRequestCondition", + "Group": "", + "Version": "v2beta2", + "Kind": "MetricTarget", "Scope": "Namespaced" } }, - "io.k8s.api.certificates.v1beta1.CertificateSigningRequestList": { + "io.k8s.api.autoscaling.v2beta2.MetricValueStatus": { + "description": "MetricValueStatus holds the current value for a metric", + "type": "object", + "properties": { + "averageUtilization": { + "description": "averageUtilization is the current value of the average of the resource metric across all relevant pods, represented as a percentage of the requested value of the resource for the pods.", + "type": "integer", + "format": "int32" + }, + "averageValue": { + "description": "averageValue is the current value of the average of the metric across all relevant pods (as a quantity)", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "value": { + "description": "value is the current value of the metric (as a quantity).", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v2beta2", + "Kind": "MetricValueStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.autoscaling.v2beta2.ObjectMetricSource": { + "description": "ObjectMetricSource indicates how to scale on a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).", "type": "object", "required": [ - "items" + "describedObject", + "target", + "metric" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" - } + "describedObject": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.CrossVersionObjectReference" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "metric": { + "description": "metric identifies the target metric by name and selector", + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier" }, - "metadata": { + "target": { + "description": "target specifies the target value for the given metric", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricTarget" } }, "x-fabric8-info": { - "Type": "list", - "Group": "certificates.k8s.io", - "Version": "v1beta1", - "Kind": "CertificateSigningRequestList", + "Type": "nested", + "Group": "", + "Version": "v2beta2", + "Kind": "ObjectMetricSource", "Scope": "Namespaced" } }, - "io.k8s.api.certificates.v1beta1.CertificateSigningRequestSpec": { - "description": "CertificateSigningRequestSpec contains the certificate request.", + "io.k8s.api.autoscaling.v2beta2.ObjectMetricStatus": { + "description": "ObjectMetricStatus indicates the current value of a metric describing a kubernetes object (for example, hits-per-second on an Ingress object).", "type": "object", "required": [ - "request" + "metric", + "current", + "describedObject" ], "properties": { - "expirationSeconds": { - "description": "expirationSeconds is the requested duration of validity of the issued certificate. The certificate signer may issue a certificate with a different validity duration so a client must check the delta between the notBefore and and notAfter fields in the issued certificate to determine the actual duration.\n\nThe v1.22+ in-tree implementations of the well-known Kubernetes signers will honor this field as long as the requested duration is not greater than the maximum duration they will honor per the --cluster-signing-duration CLI flag to the Kubernetes controller manager.\n\nCertificate signers may not honor this field for various reasons:\n\n 1. Old signer that is unaware of the field (such as the in-tree\n implementations prior to v1.22)\n 2. Signer whose configured maximum is shorter than the requested duration\n 3. Signer whose configured minimum is longer than the requested duration\n\nThe minimum valid value for expirationSeconds is 600, i.e. 10 minutes.", - "type": "integer", - "format": "int32" - }, - "extra": { - "description": "Extra information about the requesting user. See user.Info interface for details.", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, - "groups": { - "description": "Group information about the requesting user. See user.Info interface for details.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "request": { - "description": "Base64-encoded PKCS#10 CSR data", - "type": "string", - "format": "byte", - "x-kubernetes-list-type": "atomic" + "current": { + "description": "current contains the current value for the given metric", + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricValueStatus" }, - "signerName": { - "description": "Requested signer for the request. It is a qualified name in the form: `scope-hostname.io/name`. If empty, it will be defaulted:\n 1. If it's a kubelet client certificate, it is assigned\n \"kubernetes.io/kube-apiserver-client-kubelet\".\n 2. If it's a kubelet serving certificate, it is assigned\n \"kubernetes.io/kubelet-serving\".\n 3. Otherwise, it is assigned \"kubernetes.io/legacy-unknown\".\nDistribution of trust for signers happens out of band. You can select on this field using `spec.signerName`.", - "type": "string" + "describedObject": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.CrossVersionObjectReference" }, - "uid": { - "description": "UID information about the requesting user. See user.Info interface for details.", - "type": "string" + "metric": { + "description": "metric identifies the target metric by name and selector", + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v2beta2", + "Kind": "ObjectMetricStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.autoscaling.v2beta2.PodsMetricSource": { + "description": "PodsMetricSource indicates how to scale on a metric describing each pod in the current scale target (for example, transactions-processed-per-second). The values will be averaged together before being compared to the target value.", + "type": "object", + "required": [ + "metric", + "target" + ], + "properties": { + "metric": { + "description": "metric identifies the target metric by name and selector", + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier" }, - "usages": { - "description": "allowedUsages specifies a set of usage contexts the key will be valid for. See:\n\thttps://tools.ietf.org/html/rfc5280#section-4.2.1.3\n\thttps://tools.ietf.org/html/rfc5280#section-4.2.1.12\n\nValid values are:\n \"signing\",\n \"digital signature\",\n \"content commitment\",\n \"key encipherment\",\n \"key agreement\",\n \"data encipherment\",\n \"cert sign\",\n \"crl sign\",\n \"encipher only\",\n \"decipher only\",\n \"any\",\n \"server auth\",\n \"client auth\",\n \"code signing\",\n \"email protection\",\n \"s/mime\",\n \"ipsec end system\",\n \"ipsec tunnel\",\n \"ipsec user\",\n \"timestamping\",\n \"ocsp signing\",\n \"microsoft sgc\",\n \"netscape sgc\"", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "target": { + "description": "target specifies the target value for the given metric", + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricTarget" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v2beta2", + "Kind": "PodsMetricSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.autoscaling.v2beta2.PodsMetricStatus": { + "description": "PodsMetricStatus indicates the current value of a metric describing each pod in the current scale target (for example, transactions-processed-per-second).", + "type": "object", + "required": [ + "metric", + "current" + ], + "properties": { + "current": { + "description": "current contains the current value for the given metric", + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricValueStatus" }, - "username": { - "description": "Information about the requesting user. See user.Info interface for details.", - "type": "string" + "metric": { + "description": "metric identifies the target metric by name and selector", + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricIdentifier" } }, "x-fabric8-info": { "Type": "nested", - "Group": "certificates.k8s.io", - "Version": "v1beta1", - "Kind": "CertificateSigningRequestSpec", + "Group": "", + "Version": "v2beta2", + "Kind": "PodsMetricStatus", "Scope": "Namespaced" } }, - "io.k8s.api.certificates.v1beta1.CertificateSigningRequestStatus": { + "io.k8s.api.autoscaling.v2beta2.ResourceMetricSource": { + "description": "ResourceMetricSource indicates how to scale on a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). The values will be averaged together before being compared to the target. Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source. Only one \"target\" type should be set.", "type": "object", + "required": [ + "name", + "target" + ], "properties": { - "certificate": { - "description": "If request was approved, the controller will place the issued certificate here.", + "name": { + "description": "name is the name of the resource in question.", "type": "string", - "format": "byte", - "x-kubernetes-list-type": "atomic" + "default": "" }, - "conditions": { - "description": "Conditions applied to the request, such as approval or denial.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequestCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" + "target": { + "description": "target specifies the target value for the given metric", + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricTarget" } }, "x-fabric8-info": { "Type": "nested", - "Group": "certificates.k8s.io", - "Version": "v1beta1", - "Kind": "CertificateSigningRequestStatus", + "Group": "", + "Version": "v2beta2", + "Kind": "ResourceMetricSource", "Scope": "Namespaced" } }, - "io.k8s.api.coordination.v1.Lease": { - "description": "Lease defines a lease concept.", + "io.k8s.api.autoscaling.v2beta2.ResourceMetricStatus": { + "description": "ResourceMetricStatus indicates the current value of a resource metric known to Kubernetes, as specified in requests and limits, describing each pod in the current scale target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and have special scaling options on top of those available to normal per-pod metrics using the \"pods\" source.", + "type": "object", + "required": [ + "name", + "current" + ], + "properties": { + "current": { + "description": "current contains the current value for the given metric", + "default": {}, + "$ref": "#/definitions/io.k8s.api.autoscaling.v2beta2.MetricValueStatus" + }, + "name": { + "description": "name is the name of the resource in question.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v2beta2", + "Kind": "ResourceMetricStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.batch.v1.CronJob": { + "description": "CronJob represents the configuration of a single cron job.", "type": "object", "properties": { "apiVersion": { @@ -28049,26 +28122,31 @@ "type": "string" }, "metadata": { - "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec contains the specification of the Lease. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.coordination.v1.LeaseSpec" + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJobSpec" + }, + "status": { + "description": "Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJobStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "coordination.k8s.io", + "Group": "", "Version": "v1", - "Kind": "Lease", + "Kind": "CronJob", "Scope": "Namespaced" } }, - "io.k8s.api.coordination.v1.LeaseList": { - "description": "LeaseList is a list of Lease objects.", + "io.k8s.api.batch.v1.CronJobList": { + "description": "CronJobList is a collection of cron jobs.", "type": "object", "required": [ "items" @@ -28079,11 +28157,11 @@ "type": "string" }, "items": { - "description": "items is a list of schema objects.", + "description": "items is the list of CronJobs.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.coordination.v1.Lease" + "$ref": "#/definitions/io.k8s.api.batch.v1.CronJob" } }, "kind": { @@ -28098,203 +28176,182 @@ }, "x-fabric8-info": { "Type": "list", - "Group": "coordination.k8s.io", + "Group": "", "Version": "v1", - "Kind": "LeaseList", + "Kind": "CronJobList", "Scope": "Namespaced" } }, - "io.k8s.api.coordination.v1.LeaseSpec": { - "description": "LeaseSpec is a specification of a Lease.", + "io.k8s.api.batch.v1.CronJobSpec": { + "description": "CronJobSpec describes how the job execution will look like and when it will actually run.", "type": "object", + "required": [ + "schedule", + "jobTemplate" + ], "properties": { - "acquireTime": { - "description": "acquireTime is a time when the current lease was acquired.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" - }, - "holderIdentity": { - "description": "holderIdentity contains the identity of the holder of a current lease. If Coordinated Leader Election is used, the holder identity must be equal to the elected LeaseCandidate.metadata.name field.", - "type": "string" + "concurrencyPolicy": { + "description": "Specifies how to treat concurrent executions of a Job. Valid values are:\n\n- \"Allow\" (default): allows CronJobs to run concurrently; - \"Forbid\": forbids concurrent runs, skipping next run if previous run hasn't finished yet; - \"Replace\": cancels currently running job and replaces it with a new one\n\nPossible enum values:\n - `\"Allow\"` allows CronJobs to run concurrently.\n - `\"Forbid\"` forbids concurrent runs, skipping next run if previous hasn't finished yet.\n - `\"Replace\"` cancels currently running job and replaces it with a new one.", + "type": "string", + "enum": [ + "Allow", + "Forbid", + "Replace" + ] }, - "leaseDurationSeconds": { - "description": "leaseDurationSeconds is a duration that candidates for a lease need to wait to force acquire it. This is measured against the time of last observed renewTime.", + "failedJobsHistoryLimit": { + "description": "The number of failed finished jobs to retain. Value must be non-negative integer. Defaults to 1.", "type": "integer", "format": "int32" }, - "leaseTransitions": { - "description": "leaseTransitions is the number of transitions of a lease between holders.", + "jobTemplate": { + "description": "Specifies the job that will be created when executing a CronJob.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.batch.v1.JobTemplateSpec" + }, + "schedule": { + "description": "The schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.", + "type": "string", + "default": "" + }, + "startingDeadlineSeconds": { + "description": "Optional deadline in seconds for starting the job if it misses scheduled time for any reason. Missed jobs executions will be counted as failed ones.", "type": "integer", - "format": "int32" + "format": "int64" }, - "preferredHolder": { - "description": "PreferredHolder signals to a lease holder that the lease has a more optimal holder and should be given up. This field can only be set if Strategy is also set.", - "type": "string" + "successfulJobsHistoryLimit": { + "description": "The number of successful finished jobs to retain. Value must be non-negative integer. Defaults to 3.", + "type": "integer", + "format": "int32" }, - "renewTime": { - "description": "renewTime is a time when the current holder of a lease has last updated the lease.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" + "suspend": { + "description": "This flag tells the controller to suspend subsequent executions, it does not apply to already started executions. Defaults to false.", + "type": "boolean" }, - "strategy": { - "description": "Strategy indicates the strategy for picking the leader for coordinated leader election. If the field is not specified, there is no active coordination for this lease. (Alpha) Using this field requires the CoordinatedLeaderElection feature gate to be enabled.", + "timeZone": { + "description": "The time zone name for the given schedule, see https://en.wikipedia.org/wiki/List_of_tz_database_time_zones. If not specified, this will default to the time zone of the kube-controller-manager process. The set of valid time zone names and the time zone offset is loaded from the system-wide time zone database by the API server during CronJob validation and the controller manager during execution. If no system-wide time zone database can be found a bundled version of the database is used instead. If the time zone name becomes invalid during the lifetime of a CronJob or due to a change in host configuration, the controller will stop creating new new Jobs and will create a system event with the reason UnknownTimeZone. More information can be found in https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/#time-zones", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "coordination.k8s.io", + "Group": "", "Version": "v1", - "Kind": "LeaseSpec", + "Kind": "CronJobSpec", "Scope": "Namespaced" } }, - "io.k8s.api.coordination.v1alpha1.LeaseCandidate": { - "description": "LeaseCandidate defines a candidate for a Lease object. Candidates are created such that coordinated leader election will pick the best leader from the list of candidates.", + "io.k8s.api.batch.v1.CronJobStatus": { + "description": "CronJobStatus represents the current state of a cron job.", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "active": { + "description": "A list of pointers to currently running jobs.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + }, + "x-kubernetes-list-type": "atomic" }, - "metadata": { - "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "lastScheduleTime": { + "description": "Information when was the last time the job was successfully scheduled.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "spec": { - "description": "spec contains the specification of the Lease. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.coordination.v1alpha1.LeaseCandidateSpec" + "lastSuccessfulTime": { + "description": "Information when was the last time the job successfully completed.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" } }, "x-fabric8-info": { - "Type": "object", - "Group": "coordination.k8s.io", - "Version": "v1alpha1", - "Kind": "LeaseCandidate", + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "CronJobStatus", "Scope": "Namespaced" } }, - "io.k8s.api.coordination.v1alpha1.LeaseCandidateList": { - "description": "LeaseCandidateList is a list of Lease objects.", + "io.k8s.api.batch.v1.Job": { + "description": "Job represents the configuration of a single job.", "type": "object", - "required": [ - "items" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "items is a list of schema objects.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.coordination.v1alpha1.LeaseCandidate" - } - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "Specification of the desired behavior of a job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.batch.v1.JobSpec" + }, + "status": { + "description": "Current status of a job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.batch.v1.JobStatus" } }, "x-fabric8-info": { - "Type": "list", - "Group": "coordination.k8s.io", - "Version": "v1alpha1", - "Kind": "LeaseCandidateList", + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "Job", "Scope": "Namespaced" } }, - "io.k8s.api.coordination.v1alpha1.LeaseCandidateSpec": { - "description": "LeaseCandidateSpec is a specification of a Lease.", + "io.k8s.api.batch.v1.JobCondition": { + "description": "JobCondition describes current state of a job.", "type": "object", "required": [ - "leaseName", - "preferredStrategies" + "type", + "status" ], "properties": { - "binaryVersion": { - "description": "BinaryVersion is the binary version. It must be in a semver format without leading `v`. This field is required when strategy is \"OldestEmulationVersion\"", + "lastProbeTime": { + "description": "Last time the condition was checked.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "lastTransitionTime": { + "description": "Last time the condition transit from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "Human readable message indicating details about last transition.", "type": "string" }, - "emulationVersion": { - "description": "EmulationVersion is the emulation version. It must be in a semver format without leading `v`. EmulationVersion must be less than or equal to BinaryVersion. This field is required when strategy is \"OldestEmulationVersion\"", + "reason": { + "description": "(brief) reason for the condition's last transition.", "type": "string" }, - "leaseName": { - "description": "LeaseName is the name of the lease for which this candidate is contending. This field is immutable.", + "status": { + "description": "Status of the condition, one of True, False, Unknown.", "type": "string", "default": "" }, - "pingTime": { - "description": "PingTime is the last time that the server has requested the LeaseCandidate to renew. It is only done during leader election to check if any LeaseCandidates have become ineligible. When PingTime is updated, the LeaseCandidate will respond by updating RenewTime.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" - }, - "preferredStrategies": { - "description": "PreferredStrategies indicates the list of strategies for picking the leader for coordinated leader election. The list is ordered, and the first strategy supersedes all other strategies. The list is used by coordinated leader election to make a decision about the final election strategy. This follows as - If all clients have strategy X as the first element in this list, strategy X will be used. - If a candidate has strategy [X] and another candidate has strategy [Y, X], Y supersedes X and strategy Y\n will be used.\n- If a candidate has strategy [X, Y] and another candidate has strategy [Y, X], this is a user error and leader\n election will not operate the Lease until resolved.\n(Alpha) Using this field requires the CoordinatedLeaderElection feature gate to be enabled.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "renewTime": { - "description": "RenewTime is the time that the LeaseCandidate was last updated. Any time a Lease needs to do leader election, the PingTime field is updated to signal to the LeaseCandidate that they should update the RenewTime. Old LeaseCandidate objects are also garbage collected if it has been hours since the last renew. The PingTime field is updated regularly to prevent garbage collection for still active LeaseCandidates.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" + "type": { + "description": "Type of job condition, Complete or Failed.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "coordination.k8s.io", - "Version": "v1alpha1", - "Kind": "LeaseCandidateSpec", - "Scope": "Namespaced" - } - }, - "io.k8s.api.coordination.v1beta1.Lease": { - "description": "Lease defines a lease concept.", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec contains the specification of the Lease. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.coordination.v1beta1.LeaseSpec" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "coordination.k8s.io", - "Version": "v1beta1", - "Kind": "Lease", + "Group": "", + "Version": "v1", + "Kind": "JobCondition", "Scope": "Namespaced" } }, - "io.k8s.api.coordination.v1beta1.LeaseList": { - "description": "LeaseList is a list of Lease objects.", + "io.k8s.api.batch.v1.JobList": { + "description": "JobList is a collection of jobs.", "type": "object", "required": [ "items" @@ -28305,11 +28362,11 @@ "type": "string" }, "items": { - "description": "items is a list of schema objects.", + "description": "items is the list of Jobs.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.coordination.v1beta1.Lease" + "$ref": "#/definitions/io.k8s.api.batch.v1.Job" } }, "kind": { @@ -28324,167 +28381,280 @@ }, "x-fabric8-info": { "Type": "list", - "Group": "coordination.k8s.io", - "Version": "v1beta1", - "Kind": "LeaseList", + "Group": "", + "Version": "v1", + "Kind": "JobList", "Scope": "Namespaced" } }, - "io.k8s.api.coordination.v1beta1.LeaseSpec": { - "description": "LeaseSpec is a specification of a Lease.", + "io.k8s.api.batch.v1.JobSpec": { + "description": "JobSpec describes how the job execution will look like.", "type": "object", + "required": [ + "template" + ], "properties": { - "acquireTime": { - "description": "acquireTime is a time when the current lease was acquired.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" + "activeDeadlineSeconds": { + "description": "Specifies the duration in seconds relative to the startTime that the job may be continuously active before the system tries to terminate it; value must be positive integer. If a Job is suspended (at creation or through an update), this timer will effectively be stopped and reset when the Job is resumed again.", + "type": "integer", + "format": "int64" }, - "holderIdentity": { - "description": "holderIdentity contains the identity of the holder of a current lease. If Coordinated Leader Election is used, the holder identity must be equal to the elected LeaseCandidate.metadata.name field.", - "type": "string" + "backoffLimit": { + "description": "Specifies the number of retries before marking this job failed. Defaults to 6", + "type": "integer", + "format": "int32" }, - "leaseDurationSeconds": { - "description": "leaseDurationSeconds is a duration that candidates for a lease need to wait to force acquire it. This is measure against time of last observed renewTime.", + "backoffLimitPerIndex": { + "description": "Specifies the limit for the number of retries within an index before marking this index as failed. When enabled the number of failures per index is kept in the pod's batch.kubernetes.io/job-index-failure-count annotation. It can only be set when Job's completionMode=Indexed, and the Pod's restart policy is Never. The field is immutable. This field is beta-level. It can be used when the `JobBackoffLimitPerIndex` feature gate is enabled (enabled by default).", "type": "integer", "format": "int32" }, - "leaseTransitions": { - "description": "leaseTransitions is the number of transitions of a lease between holders.", + "completionMode": { + "description": "completionMode specifies how Pod completions are tracked. It can be `NonIndexed` (default) or `Indexed`.\n\n`NonIndexed` means that the Job is considered complete when there have been .spec.completions successfully completed Pods. Each Pod completion is homologous to each other.\n\n`Indexed` means that the Pods of a Job get an associated completion index from 0 to (.spec.completions - 1), available in the annotation batch.kubernetes.io/job-completion-index. The Job is considered complete when there is one successfully completed Pod for each index. When value is `Indexed`, .spec.completions must be specified and `.spec.parallelism` must be less than or equal to 10^5. In addition, The Pod name takes the form `$(job-name)-$(index)-$(random-string)`, the Pod hostname takes the form `$(job-name)-$(index)`.\n\nMore completion modes can be added in the future. If the Job controller observes a mode that it doesn't recognize, which is possible during upgrades due to version skew, the controller skips updates for the Job.\n\nPossible enum values:\n - `\"Indexed\"` is a Job completion mode. In this mode, the Pods of a Job get an associated completion index from 0 to (.spec.completions - 1). The Job is considered complete when a Pod completes for each completion index.\n - `\"NonIndexed\"` is a Job completion mode. In this mode, the Job is considered complete when there have been .spec.completions successfully completed Pods. Pod completions are homologous to each other.", + "type": "string", + "enum": [ + "Indexed", + "NonIndexed" + ] + }, + "completions": { + "description": "Specifies the desired number of successfully finished pods the job should be run with. Setting to null means that the success of any pod signals the success of all pods, and allows parallelism to have any positive value. Setting to 1 means that parallelism is limited to 1 and the success of that pod signals the success of the job. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/", "type": "integer", "format": "int32" }, - "preferredHolder": { - "description": "PreferredHolder signals to a lease holder that the lease has a more optimal holder and should be given up.", + "managedBy": { + "description": "ManagedBy field indicates the controller that manages a Job. The k8s Job controller reconciles jobs which don't have this field at all or the field value is the reserved string `kubernetes.io/job-controller`, but skips reconciling Jobs with a custom value for this field. The value must be a valid domain-prefixed path (e.g. acme.io/foo) - all characters before the first \"/\" must be a valid subdomain as defined by RFC 1123. All characters trailing the first \"/\" must be valid HTTP Path characters as defined by RFC 3986. The value cannot exceed 63 characters. This field is immutable.\n\nThis field is alpha-level. The job controller accepts setting the field when the feature gate JobManagedBy is enabled (disabled by default).", "type": "string" }, - "renewTime": { - "description": "renewTime is a time when the current holder of a lease has last updated the lease.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" + "manualSelector": { + "description": "manualSelector controls generation of pod labels and pod selectors. Leave `manualSelector` unset unless you are certain what you are doing. When false or unset, the system pick labels unique to this job and appends those labels to the pod template. When true, the user is responsible for picking unique labels and specifying the selector. Failure to pick a unique label may cause this and other jobs to not function correctly. However, You may see `manualSelector=true` in jobs that were created with the old `extensions/v1beta1` API. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/#specifying-your-own-pod-selector", + "type": "boolean" }, - "strategy": { - "description": "Strategy indicates the strategy for picking the leader for coordinated leader election (Alpha) Using this field requires the CoordinatedLeaderElection feature gate to be enabled.", - "type": "string" + "maxFailedIndexes": { + "description": "Specifies the maximal number of failed indexes before marking the Job as failed, when backoffLimitPerIndex is set. Once the number of failed indexes exceeds this number the entire Job is marked as Failed and its execution is terminated. When left as null the job continues execution of all of its indexes and is marked with the `Complete` Job condition. It can only be specified when backoffLimitPerIndex is set. It can be null or up to completions. It is required and must be less than or equal to 10^4 when is completions greater than 10^5. This field is beta-level. It can be used when the `JobBackoffLimitPerIndex` feature gate is enabled (enabled by default).", + "type": "integer", + "format": "int32" + }, + "parallelism": { + "description": "Specifies the maximum desired number of pods the job should run at any given time. The actual number of pods running in steady state will be less than this number when ((.spec.completions - .status.successful) \u003c .spec.parallelism), i.e. when the work left to do is less than max parallelism. More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/", + "type": "integer", + "format": "int32" + }, + "podFailurePolicy": { + "description": "Specifies the policy of handling failed pods. In particular, it allows to specify the set of actions and conditions which need to be satisfied to take the associated action. If empty, the default behaviour applies - the counter of failed pods, represented by the jobs's .status.failed field, is incremented and it is checked against the backoffLimit. This field cannot be used in combination with restartPolicy=OnFailure.", + "$ref": "#/definitions/io.k8s.api.batch.v1.PodFailurePolicy" + }, + "podReplacementPolicy": { + "description": "podReplacementPolicy specifies when to create replacement Pods. Possible values are: - TerminatingOrFailed means that we recreate pods\n when they are terminating (has a metadata.deletionTimestamp) or failed.\n- Failed means to wait until a previously created Pod is fully terminated (has phase\n Failed or Succeeded) before creating a replacement Pod.\n\nWhen using podFailurePolicy, Failed is the the only allowed value. TerminatingOrFailed and Failed are allowed values when podFailurePolicy is not in use. This is an beta field. To use this, enable the JobPodReplacementPolicy feature toggle. This is on by default.\n\nPossible enum values:\n - `\"Failed\"` means to wait until a previously created Pod is fully terminated (has phase Failed or Succeeded) before creating a replacement Pod.\n - `\"TerminatingOrFailed\"` means that we recreate pods when they are terminating (has a metadata.deletionTimestamp) or failed.", + "type": "string", + "enum": [ + "Failed", + "TerminatingOrFailed" + ] + }, + "selector": { + "description": "A label query over pods that should match the pod count. Normally, the system sets this field for you. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "successPolicy": { + "description": "successPolicy specifies the policy when the Job can be declared as succeeded. If empty, the default behavior applies - the Job is declared as succeeded only when the number of succeeded pods equals to the completions. When the field is specified, it must be immutable and works only for the Indexed Jobs. Once the Job meets the SuccessPolicy, the lingering pods are terminated.\n\nThis field is beta-level. To use this field, you must enable the `JobSuccessPolicy` feature gate (enabled by default).", + "$ref": "#/definitions/io.k8s.api.batch.v1.SuccessPolicy" + }, + "suspend": { + "description": "suspend specifies whether the Job controller should create Pods or not. If a Job is created with suspend set to true, no Pods are created by the Job controller. If a Job is suspended after creation (i.e. the flag goes from false to true), the Job controller will delete all active Pods associated with this Job. Users must design their workload to gracefully handle this. Suspending a Job will reset the StartTime field of the Job, effectively resetting the ActiveDeadlineSeconds timer too. Defaults to false.", + "type": "boolean" + }, + "template": { + "description": "Describes the pod that will be created when executing a job. The only allowed template.spec.restartPolicy values are \"Never\" or \"OnFailure\". More info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" + }, + "ttlSecondsAfterFinished": { + "description": "ttlSecondsAfterFinished limits the lifetime of a Job that has finished execution (either Complete or Failed). If this field is set, ttlSecondsAfterFinished after the Job finishes, it is eligible to be automatically deleted. When the Job is being deleted, its lifecycle guarantees (e.g. finalizers) will be honored. If this field is unset, the Job won't be automatically deleted. If this field is set to zero, the Job becomes eligible to be deleted immediately after it finishes.", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { "Type": "nested", - "Group": "coordination.k8s.io", - "Version": "v1beta1", - "Kind": "LeaseSpec", + "Group": "", + "Version": "v1", + "Kind": "JobSpec", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.AWSElasticBlockStoreVolumeSource": { - "description": "Represents a Persistent Disk resource in AWS.\n\nAn AWS EBS disk must exist before mounting to a container. The disk must also be in the same AWS zone as the kubelet. An AWS EBS disk can only be mounted as read/write once. AWS EBS volumes support ownership management and SELinux relabeling.", + "io.k8s.api.batch.v1.JobStatus": { + "description": "JobStatus represents the current state of a Job.", "type": "object", - "required": [ - "volumeID" - ], "properties": { - "fsType": { - "description": "fsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore", + "active": { + "description": "The number of pending and running pods which are not terminating (without a deletionTimestamp). The value is zero for finished jobs.", + "type": "integer", + "format": "int32" + }, + "completedIndexes": { + "description": "completedIndexes holds the completed indexes when .spec.completionMode = \"Indexed\" in a text format. The indexes are represented as decimal integers separated by commas. The numbers are listed in increasing order. Three or more consecutive numbers are compressed and represented by the first and last element of the series, separated by a hyphen. For example, if the completed indexes are 1, 3, 4, 5 and 7, they are represented as \"1,3-5,7\".", "type": "string" }, - "partition": { - "description": "partition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as \"1\". Similarly, the volume partition for /dev/sda is \"0\" (or you can leave the property empty).", + "completionTime": { + "description": "Represents time when the job was completed. It is not guaranteed to be set in happens-before order across separate operations. It is represented in RFC3339 form and is in UTC. The completion time is set when the job finishes successfully, and only then. The value cannot be updated or removed. The value indicates the same or later point in time as the startTime field.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "conditions": { + "description": "The latest available observations of an object's current state. When a Job fails, one of the conditions will have type \"Failed\" and status true. When a Job is suspended, one of the conditions will have type \"Suspended\" and status true; when the Job is resumed, the status of this condition will become false. When a Job is completed, one of the conditions will have type \"Complete\" and status true.\n\nA job is considered finished when it is in a terminal condition, either \"Complete\" or \"Failed\". A Job cannot have both the \"Complete\" and \"Failed\" conditions. Additionally, it cannot be in the \"Complete\" and \"FailureTarget\" conditions. The \"Complete\", \"Failed\" and \"FailureTarget\" conditions cannot be disabled.\n\nMore info: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.batch.v1.JobCondition" + }, + "x-kubernetes-list-type": "atomic", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "failed": { + "description": "The number of pods which reached phase Failed. The value increases monotonically.", "type": "integer", "format": "int32" }, - "readOnly": { - "description": "readOnly value true will force the readOnly setting in VolumeMounts. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore", - "type": "boolean" + "failedIndexes": { + "description": "FailedIndexes holds the failed indexes when spec.backoffLimitPerIndex is set. The indexes are represented in the text format analogous as for the `completedIndexes` field, ie. they are kept as decimal integers separated by commas. The numbers are listed in increasing order. Three or more consecutive numbers are compressed and represented by the first and last element of the series, separated by a hyphen. For example, if the failed indexes are 1, 3, 4, 5 and 7, they are represented as \"1,3-5,7\". The set of failed indexes cannot overlap with the set of completed indexes.\n\nThis field is beta-level. It can be used when the `JobBackoffLimitPerIndex` feature gate is enabled (enabled by default).", + "type": "string" }, - "volumeID": { - "description": "volumeID is unique ID of the persistent disk resource in AWS (Amazon EBS volume). More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore", - "type": "string", - "default": "" + "ready": { + "description": "The number of active pods which have a Ready condition and are not terminating (without a deletionTimestamp).", + "type": "integer", + "format": "int32" + }, + "startTime": { + "description": "Represents time when the job controller started processing a job. When a Job is created in the suspended state, this field is not set until the first time it is resumed. This field is reset every time a Job is resumed from suspension. It is represented in RFC3339 form and is in UTC.\n\nOnce set, the field can only be removed when the job is suspended. The field cannot be modified while the job is unsuspended or finished.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "succeeded": { + "description": "The number of pods which reached phase Succeeded. The value increases monotonically for a given spec. However, it may decrease in reaction to scale down of elastic indexed jobs.", + "type": "integer", + "format": "int32" + }, + "terminating": { + "description": "The number of pods which are terminating (in phase Pending or Running and have a deletionTimestamp).\n\nThis field is beta-level. The job controller populates the field when the feature gate JobPodReplacementPolicy is enabled (enabled by default).", + "type": "integer", + "format": "int32" + }, + "uncountedTerminatedPods": { + "description": "uncountedTerminatedPods holds the UIDs of Pods that have terminated but the job controller hasn't yet accounted for in the status counters.\n\nThe job controller creates pods with a finalizer. When a pod terminates (succeeded or failed), the controller does three steps to account for it in the job status:\n\n1. Add the pod UID to the arrays in this field. 2. Remove the pod finalizer. 3. Remove the pod UID from the arrays while increasing the corresponding\n counter.\n\nOld jobs might not be tracked using this field, in which case the field remains null. The structure is empty for finished jobs.", + "$ref": "#/definitions/io.k8s.api.batch.v1.UncountedTerminatedPods" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "AWSElasticBlockStoreVolumeSource", + "Kind": "JobStatus", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.Affinity": { - "description": "Affinity is a group of affinity scheduling rules.", + "io.k8s.api.batch.v1.JobTemplateSpec": { + "description": "JobTemplateSpec describes the data a Job should have when created from a template", "type": "object", "properties": { - "nodeAffinity": { - "description": "Describes node affinity scheduling rules for the pod.", - "$ref": "#/definitions/io.k8s.api.core.v1.NodeAffinity" - }, - "podAffinity": { - "description": "Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)).", - "$ref": "#/definitions/io.k8s.api.core.v1.PodAffinity" + "metadata": { + "description": "Standard object's metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "podAntiAffinity": { - "description": "Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)).", - "$ref": "#/definitions/io.k8s.api.core.v1.PodAntiAffinity" + "spec": { + "description": "Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.batch.v1.JobSpec" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "Affinity", + "Kind": "JobTemplateSpec", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.AppArmorProfile": { - "description": "AppArmorProfile defines a pod or container's AppArmor settings.", + "io.k8s.api.batch.v1.PodFailurePolicy": { + "description": "PodFailurePolicy describes how failed pods influence the backoffLimit.", "type": "object", "required": [ - "type" + "rules" ], "properties": { - "localhostProfile": { - "description": "localhostProfile indicates a profile loaded on the node that should be used. The profile must be preconfigured on the node to work. Must match the loaded name of the profile. Must be set if and only if type is \"Localhost\".", + "rules": { + "description": "A list of pod failure policy rules. The rules are evaluated in order. Once a rule matches a Pod failure, the remaining of the rules are ignored. When no rule matches the Pod failure, the default handling applies - the counter of pod failures is incremented and it is checked against the backoffLimit. At most 20 elements are allowed.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.batch.v1.PodFailurePolicyRule" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "PodFailurePolicy", + "Scope": "Namespaced" + } + }, + "io.k8s.api.batch.v1.PodFailurePolicyOnExitCodesRequirement": { + "description": "PodFailurePolicyOnExitCodesRequirement describes the requirement for handling a failed pod based on its container exit codes. In particular, it lookups the .state.terminated.exitCode for each app container and init container status, represented by the .status.containerStatuses and .status.initContainerStatuses fields in the Pod status, respectively. Containers completed with success (exit code 0) are excluded from the requirement check.", + "type": "object", + "required": [ + "operator", + "values" + ], + "properties": { + "containerName": { + "description": "Restricts the check for exit codes to the container with the specified name. When null, the rule applies to all containers. When specified, it should match one the container or initContainer names in the pod template.", "type": "string" }, - "type": { - "description": "type indicates which kind of AppArmor profile will be applied. Valid options are:\n Localhost - a profile pre-loaded on the node.\n RuntimeDefault - the container runtime's default profile.\n Unconfined - no AppArmor enforcement.\n\nPossible enum values:\n - `\"Localhost\"` indicates that a profile pre-loaded on the node should be used.\n - `\"RuntimeDefault\"` indicates that the container runtime's default AppArmor profile should be used.\n - `\"Unconfined\"` indicates that no AppArmor profile should be enforced.", + "operator": { + "description": "Represents the relationship between the container exit code(s) and the specified values. Containers completed with success (exit code 0) are excluded from the requirement check. Possible values are:\n\n- In: the requirement is satisfied if at least one container exit code\n (might be multiple if there are multiple containers not restricted\n by the 'containerName' field) is in the set of specified values.\n- NotIn: the requirement is satisfied if at least one container exit code\n (might be multiple if there are multiple containers not restricted\n by the 'containerName' field) is not in the set of specified values.\nAdditional values are considered to be added in the future. Clients should react to an unknown operator by assuming the requirement is not satisfied.\n\nPossible enum values:\n - `\"In\"`\n - `\"NotIn\"`", "type": "string", "default": "", "enum": [ - "Localhost", - "RuntimeDefault", - "Unconfined" + "In", + "NotIn" ] + }, + "values": { + "description": "Specifies the set of values. Each returned container exit code (might be multiple in case of multiple containers) is checked against this set of values with respect to the operator. The list of values must be ordered and must not contain duplicates. Value '0' cannot be used for the In operator. At least one element is required. At most 255 elements are allowed.", + "type": "array", + "items": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "x-kubernetes-list-type": "set" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "AppArmorProfile", + "Kind": "PodFailurePolicyOnExitCodesRequirement", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "localhostProfile": "LocalhostProfile" - } - } - ] + } }, - "io.k8s.api.core.v1.AttachedVolume": { - "description": "AttachedVolume describes a volume attached to a node", + "io.k8s.api.batch.v1.PodFailurePolicyOnPodConditionsPattern": { + "description": "PodFailurePolicyOnPodConditionsPattern describes a pattern for matching an actual pod condition type.", "type": "object", "required": [ - "name", - "devicePath" + "type", + "status" ], "properties": { - "devicePath": { - "description": "DevicePath represents the device path where the volume should be available", + "status": { + "description": "Specifies the required Pod condition status. To match a pod condition it is required that the specified status equals the pod condition status. Defaults to True.", "type": "string", "default": "" }, - "name": { - "description": "Name of the attached volume", + "type": { + "description": "Specifies the required Pod condition type. To match a pod condition it is required that specified type equals the pod condition type.", "type": "string", "default": "" } @@ -28493,20 +28663,38 @@ "Type": "nested", "Group": "", "Version": "v1", - "Kind": "AttachedVolume", + "Kind": "PodFailurePolicyOnPodConditionsPattern", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.AvoidPods": { - "description": "AvoidPods describes pods that should avoid this node. This is the value for a Node annotation with key scheduler.alpha.kubernetes.io/preferAvoidPods and will eventually become a field of NodeStatus.", + "io.k8s.api.batch.v1.PodFailurePolicyRule": { + "description": "PodFailurePolicyRule describes how a pod failure is handled when the requirements are met. One of onExitCodes and onPodConditions, but not both, can be used in each rule.", "type": "object", - "properties": { - "preferAvoidPods": { - "description": "Bounded-sized list of signatures of pods that should avoid this node, sorted in timestamp order from oldest to newest. Size of the slice is unspecified.", + "required": [ + "action" + ], + "properties": { + "action": { + "description": "Specifies the action taken on a pod failure when the requirements are satisfied. Possible values are:\n\n- FailJob: indicates that the pod's job is marked as Failed and all\n running pods are terminated.\n- FailIndex: indicates that the pod's index is marked as Failed and will\n not be restarted.\n This value is beta-level. It can be used when the\n `JobBackoffLimitPerIndex` feature gate is enabled (enabled by default).\n- Ignore: indicates that the counter towards the .backoffLimit is not\n incremented and a replacement pod is created.\n- Count: indicates that the pod is handled in the default way - the\n counter towards the .backoffLimit is incremented.\nAdditional values are considered to be added in the future. Clients should react to an unknown action by skipping the rule.\n\nPossible enum values:\n - `\"Count\"` This is an action which might be taken on a pod failure - the pod failure is handled in the default way - the counter towards .backoffLimit, represented by the job's .status.failed field, is incremented.\n - `\"FailIndex\"` This is an action which might be taken on a pod failure - mark the Job's index as failed to avoid restarts within this index. This action can only be used when backoffLimitPerIndex is set. This value is beta-level.\n - `\"FailJob\"` This is an action which might be taken on a pod failure - mark the pod's job as Failed and terminate all running pods.\n - `\"Ignore\"` This is an action which might be taken on a pod failure - the counter towards .backoffLimit, represented by the job's .status.failed field, is not incremented and a replacement pod is created.", + "type": "string", + "default": "", + "enum": [ + "Count", + "FailIndex", + "FailJob", + "Ignore" + ] + }, + "onExitCodes": { + "description": "Represents the requirement on the container exit codes.", + "$ref": "#/definitions/io.k8s.api.batch.v1.PodFailurePolicyOnExitCodesRequirement" + }, + "onPodConditions": { + "description": "Represents the requirement on the pod conditions. The requirement is represented as a list of pod condition patterns. The requirement is satisfied if at least one pattern matches an actual pod condition. At most 20 elements are allowed.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PreferAvoidPodsEntry" + "$ref": "#/definitions/io.k8s.api.batch.v1.PodFailurePolicyOnPodConditionsPattern" }, "x-kubernetes-list-type": "atomic" } @@ -28515,139 +28703,91 @@ "Type": "nested", "Group": "", "Version": "v1", - "Kind": "AvoidPods", + "Kind": "PodFailurePolicyRule", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.AzureDiskVolumeSource": { - "description": "AzureDisk represents an Azure Data Disk mount on the host and bind mount to the pod.", + "io.k8s.api.batch.v1.SuccessPolicy": { + "description": "SuccessPolicy describes when a Job can be declared as succeeded based on the success of some indexes.", "type": "object", "required": [ - "diskName", - "diskURI" + "rules" ], "properties": { - "cachingMode": { - "description": "cachingMode is the Host Caching mode: None, Read Only, Read Write.\n\nPossible enum values:\n - `\"None\"`\n - `\"ReadOnly\"`\n - `\"ReadWrite\"`", - "type": "string", - "default": "ReadWrite", - "enum": [ - "None", - "ReadOnly", - "ReadWrite" - ] - }, - "diskName": { - "description": "diskName is the Name of the data disk in the blob storage", - "type": "string", - "default": "" - }, - "diskURI": { - "description": "diskURI is the URI of data disk in the blob storage", - "type": "string", - "default": "" - }, - "fsType": { - "description": "fsType is Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified.", - "type": "string", - "default": "ext4" - }, - "kind": { - "description": "kind expected values are Shared: multiple blob disks per storage account Dedicated: single blob disk per storage account Managed: azure managed data disk (only in managed availability set). defaults to shared\n\nPossible enum values:\n - `\"Dedicated\"`\n - `\"Managed\"`\n - `\"Shared\"`", - "type": "string", - "default": "Shared", - "enum": [ - "Dedicated", - "Managed", - "Shared" - ] - }, - "readOnly": { - "description": "readOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", - "type": "boolean", - "default": false + "rules": { + "description": "rules represents the list of alternative rules for the declaring the Jobs as successful before `.status.succeeded \u003e= .spec.completions`. Once any of the rules are met, the \"SucceededCriteriaMet\" condition is added, and the lingering pods are removed. The terminal state for such a Job has the \"Complete\" condition. Additionally, these rules are evaluated in order; Once the Job meets one of the rules, other rules are ignored. At most 20 elements are allowed.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.batch.v1.SuccessPolicyRule" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "AzureDiskVolumeSource", + "Kind": "SuccessPolicy", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.AzureFilePersistentVolumeSource": { - "description": "AzureFile represents an Azure File Service mount on the host and bind mount to the pod.", + "io.k8s.api.batch.v1.SuccessPolicyRule": { + "description": "SuccessPolicyRule describes rule for declaring a Job as succeeded. Each rule must have at least one of the \"succeededIndexes\" or \"succeededCount\" specified.", "type": "object", - "required": [ - "secretName", - "shareName" - ], "properties": { - "readOnly": { - "description": "readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", - "type": "boolean" - }, - "secretName": { - "description": "secretName is the name of secret that contains Azure Storage Account Name and Key", - "type": "string", - "default": "" + "succeededCount": { + "description": "succeededCount specifies the minimal required size of the actual set of the succeeded indexes for the Job. When succeededCount is used along with succeededIndexes, the check is constrained only to the set of indexes specified by succeededIndexes. For example, given that succeededIndexes is \"1-4\", succeededCount is \"3\", and completed indexes are \"1\", \"3\", and \"5\", the Job isn't declared as succeeded because only \"1\" and \"3\" indexes are considered in that rules. When this field is null, this doesn't default to any value and is never evaluated at any time. When specified it needs to be a positive integer.", + "type": "integer", + "format": "int32" }, - "secretNamespace": { - "description": "secretNamespace is the namespace of the secret that contains Azure Storage Account Name and Key default is the same as the Pod", + "succeededIndexes": { + "description": "succeededIndexes specifies the set of indexes which need to be contained in the actual set of the succeeded indexes for the Job. The list of indexes must be within 0 to \".spec.completions-1\" and must not contain duplicates. At least one element is required. The indexes are represented as intervals separated by commas. The intervals can be a decimal integer or a pair of decimal integers separated by a hyphen. The number are listed in represented by the first and last element of the series, separated by a hyphen. For example, if the completed indexes are 1, 3, 4, 5 and 7, they are represented as \"1,3-5,7\". When this field is null, this field doesn't default to any value and is never evaluated at any time.", "type": "string" - }, - "shareName": { - "description": "shareName is the azure Share Name", - "type": "string", - "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "AzureFilePersistentVolumeSource", + "Kind": "SuccessPolicyRule", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.AzureFileVolumeSource": { - "description": "AzureFile represents an Azure File Service mount on the host and bind mount to the pod.", + "io.k8s.api.batch.v1.UncountedTerminatedPods": { + "description": "UncountedTerminatedPods holds UIDs of Pods that have terminated but haven't been accounted in Job status counters.", "type": "object", - "required": [ - "secretName", - "shareName" - ], "properties": { - "readOnly": { - "description": "readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", - "type": "boolean" - }, - "secretName": { - "description": "secretName is the name of secret that contains Azure Storage Account Name and Key", - "type": "string", - "default": "" + "failed": { + "description": "failed holds UIDs of failed Pods.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "shareName": { - "description": "shareName is the azure share Name", - "type": "string", - "default": "" + "succeeded": { + "description": "succeeded holds UIDs of succeeded Pods.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "AzureFileVolumeSource", + "Kind": "UncountedTerminatedPods", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.Binding": { - "description": "Binding ties one object to another; for example, a pod is bound to a node by a scheduler. Deprecated in 1.7, please use the bindings subresource of pods instead.", + "io.k8s.api.batch.v1beta1.CronJob": { + "description": "CronJob represents the configuration of a single cron job.", "type": "object", - "required": [ - "target" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -28662,443 +28802,448 @@ "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "target": { - "description": "The target object that you want to bind to the standard object.", + "spec": { + "description": "Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJobSpec" + }, + "status": { + "description": "Current status of a cron job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJobStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "", - "Version": "v1", - "Kind": "Binding", + "Version": "v1beta1", + "Kind": "CronJob", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.CSIPersistentVolumeSource": { - "description": "Represents storage that is managed by an external CSI volume driver (Beta feature)", + "io.k8s.api.batch.v1beta1.CronJobList": { + "description": "CronJobList is a collection of cron jobs.", "type": "object", "required": [ - "driver", - "volumeHandle" + "items" ], "properties": { - "controllerExpandSecretRef": { - "description": "controllerExpandSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI ControllerExpandVolume call. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" - }, - "controllerPublishSecretRef": { - "description": "controllerPublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI ControllerPublishVolume and ControllerUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" - }, - "driver": { - "description": "driver is the name of the driver to use for this volume. Required.", - "type": "string", - "default": "" - }, - "fsType": { - "description": "fsType to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\".", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "nodeExpandSecretRef": { - "description": "nodeExpandSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodeExpandVolume call. This field is optional, may be omitted if no secret is required. If the secret object contains more than one secret, all secrets are passed.", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" - }, - "nodePublishSecretRef": { - "description": "nodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" - }, - "nodeStageSecretRef": { - "description": "nodeStageSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodeStageVolume and NodeStageVolume and NodeUnstageVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" - }, - "readOnly": { - "description": "readOnly value to pass to ControllerPublishVolumeRequest. Defaults to false (read/write).", - "type": "boolean" - }, - "volumeAttributes": { - "description": "volumeAttributes of the volume to publish.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" + "items": { + "description": "items is the list of CronJobs.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.CronJob" } }, - "volumeHandle": { - "description": "volumeHandle is the unique volume name returned by the CSI volume plugin’s CreateVolume to refer to the volume on all subsequent calls. Required.", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", + "Type": "list", "Group": "", - "Version": "v1", - "Kind": "CSIPersistentVolumeSource", + "Version": "v1beta1", + "Kind": "CronJobList", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.CSIVolumeSource": { - "description": "Represents a source location of a volume to mount, managed by an external CSI driver", + "io.k8s.api.batch.v1beta1.CronJobSpec": { + "description": "CronJobSpec describes how the job execution will look like and when it will actually run.", "type": "object", "required": [ - "driver" + "schedule", + "jobTemplate" ], "properties": { - "driver": { - "description": "driver is the name of the CSI driver that handles this volume. Consult with your admin for the correct name as registered in the cluster.", + "concurrencyPolicy": { + "description": "Specifies how to treat concurrent executions of a Job. Valid values are:\n\n- \"Allow\" (default): allows CronJobs to run concurrently; - \"Forbid\": forbids concurrent runs, skipping next run if previous run hasn't finished yet; - \"Replace\": cancels currently running job and replaces it with a new one", + "type": "string" + }, + "failedJobsHistoryLimit": { + "description": "The number of failed finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.", + "type": "integer", + "format": "int32" + }, + "jobTemplate": { + "description": "Specifies the job that will be created when executing a CronJob.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.batch.v1beta1.JobTemplateSpec" + }, + "schedule": { + "description": "The schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.", "type": "string", "default": "" }, - "fsType": { - "description": "fsType to mount. Ex. \"ext4\", \"xfs\", \"ntfs\". If not provided, the empty value is passed to the associated CSI driver which will determine the default filesystem to apply.", - "type": "string" + "startingDeadlineSeconds": { + "description": "Optional deadline in seconds for starting the job if it misses scheduled time for any reason. Missed jobs executions will be counted as failed ones.", + "type": "integer", + "format": "int64" }, - "nodePublishSecretRef": { - "description": "nodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secret references are passed.", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + "successfulJobsHistoryLimit": { + "description": "The number of successful finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified. Defaults to 3.", + "type": "integer", + "format": "int32" }, - "readOnly": { - "description": "readOnly specifies a read-only configuration for the volume. Defaults to false (read/write).", + "suspend": { + "description": "This flag tells the controller to suspend subsequent executions, it does not apply to already started executions. Defaults to false.", "type": "boolean" }, - "volumeAttributes": { - "description": "volumeAttributes stores driver-specific properties that are passed to the CSI driver. Consult your driver's documentation for supported values.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } + "timeZone": { + "description": "The time zone name for the given schedule, see https://en.wikipedia.org/wiki/List_of_tz_database_time_zones. If not specified, this will default to the time zone of the kube-controller-manager process. The set of valid time zone names and the time zone offset is loaded from the system-wide time zone database by the API server during CronJob validation and the controller manager during execution. If no system-wide time zone database can be found a bundled version of the database is used instead. If the time zone name becomes invalid during the lifetime of a CronJob or due to a change in host configuration, the controller will stop creating new new Jobs and will create a system event with the reason UnknownTimeZone. More information can be found in https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/#time-zones", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "CSIVolumeSource", + "Version": "v1beta1", + "Kind": "CronJobSpec", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.Capabilities": { - "description": "Adds and removes POSIX capabilities from running containers.", + "io.k8s.api.batch.v1beta1.CronJobStatus": { + "description": "CronJobStatus represents the current state of a cron job.", "type": "object", "properties": { - "add": { - "description": "Added capabilities", + "active": { + "description": "A list of pointers to currently running jobs.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" }, "x-kubernetes-list-type": "atomic" }, - "drop": { - "description": "Removed capabilities", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "lastScheduleTime": { + "description": "Information when was the last time the job was successfully scheduled.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "lastSuccessfulTime": { + "description": "Information when was the last time the job successfully completed.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "Capabilities", + "Version": "v1beta1", + "Kind": "CronJobStatus", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.CephFSPersistentVolumeSource": { - "description": "Represents a Ceph Filesystem mount that lasts the lifetime of a pod Cephfs volumes do not support ownership management or SELinux relabeling.", + "io.k8s.api.batch.v1beta1.JobTemplateSpec": { + "description": "JobTemplateSpec describes the data a Job should have when created from a template", "type": "object", - "required": [ - "monitors" - ], "properties": { - "monitors": { - "description": "monitors is Required: Monitors is a collection of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "path": { - "description": "path is Optional: Used as the mounted root, rather than the full Ceph tree, default is /", - "type": "string" - }, - "readOnly": { - "description": "readOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", - "type": "boolean" - }, - "secretFile": { - "description": "secretFile is Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secret More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", - "type": "string" - }, - "secretRef": { - "description": "secretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" + "metadata": { + "description": "Standard object's metadata of the jobs created from this template. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "user": { - "description": "user is Optional: User is the rados user name, default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", - "type": "string" + "spec": { + "description": "Specification of the desired behavior of the job. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.batch.v1.JobSpec" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "CephFSPersistentVolumeSource", + "Version": "v1beta1", + "Kind": "JobTemplateSpec", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.CephFSVolumeSource": { - "description": "Represents a Ceph Filesystem mount that lasts the lifetime of a pod Cephfs volumes do not support ownership management or SELinux relabeling.", + "io.k8s.api.certificates.v1.CertificateSigningRequest": { + "description": "CertificateSigningRequest objects provide a mechanism to obtain x509 certificates by submitting a certificate signing request, and having it asynchronously approved and issued.\n\nKubelets use this API to obtain:\n 1. client certificates to authenticate to kube-apiserver (with the \"kubernetes.io/kube-apiserver-client-kubelet\" signerName).\n 2. serving certificates for TLS endpoints kube-apiserver can connect to securely (with the \"kubernetes.io/kubelet-serving\" signerName).\n\nThis API can be used to request client certificates to authenticate to kube-apiserver (with the \"kubernetes.io/kube-apiserver-client\" signerName), or to obtain certificates from custom non-Kubernetes signers.", "type": "object", "required": [ - "monitors" + "spec" ], "properties": { - "monitors": { - "description": "monitors is Required: Monitors is a collection of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "path": { - "description": "path is Optional: Used as the mounted root, rather than the full Ceph tree, default is /", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "readOnly": { - "description": "readOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", - "type": "boolean" - }, - "secretFile": { - "description": "secretFile is Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secret More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "secretRef": { - "description": "secretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + "metadata": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "user": { - "description": "user is optional: User is the rados user name, default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", - "type": "string" + "spec": { + "description": "spec contains the certificate request, and is immutable after creation. Only the request, signerName, expirationSeconds, and usages fields can be set on creation. Other fields are derived by Kubernetes and cannot be modified by users.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestSpec" + }, + "status": { + "description": "status contains information about whether the request is approved or denied, and the certificate issued by the signer, or the failure condition indicating signer failure.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", + "Type": "object", + "Group": "certificates.k8s.io", "Version": "v1", - "Kind": "CephFSVolumeSource", - "Scope": "Namespaced" + "Kind": "CertificateSigningRequest", + "Scope": "Clustered" } }, - "io.k8s.api.core.v1.CinderPersistentVolumeSource": { - "description": "Represents a cinder volume resource in Openstack. A Cinder volume must exist before mounting to a container. The volume must also be in the same region as the kubelet. Cinder volumes support ownership management and SELinux relabeling.", + "io.k8s.api.certificates.v1.CertificateSigningRequestCondition": { + "description": "CertificateSigningRequestCondition describes a condition of a CertificateSigningRequest object", "type": "object", "required": [ - "volumeID" + "type", + "status" ], "properties": { - "fsType": { - "description": "fsType Filesystem type to mount. Must be a filesystem type supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", + "lastTransitionTime": { + "description": "lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "lastUpdateTime": { + "description": "lastUpdateTime is the time of the last update to this condition", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "message contains a human readable message with details about the request state", "type": "string" }, - "readOnly": { - "description": "readOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", - "type": "boolean" + "reason": { + "description": "reason indicates a brief reason for the request state", + "type": "string" }, - "secretRef": { - "description": "secretRef is Optional: points to a secret object containing parameters used to connect to OpenStack.", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" + "status": { + "description": "status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be \"False\" or \"Unknown\".", + "type": "string", + "default": "" }, - "volumeID": { - "description": "volumeID used to identify the volume in cinder. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", + "type": { + "description": "type of the condition. Known conditions are \"Approved\", \"Denied\", and \"Failed\".\n\nAn \"Approved\" condition is added via the /approval subresource, indicating the request was approved and should be issued by the signer.\n\nA \"Denied\" condition is added via the /approval subresource, indicating the request was denied and should not be issued by the signer.\n\nA \"Failed\" condition is added via the /status subresource, indicating the signer failed to issue the certificate.\n\nApproved and Denied conditions are mutually exclusive. Approved, Denied, and Failed conditions cannot be removed once added.\n\nOnly one condition of a given type is allowed.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "certificates.k8s.io", "Version": "v1", - "Kind": "CinderPersistentVolumeSource", + "Kind": "CertificateSigningRequestCondition", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.CinderVolumeSource": { - "description": "Represents a cinder volume resource in Openstack. A Cinder volume must exist before mounting to a container. The volume must also be in the same region as the kubelet. Cinder volumes support ownership management and SELinux relabeling.", + "io.k8s.api.certificates.v1.CertificateSigningRequestList": { + "description": "CertificateSigningRequestList is a collection of CertificateSigningRequest objects", "type": "object", "required": [ - "volumeID" + "items" ], "properties": { - "fsType": { - "description": "fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "readOnly": { - "description": "readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", - "type": "boolean" + "items": { + "description": "items is a collection of CertificateSigningRequest objects", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequest" + } }, - "secretRef": { - "description": "secretRef is optional: points to a secret object containing parameters used to connect to OpenStack.", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "volumeID": { - "description": "volumeID used to identify the volume in cinder. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", - "type": "string", - "default": "" + "metadata": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", + "Type": "list", + "Group": "certificates.k8s.io", "Version": "v1", - "Kind": "CinderVolumeSource", + "Kind": "CertificateSigningRequestList", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ClientIPConfig": { - "description": "ClientIPConfig represents the configurations of Client IP based session affinity.", - "type": "object", - "properties": { - "timeoutSeconds": { - "description": "timeoutSeconds specifies the seconds of ClientIP type session sticky time. The value must be \u003e0 \u0026\u0026 \u003c=86400(for 1 day) if ServiceAffinity == \"ClientIP\". Default value is 10800(for 3 hours).", - "type": "integer", - "format": "int32" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "ClientIPConfig", - "Scope": "Namespaced" - } - }, - "io.k8s.api.core.v1.ClusterTrustBundleProjection": { - "description": "ClusterTrustBundleProjection describes how to select a set of ClusterTrustBundle objects and project their contents into the pod filesystem.", + "io.k8s.api.certificates.v1.CertificateSigningRequestSpec": { + "description": "CertificateSigningRequestSpec contains the certificate request.", "type": "object", "required": [ - "path" + "request", + "signerName" ], "properties": { - "labelSelector": { - "description": "Select all ClusterTrustBundles that match this label selector. Only has effect if signerName is set. Mutually-exclusive with name. If unset, interpreted as \"match nothing\". If set but empty, interpreted as \"match everything\".", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "expirationSeconds": { + "description": "expirationSeconds is the requested duration of validity of the issued certificate. The certificate signer may issue a certificate with a different validity duration so a client must check the delta between the notBefore and and notAfter fields in the issued certificate to determine the actual duration.\n\nThe v1.22+ in-tree implementations of the well-known Kubernetes signers will honor this field as long as the requested duration is not greater than the maximum duration they will honor per the --cluster-signing-duration CLI flag to the Kubernetes controller manager.\n\nCertificate signers may not honor this field for various reasons:\n\n 1. Old signer that is unaware of the field (such as the in-tree\n implementations prior to v1.22)\n 2. Signer whose configured maximum is shorter than the requested duration\n 3. Signer whose configured minimum is longer than the requested duration\n\nThe minimum valid value for expirationSeconds is 600, i.e. 10 minutes.", + "type": "integer", + "format": "int32" }, - "name": { - "description": "Select a single ClusterTrustBundle by object name. Mutually-exclusive with signerName and labelSelector.", - "type": "string" + "extra": { + "description": "extra contains extra attributes of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.", + "type": "object", + "additionalProperties": { + "type": "array", + "items": { + "type": "string", + "default": "" + } + } }, - "optional": { - "description": "If true, don't block pod startup if the referenced ClusterTrustBundle(s) aren't available. If using name, then the named ClusterTrustBundle is allowed not to exist. If using signerName, then the combination of signerName and labelSelector is allowed to match zero ClusterTrustBundles.", - "type": "boolean" + "groups": { + "description": "groups contains group membership of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "path": { - "description": "Relative path from the volume root to write the bundle.", + "request": { + "description": "request contains an x509 certificate signing request encoded in a \"CERTIFICATE REQUEST\" PEM block. When serialized as JSON or YAML, the data is additionally base64-encoded.", "type": "string", - "default": "" + "format": "byte", + "x-kubernetes-list-type": "atomic" }, "signerName": { - "description": "Select all ClusterTrustBundles that match this signer name. Mutually-exclusive with name. The contents of all selected ClusterTrustBundles will be unified and deduplicated.", + "description": "signerName indicates the requested signer, and is a qualified name.\n\nList/watch requests for CertificateSigningRequests can filter on this field using a \"spec.signerName=NAME\" fieldSelector.\n\nWell-known Kubernetes signers are:\n 1. \"kubernetes.io/kube-apiserver-client\": issues client certificates that can be used to authenticate to kube-apiserver.\n Requests for this signer are never auto-approved by kube-controller-manager, can be issued by the \"csrsigning\" controller in kube-controller-manager.\n 2. \"kubernetes.io/kube-apiserver-client-kubelet\": issues client certificates that kubelets use to authenticate to kube-apiserver.\n Requests for this signer can be auto-approved by the \"csrapproving\" controller in kube-controller-manager, and can be issued by the \"csrsigning\" controller in kube-controller-manager.\n 3. \"kubernetes.io/kubelet-serving\" issues serving certificates that kubelets use to serve TLS endpoints, which kube-apiserver can connect to securely.\n Requests for this signer are never auto-approved by kube-controller-manager, and can be issued by the \"csrsigning\" controller in kube-controller-manager.\n\nMore details are available at https://k8s.io/docs/reference/access-authn-authz/certificate-signing-requests/#kubernetes-signers\n\nCustom signerNames can also be specified. The signer defines:\n 1. Trust distribution: how trust (CA bundles) are distributed.\n 2. Permitted subjects: and behavior when a disallowed subject is requested.\n 3. Required, permitted, or forbidden x509 extensions in the request (including whether subjectAltNames are allowed, which types, restrictions on allowed values) and behavior when a disallowed extension is requested.\n 4. Required, permitted, or forbidden key usages / extended key usages.\n 5. Expiration/certificate lifetime: whether it is fixed by the signer, configurable by the admin.\n 6. Whether or not requests for CA certificates are allowed.", + "type": "string", + "default": "" + }, + "uid": { + "description": "uid contains the uid of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.", + "type": "string" + }, + "usages": { + "description": "usages specifies a set of key usages requested in the issued certificate.\n\nRequests for TLS client certificates typically request: \"digital signature\", \"key encipherment\", \"client auth\".\n\nRequests for TLS serving certificates typically request: \"key encipherment\", \"digital signature\", \"server auth\".\n\nValid values are:\n \"signing\", \"digital signature\", \"content commitment\",\n \"key encipherment\", \"key agreement\", \"data encipherment\",\n \"cert sign\", \"crl sign\", \"encipher only\", \"decipher only\", \"any\",\n \"server auth\", \"client auth\",\n \"code signing\", \"email protection\", \"s/mime\",\n \"ipsec end system\", \"ipsec tunnel\", \"ipsec user\",\n \"timestamping\", \"ocsp signing\", \"microsoft sgc\", \"netscape sgc\"", + "type": "array", + "items": { + "type": "string", + "default": "", + "enum": [ + "any", + "cert sign", + "client auth", + "code signing", + "content commitment", + "crl sign", + "data encipherment", + "decipher only", + "digital signature", + "email protection", + "encipher only", + "ipsec end system", + "ipsec tunnel", + "ipsec user", + "key agreement", + "key encipherment", + "microsoft sgc", + "netscape sgc", + "ocsp signing", + "s/mime", + "server auth", + "signing", + "timestamping" + ] + }, + "x-kubernetes-list-type": "atomic" + }, + "username": { + "description": "username contains the name of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "certificates.k8s.io", "Version": "v1", - "Kind": "ClusterTrustBundleProjection", + "Kind": "CertificateSigningRequestSpec", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ComponentCondition": { - "description": "Information about the condition of a component.", + "io.k8s.api.certificates.v1.CertificateSigningRequestStatus": { + "description": "CertificateSigningRequestStatus contains conditions used to indicate approved/denied/failed status of the request, and the issued certificate.", "type": "object", - "required": [ - "type", - "status" - ], "properties": { - "error": { - "description": "Condition error code for a component. For example, a health check error code.", - "type": "string" - }, - "message": { - "description": "Message about the condition for a component. For example, information about a health check.", - "type": "string" - }, - "status": { - "description": "Status of the condition for a component. Valid values for \"Healthy\": \"True\", \"False\", or \"Unknown\".", + "certificate": { + "description": "certificate is populated with an issued certificate by the signer after an Approved condition is present. This field is set via the /status subresource. Once populated, this field is immutable.\n\nIf the certificate signing request is denied, a condition of type \"Denied\" is added and this field remains empty. If the signer cannot issue the certificate, a condition of type \"Failed\" is added and this field remains empty.\n\nValidation requirements:\n 1. certificate must contain one or more PEM blocks.\n 2. All PEM blocks must have the \"CERTIFICATE\" label, contain no headers, and the encoded data\n must be a BER-encoded ASN.1 Certificate structure as described in section 4 of RFC5280.\n 3. Non-PEM content may appear before or after the \"CERTIFICATE\" PEM blocks and is unvalidated,\n to allow for explanatory text as described in section 5.2 of RFC7468.\n\nIf more than one PEM block is present, and the definition of the requested spec.signerName does not indicate otherwise, the first block is the issued certificate, and subsequent blocks should be treated as intermediate certificates and presented in TLS handshakes.\n\nThe certificate is encoded in PEM format.\n\nWhen serialized as JSON or YAML, the data is additionally base64-encoded, so it consists of:\n\n base64(\n -----BEGIN CERTIFICATE-----\n ...\n -----END CERTIFICATE-----\n )", "type": "string", - "default": "" + "format": "byte", + "x-kubernetes-list-type": "atomic" }, - "type": { - "description": "Type of condition for a component. Valid value: \"Healthy\"", - "type": "string", - "default": "" + "conditions": { + "description": "conditions applied to the request. Known conditions are \"Approved\", \"Denied\", and \"Failed\".", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.certificates.v1.CertificateSigningRequestCondition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "certificates.k8s.io", "Version": "v1", - "Kind": "ComponentCondition", + "Kind": "CertificateSigningRequestStatus", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ComponentStatus": { - "description": "ComponentStatus (and ComponentStatusList) holds the cluster validation info. Deprecated: This API is deprecated in v1.19+", + "io.k8s.api.certificates.v1alpha1.ClusterTrustBundle": { + "description": "ClusterTrustBundle is a cluster-scoped container for X.509 trust anchors (root certificates).\n\nClusterTrustBundle objects are considered to be readable by any authenticated user in the cluster, because they can be mounted by pods using the `clusterTrustBundle` projection. All service accounts have read access to ClusterTrustBundles by default. Users who only have namespace-level access to a cluster can read ClusterTrustBundles by impersonating a serviceaccount that they have access to.\n\nIt can be optionally associated with a particular assigner, in which case it contains one valid set of trust anchors for that signer. Signers may have multiple associated ClusterTrustBundles; each is an independent set of trust anchors for that signer. Admission control is used to enforce that only users with permissions on the signer can create or modify the corresponding bundle.", "type": "object", + "required": [ + "spec" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "conditions": { - "description": "List of component conditions observed", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ComponentCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "metadata contains the object metadata.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "spec contains the signer (if any) and trust anchors.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.certificates.v1alpha1.ClusterTrustBundleSpec" } }, "x-fabric8-info": { "Type": "object", - "Group": "", - "Version": "v1", - "Kind": "ComponentStatus", + "Group": "certificates.k8s.io", + "Version": "v1alpha1", + "Kind": "ClusterTrustBundle", "Scope": "Clustered" } }, - "io.k8s.api.core.v1.ComponentStatusList": { - "description": "Status of all the conditions for the component as a list of ComponentStatus objects. Deprecated: This API is deprecated in v1.19+", + "io.k8s.api.certificates.v1alpha1.ClusterTrustBundleList": { + "description": "ClusterTrustBundleList is a collection of ClusterTrustBundle objects", "type": "object", "required": [ "items" @@ -29109,11 +29254,11 @@ "type": "string" }, "items": { - "description": "List of ComponentStatus objects.", + "description": "items is a collection of ClusterTrustBundle objects", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ComponentStatus" + "$ref": "#/definitions/io.k8s.api.certificates.v1alpha1.ClusterTrustBundle" } }, "kind": { @@ -29121,120 +29266,124 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "description": "metadata contains the list metadata.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "", - "Version": "v1", - "Kind": "ComponentStatusList", + "Group": "certificates.k8s.io", + "Version": "v1alpha1", + "Kind": "ClusterTrustBundleList", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ConfigMap": { - "description": "ConfigMap holds configuration data for pods to consume.", + "io.k8s.api.certificates.v1alpha1.ClusterTrustBundleSpec": { + "description": "ClusterTrustBundleSpec contains the signer and trust anchors.", + "type": "object", + "required": [ + "trustBundle" + ], + "properties": { + "signerName": { + "description": "signerName indicates the associated signer, if any.\n\nIn order to create or update a ClusterTrustBundle that sets signerName, you must have the following cluster-scoped permission: group=certificates.k8s.io resource=signers resourceName=\u003cthe signer name\u003e verb=attest.\n\nIf signerName is not empty, then the ClusterTrustBundle object must be named with the signer name as a prefix (translating slashes to colons). For example, for the signer name `example.com/foo`, valid ClusterTrustBundle object names include `example.com:foo:abc` and `example.com:foo:v1`.\n\nIf signerName is empty, then the ClusterTrustBundle object's name must not have such a prefix.\n\nList/watch requests for ClusterTrustBundles can filter on this field using a `spec.signerName=NAME` field selector.", + "type": "string" + }, + "trustBundle": { + "description": "trustBundle contains the individual X.509 trust anchors for this bundle, as PEM bundle of PEM-wrapped, DER-formatted X.509 certificates.\n\nThe data must consist only of PEM certificate blocks that parse as valid X.509 certificates. Each certificate must include a basic constraints extension with the CA bit set. The API server will reject objects that contain duplicate certificates, or that use PEM block headers.\n\nUsers of ClusterTrustBundles, including Kubelet, are free to reorder and deduplicate certificate blocks in this file according to their own logic, as well as to drop PEM block headers and inter-block data.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "certificates.k8s.io", + "Version": "v1alpha1", + "Kind": "ClusterTrustBundleSpec", + "Scope": "Namespaced" + } + }, + "io.k8s.api.certificates.v1beta1.CertificateSigningRequest": { + "description": "Describes a certificate signing request", "type": "object", + "required": [ + "spec" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "binaryData": { - "description": "BinaryData contains the binary data. Each key must consist of alphanumeric characters, '-', '_' or '.'. BinaryData can contain byte sequences that are not in the UTF-8 range. The keys stored in BinaryData must not overlap with the ones in the Data field, this is enforced during validation process. Using this field will require 1.10+ apiserver and kubelet.", - "type": "object", - "additionalProperties": { - "type": "string", - "format": "byte" - } - }, - "data": { - "description": "Data contains the configuration data. Each key must consist of alphanumeric characters, '-', '_' or '.'. Values with non-UTF-8 byte sequences must use the BinaryData field. The keys stored in Data must not overlap with the keys in the BinaryData field, this is enforced during validation process.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "immutable": { - "description": "Immutable, if set to true, ensures that data stored in the ConfigMap cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. Defaulted to nil.", - "type": "boolean" - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "", - "Version": "v1", - "Kind": "ConfigMap", - "Scope": "Namespaced" - } - }, - "io.k8s.api.core.v1.ConfigMapEnvSource": { - "description": "ConfigMapEnvSource selects a ConfigMap to populate the environment variables with.\n\nThe contents of the target ConfigMap's Data field will represent the key-value pairs as environment variables.", - "type": "object", - "properties": { - "name": { - "description": "Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - "type": "string", - "default": "" }, - "optional": { - "description": "Specify whether the ConfigMap must be defined", - "type": "boolean" + "spec": { + "description": "spec contains the certificate request, and is immutable after creation. Only the request, signerName, expirationSeconds, and usages fields can be set on creation. Other fields are derived by Kubernetes and cannot be modified by users.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequestSpec" + }, + "status": { + "description": "Derived information about the request.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequestStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "ConfigMapEnvSource", - "Scope": "Namespaced" + "Type": "object", + "Group": "certificates.k8s.io", + "Version": "v1beta1", + "Kind": "CertificateSigningRequest", + "Scope": "Clustered" } }, - "io.k8s.api.core.v1.ConfigMapKeySelector": { - "description": "Selects a key from a ConfigMap.", + "io.k8s.api.certificates.v1beta1.CertificateSigningRequestCondition": { "type": "object", "required": [ - "key" + "type" ], "properties": { - "key": { - "description": "The key to select.", + "lastTransitionTime": { + "description": "lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "lastUpdateTime": { + "description": "timestamp for the last update to this condition", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "human readable message with details about the request state", + "type": "string" + }, + "reason": { + "description": "brief reason for the request state", + "type": "string" + }, + "status": { + "description": "Status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be \"False\" or \"Unknown\". Defaults to \"True\". If unset, should be treated as \"True\".", "type": "string", "default": "" }, - "name": { - "description": "Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": { + "description": "type of the condition. Known conditions include \"Approved\", \"Denied\", and \"Failed\".", "type": "string", "default": "" - }, - "optional": { - "description": "Specify whether the ConfigMap or its key must be defined", - "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "ConfigMapKeySelector", + "Group": "certificates.k8s.io", + "Version": "v1beta1", + "Kind": "CertificateSigningRequestCondition", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.core.v1.ConfigMapList": { - "description": "ConfigMapList is a resource containing a list of ConfigMap objects.", + "io.k8s.api.certificates.v1beta1.CertificateSigningRequestList": { "type": "object", "required": [ "items" @@ -29245,11 +29394,10 @@ "type": "string" }, "items": { - "description": "Items is the list of ConfigMaps.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMap" + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequest" } }, "kind": { @@ -29257,872 +29405,879 @@ "type": "string" }, "metadata": { - "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "", - "Version": "v1", - "Kind": "ConfigMapList", + "Group": "certificates.k8s.io", + "Version": "v1beta1", + "Kind": "CertificateSigningRequestList", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ConfigMapNodeConfigSource": { - "description": "ConfigMapNodeConfigSource contains the information to reference a ConfigMap as a config source for the Node. This API is deprecated since 1.22: https://git.k8s.io/enhancements/keps/sig-node/281-dynamic-kubelet-configuration", + "io.k8s.api.certificates.v1beta1.CertificateSigningRequestSpec": { + "description": "CertificateSigningRequestSpec contains the certificate request.", "type": "object", "required": [ - "namespace", - "name", - "kubeletConfigKey" + "request" ], "properties": { - "kubeletConfigKey": { - "description": "KubeletConfigKey declares which key of the referenced ConfigMap corresponds to the KubeletConfiguration structure This field is required in all cases.", - "type": "string", - "default": "" + "expirationSeconds": { + "description": "expirationSeconds is the requested duration of validity of the issued certificate. The certificate signer may issue a certificate with a different validity duration so a client must check the delta between the notBefore and and notAfter fields in the issued certificate to determine the actual duration.\n\nThe v1.22+ in-tree implementations of the well-known Kubernetes signers will honor this field as long as the requested duration is not greater than the maximum duration they will honor per the --cluster-signing-duration CLI flag to the Kubernetes controller manager.\n\nCertificate signers may not honor this field for various reasons:\n\n 1. Old signer that is unaware of the field (such as the in-tree\n implementations prior to v1.22)\n 2. Signer whose configured maximum is shorter than the requested duration\n 3. Signer whose configured minimum is longer than the requested duration\n\nThe minimum valid value for expirationSeconds is 600, i.e. 10 minutes.", + "type": "integer", + "format": "int32" }, - "name": { - "description": "Name is the metadata.name of the referenced ConfigMap. This field is required in all cases.", - "type": "string", - "default": "" + "extra": { + "description": "Extra information about the requesting user. See user.Info interface for details.", + "type": "object", + "additionalProperties": { + "type": "array", + "items": { + "type": "string", + "default": "" + } + } }, - "namespace": { - "description": "Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.", + "groups": { + "description": "Group information about the requesting user. See user.Info interface for details.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "request": { + "description": "Base64-encoded PKCS#10 CSR data", "type": "string", - "default": "" + "format": "byte", + "x-kubernetes-list-type": "atomic" }, - "resourceVersion": { - "description": "ResourceVersion is the metadata.ResourceVersion of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.", + "signerName": { + "description": "Requested signer for the request. It is a qualified name in the form: `scope-hostname.io/name`. If empty, it will be defaulted:\n 1. If it's a kubelet client certificate, it is assigned\n \"kubernetes.io/kube-apiserver-client-kubelet\".\n 2. If it's a kubelet serving certificate, it is assigned\n \"kubernetes.io/kubelet-serving\".\n 3. Otherwise, it is assigned \"kubernetes.io/legacy-unknown\".\nDistribution of trust for signers happens out of band. You can select on this field using `spec.signerName`.", "type": "string" }, "uid": { - "description": "UID is the metadata.UID of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.", + "description": "UID information about the requesting user. See user.Info interface for details.", + "type": "string" + }, + "usages": { + "description": "allowedUsages specifies a set of usage contexts the key will be valid for. See:\n\thttps://tools.ietf.org/html/rfc5280#section-4.2.1.3\n\thttps://tools.ietf.org/html/rfc5280#section-4.2.1.12\n\nValid values are:\n \"signing\",\n \"digital signature\",\n \"content commitment\",\n \"key encipherment\",\n \"key agreement\",\n \"data encipherment\",\n \"cert sign\",\n \"crl sign\",\n \"encipher only\",\n \"decipher only\",\n \"any\",\n \"server auth\",\n \"client auth\",\n \"code signing\",\n \"email protection\",\n \"s/mime\",\n \"ipsec end system\",\n \"ipsec tunnel\",\n \"ipsec user\",\n \"timestamping\",\n \"ocsp signing\",\n \"microsoft sgc\",\n \"netscape sgc\"", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "username": { + "description": "Information about the requesting user. See user.Info interface for details.", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "ConfigMapNodeConfigSource", + "Group": "certificates.k8s.io", + "Version": "v1beta1", + "Kind": "CertificateSigningRequestSpec", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ConfigMapProjection": { - "description": "Adapts a ConfigMap into a projected volume.\n\nThe contents of the target ConfigMap's Data field will be presented in a projected volume as files using the keys in the Data field as the file names, unless the items element is populated with specific mappings of keys to paths. Note that this is identical to a configmap volume source without the default mode.", + "io.k8s.api.certificates.v1beta1.CertificateSigningRequestStatus": { "type": "object", "properties": { - "items": { - "description": "items if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.", + "certificate": { + "description": "If request was approved, the controller will place the issued certificate here.", + "type": "string", + "format": "byte", + "x-kubernetes-list-type": "atomic" + }, + "conditions": { + "description": "Conditions applied to the request, such as approval or denial.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.KeyToPath" + "$ref": "#/definitions/io.k8s.api.certificates.v1beta1.CertificateSigningRequestCondition" }, - "x-kubernetes-list-type": "atomic" - }, - "name": { - "description": "Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - "type": "string", - "default": "" - }, - "optional": { - "description": "optional specify whether the ConfigMap or its keys must be defined", - "type": "boolean" + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "ConfigMapProjection", + "Group": "certificates.k8s.io", + "Version": "v1beta1", + "Kind": "CertificateSigningRequestStatus", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ConfigMapVolumeSource": { - "description": "Adapts a ConfigMap into a volume.\n\nThe contents of the target ConfigMap's Data field will be presented in a volume as files using the keys in the Data field as the file names, unless the items element is populated with specific mappings of keys to paths. ConfigMap volumes support ownership management and SELinux relabeling.", + "io.k8s.api.coordination.v1.Lease": { + "description": "Lease defines a lease concept.", "type": "object", "properties": { - "defaultMode": { - "description": "defaultMode is optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.", - "type": "integer", - "format": "int32" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "items": { - "description": "items if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.KeyToPath" - }, - "x-kubernetes-list-type": "atomic" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "name": { - "description": "Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - "type": "string", - "default": "" + "metadata": { + "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "optional": { - "description": "optional specify whether the ConfigMap or its keys must be defined", - "type": "boolean" + "spec": { + "description": "spec contains the specification of the Lease. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.coordination.v1.LeaseSpec" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", + "Type": "object", + "Group": "coordination.k8s.io", "Version": "v1", - "Kind": "ConfigMapVolumeSource", + "Kind": "Lease", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.Container": { - "description": "A single application container that you want to run within a pod.", + "io.k8s.api.coordination.v1.LeaseList": { + "description": "LeaseList is a list of Lease objects.", "type": "object", "required": [ - "name" + "items" ], "properties": { - "args": { - "description": "Arguments to the entrypoint. The container image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "command": { - "description": "Entrypoint array. Not executed within a shell. The container image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "env": { - "description": "List of environment variables to set in the container. Cannot be updated.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" - }, - "envFrom": { - "description": "List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvFromSource" - }, - "x-kubernetes-list-type": "atomic" - }, - "image": { - "description": "Container image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "imagePullPolicy": { - "description": "Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images\n\nPossible enum values:\n - `\"Always\"` means that kubelet always attempts to pull the latest image. Container will fail If the pull fails.\n - `\"IfNotPresent\"` means that kubelet pulls if the image isn't present on disk. Container will fail if the image isn't present and the pull fails.\n - `\"Never\"` means that kubelet never pulls an image, but only uses a local image. Container will fail if the image isn't present", - "type": "string", - "enum": [ - "Always", - "IfNotPresent", - "Never" - ] - }, - "lifecycle": { - "description": "Actions that the management system should take in response to container lifecycle events. Cannot be updated.", - "$ref": "#/definitions/io.k8s.api.core.v1.Lifecycle" - }, - "livenessProbe": { - "description": "Periodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes", - "$ref": "#/definitions/io.k8s.api.core.v1.Probe" - }, - "name": { - "description": "Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.", - "type": "string", - "default": "" - }, - "ports": { - "description": "List of ports to expose from the container. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default \"0.0.0.0\" address inside a container will be accessible from the network. Modifying this array with strategic merge patch may corrupt the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255. Cannot be updated.", + "items": { + "description": "items is a list of schema objects.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ContainerPort" - }, - "x-kubernetes-list-map-keys": [ - "containerPort", - "protocol" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "containerPort", - "x-kubernetes-patch-strategy": "merge" - }, - "readinessProbe": { - "description": "Periodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes", - "$ref": "#/definitions/io.k8s.api.core.v1.Probe" + "$ref": "#/definitions/io.k8s.api.coordination.v1.Lease" + } }, - "resizePolicy": { - "description": "Resources resize policy for the container.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ContainerResizePolicy" - }, - "x-kubernetes-list-type": "atomic" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "resources": { - "description": "Compute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/", + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "coordination.k8s.io", + "Version": "v1", + "Kind": "LeaseList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.coordination.v1.LeaseSpec": { + "description": "LeaseSpec is a specification of a Lease.", + "type": "object", + "properties": { + "acquireTime": { + "description": "acquireTime is a time when the current lease was acquired.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" }, - "restartPolicy": { - "description": "RestartPolicy defines the restart behavior of individual containers in a pod. This field may only be set for init containers, and the only allowed value is \"Always\". For non-init containers or when this field is not specified, the restart behavior is defined by the Pod's restart policy and the container type. Setting the RestartPolicy as \"Always\" for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy \"Always\" will be shut down. This lifecycle differs from normal init containers and is often referred to as a \"sidecar\" container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed.", + "holderIdentity": { + "description": "holderIdentity contains the identity of the holder of a current lease. If Coordinated Leader Election is used, the holder identity must be equal to the elected LeaseCandidate.metadata.name field.", "type": "string" }, - "securityContext": { - "description": "SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/", - "$ref": "#/definitions/io.k8s.api.core.v1.SecurityContext" - }, - "startupProbe": { - "description": "StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod's lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes", - "$ref": "#/definitions/io.k8s.api.core.v1.Probe" - }, - "stdin": { - "description": "Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.", - "type": "boolean" + "leaseDurationSeconds": { + "description": "leaseDurationSeconds is a duration that candidates for a lease need to wait to force acquire it. This is measured against the time of last observed renewTime.", + "type": "integer", + "format": "int32" }, - "stdinOnce": { - "description": "Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false", - "type": "boolean" + "leaseTransitions": { + "description": "leaseTransitions is the number of transitions of a lease between holders.", + "type": "integer", + "format": "int32" }, - "terminationMessagePath": { - "description": "Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.", + "preferredHolder": { + "description": "PreferredHolder signals to a lease holder that the lease has a more optimal holder and should be given up. This field can only be set if Strategy is also set.", "type": "string" }, - "terminationMessagePolicy": { - "description": "Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.\n\nPossible enum values:\n - `\"FallbackToLogsOnError\"` will read the most recent contents of the container logs for the container status message when the container exits with an error and the terminationMessagePath has no contents.\n - `\"File\"` is the default behavior and will set the container status message to the contents of the container's terminationMessagePath when the container exits.", - "type": "string", - "enum": [ - "FallbackToLogsOnError", - "File" - ] - }, - "tty": { - "description": "Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.", - "type": "boolean" - }, - "volumeDevices": { - "description": "volumeDevices is the list of block devices to be used by the container.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.VolumeDevice" - }, - "x-kubernetes-list-map-keys": [ - "devicePath" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "devicePath", - "x-kubernetes-patch-strategy": "merge" - }, - "volumeMounts": { - "description": "Pod volumes to mount into the container's filesystem. Cannot be updated.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.VolumeMount" - }, - "x-kubernetes-list-map-keys": [ - "mountPath" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "mountPath", - "x-kubernetes-patch-strategy": "merge" + "renewTime": { + "description": "renewTime is a time when the current holder of a lease has last updated the lease.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" }, - "workingDir": { - "description": "Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.", + "strategy": { + "description": "Strategy indicates the strategy for picking the leader for coordinated leader election. If the field is not specified, there is no active coordination for this lease. (Alpha) Using this field requires the CoordinatedLeaderElection feature gate to be enabled.", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "coordination.k8s.io", "Version": "v1", - "Kind": "Container", + "Kind": "LeaseSpec", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ContainerImage": { - "description": "Describe a container image", + "io.k8s.api.coordination.v1alpha1.LeaseCandidate": { + "description": "LeaseCandidate defines a candidate for a Lease object. Candidates are created such that coordinated leader election will pick the best leader from the list of candidates.", "type": "object", "properties": { - "names": { - "description": "Names by which this image is known. e.g. [\"kubernetes.example/hyperkube:v1.0.7\", \"cloud-vendor.registry.example/cloud-vendor/hyperkube:v1.0.7\"]", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "sizeBytes": { - "description": "The size of the image in bytes.", - "type": "integer", - "format": "int64" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "spec contains the specification of the Lease. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.coordination.v1alpha1.LeaseCandidateSpec" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "ContainerImage", + "Type": "object", + "Group": "coordination.k8s.io", + "Version": "v1alpha1", + "Kind": "LeaseCandidate", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ContainerPort": { - "description": "ContainerPort represents a network port in a single container.", + "io.k8s.api.coordination.v1alpha1.LeaseCandidateList": { + "description": "LeaseCandidateList is a list of Lease objects.", "type": "object", "required": [ - "containerPort" + "items" ], "properties": { - "containerPort": { - "description": "Number of port to expose on the pod's IP address. This must be a valid port number, 0 \u003c x \u003c 65536.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "hostIP": { - "description": "What host IP to bind the external port to.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "hostPort": { - "description": "Number of port to expose on the host. If specified, this must be a valid port number, 0 \u003c x \u003c 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.", - "type": "integer", - "format": "int32" + "items": { + "description": "items is a list of schema objects.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.coordination.v1alpha1.LeaseCandidate" + } }, - "name": { - "description": "If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "protocol": { - "description": "Protocol for port. Must be UDP, TCP, or SCTP. Defaults to \"TCP\".\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", - "type": "string", - "default": "TCP", - "enum": [ - "SCTP", - "TCP", - "UDP" - ] + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "ContainerPort", + "Type": "list", + "Group": "coordination.k8s.io", + "Version": "v1alpha1", + "Kind": "LeaseCandidateList", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ContainerResizePolicy": { - "description": "ContainerResizePolicy represents resource resize policy for the container.", + "io.k8s.api.coordination.v1alpha1.LeaseCandidateSpec": { + "description": "LeaseCandidateSpec is a specification of a Lease.", "type": "object", "required": [ - "resourceName", - "restartPolicy" + "leaseName", + "preferredStrategies" ], "properties": { - "resourceName": { - "description": "Name of the resource to which this resource resize policy applies. Supported values: cpu, memory.", - "type": "string", - "default": "" + "binaryVersion": { + "description": "BinaryVersion is the binary version. It must be in a semver format without leading `v`. This field is required when strategy is \"OldestEmulationVersion\"", + "type": "string" }, - "restartPolicy": { - "description": "Restart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.", + "emulationVersion": { + "description": "EmulationVersion is the emulation version. It must be in a semver format without leading `v`. EmulationVersion must be less than or equal to BinaryVersion. This field is required when strategy is \"OldestEmulationVersion\"", + "type": "string" + }, + "leaseName": { + "description": "LeaseName is the name of the lease for which this candidate is contending. This field is immutable.", "type": "string", "default": "" + }, + "pingTime": { + "description": "PingTime is the last time that the server has requested the LeaseCandidate to renew. It is only done during leader election to check if any LeaseCandidates have become ineligible. When PingTime is updated, the LeaseCandidate will respond by updating RenewTime.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" + }, + "preferredStrategies": { + "description": "PreferredStrategies indicates the list of strategies for picking the leader for coordinated leader election. The list is ordered, and the first strategy supersedes all other strategies. The list is used by coordinated leader election to make a decision about the final election strategy. This follows as - If all clients have strategy X as the first element in this list, strategy X will be used. - If a candidate has strategy [X] and another candidate has strategy [Y, X], Y supersedes X and strategy Y\n will be used.\n- If a candidate has strategy [X, Y] and another candidate has strategy [Y, X], this is a user error and leader\n election will not operate the Lease until resolved.\n(Alpha) Using this field requires the CoordinatedLeaderElection feature gate to be enabled.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "renewTime": { + "description": "RenewTime is the time that the LeaseCandidate was last updated. Any time a Lease needs to do leader election, the PingTime field is updated to signal to the LeaseCandidate that they should update the RenewTime. Old LeaseCandidate objects are also garbage collected if it has been hours since the last renew. The PingTime field is updated regularly to prevent garbage collection for still active LeaseCandidates.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "ContainerResizePolicy", + "Group": "coordination.k8s.io", + "Version": "v1alpha1", + "Kind": "LeaseCandidateSpec", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ContainerState": { - "description": "ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.", + "io.k8s.api.coordination.v1beta1.Lease": { + "description": "Lease defines a lease concept.", "type": "object", "properties": { - "running": { - "description": "Details about a running container", - "$ref": "#/definitions/io.k8s.api.core.v1.ContainerStateRunning" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "terminated": { - "description": "Details about a terminated container", - "$ref": "#/definitions/io.k8s.api.core.v1.ContainerStateTerminated" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "waiting": { - "description": "Details about a waiting container", - "$ref": "#/definitions/io.k8s.api.core.v1.ContainerStateWaiting" + "metadata": { + "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "spec contains the specification of the Lease. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.coordination.v1beta1.LeaseSpec" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "ContainerState", + "Type": "object", + "Group": "coordination.k8s.io", + "Version": "v1beta1", + "Kind": "Lease", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ContainerStateRunning": { - "description": "ContainerStateRunning is a running state of a container.", + "io.k8s.api.coordination.v1beta1.LeaseList": { + "description": "LeaseList is a list of Lease objects.", "type": "object", + "required": [ + "items" + ], "properties": { - "startedAt": { - "description": "Time at which the container was last (re-)started", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is a list of schema objects.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.coordination.v1beta1.Lease" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "ContainerStateRunning", + "Type": "list", + "Group": "coordination.k8s.io", + "Version": "v1beta1", + "Kind": "LeaseList", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ContainerStateTerminated": { - "description": "ContainerStateTerminated is a terminated state of a container.", + "io.k8s.api.coordination.v1beta1.LeaseSpec": { + "description": "LeaseSpec is a specification of a Lease.", "type": "object", - "required": [ - "exitCode" - ], "properties": { - "containerID": { - "description": "Container's ID in the format '\u003ctype\u003e://\u003ccontainer_id\u003e'", + "acquireTime": { + "description": "acquireTime is a time when the current lease was acquired.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" + }, + "holderIdentity": { + "description": "holderIdentity contains the identity of the holder of a current lease. If Coordinated Leader Election is used, the holder identity must be equal to the elected LeaseCandidate.metadata.name field.", "type": "string" }, - "exitCode": { - "description": "Exit status from the last termination of the container", + "leaseDurationSeconds": { + "description": "leaseDurationSeconds is a duration that candidates for a lease need to wait to force acquire it. This is measure against time of last observed renewTime.", "type": "integer", - "format": "int32", - "default": 0 + "format": "int32" }, - "finishedAt": { - "description": "Time at which the container last terminated", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "leaseTransitions": { + "description": "leaseTransitions is the number of transitions of a lease between holders.", + "type": "integer", + "format": "int32" }, - "message": { - "description": "Message regarding the last termination of the container", + "preferredHolder": { + "description": "PreferredHolder signals to a lease holder that the lease has a more optimal holder and should be given up.", "type": "string" }, - "reason": { - "description": "(brief) reason from the last termination of the container", + "renewTime": { + "description": "renewTime is a time when the current holder of a lease has last updated the lease.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" + }, + "strategy": { + "description": "Strategy indicates the strategy for picking the leader for coordinated leader election (Alpha) Using this field requires the CoordinatedLeaderElection feature gate to be enabled.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "coordination.k8s.io", + "Version": "v1beta1", + "Kind": "LeaseSpec", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.AWSElasticBlockStoreVolumeSource": { + "description": "Represents a Persistent Disk resource in AWS.\n\nAn AWS EBS disk must exist before mounting to a container. The disk must also be in the same AWS zone as the kubelet. An AWS EBS disk can only be mounted as read/write once. AWS EBS volumes support ownership management and SELinux relabeling.", + "type": "object", + "required": [ + "volumeID" + ], + "properties": { + "fsType": { + "description": "fsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore", "type": "string" }, - "signal": { - "description": "Signal from the last termination of the container", + "partition": { + "description": "partition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as \"1\". Similarly, the volume partition for /dev/sda is \"0\" (or you can leave the property empty).", "type": "integer", "format": "int32" }, - "startedAt": { - "description": "Time at which previous execution of the container started", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "readOnly": { + "description": "readOnly value true will force the readOnly setting in VolumeMounts. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore", + "type": "boolean" + }, + "volumeID": { + "description": "volumeID is unique ID of the persistent disk resource in AWS (Amazon EBS volume). More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "ContainerStateTerminated", + "Kind": "AWSElasticBlockStoreVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ContainerStateWaiting": { - "description": "ContainerStateWaiting is a waiting state of a container.", + "io.k8s.api.core.v1.Affinity": { + "description": "Affinity is a group of affinity scheduling rules.", "type": "object", "properties": { - "message": { - "description": "Message regarding why the container is not yet running.", - "type": "string" + "nodeAffinity": { + "description": "Describes node affinity scheduling rules for the pod.", + "$ref": "#/definitions/io.k8s.api.core.v1.NodeAffinity" }, - "reason": { - "description": "(brief) reason the container is not yet running.", - "type": "string" + "podAffinity": { + "description": "Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)).", + "$ref": "#/definitions/io.k8s.api.core.v1.PodAffinity" + }, + "podAntiAffinity": { + "description": "Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)).", + "$ref": "#/definitions/io.k8s.api.core.v1.PodAntiAffinity" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "ContainerStateWaiting", + "Kind": "Affinity", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ContainerStatus": { - "description": "ContainerStatus contains details for the current status of this container.", + "io.k8s.api.core.v1.AppArmorProfile": { + "description": "AppArmorProfile defines a pod or container's AppArmor settings.", "type": "object", "required": [ - "name", - "ready", - "restartCount", - "image", - "imageID" + "type" ], "properties": { - "allocatedResources": { - "description": "AllocatedResources represents the compute resources allocated for this container by the node. Kubelet sets this value to Container.Resources.Requests upon successful pod admission and after successfully admitting desired pod resize.", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } - }, - "allocatedResourcesStatus": { - "description": "AllocatedResourcesStatus represents the status of various resources allocated for this Pod.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceStatus" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" - }, - "containerID": { - "description": "ContainerID is the ID of the container in the format '\u003ctype\u003e://\u003ccontainer_id\u003e'. Where type is a container runtime identifier, returned from Version call of CRI API (for example \"containerd\").", + "localhostProfile": { + "description": "localhostProfile indicates a profile loaded on the node that should be used. The profile must be preconfigured on the node to work. Must match the loaded name of the profile. Must be set if and only if type is \"Localhost\".", "type": "string" }, - "image": { - "description": "Image is the name of container image that the container is running. The container image may not match the image used in the PodSpec, as it may have been resolved by the runtime. More info: https://kubernetes.io/docs/concepts/containers/images.", - "type": "string", - "default": "" - }, - "imageID": { - "description": "ImageID is the image ID of the container's image. The image ID may not match the image ID of the image used in the PodSpec, as it may have been resolved by the runtime.", - "type": "string", - "default": "" - }, - "lastState": { - "description": "LastTerminationState holds the last termination state of the container to help debug container crashes and restarts. This field is not populated if the container is still running and RestartCount is 0.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ContainerState" - }, - "name": { - "description": "Name is a DNS_LABEL representing the unique name of the container. Each container in a pod must have a unique name across all container types. Cannot be updated.", + "type": { + "description": "type indicates which kind of AppArmor profile will be applied. Valid options are:\n Localhost - a profile pre-loaded on the node.\n RuntimeDefault - the container runtime's default profile.\n Unconfined - no AppArmor enforcement.\n\nPossible enum values:\n - `\"Localhost\"` indicates that a profile pre-loaded on the node should be used.\n - `\"RuntimeDefault\"` indicates that the container runtime's default AppArmor profile should be used.\n - `\"Unconfined\"` indicates that no AppArmor profile should be enforced.", "type": "string", - "default": "" - }, - "ready": { - "description": "Ready specifies whether the container is currently passing its readiness check. The value will change as readiness probes keep executing. If no readiness probes are specified, this field defaults to true once the container is fully started (see Started field).\n\nThe value is typically used to determine whether a container is ready to accept traffic.", - "type": "boolean", - "default": false - }, - "resources": { - "description": "Resources represents the compute resource requests and limits that have been successfully enacted on the running container after it has been started or has been successfully resized.", - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" - }, - "restartCount": { - "description": "RestartCount holds the number of times the container has been restarted. Kubelet makes an effort to always increment the value, but there are cases when the state may be lost due to node restarts and then the value may be reset to 0. The value is never negative.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "started": { - "description": "Started indicates whether the container has finished its postStart lifecycle hook and passed its startup probe. Initialized as false, becomes true after startupProbe is considered successful. Resets to false when the container is restarted, or if kubelet loses state temporarily. In both cases, startup probes will run again. Is always true when no startupProbe is defined and container is running and has passed the postStart lifecycle hook. The null value must be treated the same as false.", - "type": "boolean" - }, - "state": { - "description": "State holds details about the container's current condition.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ContainerState" - }, - "user": { - "description": "User represents user identity information initially attached to the first process of the container", - "$ref": "#/definitions/io.k8s.api.core.v1.ContainerUser" - }, - "volumeMounts": { - "description": "Status of volume mounts.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.VolumeMountStatus" - }, - "x-kubernetes-list-map-keys": [ - "mountPath" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "mountPath", - "x-kubernetes-patch-strategy": "merge" + "default": "", + "enum": [ + "Localhost", + "RuntimeDefault", + "Unconfined" + ] } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "ContainerStatus", + "Kind": "AppArmorProfile", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "localhostProfile": "LocalhostProfile" + } + } + ] }, - "io.k8s.api.core.v1.ContainerUser": { - "description": "ContainerUser represents user identity information", + "io.k8s.api.core.v1.AttachedVolume": { + "description": "AttachedVolume describes a volume attached to a node", "type": "object", + "required": [ + "name", + "devicePath" + ], "properties": { - "linux": { - "description": "Linux holds user identity information initially attached to the first process of the containers in Linux. Note that the actual running identity can be changed if the process has enough privilege to do so.", - "$ref": "#/definitions/io.k8s.api.core.v1.LinuxContainerUser" + "devicePath": { + "description": "DevicePath represents the device path where the volume should be available", + "type": "string", + "default": "" + }, + "name": { + "description": "Name of the attached volume", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "ContainerUser", + "Kind": "AttachedVolume", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.DaemonEndpoint": { - "description": "DaemonEndpoint contains information about a single Daemon endpoint.", + "io.k8s.api.core.v1.AvoidPods": { + "description": "AvoidPods describes pods that should avoid this node. This is the value for a Node annotation with key scheduler.alpha.kubernetes.io/preferAvoidPods and will eventually become a field of NodeStatus.", "type": "object", - "required": [ - "Port" - ], "properties": { - "Port": { - "description": "Port number of the given endpoint.", - "type": "integer", - "format": "int32", - "default": 0 + "preferAvoidPods": { + "description": "Bounded-sized list of signatures of pods that should avoid this node, sorted in timestamp order from oldest to newest. Size of the slice is unspecified.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PreferAvoidPodsEntry" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "DaemonEndpoint", + "Kind": "AvoidPods", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.DownwardAPIProjection": { - "description": "Represents downward API info for projecting into a projected volume. Note that this is identical to a downwardAPI volume source without the default mode.", + "io.k8s.api.core.v1.AzureDiskVolumeSource": { + "description": "AzureDisk represents an Azure Data Disk mount on the host and bind mount to the pod.", "type": "object", + "required": [ + "diskName", + "diskURI" + ], "properties": { - "items": { - "description": "Items is a list of DownwardAPIVolume file", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.DownwardAPIVolumeFile" - }, - "x-kubernetes-list-type": "atomic" + "cachingMode": { + "description": "cachingMode is the Host Caching mode: None, Read Only, Read Write.\n\nPossible enum values:\n - `\"None\"`\n - `\"ReadOnly\"`\n - `\"ReadWrite\"`", + "type": "string", + "default": "ReadWrite", + "enum": [ + "None", + "ReadOnly", + "ReadWrite" + ] + }, + "diskName": { + "description": "diskName is the Name of the data disk in the blob storage", + "type": "string", + "default": "" + }, + "diskURI": { + "description": "diskURI is the URI of data disk in the blob storage", + "type": "string", + "default": "" + }, + "fsType": { + "description": "fsType is Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified.", + "type": "string", + "default": "ext4" + }, + "kind": { + "description": "kind expected values are Shared: multiple blob disks per storage account Dedicated: single blob disk per storage account Managed: azure managed data disk (only in managed availability set). defaults to shared\n\nPossible enum values:\n - `\"Dedicated\"`\n - `\"Managed\"`\n - `\"Shared\"`", + "type": "string", + "default": "Shared", + "enum": [ + "Dedicated", + "Managed", + "Shared" + ] + }, + "readOnly": { + "description": "readOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean", + "default": false } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "DownwardAPIProjection", + "Kind": "AzureDiskVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.DownwardAPIVolumeFile": { - "description": "DownwardAPIVolumeFile represents information to create the file containing the pod field", + "io.k8s.api.core.v1.AzureFilePersistentVolumeSource": { + "description": "AzureFile represents an Azure File Service mount on the host and bind mount to the pod.", "type": "object", "required": [ - "path" + "secretName", + "shareName" ], "properties": { - "fieldRef": { - "description": "Required: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectFieldSelector" - }, - "mode": { - "description": "Optional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.", - "type": "integer", - "format": "int32" + "readOnly": { + "description": "readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" }, - "path": { - "description": "Required: Path is the relative path name of the file to be created. Must not be absolute or contain the '..' path. Must be utf-8 encoded. The first item of the relative path must not start with '..'", + "secretName": { + "description": "secretName is the name of secret that contains Azure Storage Account Name and Key", "type": "string", "default": "" }, - "resourceFieldRef": { - "description": "Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.", - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceFieldSelector" + "secretNamespace": { + "description": "secretNamespace is the namespace of the secret that contains Azure Storage Account Name and Key default is the same as the Pod", + "type": "string" + }, + "shareName": { + "description": "shareName is the azure Share Name", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "DownwardAPIVolumeFile", + "Kind": "AzureFilePersistentVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.DownwardAPIVolumeSource": { - "description": "DownwardAPIVolumeSource represents a volume containing downward API info. Downward API volumes support ownership management and SELinux relabeling.", + "io.k8s.api.core.v1.AzureFileVolumeSource": { + "description": "AzureFile represents an Azure File Service mount on the host and bind mount to the pod.", "type": "object", + "required": [ + "secretName", + "shareName" + ], "properties": { - "defaultMode": { - "description": "Optional: mode bits to use on created files by default. Must be a Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.", - "type": "integer", - "format": "int32" + "readOnly": { + "description": "readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" }, - "items": { - "description": "Items is a list of downward API volume file", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.DownwardAPIVolumeFile" - }, - "x-kubernetes-list-type": "atomic" + "secretName": { + "description": "secretName is the name of secret that contains Azure Storage Account Name and Key", + "type": "string", + "default": "" + }, + "shareName": { + "description": "shareName is the azure share Name", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "DownwardAPIVolumeSource", + "Kind": "AzureFileVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.EmptyDirVolumeSource": { - "description": "Represents an empty directory for a pod. Empty directory volumes support ownership management and SELinux relabeling.", + "io.k8s.api.core.v1.Binding": { + "description": "Binding ties one object to another; for example, a pod is bound to a node by a scheduler. Deprecated in 1.7, please use the bindings subresource of pods instead.", "type": "object", + "required": [ + "target" + ], "properties": { - "medium": { - "description": "medium represents what type of storage medium should back this directory. The default is \"\" which means to use the node's default medium. Must be an empty string (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "sizeLimit": { - "description": "sizeLimit is the total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "target": { + "description": "The target object that you want to bind to the standard object.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" } }, "x-fabric8-info": { - "Type": "nested", + "Type": "object", "Group": "", "Version": "v1", - "Kind": "EmptyDirVolumeSource", + "Kind": "Binding", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.EndpointAddress": { - "description": "EndpointAddress is a tuple that describes single IP address.", + "io.k8s.api.core.v1.CSIPersistentVolumeSource": { + "description": "Represents storage that is managed by an external CSI volume driver (Beta feature)", "type": "object", "required": [ - "ip" + "driver", + "volumeHandle" ], "properties": { - "hostname": { - "description": "The Hostname of this endpoint", - "type": "string" + "controllerExpandSecretRef": { + "description": "controllerExpandSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI ControllerExpandVolume call. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.", + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" }, - "ip": { - "description": "The IP of this endpoint. May not be loopback (127.0.0.0/8 or ::1), link-local (169.254.0.0/16 or fe80::/10), or link-local multicast (224.0.0.0/24 or ff02::/16).", + "controllerPublishSecretRef": { + "description": "controllerPublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI ControllerPublishVolume and ControllerUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.", + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" + }, + "driver": { + "description": "driver is the name of the driver to use for this volume. Required.", "type": "string", "default": "" }, - "nodeName": { - "description": "Optional: Node hosting this endpoint. This can be used to determine endpoints local to a node.", + "fsType": { + "description": "fsType to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\".", "type": "string" }, - "targetRef": { - "description": "Reference to object providing the endpoint.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "nodeExpandSecretRef": { + "description": "nodeExpandSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodeExpandVolume call. This field is optional, may be omitted if no secret is required. If the secret object contains more than one secret, all secrets are passed.", + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" + }, + "nodePublishSecretRef": { + "description": "nodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.", + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" + }, + "nodeStageSecretRef": { + "description": "nodeStageSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodeStageVolume and NodeStageVolume and NodeUnstageVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secrets are passed.", + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" + }, + "readOnly": { + "description": "readOnly value to pass to ControllerPublishVolumeRequest. Defaults to false (read/write).", + "type": "boolean" + }, + "volumeAttributes": { + "description": "volumeAttributes of the volume to publish.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "volumeHandle": { + "description": "volumeHandle is the unique volume name returned by the CSI volume plugin’s CreateVolume to refer to the volume on all subsequent calls. Required.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "EndpointAddress", + "Kind": "CSIPersistentVolumeSource", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.core.v1.EndpointPort": { - "description": "EndpointPort is a tuple that describes a single port.", + "io.k8s.api.core.v1.CSIVolumeSource": { + "description": "Represents a source location of a volume to mount, managed by an external CSI driver", "type": "object", "required": [ - "port" + "driver" ], "properties": { - "appProtocol": { - "description": "The application protocol for this port. This is used as a hint for implementations to offer richer behavior for protocols that they understand. This field follows standard Kubernetes label syntax. Valid values are either:\n\n* Un-prefixed protocol names - reserved for IANA standard service names (as per RFC-6335 and https://www.iana.org/assignments/service-names).\n\n* Kubernetes-defined prefixed names:\n * 'kubernetes.io/h2c' - HTTP/2 prior knowledge over cleartext as described in https://www.rfc-editor.org/rfc/rfc9113.html#name-starting-http-2-with-prior-\n * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455\n * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455\n\n* Other protocols should use implementation-defined prefixed names such as mycompany.com/my-custom-protocol.", - "type": "string" + "driver": { + "description": "driver is the name of the CSI driver that handles this volume. Consult with your admin for the correct name as registered in the cluster.", + "type": "string", + "default": "" }, - "name": { - "description": "The name of this port. This must match the 'name' field in the corresponding ServicePort. Must be a DNS_LABEL. Optional only if one port is defined.", + "fsType": { + "description": "fsType to mount. Ex. \"ext4\", \"xfs\", \"ntfs\". If not provided, the empty value is passed to the associated CSI driver which will determine the default filesystem to apply.", "type": "string" }, - "port": { - "description": "The port number of the endpoint.", - "type": "integer", - "format": "int32", - "default": 0 + "nodePublishSecretRef": { + "description": "nodePublishSecretRef is a reference to the secret object containing sensitive information to pass to the CSI driver to complete the CSI NodePublishVolume and NodeUnpublishVolume calls. This field is optional, and may be empty if no secret is required. If the secret object contains more than one secret, all secret references are passed.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "protocol": { - "description": "The IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", - "type": "string", - "enum": [ - "SCTP", - "TCP", - "UDP" - ] + "readOnly": { + "description": "readOnly specifies a read-only configuration for the volume. Defaults to false (read/write).", + "type": "boolean" + }, + "volumeAttributes": { + "description": "volumeAttributes stores driver-specific properties that are passed to the CSI driver. Consult your driver's documentation for supported values.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "EndpointPort", + "Kind": "CSIVolumeSource", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.core.v1.EndpointSubset": { - "description": "EndpointSubset is a group of addresses with a common set of ports. The expanded set of endpoints is the Cartesian product of Addresses x Ports. For example, given:\n\n\t{\n\t Addresses: [{\"ip\": \"10.10.1.1\"}, {\"ip\": \"10.10.2.2\"}],\n\t Ports: [{\"name\": \"a\", \"port\": 8675}, {\"name\": \"b\", \"port\": 309}]\n\t}\n\nThe resulting set of endpoints can be viewed as:\n\n\ta: [ 10.10.1.1:8675, 10.10.2.2:8675 ],\n\tb: [ 10.10.1.1:309, 10.10.2.2:309 ]", + "io.k8s.api.core.v1.Capabilities": { + "description": "Adds and removes POSIX capabilities from running containers.", "type": "object", "properties": { - "addresses": { - "description": "IP addresses which offer the related ports that are marked as ready. These endpoints should be considered safe for load balancers and clients to utilize.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EndpointAddress" - }, - "x-kubernetes-list-type": "atomic" - }, - "notReadyAddresses": { - "description": "IP addresses which offer the related ports but are not currently marked as ready because they have not yet finished starting, have recently failed a readiness check, or have recently failed a liveness check.", + "add": { + "description": "Added capabilities", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EndpointAddress" + "type": "string", + "default": "" }, "x-kubernetes-list-type": "atomic" }, - "ports": { - "description": "Port numbers available on the related IP addresses.", + "drop": { + "description": "Removed capabilities", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EndpointPort" + "type": "string", + "default": "" }, "x-kubernetes-list-type": "atomic" } @@ -30131,62 +30286,313 @@ "Type": "nested", "Group": "", "Version": "v1", - "Kind": "EndpointSubset", + "Kind": "Capabilities", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.Endpoints": { - "description": "Endpoints is a collection of endpoints that implement the actual service. Example:\n\n\t Name: \"mysvc\",\n\t Subsets: [\n\t {\n\t Addresses: [{\"ip\": \"10.10.1.1\"}, {\"ip\": \"10.10.2.2\"}],\n\t Ports: [{\"name\": \"a\", \"port\": 8675}, {\"name\": \"b\", \"port\": 309}]\n\t },\n\t {\n\t Addresses: [{\"ip\": \"10.10.3.3\"}],\n\t Ports: [{\"name\": \"a\", \"port\": 93}, {\"name\": \"b\", \"port\": 76}]\n\t },\n\t]", + "io.k8s.api.core.v1.CephFSPersistentVolumeSource": { + "description": "Represents a Ceph Filesystem mount that lasts the lifetime of a pod Cephfs volumes do not support ownership management or SELinux relabeling.", "type": "object", + "required": [ + "monitors" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "monitors": { + "description": "monitors is Required: Monitors is a collection of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "path": { + "description": "path is Optional: Used as the mounted root, rather than the full Ceph tree, default is /", "type": "string" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "readOnly": { + "description": "readOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", + "type": "boolean" + }, + "secretFile": { + "description": "secretFile is Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secret More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", "type": "string" }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "secretRef": { + "description": "secretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" }, - "subsets": { - "description": "The set of all endpoints is the union of all subsets. Addresses are placed into subsets according to the IPs they share. A single address with multiple ports, some of which are ready and some of which are not (because they come from different containers) will result in the address being displayed in different subsets for the different ports. No address will appear in both Addresses and NotReadyAddresses in the same subset. Sets of addresses and ports that comprise a service.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EndpointSubset" - }, - "x-kubernetes-list-type": "atomic" + "user": { + "description": "user is Optional: User is the rados user name, default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", + "type": "string" } }, "x-fabric8-info": { - "Type": "object", + "Type": "nested", "Group": "", "Version": "v1", - "Kind": "Endpoints", + "Kind": "CephFSPersistentVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.EndpointsList": { - "description": "EndpointsList is a list of endpoints.", + "io.k8s.api.core.v1.CephFSVolumeSource": { + "description": "Represents a Ceph Filesystem mount that lasts the lifetime of a pod Cephfs volumes do not support ownership management or SELinux relabeling.", "type": "object", "required": [ - "items" + "monitors" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "List of endpoints.", + "monitors": { + "description": "monitors is Required: Monitors is a collection of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "path": { + "description": "path is Optional: Used as the mounted root, rather than the full Ceph tree, default is /", + "type": "string" + }, + "readOnly": { + "description": "readOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", + "type": "boolean" + }, + "secretFile": { + "description": "secretFile is Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secret More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", + "type": "string" + }, + "secretRef": { + "description": "secretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty. More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "user": { + "description": "user is optional: User is the rados user name, default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "CephFSVolumeSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.CinderPersistentVolumeSource": { + "description": "Represents a cinder volume resource in Openstack. A Cinder volume must exist before mounting to a container. The volume must also be in the same region as the kubelet. Cinder volumes support ownership management and SELinux relabeling.", + "type": "object", + "required": [ + "volumeID" + ], + "properties": { + "fsType": { + "description": "fsType Filesystem type to mount. Must be a filesystem type supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", + "type": "string" + }, + "readOnly": { + "description": "readOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", + "type": "boolean" + }, + "secretRef": { + "description": "secretRef is Optional: points to a secret object containing parameters used to connect to OpenStack.", + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" + }, + "volumeID": { + "description": "volumeID used to identify the volume in cinder. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "CinderPersistentVolumeSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.CinderVolumeSource": { + "description": "Represents a cinder volume resource in Openstack. A Cinder volume must exist before mounting to a container. The volume must also be in the same region as the kubelet. Cinder volumes support ownership management and SELinux relabeling.", + "type": "object", + "required": [ + "volumeID" + ], + "properties": { + "fsType": { + "description": "fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", + "type": "string" + }, + "readOnly": { + "description": "readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", + "type": "boolean" + }, + "secretRef": { + "description": "secretRef is optional: points to a secret object containing parameters used to connect to OpenStack.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "volumeID": { + "description": "volumeID used to identify the volume in cinder. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "CinderVolumeSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ClientIPConfig": { + "description": "ClientIPConfig represents the configurations of Client IP based session affinity.", + "type": "object", + "properties": { + "timeoutSeconds": { + "description": "timeoutSeconds specifies the seconds of ClientIP type session sticky time. The value must be \u003e0 \u0026\u0026 \u003c=86400(for 1 day) if ServiceAffinity == \"ClientIP\". Default value is 10800(for 3 hours).", + "type": "integer", + "format": "int32" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ClientIPConfig", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ClusterTrustBundleProjection": { + "description": "ClusterTrustBundleProjection describes how to select a set of ClusterTrustBundle objects and project their contents into the pod filesystem.", + "type": "object", + "required": [ + "path" + ], + "properties": { + "labelSelector": { + "description": "Select all ClusterTrustBundles that match this label selector. Only has effect if signerName is set. Mutually-exclusive with name. If unset, interpreted as \"match nothing\". If set but empty, interpreted as \"match everything\".", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "name": { + "description": "Select a single ClusterTrustBundle by object name. Mutually-exclusive with signerName and labelSelector.", + "type": "string" + }, + "optional": { + "description": "If true, don't block pod startup if the referenced ClusterTrustBundle(s) aren't available. If using name, then the named ClusterTrustBundle is allowed not to exist. If using signerName, then the combination of signerName and labelSelector is allowed to match zero ClusterTrustBundles.", + "type": "boolean" + }, + "path": { + "description": "Relative path from the volume root to write the bundle.", + "type": "string", + "default": "" + }, + "signerName": { + "description": "Select all ClusterTrustBundles that match this signer name. Mutually-exclusive with name. The contents of all selected ClusterTrustBundles will be unified and deduplicated.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ClusterTrustBundleProjection", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ComponentCondition": { + "description": "Information about the condition of a component.", + "type": "object", + "required": [ + "type", + "status" + ], + "properties": { + "error": { + "description": "Condition error code for a component. For example, a health check error code.", + "type": "string" + }, + "message": { + "description": "Message about the condition for a component. For example, information about a health check.", + "type": "string" + }, + "status": { + "description": "Status of the condition for a component. Valid values for \"Healthy\": \"True\", \"False\", or \"Unknown\".", + "type": "string", + "default": "" + }, + "type": { + "description": "Type of condition for a component. Valid value: \"Healthy\"", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ComponentCondition", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ComponentStatus": { + "description": "ComponentStatus (and ComponentStatusList) holds the cluster validation info. Deprecated: This API is deprecated in v1.19+", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "conditions": { + "description": "List of component conditions observed", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Endpoints" + "$ref": "#/definitions/io.k8s.api.core.v1.ComponentCondition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "ComponentStatus", + "Scope": "Clustered" + } + }, + "io.k8s.api.core.v1.ComponentStatusList": { + "description": "Status of all the conditions for the component as a list of ComponentStatus objects. Deprecated: This API is deprecated in v1.19+", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of ComponentStatus objects.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ComponentStatus" } }, "kind": { @@ -30203,102 +30609,263 @@ "Type": "list", "Group": "", "Version": "v1", - "Kind": "EndpointsList", + "Kind": "ComponentStatusList", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.EnvFromSource": { - "description": "EnvFromSource represents the source of a set of ConfigMaps", + "io.k8s.api.core.v1.ConfigMap": { + "description": "ConfigMap holds configuration data for pods to consume.", "type": "object", "properties": { - "configMapRef": { - "description": "The ConfigMap to select from", - "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapEnvSource" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "prefix": { - "description": "An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER.", + "binaryData": { + "description": "BinaryData contains the binary data. Each key must consist of alphanumeric characters, '-', '_' or '.'. BinaryData can contain byte sequences that are not in the UTF-8 range. The keys stored in BinaryData must not overlap with the ones in the Data field, this is enforced during validation process. Using this field will require 1.10+ apiserver and kubelet.", + "type": "object", + "additionalProperties": { + "type": "string", + "format": "byte" + } + }, + "data": { + "description": "Data contains the configuration data. Each key must consist of alphanumeric characters, '-', '_' or '.'. Values with non-UTF-8 byte sequences must use the BinaryData field. The keys stored in Data must not overlap with the keys in the BinaryData field, this is enforced during validation process.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "immutable": { + "description": "Immutable, if set to true, ensures that data stored in the ConfigMap cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. Defaulted to nil.", + "type": "boolean" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "secretRef": { - "description": "The Secret to select from", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretEnvSource" + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "ConfigMap", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ConfigMapEnvSource": { + "description": "ConfigMapEnvSource selects a ConfigMap to populate the environment variables with.\n\nThe contents of the target ConfigMap's Data field will represent the key-value pairs as environment variables.", + "type": "object", + "properties": { + "name": { + "description": "Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string", + "default": "" + }, + "optional": { + "description": "Specify whether the ConfigMap must be defined", + "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "EnvFromSource", + "Kind": "ConfigMapEnvSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.EnvVar": { - "description": "EnvVar represents an environment variable present in a Container.", + "io.k8s.api.core.v1.ConfigMapKeySelector": { + "description": "Selects a key from a ConfigMap.", "type": "object", "required": [ - "name" + "key" ], "properties": { + "key": { + "description": "The key to select.", + "type": "string", + "default": "" + }, "name": { - "description": "Name of the environment variable. Must be a C_IDENTIFIER.", + "description": "Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", "type": "string", "default": "" }, - "value": { - "description": "Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to \"\".", + "optional": { + "description": "Specify whether the ConfigMap or its key must be defined", + "type": "boolean" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ConfigMapKeySelector", + "Scope": "Namespaced" + }, + "x-kubernetes-map-type": "atomic" + }, + "io.k8s.api.core.v1.ConfigMapList": { + "description": "ConfigMapList is a resource containing a list of ConfigMap objects.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "valueFrom": { - "description": "Source for the environment variable's value. Cannot be used if value is not empty.", - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVarSource" + "items": { + "description": "Items is the list of ConfigMaps.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMap" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "", + "Version": "v1", + "Kind": "ConfigMapList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ConfigMapNodeConfigSource": { + "description": "ConfigMapNodeConfigSource contains the information to reference a ConfigMap as a config source for the Node. This API is deprecated since 1.22: https://git.k8s.io/enhancements/keps/sig-node/281-dynamic-kubelet-configuration", + "type": "object", + "required": [ + "namespace", + "name", + "kubeletConfigKey" + ], + "properties": { + "kubeletConfigKey": { + "description": "KubeletConfigKey declares which key of the referenced ConfigMap corresponds to the KubeletConfiguration structure This field is required in all cases.", + "type": "string", + "default": "" + }, + "name": { + "description": "Name is the metadata.name of the referenced ConfigMap. This field is required in all cases.", + "type": "string", + "default": "" + }, + "namespace": { + "description": "Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.", + "type": "string", + "default": "" + }, + "resourceVersion": { + "description": "ResourceVersion is the metadata.ResourceVersion of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.", + "type": "string" + }, + "uid": { + "description": "UID is the metadata.UID of the referenced ConfigMap. This field is forbidden in Node.Spec, and required in Node.Status.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "EnvVar", + "Kind": "ConfigMapNodeConfigSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.EnvVarSource": { - "description": "EnvVarSource represents a source for the value of an EnvVar.", + "io.k8s.api.core.v1.ConfigMapProjection": { + "description": "Adapts a ConfigMap into a projected volume.\n\nThe contents of the target ConfigMap's Data field will be presented in a projected volume as files using the keys in the Data field as the file names, unless the items element is populated with specific mappings of keys to paths. Note that this is identical to a configmap volume source without the default mode.", "type": "object", "properties": { - "configMapKeyRef": { - "description": "Selects a key of a ConfigMap.", - "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapKeySelector" + "items": { + "description": "items if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.KeyToPath" + }, + "x-kubernetes-list-type": "atomic" }, - "fieldRef": { - "description": "Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['\u003cKEY\u003e']`, `metadata.annotations['\u003cKEY\u003e']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectFieldSelector" + "name": { + "description": "Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string", + "default": "" }, - "resourceFieldRef": { - "description": "Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.", - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceFieldSelector" + "optional": { + "description": "optional specify whether the ConfigMap or its keys must be defined", + "type": "boolean" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ConfigMapProjection", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ConfigMapVolumeSource": { + "description": "Adapts a ConfigMap into a volume.\n\nThe contents of the target ConfigMap's Data field will be presented in a volume as files using the keys in the Data field as the file names, unless the items element is populated with specific mappings of keys to paths. ConfigMap volumes support ownership management and SELinux relabeling.", + "type": "object", + "properties": { + "defaultMode": { + "description": "defaultMode is optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.", + "type": "integer", + "format": "int32" }, - "secretKeyRef": { - "description": "Selects a key of a secret in the pod's namespace", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretKeySelector" + "items": { + "description": "items if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.KeyToPath" + }, + "x-kubernetes-list-type": "atomic" + }, + "name": { + "description": "Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string", + "default": "" + }, + "optional": { + "description": "optional specify whether the ConfigMap or its keys must be defined", + "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "EnvVarSource", + "Kind": "ConfigMapVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.EphemeralContainer": { - "description": "An EphemeralContainer is a temporary container that you may add to an existing Pod for user-initiated activities such as debugging. Ephemeral containers have no resource or scheduling guarantees, and they will not be restarted when they exit or when a Pod is removed or restarted. The kubelet may evict a Pod if an ephemeral container causes the Pod to exceed its resource allocation.\n\nTo add an ephemeral container, use the ephemeralcontainers subresource of an existing Pod. Ephemeral containers may not be removed or restarted.", + "io.k8s.api.core.v1.Container": { + "description": "A single application container that you want to run within a pod.", "type": "object", "required": [ "name" ], "properties": { "args": { - "description": "Arguments to the entrypoint. The image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell", + "description": "Arguments to the entrypoint. The container image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell", "type": "array", "items": { "type": "string", @@ -30307,7 +30874,7 @@ "x-kubernetes-list-type": "atomic" }, "command": { - "description": "Entrypoint array. Not executed within a shell. The image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell", + "description": "Entrypoint array. Not executed within a shell. The container image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell", "type": "array", "items": { "type": "string", @@ -30339,7 +30906,7 @@ "x-kubernetes-list-type": "atomic" }, "image": { - "description": "Container image name. More info: https://kubernetes.io/docs/concepts/containers/images", + "description": "Container image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.", "type": "string" }, "imagePullPolicy": { @@ -30352,20 +30919,20 @@ ] }, "lifecycle": { - "description": "Lifecycle is not allowed for ephemeral containers.", + "description": "Actions that the management system should take in response to container lifecycle events. Cannot be updated.", "$ref": "#/definitions/io.k8s.api.core.v1.Lifecycle" }, "livenessProbe": { - "description": "Probes are not allowed for ephemeral containers.", + "description": "Periodic probe of container liveness. Container will be restarted if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes", "$ref": "#/definitions/io.k8s.api.core.v1.Probe" }, "name": { - "description": "Name of the ephemeral container specified as a DNS_LABEL. This name must be unique among all containers, init containers and ephemeral containers.", + "description": "Name of the container specified as a DNS_LABEL. Each container in a pod must have a unique name (DNS_LABEL). Cannot be updated.", "type": "string", "default": "" }, "ports": { - "description": "Ports are not allowed for ephemeral containers.", + "description": "List of ports to expose from the container. Not specifying a port here DOES NOT prevent that port from being exposed. Any port which is listening on the default \"0.0.0.0\" address inside a container will be accessible from the network. Modifying this array with strategic merge patch may corrupt the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255. Cannot be updated.", "type": "array", "items": { "default": {}, @@ -30380,7 +30947,7 @@ "x-kubernetes-patch-strategy": "merge" }, "readinessProbe": { - "description": "Probes are not allowed for ephemeral containers.", + "description": "Periodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes", "$ref": "#/definitions/io.k8s.api.core.v1.Probe" }, "resizePolicy": { @@ -30393,20 +30960,20 @@ "x-kubernetes-list-type": "atomic" }, "resources": { - "description": "Resources are not allowed for ephemeral containers. Ephemeral containers use spare resources already allocated to the pod.", + "description": "Compute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/", "default": {}, "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" }, "restartPolicy": { - "description": "Restart policy for the container to manage the restart behavior of each container within a pod. This may only be set for init containers. You cannot set this field on ephemeral containers.", + "description": "RestartPolicy defines the restart behavior of individual containers in a pod. This field may only be set for init containers, and the only allowed value is \"Always\". For non-init containers or when this field is not specified, the restart behavior is defined by the Pod's restart policy and the container type. Setting the RestartPolicy as \"Always\" for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy \"Always\" will be shut down. This lifecycle differs from normal init containers and is often referred to as a \"sidecar\" container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed.", "type": "string" }, "securityContext": { - "description": "Optional: SecurityContext defines the security options the ephemeral container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.", + "description": "SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/", "$ref": "#/definitions/io.k8s.api.core.v1.SecurityContext" }, "startupProbe": { - "description": "Probes are not allowed for ephemeral containers.", + "description": "StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod's lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes", "$ref": "#/definitions/io.k8s.api.core.v1.Probe" }, "stdin": { @@ -30417,10 +30984,6 @@ "description": "Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false", "type": "boolean" }, - "targetContainerName": { - "description": "If set, the name of the container from PodSpec that this ephemeral container targets. The ephemeral container will be run in the namespaces (IPC, PID, etc) of this container. If not set then the ephemeral container uses the namespaces configured in the Pod spec.\n\nThe container runtime must implement support for this feature. If the runtime does not support namespace targeting then the result of setting this field is undefined.", - "type": "string" - }, "terminationMessagePath": { "description": "Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.", "type": "string" @@ -30452,7 +31015,7 @@ "x-kubernetes-patch-strategy": "merge" }, "volumeMounts": { - "description": "Pod volumes to mount into the container's filesystem. Subpath mounts are not allowed for ephemeral containers. Cannot be updated.", + "description": "Pod volumes to mount into the container's filesystem. Cannot be updated.", "type": "array", "items": { "default": {}, @@ -30474,28 +31037,16 @@ "Type": "nested", "Group": "", "Version": "v1", - "Kind": "EphemeralContainer", + "Kind": "Container", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.EphemeralContainerCommon": { - "description": "EphemeralContainerCommon is a copy of all fields in Container to be inlined in EphemeralContainer. This separate type allows easy conversion from EphemeralContainer to Container and allows separate documentation for the fields of EphemeralContainer. When a new field is added to Container it must be added here as well.", + "io.k8s.api.core.v1.ContainerImage": { + "description": "Describe a container image", "type": "object", - "required": [ - "name" - ], "properties": { - "args": { - "description": "Arguments to the entrypoint. The image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "command": { - "description": "Entrypoint array. Not executed within a shell. The image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell", + "names": { + "description": "Names by which this image is known. e.g. [\"kubernetes.example/hyperkube:v1.0.7\", \"cloud-vendor.registry.example/cloud-vendor/hyperkube:v1.0.7\"]", "type": "array", "items": { "type": "string", @@ -30503,711 +31054,514 @@ }, "x-kubernetes-list-type": "atomic" }, - "env": { - "description": "List of environment variables to set in the container. Cannot be updated.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" - }, - "envFrom": { - "description": "List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvFromSource" - }, - "x-kubernetes-list-type": "atomic" - }, - "image": { - "description": "Container image name. More info: https://kubernetes.io/docs/concepts/containers/images", - "type": "string" - }, - "imagePullPolicy": { - "description": "Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images\n\nPossible enum values:\n - `\"Always\"` means that kubelet always attempts to pull the latest image. Container will fail If the pull fails.\n - `\"IfNotPresent\"` means that kubelet pulls if the image isn't present on disk. Container will fail if the image isn't present and the pull fails.\n - `\"Never\"` means that kubelet never pulls an image, but only uses a local image. Container will fail if the image isn't present", - "type": "string", - "enum": [ - "Always", - "IfNotPresent", - "Never" - ] - }, - "lifecycle": { - "description": "Lifecycle is not allowed for ephemeral containers.", - "$ref": "#/definitions/io.k8s.api.core.v1.Lifecycle" - }, - "livenessProbe": { - "description": "Probes are not allowed for ephemeral containers.", - "$ref": "#/definitions/io.k8s.api.core.v1.Probe" - }, - "name": { - "description": "Name of the ephemeral container specified as a DNS_LABEL. This name must be unique among all containers, init containers and ephemeral containers.", - "type": "string", - "default": "" - }, - "ports": { - "description": "Ports are not allowed for ephemeral containers.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ContainerPort" - }, - "x-kubernetes-list-map-keys": [ - "containerPort", - "protocol" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "containerPort", - "x-kubernetes-patch-strategy": "merge" - }, - "readinessProbe": { - "description": "Probes are not allowed for ephemeral containers.", - "$ref": "#/definitions/io.k8s.api.core.v1.Probe" - }, - "resizePolicy": { - "description": "Resources resize policy for the container.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ContainerResizePolicy" - }, - "x-kubernetes-list-type": "atomic" - }, - "resources": { - "description": "Resources are not allowed for ephemeral containers. Ephemeral containers use spare resources already allocated to the pod.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" - }, - "restartPolicy": { - "description": "Restart policy for the container to manage the restart behavior of each container within a pod. This may only be set for init containers. You cannot set this field on ephemeral containers.", - "type": "string" - }, - "securityContext": { - "description": "Optional: SecurityContext defines the security options the ephemeral container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.", - "$ref": "#/definitions/io.k8s.api.core.v1.SecurityContext" - }, - "startupProbe": { - "description": "Probes are not allowed for ephemeral containers.", - "$ref": "#/definitions/io.k8s.api.core.v1.Probe" - }, - "stdin": { - "description": "Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.", - "type": "boolean" - }, - "stdinOnce": { - "description": "Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false", - "type": "boolean" - }, - "terminationMessagePath": { - "description": "Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.", - "type": "string" - }, - "terminationMessagePolicy": { - "description": "Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.\n\nPossible enum values:\n - `\"FallbackToLogsOnError\"` will read the most recent contents of the container logs for the container status message when the container exits with an error and the terminationMessagePath has no contents.\n - `\"File\"` is the default behavior and will set the container status message to the contents of the container's terminationMessagePath when the container exits.", - "type": "string", - "enum": [ - "FallbackToLogsOnError", - "File" - ] - }, - "tty": { - "description": "Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.", - "type": "boolean" - }, - "volumeDevices": { - "description": "volumeDevices is the list of block devices to be used by the container.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.VolumeDevice" - }, - "x-kubernetes-list-map-keys": [ - "devicePath" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "devicePath", - "x-kubernetes-patch-strategy": "merge" - }, - "volumeMounts": { - "description": "Pod volumes to mount into the container's filesystem. Subpath mounts are not allowed for ephemeral containers. Cannot be updated.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.VolumeMount" - }, - "x-kubernetes-list-map-keys": [ - "mountPath" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "mountPath", - "x-kubernetes-patch-strategy": "merge" - }, - "workingDir": { - "description": "Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.", - "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "EphemeralContainerCommon", - "Scope": "Namespaced" - } - }, - "io.k8s.api.core.v1.EphemeralVolumeSource": { - "description": "Represents an ephemeral volume that is handled by a normal storage driver.", - "type": "object", - "properties": { - "volumeClaimTemplate": { - "description": "Will be used to create a stand-alone PVC to provision the volume. The pod in which this EphemeralVolumeSource is embedded will be the owner of the PVC, i.e. the PVC will be deleted together with the pod. The name of the PVC will be `\u003cpod name\u003e-\u003cvolume name\u003e` where `\u003cvolume name\u003e` is the name from the `PodSpec.Volumes` array entry. Pod validation will reject the pod if the concatenated name is not valid for a PVC (for example, too long).\n\nAn existing PVC with that name that is not owned by the pod will *not* be used for the pod to avoid using an unrelated volume by mistake. Starting the pod is then blocked until the unrelated PVC is removed. If such a pre-created PVC is meant to be used by the pod, the PVC has to updated with an owner reference to the pod once the pod exists. Normally this should not be necessary, but it may be useful when manually reconstructing a broken cluster.\n\nThis field is read-only and no changes will be made by Kubernetes to the PVC after it has been created.\n\nRequired, must not be nil.", - "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimTemplate" + "sizeBytes": { + "description": "The size of the image in bytes.", + "type": "integer", + "format": "int64" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "EphemeralVolumeSource", + "Kind": "ContainerImage", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.Event": { - "description": "Event is a report of an event somewhere in the cluster. Events have a limited retention time and triggers and messages may evolve with time. Event consumers should not rely on the timing of an event with a given Reason reflecting a consistent underlying trigger, or the continued existence of events with that Reason. Events should be treated as informative, best-effort, supplemental data.", + "io.k8s.api.core.v1.ContainerPort": { + "description": "ContainerPort represents a network port in a single container.", "type": "object", "required": [ - "metadata", - "involvedObject" + "containerPort" ], "properties": { - "action": { - "description": "What action was taken/failed regarding to the Regarding object.", - "type": "string" + "containerPort": { + "description": "Number of port to expose on the pod's IP address. This must be a valid port number, 0 \u003c x \u003c 65536.", + "type": "integer", + "format": "int32", + "default": 0 }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "hostIP": { + "description": "What host IP to bind the external port to.", "type": "string" }, - "count": { - "description": "The number of times this event has occurred.", + "hostPort": { + "description": "Number of port to expose on the host. If specified, this must be a valid port number, 0 \u003c x \u003c 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.", "type": "integer", "format": "int32" }, - "eventTime": { - "description": "Time when this Event was first observed.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" - }, - "firstTimestamp": { - "description": "The time at which the event was first recorded. (Time of server receipt is in TypeMeta.)", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "involvedObject": { - "description": "The object that this event is about.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "lastTimestamp": { - "description": "The time at which the most recent occurrence of this event was recorded.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "A human-readable description of the status of this operation.", - "type": "string" - }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "reason": { - "description": "This should be a short, machine understandable string that gives the reason for the transition into the object's current status.", + "name": { + "description": "If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.", "type": "string" }, - "related": { - "description": "Optional secondary object for more complex actions.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "reportingComponent": { - "description": "Name of the controller that emitted this Event, e.g. `kubernetes.io/kubelet`.", - "type": "string", - "default": "" - }, - "reportingInstance": { - "description": "ID of the controller instance, e.g. `kubelet-xyzf`.", + "protocol": { + "description": "Protocol for port. Must be UDP, TCP, or SCTP. Defaults to \"TCP\".\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", "type": "string", - "default": "" - }, - "series": { - "description": "Data about the Event series this event represents or nil if it's a singleton Event.", - "$ref": "#/definitions/io.k8s.api.core.v1.EventSeries" - }, - "source": { - "description": "The component reporting this event. Should be a short machine understandable string.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EventSource" - }, - "type": { - "description": "Type of this event (Normal, Warning), new types could be added in the future", - "type": "string" + "default": "TCP", + "enum": [ + "SCTP", + "TCP", + "UDP" + ] } }, "x-fabric8-info": { - "Type": "object", + "Type": "nested", "Group": "", "Version": "v1", - "Kind": "Event", + "Kind": "ContainerPort", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.EventList": { - "description": "EventList is a list of events.", + "io.k8s.api.core.v1.ContainerResizePolicy": { + "description": "ContainerResizePolicy represents resource resize policy for the container.", "type": "object", "required": [ - "items" + "resourceName", + "restartPolicy" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "List of events", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Event" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - }, - "x-fabric8-info": { - "Type": "list", - "Group": "", - "Version": "v1", - "Kind": "EventList", - "Scope": "Namespaced" - } - }, - "io.k8s.api.core.v1.EventSeries": { - "description": "EventSeries contain information on series of events, i.e. thing that was/is happening continuously for some time.", - "type": "object", - "properties": { - "count": { - "description": "Number of occurrences in this series up to the last heartbeat time", - "type": "integer", - "format": "int32" + "resourceName": { + "description": "Name of the resource to which this resource resize policy applies. Supported values: cpu, memory.", + "type": "string", + "default": "" }, - "lastObservedTime": { - "description": "Time of the last occurrence observed", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" + "restartPolicy": { + "description": "Restart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "EventSeries", + "Kind": "ContainerResizePolicy", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.EventSource": { - "description": "EventSource contains information for an event.", + "io.k8s.api.core.v1.ContainerState": { + "description": "ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one is ContainerStateWaiting.", "type": "object", "properties": { - "component": { - "description": "Component from which the event is generated.", - "type": "string" + "running": { + "description": "Details about a running container", + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerStateRunning" }, - "host": { - "description": "Node name on which the event is generated.", - "type": "string" + "terminated": { + "description": "Details about a terminated container", + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerStateTerminated" + }, + "waiting": { + "description": "Details about a waiting container", + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerStateWaiting" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "EventSource", + "Kind": "ContainerState", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ExecAction": { - "description": "ExecAction describes a \"run in container\" action.", + "io.k8s.api.core.v1.ContainerStateRunning": { + "description": "ContainerStateRunning is a running state of a container.", "type": "object", "properties": { - "command": { - "description": "Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "startedAt": { + "description": "Time at which the container was last (re-)started", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "ExecAction", + "Kind": "ContainerStateRunning", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.FCVolumeSource": { - "description": "Represents a Fibre Channel volume. Fibre Channel volumes can only be mounted as read/write once. Fibre Channel volumes support ownership management and SELinux relabeling.", + "io.k8s.api.core.v1.ContainerStateTerminated": { + "description": "ContainerStateTerminated is a terminated state of a container.", "type": "object", + "required": [ + "exitCode" + ], "properties": { - "fsType": { - "description": "fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified.", + "containerID": { + "description": "Container's ID in the format '\u003ctype\u003e://\u003ccontainer_id\u003e'", "type": "string" }, - "lun": { - "description": "lun is Optional: FC target lun number", + "exitCode": { + "description": "Exit status from the last termination of the container", "type": "integer", - "format": "int32" + "format": "int32", + "default": 0 }, - "readOnly": { - "description": "readOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", - "type": "boolean" + "finishedAt": { + "description": "Time at which the container last terminated", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "targetWWNs": { - "description": "targetWWNs is Optional: FC target worldwide names (WWNs)", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "message": { + "description": "Message regarding the last termination of the container", + "type": "string" }, - "wwids": { - "description": "wwids Optional: FC volume world wide identifiers (wwids) Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "reason": { + "description": "(brief) reason from the last termination of the container", + "type": "string" + }, + "signal": { + "description": "Signal from the last termination of the container", + "type": "integer", + "format": "int32" + }, + "startedAt": { + "description": "Time at which previous execution of the container started", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "FCVolumeSource", + "Kind": "ContainerStateTerminated", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.FlexPersistentVolumeSource": { - "description": "FlexPersistentVolumeSource represents a generic persistent volume resource that is provisioned/attached using an exec based plugin.", + "io.k8s.api.core.v1.ContainerStateWaiting": { + "description": "ContainerStateWaiting is a waiting state of a container.", "type": "object", - "required": [ - "driver" - ], "properties": { - "driver": { - "description": "driver is the name of the driver to use for this volume.", - "type": "string", - "default": "" - }, - "fsType": { - "description": "fsType is the Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". The default filesystem depends on FlexVolume script.", + "message": { + "description": "Message regarding why the container is not yet running.", "type": "string" }, - "options": { - "description": "options is Optional: this field holds extra command options if any.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "readOnly": { - "description": "readOnly is Optional: defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", - "type": "boolean" - }, - "secretRef": { - "description": "secretRef is Optional: SecretRef is reference to the secret object containing sensitive information to pass to the plugin scripts. This may be empty if no secret object is specified. If the secret object contains more than one secret, all secrets are passed to the plugin scripts.", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" + "reason": { + "description": "(brief) reason the container is not yet running.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "FlexPersistentVolumeSource", + "Kind": "ContainerStateWaiting", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.FlexVolumeSource": { - "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.", + "io.k8s.api.core.v1.ContainerStatus": { + "description": "ContainerStatus contains details for the current status of this container.", "type": "object", "required": [ - "driver" + "name", + "ready", + "restartCount", + "image", + "imageID" ], "properties": { - "driver": { - "description": "driver is the name of the driver to use for this volume.", - "type": "string", - "default": "" - }, - "fsType": { - "description": "fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". The default filesystem depends on FlexVolume script.", - "type": "string" - }, - "options": { - "description": "options is Optional: this field holds extra command options if any.", + "allocatedResources": { + "description": "AllocatedResources represents the compute resources allocated for this container by the node. Kubelet sets this value to Container.Resources.Requests upon successful pod admission and after successfully admitting desired pod resize.", "type": "object", "additionalProperties": { - "type": "string", - "default": "" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" } }, - "readOnly": { - "description": "readOnly is Optional: defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "allocatedResourcesStatus": { + "description": "AllocatedResourcesStatus represents the status of various resources allocated for this Pod.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceStatus" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + }, + "containerID": { + "description": "ContainerID is the ID of the container in the format '\u003ctype\u003e://\u003ccontainer_id\u003e'. Where type is a container runtime identifier, returned from Version call of CRI API (for example \"containerd\").", + "type": "string" + }, + "image": { + "description": "Image is the name of container image that the container is running. The container image may not match the image used in the PodSpec, as it may have been resolved by the runtime. More info: https://kubernetes.io/docs/concepts/containers/images.", + "type": "string", + "default": "" + }, + "imageID": { + "description": "ImageID is the image ID of the container's image. The image ID may not match the image ID of the image used in the PodSpec, as it may have been resolved by the runtime.", + "type": "string", + "default": "" + }, + "lastState": { + "description": "LastTerminationState holds the last termination state of the container to help debug container crashes and restarts. This field is not populated if the container is still running and RestartCount is 0.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerState" + }, + "name": { + "description": "Name is a DNS_LABEL representing the unique name of the container. Each container in a pod must have a unique name across all container types. Cannot be updated.", + "type": "string", + "default": "" + }, + "ready": { + "description": "Ready specifies whether the container is currently passing its readiness check. The value will change as readiness probes keep executing. If no readiness probes are specified, this field defaults to true once the container is fully started (see Started field).\n\nThe value is typically used to determine whether a container is ready to accept traffic.", + "type": "boolean", + "default": false + }, + "resources": { + "description": "Resources represents the compute resource requests and limits that have been successfully enacted on the running container after it has been started or has been successfully resized.", + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" + }, + "restartCount": { + "description": "RestartCount holds the number of times the container has been restarted. Kubelet makes an effort to always increment the value, but there are cases when the state may be lost due to node restarts and then the value may be reset to 0. The value is never negative.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "started": { + "description": "Started indicates whether the container has finished its postStart lifecycle hook and passed its startup probe. Initialized as false, becomes true after startupProbe is considered successful. Resets to false when the container is restarted, or if kubelet loses state temporarily. In both cases, startup probes will run again. Is always true when no startupProbe is defined and container is running and has passed the postStart lifecycle hook. The null value must be treated the same as false.", "type": "boolean" }, - "secretRef": { - "description": "secretRef is Optional: secretRef is reference to the secret object containing sensitive information to pass to the plugin scripts. This may be empty if no secret object is specified. If the secret object contains more than one secret, all secrets are passed to the plugin scripts.", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + "state": { + "description": "State holds details about the container's current condition.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerState" + }, + "user": { + "description": "User represents user identity information initially attached to the first process of the container", + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerUser" + }, + "volumeMounts": { + "description": "Status of volume mounts.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.VolumeMountStatus" + }, + "x-kubernetes-list-map-keys": [ + "mountPath" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "mountPath", + "x-kubernetes-patch-strategy": "merge" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "FlexVolumeSource", + "Kind": "ContainerStatus", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.FlockerVolumeSource": { - "description": "Represents a Flocker volume mounted by the Flocker agent. One and only one of datasetName and datasetUUID should be set. Flocker volumes do not support ownership management or SELinux relabeling.", + "io.k8s.api.core.v1.ContainerUser": { + "description": "ContainerUser represents user identity information", "type": "object", "properties": { - "datasetName": { - "description": "datasetName is Name of the dataset stored as metadata -\u003e name on the dataset for Flocker should be considered as deprecated", - "type": "string" - }, - "datasetUUID": { - "description": "datasetUUID is the UUID of the dataset. This is unique identifier of a Flocker dataset", - "type": "string" + "linux": { + "description": "Linux holds user identity information initially attached to the first process of the containers in Linux. Note that the actual running identity can be changed if the process has enough privilege to do so.", + "$ref": "#/definitions/io.k8s.api.core.v1.LinuxContainerUser" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "FlockerVolumeSource", + "Kind": "ContainerUser", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.GCEPersistentDiskVolumeSource": { - "description": "Represents a Persistent Disk resource in Google Compute Engine.\n\nA GCE PD must exist before mounting to a container. The disk must also be in the same GCE project and zone as the kubelet. A GCE PD can only be mounted as read/write once or read-only many times. GCE PDs support ownership management and SELinux relabeling.", + "io.k8s.api.core.v1.DaemonEndpoint": { + "description": "DaemonEndpoint contains information about a single Daemon endpoint.", "type": "object", "required": [ - "pdName" + "Port" ], "properties": { - "fsType": { - "description": "fsType is filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", - "type": "string" - }, - "partition": { - "description": "partition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as \"1\". Similarly, the volume partition for /dev/sda is \"0\" (or you can leave the property empty). More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", + "Port": { + "description": "Port number of the given endpoint.", "type": "integer", - "format": "int32" - }, - "pdName": { - "description": "pdName is unique name of the PD resource in GCE. Used to identify the disk in GCE. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", - "type": "string", - "default": "" - }, - "readOnly": { - "description": "readOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", - "type": "boolean" + "format": "int32", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "GCEPersistentDiskVolumeSource", + "Kind": "DaemonEndpoint", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.GRPCAction": { + "io.k8s.api.core.v1.DownwardAPIProjection": { + "description": "Represents downward API info for projecting into a projected volume. Note that this is identical to a downwardAPI volume source without the default mode.", "type": "object", - "required": [ - "port" - ], "properties": { - "port": { - "description": "Port number of the gRPC service. Number must be in the range 1 to 65535.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "service": { - "description": "Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n\nIf this is not specified, the default behavior is defined by gRPC.", - "type": "string", - "default": "" + "items": { + "description": "Items is a list of DownwardAPIVolume file", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.DownwardAPIVolumeFile" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "GRPCAction", + "Kind": "DownwardAPIProjection", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.GitRepoVolumeSource": { - "description": "Represents a volume that is populated with the contents of a git repository. Git repo volumes do not support ownership management. Git repo volumes support SELinux relabeling.\n\nDEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod's container.", + "io.k8s.api.core.v1.DownwardAPIVolumeFile": { + "description": "DownwardAPIVolumeFile represents information to create the file containing the pod field", "type": "object", "required": [ - "repository" + "path" ], "properties": { - "directory": { - "description": "directory is the target directory name. Must not contain or start with '..'. If '.' is supplied, the volume directory will be the git repository. Otherwise, if specified, the volume will contain the git repository in the subdirectory with the given name.", - "type": "string" + "fieldRef": { + "description": "Required: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.", + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectFieldSelector" }, - "repository": { - "description": "repository is the URL", + "mode": { + "description": "Optional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.", + "type": "integer", + "format": "int32" + }, + "path": { + "description": "Required: Path is the relative path name of the file to be created. Must not be absolute or contain the '..' path. Must be utf-8 encoded. The first item of the relative path must not start with '..'", "type": "string", "default": "" }, - "revision": { - "description": "revision is the commit hash for the specified revision.", - "type": "string" + "resourceFieldRef": { + "description": "Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.", + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceFieldSelector" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "GitRepoVolumeSource", + "Kind": "DownwardAPIVolumeFile", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.GlusterfsPersistentVolumeSource": { - "description": "Represents a Glusterfs mount that lasts the lifetime of a pod. Glusterfs volumes do not support ownership management or SELinux relabeling.", + "io.k8s.api.core.v1.DownwardAPIVolumeSource": { + "description": "DownwardAPIVolumeSource represents a volume containing downward API info. Downward API volumes support ownership management and SELinux relabeling.", "type": "object", - "required": [ - "endpoints", - "path" - ], "properties": { - "endpoints": { - "description": "endpoints is the endpoint name that details Glusterfs topology. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", - "type": "string", - "default": "" + "defaultMode": { + "description": "Optional: mode bits to use on created files by default. Must be a Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.", + "type": "integer", + "format": "int32" }, - "endpointsNamespace": { - "description": "endpointsNamespace is the namespace that contains Glusterfs endpoint. If this field is empty, the EndpointNamespace defaults to the same namespace as the bound PVC. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", + "items": { + "description": "Items is a list of downward API volume file", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.DownwardAPIVolumeFile" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "DownwardAPIVolumeSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.EmptyDirVolumeSource": { + "description": "Represents an empty directory for a pod. Empty directory volumes support ownership management and SELinux relabeling.", + "type": "object", + "properties": { + "medium": { + "description": "medium represents what type of storage medium should back this directory. The default is \"\" which means to use the node's default medium. Must be an empty string (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir", "type": "string" }, - "path": { - "description": "path is the Glusterfs volume path. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", - "type": "string", - "default": "" - }, - "readOnly": { - "description": "readOnly here will force the Glusterfs volume to be mounted with read-only permissions. Defaults to false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", - "type": "boolean" + "sizeLimit": { + "description": "sizeLimit is the total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "GlusterfsPersistentVolumeSource", + "Kind": "EmptyDirVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.GlusterfsVolumeSource": { - "description": "Represents a Glusterfs mount that lasts the lifetime of a pod. Glusterfs volumes do not support ownership management or SELinux relabeling.", + "io.k8s.api.core.v1.EndpointAddress": { + "description": "EndpointAddress is a tuple that describes single IP address.", "type": "object", "required": [ - "endpoints", - "path" + "ip" ], "properties": { - "endpoints": { - "description": "endpoints is the endpoint name that details Glusterfs topology. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", - "type": "string", - "default": "" + "hostname": { + "description": "The Hostname of this endpoint", + "type": "string" }, - "path": { - "description": "path is the Glusterfs volume path. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", + "ip": { + "description": "The IP of this endpoint. May not be loopback (127.0.0.0/8 or ::1), link-local (169.254.0.0/16 or fe80::/10), or link-local multicast (224.0.0.0/24 or ff02::/16).", "type": "string", "default": "" }, - "readOnly": { - "description": "readOnly here will force the Glusterfs volume to be mounted with read-only permissions. Defaults to false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", - "type": "boolean" + "nodeName": { + "description": "Optional: Node hosting this endpoint. This can be used to determine endpoints local to a node.", + "type": "string" + }, + "targetRef": { + "description": "Reference to object providing the endpoint.", + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "GlusterfsVolumeSource", + "Kind": "EndpointAddress", "Scope": "Namespaced" - } + }, + "x-kubernetes-map-type": "atomic" }, - "io.k8s.api.core.v1.HTTPGetAction": { - "description": "HTTPGetAction describes an action based on HTTP Get requests.", + "io.k8s.api.core.v1.EndpointPort": { + "description": "EndpointPort is a tuple that describes a single port.", "type": "object", "required": [ "port" ], "properties": { - "host": { - "description": "Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead.", + "appProtocol": { + "description": "The application protocol for this port. This is used as a hint for implementations to offer richer behavior for protocols that they understand. This field follows standard Kubernetes label syntax. Valid values are either:\n\n* Un-prefixed protocol names - reserved for IANA standard service names (as per RFC-6335 and https://www.iana.org/assignments/service-names).\n\n* Kubernetes-defined prefixed names:\n * 'kubernetes.io/h2c' - HTTP/2 prior knowledge over cleartext as described in https://www.rfc-editor.org/rfc/rfc9113.html#name-starting-http-2-with-prior-\n * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455\n * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455\n\n* Other protocols should use implementation-defined prefixed names such as mycompany.com/my-custom-protocol.", "type": "string" }, - "httpHeaders": { - "description": "Custom headers to set in the request. HTTP allows repeated headers.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.HTTPHeader" - }, - "x-kubernetes-list-type": "atomic" - }, - "path": { - "description": "Path to access on the HTTP server.", + "name": { + "description": "The name of this port. This must match the 'name' field in the corresponding ServicePort. Must be a DNS_LABEL. Optional only if one port is defined.", "type": "string" }, "port": { - "description": "Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + "description": "The port number of the endpoint.", + "type": "integer", + "format": "int32", + "default": 0 }, - "scheme": { - "description": "Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - `\"HTTP\"` means that the scheme used will be http://\n - `\"HTTPS\"` means that the scheme used will be https://", + "protocol": { + "description": "The IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", "type": "string", "enum": [ - "HTTP", - "HTTPS" + "SCTP", + "TCP", + "UDP" ] } }, @@ -31215,273 +31569,448 @@ "Type": "nested", "Group": "", "Version": "v1", - "Kind": "HTTPGetAction", + "Kind": "EndpointPort", "Scope": "Namespaced" - } + }, + "x-kubernetes-map-type": "atomic" }, - "io.k8s.api.core.v1.HTTPHeader": { - "description": "HTTPHeader describes a custom header to be used in HTTP probes", + "io.k8s.api.core.v1.EndpointSubset": { + "description": "EndpointSubset is a group of addresses with a common set of ports. The expanded set of endpoints is the Cartesian product of Addresses x Ports. For example, given:\n\n\t{\n\t Addresses: [{\"ip\": \"10.10.1.1\"}, {\"ip\": \"10.10.2.2\"}],\n\t Ports: [{\"name\": \"a\", \"port\": 8675}, {\"name\": \"b\", \"port\": 309}]\n\t}\n\nThe resulting set of endpoints can be viewed as:\n\n\ta: [ 10.10.1.1:8675, 10.10.2.2:8675 ],\n\tb: [ 10.10.1.1:309, 10.10.2.2:309 ]", "type": "object", - "required": [ - "name", - "value" - ], "properties": { - "name": { - "description": "The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.", - "type": "string", - "default": "" + "addresses": { + "description": "IP addresses which offer the related ports that are marked as ready. These endpoints should be considered safe for load balancers and clients to utilize.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EndpointAddress" + }, + "x-kubernetes-list-type": "atomic" }, - "value": { - "description": "The header field value", - "type": "string", - "default": "" + "notReadyAddresses": { + "description": "IP addresses which offer the related ports but are not currently marked as ready because they have not yet finished starting, have recently failed a readiness check, or have recently failed a liveness check.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EndpointAddress" + }, + "x-kubernetes-list-type": "atomic" + }, + "ports": { + "description": "Port numbers available on the related IP addresses.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EndpointPort" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "HTTPHeader", + "Kind": "EndpointSubset", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.HostAlias": { - "description": "HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file.", + "io.k8s.api.core.v1.Endpoints": { + "description": "Endpoints is a collection of endpoints that implement the actual service. Example:\n\n\t Name: \"mysvc\",\n\t Subsets: [\n\t {\n\t Addresses: [{\"ip\": \"10.10.1.1\"}, {\"ip\": \"10.10.2.2\"}],\n\t Ports: [{\"name\": \"a\", \"port\": 8675}, {\"name\": \"b\", \"port\": 309}]\n\t },\n\t {\n\t Addresses: [{\"ip\": \"10.10.3.3\"}],\n\t Ports: [{\"name\": \"a\", \"port\": 93}, {\"name\": \"b\", \"port\": 76}]\n\t },\n\t]", "type": "object", - "required": [ - "ip" - ], "properties": { - "hostnames": { - "description": "Hostnames for the above IP address.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "subsets": { + "description": "The set of all endpoints is the union of all subsets. Addresses are placed into subsets according to the IPs they share. A single address with multiple ports, some of which are ready and some of which are not (because they come from different containers) will result in the address being displayed in different subsets for the different ports. No address will appear in both Addresses and NotReadyAddresses in the same subset. Sets of addresses and ports that comprise a service.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EndpointSubset" }, "x-kubernetes-list-type": "atomic" - }, - "ip": { - "description": "IP address of the host file entry.", - "type": "string", - "default": "" } }, "x-fabric8-info": { - "Type": "nested", + "Type": "object", "Group": "", "Version": "v1", - "Kind": "HostAlias", + "Kind": "Endpoints", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.HostIP": { - "description": "HostIP represents a single IP address allocated to the host.", + "io.k8s.api.core.v1.EndpointsList": { + "description": "EndpointsList is a list of endpoints.", "type": "object", "required": [ - "ip" + "items" ], "properties": { - "ip": { - "description": "IP is the IP address assigned to the host", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of endpoints.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.Endpoints" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "", + "Version": "v1", + "Kind": "EndpointsList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.EnvFromSource": { + "description": "EnvFromSource represents the source of a set of ConfigMaps", + "type": "object", + "properties": { + "configMapRef": { + "description": "The ConfigMap to select from", + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapEnvSource" + }, + "prefix": { + "description": "An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER.", + "type": "string" + }, + "secretRef": { + "description": "The Secret to select from", + "$ref": "#/definitions/io.k8s.api.core.v1.SecretEnvSource" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "HostIP", + "Kind": "EnvFromSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.HostPathVolumeSource": { - "description": "Represents a host path mapped into a pod. Host path volumes do not support ownership management or SELinux relabeling.", + "io.k8s.api.core.v1.EnvVar": { + "description": "EnvVar represents an environment variable present in a Container.", "type": "object", "required": [ - "path" + "name" ], "properties": { - "path": { - "description": "path of the directory on the host. If the path is a symlink, it will follow the link to the real path. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath", + "name": { + "description": "Name of the environment variable. Must be a C_IDENTIFIER.", "type": "string", "default": "" }, - "type": { - "description": "type for HostPath Volume Defaults to \"\" More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath\n\nPossible enum values:\n - `\"\"` For backwards compatible, leave it empty if unset\n - `\"BlockDevice\"` A block device must exist at the given path\n - `\"CharDevice\"` A character device must exist at the given path\n - `\"Directory\"` A directory must exist at the given path\n - `\"DirectoryOrCreate\"` If nothing exists at the given path, an empty directory will be created there as needed with file mode 0755, having the same group and ownership with Kubelet.\n - `\"File\"` A file must exist at the given path\n - `\"FileOrCreate\"` If nothing exists at the given path, an empty file will be created there as needed with file mode 0644, having the same group and ownership with Kubelet.\n - `\"Socket\"` A UNIX socket must exist at the given path", - "type": "string", - "enum": [ - "", - "BlockDevice", - "CharDevice", - "Directory", - "DirectoryOrCreate", - "File", - "FileOrCreate", - "Socket" - ] + "value": { + "description": "Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to \"\".", + "type": "string" + }, + "valueFrom": { + "description": "Source for the environment variable's value. Cannot be used if value is not empty.", + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVarSource" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "HostPathVolumeSource", + "Kind": "EnvVar", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ISCSIPersistentVolumeSource": { - "description": "ISCSIPersistentVolumeSource represents an ISCSI disk. ISCSI volumes can only be mounted as read/write once. ISCSI volumes support ownership management and SELinux relabeling.", + "io.k8s.api.core.v1.EnvVarSource": { + "description": "EnvVarSource represents a source for the value of an EnvVar.", "type": "object", - "required": [ - "targetPortal", - "iqn", - "lun" - ], "properties": { - "chapAuthDiscovery": { - "description": "chapAuthDiscovery defines whether support iSCSI Discovery CHAP authentication", - "type": "boolean" - }, - "chapAuthSession": { - "description": "chapAuthSession defines whether support iSCSI Session CHAP authentication", - "type": "boolean" + "configMapKeyRef": { + "description": "Selects a key of a ConfigMap.", + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapKeySelector" }, - "fsType": { - "description": "fsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi", - "type": "string" + "fieldRef": { + "description": "Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['\u003cKEY\u003e']`, `metadata.annotations['\u003cKEY\u003e']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.", + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectFieldSelector" }, - "initiatorName": { - "description": "initiatorName is the custom iSCSI Initiator Name. If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface \u003ctarget portal\u003e:\u003cvolume name\u003e will be created for the connection.", - "type": "string" + "resourceFieldRef": { + "description": "Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.", + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceFieldSelector" }, - "iqn": { - "description": "iqn is Target iSCSI Qualified Name.", - "type": "string", - "default": "" - }, - "iscsiInterface": { - "description": "iscsiInterface is the interface Name that uses an iSCSI transport. Defaults to 'default' (tcp).", - "type": "string", - "default": "default" - }, - "lun": { - "description": "lun is iSCSI Target Lun number.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "portals": { - "description": "portals is the iSCSI Target Portal List. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "readOnly": { - "description": "readOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.", - "type": "boolean" - }, - "secretRef": { - "description": "secretRef is the CHAP Secret for iSCSI target and initiator authentication", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" - }, - "targetPortal": { - "description": "targetPortal is iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).", - "type": "string", - "default": "" + "secretKeyRef": { + "description": "Selects a key of a secret in the pod's namespace", + "$ref": "#/definitions/io.k8s.api.core.v1.SecretKeySelector" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "ISCSIPersistentVolumeSource", + "Kind": "EnvVarSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ISCSIVolumeSource": { - "description": "Represents an ISCSI disk. ISCSI volumes can only be mounted as read/write once. ISCSI volumes support ownership management and SELinux relabeling.", + "io.k8s.api.core.v1.EphemeralContainer": { + "description": "An EphemeralContainer is a temporary container that you may add to an existing Pod for user-initiated activities such as debugging. Ephemeral containers have no resource or scheduling guarantees, and they will not be restarted when they exit or when a Pod is removed or restarted. The kubelet may evict a Pod if an ephemeral container causes the Pod to exceed its resource allocation.\n\nTo add an ephemeral container, use the ephemeralcontainers subresource of an existing Pod. Ephemeral containers may not be removed or restarted.", "type": "object", "required": [ - "targetPortal", - "iqn", - "lun" + "name" ], "properties": { - "chapAuthDiscovery": { - "description": "chapAuthDiscovery defines whether support iSCSI Discovery CHAP authentication", - "type": "boolean" + "args": { + "description": "Arguments to the entrypoint. The image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "chapAuthSession": { - "description": "chapAuthSession defines whether support iSCSI Session CHAP authentication", - "type": "boolean" + "command": { + "description": "Entrypoint array. Not executed within a shell. The image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "fsType": { - "description": "fsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi", - "type": "string" + "env": { + "description": "List of environment variables to set in the container. Cannot be updated.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" }, - "initiatorName": { - "description": "initiatorName is the custom iSCSI Initiator Name. If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface \u003ctarget portal\u003e:\u003cvolume name\u003e will be created for the connection.", + "envFrom": { + "description": "List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EnvFromSource" + }, + "x-kubernetes-list-type": "atomic" + }, + "image": { + "description": "Container image name. More info: https://kubernetes.io/docs/concepts/containers/images", "type": "string" }, - "iqn": { - "description": "iqn is the target iSCSI Qualified Name.", + "imagePullPolicy": { + "description": "Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images\n\nPossible enum values:\n - `\"Always\"` means that kubelet always attempts to pull the latest image. Container will fail If the pull fails.\n - `\"IfNotPresent\"` means that kubelet pulls if the image isn't present on disk. Container will fail if the image isn't present and the pull fails.\n - `\"Never\"` means that kubelet never pulls an image, but only uses a local image. Container will fail if the image isn't present", "type": "string", - "default": "" + "enum": [ + "Always", + "IfNotPresent", + "Never" + ] }, - "iscsiInterface": { - "description": "iscsiInterface is the interface Name that uses an iSCSI transport. Defaults to 'default' (tcp).", + "lifecycle": { + "description": "Lifecycle is not allowed for ephemeral containers.", + "$ref": "#/definitions/io.k8s.api.core.v1.Lifecycle" + }, + "livenessProbe": { + "description": "Probes are not allowed for ephemeral containers.", + "$ref": "#/definitions/io.k8s.api.core.v1.Probe" + }, + "name": { + "description": "Name of the ephemeral container specified as a DNS_LABEL. This name must be unique among all containers, init containers and ephemeral containers.", "type": "string", - "default": "default" + "default": "" }, - "lun": { - "description": "lun represents iSCSI Target Lun number.", - "type": "integer", - "format": "int32", - "default": 0 + "ports": { + "description": "Ports are not allowed for ephemeral containers.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerPort" + }, + "x-kubernetes-list-map-keys": [ + "containerPort", + "protocol" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "containerPort", + "x-kubernetes-patch-strategy": "merge" }, - "portals": { - "description": "portals is the iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).", + "readinessProbe": { + "description": "Probes are not allowed for ephemeral containers.", + "$ref": "#/definitions/io.k8s.api.core.v1.Probe" + }, + "resizePolicy": { + "description": "Resources resize policy for the container.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerResizePolicy" }, "x-kubernetes-list-type": "atomic" }, - "readOnly": { - "description": "readOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.", + "resources": { + "description": "Resources are not allowed for ephemeral containers. Ephemeral containers use spare resources already allocated to the pod.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" + }, + "restartPolicy": { + "description": "Restart policy for the container to manage the restart behavior of each container within a pod. This may only be set for init containers. You cannot set this field on ephemeral containers.", + "type": "string" + }, + "securityContext": { + "description": "Optional: SecurityContext defines the security options the ephemeral container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.", + "$ref": "#/definitions/io.k8s.api.core.v1.SecurityContext" + }, + "startupProbe": { + "description": "Probes are not allowed for ephemeral containers.", + "$ref": "#/definitions/io.k8s.api.core.v1.Probe" + }, + "stdin": { + "description": "Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.", "type": "boolean" }, - "secretRef": { - "description": "secretRef is the CHAP Secret for iSCSI target and initiator authentication", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + "stdinOnce": { + "description": "Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false", + "type": "boolean" }, - "targetPortal": { - "description": "targetPortal is iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).", + "targetContainerName": { + "description": "If set, the name of the container from PodSpec that this ephemeral container targets. The ephemeral container will be run in the namespaces (IPC, PID, etc) of this container. If not set then the ephemeral container uses the namespaces configured in the Pod spec.\n\nThe container runtime must implement support for this feature. If the runtime does not support namespace targeting then the result of setting this field is undefined.", + "type": "string" + }, + "terminationMessagePath": { + "description": "Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.", + "type": "string" + }, + "terminationMessagePolicy": { + "description": "Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.\n\nPossible enum values:\n - `\"FallbackToLogsOnError\"` will read the most recent contents of the container logs for the container status message when the container exits with an error and the terminationMessagePath has no contents.\n - `\"File\"` is the default behavior and will set the container status message to the contents of the container's terminationMessagePath when the container exits.", "type": "string", - "default": "" + "enum": [ + "FallbackToLogsOnError", + "File" + ] + }, + "tty": { + "description": "Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.", + "type": "boolean" + }, + "volumeDevices": { + "description": "volumeDevices is the list of block devices to be used by the container.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.VolumeDevice" + }, + "x-kubernetes-list-map-keys": [ + "devicePath" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "devicePath", + "x-kubernetes-patch-strategy": "merge" + }, + "volumeMounts": { + "description": "Pod volumes to mount into the container's filesystem. Subpath mounts are not allowed for ephemeral containers. Cannot be updated.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.VolumeMount" + }, + "x-kubernetes-list-map-keys": [ + "mountPath" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "mountPath", + "x-kubernetes-patch-strategy": "merge" + }, + "workingDir": { + "description": "Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "ISCSIVolumeSource", + "Kind": "EphemeralContainer", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ImageVolumeSource": { - "description": "ImageVolumeSource represents a image volume resource.", + "io.k8s.api.core.v1.EphemeralContainerCommon": { + "description": "EphemeralContainerCommon is a copy of all fields in Container to be inlined in EphemeralContainer. This separate type allows easy conversion from EphemeralContainer to Container and allows separate documentation for the fields of EphemeralContainer. When a new field is added to Container it must be added here as well.", "type": "object", + "required": [ + "name" + ], "properties": { - "pullPolicy": { - "description": "Policy for pulling OCI objects. Possible values are: Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails. Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn't present. IfNotPresent: the kubelet pulls if the reference isn't already present on disk. Container creation will fail if the reference isn't present and the pull fails. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.\n\nPossible enum values:\n - `\"Always\"` means that kubelet always attempts to pull the latest image. Container will fail If the pull fails.\n - `\"IfNotPresent\"` means that kubelet pulls if the image isn't present on disk. Container will fail if the image isn't present and the pull fails.\n - `\"Never\"` means that kubelet never pulls an image, but only uses a local image. Container will fail if the image isn't present", + "args": { + "description": "Arguments to the entrypoint. The image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "command": { + "description": "Entrypoint array. Not executed within a shell. The image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. \"$$(VAR_NAME)\" will produce the string literal \"$(VAR_NAME)\". Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "env": { + "description": "List of environment variables to set in the container. Cannot be updated.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + }, + "envFrom": { + "description": "List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EnvFromSource" + }, + "x-kubernetes-list-type": "atomic" + }, + "image": { + "description": "Container image name. More info: https://kubernetes.io/docs/concepts/containers/images", + "type": "string" + }, + "imagePullPolicy": { + "description": "Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images\n\nPossible enum values:\n - `\"Always\"` means that kubelet always attempts to pull the latest image. Container will fail If the pull fails.\n - `\"IfNotPresent\"` means that kubelet pulls if the image isn't present on disk. Container will fail if the image isn't present and the pull fails.\n - `\"Never\"` means that kubelet never pulls an image, but only uses a local image. Container will fail if the image isn't present", "type": "string", "enum": [ "Always", @@ -31489,190 +32018,239 @@ "Never" ] }, - "reference": { - "description": "Required: Image or artifact reference to be used. Behaves in the same way as pod.spec.containers[*].image. Pull secrets will be assembled in the same way as for the container image by looking up node credentials, SA image pull secrets, and pod spec image pull secrets. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.", - "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "ImageVolumeSource", - "Scope": "Namespaced" - } - }, - "io.k8s.api.core.v1.KeyToPath": { - "description": "Maps a string key to a path within a volume.", - "type": "object", - "required": [ - "key", - "path" - ], - "properties": { - "key": { - "description": "key is the key to project.", + "lifecycle": { + "description": "Lifecycle is not allowed for ephemeral containers.", + "$ref": "#/definitions/io.k8s.api.core.v1.Lifecycle" + }, + "livenessProbe": { + "description": "Probes are not allowed for ephemeral containers.", + "$ref": "#/definitions/io.k8s.api.core.v1.Probe" + }, + "name": { + "description": "Name of the ephemeral container specified as a DNS_LABEL. This name must be unique among all containers, init containers and ephemeral containers.", "type": "string", "default": "" }, - "mode": { - "description": "mode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.", - "type": "integer", - "format": "int32" + "ports": { + "description": "Ports are not allowed for ephemeral containers.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerPort" + }, + "x-kubernetes-list-map-keys": [ + "containerPort", + "protocol" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "containerPort", + "x-kubernetes-patch-strategy": "merge" }, - "path": { - "description": "path is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.", + "readinessProbe": { + "description": "Probes are not allowed for ephemeral containers.", + "$ref": "#/definitions/io.k8s.api.core.v1.Probe" + }, + "resizePolicy": { + "description": "Resources resize policy for the container.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerResizePolicy" + }, + "x-kubernetes-list-type": "atomic" + }, + "resources": { + "description": "Resources are not allowed for ephemeral containers. Ephemeral containers use spare resources already allocated to the pod.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" + }, + "restartPolicy": { + "description": "Restart policy for the container to manage the restart behavior of each container within a pod. This may only be set for init containers. You cannot set this field on ephemeral containers.", + "type": "string" + }, + "securityContext": { + "description": "Optional: SecurityContext defines the security options the ephemeral container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.", + "$ref": "#/definitions/io.k8s.api.core.v1.SecurityContext" + }, + "startupProbe": { + "description": "Probes are not allowed for ephemeral containers.", + "$ref": "#/definitions/io.k8s.api.core.v1.Probe" + }, + "stdin": { + "description": "Whether this container should allocate a buffer for stdin in the container runtime. If this is not set, reads from stdin in the container will always result in EOF. Default is false.", + "type": "boolean" + }, + "stdinOnce": { + "description": "Whether the container runtime should close the stdin channel after it has been opened by a single attach. When stdin is true the stdin stream will remain open across multiple attach sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the first client attaches to stdin, and then remains open and accepts data until the client disconnects, at which time stdin is closed and remains closed until the container is restarted. If this flag is false, a container processes that reads from stdin will never receive an EOF. Default is false", + "type": "boolean" + }, + "terminationMessagePath": { + "description": "Optional: Path at which the file to which the container's termination message will be written is mounted into the container's filesystem. Message written is intended to be brief final status, such as an assertion failure message. Will be truncated by the node if greater than 4096 bytes. The total message length across all containers will be limited to 12kb. Defaults to /dev/termination-log. Cannot be updated.", + "type": "string" + }, + "terminationMessagePolicy": { + "description": "Indicate how the termination message should be populated. File will use the contents of terminationMessagePath to populate the container status message on both success and failure. FallbackToLogsOnError will use the last chunk of container log output if the termination message file is empty and the container exited with an error. The log output is limited to 2048 bytes or 80 lines, whichever is smaller. Defaults to File. Cannot be updated.\n\nPossible enum values:\n - `\"FallbackToLogsOnError\"` will read the most recent contents of the container logs for the container status message when the container exits with an error and the terminationMessagePath has no contents.\n - `\"File\"` is the default behavior and will set the container status message to the contents of the container's terminationMessagePath when the container exits.", "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "KeyToPath", - "Scope": "Namespaced" - } - }, - "io.k8s.api.core.v1.Lifecycle": { - "description": "Lifecycle describes actions that the management system should take in response to container lifecycle events. For the PostStart and PreStop lifecycle handlers, management of the container blocks until the action is complete, unless the container process fails, in which case the handler is aborted.", - "type": "object", - "properties": { - "postStart": { - "description": "PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks", - "$ref": "#/definitions/io.k8s.api.core.v1.LifecycleHandler" + "enum": [ + "FallbackToLogsOnError", + "File" + ] }, - "preStop": { - "description": "PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The Pod's termination grace period countdown begins before the PreStop hook is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period (unless delayed by finalizers). Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks", - "$ref": "#/definitions/io.k8s.api.core.v1.LifecycleHandler" + "tty": { + "description": "Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.", + "type": "boolean" + }, + "volumeDevices": { + "description": "volumeDevices is the list of block devices to be used by the container.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.VolumeDevice" + }, + "x-kubernetes-list-map-keys": [ + "devicePath" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "devicePath", + "x-kubernetes-patch-strategy": "merge" + }, + "volumeMounts": { + "description": "Pod volumes to mount into the container's filesystem. Subpath mounts are not allowed for ephemeral containers. Cannot be updated.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.VolumeMount" + }, + "x-kubernetes-list-map-keys": [ + "mountPath" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "mountPath", + "x-kubernetes-patch-strategy": "merge" + }, + "workingDir": { + "description": "Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image. Cannot be updated.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "Lifecycle", + "Kind": "EphemeralContainerCommon", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.LifecycleHandler": { - "description": "LifecycleHandler defines a specific action that should be taken in a lifecycle hook. One and only one of the fields, except TCPSocket must be specified.", + "io.k8s.api.core.v1.EphemeralVolumeSource": { + "description": "Represents an ephemeral volume that is handled by a normal storage driver.", "type": "object", "properties": { - "exec": { - "description": "Exec specifies the action to take.", - "$ref": "#/definitions/io.k8s.api.core.v1.ExecAction" - }, - "httpGet": { - "description": "HTTPGet specifies the http request to perform.", - "$ref": "#/definitions/io.k8s.api.core.v1.HTTPGetAction" - }, - "sleep": { - "description": "Sleep represents the duration that the container should sleep before being terminated.", - "$ref": "#/definitions/io.k8s.api.core.v1.SleepAction" - }, - "tcpSocket": { - "description": "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for the backward compatibility. There are no validation of this field and lifecycle hooks will fail in runtime when tcp handler is specified.", - "$ref": "#/definitions/io.k8s.api.core.v1.TCPSocketAction" + "volumeClaimTemplate": { + "description": "Will be used to create a stand-alone PVC to provision the volume. The pod in which this EphemeralVolumeSource is embedded will be the owner of the PVC, i.e. the PVC will be deleted together with the pod. The name of the PVC will be `\u003cpod name\u003e-\u003cvolume name\u003e` where `\u003cvolume name\u003e` is the name from the `PodSpec.Volumes` array entry. Pod validation will reject the pod if the concatenated name is not valid for a PVC (for example, too long).\n\nAn existing PVC with that name that is not owned by the pod will *not* be used for the pod to avoid using an unrelated volume by mistake. Starting the pod is then blocked until the unrelated PVC is removed. If such a pre-created PVC is meant to be used by the pod, the PVC has to updated with an owner reference to the pod once the pod exists. Normally this should not be necessary, but it may be useful when manually reconstructing a broken cluster.\n\nThis field is read-only and no changes will be made by Kubernetes to the PVC after it has been created.\n\nRequired, must not be nil.", + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimTemplate" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "LifecycleHandler", + "Kind": "EphemeralVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.LimitRange": { - "description": "LimitRange sets resource usage limits for each kind of resource in a Namespace.", + "io.k8s.api.core.v1.Event": { + "description": "Event is a report of an event somewhere in the cluster. Events have a limited retention time and triggers and messages may evolve with time. Event consumers should not rely on the timing of an event with a given Reason reflecting a consistent underlying trigger, or the continued existence of events with that Reason. Events should be treated as informative, best-effort, supplemental data.", "type": "object", + "required": [ + "metadata", + "involvedObject" + ], "properties": { + "action": { + "description": "What action was taken/failed regarding to the Regarding object.", + "type": "string" + }, "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "count": { + "description": "The number of times this event has occurred.", + "type": "integer", + "format": "int32" + }, + "eventTime": { + "description": "Time when this Event was first observed.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" + }, + "firstTimestamp": { + "description": "The time at which the event was first recorded. (Time of server receipt is in TypeMeta.)", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "involvedObject": { + "description": "The object that this event is about.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "lastTimestamp": { + "description": "The time at which the most recent occurrence of this event was recorded.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "spec": { - "description": "Spec defines the limits enforced. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.LimitRangeSpec" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "", - "Version": "v1", - "Kind": "LimitRange", - "Scope": "Namespaced" - } - }, - "io.k8s.api.core.v1.LimitRangeItem": { - "description": "LimitRangeItem defines a min/max usage limit for any resource that matches on kind.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "default": { - "description": "Default resource requirement limit value by resource name if resource limit is omitted.", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } + "message": { + "description": "A human-readable description of the status of this operation.", + "type": "string" }, - "defaultRequest": { - "description": "DefaultRequest is the default resource requirement request value by resource name if resource request is omitted.", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "max": { - "description": "Max usage constraints on this kind by resource name.", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } + "reason": { + "description": "This should be a short, machine understandable string that gives the reason for the transition into the object's current status.", + "type": "string" }, - "maxLimitRequestRatio": { - "description": "MaxLimitRequestRatio if specified, the named resource must have a request and limit that are both non-zero where limit divided by request is less than or equal to the enumerated value; this represents the max burst for the named resource.", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } + "related": { + "description": "Optional secondary object for more complex actions.", + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" }, - "min": { - "description": "Min usage constraints on this kind by resource name.", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } + "reportingComponent": { + "description": "Name of the controller that emitted this Event, e.g. `kubernetes.io/kubelet`.", + "type": "string", + "default": "" }, - "type": { - "description": "Type of resource that this limit applies to.", + "reportingInstance": { + "description": "ID of the controller instance, e.g. `kubelet-xyzf`.", "type": "string", "default": "" + }, + "series": { + "description": "Data about the Event series this event represents or nil if it's a singleton Event.", + "$ref": "#/definitions/io.k8s.api.core.v1.EventSeries" + }, + "source": { + "description": "The component reporting this event. Should be a short machine understandable string.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EventSource" + }, + "type": { + "description": "Type of this event (Normal, Warning), new types could be added in the future", + "type": "string" } }, "x-fabric8-info": { - "Type": "nested", + "Type": "object", "Group": "", "Version": "v1", - "Kind": "LimitRangeItem", + "Kind": "Event", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.LimitRangeList": { - "description": "LimitRangeList is a list of LimitRange items.", + "io.k8s.api.core.v1.EventList": { + "description": "EventList is a list of events.", "type": "object", "required": [ "items" @@ -31683,11 +32261,11 @@ "type": "string" }, "items": { - "description": "Items is a list of LimitRange objects. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/", + "description": "List of events", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.LimitRange" + "$ref": "#/definitions/io.k8s.api.core.v1.Event" } }, "kind": { @@ -31704,23 +32282,63 @@ "Type": "list", "Group": "", "Version": "v1", - "Kind": "LimitRangeList", + "Kind": "EventList", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.LimitRangeSpec": { - "description": "LimitRangeSpec defines a min/max usage limit for resources that match on kind.", + "io.k8s.api.core.v1.EventSeries": { + "description": "EventSeries contain information on series of events, i.e. thing that was/is happening continuously for some time.", "type": "object", - "required": [ - "limits" - ], "properties": { - "limits": { - "description": "Limits is the list of LimitRangeItem objects that are enforced.", + "count": { + "description": "Number of occurrences in this series up to the last heartbeat time", + "type": "integer", + "format": "int32" + }, + "lastObservedTime": { + "description": "Time of the last occurrence observed", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "EventSeries", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.EventSource": { + "description": "EventSource contains information for an event.", + "type": "object", + "properties": { + "component": { + "description": "Component from which the event is generated.", + "type": "string" + }, + "host": { + "description": "Node name on which the event is generated.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "EventSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ExecAction": { + "description": "ExecAction describes a \"run in container\" action.", + "type": "object", + "properties": { + "command": { + "description": "Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.LimitRangeItem" + "type": "string", + "default": "" }, "x-kubernetes-list-type": "atomic" } @@ -31729,173 +32347,205 @@ "Type": "nested", "Group": "", "Version": "v1", - "Kind": "LimitRangeSpec", + "Kind": "ExecAction", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.LinuxContainerUser": { - "description": "LinuxContainerUser represents user identity information in Linux containers", + "io.k8s.api.core.v1.FCVolumeSource": { + "description": "Represents a Fibre Channel volume. Fibre Channel volumes can only be mounted as read/write once. Fibre Channel volumes support ownership management and SELinux relabeling.", "type": "object", - "required": [ - "uid", - "gid" - ], "properties": { - "gid": { - "description": "GID is the primary gid initially attached to the first process in the container", + "fsType": { + "description": "fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified.", + "type": "string" + }, + "lun": { + "description": "lun is Optional: FC target lun number", "type": "integer", - "format": "int64", - "default": 0 + "format": "int32" }, - "supplementalGroups": { - "description": "SupplementalGroups are the supplemental groups initially attached to the first process in the container", + "readOnly": { + "description": "readOnly is Optional: Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" + }, + "targetWWNs": { + "description": "targetWWNs is Optional: FC target worldwide names (WWNs)", "type": "array", "items": { - "type": "integer", - "format": "int64", - "default": 0 + "type": "string", + "default": "" }, "x-kubernetes-list-type": "atomic" }, - "uid": { - "description": "UID is the primary uid initially attached to the first process in the container", - "type": "integer", - "format": "int64", - "default": 0 + "wwids": { + "description": "wwids Optional: FC volume world wide identifiers (wwids) Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "LinuxContainerUser", + "Kind": "FCVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.List": { - "description": "List holds a list of objects, which may not be known by the server.", + "io.k8s.api.core.v1.FlexPersistentVolumeSource": { + "description": "FlexPersistentVolumeSource represents a generic persistent volume resource that is provisioned/attached using an exec based plugin.", "type": "object", "required": [ - "items" + "driver" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "driver": { + "description": "driver is the name of the driver to use for this volume.", + "type": "string", + "default": "" + }, + "fsType": { + "description": "fsType is the Filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". The default filesystem depends on FlexVolume script.", "type": "string" }, - "items": { - "description": "List of objects", - "type": "array", - "items": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "options": { + "description": "options is Optional: this field holds extra command options if any.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" } }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "readOnly": { + "description": "readOnly is Optional: defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "secretRef": { + "description": "secretRef is Optional: SecretRef is reference to the secret object containing sensitive information to pass to the plugin scripts. This may be empty if no secret object is specified. If the secret object contains more than one secret, all secrets are passed to the plugin scripts.", + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" } }, "x-fabric8-info": { - "Type": "list", + "Type": "nested", "Group": "", "Version": "v1", - "Kind": "List", + "Kind": "FlexPersistentVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.LoadBalancerIngress": { - "description": "LoadBalancerIngress represents the status of a load-balancer ingress point: traffic intended for the service should be sent to an ingress point.", + "io.k8s.api.core.v1.FlexVolumeSource": { + "description": "FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.", "type": "object", + "required": [ + "driver" + ], "properties": { - "hostname": { - "description": "Hostname is set for load-balancer ingress points that are DNS based (typically AWS load-balancers)", - "type": "string" + "driver": { + "description": "driver is the name of the driver to use for this volume.", + "type": "string", + "default": "" }, - "ip": { - "description": "IP is set for load-balancer ingress points that are IP based (typically GCE or OpenStack load-balancers)", + "fsType": { + "description": "fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". The default filesystem depends on FlexVolume script.", "type": "string" }, - "ipMode": { - "description": "IPMode specifies how the load-balancer IP behaves, and may only be specified when the ip field is specified. Setting this to \"VIP\" indicates that traffic is delivered to the node with the destination set to the load-balancer's IP and port. Setting this to \"Proxy\" indicates that traffic is delivered to the node or pod with the destination set to the node's IP and node port or the pod's IP and port. Service implementations may use this information to adjust traffic routing.", - "type": "string" + "options": { + "description": "options is Optional: this field holds extra command options if any.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } }, - "ports": { - "description": "Ports is a list of records of service ports If used, every port defined in the service should have an entry in it", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PortStatus" - }, - "x-kubernetes-list-type": "atomic" + "readOnly": { + "description": "readOnly is Optional: defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" + }, + "secretRef": { + "description": "secretRef is Optional: secretRef is reference to the secret object containing sensitive information to pass to the plugin scripts. This may be empty if no secret object is specified. If the secret object contains more than one secret, all secrets are passed to the plugin scripts.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "LoadBalancerIngress", + "Kind": "FlexVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.LoadBalancerStatus": { - "description": "LoadBalancerStatus represents the status of a load-balancer.", + "io.k8s.api.core.v1.FlockerVolumeSource": { + "description": "Represents a Flocker volume mounted by the Flocker agent. One and only one of datasetName and datasetUUID should be set. Flocker volumes do not support ownership management or SELinux relabeling.", "type": "object", "properties": { - "ingress": { - "description": "Ingress is a list containing ingress points for the load-balancer. Traffic intended for the service should be sent to these ingress points.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.LoadBalancerIngress" - }, - "x-kubernetes-list-type": "atomic" + "datasetName": { + "description": "datasetName is Name of the dataset stored as metadata -\u003e name on the dataset for Flocker should be considered as deprecated", + "type": "string" + }, + "datasetUUID": { + "description": "datasetUUID is the UUID of the dataset. This is unique identifier of a Flocker dataset", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "LoadBalancerStatus", + "Kind": "FlockerVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.LocalObjectReference": { - "description": "LocalObjectReference contains enough information to let you locate the referenced object inside the same namespace.", + "io.k8s.api.core.v1.GCEPersistentDiskVolumeSource": { + "description": "Represents a Persistent Disk resource in Google Compute Engine.\n\nA GCE PD must exist before mounting to a container. The disk must also be in the same GCE project and zone as the kubelet. A GCE PD can only be mounted as read/write once or read-only many times. GCE PDs support ownership management and SELinux relabeling.", "type": "object", + "required": [ + "pdName" + ], "properties": { - "name": { - "description": "Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "fsType": { + "description": "fsType is filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", + "type": "string" + }, + "partition": { + "description": "partition is the partition in the volume that you want to mount. If omitted, the default is to mount by volume name. Examples: For volume /dev/sda1, you specify the partition as \"1\". Similarly, the volume partition for /dev/sda is \"0\" (or you can leave the property empty). More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", + "type": "integer", + "format": "int32" + }, + "pdName": { + "description": "pdName is unique name of the PD resource in GCE. Used to identify the disk in GCE. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", "type": "string", "default": "" + }, + "readOnly": { + "description": "readOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", + "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "LocalObjectReference", + "Kind": "GCEPersistentDiskVolumeSource", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.core.v1.LocalVolumeSource": { - "description": "Local represents directly-attached storage with node affinity (Beta feature)", + "io.k8s.api.core.v1.GRPCAction": { "type": "object", "required": [ - "path" + "port" ], "properties": { - "fsType": { - "description": "fsType is the filesystem type to mount. It applies only when the Path is a block device. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". The default value is to auto-select a filesystem if unspecified.", - "type": "string" + "port": { + "description": "Port number of the gRPC service. Number must be in the range 1 to 65535.", + "type": "integer", + "format": "int32", + "default": 0 }, - "path": { - "description": "path of the full path to the volume on the node. It can be either a directory or block device (disk, partition, ...).", + "service": { + "description": "Service is the name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).\n\nIf this is not specified, the default behavior is defined by gRPC.", "type": "string", "default": "" } @@ -31904,29 +32554,28 @@ "Type": "nested", "Group": "", "Version": "v1", - "Kind": "LocalVolumeSource", + "Kind": "GRPCAction", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ModifyVolumeStatus": { - "description": "ModifyVolumeStatus represents the status object of ControllerModifyVolume operation", + "io.k8s.api.core.v1.GitRepoVolumeSource": { + "description": "Represents a volume that is populated with the contents of a git repository. Git repo volumes do not support ownership management. Git repo volumes support SELinux relabeling.\n\nDEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod's container.", "type": "object", "required": [ - "status" + "repository" ], "properties": { - "status": { - "description": "status is the status of the ControllerModifyVolume operation. It can be in any of following states:\n - Pending\n Pending indicates that the PersistentVolumeClaim cannot be modified due to unmet requirements, such as\n the specified VolumeAttributesClass not existing.\n - InProgress\n InProgress indicates that the volume is being modified.\n - Infeasible\n Infeasible indicates that the request has been rejected as invalid by the CSI driver. To\n\t resolve the error, a valid VolumeAttributesClass needs to be specified.\nNote: New statuses can be added in the future. Consumers should check for unknown statuses and fail appropriately.\n\nPossible enum values:\n - `\"InProgress\"` InProgress indicates that the volume is being modified\n - `\"Infeasible\"` Infeasible indicates that the request has been rejected as invalid by the CSI driver. To resolve the error, a valid VolumeAttributesClass needs to be specified\n - `\"Pending\"` Pending indicates that the PersistentVolumeClaim cannot be modified due to unmet requirements, such as the specified VolumeAttributesClass not existing", + "directory": { + "description": "directory is the target directory name. Must not contain or start with '..'. If '.' is supplied, the volume directory will be the git repository. Otherwise, if specified, the volume will contain the git repository in the subdirectory with the given name.", + "type": "string" + }, + "repository": { + "description": "repository is the URL", "type": "string", - "default": "", - "enum": [ - "InProgress", - "Infeasible", - "Pending" - ] + "default": "" }, - "targetVolumeAttributesClassName": { - "description": "targetVolumeAttributesClassName is the name of the VolumeAttributesClass the PVC currently being reconciled", + "revision": { + "description": "revision is the commit hash for the specified revision.", "type": "string" } }, @@ -31934,196 +32583,223 @@ "Type": "nested", "Group": "", "Version": "v1", - "Kind": "ModifyVolumeStatus", + "Kind": "GitRepoVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.NFSVolumeSource": { - "description": "Represents an NFS mount that lasts the lifetime of a pod. NFS volumes do not support ownership management or SELinux relabeling.", + "io.k8s.api.core.v1.GlusterfsPersistentVolumeSource": { + "description": "Represents a Glusterfs mount that lasts the lifetime of a pod. Glusterfs volumes do not support ownership management or SELinux relabeling.", "type": "object", "required": [ - "server", + "endpoints", "path" ], "properties": { - "path": { - "description": "path that is exported by the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs", + "endpoints": { + "description": "endpoints is the endpoint name that details Glusterfs topology. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", "type": "string", "default": "" }, - "readOnly": { - "description": "readOnly here will force the NFS export to be mounted with read-only permissions. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs", - "type": "boolean" + "endpointsNamespace": { + "description": "endpointsNamespace is the namespace that contains Glusterfs endpoint. If this field is empty, the EndpointNamespace defaults to the same namespace as the bound PVC. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", + "type": "string" }, - "server": { - "description": "server is the hostname or IP address of the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs", + "path": { + "description": "path is the Glusterfs volume path. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", "type": "string", "default": "" + }, + "readOnly": { + "description": "readOnly here will force the Glusterfs volume to be mounted with read-only permissions. Defaults to false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", + "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "NFSVolumeSource", + "Kind": "GlusterfsPersistentVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.Namespace": { - "description": "Namespace provides a scope for Names. Use of multiple namespaces is optional.", + "io.k8s.api.core.v1.GlusterfsVolumeSource": { + "description": "Represents a Glusterfs mount that lasts the lifetime of a pod. Glusterfs volumes do not support ownership management or SELinux relabeling.", "type": "object", + "required": [ + "endpoints", + "path" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "endpoints": { + "description": "endpoints is the endpoint name that details Glusterfs topology. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", + "type": "string", + "default": "" }, - "spec": { - "description": "Spec defines the behavior of the Namespace. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.NamespaceSpec" + "path": { + "description": "path is the Glusterfs volume path. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", + "type": "string", + "default": "" }, - "status": { - "description": "Status describes the current status of a Namespace. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.NamespaceStatus" + "readOnly": { + "description": "readOnly here will force the Glusterfs volume to be mounted with read-only permissions. Defaults to false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod", + "type": "boolean" } }, "x-fabric8-info": { - "Type": "object", + "Type": "nested", "Group": "", "Version": "v1", - "Kind": "Namespace", - "Scope": "Clustered" + "Kind": "GlusterfsVolumeSource", + "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.NamespaceCondition": { - "description": "NamespaceCondition contains details about state of namespace.", + "io.k8s.api.core.v1.HTTPGetAction": { + "description": "HTTPGetAction describes an action based on HTTP Get requests.", "type": "object", "required": [ - "type", - "status" + "port" ], "properties": { - "lastTransitionTime": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { + "host": { + "description": "Host name to connect to, defaults to the pod IP. You probably want to set \"Host\" in httpHeaders instead.", "type": "string" }, - "reason": { + "httpHeaders": { + "description": "Custom headers to set in the request. HTTP allows repeated headers.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.HTTPHeader" + }, + "x-kubernetes-list-type": "atomic" + }, + "path": { + "description": "Path to access on the HTTP server.", "type": "string" }, - "status": { - "description": "Status of the condition, one of True, False, Unknown.", - "type": "string", - "default": "" + "port": { + "description": "Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" }, - "type": { - "description": "Type of namespace controller condition.", + "scheme": { + "description": "Scheme to use for connecting to the host. Defaults to HTTP.\n\nPossible enum values:\n - `\"HTTP\"` means that the scheme used will be http://\n - `\"HTTPS\"` means that the scheme used will be https://", "type": "string", - "default": "" + "enum": [ + "HTTP", + "HTTPS" + ] } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "NamespaceCondition", + "Kind": "HTTPGetAction", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.NamespaceList": { - "description": "NamespaceList is a list of Namespaces.", + "io.k8s.api.core.v1.HTTPHeader": { + "description": "HTTPHeader describes a custom header to be used in HTTP probes", "type": "object", "required": [ - "items" + "name", + "value" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "Items is the list of Namespace objects in the list. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Namespace" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "name": { + "description": "The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.", + "type": "string", + "default": "" }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "value": { + "description": "The header field value", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "list", + "Type": "nested", "Group": "", "Version": "v1", - "Kind": "NamespaceList", + "Kind": "HTTPHeader", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.NamespaceSpec": { - "description": "NamespaceSpec describes the attributes on a Namespace.", + "io.k8s.api.core.v1.HostAlias": { + "description": "HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod's hosts file.", "type": "object", + "required": [ + "ip" + ], "properties": { - "finalizers": { - "description": "Finalizers is an opaque list of values that must be empty to permanently remove object from storage. More info: https://kubernetes.io/docs/tasks/administer-cluster/namespaces/", + "hostnames": { + "description": "Hostnames for the above IP address.", "type": "array", "items": { "type": "string", "default": "" }, "x-kubernetes-list-type": "atomic" + }, + "ip": { + "description": "IP address of the host file entry.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "NamespaceSpec", + "Kind": "HostAlias", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.NamespaceStatus": { - "description": "NamespaceStatus is information about the current status of a Namespace.", + "io.k8s.api.core.v1.HostIP": { + "description": "HostIP represents a single IP address allocated to the host.", "type": "object", + "required": [ + "ip" + ], "properties": { - "conditions": { - "description": "Represents the latest available observations of a namespace's current state.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.NamespaceCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "ip": { + "description": "IP is the IP address assigned to the host", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "HostIP", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.HostPathVolumeSource": { + "description": "Represents a host path mapped into a pod. Host path volumes do not support ownership management or SELinux relabeling.", + "type": "object", + "required": [ + "path" + ], + "properties": { + "path": { + "description": "path of the directory on the host. If the path is a symlink, it will follow the link to the real path. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath", + "type": "string", + "default": "" }, - "phase": { - "description": "Phase is the current lifecycle phase of the namespace. More info: https://kubernetes.io/docs/tasks/administer-cluster/namespaces/\n\nPossible enum values:\n - `\"Active\"` means the namespace is available for use in the system\n - `\"Terminating\"` means the namespace is undergoing graceful termination", + "type": { + "description": "type for HostPath Volume Defaults to \"\" More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath\n\nPossible enum values:\n - `\"\"` For backwards compatible, leave it empty if unset\n - `\"BlockDevice\"` A block device must exist at the given path\n - `\"CharDevice\"` A character device must exist at the given path\n - `\"Directory\"` A directory must exist at the given path\n - `\"DirectoryOrCreate\"` If nothing exists at the given path, an empty directory will be created there as needed with file mode 0755, having the same group and ownership with Kubelet.\n - `\"File\"` A file must exist at the given path\n - `\"FileOrCreate\"` If nothing exists at the given path, an empty file will be created there as needed with file mode 0644, having the same group and ownership with Kubelet.\n - `\"Socket\"` A UNIX socket must exist at the given path", "type": "string", "enum": [ - "Active", - "Terminating" + "", + "BlockDevice", + "CharDevice", + "Directory", + "DirectoryOrCreate", + "File", + "FileOrCreate", + "Socket" ] } }, @@ -32131,61 +32807,142 @@ "Type": "nested", "Group": "", "Version": "v1", - "Kind": "NamespaceStatus", + "Kind": "HostPathVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.Node": { - "description": "Node is a worker node in Kubernetes. Each node will have a unique identifier in the cache (i.e. in etcd).", + "io.k8s.api.core.v1.ISCSIPersistentVolumeSource": { + "description": "ISCSIPersistentVolumeSource represents an ISCSI disk. ISCSI volumes can only be mounted as read/write once. ISCSI volumes support ownership management and SELinux relabeling.", "type": "object", + "required": [ + "targetPortal", + "iqn", + "lun" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "chapAuthDiscovery": { + "description": "chapAuthDiscovery defines whether support iSCSI Discovery CHAP authentication", + "type": "boolean" + }, + "chapAuthSession": { + "description": "chapAuthSession defines whether support iSCSI Session CHAP authentication", + "type": "boolean" + }, + "fsType": { + "description": "fsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi", "type": "string" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "initiatorName": { + "description": "initiatorName is the custom iSCSI Initiator Name. If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface \u003ctarget portal\u003e:\u003cvolume name\u003e will be created for the connection.", "type": "string" }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "iqn": { + "description": "iqn is Target iSCSI Qualified Name.", + "type": "string", + "default": "" }, - "spec": { - "description": "Spec defines the behavior of a node. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.NodeSpec" + "iscsiInterface": { + "description": "iscsiInterface is the interface Name that uses an iSCSI transport. Defaults to 'default' (tcp).", + "type": "string", + "default": "default" }, - "status": { - "description": "Most recently observed status of the node. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.NodeStatus" + "lun": { + "description": "lun is iSCSI Target Lun number.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "portals": { + "description": "portals is the iSCSI Target Portal List. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "readOnly": { + "description": "readOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.", + "type": "boolean" + }, + "secretRef": { + "description": "secretRef is the CHAP Secret for iSCSI target and initiator authentication", + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" + }, + "targetPortal": { + "description": "targetPortal is iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", + "Type": "nested", "Group": "", "Version": "v1", - "Kind": "Node", - "Scope": "Clustered" + "Kind": "ISCSIPersistentVolumeSource", + "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.NodeAddress": { - "description": "NodeAddress contains information for the node's address.", + "io.k8s.api.core.v1.ISCSIVolumeSource": { + "description": "Represents an ISCSI disk. ISCSI volumes can only be mounted as read/write once. ISCSI volumes support ownership management and SELinux relabeling.", "type": "object", "required": [ - "type", - "address" + "targetPortal", + "iqn", + "lun" ], "properties": { - "address": { - "description": "The node address.", + "chapAuthDiscovery": { + "description": "chapAuthDiscovery defines whether support iSCSI Discovery CHAP authentication", + "type": "boolean" + }, + "chapAuthSession": { + "description": "chapAuthSession defines whether support iSCSI Session CHAP authentication", + "type": "boolean" + }, + "fsType": { + "description": "fsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi", + "type": "string" + }, + "initiatorName": { + "description": "initiatorName is the custom iSCSI Initiator Name. If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface \u003ctarget portal\u003e:\u003cvolume name\u003e will be created for the connection.", + "type": "string" + }, + "iqn": { + "description": "iqn is the target iSCSI Qualified Name.", "type": "string", "default": "" }, - "type": { - "description": "Node address type, one of Hostname, ExternalIP or InternalIP.", + "iscsiInterface": { + "description": "iscsiInterface is the interface Name that uses an iSCSI transport. Defaults to 'default' (tcp).", + "type": "string", + "default": "default" + }, + "lun": { + "description": "lun represents iSCSI Target Lun number.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "portals": { + "description": "portals is the iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "readOnly": { + "description": "readOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.", + "type": "boolean" + }, + "secretRef": { + "description": "secretRef is the CHAP Secret for iSCSI target and initiator authentication", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "targetPortal": { + "description": "targetPortal is iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port is other than default (typically TCP ports 860 and 3260).", "type": "string", "default": "" } @@ -32194,67 +32951,56 @@ "Type": "nested", "Group": "", "Version": "v1", - "Kind": "NodeAddress", + "Kind": "ISCSIVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.NodeAffinity": { - "description": "Node affinity is a group of node affinity scheduling rules.", + "io.k8s.api.core.v1.ImageVolumeSource": { + "description": "ImageVolumeSource represents a image volume resource.", "type": "object", "properties": { - "preferredDuringSchedulingIgnoredDuringExecution": { - "description": "The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PreferredSchedulingTerm" - }, - "x-kubernetes-list-type": "atomic" + "pullPolicy": { + "description": "Policy for pulling OCI objects. Possible values are: Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails. Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn't present. IfNotPresent: the kubelet pulls if the reference isn't already present on disk. Container creation will fail if the reference isn't present and the pull fails. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.\n\nPossible enum values:\n - `\"Always\"` means that kubelet always attempts to pull the latest image. Container will fail If the pull fails.\n - `\"IfNotPresent\"` means that kubelet pulls if the image isn't present on disk. Container will fail if the image isn't present and the pull fails.\n - `\"Never\"` means that kubelet never pulls an image, but only uses a local image. Container will fail if the image isn't present", + "type": "string", + "enum": [ + "Always", + "IfNotPresent", + "Never" + ] }, - "requiredDuringSchedulingIgnoredDuringExecution": { - "description": "If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node.", - "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelector" + "reference": { + "description": "Required: Image or artifact reference to be used. Behaves in the same way as pod.spec.containers[*].image. Pull secrets will be assembled in the same way as for the container image by looking up node credentials, SA image pull secrets, and pod spec image pull secrets. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "NodeAffinity", + "Kind": "ImageVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.NodeCondition": { - "description": "NodeCondition contains condition information for a node.", + "io.k8s.api.core.v1.KeyToPath": { + "description": "Maps a string key to a path within a volume.", "type": "object", "required": [ - "type", - "status" + "key", + "path" ], "properties": { - "lastHeartbeatTime": { - "description": "Last time we got an update on a given condition.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "lastTransitionTime": { - "description": "Last time the condition transit from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "Human readable message indicating details about last transition.", - "type": "string" - }, - "reason": { - "description": "(brief) reason for the condition's last transition.", - "type": "string" - }, - "status": { - "description": "Status of the condition, one of True, False, Unknown.", + "key": { + "description": "key is the key to project.", "type": "string", "default": "" }, - "type": { - "description": "Type of node condition.", + "mode": { + "description": "mode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.", + "type": "integer", + "format": "int32" + }, + "path": { + "description": "path is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.", "type": "string", "default": "" } @@ -32263,93 +33009,149 @@ "Type": "nested", "Group": "", "Version": "v1", - "Kind": "NodeCondition", + "Kind": "KeyToPath", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.NodeConfigSource": { - "description": "NodeConfigSource specifies a source of node configuration. Exactly one subfield (excluding metadata) must be non-nil. This API is deprecated since 1.22", + "io.k8s.api.core.v1.Lifecycle": { + "description": "Lifecycle describes actions that the management system should take in response to container lifecycle events. For the PostStart and PreStop lifecycle handlers, management of the container blocks until the action is complete, unless the container process fails, in which case the handler is aborted.", "type": "object", "properties": { - "configMap": { - "description": "ConfigMap is a reference to a Node's ConfigMap", - "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapNodeConfigSource" + "postStart": { + "description": "PostStart is called immediately after a container is created. If the handler fails, the container is terminated and restarted according to its restart policy. Other management of the container blocks until the hook completes. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks", + "$ref": "#/definitions/io.k8s.api.core.v1.LifecycleHandler" + }, + "preStop": { + "description": "PreStop is called immediately before a container is terminated due to an API request or management event such as liveness/startup probe failure, preemption, resource contention, etc. The handler is not called if the container crashes or exits. The Pod's termination grace period countdown begins before the PreStop hook is executed. Regardless of the outcome of the handler, the container will eventually terminate within the Pod's termination grace period (unless delayed by finalizers). Other management of the container blocks until the hook completes or until the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks", + "$ref": "#/definitions/io.k8s.api.core.v1.LifecycleHandler" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "NodeConfigSource", + "Kind": "Lifecycle", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.NodeConfigStatus": { - "description": "NodeConfigStatus describes the status of the config assigned by Node.Spec.ConfigSource.", + "io.k8s.api.core.v1.LifecycleHandler": { + "description": "LifecycleHandler defines a specific action that should be taken in a lifecycle hook. One and only one of the fields, except TCPSocket must be specified.", "type": "object", "properties": { - "active": { - "description": "Active reports the checkpointed config the node is actively using. Active will represent either the current version of the Assigned config, or the current LastKnownGood config, depending on whether attempting to use the Assigned config results in an error.", - "$ref": "#/definitions/io.k8s.api.core.v1.NodeConfigSource" + "exec": { + "description": "Exec specifies the action to take.", + "$ref": "#/definitions/io.k8s.api.core.v1.ExecAction" }, - "assigned": { - "description": "Assigned reports the checkpointed config the node will try to use. When Node.Spec.ConfigSource is updated, the node checkpoints the associated config payload to local disk, along with a record indicating intended config. The node refers to this record to choose its config checkpoint, and reports this record in Assigned. Assigned only updates in the status after the record has been checkpointed to disk. When the Kubelet is restarted, it tries to make the Assigned config the Active config by loading and validating the checkpointed payload identified by Assigned.", - "$ref": "#/definitions/io.k8s.api.core.v1.NodeConfigSource" + "httpGet": { + "description": "HTTPGet specifies the http request to perform.", + "$ref": "#/definitions/io.k8s.api.core.v1.HTTPGetAction" }, - "error": { - "description": "Error describes any problems reconciling the Spec.ConfigSource to the Active config. Errors may occur, for example, attempting to checkpoint Spec.ConfigSource to the local Assigned record, attempting to checkpoint the payload associated with Spec.ConfigSource, attempting to load or validate the Assigned config, etc. Errors may occur at different points while syncing config. Earlier errors (e.g. download or checkpointing errors) will not result in a rollback to LastKnownGood, and may resolve across Kubelet retries. Later errors (e.g. loading or validating a checkpointed config) will result in a rollback to LastKnownGood. In the latter case, it is usually possible to resolve the error by fixing the config assigned in Spec.ConfigSource. You can find additional information for debugging by searching the error message in the Kubelet log. Error is a human-readable description of the error state; machines can check whether or not Error is empty, but should not rely on the stability of the Error text across Kubelet versions.", - "type": "string" + "sleep": { + "description": "Sleep represents the duration that the container should sleep before being terminated.", + "$ref": "#/definitions/io.k8s.api.core.v1.SleepAction" }, - "lastKnownGood": { - "description": "LastKnownGood reports the checkpointed config the node will fall back to when it encounters an error attempting to use the Assigned config. The Assigned config becomes the LastKnownGood config when the node determines that the Assigned config is stable and correct. This is currently implemented as a 10-minute soak period starting when the local record of Assigned config is updated. If the Assigned config is Active at the end of this period, it becomes the LastKnownGood. Note that if Spec.ConfigSource is reset to nil (use local defaults), the LastKnownGood is also immediately reset to nil, because the local default config is always assumed good. You should not make assumptions about the node's method of determining config stability and correctness, as this may change or become configurable in the future.", - "$ref": "#/definitions/io.k8s.api.core.v1.NodeConfigSource" + "tcpSocket": { + "description": "Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for the backward compatibility. There are no validation of this field and lifecycle hooks will fail in runtime when tcp handler is specified.", + "$ref": "#/definitions/io.k8s.api.core.v1.TCPSocketAction" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "NodeConfigStatus", + "Kind": "LifecycleHandler", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.NodeDaemonEndpoints": { - "description": "NodeDaemonEndpoints lists ports opened by daemons running on the Node.", + "io.k8s.api.core.v1.LimitRange": { + "description": "LimitRange sets resource usage limits for each kind of resource in a Namespace.", "type": "object", "properties": { - "kubeletEndpoint": { - "description": "Endpoint on which Kubelet is listening.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.DaemonEndpoint" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "Spec defines the limits enforced. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LimitRangeSpec" } }, "x-fabric8-info": { - "Type": "nested", + "Type": "object", "Group": "", "Version": "v1", - "Kind": "NodeDaemonEndpoints", + "Kind": "LimitRange", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.NodeFeatures": { - "description": "NodeFeatures describes the set of features implemented by the CRI implementation. The features contained in the NodeFeatures should depend only on the cri implementation independent of runtime handlers.", + "io.k8s.api.core.v1.LimitRangeItem": { + "description": "LimitRangeItem defines a min/max usage limit for any resource that matches on kind.", "type": "object", + "required": [ + "type" + ], "properties": { - "supplementalGroupsPolicy": { - "description": "SupplementalGroupsPolicy is set to true if the runtime supports SupplementalGroupsPolicy and ContainerUser.", - "type": "boolean" + "default": { + "description": "Default resource requirement limit value by resource name if resource limit is omitted.", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } + }, + "defaultRequest": { + "description": "DefaultRequest is the default resource requirement request value by resource name if resource request is omitted.", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } + }, + "max": { + "description": "Max usage constraints on this kind by resource name.", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } + }, + "maxLimitRequestRatio": { + "description": "MaxLimitRequestRatio if specified, the named resource must have a request and limit that are both non-zero where limit divided by request is less than or equal to the enumerated value; this represents the max burst for the named resource.", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } + }, + "min": { + "description": "Min usage constraints on this kind by resource name.", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } + }, + "type": { + "description": "Type of resource that this limit applies to.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "NodeFeatures", + "Kind": "LimitRangeItem", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.NodeList": { - "description": "NodeList is the whole list of all Nodes which have been registered with master.", + "io.k8s.api.core.v1.LimitRangeList": { + "description": "LimitRangeList is a list of LimitRange items.", "type": "object", "required": [ "items" @@ -32360,11 +33162,11 @@ "type": "string" }, "items": { - "description": "List of nodes", + "description": "Items is a list of LimitRange objects. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Node" + "$ref": "#/definitions/io.k8s.api.core.v1.LimitRange" } }, "kind": { @@ -32381,338 +33183,154 @@ "Type": "list", "Group": "", "Version": "v1", - "Kind": "NodeList", - "Scope": "Namespaced" - } - }, - "io.k8s.api.core.v1.NodeProxyOptions": { - "description": "NodeProxyOptions is the query options to a Node's proxy call.", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "path": { - "description": "Path is the URL path to use for the current proxy request to node.", - "type": "string" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "", - "Version": "v1", - "Kind": "NodeProxyOptions", + "Kind": "LimitRangeList", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.NodeRuntimeHandler": { - "description": "NodeRuntimeHandler is a set of runtime handler information.", + "io.k8s.api.core.v1.LimitRangeSpec": { + "description": "LimitRangeSpec defines a min/max usage limit for resources that match on kind.", "type": "object", + "required": [ + "limits" + ], "properties": { - "features": { - "description": "Supported features.", - "$ref": "#/definitions/io.k8s.api.core.v1.NodeRuntimeHandlerFeatures" - }, - "name": { - "description": "Runtime handler name. Empty for the default runtime handler.", - "type": "string", - "default": "" + "limits": { + "description": "Limits is the list of LimitRangeItem objects that are enforced.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LimitRangeItem" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "NodeRuntimeHandler", + "Kind": "LimitRangeSpec", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.NodeRuntimeHandlerFeatures": { - "description": "NodeRuntimeHandlerFeatures is a set of features implemented by the runtime handler.", + "io.k8s.api.core.v1.LinuxContainerUser": { + "description": "LinuxContainerUser represents user identity information in Linux containers", "type": "object", + "required": [ + "uid", + "gid" + ], "properties": { - "recursiveReadOnlyMounts": { - "description": "RecursiveReadOnlyMounts is set to true if the runtime handler supports RecursiveReadOnlyMounts.", - "type": "boolean" + "gid": { + "description": "GID is the primary gid initially attached to the first process in the container", + "type": "integer", + "format": "int64", + "default": 0 }, - "userNamespaces": { - "description": "UserNamespaces is set to true if the runtime handler supports UserNamespaces, including for volumes.", - "type": "boolean" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "NodeRuntimeHandlerFeatures", - "Scope": "Namespaced" - } - }, - "io.k8s.api.core.v1.NodeSelector": { - "description": "A node selector represents the union of the results of one or more label queries over a set of nodes; that is, it represents the OR of the selectors represented by the node selector terms.", - "type": "object", - "required": [ - "nodeSelectorTerms" - ], - "properties": { - "nodeSelectorTerms": { - "description": "Required. A list of node selector terms. The terms are ORed.", + "supplementalGroups": { + "description": "SupplementalGroups are the supplemental groups initially attached to the first process in the container", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelectorTerm" + "type": "integer", + "format": "int64", + "default": 0 }, "x-kubernetes-list-type": "atomic" + }, + "uid": { + "description": "UID is the primary uid initially attached to the first process in the container", + "type": "integer", + "format": "int64", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "NodeSelector", + "Kind": "LinuxContainerUser", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.core.v1.NodeSelectorRequirement": { - "description": "A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values.", + "io.k8s.api.core.v1.List": { + "description": "List holds a list of objects, which may not be known by the server.", "type": "object", "required": [ - "key", - "operator" + "items" ], "properties": { - "key": { - "description": "The label key that the selector applies to.", - "type": "string", - "default": "" - }, - "operator": { - "description": "Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.\n\nPossible enum values:\n - `\"DoesNotExist\"`\n - `\"Exists\"`\n - `\"Gt\"`\n - `\"In\"`\n - `\"Lt\"`\n - `\"NotIn\"`", - "type": "string", - "default": "", - "enum": [ - "DoesNotExist", - "Exists", - "Gt", - "In", - "Lt", - "NotIn" - ] + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "values": { - "description": "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "NodeSelectorRequirement", - "Scope": "Namespaced" - } - }, - "io.k8s.api.core.v1.NodeSelectorTerm": { - "description": "A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.", - "type": "object", - "properties": { - "matchExpressions": { - "description": "A list of node selector requirements by node's labels.", + "items": { + "description": "List of objects", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelectorRequirement" - }, - "x-kubernetes-list-type": "atomic" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + } }, - "matchFields": { - "description": "A list of node selector requirements by node's fields.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelectorRequirement" - }, - "x-kubernetes-list-type": "atomic" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", + "Type": "list", "Group": "", "Version": "v1", - "Kind": "NodeSelectorTerm", + "Kind": "List", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.core.v1.NodeSpec": { - "description": "NodeSpec describes the attributes that a node is created with.", + "io.k8s.api.core.v1.LoadBalancerIngress": { + "description": "LoadBalancerIngress represents the status of a load-balancer ingress point: traffic intended for the service should be sent to an ingress point.", "type": "object", "properties": { - "configSource": { - "description": "Deprecated: Previously used to specify the source of the node's configuration for the DynamicKubeletConfig feature. This feature is removed.", - "$ref": "#/definitions/io.k8s.api.core.v1.NodeConfigSource" - }, - "externalID": { - "description": "Deprecated. Not all kubelets will set this field. Remove field after 1.13. see: https://issues.k8s.io/61966", + "hostname": { + "description": "Hostname is set for load-balancer ingress points that are DNS based (typically AWS load-balancers)", "type": "string" }, - "podCIDR": { - "description": "PodCIDR represents the pod IP range assigned to the node.", + "ip": { + "description": "IP is set for load-balancer ingress points that are IP based (typically GCE or OpenStack load-balancers)", "type": "string" }, - "podCIDRs": { - "description": "podCIDRs represents the IP ranges assigned to the node for usage by Pods on that node. If this field is specified, the 0th entry must match the podCIDR field. It may contain at most 1 value for each of IPv4 and IPv6.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set", - "x-kubernetes-patch-strategy": "merge" - }, - "providerID": { - "description": "ID of the node assigned by the cloud provider in the format: \u003cProviderName\u003e://\u003cProviderSpecificNodeID\u003e", + "ipMode": { + "description": "IPMode specifies how the load-balancer IP behaves, and may only be specified when the ip field is specified. Setting this to \"VIP\" indicates that traffic is delivered to the node with the destination set to the load-balancer's IP and port. Setting this to \"Proxy\" indicates that traffic is delivered to the node or pod with the destination set to the node's IP and node port or the pod's IP and port. Service implementations may use this information to adjust traffic routing.", "type": "string" }, - "taints": { - "description": "If specified, the node's taints.", + "ports": { + "description": "Ports is a list of records of service ports If used, every port defined in the service should have an entry in it", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Taint" + "$ref": "#/definitions/io.k8s.api.core.v1.PortStatus" }, "x-kubernetes-list-type": "atomic" - }, - "unschedulable": { - "description": "Unschedulable controls node schedulability of new pods. By default, node is schedulable. More info: https://kubernetes.io/docs/concepts/nodes/node/#manual-node-administration", - "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "NodeSpec", + "Kind": "LoadBalancerIngress", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.NodeStatus": { - "description": "NodeStatus is information about the current status of a node.", + "io.k8s.api.core.v1.LoadBalancerStatus": { + "description": "LoadBalancerStatus represents the status of a load-balancer.", "type": "object", "properties": { - "addresses": { - "description": "List of addresses reachable to the node. Queried from cloud provider, if available. More info: https://kubernetes.io/docs/concepts/nodes/node/#addresses Note: This field is declared as mergeable, but the merge key is not sufficiently unique, which can cause data corruption when it is merged. Callers should instead use a full-replacement patch. See https://pr.k8s.io/79391 for an example. Consumers should assume that addresses can change during the lifetime of a Node. However, there are some exceptions where this may not be possible, such as Pods that inherit a Node's address in its own status or consumers of the downward API (status.hostIP).", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.NodeAddress" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "allocatable": { - "description": "Allocatable represents the resources of a node that are available for scheduling. Defaults to Capacity.", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } - }, - "capacity": { - "description": "Capacity represents the total resources of a node. More info: https://kubernetes.io/docs/reference/node/node-status/#capacity", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } - }, - "conditions": { - "description": "Conditions is an array of current observed node conditions. More info: https://kubernetes.io/docs/concepts/nodes/node/#condition", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.NodeCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "config": { - "description": "Status of the config assigned to the node via the dynamic Kubelet config feature.", - "$ref": "#/definitions/io.k8s.api.core.v1.NodeConfigStatus" - }, - "daemonEndpoints": { - "description": "Endpoints of daemons running on the Node.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.NodeDaemonEndpoints" - }, - "features": { - "description": "Features describes the set of features implemented by the CRI implementation.", - "$ref": "#/definitions/io.k8s.api.core.v1.NodeFeatures" - }, - "images": { - "description": "List of container images on this node", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ContainerImage" - }, - "x-kubernetes-list-type": "atomic" - }, - "nodeInfo": { - "description": "Set of ids/uuids to uniquely identify the node. More info: https://kubernetes.io/docs/concepts/nodes/node/#info", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.NodeSystemInfo" - }, - "phase": { - "description": "NodePhase is the recently observed lifecycle phase of the node. More info: https://kubernetes.io/docs/concepts/nodes/node/#phase The field is never populated, and now is deprecated.\n\nPossible enum values:\n - `\"Pending\"` means the node has been created/added by the system, but not configured.\n - `\"Running\"` means the node has been configured and has Kubernetes components running.\n - `\"Terminated\"` means the node has been removed from the cluster.", - "type": "string", - "enum": [ - "Pending", - "Running", - "Terminated" - ] - }, - "runtimeHandlers": { - "description": "The available runtime handlers.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.NodeRuntimeHandler" - }, - "x-kubernetes-list-type": "atomic" - }, - "volumesAttached": { - "description": "List of volumes that are attached to the node.", + "ingress": { + "description": "Ingress is a list containing ingress points for the load-balancer. Traffic intended for the service should be sent to these ingress points.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.AttachedVolume" - }, - "x-kubernetes-list-type": "atomic" - }, - "volumesInUse": { - "description": "List of attachable volumes in use (mounted) by the node.", - "type": "array", - "items": { - "type": "string", - "default": "" + "$ref": "#/definitions/io.k8s.api.core.v1.LoadBalancerIngress" }, "x-kubernetes-list-type": "atomic" } @@ -32721,73 +33339,16 @@ "Type": "nested", "Group": "", "Version": "v1", - "Kind": "NodeStatus", + "Kind": "LoadBalancerStatus", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.NodeSystemInfo": { - "description": "NodeSystemInfo is a set of ids/uuids to uniquely identify the node.", + "io.k8s.api.core.v1.LocalObjectReference": { + "description": "LocalObjectReference contains enough information to let you locate the referenced object inside the same namespace.", "type": "object", - "required": [ - "machineID", - "systemUUID", - "bootID", - "kernelVersion", - "osImage", - "containerRuntimeVersion", - "kubeletVersion", - "kubeProxyVersion", - "operatingSystem", - "architecture" - ], "properties": { - "architecture": { - "description": "The Architecture reported by the node", - "type": "string", - "default": "" - }, - "bootID": { - "description": "Boot ID reported by the node.", - "type": "string", - "default": "" - }, - "containerRuntimeVersion": { - "description": "ContainerRuntime Version reported by the node through runtime remote API (e.g. containerd://1.4.2).", - "type": "string", - "default": "" - }, - "kernelVersion": { - "description": "Kernel Version reported by the node from 'uname -r' (e.g. 3.16.0-0.bpo.4-amd64).", - "type": "string", - "default": "" - }, - "kubeProxyVersion": { - "description": "Deprecated: KubeProxy Version reported by the node.", - "type": "string", - "default": "" - }, - "kubeletVersion": { - "description": "Kubelet Version reported by the node.", - "type": "string", - "default": "" - }, - "machineID": { - "description": "MachineID reported by the node. For unique machine identification in the cluster this field is preferred. Learn more from man(5) machine-id: http://man7.org/linux/man-pages/man5/machine-id.5.html", - "type": "string", - "default": "" - }, - "operatingSystem": { - "description": "The Operating System reported by the node", - "type": "string", - "default": "" - }, - "osImage": { - "description": "OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).", - "type": "string", - "default": "" - }, - "systemUUID": { - "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid", + "name": { + "description": "Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", "type": "string", "default": "" } @@ -32796,23 +33357,24 @@ "Type": "nested", "Group": "", "Version": "v1", - "Kind": "NodeSystemInfo", + "Kind": "LocalObjectReference", "Scope": "Namespaced" - } + }, + "x-kubernetes-map-type": "atomic" }, - "io.k8s.api.core.v1.ObjectFieldSelector": { - "description": "ObjectFieldSelector selects an APIVersioned field of an object.", + "io.k8s.api.core.v1.LocalVolumeSource": { + "description": "Local represents directly-attached storage with node affinity (Beta feature)", "type": "object", "required": [ - "fieldPath" + "path" ], "properties": { - "apiVersion": { - "description": "Version of the schema the FieldPath is written in terms of, defaults to \"v1\".", + "fsType": { + "description": "fsType is the filesystem type to mount. It applies only when the Path is a block device. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". The default value is to auto-select a filesystem if unspecified.", "type": "string" }, - "fieldPath": { - "description": "Path of the field to select in the specified API version.", + "path": { + "description": "path of the full path to the volume on the node. It can be either a directory or block device (disk, partition, ...).", "type": "string", "default": "" } @@ -32821,41 +33383,29 @@ "Type": "nested", "Group": "", "Version": "v1", - "Kind": "ObjectFieldSelector", + "Kind": "LocalVolumeSource", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.core.v1.ObjectReference": { - "description": "ObjectReference contains enough information to let you inspect or modify the referred object.", + "io.k8s.api.core.v1.ModifyVolumeStatus": { + "description": "ModifyVolumeStatus represents the status object of ControllerModifyVolume operation", "type": "object", + "required": [ + "status" + ], "properties": { - "apiVersion": { - "description": "API version of the referent.", - "type": "string" - }, - "fieldPath": { - "description": "If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: \"spec.containers{name}\" (where \"name\" refers to the name of the container that triggered the event) or if no container name is specified \"spec.containers[2]\" (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object.", - "type": "string" - }, - "kind": { - "description": "Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "name": { - "description": "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - "type": "string" - }, - "namespace": { - "description": "Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/", - "type": "string" - }, - "resourceVersion": { - "description": "Specific resourceVersion to which this reference is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency", - "type": "string" + "status": { + "description": "status is the status of the ControllerModifyVolume operation. It can be in any of following states:\n - Pending\n Pending indicates that the PersistentVolumeClaim cannot be modified due to unmet requirements, such as\n the specified VolumeAttributesClass not existing.\n - InProgress\n InProgress indicates that the volume is being modified.\n - Infeasible\n Infeasible indicates that the request has been rejected as invalid by the CSI driver. To\n\t resolve the error, a valid VolumeAttributesClass needs to be specified.\nNote: New statuses can be added in the future. Consumers should check for unknown statuses and fail appropriately.\n\nPossible enum values:\n - `\"InProgress\"` InProgress indicates that the volume is being modified\n - `\"Infeasible\"` Infeasible indicates that the request has been rejected as invalid by the CSI driver. To resolve the error, a valid VolumeAttributesClass needs to be specified\n - `\"Pending\"` Pending indicates that the PersistentVolumeClaim cannot be modified due to unmet requirements, such as the specified VolumeAttributesClass not existing", + "type": "string", + "default": "", + "enum": [ + "InProgress", + "Infeasible", + "Pending" + ] }, - "uid": { - "description": "UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids", + "targetVolumeAttributesClassName": { + "description": "targetVolumeAttributesClassName is the name of the VolumeAttributesClass the PVC currently being reconciled", "type": "string" } }, @@ -32863,49 +33413,43 @@ "Type": "nested", "Group": "", "Version": "v1", - "Kind": "ObjectReference", + "Kind": "ModifyVolumeStatus", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.core.v1.PersistentVolume": { - "description": "PersistentVolume (PV) is a storage resource provisioned by an administrator. It is analogous to a node. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes", + "io.k8s.api.core.v1.NFSVolumeSource": { + "description": "Represents an NFS mount that lasts the lifetime of a pod. NFS volumes do not support ownership management or SELinux relabeling.", "type": "object", + "required": [ + "server", + "path" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "path": { + "description": "path that is exported by the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs", + "type": "string", + "default": "" }, - "spec": { - "description": "spec defines a specification of a persistent volume owned by the cluster. Provisioned by an administrator. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistent-volumes", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeSpec" + "readOnly": { + "description": "readOnly here will force the NFS export to be mounted with read-only permissions. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs", + "type": "boolean" }, - "status": { - "description": "status represents the current information/status for the persistent volume. Populated by the system. Read-only. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistent-volumes", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeStatus" + "server": { + "description": "server is the hostname or IP address of the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", + "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PersistentVolume", - "Scope": "Clustered" + "Kind": "NFSVolumeSource", + "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PersistentVolumeClaim": { - "description": "PersistentVolumeClaim is a user's request for and claim to a persistent volume", + "io.k8s.api.core.v1.Namespace": { + "description": "Namespace provides a scope for Names. Use of multiple namespaces is optional.", "type": "object", "properties": { "apiVersion": { @@ -32922,53 +33466,48 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec defines the desired characteristics of a volume requested by a pod author. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims", + "description": "Spec defines the behavior of the Namespace. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimSpec" + "$ref": "#/definitions/io.k8s.api.core.v1.NamespaceSpec" }, "status": { - "description": "status represents the current information/status of a persistent volume claim. Read-only. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims", + "description": "Status describes the current status of a Namespace. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimStatus" + "$ref": "#/definitions/io.k8s.api.core.v1.NamespaceStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "", "Version": "v1", - "Kind": "PersistentVolumeClaim", - "Scope": "Namespaced" + "Kind": "Namespace", + "Scope": "Clustered" } }, - "io.k8s.api.core.v1.PersistentVolumeClaimCondition": { - "description": "PersistentVolumeClaimCondition contains details about state of pvc", + "io.k8s.api.core.v1.NamespaceCondition": { + "description": "NamespaceCondition contains details about state of namespace.", "type": "object", "required": [ "type", "status" ], "properties": { - "lastProbeTime": { - "description": "lastProbeTime is the time we probed the condition.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, "lastTransitionTime": { - "description": "lastTransitionTime is the time the condition transitioned from one status to another.", "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, "message": { - "description": "message is the human-readable message indicating details about last transition.", "type": "string" }, "reason": { - "description": "reason is a unique, this should be a short, machine understandable string that gives the reason for condition's last transition. If it reports \"Resizing\" that means the underlying persistent volume is being resized.", "type": "string" }, "status": { + "description": "Status of the condition, one of True, False, Unknown.", "type": "string", "default": "" }, "type": { + "description": "Type of namespace controller condition.", "type": "string", "default": "" } @@ -32977,12 +33516,12 @@ "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PersistentVolumeClaimCondition", + "Kind": "NamespaceCondition", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PersistentVolumeClaimList": { - "description": "PersistentVolumeClaimList is a list of PersistentVolumeClaim items.", + "io.k8s.api.core.v1.NamespaceList": { + "description": "NamespaceList is a list of Namespaces.", "type": "object", "required": [ "items" @@ -32993,11 +33532,11 @@ "type": "string" }, "items": { - "description": "items is a list of persistent volume claims. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims", + "description": "Items is the list of Namespace objects in the list. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + "$ref": "#/definitions/io.k8s.api.core.v1.Namespace" } }, "kind": { @@ -33014,130 +33553,42 @@ "Type": "list", "Group": "", "Version": "v1", - "Kind": "PersistentVolumeClaimList", + "Kind": "NamespaceList", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PersistentVolumeClaimSpec": { - "description": "PersistentVolumeClaimSpec describes the common attributes of storage devices and allows a Source for provider-specific attributes", + "io.k8s.api.core.v1.NamespaceSpec": { + "description": "NamespaceSpec describes the attributes on a Namespace.", "type": "object", "properties": { - "accessModes": { - "description": "accessModes contains the desired access modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1", + "finalizers": { + "description": "Finalizers is an opaque list of values that must be empty to permanently remove object from storage. More info: https://kubernetes.io/docs/tasks/administer-cluster/namespaces/", "type": "array", "items": { "type": "string", - "default": "", - "enum": [ - "ReadOnlyMany", - "ReadWriteMany", - "ReadWriteOnce", - "ReadWriteOncePod" - ] + "default": "" }, "x-kubernetes-list-type": "atomic" - }, - "dataSource": { - "description": "dataSource field can be used to specify either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified. If the namespace is specified, then dataSourceRef will not be copied to dataSource.", - "$ref": "#/definitions/io.k8s.api.core.v1.TypedLocalObjectReference" - }, - "dataSourceRef": { - "description": "dataSourceRef specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the dataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, when namespace isn't specified in dataSourceRef, both fields (dataSource and dataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. When namespace is specified in dataSourceRef, dataSource isn't set to the same value and must be empty. There are three important differences between dataSource and dataSourceRef: * While dataSource only allows two specific types of objects, dataSourceRef\n allows any non-core object, as well as PersistentVolumeClaim objects.\n* While dataSource ignores disallowed values (dropping them), dataSourceRef\n preserves all values, and generates an error if a disallowed value is\n specified.\n* While dataSource only allows local objects, dataSourceRef allows objects\n in any namespaces.\n(Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled. (Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.", - "$ref": "#/definitions/io.k8s.api.core.v1.TypedObjectReference" - }, - "resources": { - "description": "resources represents the minimum resources the volume should have. If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements that are lower than previous value but must still be higher than capacity recorded in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.VolumeResourceRequirements" - }, - "selector": { - "description": "selector is a label query over volumes to consider for binding.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "storageClassName": { - "description": "storageClassName is the name of the StorageClass required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1", - "type": "string" - }, - "volumeAttributesClassName": { - "description": "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim. If specified, the CSI driver will create or update the volume with the attributes defined in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName, it can be changed after the claim is created. An empty string value means that no VolumeAttributesClass will be applied to the claim but it's not allowed to reset this field to empty string once it is set. If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClass will be set by the persistentvolume controller if it exists. If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource exists. More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/ (Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).", - "type": "string" - }, - "volumeMode": { - "description": "volumeMode defines what type of volume is required by the claim. Value of Filesystem is implied when not included in claim spec.\n\nPossible enum values:\n - `\"Block\"` means the volume will not be formatted with a filesystem and will remain a raw block device.\n - `\"Filesystem\"` means the volume will be or is formatted with a filesystem.", - "type": "string", - "enum": [ - "Block", - "Filesystem" - ] - }, - "volumeName": { - "description": "volumeName is the binding reference to the PersistentVolume backing this claim.", - "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PersistentVolumeClaimSpec", + "Kind": "NamespaceSpec", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PersistentVolumeClaimStatus": { - "description": "PersistentVolumeClaimStatus is the current status of a persistent volume claim.", + "io.k8s.api.core.v1.NamespaceStatus": { + "description": "NamespaceStatus is information about the current status of a Namespace.", "type": "object", "properties": { - "accessModes": { - "description": "accessModes contains the actual access modes the volume backing the PVC has. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1", - "type": "array", - "items": { - "type": "string", - "default": "", - "enum": [ - "ReadOnlyMany", - "ReadWriteMany", - "ReadWriteOnce", - "ReadWriteOncePod" - ] - }, - "x-kubernetes-list-type": "atomic" - }, - "allocatedResourceStatuses": { - "description": "allocatedResourceStatuses stores status of resource being resized for the given PVC. Key names follow standard Kubernetes label syntax. Valid values are either:\n\t* Un-prefixed keys:\n\t\t- storage - the capacity of the volume.\n\t* Custom resources must use implementation-defined prefixed names such as \"example.com/my-custom-resource\"\nApart from above values - keys that are unprefixed or have kubernetes.io prefix are considered reserved and hence may not be used.\n\nClaimResourceStatus can be in any of following states:\n\t- ControllerResizeInProgress:\n\t\tState set when resize controller starts resizing the volume in control-plane.\n\t- ControllerResizeFailed:\n\t\tState set when resize has failed in resize controller with a terminal error.\n\t- NodeResizePending:\n\t\tState set when resize controller has finished resizing the volume but further resizing of\n\t\tvolume is needed on the node.\n\t- NodeResizeInProgress:\n\t\tState set when kubelet starts resizing the volume.\n\t- NodeResizeFailed:\n\t\tState set when resizing has failed in kubelet with a terminal error. Transient errors don't set\n\t\tNodeResizeFailed.\nFor example: if expanding a PVC for more capacity - this field can be one of the following states:\n\t- pvc.status.allocatedResourceStatus['storage'] = \"ControllerResizeInProgress\"\n - pvc.status.allocatedResourceStatus['storage'] = \"ControllerResizeFailed\"\n - pvc.status.allocatedResourceStatus['storage'] = \"NodeResizePending\"\n - pvc.status.allocatedResourceStatus['storage'] = \"NodeResizeInProgress\"\n - pvc.status.allocatedResourceStatus['storage'] = \"NodeResizeFailed\"\nWhen this field is not set, it means that no resize operation is in progress for the given PVC.\n\nA controller that receives PVC update with previously unknown resourceName or ClaimResourceStatus should ignore the update for the purpose it was designed. For example - a controller that only is responsible for resizing capacity of the volume, should ignore PVC updates that change other valid resources associated with PVC.\n\nThis is an alpha field and requires enabling RecoverVolumeExpansionFailure feature.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "", - "enum": [ - "ControllerResizeInProgress", - "ControllerResizeInfeasible", - "NodeResizeInProgress", - "NodeResizeInfeasible", - "NodeResizePending" - ] - }, - "x-kubernetes-map-type": "granular" - }, - "allocatedResources": { - "description": "allocatedResources tracks the resources allocated to a PVC including its capacity. Key names follow standard Kubernetes label syntax. Valid values are either:\n\t* Un-prefixed keys:\n\t\t- storage - the capacity of the volume.\n\t* Custom resources must use implementation-defined prefixed names such as \"example.com/my-custom-resource\"\nApart from above values - keys that are unprefixed or have kubernetes.io prefix are considered reserved and hence may not be used.\n\nCapacity reported here may be larger than the actual capacity when a volume expansion operation is requested. For storage quota, the larger value from allocatedResources and PVC.spec.resources is used. If allocatedResources is not set, PVC.spec.resources alone is used for quota calculation. If a volume expansion capacity request is lowered, allocatedResources is only lowered if there are no expansion operations in progress and if the actual volume capacity is equal or lower than the requested capacity.\n\nA controller that receives PVC update with previously unknown resourceName should ignore the update for the purpose it was designed. For example - a controller that only is responsible for resizing capacity of the volume, should ignore PVC updates that change other valid resources associated with PVC.\n\nThis is an alpha field and requires enabling RecoverVolumeExpansionFailure feature.", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } - }, - "capacity": { - "description": "capacity represents the actual resources of the underlying volume.", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } - }, "conditions": { - "description": "conditions is the current Condition of persistent volume claim. If underlying persistent volume is being resized then the Condition will be set to 'Resizing'.", + "description": "Represents the latest available observations of a namespace's current state.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimCondition" + "$ref": "#/definitions/io.k8s.api.core.v1.NamespaceCondition" }, "x-kubernetes-list-map-keys": [ "type" @@ -33146,21 +33597,12 @@ "x-kubernetes-patch-merge-key": "type", "x-kubernetes-patch-strategy": "merge" }, - "currentVolumeAttributesClassName": { - "description": "currentVolumeAttributesClassName is the current name of the VolumeAttributesClass the PVC is using. When unset, there is no VolumeAttributeClass applied to this PersistentVolumeClaim This is a beta field and requires enabling VolumeAttributesClass feature (off by default).", - "type": "string" - }, - "modifyVolumeStatus": { - "description": "ModifyVolumeStatus represents the status object of ControllerModifyVolume operation. When this is unset, there is no ModifyVolume operation being attempted. This is a beta field and requires enabling VolumeAttributesClass feature (off by default).", - "$ref": "#/definitions/io.k8s.api.core.v1.ModifyVolumeStatus" - }, "phase": { - "description": "phase represents the current phase of PersistentVolumeClaim.\n\nPossible enum values:\n - `\"Bound\"` used for PersistentVolumeClaims that are bound\n - `\"Lost\"` used for PersistentVolumeClaims that lost their underlying PersistentVolume. The claim was bound to a PersistentVolume and this volume does not exist any longer and all data on it was lost.\n - `\"Pending\"` used for PersistentVolumeClaims that are not yet bound", + "description": "Phase is the current lifecycle phase of the namespace. More info: https://kubernetes.io/docs/tasks/administer-cluster/namespaces/\n\nPossible enum values:\n - `\"Active\"` means the namespace is available for use in the system\n - `\"Terminating\"` means the namespace is undergoing graceful termination", "type": "string", "enum": [ - "Bound", - "Lost", - "Pending" + "Active", + "Terminating" ] } }, @@ -33168,50 +33610,212 @@ "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PersistentVolumeClaimStatus", + "Kind": "NamespaceStatus", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PersistentVolumeClaimTemplate": { - "description": "PersistentVolumeClaimTemplate is used to produce PersistentVolumeClaim objects as part of an EphemeralVolumeSource.", + "io.k8s.api.core.v1.Node": { + "description": "Node is a worker node in Kubernetes. Each node will have a unique identifier in the cache (i.e. in etcd).", "type": "object", - "required": [ - "spec" - ], "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, "metadata": { - "description": "May contain labels and annotations that will be copied into the PVC when creating it. No other fields are allowed and will be rejected during validation.", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "The specification for the PersistentVolumeClaim. The entire content is copied unchanged into the PVC that gets created from this template. The same fields as in a PersistentVolumeClaim are also valid here.", + "description": "Spec defines the behavior of a node. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimSpec" + "$ref": "#/definitions/io.k8s.api.core.v1.NodeSpec" + }, + "status": { + "description": "Most recently observed status of the node. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.NodeStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "Node", + "Scope": "Clustered" + } + }, + "io.k8s.api.core.v1.NodeAddress": { + "description": "NodeAddress contains information for the node's address.", + "type": "object", + "required": [ + "type", + "address" + ], + "properties": { + "address": { + "description": "The node address.", + "type": "string", + "default": "" + }, + "type": { + "description": "Node address type, one of Hostname, ExternalIP or InternalIP.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PersistentVolumeClaimTemplate", + "Kind": "NodeAddress", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PersistentVolumeClaimVolumeSource": { - "description": "PersistentVolumeClaimVolumeSource references the user's PVC in the same namespace. This volume finds the bound PV and mounts that volume for the pod. A PersistentVolumeClaimVolumeSource is, essentially, a wrapper around another type of volume that is owned by someone else (the system).", + "io.k8s.api.core.v1.NodeAffinity": { + "description": "Node affinity is a group of node affinity scheduling rules.", + "type": "object", + "properties": { + "preferredDuringSchedulingIgnoredDuringExecution": { + "description": "The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PreferredSchedulingTerm" + }, + "x-kubernetes-list-type": "atomic" + }, + "requiredDuringSchedulingIgnoredDuringExecution": { + "description": "If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node.", + "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelector" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "NodeAffinity", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.NodeCondition": { + "description": "NodeCondition contains condition information for a node.", "type": "object", "required": [ - "claimName" + "type", + "status" ], "properties": { - "claimName": { - "description": "claimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims", + "lastHeartbeatTime": { + "description": "Last time we got an update on a given condition.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "lastTransitionTime": { + "description": "Last time the condition transit from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "Human readable message indicating details about last transition.", + "type": "string" + }, + "reason": { + "description": "(brief) reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status of the condition, one of True, False, Unknown.", "type": "string", "default": "" }, - "readOnly": { - "description": "readOnly Will force the ReadOnly setting in VolumeMounts. Default false.", + "type": { + "description": "Type of node condition.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "NodeCondition", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.NodeConfigSource": { + "description": "NodeConfigSource specifies a source of node configuration. Exactly one subfield (excluding metadata) must be non-nil. This API is deprecated since 1.22", + "type": "object", + "properties": { + "configMap": { + "description": "ConfigMap is a reference to a Node's ConfigMap", + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapNodeConfigSource" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "NodeConfigSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.NodeConfigStatus": { + "description": "NodeConfigStatus describes the status of the config assigned by Node.Spec.ConfigSource.", + "type": "object", + "properties": { + "active": { + "description": "Active reports the checkpointed config the node is actively using. Active will represent either the current version of the Assigned config, or the current LastKnownGood config, depending on whether attempting to use the Assigned config results in an error.", + "$ref": "#/definitions/io.k8s.api.core.v1.NodeConfigSource" + }, + "assigned": { + "description": "Assigned reports the checkpointed config the node will try to use. When Node.Spec.ConfigSource is updated, the node checkpoints the associated config payload to local disk, along with a record indicating intended config. The node refers to this record to choose its config checkpoint, and reports this record in Assigned. Assigned only updates in the status after the record has been checkpointed to disk. When the Kubelet is restarted, it tries to make the Assigned config the Active config by loading and validating the checkpointed payload identified by Assigned.", + "$ref": "#/definitions/io.k8s.api.core.v1.NodeConfigSource" + }, + "error": { + "description": "Error describes any problems reconciling the Spec.ConfigSource to the Active config. Errors may occur, for example, attempting to checkpoint Spec.ConfigSource to the local Assigned record, attempting to checkpoint the payload associated with Spec.ConfigSource, attempting to load or validate the Assigned config, etc. Errors may occur at different points while syncing config. Earlier errors (e.g. download or checkpointing errors) will not result in a rollback to LastKnownGood, and may resolve across Kubelet retries. Later errors (e.g. loading or validating a checkpointed config) will result in a rollback to LastKnownGood. In the latter case, it is usually possible to resolve the error by fixing the config assigned in Spec.ConfigSource. You can find additional information for debugging by searching the error message in the Kubelet log. Error is a human-readable description of the error state; machines can check whether or not Error is empty, but should not rely on the stability of the Error text across Kubelet versions.", + "type": "string" + }, + "lastKnownGood": { + "description": "LastKnownGood reports the checkpointed config the node will fall back to when it encounters an error attempting to use the Assigned config. The Assigned config becomes the LastKnownGood config when the node determines that the Assigned config is stable and correct. This is currently implemented as a 10-minute soak period starting when the local record of Assigned config is updated. If the Assigned config is Active at the end of this period, it becomes the LastKnownGood. Note that if Spec.ConfigSource is reset to nil (use local defaults), the LastKnownGood is also immediately reset to nil, because the local default config is always assumed good. You should not make assumptions about the node's method of determining config stability and correctness, as this may change or become configurable in the future.", + "$ref": "#/definitions/io.k8s.api.core.v1.NodeConfigSource" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "NodeConfigStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.NodeDaemonEndpoints": { + "description": "NodeDaemonEndpoints lists ports opened by daemons running on the Node.", + "type": "object", + "properties": { + "kubeletEndpoint": { + "description": "Endpoint on which Kubelet is listening.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.DaemonEndpoint" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "NodeDaemonEndpoints", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.NodeFeatures": { + "description": "NodeFeatures describes the set of features implemented by the CRI implementation. The features contained in the NodeFeatures should depend only on the cri implementation independent of runtime handlers.", + "type": "object", + "properties": { + "supplementalGroupsPolicy": { + "description": "SupplementalGroupsPolicy is set to true if the runtime supports SupplementalGroupsPolicy and ContainerUser.", "type": "boolean" } }, @@ -33219,12 +33823,12 @@ "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PersistentVolumeClaimVolumeSource", + "Kind": "NodeFeatures", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PersistentVolumeList": { - "description": "PersistentVolumeList is a list of PersistentVolume items.", + "io.k8s.api.core.v1.NodeList": { + "description": "NodeList is the whole list of all Nodes which have been registered with master.", "type": "object", "required": [ "items" @@ -33235,11 +33839,11 @@ "type": "string" }, "items": { - "description": "items is a list of persistent volumes. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes", + "description": "List of nodes", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolume" + "$ref": "#/definitions/io.k8s.api.core.v1.Node" } }, "kind": { @@ -33256,340 +33860,495 @@ "Type": "list", "Group": "", "Version": "v1", - "Kind": "PersistentVolumeList", + "Kind": "NodeList", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PersistentVolumeSource": { - "description": "PersistentVolumeSource is similar to VolumeSource but meant for the administrator who creates PVs. Exactly one of its members must be set.", + "io.k8s.api.core.v1.NodeProxyOptions": { + "description": "NodeProxyOptions is the query options to a Node's proxy call.", "type": "object", "properties": { - "awsElasticBlockStore": { - "description": "awsElasticBlockStore represents an AWS Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore", - "$ref": "#/definitions/io.k8s.api.core.v1.AWSElasticBlockStoreVolumeSource" - }, - "azureDisk": { - "description": "azureDisk represents an Azure Data Disk mount on the host and bind mount to the pod.", - "$ref": "#/definitions/io.k8s.api.core.v1.AzureDiskVolumeSource" - }, - "azureFile": { - "description": "azureFile represents an Azure File Service mount on the host and bind mount to the pod.", - "$ref": "#/definitions/io.k8s.api.core.v1.AzureFilePersistentVolumeSource" - }, - "cephfs": { - "description": "cephFS represents a Ceph FS mount on the host that shares a pod's lifetime", - "$ref": "#/definitions/io.k8s.api.core.v1.CephFSPersistentVolumeSource" - }, - "cinder": { - "description": "cinder represents a cinder volume attached and mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", - "$ref": "#/definitions/io.k8s.api.core.v1.CinderPersistentVolumeSource" - }, - "csi": { - "description": "csi represents storage that is handled by an external CSI driver (Beta feature).", - "$ref": "#/definitions/io.k8s.api.core.v1.CSIPersistentVolumeSource" - }, - "fc": { - "description": "fc represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod.", - "$ref": "#/definitions/io.k8s.api.core.v1.FCVolumeSource" - }, - "flexVolume": { - "description": "flexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.", - "$ref": "#/definitions/io.k8s.api.core.v1.FlexPersistentVolumeSource" - }, - "flocker": { - "description": "flocker represents a Flocker volume attached to a kubelet's host machine and exposed to the pod for its usage. This depends on the Flocker control service being running", - "$ref": "#/definitions/io.k8s.api.core.v1.FlockerVolumeSource" - }, - "gcePersistentDisk": { - "description": "gcePersistentDisk represents a GCE Disk resource that is attached to a kubelet's host machine and then exposed to the pod. Provisioned by an admin. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", - "$ref": "#/definitions/io.k8s.api.core.v1.GCEPersistentDiskVolumeSource" - }, - "glusterfs": { - "description": "glusterfs represents a Glusterfs volume that is attached to a host and exposed to the pod. Provisioned by an admin. More info: https://examples.k8s.io/volumes/glusterfs/README.md", - "$ref": "#/definitions/io.k8s.api.core.v1.GlusterfsPersistentVolumeSource" - }, - "hostPath": { - "description": "hostPath represents a directory on the host. Provisioned by a developer or tester. This is useful for single-node development and testing only! On-host storage is not supported in any way and WILL NOT WORK in a multi-node cluster. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath", - "$ref": "#/definitions/io.k8s.api.core.v1.HostPathVolumeSource" - }, - "iscsi": { - "description": "iscsi represents an ISCSI Disk resource that is attached to a kubelet's host machine and then exposed to the pod. Provisioned by an admin.", - "$ref": "#/definitions/io.k8s.api.core.v1.ISCSIPersistentVolumeSource" - }, - "local": { - "description": "local represents directly-attached storage with node affinity", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalVolumeSource" - }, - "nfs": { - "description": "nfs represents an NFS mount on the host. Provisioned by an admin. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs", - "$ref": "#/definitions/io.k8s.api.core.v1.NFSVolumeSource" - }, - "photonPersistentDisk": { - "description": "photonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine", - "$ref": "#/definitions/io.k8s.api.core.v1.PhotonPersistentDiskVolumeSource" - }, - "portworxVolume": { - "description": "portworxVolume represents a portworx volume attached and mounted on kubelets host machine", - "$ref": "#/definitions/io.k8s.api.core.v1.PortworxVolumeSource" - }, - "quobyte": { - "description": "quobyte represents a Quobyte mount on the host that shares a pod's lifetime", - "$ref": "#/definitions/io.k8s.api.core.v1.QuobyteVolumeSource" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "rbd": { - "description": "rbd represents a Rados Block Device mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md", - "$ref": "#/definitions/io.k8s.api.core.v1.RBDPersistentVolumeSource" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "scaleIO": { - "description": "scaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes.", - "$ref": "#/definitions/io.k8s.api.core.v1.ScaleIOPersistentVolumeSource" + "path": { + "description": "Path is the URL path to use for the current proxy request to node.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "NodeProxyOptions", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.NodeRuntimeHandler": { + "description": "NodeRuntimeHandler is a set of runtime handler information.", + "type": "object", + "properties": { + "features": { + "description": "Supported features.", + "$ref": "#/definitions/io.k8s.api.core.v1.NodeRuntimeHandlerFeatures" }, - "storageos": { - "description": "storageOS represents a StorageOS volume that is attached to the kubelet's host machine and mounted into the pod More info: https://examples.k8s.io/volumes/storageos/README.md", - "$ref": "#/definitions/io.k8s.api.core.v1.StorageOSPersistentVolumeSource" + "name": { + "description": "Runtime handler name. Empty for the default runtime handler.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "NodeRuntimeHandler", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.NodeRuntimeHandlerFeatures": { + "description": "NodeRuntimeHandlerFeatures is a set of features implemented by the runtime handler.", + "type": "object", + "properties": { + "recursiveReadOnlyMounts": { + "description": "RecursiveReadOnlyMounts is set to true if the runtime handler supports RecursiveReadOnlyMounts.", + "type": "boolean" }, - "vsphereVolume": { - "description": "vsphereVolume represents a vSphere volume attached and mounted on kubelets host machine", - "$ref": "#/definitions/io.k8s.api.core.v1.VsphereVirtualDiskVolumeSource" + "userNamespaces": { + "description": "UserNamespaces is set to true if the runtime handler supports UserNamespaces, including for volumes.", + "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PersistentVolumeSource", + "Kind": "NodeRuntimeHandlerFeatures", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PersistentVolumeSpec": { - "description": "PersistentVolumeSpec is the specification of a persistent volume.", + "io.k8s.api.core.v1.NodeSelector": { + "description": "A node selector represents the union of the results of one or more label queries over a set of nodes; that is, it represents the OR of the selectors represented by the node selector terms.", "type": "object", + "required": [ + "nodeSelectorTerms" + ], "properties": { - "accessModes": { - "description": "accessModes contains all ways the volume can be mounted. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes", + "nodeSelectorTerms": { + "description": "Required. A list of node selector terms. The terms are ORed.", "type": "array", "items": { - "type": "string", - "default": "", - "enum": [ - "ReadOnlyMany", - "ReadWriteMany", - "ReadWriteOnce", - "ReadWriteOncePod" - ] + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelectorTerm" }, "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "NodeSelector", + "Scope": "Namespaced" + }, + "x-kubernetes-map-type": "atomic" + }, + "io.k8s.api.core.v1.NodeSelectorRequirement": { + "description": "A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values.", + "type": "object", + "required": [ + "key", + "operator" + ], + "properties": { + "key": { + "description": "The label key that the selector applies to.", + "type": "string", + "default": "" }, - "awsElasticBlockStore": { - "description": "awsElasticBlockStore represents an AWS Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore", - "$ref": "#/definitions/io.k8s.api.core.v1.AWSElasticBlockStoreVolumeSource" - }, - "azureDisk": { - "description": "azureDisk represents an Azure Data Disk mount on the host and bind mount to the pod.", - "$ref": "#/definitions/io.k8s.api.core.v1.AzureDiskVolumeSource" - }, - "azureFile": { - "description": "azureFile represents an Azure File Service mount on the host and bind mount to the pod.", - "$ref": "#/definitions/io.k8s.api.core.v1.AzureFilePersistentVolumeSource" + "operator": { + "description": "Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.\n\nPossible enum values:\n - `\"DoesNotExist\"`\n - `\"Exists\"`\n - `\"Gt\"`\n - `\"In\"`\n - `\"Lt\"`\n - `\"NotIn\"`", + "type": "string", + "default": "", + "enum": [ + "DoesNotExist", + "Exists", + "Gt", + "In", + "Lt", + "NotIn" + ] }, - "capacity": { - "description": "capacity is the description of the persistent volume's resources and capacity. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#capacity", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } + "values": { + "description": "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "NodeSelectorRequirement", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.NodeSelectorTerm": { + "description": "A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.", + "type": "object", + "properties": { + "matchExpressions": { + "description": "A list of node selector requirements by node's labels.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelectorRequirement" + }, + "x-kubernetes-list-type": "atomic" }, - "cephfs": { - "description": "cephFS represents a Ceph FS mount on the host that shares a pod's lifetime", - "$ref": "#/definitions/io.k8s.api.core.v1.CephFSPersistentVolumeSource" + "matchFields": { + "description": "A list of node selector requirements by node's fields.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelectorRequirement" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "NodeSelectorTerm", + "Scope": "Namespaced" + }, + "x-kubernetes-map-type": "atomic" + }, + "io.k8s.api.core.v1.NodeSpec": { + "description": "NodeSpec describes the attributes that a node is created with.", + "type": "object", + "properties": { + "configSource": { + "description": "Deprecated: Previously used to specify the source of the node's configuration for the DynamicKubeletConfig feature. This feature is removed.", + "$ref": "#/definitions/io.k8s.api.core.v1.NodeConfigSource" }, - "cinder": { - "description": "cinder represents a cinder volume attached and mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", - "$ref": "#/definitions/io.k8s.api.core.v1.CinderPersistentVolumeSource" + "externalID": { + "description": "Deprecated. Not all kubelets will set this field. Remove field after 1.13. see: https://issues.k8s.io/61966", + "type": "string" }, - "claimRef": { - "description": "claimRef is part of a bi-directional binding between PersistentVolume and PersistentVolumeClaim. Expected to be non-nil when bound. claim.VolumeName is the authoritative bind between PV and PVC. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#binding", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference", - "x-kubernetes-map-type": "granular" + "podCIDR": { + "description": "PodCIDR represents the pod IP range assigned to the node.", + "type": "string" }, - "csi": { - "description": "csi represents storage that is handled by an external CSI driver (Beta feature).", - "$ref": "#/definitions/io.k8s.api.core.v1.CSIPersistentVolumeSource" + "podCIDRs": { + "description": "podCIDRs represents the IP ranges assigned to the node for usage by Pods on that node. If this field is specified, the 0th entry must match the podCIDR field. It may contain at most 1 value for each of IPv4 and IPv6.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set", + "x-kubernetes-patch-strategy": "merge" }, - "fc": { - "description": "fc represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod.", - "$ref": "#/definitions/io.k8s.api.core.v1.FCVolumeSource" + "providerID": { + "description": "ID of the node assigned by the cloud provider in the format: \u003cProviderName\u003e://\u003cProviderSpecificNodeID\u003e", + "type": "string" }, - "flexVolume": { - "description": "flexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.", - "$ref": "#/definitions/io.k8s.api.core.v1.FlexPersistentVolumeSource" + "taints": { + "description": "If specified, the node's taints.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.Taint" + }, + "x-kubernetes-list-type": "atomic" }, - "flocker": { - "description": "flocker represents a Flocker volume attached to a kubelet's host machine and exposed to the pod for its usage. This depends on the Flocker control service being running", - "$ref": "#/definitions/io.k8s.api.core.v1.FlockerVolumeSource" + "unschedulable": { + "description": "Unschedulable controls node schedulability of new pods. By default, node is schedulable. More info: https://kubernetes.io/docs/concepts/nodes/node/#manual-node-administration", + "type": "boolean" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "NodeSpec", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.NodeStatus": { + "description": "NodeStatus is information about the current status of a node.", + "type": "object", + "properties": { + "addresses": { + "description": "List of addresses reachable to the node. Queried from cloud provider, if available. More info: https://kubernetes.io/docs/concepts/nodes/node/#addresses Note: This field is declared as mergeable, but the merge key is not sufficiently unique, which can cause data corruption when it is merged. Callers should instead use a full-replacement patch. See https://pr.k8s.io/79391 for an example. Consumers should assume that addresses can change during the lifetime of a Node. However, there are some exceptions where this may not be possible, such as Pods that inherit a Node's address in its own status or consumers of the downward API (status.hostIP).", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.NodeAddress" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" }, - "gcePersistentDisk": { - "description": "gcePersistentDisk represents a GCE Disk resource that is attached to a kubelet's host machine and then exposed to the pod. Provisioned by an admin. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", - "$ref": "#/definitions/io.k8s.api.core.v1.GCEPersistentDiskVolumeSource" + "allocatable": { + "description": "Allocatable represents the resources of a node that are available for scheduling. Defaults to Capacity.", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } }, - "glusterfs": { - "description": "glusterfs represents a Glusterfs volume that is attached to a host and exposed to the pod. Provisioned by an admin. More info: https://examples.k8s.io/volumes/glusterfs/README.md", - "$ref": "#/definitions/io.k8s.api.core.v1.GlusterfsPersistentVolumeSource" + "capacity": { + "description": "Capacity represents the total resources of a node. More info: https://kubernetes.io/docs/reference/node/node-status/#capacity", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } }, - "hostPath": { - "description": "hostPath represents a directory on the host. Provisioned by a developer or tester. This is useful for single-node development and testing only! On-host storage is not supported in any way and WILL NOT WORK in a multi-node cluster. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath", - "$ref": "#/definitions/io.k8s.api.core.v1.HostPathVolumeSource" + "conditions": { + "description": "Conditions is an array of current observed node conditions. More info: https://kubernetes.io/docs/concepts/nodes/node/#condition", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.NodeCondition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" }, - "iscsi": { - "description": "iscsi represents an ISCSI Disk resource that is attached to a kubelet's host machine and then exposed to the pod. Provisioned by an admin.", - "$ref": "#/definitions/io.k8s.api.core.v1.ISCSIPersistentVolumeSource" + "config": { + "description": "Status of the config assigned to the node via the dynamic Kubelet config feature.", + "$ref": "#/definitions/io.k8s.api.core.v1.NodeConfigStatus" }, - "local": { - "description": "local represents directly-attached storage with node affinity", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalVolumeSource" + "daemonEndpoints": { + "description": "Endpoints of daemons running on the Node.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.NodeDaemonEndpoints" }, - "mountOptions": { - "description": "mountOptions is the list of mount options, e.g. [\"ro\", \"soft\"]. Not validated - mount will simply fail if one is invalid. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes/#mount-options", + "features": { + "description": "Features describes the set of features implemented by the CRI implementation.", + "$ref": "#/definitions/io.k8s.api.core.v1.NodeFeatures" + }, + "images": { + "description": "List of container images on this node", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerImage" }, "x-kubernetes-list-type": "atomic" }, - "nfs": { - "description": "nfs represents an NFS mount on the host. Provisioned by an admin. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs", - "$ref": "#/definitions/io.k8s.api.core.v1.NFSVolumeSource" - }, - "nodeAffinity": { - "description": "nodeAffinity defines constraints that limit what nodes this volume can be accessed from. This field influences the scheduling of pods that use this volume.", - "$ref": "#/definitions/io.k8s.api.core.v1.VolumeNodeAffinity" + "nodeInfo": { + "description": "Set of ids/uuids to uniquely identify the node. More info: https://kubernetes.io/docs/concepts/nodes/node/#info", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.NodeSystemInfo" }, - "persistentVolumeReclaimPolicy": { - "description": "persistentVolumeReclaimPolicy defines what happens to a persistent volume when released from its claim. Valid options are Retain (default for manually created PersistentVolumes), Delete (default for dynamically provisioned PersistentVolumes), and Recycle (deprecated). Recycle must be supported by the volume plugin underlying this PersistentVolume. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#reclaiming\n\nPossible enum values:\n - `\"Delete\"` means the volume will be deleted from Kubernetes on release from its claim. The volume plugin must support Deletion.\n - `\"Recycle\"` means the volume will be recycled back into the pool of unbound persistent volumes on release from its claim. The volume plugin must support Recycling.\n - `\"Retain\"` means the volume will be left in its current phase (Released) for manual reclamation by the administrator. The default policy is Retain.", + "phase": { + "description": "NodePhase is the recently observed lifecycle phase of the node. More info: https://kubernetes.io/docs/concepts/nodes/node/#phase The field is never populated, and now is deprecated.\n\nPossible enum values:\n - `\"Pending\"` means the node has been created/added by the system, but not configured.\n - `\"Running\"` means the node has been configured and has Kubernetes components running.\n - `\"Terminated\"` means the node has been removed from the cluster.", "type": "string", "enum": [ - "Delete", - "Recycle", - "Retain" + "Pending", + "Running", + "Terminated" ] }, - "photonPersistentDisk": { - "description": "photonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine", - "$ref": "#/definitions/io.k8s.api.core.v1.PhotonPersistentDiskVolumeSource" + "runtimeHandlers": { + "description": "The available runtime handlers.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.NodeRuntimeHandler" + }, + "x-kubernetes-list-type": "atomic" }, - "portworxVolume": { - "description": "portworxVolume represents a portworx volume attached and mounted on kubelets host machine", - "$ref": "#/definitions/io.k8s.api.core.v1.PortworxVolumeSource" + "volumesAttached": { + "description": "List of volumes that are attached to the node.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.AttachedVolume" + }, + "x-kubernetes-list-type": "atomic" }, - "quobyte": { - "description": "quobyte represents a Quobyte mount on the host that shares a pod's lifetime", - "$ref": "#/definitions/io.k8s.api.core.v1.QuobyteVolumeSource" + "volumesInUse": { + "description": "List of attachable volumes in use (mounted) by the node.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "NodeStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.NodeSystemInfo": { + "description": "NodeSystemInfo is a set of ids/uuids to uniquely identify the node.", + "type": "object", + "required": [ + "machineID", + "systemUUID", + "bootID", + "kernelVersion", + "osImage", + "containerRuntimeVersion", + "kubeletVersion", + "kubeProxyVersion", + "operatingSystem", + "architecture" + ], + "properties": { + "architecture": { + "description": "The Architecture reported by the node", + "type": "string", + "default": "" }, - "rbd": { - "description": "rbd represents a Rados Block Device mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md", - "$ref": "#/definitions/io.k8s.api.core.v1.RBDPersistentVolumeSource" + "bootID": { + "description": "Boot ID reported by the node.", + "type": "string", + "default": "" }, - "scaleIO": { - "description": "scaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes.", - "$ref": "#/definitions/io.k8s.api.core.v1.ScaleIOPersistentVolumeSource" + "containerRuntimeVersion": { + "description": "ContainerRuntime Version reported by the node through runtime remote API (e.g. containerd://1.4.2).", + "type": "string", + "default": "" }, - "storageClassName": { - "description": "storageClassName is the name of StorageClass to which this persistent volume belongs. Empty value means that this volume does not belong to any StorageClass.", - "type": "string" + "kernelVersion": { + "description": "Kernel Version reported by the node from 'uname -r' (e.g. 3.16.0-0.bpo.4-amd64).", + "type": "string", + "default": "" }, - "storageos": { - "description": "storageOS represents a StorageOS volume that is attached to the kubelet's host machine and mounted into the pod More info: https://examples.k8s.io/volumes/storageos/README.md", - "$ref": "#/definitions/io.k8s.api.core.v1.StorageOSPersistentVolumeSource" + "kubeProxyVersion": { + "description": "Deprecated: KubeProxy Version reported by the node.", + "type": "string", + "default": "" }, - "volumeAttributesClassName": { - "description": "Name of VolumeAttributesClass to which this persistent volume belongs. Empty value is not allowed. When this field is not set, it indicates that this volume does not belong to any VolumeAttributesClass. This field is mutable and can be changed by the CSI driver after a volume has been updated successfully to a new class. For an unbound PersistentVolume, the volumeAttributesClassName will be matched with unbound PersistentVolumeClaims during the binding process. This is a beta field and requires enabling VolumeAttributesClass feature (off by default).", - "type": "string" + "kubeletVersion": { + "description": "Kubelet Version reported by the node.", + "type": "string", + "default": "" }, - "volumeMode": { - "description": "volumeMode defines if a volume is intended to be used with a formatted filesystem or to remain in raw block state. Value of Filesystem is implied when not included in spec.\n\nPossible enum values:\n - `\"Block\"` means the volume will not be formatted with a filesystem and will remain a raw block device.\n - `\"Filesystem\"` means the volume will be or is formatted with a filesystem.", + "machineID": { + "description": "MachineID reported by the node. For unique machine identification in the cluster this field is preferred. Learn more from man(5) machine-id: http://man7.org/linux/man-pages/man5/machine-id.5.html", "type": "string", - "enum": [ - "Block", - "Filesystem" - ] + "default": "" }, - "vsphereVolume": { - "description": "vsphereVolume represents a vSphere volume attached and mounted on kubelets host machine", - "$ref": "#/definitions/io.k8s.api.core.v1.VsphereVirtualDiskVolumeSource" + "operatingSystem": { + "description": "The Operating System reported by the node", + "type": "string", + "default": "" + }, + "osImage": { + "description": "OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).", + "type": "string", + "default": "" + }, + "systemUUID": { + "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PersistentVolumeSpec", + "Kind": "NodeSystemInfo", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PersistentVolumeStatus": { - "description": "PersistentVolumeStatus is the current status of a persistent volume.", + "io.k8s.api.core.v1.ObjectFieldSelector": { + "description": "ObjectFieldSelector selects an APIVersioned field of an object.", "type": "object", + "required": [ + "fieldPath" + ], "properties": { - "lastPhaseTransitionTime": { - "description": "lastPhaseTransitionTime is the time the phase transitioned from one to another and automatically resets to current time everytime a volume phase transitions.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "message is a human-readable message indicating details about why the volume is in this state.", + "apiVersion": { + "description": "Version of the schema the FieldPath is written in terms of, defaults to \"v1\".", "type": "string" }, - "phase": { - "description": "phase indicates if a volume is available, bound to a claim, or released by a claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#phase\n\nPossible enum values:\n - `\"Available\"` used for PersistentVolumes that are not yet bound Available volumes are held by the binder and matched to PersistentVolumeClaims\n - `\"Bound\"` used for PersistentVolumes that are bound\n - `\"Failed\"` used for PersistentVolumes that failed to be correctly recycled or deleted after being released from a claim\n - `\"Pending\"` used for PersistentVolumes that are not available\n - `\"Released\"` used for PersistentVolumes where the bound PersistentVolumeClaim was deleted released volumes must be recycled before becoming available again this phase is used by the persistent volume claim binder to signal to another process to reclaim the resource", + "fieldPath": { + "description": "Path of the field to select in the specified API version.", "type": "string", - "enum": [ - "Available", - "Bound", - "Failed", - "Pending", - "Released" - ] - }, - "reason": { - "description": "reason is a brief CamelCase string that describes any failure and is meant for machine parsing and tidy display in the CLI.", - "type": "string" + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PersistentVolumeStatus", + "Kind": "ObjectFieldSelector", "Scope": "Namespaced" - } + }, + "x-kubernetes-map-type": "atomic" }, - "io.k8s.api.core.v1.PhotonPersistentDiskVolumeSource": { - "description": "Represents a Photon Controller persistent disk resource.", + "io.k8s.api.core.v1.ObjectReference": { + "description": "ObjectReference contains enough information to let you inspect or modify the referred object.", "type": "object", - "required": [ - "pdID" - ], "properties": { - "fsType": { - "description": "fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified.", + "apiVersion": { + "description": "API version of the referent.", "type": "string" }, - "pdID": { - "description": "pdID is the ID that identifies Photon Controller persistent disk", - "type": "string", - "default": "" + "fieldPath": { + "description": "If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: \"spec.containers{name}\" (where \"name\" refers to the name of the container that triggered the event) or if no container name is specified \"spec.containers[2]\" (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object.", + "type": "string" + }, + "kind": { + "description": "Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "name": { + "description": "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string" + }, + "namespace": { + "description": "Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/", + "type": "string" + }, + "resourceVersion": { + "description": "Specific resourceVersion to which this reference is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency", + "type": "string" + }, + "uid": { + "description": "UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PhotonPersistentDiskVolumeSource", + "Kind": "ObjectReference", "Scope": "Namespaced" - } + }, + "x-kubernetes-map-type": "atomic" }, - "io.k8s.api.core.v1.Pod": { - "description": "Pod is a collection of containers that can run on a host. This resource is created by clients and scheduled onto hosts.", + "io.k8s.api.core.v1.PersistentVolume": { + "description": "PersistentVolume (PV) is a storage resource provisioned by an administrator. It is analogous to a node. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes", "type": "object", "properties": { "apiVersion": { @@ -33606,362 +34365,345 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "spec defines a specification of a persistent volume owned by the cluster. Provisioned by an administrator. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistent-volumes", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodSpec" + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeSpec" }, "status": { - "description": "Most recently observed status of the pod. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "status represents the current information/status for the persistent volume. Populated by the system. Read-only. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistent-volumes", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodStatus" + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "", "Version": "v1", - "Kind": "Pod", - "Scope": "Namespaced" + "Kind": "PersistentVolume", + "Scope": "Clustered" } }, - "io.k8s.api.core.v1.PodAffinity": { - "description": "Pod affinity is a group of inter pod affinity scheduling rules.", + "io.k8s.api.core.v1.PersistentVolumeClaim": { + "description": "PersistentVolumeClaim is a user's request for and claim to a persistent volume", "type": "object", "properties": { - "preferredDuringSchedulingIgnoredDuringExecution": { - "description": "The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.WeightedPodAffinityTerm" - }, - "x-kubernetes-list-type": "atomic" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "requiredDuringSchedulingIgnoredDuringExecution": { - "description": "If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodAffinityTerm" - }, - "x-kubernetes-list-type": "atomic" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "spec defines the desired characteristics of a volume requested by a pod author. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimSpec" + }, + "status": { + "description": "status represents the current information/status of a persistent volume claim. Read-only. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimStatus" } }, "x-fabric8-info": { - "Type": "nested", + "Type": "object", "Group": "", "Version": "v1", - "Kind": "PodAffinity", + "Kind": "PersistentVolumeClaim", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodAffinityTerm": { - "description": "Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key \u003ctopologyKey\u003e matches that of any node on which a pod of the set of pods is running", + "io.k8s.api.core.v1.PersistentVolumeClaimCondition": { + "description": "PersistentVolumeClaimCondition contains details about state of pvc", "type": "object", "required": [ - "topologyKey" + "type", + "status" ], "properties": { - "labelSelector": { - "description": "A label query over a set of resources, in this case pods. If it's null, this PodAffinityTerm matches with no Pods.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "lastProbeTime": { + "description": "lastProbeTime is the time we probed the condition.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "matchLabelKeys": { - "description": "MatchLabelKeys is a set of pod label keys to select which pods will be taken into consideration. The keys are used to lookup values from the incoming pod labels, those key-value labels are merged with `labelSelector` as `key in (value)` to select the group of existing pods which pods will be taken into consideration for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "mismatchLabelKeys": { - "description": "MismatchLabelKeys is a set of pod label keys to select which pods will be taken into consideration. The keys are used to lookup values from the incoming pod labels, those key-value labels are merged with `labelSelector` as `key notin (value)` to select the group of existing pods which pods will be taken into consideration for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "lastTransitionTime": { + "description": "lastTransitionTime is the time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "namespaceSelector": { - "description": "A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means \"this pod's namespace\". An empty selector ({}) matches all namespaces.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "message": { + "description": "message is the human-readable message indicating details about last transition.", + "type": "string" }, - "namespaces": { - "description": "namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means \"this pod's namespace\".", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "reason": { + "description": "reason is a unique, this should be a short, machine understandable string that gives the reason for condition's last transition. If it reports \"Resizing\" that means the underlying persistent volume is being resized.", + "type": "string" }, - "topologyKey": { - "description": "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.", + "status": { "type": "string", "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "PodAffinityTerm", - "Scope": "Namespaced" - } - }, - "io.k8s.api.core.v1.PodAntiAffinity": { - "description": "Pod anti affinity is a group of inter pod anti affinity scheduling rules.", - "type": "object", - "properties": { - "preferredDuringSchedulingIgnoredDuringExecution": { - "description": "The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.WeightedPodAffinityTerm" - }, - "x-kubernetes-list-type": "atomic" }, - "requiredDuringSchedulingIgnoredDuringExecution": { - "description": "If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodAffinityTerm" - }, - "x-kubernetes-list-type": "atomic" + "type": { + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PodAntiAffinity", + "Kind": "PersistentVolumeClaimCondition", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodAttachOptions": { - "description": "PodAttachOptions is the query options to a Pod's remote attach call.", + "io.k8s.api.core.v1.PersistentVolumeClaimList": { + "description": "PersistentVolumeClaimList is a list of PersistentVolumeClaim items.", "type": "object", + "required": [ + "items" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "container": { - "description": "The container in which to execute the command. Defaults to only container if there is only one container in the pod.", - "type": "string" + "items": { + "description": "items is a list of persistent volume claims. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaim" + } }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "stderr": { - "description": "Stderr if true indicates that stderr is to be redirected for the attach call. Defaults to true.", - "type": "boolean" - }, - "stdin": { - "description": "Stdin if true, redirects the standard input stream of the pod for this call. Defaults to false.", - "type": "boolean" - }, - "stdout": { - "description": "Stdout if true indicates that stdout is to be redirected for the attach call. Defaults to true.", - "type": "boolean" - }, - "tty": { - "description": "TTY if true indicates that a tty will be allocated for the attach call. This is passed through the container runtime so the tty is allocated on the worker node by the container runtime. Defaults to false.", - "type": "boolean" + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "object", + "Type": "list", "Group": "", "Version": "v1", - "Kind": "PodAttachOptions", + "Kind": "PersistentVolumeClaimList", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodCondition": { - "description": "PodCondition contains details for the current condition of this pod.", + "io.k8s.api.core.v1.PersistentVolumeClaimSpec": { + "description": "PersistentVolumeClaimSpec describes the common attributes of storage devices and allows a Source for provider-specific attributes", "type": "object", - "required": [ - "type", - "status" - ], "properties": { - "lastProbeTime": { - "description": "Last time we probed the condition.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "accessModes": { + "description": "accessModes contains the desired access modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1", + "type": "array", + "items": { + "type": "string", + "default": "", + "enum": [ + "ReadOnlyMany", + "ReadWriteMany", + "ReadWriteOnce", + "ReadWriteOncePod" + ] + }, + "x-kubernetes-list-type": "atomic" }, - "lastTransitionTime": { - "description": "Last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "dataSource": { + "description": "dataSource field can be used to specify either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified. If the namespace is specified, then dataSourceRef will not be copied to dataSource.", + "$ref": "#/definitions/io.k8s.api.core.v1.TypedLocalObjectReference" }, - "message": { - "description": "Human-readable message indicating details about last transition.", + "dataSourceRef": { + "description": "dataSourceRef specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the dataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, when namespace isn't specified in dataSourceRef, both fields (dataSource and dataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. When namespace is specified in dataSourceRef, dataSource isn't set to the same value and must be empty. There are three important differences between dataSource and dataSourceRef: * While dataSource only allows two specific types of objects, dataSourceRef\n allows any non-core object, as well as PersistentVolumeClaim objects.\n* While dataSource ignores disallowed values (dropping them), dataSourceRef\n preserves all values, and generates an error if a disallowed value is\n specified.\n* While dataSource only allows local objects, dataSourceRef allows objects\n in any namespaces.\n(Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled. (Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.", + "$ref": "#/definitions/io.k8s.api.core.v1.TypedObjectReference" + }, + "resources": { + "description": "resources represents the minimum resources the volume should have. If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements that are lower than previous value but must still be higher than capacity recorded in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.VolumeResourceRequirements" + }, + "selector": { + "description": "selector is a label query over volumes to consider for binding.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "storageClassName": { + "description": "storageClassName is the name of the StorageClass required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1", "type": "string" }, - "reason": { - "description": "Unique, one-word, CamelCase reason for the condition's last transition.", + "volumeAttributesClassName": { + "description": "volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim. If specified, the CSI driver will create or update the volume with the attributes defined in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName, it can be changed after the claim is created. An empty string value means that no VolumeAttributesClass will be applied to the claim but it's not allowed to reset this field to empty string once it is set. If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClass will be set by the persistentvolume controller if it exists. If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource exists. More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/ (Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).", "type": "string" }, - "status": { - "description": "Status is the status of the condition. Can be True, False, Unknown. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions", + "volumeMode": { + "description": "volumeMode defines what type of volume is required by the claim. Value of Filesystem is implied when not included in claim spec.\n\nPossible enum values:\n - `\"Block\"` means the volume will not be formatted with a filesystem and will remain a raw block device.\n - `\"Filesystem\"` means the volume will be or is formatted with a filesystem.", "type": "string", - "default": "" + "enum": [ + "Block", + "Filesystem" + ] }, - "type": { - "description": "Type is the type of the condition. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions", - "type": "string", - "default": "" + "volumeName": { + "description": "volumeName is the binding reference to the PersistentVolume backing this claim.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PodCondition", + "Kind": "PersistentVolumeClaimSpec", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodDNSConfig": { - "description": "PodDNSConfig defines the DNS parameters of a pod in addition to those generated from DNSPolicy.", + "io.k8s.api.core.v1.PersistentVolumeClaimStatus": { + "description": "PersistentVolumeClaimStatus is the current status of a persistent volume claim.", "type": "object", "properties": { - "nameservers": { - "description": "A list of DNS name server IP addresses. This will be appended to the base nameservers generated from DNSPolicy. Duplicated nameservers will be removed.", + "accessModes": { + "description": "accessModes contains the actual access modes the volume backing the PVC has. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1", "type": "array", "items": { "type": "string", - "default": "" + "default": "", + "enum": [ + "ReadOnlyMany", + "ReadWriteMany", + "ReadWriteOnce", + "ReadWriteOncePod" + ] }, "x-kubernetes-list-type": "atomic" }, - "options": { - "description": "A list of DNS resolver options. This will be merged with the base options generated from DNSPolicy. Duplicated entries will be removed. Resolution options given in Options will override those that appear in the base DNSPolicy.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodDNSConfigOption" + "allocatedResourceStatuses": { + "description": "allocatedResourceStatuses stores status of resource being resized for the given PVC. Key names follow standard Kubernetes label syntax. Valid values are either:\n\t* Un-prefixed keys:\n\t\t- storage - the capacity of the volume.\n\t* Custom resources must use implementation-defined prefixed names such as \"example.com/my-custom-resource\"\nApart from above values - keys that are unprefixed or have kubernetes.io prefix are considered reserved and hence may not be used.\n\nClaimResourceStatus can be in any of following states:\n\t- ControllerResizeInProgress:\n\t\tState set when resize controller starts resizing the volume in control-plane.\n\t- ControllerResizeFailed:\n\t\tState set when resize has failed in resize controller with a terminal error.\n\t- NodeResizePending:\n\t\tState set when resize controller has finished resizing the volume but further resizing of\n\t\tvolume is needed on the node.\n\t- NodeResizeInProgress:\n\t\tState set when kubelet starts resizing the volume.\n\t- NodeResizeFailed:\n\t\tState set when resizing has failed in kubelet with a terminal error. Transient errors don't set\n\t\tNodeResizeFailed.\nFor example: if expanding a PVC for more capacity - this field can be one of the following states:\n\t- pvc.status.allocatedResourceStatus['storage'] = \"ControllerResizeInProgress\"\n - pvc.status.allocatedResourceStatus['storage'] = \"ControllerResizeFailed\"\n - pvc.status.allocatedResourceStatus['storage'] = \"NodeResizePending\"\n - pvc.status.allocatedResourceStatus['storage'] = \"NodeResizeInProgress\"\n - pvc.status.allocatedResourceStatus['storage'] = \"NodeResizeFailed\"\nWhen this field is not set, it means that no resize operation is in progress for the given PVC.\n\nA controller that receives PVC update with previously unknown resourceName or ClaimResourceStatus should ignore the update for the purpose it was designed. For example - a controller that only is responsible for resizing capacity of the volume, should ignore PVC updates that change other valid resources associated with PVC.\n\nThis is an alpha field and requires enabling RecoverVolumeExpansionFailure feature.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "", + "enum": [ + "ControllerResizeInProgress", + "ControllerResizeInfeasible", + "NodeResizeInProgress", + "NodeResizeInfeasible", + "NodeResizePending" + ] }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-map-type": "granular" }, - "searches": { - "description": "A list of DNS search domains for host-name lookup. This will be appended to the base search paths generated from DNSPolicy. Duplicated search paths will be removed.", + "allocatedResources": { + "description": "allocatedResources tracks the resources allocated to a PVC including its capacity. Key names follow standard Kubernetes label syntax. Valid values are either:\n\t* Un-prefixed keys:\n\t\t- storage - the capacity of the volume.\n\t* Custom resources must use implementation-defined prefixed names such as \"example.com/my-custom-resource\"\nApart from above values - keys that are unprefixed or have kubernetes.io prefix are considered reserved and hence may not be used.\n\nCapacity reported here may be larger than the actual capacity when a volume expansion operation is requested. For storage quota, the larger value from allocatedResources and PVC.spec.resources is used. If allocatedResources is not set, PVC.spec.resources alone is used for quota calculation. If a volume expansion capacity request is lowered, allocatedResources is only lowered if there are no expansion operations in progress and if the actual volume capacity is equal or lower than the requested capacity.\n\nA controller that receives PVC update with previously unknown resourceName should ignore the update for the purpose it was designed. For example - a controller that only is responsible for resizing capacity of the volume, should ignore PVC updates that change other valid resources associated with PVC.\n\nThis is an alpha field and requires enabling RecoverVolumeExpansionFailure feature.", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } + }, + "capacity": { + "description": "capacity represents the actual resources of the underlying volume.", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } + }, + "conditions": { + "description": "conditions is the current Condition of persistent volume claim. If underlying persistent volume is being resized then the Condition will be set to 'Resizing'.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimCondition" }, - "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "PodDNSConfig", - "Scope": "Namespaced" - } - }, - "io.k8s.api.core.v1.PodDNSConfigOption": { - "description": "PodDNSConfigOption defines DNS resolver options of a pod.", - "type": "object", - "properties": { - "name": { - "description": "Required.", - "type": "string" + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" }, - "value": { + "currentVolumeAttributesClassName": { + "description": "currentVolumeAttributesClassName is the current name of the VolumeAttributesClass the PVC is using. When unset, there is no VolumeAttributeClass applied to this PersistentVolumeClaim This is a beta field and requires enabling VolumeAttributesClass feature (off by default).", "type": "string" + }, + "modifyVolumeStatus": { + "description": "ModifyVolumeStatus represents the status object of ControllerModifyVolume operation. When this is unset, there is no ModifyVolume operation being attempted. This is a beta field and requires enabling VolumeAttributesClass feature (off by default).", + "$ref": "#/definitions/io.k8s.api.core.v1.ModifyVolumeStatus" + }, + "phase": { + "description": "phase represents the current phase of PersistentVolumeClaim.\n\nPossible enum values:\n - `\"Bound\"` used for PersistentVolumeClaims that are bound\n - `\"Lost\"` used for PersistentVolumeClaims that lost their underlying PersistentVolume. The claim was bound to a PersistentVolume and this volume does not exist any longer and all data on it was lost.\n - `\"Pending\"` used for PersistentVolumeClaims that are not yet bound", + "type": "string", + "enum": [ + "Bound", + "Lost", + "Pending" + ] } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PodDNSConfigOption", + "Kind": "PersistentVolumeClaimStatus", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodExecOptions": { - "description": "PodExecOptions is the query options to a Pod's remote exec call.", + "io.k8s.api.core.v1.PersistentVolumeClaimTemplate": { + "description": "PersistentVolumeClaimTemplate is used to produce PersistentVolumeClaim objects as part of an EphemeralVolumeSource.", "type": "object", "required": [ - "command" + "spec" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "command": { - "description": "Command is the remote command to execute. argv array. Not executed within a shell.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "container": { - "description": "Container in which to execute the command. Defaults to only container if there is only one container in the pod.", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "stderr": { - "description": "Redirect the standard error stream of the pod for this call.", - "type": "boolean" - }, - "stdin": { - "description": "Redirect the standard input stream of the pod for this call. Defaults to false.", - "type": "boolean" - }, - "stdout": { - "description": "Redirect the standard output stream of the pod for this call.", - "type": "boolean" + "metadata": { + "description": "May contain labels and annotations that will be copied into the PVC when creating it. No other fields are allowed and will be rejected during validation.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "tty": { - "description": "TTY if true indicates that a tty will be allocated for the exec call. Defaults to false.", - "type": "boolean" + "spec": { + "description": "The specification for the PersistentVolumeClaim. The entire content is copied unchanged into the PVC that gets created from this template. The same fields as in a PersistentVolumeClaim are also valid here.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimSpec" } }, "x-fabric8-info": { - "Type": "object", + "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PodExecOptions", + "Kind": "PersistentVolumeClaimTemplate", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodIP": { - "description": "PodIP represents a single IP address allocated to the pod.", + "io.k8s.api.core.v1.PersistentVolumeClaimVolumeSource": { + "description": "PersistentVolumeClaimVolumeSource references the user's PVC in the same namespace. This volume finds the bound PV and mounts that volume for the pod. A PersistentVolumeClaimVolumeSource is, essentially, a wrapper around another type of volume that is owned by someone else (the system).", "type": "object", "required": [ - "ip" + "claimName" ], "properties": { - "ip": { - "description": "IP is the IP address assigned to the pod", + "claimName": { + "description": "claimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims", "type": "string", "default": "" + }, + "readOnly": { + "description": "readOnly Will force the ReadOnly setting in VolumeMounts. Default false.", + "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PodIP", + "Kind": "PersistentVolumeClaimVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodList": { - "description": "PodList is a list of Pods.", + "io.k8s.api.core.v1.PersistentVolumeList": { + "description": "PersistentVolumeList is a list of PersistentVolume items.", "type": "object", "required": [ "items" @@ -33972,11 +34714,11 @@ "type": "string" }, "items": { - "description": "List of pods. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md", + "description": "items is a list of persistent volumes. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Pod" + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolume" } }, "kind": { @@ -33993,156 +34735,326 @@ "Type": "list", "Group": "", "Version": "v1", - "Kind": "PodList", + "Kind": "PersistentVolumeList", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodLogOptions": { - "description": "PodLogOptions is the query options for a Pod's logs REST call.", + "io.k8s.api.core.v1.PersistentVolumeSource": { + "description": "PersistentVolumeSource is similar to VolumeSource but meant for the administrator who creates PVs. Exactly one of its members must be set.", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "awsElasticBlockStore": { + "description": "awsElasticBlockStore represents an AWS Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore", + "$ref": "#/definitions/io.k8s.api.core.v1.AWSElasticBlockStoreVolumeSource" }, - "container": { - "description": "The container for which to stream logs. Defaults to only container if there is one container in the pod.", - "type": "string" + "azureDisk": { + "description": "azureDisk represents an Azure Data Disk mount on the host and bind mount to the pod.", + "$ref": "#/definitions/io.k8s.api.core.v1.AzureDiskVolumeSource" }, - "follow": { - "description": "Follow the log stream of the pod. Defaults to false.", - "type": "boolean" + "azureFile": { + "description": "azureFile represents an Azure File Service mount on the host and bind mount to the pod.", + "$ref": "#/definitions/io.k8s.api.core.v1.AzureFilePersistentVolumeSource" }, - "insecureSkipTLSVerifyBackend": { - "description": "insecureSkipTLSVerifyBackend indicates that the apiserver should not confirm the validity of the serving certificate of the backend it is connecting to. This will make the HTTPS connection between the apiserver and the backend insecure. This means the apiserver cannot verify the log data it is receiving came from the real kubelet. If the kubelet is configured to verify the apiserver's TLS credentials, it does not mean the connection to the real kubelet is vulnerable to a man in the middle attack (e.g. an attacker could not intercept the actual log data coming from the real kubelet).", - "type": "boolean" + "cephfs": { + "description": "cephFS represents a Ceph FS mount on the host that shares a pod's lifetime", + "$ref": "#/definitions/io.k8s.api.core.v1.CephFSPersistentVolumeSource" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "cinder": { + "description": "cinder represents a cinder volume attached and mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", + "$ref": "#/definitions/io.k8s.api.core.v1.CinderPersistentVolumeSource" }, - "limitBytes": { - "description": "If set, the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.", - "type": "integer", - "format": "int64" + "csi": { + "description": "csi represents storage that is handled by an external CSI driver (Beta feature).", + "$ref": "#/definitions/io.k8s.api.core.v1.CSIPersistentVolumeSource" }, - "previous": { - "description": "Return previous terminated container logs. Defaults to false.", - "type": "boolean" + "fc": { + "description": "fc represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod.", + "$ref": "#/definitions/io.k8s.api.core.v1.FCVolumeSource" }, - "sinceSeconds": { - "description": "A relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", - "type": "integer", - "format": "int64" + "flexVolume": { + "description": "flexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.", + "$ref": "#/definitions/io.k8s.api.core.v1.FlexPersistentVolumeSource" }, - "sinceTime": { - "description": "An RFC3339 timestamp from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "flocker": { + "description": "flocker represents a Flocker volume attached to a kubelet's host machine and exposed to the pod for its usage. This depends on the Flocker control service being running", + "$ref": "#/definitions/io.k8s.api.core.v1.FlockerVolumeSource" }, - "tailLines": { - "description": "If set, the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime", - "type": "integer", - "format": "int64" + "gcePersistentDisk": { + "description": "gcePersistentDisk represents a GCE Disk resource that is attached to a kubelet's host machine and then exposed to the pod. Provisioned by an admin. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", + "$ref": "#/definitions/io.k8s.api.core.v1.GCEPersistentDiskVolumeSource" }, - "timestamps": { - "description": "If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.", - "type": "boolean" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "", - "Version": "v1", - "Kind": "PodLogOptions", - "Scope": "Namespaced" - } - }, - "io.k8s.api.core.v1.PodOS": { - "description": "PodOS defines the OS parameters of a pod.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "Name is the name of the operating system. The currently supported values are linux and windows. Additional value may be defined in future and can be one of: https://github.com/opencontainers/runtime-spec/blob/master/config.md#platform-specific-configuration Clients should expect to handle additional values and treat unrecognized values in this field as os: null", - "type": "string", - "default": "" + "glusterfs": { + "description": "glusterfs represents a Glusterfs volume that is attached to a host and exposed to the pod. Provisioned by an admin. More info: https://examples.k8s.io/volumes/glusterfs/README.md", + "$ref": "#/definitions/io.k8s.api.core.v1.GlusterfsPersistentVolumeSource" + }, + "hostPath": { + "description": "hostPath represents a directory on the host. Provisioned by a developer or tester. This is useful for single-node development and testing only! On-host storage is not supported in any way and WILL NOT WORK in a multi-node cluster. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath", + "$ref": "#/definitions/io.k8s.api.core.v1.HostPathVolumeSource" + }, + "iscsi": { + "description": "iscsi represents an ISCSI Disk resource that is attached to a kubelet's host machine and then exposed to the pod. Provisioned by an admin.", + "$ref": "#/definitions/io.k8s.api.core.v1.ISCSIPersistentVolumeSource" + }, + "local": { + "description": "local represents directly-attached storage with node affinity", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalVolumeSource" + }, + "nfs": { + "description": "nfs represents an NFS mount on the host. Provisioned by an admin. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs", + "$ref": "#/definitions/io.k8s.api.core.v1.NFSVolumeSource" + }, + "photonPersistentDisk": { + "description": "photonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine", + "$ref": "#/definitions/io.k8s.api.core.v1.PhotonPersistentDiskVolumeSource" + }, + "portworxVolume": { + "description": "portworxVolume represents a portworx volume attached and mounted on kubelets host machine", + "$ref": "#/definitions/io.k8s.api.core.v1.PortworxVolumeSource" + }, + "quobyte": { + "description": "quobyte represents a Quobyte mount on the host that shares a pod's lifetime", + "$ref": "#/definitions/io.k8s.api.core.v1.QuobyteVolumeSource" + }, + "rbd": { + "description": "rbd represents a Rados Block Device mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md", + "$ref": "#/definitions/io.k8s.api.core.v1.RBDPersistentVolumeSource" + }, + "scaleIO": { + "description": "scaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes.", + "$ref": "#/definitions/io.k8s.api.core.v1.ScaleIOPersistentVolumeSource" + }, + "storageos": { + "description": "storageOS represents a StorageOS volume that is attached to the kubelet's host machine and mounted into the pod More info: https://examples.k8s.io/volumes/storageos/README.md", + "$ref": "#/definitions/io.k8s.api.core.v1.StorageOSPersistentVolumeSource" + }, + "vsphereVolume": { + "description": "vsphereVolume represents a vSphere volume attached and mounted on kubelets host machine", + "$ref": "#/definitions/io.k8s.api.core.v1.VsphereVirtualDiskVolumeSource" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PodOS", + "Kind": "PersistentVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodPortForwardOptions": { - "description": "PodPortForwardOptions is the query options to a Pod's port forward call when using WebSockets. The `port` query parameter must specify the port or ports (comma separated) to forward over. Port forwarding over SPDY does not use these options. It requires the port to be passed in the `port` header as part of request.", + "io.k8s.api.core.v1.PersistentVolumeSpec": { + "description": "PersistentVolumeSpec is the specification of a persistent volume.", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "accessModes": { + "description": "accessModes contains all ways the volume can be mounted. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes", + "type": "array", + "items": { + "type": "string", + "default": "", + "enum": [ + "ReadOnlyMany", + "ReadWriteMany", + "ReadWriteOnce", + "ReadWriteOncePod" + ] + }, + "x-kubernetes-list-type": "atomic" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "awsElasticBlockStore": { + "description": "awsElasticBlockStore represents an AWS Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore", + "$ref": "#/definitions/io.k8s.api.core.v1.AWSElasticBlockStoreVolumeSource" }, - "ports": { - "description": "List of ports to forward Required when using WebSockets", + "azureDisk": { + "description": "azureDisk represents an Azure Data Disk mount on the host and bind mount to the pod.", + "$ref": "#/definitions/io.k8s.api.core.v1.AzureDiskVolumeSource" + }, + "azureFile": { + "description": "azureFile represents an Azure File Service mount on the host and bind mount to the pod.", + "$ref": "#/definitions/io.k8s.api.core.v1.AzureFilePersistentVolumeSource" + }, + "capacity": { + "description": "capacity is the description of the persistent volume's resources and capacity. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#capacity", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } + }, + "cephfs": { + "description": "cephFS represents a Ceph FS mount on the host that shares a pod's lifetime", + "$ref": "#/definitions/io.k8s.api.core.v1.CephFSPersistentVolumeSource" + }, + "cinder": { + "description": "cinder represents a cinder volume attached and mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", + "$ref": "#/definitions/io.k8s.api.core.v1.CinderPersistentVolumeSource" + }, + "claimRef": { + "description": "claimRef is part of a bi-directional binding between PersistentVolume and PersistentVolumeClaim. Expected to be non-nil when bound. claim.VolumeName is the authoritative bind between PV and PVC. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#binding", + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference", + "x-kubernetes-map-type": "granular" + }, + "csi": { + "description": "csi represents storage that is handled by an external CSI driver (Beta feature).", + "$ref": "#/definitions/io.k8s.api.core.v1.CSIPersistentVolumeSource" + }, + "fc": { + "description": "fc represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod.", + "$ref": "#/definitions/io.k8s.api.core.v1.FCVolumeSource" + }, + "flexVolume": { + "description": "flexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.", + "$ref": "#/definitions/io.k8s.api.core.v1.FlexPersistentVolumeSource" + }, + "flocker": { + "description": "flocker represents a Flocker volume attached to a kubelet's host machine and exposed to the pod for its usage. This depends on the Flocker control service being running", + "$ref": "#/definitions/io.k8s.api.core.v1.FlockerVolumeSource" + }, + "gcePersistentDisk": { + "description": "gcePersistentDisk represents a GCE Disk resource that is attached to a kubelet's host machine and then exposed to the pod. Provisioned by an admin. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", + "$ref": "#/definitions/io.k8s.api.core.v1.GCEPersistentDiskVolumeSource" + }, + "glusterfs": { + "description": "glusterfs represents a Glusterfs volume that is attached to a host and exposed to the pod. Provisioned by an admin. More info: https://examples.k8s.io/volumes/glusterfs/README.md", + "$ref": "#/definitions/io.k8s.api.core.v1.GlusterfsPersistentVolumeSource" + }, + "hostPath": { + "description": "hostPath represents a directory on the host. Provisioned by a developer or tester. This is useful for single-node development and testing only! On-host storage is not supported in any way and WILL NOT WORK in a multi-node cluster. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath", + "$ref": "#/definitions/io.k8s.api.core.v1.HostPathVolumeSource" + }, + "iscsi": { + "description": "iscsi represents an ISCSI Disk resource that is attached to a kubelet's host machine and then exposed to the pod. Provisioned by an admin.", + "$ref": "#/definitions/io.k8s.api.core.v1.ISCSIPersistentVolumeSource" + }, + "local": { + "description": "local represents directly-attached storage with node affinity", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalVolumeSource" + }, + "mountOptions": { + "description": "mountOptions is the list of mount options, e.g. [\"ro\", \"soft\"]. Not validated - mount will simply fail if one is invalid. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes/#mount-options", "type": "array", "items": { - "type": "integer", - "format": "int32", - "default": 0 + "type": "string", + "default": "" }, "x-kubernetes-list-type": "atomic" + }, + "nfs": { + "description": "nfs represents an NFS mount on the host. Provisioned by an admin. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs", + "$ref": "#/definitions/io.k8s.api.core.v1.NFSVolumeSource" + }, + "nodeAffinity": { + "description": "nodeAffinity defines constraints that limit what nodes this volume can be accessed from. This field influences the scheduling of pods that use this volume.", + "$ref": "#/definitions/io.k8s.api.core.v1.VolumeNodeAffinity" + }, + "persistentVolumeReclaimPolicy": { + "description": "persistentVolumeReclaimPolicy defines what happens to a persistent volume when released from its claim. Valid options are Retain (default for manually created PersistentVolumes), Delete (default for dynamically provisioned PersistentVolumes), and Recycle (deprecated). Recycle must be supported by the volume plugin underlying this PersistentVolume. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#reclaiming\n\nPossible enum values:\n - `\"Delete\"` means the volume will be deleted from Kubernetes on release from its claim. The volume plugin must support Deletion.\n - `\"Recycle\"` means the volume will be recycled back into the pool of unbound persistent volumes on release from its claim. The volume plugin must support Recycling.\n - `\"Retain\"` means the volume will be left in its current phase (Released) for manual reclamation by the administrator. The default policy is Retain.", + "type": "string", + "enum": [ + "Delete", + "Recycle", + "Retain" + ] + }, + "photonPersistentDisk": { + "description": "photonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine", + "$ref": "#/definitions/io.k8s.api.core.v1.PhotonPersistentDiskVolumeSource" + }, + "portworxVolume": { + "description": "portworxVolume represents a portworx volume attached and mounted on kubelets host machine", + "$ref": "#/definitions/io.k8s.api.core.v1.PortworxVolumeSource" + }, + "quobyte": { + "description": "quobyte represents a Quobyte mount on the host that shares a pod's lifetime", + "$ref": "#/definitions/io.k8s.api.core.v1.QuobyteVolumeSource" + }, + "rbd": { + "description": "rbd represents a Rados Block Device mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md", + "$ref": "#/definitions/io.k8s.api.core.v1.RBDPersistentVolumeSource" + }, + "scaleIO": { + "description": "scaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes.", + "$ref": "#/definitions/io.k8s.api.core.v1.ScaleIOPersistentVolumeSource" + }, + "storageClassName": { + "description": "storageClassName is the name of StorageClass to which this persistent volume belongs. Empty value means that this volume does not belong to any StorageClass.", + "type": "string" + }, + "storageos": { + "description": "storageOS represents a StorageOS volume that is attached to the kubelet's host machine and mounted into the pod More info: https://examples.k8s.io/volumes/storageos/README.md", + "$ref": "#/definitions/io.k8s.api.core.v1.StorageOSPersistentVolumeSource" + }, + "volumeAttributesClassName": { + "description": "Name of VolumeAttributesClass to which this persistent volume belongs. Empty value is not allowed. When this field is not set, it indicates that this volume does not belong to any VolumeAttributesClass. This field is mutable and can be changed by the CSI driver after a volume has been updated successfully to a new class. For an unbound PersistentVolume, the volumeAttributesClassName will be matched with unbound PersistentVolumeClaims during the binding process. This is a beta field and requires enabling VolumeAttributesClass feature (off by default).", + "type": "string" + }, + "volumeMode": { + "description": "volumeMode defines if a volume is intended to be used with a formatted filesystem or to remain in raw block state. Value of Filesystem is implied when not included in spec.\n\nPossible enum values:\n - `\"Block\"` means the volume will not be formatted with a filesystem and will remain a raw block device.\n - `\"Filesystem\"` means the volume will be or is formatted with a filesystem.", + "type": "string", + "enum": [ + "Block", + "Filesystem" + ] + }, + "vsphereVolume": { + "description": "vsphereVolume represents a vSphere volume attached and mounted on kubelets host machine", + "$ref": "#/definitions/io.k8s.api.core.v1.VsphereVirtualDiskVolumeSource" } }, "x-fabric8-info": { - "Type": "object", + "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PodPortForwardOptions", + "Kind": "PersistentVolumeSpec", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodProxyOptions": { - "description": "PodProxyOptions is the query options to a Pod's proxy call.", + "io.k8s.api.core.v1.PersistentVolumeStatus": { + "description": "PersistentVolumeStatus is the current status of a persistent volume.", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "lastPhaseTransitionTime": { + "description": "lastPhaseTransitionTime is the time the phase transitioned from one to another and automatically resets to current time everytime a volume phase transitions.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "message": { + "description": "message is a human-readable message indicating details about why the volume is in this state.", "type": "string" }, - "path": { - "description": "Path is the URL path to use for the current proxy request to pod.", + "phase": { + "description": "phase indicates if a volume is available, bound to a claim, or released by a claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#phase\n\nPossible enum values:\n - `\"Available\"` used for PersistentVolumes that are not yet bound Available volumes are held by the binder and matched to PersistentVolumeClaims\n - `\"Bound\"` used for PersistentVolumes that are bound\n - `\"Failed\"` used for PersistentVolumes that failed to be correctly recycled or deleted after being released from a claim\n - `\"Pending\"` used for PersistentVolumes that are not available\n - `\"Released\"` used for PersistentVolumes where the bound PersistentVolumeClaim was deleted released volumes must be recycled before becoming available again this phase is used by the persistent volume claim binder to signal to another process to reclaim the resource", + "type": "string", + "enum": [ + "Available", + "Bound", + "Failed", + "Pending", + "Released" + ] + }, + "reason": { + "description": "reason is a brief CamelCase string that describes any failure and is meant for machine parsing and tidy display in the CLI.", "type": "string" } }, "x-fabric8-info": { - "Type": "object", + "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PodProxyOptions", + "Kind": "PersistentVolumeStatus", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodReadinessGate": { - "description": "PodReadinessGate contains the reference to a pod condition", + "io.k8s.api.core.v1.PhotonPersistentDiskVolumeSource": { + "description": "Represents a Photon Controller persistent disk resource.", "type": "object", "required": [ - "conditionType" + "pdID" ], "properties": { - "conditionType": { - "description": "ConditionType refers to a condition in the pod's condition list with matching type.", + "fsType": { + "description": "fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified.", + "type": "string" + }, + "pdID": { + "description": "pdID is the ID that identifies Photon Controller persistent disk", "type": "string", "default": "" } @@ -34151,73 +35063,121 @@ "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PodReadinessGate", + "Kind": "PhotonPersistentDiskVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodResourceClaim": { - "description": "PodResourceClaim references exactly one ResourceClaim, either directly or by naming a ResourceClaimTemplate which is then turned into a ResourceClaim for the pod.\n\nIt adds a name to it that uniquely identifies the ResourceClaim inside the Pod. Containers that need access to the ResourceClaim reference it with this name.", + "io.k8s.api.core.v1.Pod": { + "description": "Pod is a collection of containers that can run on a host. This resource is created by clients and scheduled onto hosts.", "type": "object", - "required": [ - "name" - ], "properties": { - "name": { - "description": "Name uniquely identifies this resource claim inside the pod. This must be a DNS_LABEL.", - "type": "string", - "default": "" - }, - "resourceClaimName": { - "description": "ResourceClaimName is the name of a ResourceClaim object in the same namespace as this pod.\n\nExactly one of ResourceClaimName and ResourceClaimTemplateName must be set.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "resourceClaimTemplateName": { - "description": "ResourceClaimTemplateName is the name of a ResourceClaimTemplate object in the same namespace as this pod.\n\nThe template will be used to create a new ResourceClaim, which will be bound to this pod. When this pod is deleted, the ResourceClaim will also be deleted. The pod name and resource name, along with a generated component, will be used to form a unique name for the ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.\n\nThis field is immutable and no changes will be made to the corresponding ResourceClaim by the control plane after creating the ResourceClaim.\n\nExactly one of ResourceClaimName and ResourceClaimTemplateName must be set.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodSpec" + }, + "status": { + "description": "Most recently observed status of the pod. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodStatus" } }, "x-fabric8-info": { - "Type": "nested", + "Type": "object", "Group": "", "Version": "v1", - "Kind": "PodResourceClaim", + "Kind": "Pod", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodResourceClaimStatus": { - "description": "PodResourceClaimStatus is stored in the PodStatus for each PodResourceClaim which references a ResourceClaimTemplate. It stores the generated name for the corresponding ResourceClaim.", + "io.k8s.api.core.v1.PodAffinity": { + "description": "Pod affinity is a group of inter pod affinity scheduling rules.", "type": "object", - "required": [ - "name" - ], "properties": { - "name": { - "description": "Name uniquely identifies this resource claim inside the pod. This must match the name of an entry in pod.spec.resourceClaims, which implies that the string must be a DNS_LABEL.", - "type": "string", - "default": "" + "preferredDuringSchedulingIgnoredDuringExecution": { + "description": "The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.WeightedPodAffinityTerm" + }, + "x-kubernetes-list-type": "atomic" }, - "resourceClaimName": { - "description": "ResourceClaimName is the name of the ResourceClaim that was generated for the Pod in the namespace of the Pod. If this is unset, then generating a ResourceClaim was not necessary. The pod.spec.resourceClaims entry can be ignored in this case.", - "type": "string" + "requiredDuringSchedulingIgnoredDuringExecution": { + "description": "If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodAffinityTerm" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PodResourceClaimStatus", + "Kind": "PodAffinity", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodSchedulingGate": { - "description": "PodSchedulingGate is associated to a Pod to guard its scheduling.", + "io.k8s.api.core.v1.PodAffinityTerm": { + "description": "Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key \u003ctopologyKey\u003e matches that of any node on which a pod of the set of pods is running", "type": "object", "required": [ - "name" + "topologyKey" ], "properties": { - "name": { - "description": "Name of the scheduling gate. Each scheduling gate must have a unique name field.", + "labelSelector": { + "description": "A label query over a set of resources, in this case pods. If it's null, this PodAffinityTerm matches with no Pods.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "matchLabelKeys": { + "description": "MatchLabelKeys is a set of pod label keys to select which pods will be taken into consideration. The keys are used to lookup values from the incoming pod labels, those key-value labels are merged with `labelSelector` as `key in (value)` to select the group of existing pods which pods will be taken into consideration for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "mismatchLabelKeys": { + "description": "MismatchLabelKeys is a set of pod label keys to select which pods will be taken into consideration. The keys are used to lookup values from the incoming pod labels, those key-value labels are merged with `labelSelector` as `key notin (value)` to select the group of existing pods which pods will be taken into consideration for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "namespaceSelector": { + "description": "A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means \"this pod's namespace\". An empty selector ({}) matches all namespaces.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "namespaces": { + "description": "namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means \"this pod's namespace\".", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "topologyKey": { + "description": "This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed.", "type": "string", "default": "" } @@ -34226,168 +35186,655 @@ "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PodSchedulingGate", + "Kind": "PodAffinityTerm", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodSecurityContext": { - "description": "PodSecurityContext holds pod-level security attributes and common container settings. Some fields are also present in container.securityContext. Field values of container.securityContext take precedence over field values of PodSecurityContext.", + "io.k8s.api.core.v1.PodAntiAffinity": { + "description": "Pod anti affinity is a group of inter pod anti affinity scheduling rules.", "type": "object", "properties": { - "appArmorProfile": { - "description": "appArmorProfile is the AppArmor options to use by the containers in this pod. Note that this field cannot be set when spec.os.name is windows.", - "$ref": "#/definitions/io.k8s.api.core.v1.AppArmorProfile" - }, - "fsGroup": { - "description": "A special supplemental group that applies to all containers in a pod. Some volume types allow the Kubelet to change the ownership of that volume to be owned by the pod:\n\n1. The owning GID will be the FSGroup 2. The setgid bit is set (new files created in the volume will be owned by FSGroup) 3. The permission bits are OR'd with rw-rw----\n\nIf unset, the Kubelet will not modify the ownership and permissions of any volume. Note that this field cannot be set when spec.os.name is windows.", - "type": "integer", - "format": "int64" - }, - "fsGroupChangePolicy": { - "description": "fsGroupChangePolicy defines behavior of changing ownership and permission of the volume before being exposed inside Pod. This field will only apply to volume types which support fsGroup based ownership(and permissions). It will have no effect on ephemeral volume types such as: secret, configmaps and emptydir. Valid values are \"OnRootMismatch\" and \"Always\". If not specified, \"Always\" is used. Note that this field cannot be set when spec.os.name is windows.\n\nPossible enum values:\n - `\"Always\"` indicates that volume's ownership and permissions should always be changed whenever volume is mounted inside a Pod. This the default behavior.\n - `\"OnRootMismatch\"` indicates that volume's ownership and permissions will be changed only when permission and ownership of root directory does not match with expected permissions on the volume. This can help shorten the time it takes to change ownership and permissions of a volume.", - "type": "string", - "enum": [ - "Always", - "OnRootMismatch" - ] - }, - "runAsGroup": { - "description": "The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows.", - "type": "integer", - "format": "int64" - }, - "runAsNonRoot": { - "description": "Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.", - "type": "boolean" - }, - "runAsUser": { - "description": "The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows.", - "type": "integer", - "format": "int64" - }, - "seLinuxOptions": { - "description": "The SELinux context to be applied to all containers. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows.", - "$ref": "#/definitions/io.k8s.api.core.v1.SELinuxOptions" - }, - "seccompProfile": { - "description": "The seccomp options to use by the containers in this pod. Note that this field cannot be set when spec.os.name is windows.", - "$ref": "#/definitions/io.k8s.api.core.v1.SeccompProfile" - }, - "supplementalGroups": { - "description": "A list of groups applied to the first process run in each container, in addition to the container's primary GID and fsGroup (if specified). If the SupplementalGroupsPolicy feature is enabled, the supplementalGroupsPolicy field determines whether these are in addition to or instead of any group memberships defined in the container image. If unspecified, no additional groups are added, though group memberships defined in the container image may still be used, depending on the supplementalGroupsPolicy field. Note that this field cannot be set when spec.os.name is windows.", + "preferredDuringSchedulingIgnoredDuringExecution": { + "description": "The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding \"weight\" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred.", "type": "array", "items": { - "type": "integer", - "format": "int64", - "default": 0 + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.WeightedPodAffinityTerm" }, "x-kubernetes-list-type": "atomic" }, - "supplementalGroupsPolicy": { - "description": "Defines how supplemental groups of the first container processes are calculated. Valid values are \"Merge\" and \"Strict\". If not specified, \"Merge\" is used. (Alpha) Using the field requires the SupplementalGroupsPolicy feature gate to be enabled and the container runtime must implement support for this feature. Note that this field cannot be set when spec.os.name is windows.\n\nPossible enum values:\n - `\"Merge\"` means that the container's provided SupplementalGroups and FsGroup (specified in SecurityContext) will be merged with the primary user's groups as defined in the container image (in /etc/group).\n - `\"Strict\"` means that the container's provided SupplementalGroups and FsGroup (specified in SecurityContext) will be used instead of any groups defined in the container image.", - "type": "string", - "enum": [ - "Merge", - "Strict" - ] - }, - "sysctls": { - "description": "Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch. Note that this field cannot be set when spec.os.name is windows.", + "requiredDuringSchedulingIgnoredDuringExecution": { + "description": "If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Sysctl" + "$ref": "#/definitions/io.k8s.api.core.v1.PodAffinityTerm" }, "x-kubernetes-list-type": "atomic" - }, - "windowsOptions": { - "description": "The Windows specific settings applied to all containers. If unspecified, the options within a container's SecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux.", - "$ref": "#/definitions/io.k8s.api.core.v1.WindowsSecurityContextOptions" } }, "x-fabric8-info": { "Type": "nested", "Group": "", "Version": "v1", - "Kind": "PodSecurityContext", + "Kind": "PodAntiAffinity", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodSignature": { - "description": "Describes the class of pods that should avoid this node. Exactly one field should be set.", + "io.k8s.api.core.v1.PodAttachOptions": { + "description": "PodAttachOptions is the query options to a Pod's remote attach call.", "type": "object", "properties": { - "podController": { - "description": "Reference to controller whose pods should avoid this node.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.OwnerReference" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "container": { + "description": "The container in which to execute the command. Defaults to only container if there is only one container in the pod.", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "stderr": { + "description": "Stderr if true indicates that stderr is to be redirected for the attach call. Defaults to true.", + "type": "boolean" + }, + "stdin": { + "description": "Stdin if true, redirects the standard input stream of the pod for this call. Defaults to false.", + "type": "boolean" + }, + "stdout": { + "description": "Stdout if true indicates that stdout is to be redirected for the attach call. Defaults to true.", + "type": "boolean" + }, + "tty": { + "description": "TTY if true indicates that a tty will be allocated for the attach call. This is passed through the container runtime so the tty is allocated on the worker node by the container runtime. Defaults to false.", + "type": "boolean" } }, "x-fabric8-info": { - "Type": "nested", + "Type": "object", "Group": "", "Version": "v1", - "Kind": "PodSignature", + "Kind": "PodAttachOptions", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodSpec": { - "description": "PodSpec is a description of a pod.", + "io.k8s.api.core.v1.PodCondition": { + "description": "PodCondition contains details for the current condition of this pod.", "type": "object", "required": [ - "containers" + "type", + "status" ], "properties": { - "activeDeadlineSeconds": { - "description": "Optional duration in seconds the pod may be active on the node relative to StartTime before the system will actively try to mark it failed and kill associated containers. Value must be a positive integer.", - "type": "integer", - "format": "int64" + "lastProbeTime": { + "description": "Last time we probed the condition.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "affinity": { - "description": "If specified, the pod's scheduling constraints", - "$ref": "#/definitions/io.k8s.api.core.v1.Affinity" + "lastTransitionTime": { + "description": "Last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "automountServiceAccountToken": { - "description": "AutomountServiceAccountToken indicates whether a service account token should be automatically mounted.", - "type": "boolean" + "message": { + "description": "Human-readable message indicating details about last transition.", + "type": "string" }, - "containers": { - "description": "List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. Cannot be updated.", + "reason": { + "description": "Unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status is the status of the condition. Can be True, False, Unknown. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions", + "type": "string", + "default": "" + }, + "type": { + "description": "Type is the type of the condition. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "PodCondition", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodDNSConfig": { + "description": "PodDNSConfig defines the DNS parameters of a pod in addition to those generated from DNSPolicy.", + "type": "object", + "properties": { + "nameservers": { + "description": "A list of DNS name server IP addresses. This will be appended to the base nameservers generated from DNSPolicy. Duplicated nameservers will be removed.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "options": { + "description": "A list of DNS resolver options. This will be merged with the base options generated from DNSPolicy. Duplicated entries will be removed. Resolution options given in Options will override those that appear in the base DNSPolicy.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Container" + "$ref": "#/definitions/io.k8s.api.core.v1.PodDNSConfigOption" }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" + "x-kubernetes-list-type": "atomic" }, - "dnsConfig": { - "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy.", - "$ref": "#/definitions/io.k8s.api.core.v1.PodDNSConfig" + "searches": { + "description": "A list of DNS search domains for host-name lookup. This will be appended to the base search paths generated from DNSPolicy. Duplicated search paths will be removed.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "PodDNSConfig", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodDNSConfigOption": { + "description": "PodDNSConfigOption defines DNS resolver options of a pod.", + "type": "object", + "properties": { + "name": { + "description": "Required.", + "type": "string" }, - "dnsPolicy": { - "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'.\n\nPossible enum values:\n - `\"ClusterFirst\"` indicates that the pod should use cluster DNS first unless hostNetwork is true, if it is available, then fall back on the default (as determined by kubelet) DNS settings.\n - `\"ClusterFirstWithHostNet\"` indicates that the pod should use cluster DNS first, if it is available, then fall back on the default (as determined by kubelet) DNS settings.\n - `\"Default\"` indicates that the pod should use the default (as determined by kubelet) DNS settings.\n - `\"None\"` indicates that the pod should use empty DNS settings. DNS parameters such as nameservers and search paths should be defined via DNSConfig.", + "value": { + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "PodDNSConfigOption", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodExecOptions": { + "description": "PodExecOptions is the query options to a Pod's remote exec call.", + "type": "object", + "required": [ + "command" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "command": { + "description": "Command is the remote command to execute. argv array. Not executed within a shell.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "container": { + "description": "Container in which to execute the command. Defaults to only container if there is only one container in the pod.", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "stderr": { + "description": "Redirect the standard error stream of the pod for this call.", + "type": "boolean" + }, + "stdin": { + "description": "Redirect the standard input stream of the pod for this call. Defaults to false.", + "type": "boolean" + }, + "stdout": { + "description": "Redirect the standard output stream of the pod for this call.", + "type": "boolean" + }, + "tty": { + "description": "TTY if true indicates that a tty will be allocated for the exec call. Defaults to false.", + "type": "boolean" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "PodExecOptions", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodIP": { + "description": "PodIP represents a single IP address allocated to the pod.", + "type": "object", + "required": [ + "ip" + ], + "properties": { + "ip": { + "description": "IP is the IP address assigned to the pod", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "PodIP", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodList": { + "description": "PodList is a list of Pods.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of pods. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.Pod" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "", + "Version": "v1", + "Kind": "PodList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodLogOptions": { + "description": "PodLogOptions is the query options for a Pod's logs REST call.", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "container": { + "description": "The container for which to stream logs. Defaults to only container if there is one container in the pod.", + "type": "string" + }, + "follow": { + "description": "Follow the log stream of the pod. Defaults to false.", + "type": "boolean" + }, + "insecureSkipTLSVerifyBackend": { + "description": "insecureSkipTLSVerifyBackend indicates that the apiserver should not confirm the validity of the serving certificate of the backend it is connecting to. This will make the HTTPS connection between the apiserver and the backend insecure. This means the apiserver cannot verify the log data it is receiving came from the real kubelet. If the kubelet is configured to verify the apiserver's TLS credentials, it does not mean the connection to the real kubelet is vulnerable to a man in the middle attack (e.g. an attacker could not intercept the actual log data coming from the real kubelet).", + "type": "boolean" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "limitBytes": { + "description": "If set, the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.", + "type": "integer", + "format": "int64" + }, + "previous": { + "description": "Return previous terminated container logs. Defaults to false.", + "type": "boolean" + }, + "sinceSeconds": { + "description": "A relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", + "type": "integer", + "format": "int64" + }, + "sinceTime": { + "description": "An RFC3339 timestamp from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "tailLines": { + "description": "If set, the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime", + "type": "integer", + "format": "int64" + }, + "timestamps": { + "description": "If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.", + "type": "boolean" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "PodLogOptions", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodOS": { + "description": "PodOS defines the OS parameters of a pod.", + "type": "object", + "required": [ + "name" + ], + "properties": { + "name": { + "description": "Name is the name of the operating system. The currently supported values are linux and windows. Additional value may be defined in future and can be one of: https://github.com/opencontainers/runtime-spec/blob/master/config.md#platform-specific-configuration Clients should expect to handle additional values and treat unrecognized values in this field as os: null", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "PodOS", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodPortForwardOptions": { + "description": "PodPortForwardOptions is the query options to a Pod's port forward call when using WebSockets. The `port` query parameter must specify the port or ports (comma separated) to forward over. Port forwarding over SPDY does not use these options. It requires the port to be passed in the `port` header as part of request.", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "ports": { + "description": "List of ports to forward Required when using WebSockets", + "type": "array", + "items": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "PodPortForwardOptions", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodProxyOptions": { + "description": "PodProxyOptions is the query options to a Pod's proxy call.", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "path": { + "description": "Path is the URL path to use for the current proxy request to pod.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "PodProxyOptions", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodReadinessGate": { + "description": "PodReadinessGate contains the reference to a pod condition", + "type": "object", + "required": [ + "conditionType" + ], + "properties": { + "conditionType": { + "description": "ConditionType refers to a condition in the pod's condition list with matching type.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "PodReadinessGate", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodResourceClaim": { + "description": "PodResourceClaim references exactly one ResourceClaim, either directly or by naming a ResourceClaimTemplate which is then turned into a ResourceClaim for the pod.\n\nIt adds a name to it that uniquely identifies the ResourceClaim inside the Pod. Containers that need access to the ResourceClaim reference it with this name.", + "type": "object", + "required": [ + "name" + ], + "properties": { + "name": { + "description": "Name uniquely identifies this resource claim inside the pod. This must be a DNS_LABEL.", + "type": "string", + "default": "" + }, + "resourceClaimName": { + "description": "ResourceClaimName is the name of a ResourceClaim object in the same namespace as this pod.\n\nExactly one of ResourceClaimName and ResourceClaimTemplateName must be set.", + "type": "string" + }, + "resourceClaimTemplateName": { + "description": "ResourceClaimTemplateName is the name of a ResourceClaimTemplate object in the same namespace as this pod.\n\nThe template will be used to create a new ResourceClaim, which will be bound to this pod. When this pod is deleted, the ResourceClaim will also be deleted. The pod name and resource name, along with a generated component, will be used to form a unique name for the ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.\n\nThis field is immutable and no changes will be made to the corresponding ResourceClaim by the control plane after creating the ResourceClaim.\n\nExactly one of ResourceClaimName and ResourceClaimTemplateName must be set.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "PodResourceClaim", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodResourceClaimStatus": { + "description": "PodResourceClaimStatus is stored in the PodStatus for each PodResourceClaim which references a ResourceClaimTemplate. It stores the generated name for the corresponding ResourceClaim.", + "type": "object", + "required": [ + "name" + ], + "properties": { + "name": { + "description": "Name uniquely identifies this resource claim inside the pod. This must match the name of an entry in pod.spec.resourceClaims, which implies that the string must be a DNS_LABEL.", + "type": "string", + "default": "" + }, + "resourceClaimName": { + "description": "ResourceClaimName is the name of the ResourceClaim that was generated for the Pod in the namespace of the Pod. If this is unset, then generating a ResourceClaim was not necessary. The pod.spec.resourceClaims entry can be ignored in this case.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "PodResourceClaimStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodSchedulingGate": { + "description": "PodSchedulingGate is associated to a Pod to guard its scheduling.", + "type": "object", + "required": [ + "name" + ], + "properties": { + "name": { + "description": "Name of the scheduling gate. Each scheduling gate must have a unique name field.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "PodSchedulingGate", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodSecurityContext": { + "description": "PodSecurityContext holds pod-level security attributes and common container settings. Some fields are also present in container.securityContext. Field values of container.securityContext take precedence over field values of PodSecurityContext.", + "type": "object", + "properties": { + "appArmorProfile": { + "description": "appArmorProfile is the AppArmor options to use by the containers in this pod. Note that this field cannot be set when spec.os.name is windows.", + "$ref": "#/definitions/io.k8s.api.core.v1.AppArmorProfile" + }, + "fsGroup": { + "description": "A special supplemental group that applies to all containers in a pod. Some volume types allow the Kubelet to change the ownership of that volume to be owned by the pod:\n\n1. The owning GID will be the FSGroup 2. The setgid bit is set (new files created in the volume will be owned by FSGroup) 3. The permission bits are OR'd with rw-rw----\n\nIf unset, the Kubelet will not modify the ownership and permissions of any volume. Note that this field cannot be set when spec.os.name is windows.", + "type": "integer", + "format": "int64" + }, + "fsGroupChangePolicy": { + "description": "fsGroupChangePolicy defines behavior of changing ownership and permission of the volume before being exposed inside Pod. This field will only apply to volume types which support fsGroup based ownership(and permissions). It will have no effect on ephemeral volume types such as: secret, configmaps and emptydir. Valid values are \"OnRootMismatch\" and \"Always\". If not specified, \"Always\" is used. Note that this field cannot be set when spec.os.name is windows.\n\nPossible enum values:\n - `\"Always\"` indicates that volume's ownership and permissions should always be changed whenever volume is mounted inside a Pod. This the default behavior.\n - `\"OnRootMismatch\"` indicates that volume's ownership and permissions will be changed only when permission and ownership of root directory does not match with expected permissions on the volume. This can help shorten the time it takes to change ownership and permissions of a volume.", "type": "string", "enum": [ - "ClusterFirst", - "ClusterFirstWithHostNet", - "Default", - "None" + "Always", + "OnRootMismatch" ] }, - "enableServiceLinks": { - "description": "EnableServiceLinks indicates whether information about services should be injected into pod's environment variables, matching the syntax of Docker links. Optional: Defaults to true.", + "runAsGroup": { + "description": "The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows.", + "type": "integer", + "format": "int64" + }, + "runAsNonRoot": { + "description": "Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.", "type": "boolean" }, - "ephemeralContainers": { - "description": "List of ephemeral containers run in this pod. Ephemeral containers may be run in an existing pod to perform user-initiated actions such as debugging. This list cannot be specified when creating a pod, and it cannot be modified by updating the pod spec. In order to add an ephemeral container to an existing pod, use the pod's ephemeralcontainers subresource.", + "runAsUser": { + "description": "The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows.", + "type": "integer", + "format": "int64" + }, + "seLinuxOptions": { + "description": "The SELinux context to be applied to all containers. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in SecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence for that container. Note that this field cannot be set when spec.os.name is windows.", + "$ref": "#/definitions/io.k8s.api.core.v1.SELinuxOptions" + }, + "seccompProfile": { + "description": "The seccomp options to use by the containers in this pod. Note that this field cannot be set when spec.os.name is windows.", + "$ref": "#/definitions/io.k8s.api.core.v1.SeccompProfile" + }, + "supplementalGroups": { + "description": "A list of groups applied to the first process run in each container, in addition to the container's primary GID and fsGroup (if specified). If the SupplementalGroupsPolicy feature is enabled, the supplementalGroupsPolicy field determines whether these are in addition to or instead of any group memberships defined in the container image. If unspecified, no additional groups are added, though group memberships defined in the container image may still be used, depending on the supplementalGroupsPolicy field. Note that this field cannot be set when spec.os.name is windows.", + "type": "array", + "items": { + "type": "integer", + "format": "int64", + "default": 0 + }, + "x-kubernetes-list-type": "atomic" + }, + "supplementalGroupsPolicy": { + "description": "Defines how supplemental groups of the first container processes are calculated. Valid values are \"Merge\" and \"Strict\". If not specified, \"Merge\" is used. (Alpha) Using the field requires the SupplementalGroupsPolicy feature gate to be enabled and the container runtime must implement support for this feature. Note that this field cannot be set when spec.os.name is windows.\n\nPossible enum values:\n - `\"Merge\"` means that the container's provided SupplementalGroups and FsGroup (specified in SecurityContext) will be merged with the primary user's groups as defined in the container image (in /etc/group).\n - `\"Strict\"` means that the container's provided SupplementalGroups and FsGroup (specified in SecurityContext) will be used instead of any groups defined in the container image.", + "type": "string", + "enum": [ + "Merge", + "Strict" + ] + }, + "sysctls": { + "description": "Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported sysctls (by the container runtime) might fail to launch. Note that this field cannot be set when spec.os.name is windows.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EphemeralContainer" + "$ref": "#/definitions/io.k8s.api.core.v1.Sysctl" + }, + "x-kubernetes-list-type": "atomic" + }, + "windowsOptions": { + "description": "The Windows specific settings applied to all containers. If unspecified, the options within a container's SecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux.", + "$ref": "#/definitions/io.k8s.api.core.v1.WindowsSecurityContextOptions" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "PodSecurityContext", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodSignature": { + "description": "Describes the class of pods that should avoid this node. Exactly one field should be set.", + "type": "object", + "properties": { + "podController": { + "description": "Reference to controller whose pods should avoid this node.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.OwnerReference" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "PodSignature", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodSpec": { + "description": "PodSpec is a description of a pod.", + "type": "object", + "required": [ + "containers" + ], + "properties": { + "activeDeadlineSeconds": { + "description": "Optional duration in seconds the pod may be active on the node relative to StartTime before the system will actively try to mark it failed and kill associated containers. Value must be a positive integer.", + "type": "integer", + "format": "int64" + }, + "affinity": { + "description": "If specified, the pod's scheduling constraints", + "$ref": "#/definitions/io.k8s.api.core.v1.Affinity" + }, + "automountServiceAccountToken": { + "description": "AutomountServiceAccountToken indicates whether a service account token should be automatically mounted.", + "type": "boolean" + }, + "containers": { + "description": "List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. Cannot be updated.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.Container" }, "x-kubernetes-list-map-keys": [ "name" @@ -34396,249 +35843,4821 @@ "x-kubernetes-patch-merge-key": "name", "x-kubernetes-patch-strategy": "merge" }, - "hostAliases": { - "description": "HostAliases is an optional list of hosts and IPs that will be injected into the pod's hosts file if specified.", + "dnsConfig": { + "description": "Specifies the DNS parameters of a pod. Parameters specified here will be merged to the generated DNS configuration based on DNSPolicy.", + "$ref": "#/definitions/io.k8s.api.core.v1.PodDNSConfig" + }, + "dnsPolicy": { + "description": "Set DNS policy for the pod. Defaults to \"ClusterFirst\". Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy. To have DNS options set along with hostNetwork, you have to specify DNS policy explicitly to 'ClusterFirstWithHostNet'.\n\nPossible enum values:\n - `\"ClusterFirst\"` indicates that the pod should use cluster DNS first unless hostNetwork is true, if it is available, then fall back on the default (as determined by kubelet) DNS settings.\n - `\"ClusterFirstWithHostNet\"` indicates that the pod should use cluster DNS first, if it is available, then fall back on the default (as determined by kubelet) DNS settings.\n - `\"Default\"` indicates that the pod should use the default (as determined by kubelet) DNS settings.\n - `\"None\"` indicates that the pod should use empty DNS settings. DNS parameters such as nameservers and search paths should be defined via DNSConfig.", + "type": "string", + "enum": [ + "ClusterFirst", + "ClusterFirstWithHostNet", + "Default", + "None" + ] + }, + "enableServiceLinks": { + "description": "EnableServiceLinks indicates whether information about services should be injected into pod's environment variables, matching the syntax of Docker links. Optional: Defaults to true.", + "type": "boolean" + }, + "ephemeralContainers": { + "description": "List of ephemeral containers run in this pod. Ephemeral containers may be run in an existing pod to perform user-initiated actions such as debugging. This list cannot be specified when creating a pod, and it cannot be modified by updating the pod spec. In order to add an ephemeral container to an existing pod, use the pod's ephemeralcontainers subresource.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EphemeralContainer" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + }, + "hostAliases": { + "description": "HostAliases is an optional list of hosts and IPs that will be injected into the pod's hosts file if specified.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.HostAlias" + }, + "x-kubernetes-list-map-keys": [ + "ip" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "ip", + "x-kubernetes-patch-strategy": "merge" + }, + "hostIPC": { + "description": "Use the host's ipc namespace. Optional: Default to false.", + "type": "boolean" + }, + "hostNetwork": { + "description": "Host networking requested for this pod. Use the host's network namespace. If this option is set, the ports that will be used must be specified. Default to false.", + "type": "boolean" + }, + "hostPID": { + "description": "Use the host's pid namespace. Optional: Default to false.", + "type": "boolean" + }, + "hostUsers": { + "description": "Use the host's user namespace. Optional: Default to true. If set to true or not present, the pod will be run in the host user namespace, useful for when the pod needs a feature only available to the host user namespace, such as loading a kernel module with CAP_SYS_MODULE. When set to false, a new userns is created for the pod. Setting false is useful for mitigating container breakout vulnerabilities even allowing users to run their containers as root without actually having root privileges on the host. This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.", + "type": "boolean" + }, + "hostname": { + "description": "Specifies the hostname of the Pod If not specified, the pod's hostname will be set to a system-defined value.", + "type": "string" + }, + "imagePullSecrets": { + "description": "ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec. If specified, these secrets will be passed to individual puller implementations for them to use. More info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + }, + "initContainers": { + "description": "List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added or removed. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.Container" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + }, + "nodeName": { + "description": "NodeName indicates in which node this pod is scheduled. If empty, this pod is a candidate for scheduling by the scheduler defined in schedulerName. Once this field is set, the kubelet for this node becomes responsible for the lifecycle of this pod. This field should not be used to express a desire for the pod to be scheduled on a specific node. https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodename", + "type": "string" + }, + "nodeSelector": { + "description": "NodeSelector is a selector which must be true for the pod to fit on a node. Selector which must match a node's labels for the pod to be scheduled on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + }, + "x-kubernetes-map-type": "atomic" + }, + "os": { + "description": "Specifies the OS of the containers in the pod. Some pod and container fields are restricted if this is set.\n\nIf the OS field is set to linux, the following fields must be unset: -securityContext.windowsOptions\n\nIf the OS field is set to windows, following fields must be unset: - spec.hostPID - spec.hostIPC - spec.hostUsers - spec.securityContext.appArmorProfile - spec.securityContext.seLinuxOptions - spec.securityContext.seccompProfile - spec.securityContext.fsGroup - spec.securityContext.fsGroupChangePolicy - spec.securityContext.sysctls - spec.shareProcessNamespace - spec.securityContext.runAsUser - spec.securityContext.runAsGroup - spec.securityContext.supplementalGroups - spec.securityContext.supplementalGroupsPolicy - spec.containers[*].securityContext.appArmorProfile - spec.containers[*].securityContext.seLinuxOptions - spec.containers[*].securityContext.seccompProfile - spec.containers[*].securityContext.capabilities - spec.containers[*].securityContext.readOnlyRootFilesystem - spec.containers[*].securityContext.privileged - spec.containers[*].securityContext.allowPrivilegeEscalation - spec.containers[*].securityContext.procMount - spec.containers[*].securityContext.runAsUser - spec.containers[*].securityContext.runAsGroup", + "$ref": "#/definitions/io.k8s.api.core.v1.PodOS" + }, + "overhead": { + "description": "Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. This field will be autopopulated at admission time by the RuntimeClass admission controller. If the RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests. The RuntimeClass admission controller will reject Pod create requests which have the overhead already set. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the value defined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero. More info: https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } + }, + "preemptionPolicy": { + "description": "PreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset.\n\nPossible enum values:\n - `\"Never\"` means that pod never preempts other pods with lower priority.\n - `\"PreemptLowerPriority\"` means that pod can preempt other pods with lower priority.", + "type": "string", + "enum": [ + "Never", + "PreemptLowerPriority" + ] + }, + "priority": { + "description": "The priority value. Various system components use this field to find the priority of the pod. When Priority Admission Controller is enabled, it prevents users from setting this field. The admission controller populates this field from PriorityClassName. The higher the value, the higher the priority.", + "type": "integer", + "format": "int32" + }, + "priorityClassName": { + "description": "If specified, indicates the pod's priority. \"system-node-critical\" and \"system-cluster-critical\" are two special keywords which indicate the highest priorities with the former being the highest priority. Any other name must be defined by creating a PriorityClass object with that name. If not specified, the pod priority will be default or zero if there is no default.", + "type": "string" + }, + "readinessGates": { + "description": "If specified, all readiness gates will be evaluated for pod readiness. A pod is ready when all its containers are ready AND all conditions specified in the readiness gates have status equal to \"True\" More info: https://git.k8s.io/enhancements/keps/sig-network/580-pod-readiness-gates", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodReadinessGate" + }, + "x-kubernetes-list-type": "atomic" + }, + "resourceClaims": { + "description": "ResourceClaims defines which ResourceClaims must be allocated and reserved before the Pod is allowed to start. The resources will be made available to those containers which consume them by name.\n\nThis is an alpha field and requires enabling the DynamicResourceAllocation feature gate.\n\nThis field is immutable.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodResourceClaim" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge,retainKeys" + }, + "restartPolicy": { + "description": "Restart policy for all containers within the pod. One of Always, OnFailure, Never. In some contexts, only a subset of those values may be permitted. Default to Always. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy\n\nPossible enum values:\n - `\"Always\"`\n - `\"Never\"`\n - `\"OnFailure\"`", + "type": "string", + "enum": [ + "Always", + "Never", + "OnFailure" + ] + }, + "runtimeClassName": { + "description": "RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be used to run this pod. If no RuntimeClass resource matches the named class, the pod will not be run. If unset or empty, the \"legacy\" RuntimeClass will be used, which is an implicit class with an empty definition that uses the default runtime handler. More info: https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class", + "type": "string" + }, + "schedulerName": { + "description": "If specified, the pod will be dispatched by specified scheduler. If not specified, the pod will be dispatched by default scheduler.", + "type": "string" + }, + "schedulingGates": { + "description": "SchedulingGates is an opaque list of values that if specified will block scheduling the pod. If schedulingGates is not empty, the pod will stay in the SchedulingGated state and the scheduler will not attempt to schedule the pod.\n\nSchedulingGates can only be set at pod creation time, and be removed only afterwards.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodSchedulingGate" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + }, + "securityContext": { + "description": "SecurityContext holds pod-level security attributes and common container settings. Optional: Defaults to empty. See type description for default values of each field.", + "$ref": "#/definitions/io.k8s.api.core.v1.PodSecurityContext" + }, + "serviceAccount": { + "description": "DeprecatedServiceAccount is a deprecated alias for ServiceAccountName. Deprecated: Use serviceAccountName instead.", + "type": "string" + }, + "serviceAccountName": { + "description": "ServiceAccountName is the name of the ServiceAccount to use to run this pod. More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/", + "type": "string" + }, + "setHostnameAsFQDN": { + "description": "If true the pod's hostname will be configured as the pod's FQDN, rather than the leaf name (the default). In Linux containers, this means setting the FQDN in the hostname field of the kernel (the nodename field of struct utsname). In Windows containers, this means setting the registry value of hostname for the registry key HKEY_LOCAL_MACHINE\\\\SYSTEM\\\\CurrentControlSet\\\\Services\\\\Tcpip\\\\Parameters to FQDN. If a pod does not have FQDN, this has no effect. Default to false.", + "type": "boolean" + }, + "shareProcessNamespace": { + "description": "Share a single process namespace between all of the containers in a pod. When this is set containers will be able to view and signal processes from other containers in the same pod, and the first process in each container will not be assigned PID 1. HostPID and ShareProcessNamespace cannot both be set. Optional: Default to false.", + "type": "boolean" + }, + "subdomain": { + "description": "If specified, the fully qualified Pod hostname will be \"\u003chostname\u003e.\u003csubdomain\u003e.\u003cpod namespace\u003e.svc.\u003ccluster domain\u003e\". If not specified, the pod will not have a domainname at all.", + "type": "string" + }, + "terminationGracePeriodSeconds": { + "description": "Optional duration in seconds the pod needs to terminate gracefully. May be decreased in delete request. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). If this value is nil, the default grace period will be used instead. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. Defaults to 30 seconds.", + "type": "integer", + "format": "int64" + }, + "tolerations": { + "description": "If specified, the pod's tolerations.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" + }, + "x-kubernetes-list-type": "atomic" + }, + "topologySpreadConstraints": { + "description": "TopologySpreadConstraints describes how a group of pods ought to spread across topology domains. Scheduler will schedule pods in a way which abides by the constraints. All topologySpreadConstraints are ANDed.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.TopologySpreadConstraint" + }, + "x-kubernetes-list-map-keys": [ + "topologyKey", + "whenUnsatisfiable" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "topologyKey", + "x-kubernetes-patch-strategy": "merge" + }, + "volumes": { + "description": "List of volumes that can be mounted by containers belonging to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.Volume" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge,retainKeys" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "PodSpec", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodStatus": { + "description": "PodStatus represents information about the status of a pod. Status may trail the actual state of a system, especially if the node that hosts the pod cannot contact the control plane.", + "type": "object", + "properties": { + "conditions": { + "description": "Current service state of pod. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodCondition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "containerStatuses": { + "description": "The list has one entry per container in the manifest. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerStatus" + }, + "x-kubernetes-list-type": "atomic" + }, + "ephemeralContainerStatuses": { + "description": "Status for any ephemeral containers that have run in this pod.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerStatus" + }, + "x-kubernetes-list-type": "atomic" + }, + "hostIP": { + "description": "hostIP holds the IP address of the host to which the pod is assigned. Empty if the pod has not started yet. A pod can be assigned to a node that has a problem in kubelet which in turns mean that HostIP will not be updated even if there is a node is assigned to pod", + "type": "string" + }, + "hostIPs": { + "description": "hostIPs holds the IP addresses allocated to the host. If this field is specified, the first entry must match the hostIP field. This list is empty if the pod has not started yet. A pod can be assigned to a node that has a problem in kubelet which in turns means that HostIPs will not be updated even if there is a node is assigned to this pod.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.HostIP" + }, + "x-kubernetes-list-type": "atomic", + "x-kubernetes-patch-merge-key": "ip", + "x-kubernetes-patch-strategy": "merge" + }, + "initContainerStatuses": { + "description": "The list has one entry per init container in the manifest. The most recent successful init container will have ready = true, the most recently started container will have startTime set. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ContainerStatus" + }, + "x-kubernetes-list-type": "atomic" + }, + "message": { + "description": "A human readable message indicating details about why the pod is in this condition.", + "type": "string" + }, + "nominatedNodeName": { + "description": "nominatedNodeName is set only when this pod preempts other pods on the node, but it cannot be scheduled right away as preemption victims receive their graceful termination periods. This field does not guarantee that the pod will be scheduled on this node. Scheduler may decide to place the pod elsewhere if other nodes become available sooner. Scheduler may also decide to give the resources on this node to a higher priority pod that is created after preemption. As a result, this field may be different than PodSpec.nodeName when the pod is scheduled.", + "type": "string" + }, + "phase": { + "description": "The phase of a Pod is a simple, high-level summary of where the Pod is in its lifecycle. The conditions array, the reason and message fields, and the individual container status arrays contain more detail about the pod's status. There are five possible phase values:\n\nPending: The pod has been accepted by the Kubernetes system, but one or more of the container images has not been created. This includes time before being scheduled as well as time spent downloading images over the network, which could take a while. Running: The pod has been bound to a node, and all of the containers have been created. At least one container is still running, or is in the process of starting or restarting. Succeeded: All containers in the pod have terminated in success, and will not be restarted. Failed: All containers in the pod have terminated, and at least one container has terminated in failure. The container either exited with non-zero status or was terminated by the system. Unknown: For some reason the state of the pod could not be obtained, typically due to an error in communicating with the host of the pod.\n\nMore info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-phase\n\nPossible enum values:\n - `\"Failed\"` means that all containers in the pod have terminated, and at least one container has terminated in a failure (exited with a non-zero exit code or was stopped by the system).\n - `\"Pending\"` means the pod has been accepted by the system, but one or more of the containers has not been started. This includes time before being bound to a node, as well as time spent pulling images onto the host.\n - `\"Running\"` means the pod has been bound to a node and all of the containers have been started. At least one container is still running or is in the process of being restarted.\n - `\"Succeeded\"` means that all containers in the pod have voluntarily terminated with a container exit code of 0, and the system is not going to restart any of these containers.\n - `\"Unknown\"` means that for some reason the state of the pod could not be obtained, typically due to an error in communicating with the host of the pod. Deprecated: It isn't being set since 2015 (74da3b14b0c0f658b3bb8d2def5094686d0e9095)", + "type": "string", + "enum": [ + "Failed", + "Pending", + "Running", + "Succeeded", + "Unknown" + ] + }, + "podIP": { + "description": "podIP address allocated to the pod. Routable at least within the cluster. Empty if not yet allocated.", + "type": "string" + }, + "podIPs": { + "description": "podIPs holds the IP addresses allocated to the pod. If this field is specified, the 0th entry must match the podIP field. Pods may be allocated at most 1 value for each of IPv4 and IPv6. This list is empty if no IPs have been allocated yet.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodIP" + }, + "x-kubernetes-list-map-keys": [ + "ip" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "ip", + "x-kubernetes-patch-strategy": "merge" + }, + "qosClass": { + "description": "The Quality of Service (QOS) classification assigned to the pod based on resource requirements See PodQOSClass type for available QOS classes More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-qos/#quality-of-service-classes\n\nPossible enum values:\n - `\"BestEffort\"` is the BestEffort qos class.\n - `\"Burstable\"` is the Burstable qos class.\n - `\"Guaranteed\"` is the Guaranteed qos class.", + "type": "string", + "enum": [ + "BestEffort", + "Burstable", + "Guaranteed" + ] + }, + "reason": { + "description": "A brief CamelCase message indicating details about why the pod is in this state. e.g. 'Evicted'", + "type": "string" + }, + "resize": { + "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"", + "type": "string" + }, + "resourceClaimStatuses": { + "description": "Status of resource claims.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodResourceClaimStatus" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge,retainKeys" + }, + "startTime": { + "description": "RFC 3339 date and time at which the object was acknowledged by the Kubelet. This is before the Kubelet pulled the container image(s) for the pod.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "PodStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodStatusResult": { + "description": "PodStatusResult is a wrapper for PodStatus returned by kubelet that can be encode/decoded", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "status": { + "description": "Most recently observed status of the pod. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "PodStatusResult", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodTemplate": { + "description": "PodTemplate describes a template for creating copies of a predefined pod.", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "template": { + "description": "Template defines the pods that will be created from this pod template. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "PodTemplate", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodTemplateList": { + "description": "PodTemplateList is a list of PodTemplates.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of pod templates", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplate" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "", + "Version": "v1", + "Kind": "PodTemplateList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PodTemplateSpec": { + "description": "PodTemplateSpec describes the data a pod should have when created from a template", + "type": "object", + "properties": { + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodSpec" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "PodTemplateSpec", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PortStatus": { + "type": "object", + "required": [ + "port", + "protocol" + ], + "properties": { + "error": { + "description": "Error is to record the problem with the service port The format of the error shall comply with the following rules: - built-in error values shall be specified in this file and those shall use\n CamelCase names\n- cloud provider specific error values must have names that comply with the\n format foo.example.com/CamelCase.", + "type": "string" + }, + "port": { + "description": "Port is the port number of the service port of which status is recorded here", + "type": "integer", + "format": "int32", + "default": 0 + }, + "protocol": { + "description": "Protocol is the protocol of the service port of which status is recorded here The supported values are: \"TCP\", \"UDP\", \"SCTP\"\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", + "type": "string", + "default": "", + "enum": [ + "SCTP", + "TCP", + "UDP" + ] + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "PortStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PortworxVolumeSource": { + "description": "PortworxVolumeSource represents a Portworx volume resource.", + "type": "object", + "required": [ + "volumeID" + ], + "properties": { + "fsType": { + "description": "fSType represents the filesystem type to mount Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\". Implicitly inferred to be \"ext4\" if unspecified.", + "type": "string" + }, + "readOnly": { + "description": "readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" + }, + "volumeID": { + "description": "volumeID uniquely identifies a Portworx volume", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "PortworxVolumeSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.Preconditions": { + "description": "Preconditions must be fulfilled before an operation (update, delete, etc.) is carried out.", + "type": "object", + "properties": { + "uid": { + "description": "Specifies the target UID.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "Preconditions", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PreferAvoidPodsEntry": { + "description": "Describes a class of pods that should avoid this node.", + "type": "object", + "required": [ + "podSignature" + ], + "properties": { + "evictionTime": { + "description": "Time at which this entry was added to the list.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "Human readable message indicating why this entry was added to the list.", + "type": "string" + }, + "podSignature": { + "description": "The class of pods.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodSignature" + }, + "reason": { + "description": "(brief) reason why this entry was added to the list.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "PreferAvoidPodsEntry", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.PreferredSchedulingTerm": { + "description": "An empty preferred scheduling term matches all objects with implicit weight 0 (i.e. it's a no-op). A null preferred scheduling term matches no objects (i.e. is also a no-op).", + "type": "object", + "required": [ + "weight", + "preference" + ], + "properties": { + "preference": { + "description": "A node selector term, associated with the corresponding weight.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelectorTerm" + }, + "weight": { + "description": "Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.", + "type": "integer", + "format": "int32", + "default": 0 + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "PreferredSchedulingTerm", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.Probe": { + "description": "Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.", + "type": "object", + "properties": { + "exec": { + "description": "Exec specifies the action to take.", + "$ref": "#/definitions/io.k8s.api.core.v1.ExecAction" + }, + "failureThreshold": { + "description": "Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.", + "type": "integer", + "format": "int32" + }, + "grpc": { + "description": "GRPC specifies an action involving a GRPC port.", + "$ref": "#/definitions/io.k8s.api.core.v1.GRPCAction" + }, + "httpGet": { + "description": "HTTPGet specifies the http request to perform.", + "$ref": "#/definitions/io.k8s.api.core.v1.HTTPGetAction" + }, + "initialDelaySeconds": { + "description": "Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes", + "type": "integer", + "format": "int32" + }, + "periodSeconds": { + "description": "How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.", + "type": "integer", + "format": "int32" + }, + "successThreshold": { + "description": "Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.", + "type": "integer", + "format": "int32" + }, + "tcpSocket": { + "description": "TCPSocket specifies an action involving a TCP port.", + "$ref": "#/definitions/io.k8s.api.core.v1.TCPSocketAction" + }, + "terminationGracePeriodSeconds": { + "description": "Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.", + "type": "integer", + "format": "int64" + }, + "timeoutSeconds": { + "description": "Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes", + "type": "integer", + "format": "int32" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "Probe", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ProbeHandler": { + "description": "ProbeHandler defines a specific action that should be taken in a probe. One and only one of the fields must be specified.", + "type": "object", + "properties": { + "exec": { + "description": "Exec specifies the action to take.", + "$ref": "#/definitions/io.k8s.api.core.v1.ExecAction" + }, + "grpc": { + "description": "GRPC specifies an action involving a GRPC port.", + "$ref": "#/definitions/io.k8s.api.core.v1.GRPCAction" + }, + "httpGet": { + "description": "HTTPGet specifies the http request to perform.", + "$ref": "#/definitions/io.k8s.api.core.v1.HTTPGetAction" + }, + "tcpSocket": { + "description": "TCPSocket specifies an action involving a TCP port.", + "$ref": "#/definitions/io.k8s.api.core.v1.TCPSocketAction" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ProbeHandler", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ProjectedVolumeSource": { + "description": "Represents a projected volume source", + "type": "object", + "properties": { + "defaultMode": { + "description": "defaultMode are the mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.", + "type": "integer", + "format": "int32" + }, + "sources": { + "description": "sources is the list of volume projections. Each entry in this list handles one source.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.VolumeProjection" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ProjectedVolumeSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.QuobyteVolumeSource": { + "description": "Represents a Quobyte mount that lasts the lifetime of a pod. Quobyte volumes do not support ownership management or SELinux relabeling.", + "type": "object", + "required": [ + "registry", + "volume" + ], + "properties": { + "group": { + "description": "group to map volume access to Default is no group", + "type": "string" + }, + "readOnly": { + "description": "readOnly here will force the Quobyte volume to be mounted with read-only permissions. Defaults to false.", + "type": "boolean" + }, + "registry": { + "description": "registry represents a single or multiple Quobyte Registry services specified as a string as host:port pair (multiple entries are separated with commas) which acts as the central registry for volumes", + "type": "string", + "default": "" + }, + "tenant": { + "description": "tenant owning the given Quobyte volume in the Backend Used with dynamically provisioned Quobyte volumes, value is set by the plugin", + "type": "string" + }, + "user": { + "description": "user to map volume access to Defaults to serivceaccount user", + "type": "string" + }, + "volume": { + "description": "volume is a string that references an already created Quobyte volume by name.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "QuobyteVolumeSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.RBDPersistentVolumeSource": { + "description": "Represents a Rados Block Device mount that lasts the lifetime of a pod. RBD volumes support ownership management and SELinux relabeling.", + "type": "object", + "required": [ + "monitors", + "image" + ], + "properties": { + "fsType": { + "description": "fsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd", + "type": "string" + }, + "image": { + "description": "image is the rados image name. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "string", + "default": "" + }, + "keyring": { + "description": "keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "string", + "default": "/etc/ceph/keyring" + }, + "monitors": { + "description": "monitors is a collection of Ceph monitors. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "pool": { + "description": "pool is the rados pool name. Default is rbd. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "string", + "default": "rbd" + }, + "readOnly": { + "description": "readOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "boolean" + }, + "secretRef": { + "description": "secretRef is name of the authentication secret for RBDUser. If provided overrides keyring. Default is nil. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" + }, + "user": { + "description": "user is the rados user name. Default is admin. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "string", + "default": "admin" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "RBDPersistentVolumeSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.RBDVolumeSource": { + "description": "Represents a Rados Block Device mount that lasts the lifetime of a pod. RBD volumes support ownership management and SELinux relabeling.", + "type": "object", + "required": [ + "monitors", + "image" + ], + "properties": { + "fsType": { + "description": "fsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd", + "type": "string" + }, + "image": { + "description": "image is the rados image name. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "string", + "default": "" + }, + "keyring": { + "description": "keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "string", + "default": "/etc/ceph/keyring" + }, + "monitors": { + "description": "monitors is a collection of Ceph monitors. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "pool": { + "description": "pool is the rados pool name. Default is rbd. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "string", + "default": "rbd" + }, + "readOnly": { + "description": "readOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "boolean" + }, + "secretRef": { + "description": "secretRef is name of the authentication secret for RBDUser. If provided overrides keyring. Default is nil. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "user": { + "description": "user is the rados user name. Default is admin. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "type": "string", + "default": "admin" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "RBDVolumeSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.RangeAllocation": { + "description": "RangeAllocation is not a public type.", + "type": "object", + "required": [ + "range", + "data" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "data": { + "description": "Data is a bit array containing all allocated addresses in the previous segment.", + "type": "string", + "format": "byte" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "range": { + "description": "Range is string that identifies the range represented by 'data'.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "RangeAllocation", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ReplicationController": { + "description": "ReplicationController represents the configuration of a replication controller.", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "If the Labels of a ReplicationController are empty, they are defaulted to be the same as the Pod(s) that the replication controller manages. Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "Spec defines the specification of the desired behavior of the replication controller. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationControllerSpec" + }, + "status": { + "description": "Status is the most recently observed status of the replication controller. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationControllerStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "ReplicationController", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ReplicationControllerCondition": { + "description": "ReplicationControllerCondition describes the state of a replication controller at a certain point.", + "type": "object", + "required": [ + "type", + "status" + ], + "properties": { + "lastTransitionTime": { + "description": "The last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "A human readable message indicating details about the transition.", + "type": "string" + }, + "reason": { + "description": "The reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status of the condition, one of True, False, Unknown.", + "type": "string", + "default": "" + }, + "type": { + "description": "Type of replication controller condition.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ReplicationControllerCondition", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ReplicationControllerList": { + "description": "ReplicationControllerList is a collection of replication controllers.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of replication controllers. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationController" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "", + "Version": "v1", + "Kind": "ReplicationControllerList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ReplicationControllerSpec": { + "description": "ReplicationControllerSpec is the specification of a replication controller.", + "type": "object", + "properties": { + "minReadySeconds": { + "description": "Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", + "type": "integer", + "format": "int32" + }, + "replicas": { + "description": "Replicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. Defaults to 1. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontroller", + "type": "integer", + "format": "int32" + }, + "selector": { + "description": "Selector is a label query over pods that should match the Replicas count. If Selector is empty, it is defaulted to the labels present on the Pod template. Label keys and values that must match in order to be controlled by this replication controller, if empty defaulted to labels on Pod template. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + }, + "x-kubernetes-map-type": "atomic" + }, + "template": { + "description": "Template is the object that describes the pod that will be created if insufficient replicas are detected. This takes precedence over a TemplateRef. The only allowed template.spec.restartPolicy value is \"Always\". More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template", + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ReplicationControllerSpec", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ReplicationControllerStatus": { + "description": "ReplicationControllerStatus represents the current status of a replication controller.", + "type": "object", + "required": [ + "replicas" + ], + "properties": { + "availableReplicas": { + "description": "The number of available replicas (ready for at least minReadySeconds) for this replication controller.", + "type": "integer", + "format": "int32" + }, + "conditions": { + "description": "Represents the latest available observations of a replication controller's current state.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationControllerCondition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "fullyLabeledReplicas": { + "description": "The number of pods that have labels matching the labels of the pod template of the replication controller.", + "type": "integer", + "format": "int32" + }, + "observedGeneration": { + "description": "ObservedGeneration reflects the generation of the most recently observed replication controller.", + "type": "integer", + "format": "int64" + }, + "readyReplicas": { + "description": "The number of ready replicas for this replication controller.", + "type": "integer", + "format": "int32" + }, + "replicas": { + "description": "Replicas is the most recently observed number of replicas. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontroller", + "type": "integer", + "format": "int32", + "default": 0 + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ReplicationControllerStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ResourceClaim": { + "description": "ResourceClaim references one entry in PodSpec.ResourceClaims.", + "type": "object", + "required": [ + "name" + ], + "properties": { + "name": { + "description": "Name must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.", + "type": "string", + "default": "" + }, + "request": { + "description": "Request is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ResourceClaim", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ResourceFieldSelector": { + "description": "ResourceFieldSelector represents container resources (cpu, memory) and their output format", + "type": "object", + "required": [ + "resource" + ], + "properties": { + "containerName": { + "description": "Container name: required for volumes, optional for env vars", + "type": "string" + }, + "divisor": { + "description": "Specifies the output format of the exposed resources, defaults to \"1\"", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "resource": { + "description": "Required: resource to select", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ResourceFieldSelector", + "Scope": "Namespaced" + }, + "x-kubernetes-map-type": "atomic" + }, + "io.k8s.api.core.v1.ResourceHealth": { + "description": "ResourceHealth represents the health of a resource. It has the latest device health information. This is a part of KEP https://kep.k8s.io/4680 and historical health changes are planned to be added in future iterations of a KEP.", + "type": "object", + "required": [ + "resourceID" + ], + "properties": { + "health": { + "description": "Health of the resource. can be one of:\n - Healthy: operates as normal\n - Unhealthy: reported unhealthy. We consider this a temporary health issue\n since we do not have a mechanism today to distinguish\n temporary and permanent issues.\n - Unknown: The status cannot be determined.\n For example, Device Plugin got unregistered and hasn't been re-registered since.\n\nIn future we may want to introduce the PermanentlyUnhealthy Status.", + "type": "string" + }, + "resourceID": { + "description": "ResourceID is the unique identifier of the resource. See the ResourceID type for more information.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ResourceHealth", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ResourceQuota": { + "description": "ResourceQuota sets aggregate quota restrictions enforced per namespace", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "Spec defines the desired quota. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuotaSpec" + }, + "status": { + "description": "Status defines the actual enforced quota and its current usage. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuotaStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "ResourceQuota", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ResourceQuotaList": { + "description": "ResourceQuotaList is a list of ResourceQuota items.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of ResourceQuota objects. More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuota" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "", + "Version": "v1", + "Kind": "ResourceQuotaList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ResourceQuotaSpec": { + "description": "ResourceQuotaSpec defines the desired hard limits to enforce for Quota.", + "type": "object", + "properties": { + "hard": { + "description": "hard is the set of desired hard limits for each named resource. More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } + }, + "scopeSelector": { + "description": "scopeSelector is also a collection of filters like scopes that must match each object tracked by a quota but expressed using ScopeSelectorOperator in combination with possible values. For a resource to match, both scopes AND scopeSelector (if specified in spec), must be matched.", + "$ref": "#/definitions/io.k8s.api.core.v1.ScopeSelector" + }, + "scopes": { + "description": "A collection of filters that must match each object tracked by a quota. If not specified, the quota matches all objects.", + "type": "array", + "items": { + "type": "string", + "default": "", + "enum": [ + "BestEffort", + "CrossNamespacePodAffinity", + "NotBestEffort", + "NotTerminating", + "PriorityClass", + "Terminating" + ] + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ResourceQuotaSpec", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ResourceQuotaStatus": { + "description": "ResourceQuotaStatus defines the enforced hard limits and observed use.", + "type": "object", + "properties": { + "hard": { + "description": "Hard is the set of enforced hard limits for each named resource. More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } + }, + "used": { + "description": "Used is the current observed total usage of the resource in the namespace.", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ResourceQuotaStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ResourceRequirements": { + "description": "ResourceRequirements describes the compute resource requirements.", + "type": "object", + "properties": { + "claims": { + "description": "Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.\n\nThis is an alpha field and requires enabling the DynamicResourceAllocation feature gate.\n\nThis field is immutable. It can only be set for containers.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceClaim" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map" + }, + "limits": { + "description": "Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } + }, + "requests": { + "description": "Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ResourceRequirements", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ResourceStatus": { + "type": "object", + "required": [ + "name" + ], + "properties": { + "name": { + "description": "Name of the resource. Must be unique within the pod and match one of the resources from the pod spec.", + "type": "string", + "default": "" + }, + "resources": { + "description": "List of unique Resources health. Each element in the list contains an unique resource ID and resource health. At a minimum, ResourceID must uniquely identify the Resource allocated to the Pod on the Node for the lifetime of a Pod. See ResourceID type for it's definition.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceHealth" + }, + "x-kubernetes-list-map-keys": [ + "resourceID" + ], + "x-kubernetes-list-type": "map" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ResourceStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.SELinuxOptions": { + "description": "SELinuxOptions are the labels to be applied to the container", + "type": "object", + "properties": { + "level": { + "description": "Level is SELinux level label that applies to the container.", + "type": "string" + }, + "role": { + "description": "Role is a SELinux role label that applies to the container.", + "type": "string" + }, + "type": { + "description": "Type is a SELinux type label that applies to the container.", + "type": "string" + }, + "user": { + "description": "User is a SELinux user label that applies to the container.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "SELinuxOptions", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ScaleIOPersistentVolumeSource": { + "description": "ScaleIOPersistentVolumeSource represents a persistent ScaleIO volume", + "type": "object", + "required": [ + "gateway", + "system", + "secretRef" + ], + "properties": { + "fsType": { + "description": "fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Default is \"xfs\"", + "type": "string", + "default": "xfs" + }, + "gateway": { + "description": "gateway is the host address of the ScaleIO API Gateway.", + "type": "string", + "default": "" + }, + "protectionDomain": { + "description": "protectionDomain is the name of the ScaleIO Protection Domain for the configured storage.", + "type": "string" + }, + "readOnly": { + "description": "readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" + }, + "secretRef": { + "description": "secretRef references to the secret for ScaleIO user and other sensitive information. If this is not provided, Login operation will fail.", + "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" + }, + "sslEnabled": { + "description": "sslEnabled is the flag to enable/disable SSL communication with Gateway, default false", + "type": "boolean" + }, + "storageMode": { + "description": "storageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned.", + "type": "string", + "default": "ThinProvisioned" + }, + "storagePool": { + "description": "storagePool is the ScaleIO Storage Pool associated with the protection domain.", + "type": "string" + }, + "system": { + "description": "system is the name of the storage system as configured in ScaleIO.", + "type": "string", + "default": "" + }, + "volumeName": { + "description": "volumeName is the name of a volume already created in the ScaleIO system that is associated with this volume source.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ScaleIOPersistentVolumeSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ScaleIOVolumeSource": { + "description": "ScaleIOVolumeSource represents a persistent ScaleIO volume", + "type": "object", + "required": [ + "gateway", + "system", + "secretRef" + ], + "properties": { + "fsType": { + "description": "fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Default is \"xfs\".", + "type": "string", + "default": "xfs" + }, + "gateway": { + "description": "gateway is the host address of the ScaleIO API Gateway.", + "type": "string", + "default": "" + }, + "protectionDomain": { + "description": "protectionDomain is the name of the ScaleIO Protection Domain for the configured storage.", + "type": "string" + }, + "readOnly": { + "description": "readOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" + }, + "secretRef": { + "description": "secretRef references to the secret for ScaleIO user and other sensitive information. If this is not provided, Login operation will fail.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "sslEnabled": { + "description": "sslEnabled Flag enable/disable SSL communication with Gateway, default false", + "type": "boolean" + }, + "storageMode": { + "description": "storageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned.", + "type": "string", + "default": "ThinProvisioned" + }, + "storagePool": { + "description": "storagePool is the ScaleIO Storage Pool associated with the protection domain.", + "type": "string" + }, + "system": { + "description": "system is the name of the storage system as configured in ScaleIO.", + "type": "string", + "default": "" + }, + "volumeName": { + "description": "volumeName is the name of a volume already created in the ScaleIO system that is associated with this volume source.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ScaleIOVolumeSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ScopeSelector": { + "description": "A scope selector represents the AND of the selectors represented by the scoped-resource selector requirements.", + "type": "object", + "properties": { + "matchExpressions": { + "description": "A list of scope selector requirements by scope of the resources.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ScopedResourceSelectorRequirement" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ScopeSelector", + "Scope": "Namespaced" + }, + "x-kubernetes-map-type": "atomic" + }, + "io.k8s.api.core.v1.ScopedResourceSelectorRequirement": { + "description": "A scoped-resource selector requirement is a selector that contains values, a scope name, and an operator that relates the scope name and values.", + "type": "object", + "required": [ + "scopeName", + "operator" + ], + "properties": { + "operator": { + "description": "Represents a scope's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist.\n\nPossible enum values:\n - `\"DoesNotExist\"`\n - `\"Exists\"`\n - `\"In\"`\n - `\"NotIn\"`", + "type": "string", + "default": "", + "enum": [ + "DoesNotExist", + "Exists", + "In", + "NotIn" + ] + }, + "scopeName": { + "description": "The name of the scope that the selector applies to.\n\nPossible enum values:\n - `\"BestEffort\"` Match all pod objects that have best effort quality of service\n - `\"CrossNamespacePodAffinity\"` Match all pod objects that have cross-namespace pod (anti)affinity mentioned.\n - `\"NotBestEffort\"` Match all pod objects that do not have best effort quality of service\n - `\"NotTerminating\"` Match all pod objects where spec.activeDeadlineSeconds is nil\n - `\"PriorityClass\"` Match all pod objects that have priority class mentioned\n - `\"Terminating\"` Match all pod objects where spec.activeDeadlineSeconds \u003e=0", + "type": "string", + "default": "", + "enum": [ + "BestEffort", + "CrossNamespacePodAffinity", + "NotBestEffort", + "NotTerminating", + "PriorityClass", + "Terminating" + ] + }, + "values": { + "description": "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ScopedResourceSelectorRequirement", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.SeccompProfile": { + "description": "SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set.", + "type": "object", + "required": [ + "type" + ], + "properties": { + "localhostProfile": { + "description": "localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must be set if type is \"Localhost\". Must NOT be set for any other type.", + "type": "string" + }, + "type": { + "description": "type indicates which kind of seccomp profile will be applied. Valid options are:\n\nLocalhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.\n\nPossible enum values:\n - `\"Localhost\"` indicates a profile defined in a file on the node should be used. The file's location relative to \u003ckubelet-root-dir\u003e/seccomp.\n - `\"RuntimeDefault\"` represents the default container runtime seccomp profile.\n - `\"Unconfined\"` indicates no seccomp profile is applied (A.K.A. unconfined).", + "type": "string", + "default": "", + "enum": [ + "Localhost", + "RuntimeDefault", + "Unconfined" + ] + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "SeccompProfile", + "Scope": "Namespaced" + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "localhostProfile": "LocalhostProfile" + } + } + ] + }, + "io.k8s.api.core.v1.Secret": { + "description": "Secret holds secret data of a certain type. The total bytes of the values in the Data field must be less than MaxSecretSize bytes.", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "data": { + "description": "Data contains the secret data. Each key must consist of alphanumeric characters, '-', '_' or '.'. The serialized form of the secret data is a base64 encoded string, representing the arbitrary (possibly non-string) data value here. Described in https://tools.ietf.org/html/rfc4648#section-4", + "type": "object", + "additionalProperties": { + "type": "string", + "format": "byte" + } + }, + "immutable": { + "description": "Immutable, if set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. Defaulted to nil.", + "type": "boolean" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "stringData": { + "description": "stringData allows specifying non-binary secret data in string form. It is provided as a write-only input field for convenience. All keys and values are merged into the data field on write, overwriting any existing values. The stringData field is never output when reading from the API.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "type": { + "description": "Used to facilitate programmatic handling of secret data. More info: https://kubernetes.io/docs/concepts/configuration/secret/#secret-types", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "Secret", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.SecretEnvSource": { + "description": "SecretEnvSource selects a Secret to populate the environment variables with.\n\nThe contents of the target Secret's Data field will represent the key-value pairs as environment variables.", + "type": "object", + "properties": { + "name": { + "description": "Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string", + "default": "" + }, + "optional": { + "description": "Specify whether the Secret must be defined", + "type": "boolean" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "SecretEnvSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.SecretKeySelector": { + "description": "SecretKeySelector selects a key of a Secret.", + "type": "object", + "required": [ + "key" + ], + "properties": { + "key": { + "description": "The key of the secret to select from. Must be a valid secret key.", + "type": "string", + "default": "" + }, + "name": { + "description": "Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string", + "default": "" + }, + "optional": { + "description": "Specify whether the Secret or its key must be defined", + "type": "boolean" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "SecretKeySelector", + "Scope": "Namespaced" + }, + "x-kubernetes-map-type": "atomic" + }, + "io.k8s.api.core.v1.SecretList": { + "description": "SecretList is a list of Secret.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of secret objects. More info: https://kubernetes.io/docs/concepts/configuration/secret", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.Secret" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "", + "Version": "v1", + "Kind": "SecretList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.SecretProjection": { + "description": "Adapts a secret into a projected volume.\n\nThe contents of the target Secret's Data field will be presented in a projected volume as files using the keys in the Data field as the file names. Note that this is identical to a secret volume source without the default mode.", + "type": "object", + "properties": { + "items": { + "description": "items if unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.KeyToPath" + }, + "x-kubernetes-list-type": "atomic" + }, + "name": { + "description": "Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string", + "default": "" + }, + "optional": { + "description": "optional field specify whether the Secret or its key must be defined", + "type": "boolean" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "SecretProjection", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.SecretReference": { + "description": "SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace", + "type": "object", + "properties": { + "name": { + "description": "name is unique within a namespace to reference a secret resource.", + "type": "string" + }, + "namespace": { + "description": "namespace defines the space within which the secret name must be unique.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "SecretReference", + "Scope": "Namespaced" + }, + "x-kubernetes-map-type": "atomic" + }, + "io.k8s.api.core.v1.SecretVolumeSource": { + "description": "Adapts a Secret into a volume.\n\nThe contents of the target Secret's Data field will be presented in a volume as files using the keys in the Data field as the file names. Secret volumes support ownership management and SELinux relabeling.", + "type": "object", + "properties": { + "defaultMode": { + "description": "defaultMode is Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.", + "type": "integer", + "format": "int32" + }, + "items": { + "description": "items If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.KeyToPath" + }, + "x-kubernetes-list-type": "atomic" + }, + "optional": { + "description": "optional field specify whether the Secret or its keys must be defined", + "type": "boolean" + }, + "secretName": { + "description": "secretName is the name of the secret in the pod's namespace to use. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "SecretVolumeSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.SecurityContext": { + "description": "SecurityContext holds security configuration that will be applied to a container. Some fields are present in both SecurityContext and PodSecurityContext. When both are set, the values in SecurityContext take precedence.", + "type": "object", + "properties": { + "allowPrivilegeEscalation": { + "description": "AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows.", + "type": "boolean" + }, + "appArmorProfile": { + "description": "appArmorProfile is the AppArmor options to use by this container. If set, this profile overrides the pod's appArmorProfile. Note that this field cannot be set when spec.os.name is windows.", + "$ref": "#/definitions/io.k8s.api.core.v1.AppArmorProfile" + }, + "capabilities": { + "description": "The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime. Note that this field cannot be set when spec.os.name is windows.", + "$ref": "#/definitions/io.k8s.api.core.v1.Capabilities" + }, + "privileged": { + "description": "Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows.", + "type": "boolean" + }, + "procMount": { + "description": "procMount denotes the type of proc mount to use for the containers. The default value is Default which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows.\n\nPossible enum values:\n - `\"Default\"` uses the container runtime defaults for readonly and masked paths for /proc. Most container runtimes mask certain paths in /proc to avoid accidental security exposure of special devices or information.\n - `\"Unmasked\"` bypasses the default masking behavior of the container runtime and ensures the newly created /proc the container stays in tact with no modifications.", + "type": "string", + "enum": [ + "Default", + "Unmasked" + ] + }, + "readOnlyRootFilesystem": { + "description": "Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.", + "type": "boolean" + }, + "runAsGroup": { + "description": "The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.", + "type": "integer", + "format": "int64" + }, + "runAsNonRoot": { + "description": "Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.", + "type": "boolean" + }, + "runAsUser": { + "description": "The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.", + "type": "integer", + "format": "int64" + }, + "seLinuxOptions": { + "description": "The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.", + "$ref": "#/definitions/io.k8s.api.core.v1.SELinuxOptions" + }, + "seccompProfile": { + "description": "The seccomp options to use by this container. If seccomp options are provided at both the pod \u0026 container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows.", + "$ref": "#/definitions/io.k8s.api.core.v1.SeccompProfile" + }, + "windowsOptions": { + "description": "The Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux.", + "$ref": "#/definitions/io.k8s.api.core.v1.WindowsSecurityContextOptions" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "SecurityContext", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.SerializedReference": { + "description": "SerializedReference is a reference to serialized object.", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "reference": { + "description": "The reference to an object in the system.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "SerializedReference", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.Service": { + "description": "Service is a named abstraction of software service (for example, mysql) consisting of local port (for example 3306) that the proxy listens on, and the selector that determines which pods will answer requests sent through the proxy.", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "Spec defines the behavior of a service. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceSpec" + }, + "status": { + "description": "Most recently observed status of the service. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "Service", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ServiceAccount": { + "description": "ServiceAccount binds together: * a name, understood by users, and perhaps by peripheral systems, for an identity * a principal that can be authenticated and authorized * a set of secrets", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "automountServiceAccountToken": { + "description": "AutomountServiceAccountToken indicates whether pods running as this service account should have an API token automatically mounted. Can be overridden at the pod level.", + "type": "boolean" + }, + "imagePullSecrets": { + "description": "ImagePullSecrets is a list of references to secrets in the same namespace to use for pulling any images in pods that reference this ServiceAccount. ImagePullSecrets are distinct from Secrets because Secrets can be mounted in the pod, but ImagePullSecrets are only accessed by the kubelet. More info: https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "x-kubernetes-list-type": "atomic" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "secrets": { + "description": "Secrets is a list of the secrets in the same namespace that pods running using this ServiceAccount are allowed to use. Pods are only limited to this list if this service account has a \"kubernetes.io/enforce-mountable-secrets\" annotation set to \"true\". This field should not be used to find auto-generated service account token secrets for use outside of pods. Instead, tokens can be requested directly using the TokenRequest API, or service account token secrets can be manually created. More info: https://kubernetes.io/docs/concepts/configuration/secret", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "ServiceAccount", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ServiceAccountList": { + "description": "ServiceAccountList is a list of ServiceAccount objects", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of ServiceAccounts. More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceAccount" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "", + "Version": "v1", + "Kind": "ServiceAccountList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ServiceAccountTokenProjection": { + "description": "ServiceAccountTokenProjection represents a projected service account token volume. This projection can be used to insert a service account token into the pods runtime filesystem for use against APIs (Kubernetes API Server or otherwise).", + "type": "object", + "required": [ + "path" + ], + "properties": { + "audience": { + "description": "audience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.", + "type": "string" + }, + "expirationSeconds": { + "description": "expirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the kubelet volume plugin will proactively rotate the service account token. The kubelet will start trying to rotate the token if the token is older than 80 percent of its time to live or if the token is older than 24 hours.Defaults to 1 hour and must be at least 10 minutes.", + "type": "integer", + "format": "int64" + }, + "path": { + "description": "path is the path relative to the mount point of the file to project the token into.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ServiceAccountTokenProjection", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ServiceList": { + "description": "ServiceList holds a list of services.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "List of services", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.Service" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "", + "Version": "v1", + "Kind": "ServiceList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ServicePort": { + "description": "ServicePort contains information on service's port.", + "type": "object", + "required": [ + "port" + ], + "properties": { + "appProtocol": { + "description": "The application protocol for this port. This is used as a hint for implementations to offer richer behavior for protocols that they understand. This field follows standard Kubernetes label syntax. Valid values are either:\n\n* Un-prefixed protocol names - reserved for IANA standard service names (as per RFC-6335 and https://www.iana.org/assignments/service-names).\n\n* Kubernetes-defined prefixed names:\n * 'kubernetes.io/h2c' - HTTP/2 prior knowledge over cleartext as described in https://www.rfc-editor.org/rfc/rfc9113.html#name-starting-http-2-with-prior-\n * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455\n * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455\n\n* Other protocols should use implementation-defined prefixed names such as mycompany.com/my-custom-protocol.", + "type": "string" + }, + "name": { + "description": "The name of this port within the service. This must be a DNS_LABEL. All ports within a ServiceSpec must have unique names. When considering the endpoints for a Service, this must match the 'name' field in the EndpointPort. Optional if only one ServicePort is defined on this service.", + "type": "string" + }, + "nodePort": { + "description": "The port on each node on which this service is exposed when type is NodePort or LoadBalancer. Usually assigned by the system. If a value is specified, in-range, and not in use it will be used, otherwise the operation will fail. If not specified, a port will be allocated if this Service requires one. If this field is specified when creating a Service which does not need it, creation will fail. This field will be wiped when updating a Service to no longer need it (e.g. changing type from NodePort to ClusterIP). More info: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport", + "type": "integer", + "format": "int32" + }, + "port": { + "description": "The port that will be exposed by this service.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "protocol": { + "description": "The IP protocol for this port. Supports \"TCP\", \"UDP\", and \"SCTP\". Default is TCP.\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", + "type": "string", + "default": "TCP", + "enum": [ + "SCTP", + "TCP", + "UDP" + ] + }, + "targetPort": { + "description": "Number or name of the port to access on the pods targeted by the service. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. If this is a string, it will be looked up as a named port in the target Pod's container ports. If this is not specified, the value of the 'port' field is used (an identity map). This field is ignored for services with clusterIP=None, and should be omitted or set equal to the 'port' field. More info: https://kubernetes.io/docs/concepts/services-networking/service/#defining-a-service", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ServicePort", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ServiceProxyOptions": { + "description": "ServiceProxyOptions is the query options to a Service's proxy call.", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "path": { + "description": "Path is the part of URLs that include service endpoints, suffixes, and parameters to use for the current proxy request to service. For example, the whole request URL is http://localhost/api/v1/namespaces/kube-system/services/elasticsearch-logging/_search?q=user:kimchy. Path is _search?q=user:kimchy.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "ServiceProxyOptions", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ServiceSpec": { + "description": "ServiceSpec describes the attributes that a user creates on a service.", + "type": "object", + "properties": { + "allocateLoadBalancerNodePorts": { + "description": "allocateLoadBalancerNodePorts defines if NodePorts will be automatically allocated for services with type LoadBalancer. Default is \"true\". It may be set to \"false\" if the cluster load-balancer does not rely on NodePorts. If the caller requests specific NodePorts (by specifying a value), those requests will be respected, regardless of this field. This field may only be set for services with type LoadBalancer and will be cleared if the type is changed to any other type.", + "type": "boolean" + }, + "clusterIP": { + "description": "clusterIP is the IP address of the service and is usually assigned randomly. If an address is specified manually, is in-range (as per system configuration), and is not in use, it will be allocated to the service; otherwise creation of the service will fail. This field may not be changed through updates unless the type field is also being changed to ExternalName (which requires this field to be blank) or the type field is being changed from ExternalName (in which case this field may optionally be specified, as describe above). Valid values are \"None\", empty string (\"\"), or a valid IP address. Setting this to \"None\" makes a \"headless service\" (no virtual IP), which is useful when direct endpoint connections are preferred and proxying is not required. Only applies to types ClusterIP, NodePort, and LoadBalancer. If this field is specified when creating a Service of type ExternalName, creation will fail. This field will be wiped when updating a Service to type ExternalName. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies", + "type": "string" + }, + "clusterIPs": { + "description": "ClusterIPs is a list of IP addresses assigned to this service, and are usually assigned randomly. If an address is specified manually, is in-range (as per system configuration), and is not in use, it will be allocated to the service; otherwise creation of the service will fail. This field may not be changed through updates unless the type field is also being changed to ExternalName (which requires this field to be empty) or the type field is being changed from ExternalName (in which case this field may optionally be specified, as describe above). Valid values are \"None\", empty string (\"\"), or a valid IP address. Setting this to \"None\" makes a \"headless service\" (no virtual IP), which is useful when direct endpoint connections are preferred and proxying is not required. Only applies to types ClusterIP, NodePort, and LoadBalancer. If this field is specified when creating a Service of type ExternalName, creation will fail. This field will be wiped when updating a Service to type ExternalName. If this field is not specified, it will be initialized from the clusterIP field. If this field is specified, clients must ensure that clusterIPs[0] and clusterIP have the same value.\n\nThis field may hold a maximum of two entries (dual-stack IPs, in either order). These IPs must correspond to the values of the ipFamilies field. Both clusterIPs and ipFamilies are governed by the ipFamilyPolicy field. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "externalIPs": { + "description": "externalIPs is a list of IP addresses for which nodes in the cluster will also accept traffic for this service. These IPs are not managed by Kubernetes. The user is responsible for ensuring that traffic arrives at a node with this IP. A common example is external load-balancers that are not part of the Kubernetes system.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "externalName": { + "description": "externalName is the external reference that discovery mechanisms will return as an alias for this service (e.g. a DNS CNAME record). No proxying will be involved. Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) and requires `type` to be \"ExternalName\".", + "type": "string" + }, + "externalTrafficPolicy": { + "description": "externalTrafficPolicy describes how nodes distribute service traffic they receive on one of the Service's \"externally-facing\" addresses (NodePorts, ExternalIPs, and LoadBalancer IPs). If set to \"Local\", the proxy will configure the service in a way that assumes that external load balancers will take care of balancing the service traffic between nodes, and so each node will deliver traffic only to the node-local endpoints of the service, without masquerading the client source IP. (Traffic mistakenly sent to a node with no endpoints will be dropped.) The default value, \"Cluster\", uses the standard behavior of routing to all endpoints evenly (possibly modified by topology and other features). Note that traffic sent to an External IP or LoadBalancer IP from within the cluster will always get \"Cluster\" semantics, but clients sending to a NodePort from within the cluster may need to take traffic policy into account when picking a node.\n\nPossible enum values:\n - `\"Cluster\"` routes traffic to all endpoints.\n - `\"Local\"` preserves the source IP of the traffic by routing only to endpoints on the same node as the traffic was received on (dropping the traffic if there are no local endpoints).", + "type": "string", + "enum": [ + "Cluster", + "Local" + ] + }, + "healthCheckNodePort": { + "description": "healthCheckNodePort specifies the healthcheck nodePort for the service. This only applies when type is set to LoadBalancer and externalTrafficPolicy is set to Local. If a value is specified, is in-range, and is not in use, it will be used. If not specified, a value will be automatically allocated. External systems (e.g. load-balancers) can use this port to determine if a given node holds endpoints for this service or not. If this field is specified when creating a Service which does not need it, creation will fail. This field will be wiped when updating a Service to no longer need it (e.g. changing type). This field cannot be updated once set.", + "type": "integer", + "format": "int32" + }, + "internalTrafficPolicy": { + "description": "InternalTrafficPolicy describes how nodes distribute service traffic they receive on the ClusterIP. If set to \"Local\", the proxy will assume that pods only want to talk to endpoints of the service on the same node as the pod, dropping the traffic if there are no local endpoints. The default value, \"Cluster\", uses the standard behavior of routing to all endpoints evenly (possibly modified by topology and other features).\n\nPossible enum values:\n - `\"Cluster\"` routes traffic to all endpoints.\n - `\"Local\"` routes traffic only to endpoints on the same node as the client pod (dropping the traffic if there are no local endpoints).", + "type": "string", + "enum": [ + "Cluster", + "Local" + ] + }, + "ipFamilies": { + "description": "IPFamilies is a list of IP families (e.g. IPv4, IPv6) assigned to this service. This field is usually assigned automatically based on cluster configuration and the ipFamilyPolicy field. If this field is specified manually, the requested family is available in the cluster, and ipFamilyPolicy allows it, it will be used; otherwise creation of the service will fail. This field is conditionally mutable: it allows for adding or removing a secondary IP family, but it does not allow changing the primary IP family of the Service. Valid values are \"IPv4\" and \"IPv6\". This field only applies to Services of types ClusterIP, NodePort, and LoadBalancer, and does apply to \"headless\" services. This field will be wiped when updating a Service to type ExternalName.\n\nThis field may hold a maximum of two entries (dual-stack families, in either order). These families must correspond to the values of the clusterIPs field, if specified. Both clusterIPs and ipFamilies are governed by the ipFamilyPolicy field.", + "type": "array", + "items": { + "type": "string", + "default": "", + "enum": [ + "", + "IPv4", + "IPv6" + ] + }, + "x-kubernetes-list-type": "atomic" + }, + "ipFamilyPolicy": { + "description": "IPFamilyPolicy represents the dual-stack-ness requested or required by this Service. If there is no value provided, then this field will be set to SingleStack. Services can be \"SingleStack\" (a single IP family), \"PreferDualStack\" (two IP families on dual-stack configured clusters or a single IP family on single-stack clusters), or \"RequireDualStack\" (two IP families on dual-stack configured clusters, otherwise fail). The ipFamilies and clusterIPs fields depend on the value of this field. This field will be wiped when updating a service to type ExternalName.\n\nPossible enum values:\n - `\"PreferDualStack\"` indicates that this service prefers dual-stack when the cluster is configured for dual-stack. If the cluster is not configured for dual-stack the service will be assigned a single IPFamily. If the IPFamily is not set in service.spec.ipFamilies then the service will be assigned the default IPFamily configured on the cluster\n - `\"RequireDualStack\"` indicates that this service requires dual-stack. Using IPFamilyPolicyRequireDualStack on a single stack cluster will result in validation errors. The IPFamilies (and their order) assigned to this service is based on service.spec.ipFamilies. If service.spec.ipFamilies was not provided then it will be assigned according to how they are configured on the cluster. If service.spec.ipFamilies has only one entry then the alternative IPFamily will be added by apiserver\n - `\"SingleStack\"` indicates that this service is required to have a single IPFamily. The IPFamily assigned is based on the default IPFamily used by the cluster or as identified by service.spec.ipFamilies field", + "type": "string", + "enum": [ + "PreferDualStack", + "RequireDualStack", + "SingleStack" + ] + }, + "loadBalancerClass": { + "description": "loadBalancerClass is the class of the load balancer implementation this Service belongs to. If specified, the value of this field must be a label-style identifier, with an optional prefix, e.g. \"internal-vip\" or \"example.com/internal-vip\". Unprefixed names are reserved for end-users. This field can only be set when the Service type is 'LoadBalancer'. If not set, the default load balancer implementation is used, today this is typically done through the cloud provider integration, but should apply for any default implementation. If set, it is assumed that a load balancer implementation is watching for Services with a matching class. Any default load balancer implementation (e.g. cloud providers) should ignore Services that set this field. This field can only be set when creating or updating a Service to type 'LoadBalancer'. Once set, it can not be changed. This field will be wiped when a service is updated to a non 'LoadBalancer' type.", + "type": "string" + }, + "loadBalancerIP": { + "description": "Only applies to Service Type: LoadBalancer. This feature depends on whether the underlying cloud-provider supports specifying the loadBalancerIP when a load balancer is created. This field will be ignored if the cloud-provider does not support the feature. Deprecated: This field was under-specified and its meaning varies across implementations. Using it is non-portable and it may not support dual-stack. Users are encouraged to use implementation-specific annotations when available.", + "type": "string" + }, + "loadBalancerSourceRanges": { + "description": "If specified and supported by the platform, this will restrict traffic through the cloud-provider load-balancer will be restricted to the specified client IPs. This field will be ignored if the cloud-provider does not support the feature.\" More info: https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "ports": { + "description": "The list of ports that are exposed by this service. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ServicePort" + }, + "x-kubernetes-list-map-keys": [ + "port", + "protocol" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "port", + "x-kubernetes-patch-strategy": "merge" + }, + "publishNotReadyAddresses": { + "description": "publishNotReadyAddresses indicates that any agent which deals with endpoints for this Service should disregard any indications of ready/not-ready. The primary use case for setting this field is for a StatefulSet's Headless Service to propagate SRV DNS records for its Pods for the purpose of peer discovery. The Kubernetes controllers that generate Endpoints and EndpointSlice resources for Services interpret this to mean that all endpoints are considered \"ready\" even if the Pods themselves are not. Agents which consume only Kubernetes generated endpoints through the Endpoints or EndpointSlice resources can safely assume this behavior.", + "type": "boolean" + }, + "selector": { + "description": "Route service traffic to pods with label keys and values matching this selector. If empty or not present, the service is assumed to have an external process managing its endpoints, which Kubernetes will not modify. Only applies to types ClusterIP, NodePort, and LoadBalancer. Ignored if type is ExternalName. More info: https://kubernetes.io/docs/concepts/services-networking/service/", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + }, + "x-kubernetes-map-type": "atomic" + }, + "sessionAffinity": { + "description": "Supports \"ClientIP\" and \"None\". Used to maintain session affinity. Enable client IP based session affinity. Must be ClientIP or None. Defaults to None. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies\n\nPossible enum values:\n - `\"ClientIP\"` is the Client IP based.\n - `\"None\"` - no session affinity.", + "type": "string", + "enum": [ + "ClientIP", + "None" + ] + }, + "sessionAffinityConfig": { + "description": "sessionAffinityConfig contains the configurations of session affinity.", + "$ref": "#/definitions/io.k8s.api.core.v1.SessionAffinityConfig" + }, + "trafficDistribution": { + "description": "TrafficDistribution offers a way to express preferences for how traffic is distributed to Service endpoints. Implementations can use this field as a hint, but are not required to guarantee strict adherence. If the field is not set, the implementation will apply its default routing strategy. If set to \"PreferClose\", implementations should prioritize endpoints that are topologically close (e.g., same zone). This is an alpha field and requires enabling ServiceTrafficDistribution feature.", + "type": "string" + }, + "type": { + "description": "type determines how the Service is exposed. Defaults to ClusterIP. Valid options are ExternalName, ClusterIP, NodePort, and LoadBalancer. \"ClusterIP\" allocates a cluster-internal IP address for load-balancing to endpoints. Endpoints are determined by the selector or if that is not specified, by manual construction of an Endpoints object or EndpointSlice objects. If clusterIP is \"None\", no virtual IP is allocated and the endpoints are published as a set of endpoints rather than a virtual IP. \"NodePort\" builds on ClusterIP and allocates a port on every node which routes to the same endpoints as the clusterIP. \"LoadBalancer\" builds on NodePort and creates an external load-balancer (if supported in the current cloud) which routes to the same endpoints as the clusterIP. \"ExternalName\" aliases this service to the specified externalName. Several other fields do not apply to ExternalName services. More info: https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types\n\nPossible enum values:\n - `\"ClusterIP\"` means a service will only be accessible inside the cluster, via the cluster IP.\n - `\"ExternalName\"` means a service consists of only a reference to an external name that kubedns or equivalent will return as a CNAME record, with no exposing or proxying of any pods involved.\n - `\"LoadBalancer\"` means a service will be exposed via an external load balancer (if the cloud provider supports it), in addition to 'NodePort' type.\n - `\"NodePort\"` means a service will be exposed on one port of every node, in addition to 'ClusterIP' type.", + "type": "string", + "enum": [ + "ClusterIP", + "ExternalName", + "LoadBalancer", + "NodePort" + ] + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ServiceSpec", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.ServiceStatus": { + "description": "ServiceStatus represents the current status of a service.", + "type": "object", + "properties": { + "conditions": { + "description": "Current service state", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "loadBalancer": { + "description": "LoadBalancer contains the current status of the load-balancer, if one is present.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LoadBalancerStatus" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "ServiceStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.SessionAffinityConfig": { + "description": "SessionAffinityConfig represents the configurations of session affinity.", + "type": "object", + "properties": { + "clientIP": { + "description": "clientIP contains the configurations of Client IP based session affinity.", + "$ref": "#/definitions/io.k8s.api.core.v1.ClientIPConfig" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "SessionAffinityConfig", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.SleepAction": { + "description": "SleepAction describes a \"sleep\" action.", + "type": "object", + "required": [ + "seconds" + ], + "properties": { + "seconds": { + "description": "Seconds is the number of seconds to sleep.", + "type": "integer", + "format": "int64", + "default": 0 + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "SleepAction", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.StorageOSPersistentVolumeSource": { + "description": "Represents a StorageOS persistent volume resource.", + "type": "object", + "properties": { + "fsType": { + "description": "fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified.", + "type": "string" + }, + "readOnly": { + "description": "readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" + }, + "secretRef": { + "description": "secretRef specifies the secret to use for obtaining the StorageOS API credentials. If not specified, default values will be attempted.", + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + }, + "volumeName": { + "description": "volumeName is the human-readable name of the StorageOS volume. Volume names are only unique within a namespace.", + "type": "string" + }, + "volumeNamespace": { + "description": "volumeNamespace specifies the scope of the volume within StorageOS. If no namespace is specified then the Pod's namespace will be used. This allows the Kubernetes name scoping to be mirrored within StorageOS for tighter integration. Set VolumeName to any name to override the default behaviour. Set to \"default\" if you are not using namespaces within StorageOS. Namespaces that do not pre-exist within StorageOS will be created.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "StorageOSPersistentVolumeSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.StorageOSVolumeSource": { + "description": "Represents a StorageOS persistent volume resource.", + "type": "object", + "properties": { + "fsType": { + "description": "fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified.", + "type": "string" + }, + "readOnly": { + "description": "readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", + "type": "boolean" + }, + "secretRef": { + "description": "secretRef specifies the secret to use for obtaining the StorageOS API credentials. If not specified, default values will be attempted.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "volumeName": { + "description": "volumeName is the human-readable name of the StorageOS volume. Volume names are only unique within a namespace.", + "type": "string" + }, + "volumeNamespace": { + "description": "volumeNamespace specifies the scope of the volume within StorageOS. If no namespace is specified then the Pod's namespace will be used. This allows the Kubernetes name scoping to be mirrored within StorageOS for tighter integration. Set VolumeName to any name to override the default behaviour. Set to \"default\" if you are not using namespaces within StorageOS. Namespaces that do not pre-exist within StorageOS will be created.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "StorageOSVolumeSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.Sysctl": { + "description": "Sysctl defines a kernel parameter to be set", + "type": "object", + "required": [ + "name", + "value" + ], + "properties": { + "name": { + "description": "Name of a property to set", + "type": "string", + "default": "" + }, + "value": { + "description": "Value of a property to set", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "Sysctl", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.TCPSocketAction": { + "description": "TCPSocketAction describes an action based on opening a socket", + "type": "object", + "required": [ + "port" + ], + "properties": { + "host": { + "description": "Optional: Host name to connect to, defaults to the pod IP.", + "type": "string" + }, + "port": { + "description": "Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "TCPSocketAction", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.Taint": { + "description": "The node this Taint is attached to has the \"effect\" on any pod that does not tolerate the Taint.", + "type": "object", + "required": [ + "key", + "effect" + ], + "properties": { + "effect": { + "description": "Required. The effect of the taint on pods that do not tolerate the taint. Valid effects are NoSchedule, PreferNoSchedule and NoExecute.\n\nPossible enum values:\n - `\"NoExecute\"` Evict any already-running pods that do not tolerate the taint. Currently enforced by NodeController.\n - `\"NoSchedule\"` Do not allow new pods to schedule onto the node unless they tolerate the taint, but allow all pods submitted to Kubelet without going through the scheduler to start, and allow all already-running pods to continue running. Enforced by the scheduler.\n - `\"PreferNoSchedule\"` Like TaintEffectNoSchedule, but the scheduler tries not to schedule new pods onto the node, rather than prohibiting new pods from scheduling onto the node entirely. Enforced by the scheduler.", + "type": "string", + "default": "", + "enum": [ + "NoExecute", + "NoSchedule", + "PreferNoSchedule" + ] + }, + "key": { + "description": "Required. The taint key to be applied to a node.", + "type": "string", + "default": "" + }, + "timeAdded": { + "description": "TimeAdded represents the time at which the taint was added. It is only written for NoExecute taints.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "value": { + "description": "The taint value corresponding to the taint key.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "Taint", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.Toleration": { + "description": "The pod this Toleration is attached to tolerates any taint that matches the triple \u003ckey,value,effect\u003e using the matching operator \u003coperator\u003e.", + "type": "object", + "properties": { + "effect": { + "description": "Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.\n\nPossible enum values:\n - `\"NoExecute\"` Evict any already-running pods that do not tolerate the taint. Currently enforced by NodeController.\n - `\"NoSchedule\"` Do not allow new pods to schedule onto the node unless they tolerate the taint, but allow all pods submitted to Kubelet without going through the scheduler to start, and allow all already-running pods to continue running. Enforced by the scheduler.\n - `\"PreferNoSchedule\"` Like TaintEffectNoSchedule, but the scheduler tries not to schedule new pods onto the node, rather than prohibiting new pods from scheduling onto the node entirely. Enforced by the scheduler.", + "type": "string", + "enum": [ + "NoExecute", + "NoSchedule", + "PreferNoSchedule" + ] + }, + "key": { + "description": "Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys.", + "type": "string" + }, + "operator": { + "description": "Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category.\n\nPossible enum values:\n - `\"Equal\"`\n - `\"Exists\"`", + "type": "string", + "enum": [ + "Equal", + "Exists" + ] + }, + "tolerationSeconds": { + "description": "TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system.", + "type": "integer", + "format": "int64" + }, + "value": { + "description": "Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "Toleration", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.TopologySelectorLabelRequirement": { + "description": "A topology selector requirement is a selector that matches given label. This is an alpha feature and may change in the future.", + "type": "object", + "required": [ + "key", + "values" + ], + "properties": { + "key": { + "description": "The label key that the selector applies to.", + "type": "string", + "default": "" + }, + "values": { + "description": "An array of string values. One value must match the label to be selected. Each entry in Values is ORed.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "TopologySelectorLabelRequirement", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.TopologySelectorTerm": { + "description": "A topology selector term represents the result of label queries. A null or empty topology selector term matches no objects. The requirements of them are ANDed. It provides a subset of functionality as NodeSelectorTerm. This is an alpha feature and may change in the future.", + "type": "object", + "properties": { + "matchLabelExpressions": { + "description": "A list of topology selector requirements by labels.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.TopologySelectorLabelRequirement" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "TopologySelectorTerm", + "Scope": "Namespaced" + }, + "x-kubernetes-map-type": "atomic" + }, + "io.k8s.api.core.v1.TopologySpreadConstraint": { + "description": "TopologySpreadConstraint specifies how to spread matching pods among the given topology.", + "type": "object", + "required": [ + "maxSkew", + "topologyKey", + "whenUnsatisfiable" + ], + "properties": { + "labelSelector": { + "description": "LabelSelector is used to find matching pods. Pods that match this label selector are counted to determine the number of pods in their corresponding topology domain.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "matchLabelKeys": { + "description": "MatchLabelKeys is a set of pod label keys to select the pods over which spreading will be calculated. The keys are used to lookup values from the incoming pod labels, those key-value labels are ANDed with labelSelector to select the group of existing pods over which spreading will be calculated for the incoming pod. The same key is forbidden to exist in both MatchLabelKeys and LabelSelector. MatchLabelKeys cannot be set when LabelSelector isn't set. Keys that don't exist in the incoming pod labels will be ignored. A null or empty list means only match against labelSelector.\n\nThis is a beta field and requires the MatchLabelKeysInPodTopologySpread feature gate to be enabled (enabled by default).", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "maxSkew": { + "description": "MaxSkew describes the degree to which pods may be unevenly distributed. When `whenUnsatisfiable=DoNotSchedule`, it is the maximum permitted difference between the number of matching pods in the target topology and the global minimum. The global minimum is the minimum number of matching pods in an eligible domain or zero if the number of eligible domains is less than MinDomains. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 2/2/1: In this case, the global minimum is 1. | zone1 | zone2 | zone3 | | P P | P P | P | - if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 2/2/2; scheduling it onto zone1(zone2) would make the ActualSkew(3-1) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2, incoming pod can be scheduled onto any zone. When `whenUnsatisfiable=ScheduleAnyway`, it is used to give higher precedence to topologies that satisfy it. It's a required field. Default value is 1 and 0 is not allowed.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "minDomains": { + "description": "MinDomains indicates a minimum number of eligible domains. When the number of eligible domains with matching topology keys is less than minDomains, Pod Topology Spread treats \"global minimum\" as 0, and then the calculation of Skew is performed. And when the number of eligible domains with matching topology keys equals or greater than minDomains, this value has no effect on scheduling. As a result, when the number of eligible domains is less than minDomains, scheduler won't schedule more than maxSkew Pods to those domains. If value is nil, the constraint behaves as if MinDomains is equal to 1. Valid values are integers greater than 0. When value is not nil, WhenUnsatisfiable must be DoNotSchedule.\n\nFor example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the same labelSelector spread as 2/2/2: | zone1 | zone2 | zone3 | | P P | P P | P P | The number of domains is less than 5(MinDomains), so \"global minimum\" is treated as 0. In this situation, new pod with the same labelSelector cannot be scheduled, because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones, it will violate MaxSkew.", + "type": "integer", + "format": "int32" + }, + "nodeAffinityPolicy": { + "description": "NodeAffinityPolicy indicates how we will treat Pod's nodeAffinity/nodeSelector when calculating pod topology spread skew. Options are: - Honor: only nodes matching nodeAffinity/nodeSelector are included in the calculations. - Ignore: nodeAffinity/nodeSelector are ignored. All nodes are included in the calculations.\n\nIf this value is nil, the behavior is equivalent to the Honor policy. This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.\n\nPossible enum values:\n - `\"Honor\"` means use this scheduling directive when calculating pod topology spread skew.\n - `\"Ignore\"` means ignore this scheduling directive when calculating pod topology spread skew.", + "type": "string", + "enum": [ + "Honor", + "Ignore" + ] + }, + "nodeTaintsPolicy": { + "description": "NodeTaintsPolicy indicates how we will treat node taints when calculating pod topology spread skew. Options are: - Honor: nodes without taints, along with tainted nodes for which the incoming pod has a toleration, are included. - Ignore: node taints are ignored. All nodes are included.\n\nIf this value is nil, the behavior is equivalent to the Ignore policy. This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.\n\nPossible enum values:\n - `\"Honor\"` means use this scheduling directive when calculating pod topology spread skew.\n - `\"Ignore\"` means ignore this scheduling directive when calculating pod topology spread skew.", + "type": "string", + "enum": [ + "Honor", + "Ignore" + ] + }, + "topologyKey": { + "description": "TopologyKey is the key of node labels. Nodes that have a label with this key and identical values are considered to be in the same topology. We consider each \u003ckey, value\u003e as a \"bucket\", and try to put balanced number of pods into each bucket. We define a domain as a particular instance of a topology. Also, we define an eligible domain as a domain whose nodes meet the requirements of nodeAffinityPolicy and nodeTaintsPolicy. e.g. If TopologyKey is \"kubernetes.io/hostname\", each Node is a domain of that topology. And, if TopologyKey is \"topology.kubernetes.io/zone\", each zone is a domain of that topology. It's a required field.", + "type": "string", + "default": "" + }, + "whenUnsatisfiable": { + "description": "WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy the spread constraint. - DoNotSchedule (default) tells the scheduler not to schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in any location,\n but giving higher precedence to topologies that would help reduce the\n skew.\nA constraint is considered \"Unsatisfiable\" for an incoming pod if and only if every possible node assignment for that pod would violate \"MaxSkew\" on some topology. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1: | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In other words, the cluster can still be imbalanced, but scheduler won't make it *more* imbalanced. It's a required field.\n\nPossible enum values:\n - `\"DoNotSchedule\"` instructs the scheduler not to schedule the pod when constraints are not satisfied.\n - `\"ScheduleAnyway\"` instructs the scheduler to schedule the pod even if constraints are not satisfied.", + "type": "string", + "default": "", + "enum": [ + "DoNotSchedule", + "ScheduleAnyway" + ] + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "TopologySpreadConstraint", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.TypedLocalObjectReference": { + "description": "TypedLocalObjectReference contains enough information to let you locate the typed referenced object inside the same namespace.", + "type": "object", + "required": [ + "kind", + "name" + ], + "properties": { + "apiGroup": { + "description": "APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.", + "type": "string" + }, + "kind": { + "description": "Kind is the type of resource being referenced", + "type": "string", + "default": "" + }, + "name": { + "description": "Name is the name of resource being referenced", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "TypedLocalObjectReference", + "Scope": "Namespaced" + }, + "x-kubernetes-map-type": "atomic" + }, + "io.k8s.api.core.v1.TypedObjectReference": { + "type": "object", + "required": [ + "kind", + "name" + ], + "properties": { + "apiGroup": { + "description": "APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.", + "type": "string" + }, + "kind": { + "description": "Kind is the type of resource being referenced", + "type": "string", + "default": "" + }, + "name": { + "description": "Name is the name of resource being referenced", + "type": "string", + "default": "" + }, + "namespace": { + "description": "Namespace is the namespace of resource being referenced Note that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace's owner to accept the reference. See the ReferenceGrant documentation for details. (Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "TypedObjectReference", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.Volume": { + "description": "Volume represents a named volume in a pod that may be accessed by any container in the pod.", + "type": "object", + "required": [ + "name" + ], + "properties": { + "awsElasticBlockStore": { + "description": "awsElasticBlockStore represents an AWS Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore", + "$ref": "#/definitions/io.k8s.api.core.v1.AWSElasticBlockStoreVolumeSource" + }, + "azureDisk": { + "description": "azureDisk represents an Azure Data Disk mount on the host and bind mount to the pod.", + "$ref": "#/definitions/io.k8s.api.core.v1.AzureDiskVolumeSource" + }, + "azureFile": { + "description": "azureFile represents an Azure File Service mount on the host and bind mount to the pod.", + "$ref": "#/definitions/io.k8s.api.core.v1.AzureFileVolumeSource" + }, + "cephfs": { + "description": "cephFS represents a Ceph FS mount on the host that shares a pod's lifetime", + "$ref": "#/definitions/io.k8s.api.core.v1.CephFSVolumeSource" + }, + "cinder": { + "description": "cinder represents a cinder volume attached and mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", + "$ref": "#/definitions/io.k8s.api.core.v1.CinderVolumeSource" + }, + "configMap": { + "description": "configMap represents a configMap that should populate this volume", + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapVolumeSource" + }, + "csi": { + "description": "csi (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers (Beta feature).", + "$ref": "#/definitions/io.k8s.api.core.v1.CSIVolumeSource" + }, + "downwardAPI": { + "description": "downwardAPI represents downward API about the pod that should populate this volume", + "$ref": "#/definitions/io.k8s.api.core.v1.DownwardAPIVolumeSource" + }, + "emptyDir": { + "description": "emptyDir represents a temporary directory that shares a pod's lifetime. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir", + "$ref": "#/definitions/io.k8s.api.core.v1.EmptyDirVolumeSource" + }, + "ephemeral": { + "description": "ephemeral represents a volume that is handled by a cluster storage driver. The volume's lifecycle is tied to the pod that defines it - it will be created before the pod starts, and deleted when the pod is removed.\n\nUse this if: a) the volume is only needed while the pod runs, b) features of normal volumes like restoring from snapshot or capacity\n tracking are needed,\nc) the storage driver is specified through a storage class, and d) the storage driver supports dynamic volume provisioning through\n a PersistentVolumeClaim (see EphemeralVolumeSource for more\n information on the connection between this volume type\n and PersistentVolumeClaim).\n\nUse PersistentVolumeClaim or one of the vendor-specific APIs for volumes that persist for longer than the lifecycle of an individual pod.\n\nUse CSI for light-weight local ephemeral volumes if the CSI driver is meant to be used that way - see the documentation of the driver for more information.\n\nA pod can use both types of ephemeral volumes and persistent volumes at the same time.", + "$ref": "#/definitions/io.k8s.api.core.v1.EphemeralVolumeSource" + }, + "fc": { + "description": "fc represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod.", + "$ref": "#/definitions/io.k8s.api.core.v1.FCVolumeSource" + }, + "flexVolume": { + "description": "flexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.", + "$ref": "#/definitions/io.k8s.api.core.v1.FlexVolumeSource" + }, + "flocker": { + "description": "flocker represents a Flocker volume attached to a kubelet's host machine. This depends on the Flocker control service being running", + "$ref": "#/definitions/io.k8s.api.core.v1.FlockerVolumeSource" + }, + "gcePersistentDisk": { + "description": "gcePersistentDisk represents a GCE Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", + "$ref": "#/definitions/io.k8s.api.core.v1.GCEPersistentDiskVolumeSource" + }, + "gitRepo": { + "description": "gitRepo represents a git repository at a particular revision. DEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod's container.", + "$ref": "#/definitions/io.k8s.api.core.v1.GitRepoVolumeSource" + }, + "glusterfs": { + "description": "glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md", + "$ref": "#/definitions/io.k8s.api.core.v1.GlusterfsVolumeSource" + }, + "hostPath": { + "description": "hostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath", + "$ref": "#/definitions/io.k8s.api.core.v1.HostPathVolumeSource" + }, + "image": { + "description": "image represents an OCI object (a container image or artifact) pulled and mounted on the kubelet's host machine. The volume is resolved at pod startup depending on which PullPolicy value is provided:\n\n- Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails. - Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn't present. - IfNotPresent: the kubelet pulls if the reference isn't already present on disk. Container creation will fail if the reference isn't present and the pull fails.\n\nThe volume gets re-resolved if the pod gets deleted and recreated, which means that new remote content will become available on pod recreation. A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message. The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field. The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images. The volume will be mounted read-only (ro) and non-executable files (noexec). Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath). The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.", + "$ref": "#/definitions/io.k8s.api.core.v1.ImageVolumeSource" + }, + "iscsi": { + "description": "iscsi represents an ISCSI Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://examples.k8s.io/volumes/iscsi/README.md", + "$ref": "#/definitions/io.k8s.api.core.v1.ISCSIVolumeSource" + }, + "name": { + "description": "name of the volume. Must be a DNS_LABEL and unique within the pod. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string", + "default": "" + }, + "nfs": { + "description": "nfs represents an NFS mount on the host that shares a pod's lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs", + "$ref": "#/definitions/io.k8s.api.core.v1.NFSVolumeSource" + }, + "persistentVolumeClaim": { + "description": "persistentVolumeClaimVolumeSource represents a reference to a PersistentVolumeClaim in the same namespace. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims", + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimVolumeSource" + }, + "photonPersistentDisk": { + "description": "photonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine", + "$ref": "#/definitions/io.k8s.api.core.v1.PhotonPersistentDiskVolumeSource" + }, + "portworxVolume": { + "description": "portworxVolume represents a portworx volume attached and mounted on kubelets host machine", + "$ref": "#/definitions/io.k8s.api.core.v1.PortworxVolumeSource" + }, + "projected": { + "description": "projected items for all in one resources secrets, configmaps, and downward API", + "$ref": "#/definitions/io.k8s.api.core.v1.ProjectedVolumeSource" + }, + "quobyte": { + "description": "quobyte represents a Quobyte mount on the host that shares a pod's lifetime", + "$ref": "#/definitions/io.k8s.api.core.v1.QuobyteVolumeSource" + }, + "rbd": { + "description": "rbd represents a Rados Block Device mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md", + "$ref": "#/definitions/io.k8s.api.core.v1.RBDVolumeSource" + }, + "scaleIO": { + "description": "scaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes.", + "$ref": "#/definitions/io.k8s.api.core.v1.ScaleIOVolumeSource" + }, + "secret": { + "description": "secret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret", + "$ref": "#/definitions/io.k8s.api.core.v1.SecretVolumeSource" + }, + "storageos": { + "description": "storageOS represents a StorageOS volume attached and mounted on Kubernetes nodes.", + "$ref": "#/definitions/io.k8s.api.core.v1.StorageOSVolumeSource" + }, + "vsphereVolume": { + "description": "vsphereVolume represents a vSphere volume attached and mounted on kubelets host machine", + "$ref": "#/definitions/io.k8s.api.core.v1.VsphereVirtualDiskVolumeSource" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "Volume", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.VolumeDevice": { + "description": "volumeDevice describes a mapping of a raw block device within a container.", + "type": "object", + "required": [ + "name", + "devicePath" + ], + "properties": { + "devicePath": { + "description": "devicePath is the path inside of the container that the device will be mapped to.", + "type": "string", + "default": "" + }, + "name": { + "description": "name must match the name of a persistentVolumeClaim in the pod", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "VolumeDevice", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.VolumeMount": { + "description": "VolumeMount describes a mounting of a Volume within a container.", + "type": "object", + "required": [ + "name", + "mountPath" + ], + "properties": { + "mountPath": { + "description": "Path within the container at which the volume should be mounted. Must not contain ':'.", + "type": "string", + "default": "" + }, + "mountPropagation": { + "description": "mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10. When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified (which defaults to None).\n\nPossible enum values:\n - `\"Bidirectional\"` means that the volume in a container will receive new mounts from the host or other containers, and its own mounts will be propagated from the container to the host or other containers. Note that this mode is recursively applied to all mounts in the volume (\"rshared\" in Linux terminology).\n - `\"HostToContainer\"` means that the volume in a container will receive new mounts from the host or other containers, but filesystems mounted inside the container won't be propagated to the host or other containers. Note that this mode is recursively applied to all mounts in the volume (\"rslave\" in Linux terminology).\n - `\"None\"` means that the volume in a container will not receive new mounts from the host or other containers, and filesystems mounted inside the container won't be propagated to the host or other containers. Note that this mode corresponds to \"private\" in Linux terminology.", + "type": "string", + "enum": [ + "Bidirectional", + "HostToContainer", + "None" + ] + }, + "name": { + "description": "This must match the Name of a Volume.", + "type": "string", + "default": "" + }, + "readOnly": { + "description": "Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.", + "type": "boolean" + }, + "recursiveReadOnly": { + "description": "RecursiveReadOnly specifies whether read-only mounts should be handled recursively.\n\nIf ReadOnly is false, this field has no meaning and must be unspecified.\n\nIf ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason.\n\nIf this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None).\n\nIf this field is not specified, it is treated as an equivalent of Disabled.", + "type": "string" + }, + "subPath": { + "description": "Path within the volume from which the container's volume should be mounted. Defaults to \"\" (volume's root).", + "type": "string" + }, + "subPathExpr": { + "description": "Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to \"\" (volume's root). SubPathExpr and SubPath are mutually exclusive.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "VolumeMount", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.VolumeMountStatus": { + "description": "VolumeMountStatus shows status of volume mounts.", + "type": "object", + "required": [ + "name", + "mountPath" + ], + "properties": { + "mountPath": { + "description": "MountPath corresponds to the original VolumeMount.", + "type": "string", + "default": "" + }, + "name": { + "description": "Name corresponds to the name of the original VolumeMount.", + "type": "string", + "default": "" + }, + "readOnly": { + "description": "ReadOnly corresponds to the original VolumeMount.", + "type": "boolean" + }, + "recursiveReadOnly": { + "description": "RecursiveReadOnly must be set to Disabled, Enabled, or unspecified (for non-readonly mounts). An IfPossible value in the original VolumeMount must be translated to Disabled or Enabled, depending on the mount result.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "VolumeMountStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.VolumeNodeAffinity": { + "description": "VolumeNodeAffinity defines constraints that limit what nodes this volume can be accessed from.", + "type": "object", + "properties": { + "required": { + "description": "required specifies hard node constraints that must be met.", + "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelector" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "VolumeNodeAffinity", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.VolumeProjection": { + "description": "Projection that may be projected along with other supported volume types. Exactly one of these fields must be set.", + "type": "object", + "properties": { + "clusterTrustBundle": { + "description": "ClusterTrustBundle allows a pod to access the `.spec.trustBundle` field of ClusterTrustBundle objects in an auto-updating file.\n\nAlpha, gated by the ClusterTrustBundleProjection feature gate.\n\nClusterTrustBundle objects can either be selected by name, or by the combination of signer name and a label selector.\n\nKubelet performs aggressive normalization of the PEM contents written into the pod filesystem. Esoteric PEM features such as inter-block comments and block headers are stripped. Certificates are deduplicated. The ordering of certificates within the file is arbitrary, and Kubelet may change the order over time.", + "$ref": "#/definitions/io.k8s.api.core.v1.ClusterTrustBundleProjection" + }, + "configMap": { + "description": "configMap information about the configMap data to project", + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapProjection" + }, + "downwardAPI": { + "description": "downwardAPI information about the downwardAPI data to project", + "$ref": "#/definitions/io.k8s.api.core.v1.DownwardAPIProjection" + }, + "secret": { + "description": "secret information about the secret data to project", + "$ref": "#/definitions/io.k8s.api.core.v1.SecretProjection" + }, + "serviceAccountToken": { + "description": "serviceAccountToken is information about the serviceAccountToken data to project", + "$ref": "#/definitions/io.k8s.api.core.v1.ServiceAccountTokenProjection" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "VolumeProjection", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.VolumeResourceRequirements": { + "description": "VolumeResourceRequirements describes the storage resource requirements for a volume.", + "type": "object", + "properties": { + "limits": { + "description": "Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } + }, + "requests": { + "description": "Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "VolumeResourceRequirements", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.VolumeSource": { + "description": "Represents the source of a volume to mount. Only one of its members may be specified.", + "type": "object", + "properties": { + "awsElasticBlockStore": { + "description": "awsElasticBlockStore represents an AWS Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore", + "$ref": "#/definitions/io.k8s.api.core.v1.AWSElasticBlockStoreVolumeSource" + }, + "azureDisk": { + "description": "azureDisk represents an Azure Data Disk mount on the host and bind mount to the pod.", + "$ref": "#/definitions/io.k8s.api.core.v1.AzureDiskVolumeSource" + }, + "azureFile": { + "description": "azureFile represents an Azure File Service mount on the host and bind mount to the pod.", + "$ref": "#/definitions/io.k8s.api.core.v1.AzureFileVolumeSource" + }, + "cephfs": { + "description": "cephFS represents a Ceph FS mount on the host that shares a pod's lifetime", + "$ref": "#/definitions/io.k8s.api.core.v1.CephFSVolumeSource" + }, + "cinder": { + "description": "cinder represents a cinder volume attached and mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", + "$ref": "#/definitions/io.k8s.api.core.v1.CinderVolumeSource" + }, + "configMap": { + "description": "configMap represents a configMap that should populate this volume", + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapVolumeSource" + }, + "csi": { + "description": "csi (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers (Beta feature).", + "$ref": "#/definitions/io.k8s.api.core.v1.CSIVolumeSource" + }, + "downwardAPI": { + "description": "downwardAPI represents downward API about the pod that should populate this volume", + "$ref": "#/definitions/io.k8s.api.core.v1.DownwardAPIVolumeSource" + }, + "emptyDir": { + "description": "emptyDir represents a temporary directory that shares a pod's lifetime. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir", + "$ref": "#/definitions/io.k8s.api.core.v1.EmptyDirVolumeSource" + }, + "ephemeral": { + "description": "ephemeral represents a volume that is handled by a cluster storage driver. The volume's lifecycle is tied to the pod that defines it - it will be created before the pod starts, and deleted when the pod is removed.\n\nUse this if: a) the volume is only needed while the pod runs, b) features of normal volumes like restoring from snapshot or capacity\n tracking are needed,\nc) the storage driver is specified through a storage class, and d) the storage driver supports dynamic volume provisioning through\n a PersistentVolumeClaim (see EphemeralVolumeSource for more\n information on the connection between this volume type\n and PersistentVolumeClaim).\n\nUse PersistentVolumeClaim or one of the vendor-specific APIs for volumes that persist for longer than the lifecycle of an individual pod.\n\nUse CSI for light-weight local ephemeral volumes if the CSI driver is meant to be used that way - see the documentation of the driver for more information.\n\nA pod can use both types of ephemeral volumes and persistent volumes at the same time.", + "$ref": "#/definitions/io.k8s.api.core.v1.EphemeralVolumeSource" + }, + "fc": { + "description": "fc represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod.", + "$ref": "#/definitions/io.k8s.api.core.v1.FCVolumeSource" + }, + "flexVolume": { + "description": "flexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.", + "$ref": "#/definitions/io.k8s.api.core.v1.FlexVolumeSource" + }, + "flocker": { + "description": "flocker represents a Flocker volume attached to a kubelet's host machine. This depends on the Flocker control service being running", + "$ref": "#/definitions/io.k8s.api.core.v1.FlockerVolumeSource" + }, + "gcePersistentDisk": { + "description": "gcePersistentDisk represents a GCE Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", + "$ref": "#/definitions/io.k8s.api.core.v1.GCEPersistentDiskVolumeSource" + }, + "gitRepo": { + "description": "gitRepo represents a git repository at a particular revision. DEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod's container.", + "$ref": "#/definitions/io.k8s.api.core.v1.GitRepoVolumeSource" + }, + "glusterfs": { + "description": "glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md", + "$ref": "#/definitions/io.k8s.api.core.v1.GlusterfsVolumeSource" + }, + "hostPath": { + "description": "hostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath", + "$ref": "#/definitions/io.k8s.api.core.v1.HostPathVolumeSource" + }, + "image": { + "description": "image represents an OCI object (a container image or artifact) pulled and mounted on the kubelet's host machine. The volume is resolved at pod startup depending on which PullPolicy value is provided:\n\n- Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails. - Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn't present. - IfNotPresent: the kubelet pulls if the reference isn't already present on disk. Container creation will fail if the reference isn't present and the pull fails.\n\nThe volume gets re-resolved if the pod gets deleted and recreated, which means that new remote content will become available on pod recreation. A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message. The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field. The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images. The volume will be mounted read-only (ro) and non-executable files (noexec). Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath). The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.", + "$ref": "#/definitions/io.k8s.api.core.v1.ImageVolumeSource" + }, + "iscsi": { + "description": "iscsi represents an ISCSI Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://examples.k8s.io/volumes/iscsi/README.md", + "$ref": "#/definitions/io.k8s.api.core.v1.ISCSIVolumeSource" + }, + "nfs": { + "description": "nfs represents an NFS mount on the host that shares a pod's lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs", + "$ref": "#/definitions/io.k8s.api.core.v1.NFSVolumeSource" + }, + "persistentVolumeClaim": { + "description": "persistentVolumeClaimVolumeSource represents a reference to a PersistentVolumeClaim in the same namespace. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims", + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimVolumeSource" + }, + "photonPersistentDisk": { + "description": "photonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine", + "$ref": "#/definitions/io.k8s.api.core.v1.PhotonPersistentDiskVolumeSource" + }, + "portworxVolume": { + "description": "portworxVolume represents a portworx volume attached and mounted on kubelets host machine", + "$ref": "#/definitions/io.k8s.api.core.v1.PortworxVolumeSource" + }, + "projected": { + "description": "projected items for all in one resources secrets, configmaps, and downward API", + "$ref": "#/definitions/io.k8s.api.core.v1.ProjectedVolumeSource" + }, + "quobyte": { + "description": "quobyte represents a Quobyte mount on the host that shares a pod's lifetime", + "$ref": "#/definitions/io.k8s.api.core.v1.QuobyteVolumeSource" + }, + "rbd": { + "description": "rbd represents a Rados Block Device mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md", + "$ref": "#/definitions/io.k8s.api.core.v1.RBDVolumeSource" + }, + "scaleIO": { + "description": "scaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes.", + "$ref": "#/definitions/io.k8s.api.core.v1.ScaleIOVolumeSource" + }, + "secret": { + "description": "secret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret", + "$ref": "#/definitions/io.k8s.api.core.v1.SecretVolumeSource" + }, + "storageos": { + "description": "storageOS represents a StorageOS volume attached and mounted on Kubernetes nodes.", + "$ref": "#/definitions/io.k8s.api.core.v1.StorageOSVolumeSource" + }, + "vsphereVolume": { + "description": "vsphereVolume represents a vSphere volume attached and mounted on kubelets host machine", + "$ref": "#/definitions/io.k8s.api.core.v1.VsphereVirtualDiskVolumeSource" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "VolumeSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.VsphereVirtualDiskVolumeSource": { + "description": "Represents a vSphere volume resource.", + "type": "object", + "required": [ + "volumePath" + ], + "properties": { + "fsType": { + "description": "fsType is filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified.", + "type": "string" + }, + "storagePolicyID": { + "description": "storagePolicyID is the storage Policy Based Management (SPBM) profile ID associated with the StoragePolicyName.", + "type": "string" + }, + "storagePolicyName": { + "description": "storagePolicyName is the storage Policy Based Management (SPBM) profile name.", + "type": "string" + }, + "volumePath": { + "description": "volumePath is the path that identifies vSphere volume vmdk", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "VsphereVirtualDiskVolumeSource", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.WeightedPodAffinityTerm": { + "description": "The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)", + "type": "object", + "required": [ + "weight", + "podAffinityTerm" + ], + "properties": { + "podAffinityTerm": { + "description": "Required. A pod affinity term, associated with the corresponding weight.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodAffinityTerm" + }, + "weight": { + "description": "weight associated with matching the corresponding podAffinityTerm, in the range 1-100.", + "type": "integer", + "format": "int32", + "default": 0 + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "WeightedPodAffinityTerm", + "Scope": "Namespaced" + } + }, + "io.k8s.api.core.v1.WindowsSecurityContextOptions": { + "description": "WindowsSecurityContextOptions contain Windows-specific options and credentials.", + "type": "object", + "properties": { + "gmsaCredentialSpec": { + "description": "GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.", + "type": "string" + }, + "gmsaCredentialSpecName": { + "description": "GMSACredentialSpecName is the name of the GMSA credential spec to use.", + "type": "string" + }, + "hostProcess": { + "description": "HostProcess determines if a container should be run as a 'Host Process' container. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.", + "type": "boolean" + }, + "runAsUserName": { + "description": "The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1", + "Kind": "WindowsSecurityContextOptions", + "Scope": "Namespaced" + } + }, + "io.k8s.api.discovery.v1.Endpoint": { + "description": "Endpoint represents a single logical \"backend\" implementing a service.", + "type": "object", + "required": [ + "addresses" + ], + "properties": { + "addresses": { + "description": "addresses of this endpoint. The contents of this field are interpreted according to the corresponding EndpointSlice addressType field. Consumers must handle different types of addresses in the context of their own capabilities. This must contain at least one address but no more than 100. These are all assumed to be fungible and clients may choose to only use the first element. Refer to: https://issue.k8s.io/106267", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" + }, + "conditions": { + "description": "conditions contains information about the current status of the endpoint.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointConditions" + }, + "deprecatedTopology": { + "description": "deprecatedTopology contains topology information part of the v1beta1 API. This field is deprecated, and will be removed when the v1beta1 API is removed (no sooner than kubernetes v1.24). While this field can hold values, it is not writable through the v1 API, and any attempts to write to it will be silently ignored. Topology information can be found in the zone and nodeName fields instead.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "hints": { + "description": "hints contains information associated with how an endpoint should be consumed.", + "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointHints" + }, + "hostname": { + "description": "hostname of this endpoint. This field may be used by consumers of endpoints to distinguish endpoints from each other (e.g. in DNS names). Multiple endpoints which use the same hostname should be considered fungible (e.g. multiple A values in DNS). Must be lowercase and pass DNS Label (RFC 1123) validation.", + "type": "string" + }, + "nodeName": { + "description": "nodeName represents the name of the Node hosting this endpoint. This can be used to determine endpoints local to a Node.", + "type": "string" + }, + "targetRef": { + "description": "targetRef is a reference to a Kubernetes object that represents this endpoint.", + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + }, + "zone": { + "description": "zone is the name of the Zone this endpoint exists in.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "discovery.k8s.io", + "Version": "v1", + "Kind": "Endpoint", + "Scope": "Namespaced" + } + }, + "io.k8s.api.discovery.v1.EndpointConditions": { + "description": "EndpointConditions represents the current condition of an endpoint.", + "type": "object", + "properties": { + "ready": { + "description": "ready indicates that this endpoint is prepared to receive traffic, according to whatever system is managing the endpoint. A nil value indicates an unknown state. In most cases consumers should interpret this unknown state as ready. For compatibility reasons, ready should never be \"true\" for terminating endpoints, except when the normal readiness behavior is being explicitly overridden, for example when the associated Service has set the publishNotReadyAddresses flag.", + "type": "boolean" + }, + "serving": { + "description": "serving is identical to ready except that it is set regardless of the terminating state of endpoints. This condition should be set to true for a ready endpoint that is terminating. If nil, consumers should defer to the ready condition.", + "type": "boolean" + }, + "terminating": { + "description": "terminating indicates that this endpoint is terminating. A nil value indicates an unknown state. Consumers should interpret this unknown state to mean that the endpoint is not terminating.", + "type": "boolean" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "discovery.k8s.io", + "Version": "v1", + "Kind": "EndpointConditions", + "Scope": "Namespaced" + } + }, + "io.k8s.api.discovery.v1.EndpointHints": { + "description": "EndpointHints provides hints describing how an endpoint should be consumed.", + "type": "object", + "properties": { + "forZones": { + "description": "forZones indicates the zone(s) this endpoint should be consumed by to enable topology aware routing.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.discovery.v1.ForZone" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "discovery.k8s.io", + "Version": "v1", + "Kind": "EndpointHints", + "Scope": "Namespaced" + } + }, + "io.k8s.api.discovery.v1.EndpointPort": { + "description": "EndpointPort represents a Port used by an EndpointSlice", + "type": "object", + "properties": { + "appProtocol": { + "description": "The application protocol for this port. This is used as a hint for implementations to offer richer behavior for protocols that they understand. This field follows standard Kubernetes label syntax. Valid values are either:\n\n* Un-prefixed protocol names - reserved for IANA standard service names (as per RFC-6335 and https://www.iana.org/assignments/service-names).\n\n* Kubernetes-defined prefixed names:\n * 'kubernetes.io/h2c' - HTTP/2 prior knowledge over cleartext as described in https://www.rfc-editor.org/rfc/rfc9113.html#name-starting-http-2-with-prior-\n * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455\n * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455\n\n* Other protocols should use implementation-defined prefixed names such as mycompany.com/my-custom-protocol.", + "type": "string" + }, + "name": { + "description": "name represents the name of this port. All ports in an EndpointSlice must have a unique name. If the EndpointSlice is derived from a Kubernetes service, this corresponds to the Service.ports[].name. Name must either be an empty string or pass DNS_LABEL validation: * must be no more than 63 characters long. * must consist of lower case alphanumeric characters or '-'. * must start and end with an alphanumeric character. Default is empty string.", + "type": "string" + }, + "port": { + "description": "port represents the port number of the endpoint. If this is not specified, ports are not restricted and must be interpreted in the context of the specific consumer.", + "type": "integer", + "format": "int32" + }, + "protocol": { + "description": "protocol represents the IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", + "type": "string", + "enum": [ + "SCTP", + "TCP", + "UDP" + ] + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "discovery.k8s.io", + "Version": "v1", + "Kind": "EndpointPort", + "Scope": "Namespaced" + }, + "x-kubernetes-map-type": "atomic" + }, + "io.k8s.api.discovery.v1.EndpointSlice": { + "description": "EndpointSlice represents a subset of the endpoints that implement a service. For a given service there may be multiple EndpointSlice objects, selected by labels, which must be joined to produce the full set of endpoints.", + "type": "object", + "required": [ + "addressType", + "endpoints" + ], + "properties": { + "addressType": { + "description": "addressType specifies the type of address carried by this EndpointSlice. All addresses in this slice must be the same type. This field is immutable after creation. The following address types are currently supported: * IPv4: Represents an IPv4 Address. * IPv6: Represents an IPv6 Address. * FQDN: Represents a Fully Qualified Domain Name.\n\nPossible enum values:\n - `\"FQDN\"` represents a FQDN.\n - `\"IPv4\"` represents an IPv4 Address.\n - `\"IPv6\"` represents an IPv6 Address.", + "type": "string", + "default": "", + "enum": [ + "FQDN", + "IPv4", + "IPv6" + ] + }, + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "endpoints": { + "description": "endpoints is a list of unique endpoints in this slice. Each slice may include a maximum of 1000 endpoints.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.discovery.v1.Endpoint" + }, + "x-kubernetes-list-type": "atomic" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "ports": { + "description": "ports specifies the list of network ports exposed by each endpoint in this slice. Each port must have a unique name. When ports is empty, it indicates that there are no defined ports. When a port is defined with a nil port value, it indicates \"all ports\". Each slice may include a maximum of 100 ports.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointPort" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "discovery.k8s.io", + "Version": "v1", + "Kind": "EndpointSlice", + "Scope": "Namespaced" + } + }, + "io.k8s.api.discovery.v1.EndpointSliceList": { + "description": "EndpointSliceList represents a list of endpoint slices", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is the list of endpoint slices", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointSlice" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "discovery.k8s.io", + "Version": "v1", + "Kind": "EndpointSliceList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.discovery.v1.ForZone": { + "description": "ForZone provides information about which zones should consume this endpoint.", + "type": "object", + "required": [ + "name" + ], + "properties": { + "name": { + "description": "name represents the name of the zone.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "discovery.k8s.io", + "Version": "v1", + "Kind": "ForZone", + "Scope": "Namespaced" + } + }, + "io.k8s.api.discovery.v1beta1.Endpoint": { + "description": "Endpoint represents a single logical \"backend\" implementing a service.", + "type": "object", + "required": [ + "addresses" + ], + "properties": { + "addresses": { + "description": "addresses of this endpoint. The contents of this field are interpreted according to the corresponding EndpointSlice addressType field. Consumers must handle different types of addresses in the context of their own capabilities. This must contain at least one address but no more than 100. These are all assumed to be fungible and clients may choose to only use the first element. Refer to: https://issue.k8s.io/106267", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" + }, + "conditions": { + "description": "conditions contains information about the current status of the endpoint.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointConditions" + }, + "hints": { + "description": "hints contains information associated with how an endpoint should be consumed.", + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointHints" + }, + "hostname": { + "description": "hostname of this endpoint. This field may be used by consumers of endpoints to distinguish endpoints from each other (e.g. in DNS names). Multiple endpoints which use the same hostname should be considered fungible (e.g. multiple A values in DNS). Must be lowercase and pass DNS Label (RFC 1123) validation.", + "type": "string" + }, + "nodeName": { + "description": "nodeName represents the name of the Node hosting this endpoint. This can be used to determine endpoints local to a Node.", + "type": "string" + }, + "targetRef": { + "description": "targetRef is a reference to a Kubernetes object that represents this endpoint.", + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + }, + "topology": { + "description": "topology contains arbitrary topology information associated with the endpoint. These key/value pairs must conform with the label format. https://kubernetes.io/docs/concepts/overview/working-with-objects/labels Topology may include a maximum of 16 key/value pairs. This includes, but is not limited to the following well known keys: * kubernetes.io/hostname: the value indicates the hostname of the node\n where the endpoint is located. This should match the corresponding\n node label.\n* topology.kubernetes.io/zone: the value indicates the zone where the\n endpoint is located. This should match the corresponding node label.\n* topology.kubernetes.io/region: the value indicates the region where the\n endpoint is located. This should match the corresponding node label.\nThis field is deprecated and will be removed in future api versions.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "discovery.k8s.io", + "Version": "v1beta1", + "Kind": "Endpoint", + "Scope": "Namespaced" + } + }, + "io.k8s.api.discovery.v1beta1.EndpointConditions": { + "description": "EndpointConditions represents the current condition of an endpoint.", + "type": "object", + "properties": { + "ready": { + "description": "ready indicates that this endpoint is prepared to receive traffic, according to whatever system is managing the endpoint. A nil value indicates an unknown state. In most cases consumers should interpret this unknown state as ready. For compatibility reasons, ready should never be \"true\" for terminating endpoints.", + "type": "boolean" + }, + "serving": { + "description": "serving is identical to ready except that it is set regardless of the terminating state of endpoints. This condition should be set to true for a ready endpoint that is terminating. If nil, consumers should defer to the ready condition.", + "type": "boolean" + }, + "terminating": { + "description": "terminating indicates that this endpoint is terminating. A nil value indicates an unknown state. Consumers should interpret this unknown state to mean that the endpoint is not terminating.", + "type": "boolean" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "discovery.k8s.io", + "Version": "v1beta1", + "Kind": "EndpointConditions", + "Scope": "Namespaced" + } + }, + "io.k8s.api.discovery.v1beta1.EndpointHints": { + "description": "EndpointHints provides hints describing how an endpoint should be consumed.", + "type": "object", + "properties": { + "forZones": { + "description": "forZones indicates the zone(s) this endpoint should be consumed by to enable topology aware routing. May contain a maximum of 8 entries.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.ForZone" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "discovery.k8s.io", + "Version": "v1beta1", + "Kind": "EndpointHints", + "Scope": "Namespaced" + } + }, + "io.k8s.api.discovery.v1beta1.EndpointPort": { + "description": "EndpointPort represents a Port used by an EndpointSlice", + "type": "object", + "properties": { + "appProtocol": { + "description": "appProtocol represents the application protocol for this port. This field follows standard Kubernetes label syntax. Un-prefixed names are reserved for IANA standard service names (as per RFC-6335 and https://www.iana.org/assignments/service-names). Non-standard protocols should use prefixed names such as mycompany.com/my-custom-protocol.", + "type": "string" + }, + "name": { + "description": "name represents the name of this port. All ports in an EndpointSlice must have a unique name. If the EndpointSlice is derived from a Kubernetes service, this corresponds to the Service.ports[].name. Name must either be an empty string or pass DNS_LABEL validation: * must be no more than 63 characters long. * must consist of lower case alphanumeric characters or '-'. * must start and end with an alphanumeric character. Default is empty string.", + "type": "string" + }, + "port": { + "description": "port represents the port number of the endpoint. If this is not specified, ports are not restricted and must be interpreted in the context of the specific consumer.", + "type": "integer", + "format": "int32" + }, + "protocol": { + "description": "protocol represents the IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", + "type": "string", + "enum": [ + "SCTP", + "TCP", + "UDP" + ] + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "discovery.k8s.io", + "Version": "v1beta1", + "Kind": "EndpointPort", + "Scope": "Namespaced" + } + }, + "io.k8s.api.discovery.v1beta1.EndpointSlice": { + "description": "EndpointSlice represents a subset of the endpoints that implement a service. For a given service there may be multiple EndpointSlice objects, selected by labels, which must be joined to produce the full set of endpoints.", + "type": "object", + "required": [ + "addressType", + "endpoints" + ], + "properties": { + "addressType": { + "description": "addressType specifies the type of address carried by this EndpointSlice. All addresses in this slice must be the same type. This field is immutable after creation. The following address types are currently supported: * IPv4: Represents an IPv4 Address. * IPv6: Represents an IPv6 Address. * FQDN: Represents a Fully Qualified Domain Name.", + "type": "string", + "default": "" + }, + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "endpoints": { + "description": "endpoints is a list of unique endpoints in this slice. Each slice may include a maximum of 1000 endpoints.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.Endpoint" + }, + "x-kubernetes-list-type": "atomic" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "ports": { + "description": "ports specifies the list of network ports exposed by each endpoint in this slice. Each port must have a unique name. When ports is empty, it indicates that there are no defined ports. When a port is defined with a nil port value, it indicates \"all ports\". Each slice may include a maximum of 100 ports.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointPort" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "discovery.k8s.io", + "Version": "v1beta1", + "Kind": "EndpointSlice", + "Scope": "Namespaced" + } + }, + "io.k8s.api.discovery.v1beta1.EndpointSliceList": { + "description": "EndpointSliceList represents a list of endpoint slices", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is the list of endpoint slices", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointSlice" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "discovery.k8s.io", + "Version": "v1beta1", + "Kind": "EndpointSliceList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.discovery.v1beta1.ForZone": { + "description": "ForZone provides information about which zones should consume this endpoint.", + "type": "object", + "required": [ + "name" + ], + "properties": { + "name": { + "description": "name represents the name of the zone.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "discovery.k8s.io", + "Version": "v1beta1", + "Kind": "ForZone", + "Scope": "Namespaced" + } + }, + "io.k8s.api.events.v1.Event": { + "description": "Event is a report of an event somewhere in the cluster. It generally denotes some state change in the system. Events have a limited retention time and triggers and messages may evolve with time. Event consumers should not rely on the timing of an event with a given Reason reflecting a consistent underlying trigger, or the continued existence of events with that Reason. Events should be treated as informative, best-effort, supplemental data.", + "type": "object", + "required": [ + "eventTime" + ], + "properties": { + "action": { + "description": "action is what action was taken/failed regarding to the regarding object. It is machine-readable. This field cannot be empty for new Events and it can have at most 128 characters.", + "type": "string" + }, + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "deprecatedCount": { + "description": "deprecatedCount is the deprecated field assuring backward compatibility with core.v1 Event type.", + "type": "integer", + "format": "int32" + }, + "deprecatedFirstTimestamp": { + "description": "deprecatedFirstTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "deprecatedLastTimestamp": { + "description": "deprecatedLastTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "deprecatedSource": { + "description": "deprecatedSource is the deprecated field assuring backward compatibility with core.v1 Event type.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EventSource" + }, + "eventTime": { + "description": "eventTime is the time when this Event was first observed. It is required.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "note": { + "description": "note is a human-readable description of the status of this operation. Maximal length of the note is 1kB, but libraries should be prepared to handle values up to 64kB.", + "type": "string" + }, + "reason": { + "description": "reason is why the action was taken. It is human-readable. This field cannot be empty for new Events and it can have at most 128 characters.", + "type": "string" + }, + "regarding": { + "description": "regarding contains the object this Event is about. In most cases it's an Object reporting controller implements, e.g. ReplicaSetController implements ReplicaSets and this event is emitted because it acts on some changes in a ReplicaSet object.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + }, + "related": { + "description": "related is the optional secondary object for more complex actions. E.g. when regarding object triggers a creation or deletion of related object.", + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + }, + "reportingController": { + "description": "reportingController is the name of the controller that emitted this Event, e.g. `kubernetes.io/kubelet`. This field cannot be empty for new Events.", + "type": "string" + }, + "reportingInstance": { + "description": "reportingInstance is the ID of the controller instance, e.g. `kubelet-xyzf`. This field cannot be empty for new Events and it can have at most 128 characters.", + "type": "string" + }, + "series": { + "description": "series is data about the Event series this event represents or nil if it's a singleton Event.", + "$ref": "#/definitions/io.k8s.api.events.v1.EventSeries" + }, + "type": { + "description": "type is the type of this event (Normal, Warning), new types could be added in the future. It is machine-readable. This field cannot be empty for new Events.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "events.k8s.io", + "Version": "v1", + "Kind": "Event", + "Scope": "Namespaced" + } + }, + "io.k8s.api.events.v1.EventList": { + "description": "EventList is a list of Event objects.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is a list of schema objects.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.events.v1.Event" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "events.k8s.io", + "Version": "v1", + "Kind": "EventList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.events.v1.EventSeries": { + "description": "EventSeries contain information on series of events, i.e. thing that was/is happening continuously for some time. How often to update the EventSeries is up to the event reporters. The default event reporter in \"k8s.io/client-go/tools/events/event_broadcaster.go\" shows how this struct is updated on heartbeats and can guide customized reporter implementations.", + "type": "object", + "required": [ + "count", + "lastObservedTime" + ], + "properties": { + "count": { + "description": "count is the number of occurrences in this series up to the last heartbeat time.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "lastObservedTime": { + "description": "lastObservedTime is the time when last Event from the series was seen before last heartbeat.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "events.k8s.io", + "Version": "v1", + "Kind": "EventSeries", + "Scope": "Namespaced" + } + }, + "io.k8s.api.events.v1beta1.Event": { + "description": "Event is a report of an event somewhere in the cluster. It generally denotes some state change in the system. Events have a limited retention time and triggers and messages may evolve with time. Event consumers should not rely on the timing of an event with a given Reason reflecting a consistent underlying trigger, or the continued existence of events with that Reason. Events should be treated as informative, best-effort, supplemental data.", + "type": "object", + "required": [ + "eventTime" + ], + "properties": { + "action": { + "description": "action is what action was taken/failed regarding to the regarding object. It is machine-readable. This field can have at most 128 characters.", + "type": "string" + }, + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "deprecatedCount": { + "description": "deprecatedCount is the deprecated field assuring backward compatibility with core.v1 Event type.", + "type": "integer", + "format": "int32" + }, + "deprecatedFirstTimestamp": { + "description": "deprecatedFirstTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "deprecatedLastTimestamp": { + "description": "deprecatedLastTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "deprecatedSource": { + "description": "deprecatedSource is the deprecated field assuring backward compatibility with core.v1 Event type.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EventSource" + }, + "eventTime": { + "description": "eventTime is the time when this Event was first observed. It is required.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "note": { + "description": "note is a human-readable description of the status of this operation. Maximal length of the note is 1kB, but libraries should be prepared to handle values up to 64kB.", + "type": "string" + }, + "reason": { + "description": "reason is why the action was taken. It is human-readable. This field can have at most 128 characters.", + "type": "string" + }, + "regarding": { + "description": "regarding contains the object this Event is about. In most cases it's an Object reporting controller implements, e.g. ReplicaSetController implements ReplicaSets and this event is emitted because it acts on some changes in a ReplicaSet object.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + }, + "related": { + "description": "related is the optional secondary object for more complex actions. E.g. when regarding object triggers a creation or deletion of related object.", + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + }, + "reportingController": { + "description": "reportingController is the name of the controller that emitted this Event, e.g. `kubernetes.io/kubelet`. This field cannot be empty for new Events.", + "type": "string" + }, + "reportingInstance": { + "description": "reportingInstance is the ID of the controller instance, e.g. `kubelet-xyzf`. This field cannot be empty for new Events and it can have at most 128 characters.", + "type": "string" + }, + "series": { + "description": "series is data about the Event series this event represents or nil if it's a singleton Event.", + "$ref": "#/definitions/io.k8s.api.events.v1beta1.EventSeries" + }, + "type": { + "description": "type is the type of this event (Normal, Warning), new types could be added in the future. It is machine-readable.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "events.k8s.io", + "Version": "v1beta1", + "Kind": "Event", + "Scope": "Namespaced" + } + }, + "io.k8s.api.events.v1beta1.EventList": { + "description": "EventList is a list of Event objects.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is a list of schema objects.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.events.v1beta1.Event" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "events.k8s.io", + "Version": "v1beta1", + "Kind": "EventList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.events.v1beta1.EventSeries": { + "description": "EventSeries contain information on series of events, i.e. thing that was/is happening continuously for some time.", + "type": "object", + "required": [ + "count", + "lastObservedTime" + ], + "properties": { + "count": { + "description": "count is the number of occurrences in this series up to the last heartbeat time.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "lastObservedTime": { + "description": "lastObservedTime is the time when last Event from the series was seen before last heartbeat.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "events.k8s.io", + "Version": "v1beta1", + "Kind": "EventSeries", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.DaemonSet": { + "description": "DEPRECATED - This group version of DaemonSet is deprecated by apps/v1beta2/DaemonSet. See the release notes for more information. DaemonSet represents the configuration of a daemon set.", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "The desired behavior of this daemon set. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.DaemonSetSpec" + }, + "status": { + "description": "The current status of this daemon set. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.DaemonSetStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1beta1", + "Kind": "DaemonSet", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.DaemonSetCondition": { + "description": "DaemonSetCondition describes the state of a DaemonSet at a certain point.", + "type": "object", + "required": [ + "type", + "status" + ], + "properties": { + "lastTransitionTime": { + "description": "Last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "A human readable message indicating details about the transition.", + "type": "string" + }, + "reason": { + "description": "The reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status of the condition, one of True, False, Unknown.", + "type": "string", + "default": "" + }, + "type": { + "description": "Type of DaemonSet condition.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1beta1", + "Kind": "DaemonSetCondition", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.DaemonSetList": { + "description": "DaemonSetList is a collection of daemon sets.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "A list of daemon sets.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.HostAlias" - }, - "x-kubernetes-list-map-keys": [ - "ip" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "ip", - "x-kubernetes-patch-strategy": "merge" + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.DaemonSet" + } }, - "hostIPC": { - "description": "Use the host's ipc namespace. Optional: Default to false.", - "type": "boolean" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "hostNetwork": { - "description": "Host networking requested for this pod. Use the host's network namespace. If this option is set, the ports that will be used must be specified. Default to false.", - "type": "boolean" + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "", + "Version": "v1beta1", + "Kind": "DaemonSetList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.DaemonSetSpec": { + "description": "DaemonSetSpec is the specification of a daemon set.", + "type": "object", + "required": [ + "template" + ], + "properties": { + "minReadySeconds": { + "description": "The minimum number of seconds for which a newly created DaemonSet pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready).", + "type": "integer", + "format": "int32" }, - "hostPID": { - "description": "Use the host's pid namespace. Optional: Default to false.", - "type": "boolean" + "revisionHistoryLimit": { + "description": "The number of old history to retain to allow rollback. This is a pointer to distinguish between explicit zero and not specified. Defaults to 10.", + "type": "integer", + "format": "int32" }, - "hostUsers": { - "description": "Use the host's user namespace. Optional: Default to true. If set to true or not present, the pod will be run in the host user namespace, useful for when the pod needs a feature only available to the host user namespace, such as loading a kernel module with CAP_SYS_MODULE. When set to false, a new userns is created for the pod. Setting false is useful for mitigating container breakout vulnerabilities even allowing users to run their containers as root without actually having root privileges on the host. This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.", - "type": "boolean" + "selector": { + "description": "A label query over pods that are managed by the daemon set. Must match in order to be controlled. If empty, defaulted to labels on Pod template. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" }, - "hostname": { - "description": "Specifies the hostname of the Pod If not specified, the pod's hostname will be set to a system-defined value.", - "type": "string" + "template": { + "description": "An object that describes the pod that will be created. The DaemonSet will create exactly one copy of this pod on every node that matches the template's node selector (or on every node if no node selector is specified). More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" }, - "imagePullSecrets": { - "description": "ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec. If specified, these secrets will be passed to individual puller implementations for them to use. More info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" + "templateGeneration": { + "description": "DEPRECATED. A sequence number representing a specific generation of the template. Populated by the system. It can be set only during the creation.", + "type": "integer", + "format": "int64" }, - "initContainers": { - "description": "List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added or removed. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/", + "updateStrategy": { + "description": "An update strategy to replace existing DaemonSet pods with new pods.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.DaemonSetUpdateStrategy" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1beta1", + "Kind": "DaemonSetSpec", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.DaemonSetStatus": { + "description": "DaemonSetStatus represents the current status of a daemon set.", + "type": "object", + "required": [ + "currentNumberScheduled", + "numberMisscheduled", + "desiredNumberScheduled", + "numberReady" + ], + "properties": { + "collisionCount": { + "description": "Count of hash collisions for the DaemonSet. The DaemonSet controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ControllerRevision.", + "type": "integer", + "format": "int32" + }, + "conditions": { + "description": "Represents the latest available observations of a DaemonSet's current state.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Container" + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.DaemonSetCondition" }, "x-kubernetes-list-map-keys": [ - "name" + "type" ], "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-merge-key": "type", "x-kubernetes-patch-strategy": "merge" }, - "nodeName": { - "description": "NodeName indicates in which node this pod is scheduled. If empty, this pod is a candidate for scheduling by the scheduler defined in schedulerName. Once this field is set, the kubelet for this node becomes responsible for the lifecycle of this pod. This field should not be used to express a desire for the pod to be scheduled on a specific node. https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodename", - "type": "string" + "currentNumberScheduled": { + "description": "The number of nodes that are running at least 1 daemon pod and are supposed to run the daemon pod. More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/", + "type": "integer", + "format": "int32", + "default": 0 }, - "nodeSelector": { - "description": "NodeSelector is a selector which must be true for the pod to fit on a node. Selector which must match a node's labels for the pod to be scheduled on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - }, - "x-kubernetes-map-type": "atomic" + "desiredNumberScheduled": { + "description": "The total number of nodes that should be running the daemon pod (including nodes correctly running the daemon pod). More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/", + "type": "integer", + "format": "int32", + "default": 0 }, - "os": { - "description": "Specifies the OS of the containers in the pod. Some pod and container fields are restricted if this is set.\n\nIf the OS field is set to linux, the following fields must be unset: -securityContext.windowsOptions\n\nIf the OS field is set to windows, following fields must be unset: - spec.hostPID - spec.hostIPC - spec.hostUsers - spec.securityContext.appArmorProfile - spec.securityContext.seLinuxOptions - spec.securityContext.seccompProfile - spec.securityContext.fsGroup - spec.securityContext.fsGroupChangePolicy - spec.securityContext.sysctls - spec.shareProcessNamespace - spec.securityContext.runAsUser - spec.securityContext.runAsGroup - spec.securityContext.supplementalGroups - spec.securityContext.supplementalGroupsPolicy - spec.containers[*].securityContext.appArmorProfile - spec.containers[*].securityContext.seLinuxOptions - spec.containers[*].securityContext.seccompProfile - spec.containers[*].securityContext.capabilities - spec.containers[*].securityContext.readOnlyRootFilesystem - spec.containers[*].securityContext.privileged - spec.containers[*].securityContext.allowPrivilegeEscalation - spec.containers[*].securityContext.procMount - spec.containers[*].securityContext.runAsUser - spec.containers[*].securityContext.runAsGroup", - "$ref": "#/definitions/io.k8s.api.core.v1.PodOS" + "numberAvailable": { + "description": "The number of nodes that should be running the daemon pod and have one or more of the daemon pod running and available (ready for at least spec.minReadySeconds)", + "type": "integer", + "format": "int32" }, - "overhead": { - "description": "Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. This field will be autopopulated at admission time by the RuntimeClass admission controller. If the RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests. The RuntimeClass admission controller will reject Pod create requests which have the overhead already set. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the value defined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero. More info: https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } + "numberMisscheduled": { + "description": "The number of nodes that are running the daemon pod, but are not supposed to run the daemon pod. More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/", + "type": "integer", + "format": "int32", + "default": 0 }, - "preemptionPolicy": { - "description": "PreemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset.\n\nPossible enum values:\n - `\"Never\"` means that pod never preempts other pods with lower priority.\n - `\"PreemptLowerPriority\"` means that pod can preempt other pods with lower priority.", - "type": "string", - "enum": [ - "Never", - "PreemptLowerPriority" - ] + "numberReady": { + "description": "The number of nodes that should be running the daemon pod and have one or more of the daemon pod running and ready.", + "type": "integer", + "format": "int32", + "default": 0 }, - "priority": { - "description": "The priority value. Various system components use this field to find the priority of the pod. When Priority Admission Controller is enabled, it prevents users from setting this field. The admission controller populates this field from PriorityClassName. The higher the value, the higher the priority.", + "numberUnavailable": { + "description": "The number of nodes that should be running the daemon pod and have none of the daemon pod running and available (ready for at least spec.minReadySeconds)", "type": "integer", "format": "int32" }, - "priorityClassName": { - "description": "If specified, indicates the pod's priority. \"system-node-critical\" and \"system-cluster-critical\" are two special keywords which indicate the highest priorities with the former being the highest priority. Any other name must be defined by creating a PriorityClass object with that name. If not specified, the pod priority will be default or zero if there is no default.", + "observedGeneration": { + "description": "The most recent generation observed by the daemon set controller.", + "type": "integer", + "format": "int64" + }, + "updatedNumberScheduled": { + "description": "The total number of nodes that are running updated daemon pod", + "type": "integer", + "format": "int32" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1beta1", + "Kind": "DaemonSetStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.DaemonSetUpdateStrategy": { + "description": "DaemonSetUpdateStrategy indicates the strategy that the DaemonSet controller will use to perform updates. It includes any additional parameters necessary to perform the update for the indicated strategy.", + "type": "object", + "properties": { + "rollingUpdate": { + "description": "Rolling update config params. Present only if type = \"RollingUpdate\".", + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.RollingUpdateDaemonSet" + }, + "type": { + "description": "Type of daemon set update. Can be \"RollingUpdate\" or \"OnDelete\". Default is OnDelete.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1beta1", + "Kind": "DaemonSetUpdateStrategy", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.Deployment": { + "description": "DEPRECATED - This group version of Deployment is deprecated by apps/v1beta2/Deployment. See the release notes for more information. Deployment enables declarative updates for Pods and ReplicaSets.", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "readinessGates": { - "description": "If specified, all readiness gates will be evaluated for pod readiness. A pod is ready when all its containers are ready AND all conditions specified in the readiness gates have status equal to \"True\" More info: https://git.k8s.io/enhancements/keps/sig-network/580-pod-readiness-gates", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodReadinessGate" - }, - "x-kubernetes-list-type": "atomic" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "resourceClaims": { - "description": "ResourceClaims defines which ResourceClaims must be allocated and reserved before the Pod is allowed to start. The resources will be made available to those containers which consume them by name.\n\nThis is an alpha field and requires enabling the DynamicResourceAllocation feature gate.\n\nThis field is immutable.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodResourceClaim" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge,retainKeys" + "metadata": { + "description": "Standard object metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "restartPolicy": { - "description": "Restart policy for all containers within the pod. One of Always, OnFailure, Never. In some contexts, only a subset of those values may be permitted. Default to Always. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy\n\nPossible enum values:\n - `\"Always\"`\n - `\"Never\"`\n - `\"OnFailure\"`", - "type": "string", - "enum": [ - "Always", - "Never", - "OnFailure" - ] + "spec": { + "description": "Specification of the desired behavior of the Deployment.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.DeploymentSpec" }, - "runtimeClassName": { - "description": "RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be used to run this pod. If no RuntimeClass resource matches the named class, the pod will not be run. If unset or empty, the \"legacy\" RuntimeClass will be used, which is an implicit class with an empty definition that uses the default runtime handler. More info: https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class", + "status": { + "description": "Most recently observed status of the Deployment.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.DeploymentStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1beta1", + "Kind": "Deployment", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.DeploymentCondition": { + "description": "DeploymentCondition describes the state of a deployment at a certain point.", + "type": "object", + "required": [ + "type", + "status" + ], + "properties": { + "lastTransitionTime": { + "description": "Last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "lastUpdateTime": { + "description": "The last time this condition was updated.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "A human readable message indicating details about the transition.", "type": "string" }, - "schedulerName": { - "description": "If specified, the pod will be dispatched by specified scheduler. If not specified, the pod will be dispatched by default scheduler.", + "reason": { + "description": "The reason for the condition's last transition.", "type": "string" }, - "schedulingGates": { - "description": "SchedulingGates is an opaque list of values that if specified will block scheduling the pod. If schedulingGates is not empty, the pod will stay in the SchedulingGated state and the scheduler will not attempt to schedule the pod.\n\nSchedulingGates can only be set at pod creation time, and be removed only afterwards.", + "status": { + "description": "Status of the condition, one of True, False, Unknown.", + "type": "string", + "default": "" + }, + "type": { + "description": "Type of deployment condition.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1beta1", + "Kind": "DeploymentCondition", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.DeploymentList": { + "description": "DeploymentList is a list of Deployments.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is the list of Deployments.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodSchedulingGate" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.Deployment" + } }, - "securityContext": { - "description": "SecurityContext holds pod-level security attributes and common container settings. Optional: Defaults to empty. See type description for default values of each field.", - "$ref": "#/definitions/io.k8s.api.core.v1.PodSecurityContext" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "serviceAccount": { - "description": "DeprecatedServiceAccount is a deprecated alias for ServiceAccountName. Deprecated: Use serviceAccountName instead.", + "metadata": { + "description": "Standard list metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "", + "Version": "v1beta1", + "Kind": "DeploymentList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.DeploymentRollback": { + "description": "DEPRECATED. DeploymentRollback stores the information required to rollback a deployment.", + "type": "object", + "required": [ + "name", + "rollbackTo" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "serviceAccountName": { - "description": "ServiceAccountName is the name of the ServiceAccount to use to run this pod. More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "setHostnameAsFQDN": { - "description": "If true the pod's hostname will be configured as the pod's FQDN, rather than the leaf name (the default). In Linux containers, this means setting the FQDN in the hostname field of the kernel (the nodename field of struct utsname). In Windows containers, this means setting the registry value of hostname for the registry key HKEY_LOCAL_MACHINE\\\\SYSTEM\\\\CurrentControlSet\\\\Services\\\\Tcpip\\\\Parameters to FQDN. If a pod does not have FQDN, this has no effect. Default to false.", - "type": "boolean" + "name": { + "description": "Required: This must match the Name of a deployment.", + "type": "string", + "default": "" }, - "shareProcessNamespace": { - "description": "Share a single process namespace between all of the containers in a pod. When this is set containers will be able to view and signal processes from other containers in the same pod, and the first process in each container will not be assigned PID 1. HostPID and ShareProcessNamespace cannot both be set. Optional: Default to false.", + "rollbackTo": { + "description": "The config of this deployment rollback.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.RollbackConfig" + }, + "updatedAnnotations": { + "description": "The annotations to be updated to a deployment", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1beta1", + "Kind": "DeploymentRollback", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.DeploymentSpec": { + "description": "DeploymentSpec is the specification of the desired behavior of the Deployment.", + "type": "object", + "required": [ + "template" + ], + "properties": { + "minReadySeconds": { + "description": "Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", + "type": "integer", + "format": "int32" + }, + "paused": { + "description": "Indicates that the deployment is paused and will not be processed by the deployment controller.", "type": "boolean" }, - "subdomain": { - "description": "If specified, the fully qualified Pod hostname will be \"\u003chostname\u003e.\u003csubdomain\u003e.\u003cpod namespace\u003e.svc.\u003ccluster domain\u003e\". If not specified, the pod will not have a domainname at all.", - "type": "string" + "progressDeadlineSeconds": { + "description": "The maximum time in seconds for a deployment to make progress before it is considered to be failed. The deployment controller will continue to process failed deployments and a condition with a ProgressDeadlineExceeded reason will be surfaced in the deployment status. Note that progress will not be estimated during the time a deployment is paused. This is set to the max value of int32 (i.e. 2147483647) by default, which means \"no deadline\".", + "type": "integer", + "format": "int32" }, - "terminationGracePeriodSeconds": { - "description": "Optional duration in seconds the pod needs to terminate gracefully. May be decreased in delete request. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). If this value is nil, the default grace period will be used instead. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. Defaults to 30 seconds.", + "replicas": { + "description": "Number of desired pods. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.", "type": "integer", - "format": "int64" + "format": "int32" }, - "tolerations": { - "description": "If specified, the pod's tolerations.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - }, - "x-kubernetes-list-type": "atomic" + "revisionHistoryLimit": { + "description": "The number of old ReplicaSets to retain to allow rollback. This is a pointer to distinguish between explicit zero and not specified. This is set to the max value of int32 (i.e. 2147483647) by default, which means \"retaining all old ReplicaSets\".", + "type": "integer", + "format": "int32" }, - "topologySpreadConstraints": { - "description": "TopologySpreadConstraints describes how a group of pods ought to spread across topology domains. Scheduler will schedule pods in a way which abides by the constraints. All topologySpreadConstraints are ANDed.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.TopologySpreadConstraint" - }, - "x-kubernetes-list-map-keys": [ - "topologyKey", - "whenUnsatisfiable" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "topologyKey", - "x-kubernetes-patch-strategy": "merge" + "rollbackTo": { + "description": "DEPRECATED. The config this deployment is rolling back to. Will be cleared after rollback is done.", + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.RollbackConfig" }, - "volumes": { - "description": "List of volumes that can be mounted by containers belonging to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Volume" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge,retainKeys" + "selector": { + "description": "Label selector for pods. Existing ReplicaSets whose pods are selected by this will be the ones affected by this deployment.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "strategy": { + "description": "The deployment strategy to use to replace existing pods with new ones.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.DeploymentStrategy", + "x-kubernetes-patch-strategy": "retainKeys" + }, + "template": { + "description": "Template describes the pods that will be created.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "PodSpec", + "Version": "v1beta1", + "Kind": "DeploymentSpec", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodStatus": { - "description": "PodStatus represents information about the status of a pod. Status may trail the actual state of a system, especially if the node that hosts the pod cannot contact the control plane.", + "io.k8s.api.extensions.v1beta1.DeploymentStatus": { + "description": "DeploymentStatus is the most recently observed status of the Deployment.", "type": "object", "properties": { + "availableReplicas": { + "description": "Total number of available pods (ready for at least minReadySeconds) targeted by this deployment.", + "type": "integer", + "format": "int32" + }, + "collisionCount": { + "description": "Count of hash collisions for the Deployment. The Deployment controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ReplicaSet.", + "type": "integer", + "format": "int32" + }, "conditions": { - "description": "Current service state of pod. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions", + "description": "Represents the latest available observations of a deployment's current state.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodCondition" + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.DeploymentCondition" }, "x-kubernetes-list-map-keys": [ "type" @@ -34647,131 +40666,147 @@ "x-kubernetes-patch-merge-key": "type", "x-kubernetes-patch-strategy": "merge" }, - "containerStatuses": { - "description": "The list has one entry per container in the manifest. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ContainerStatus" - }, - "x-kubernetes-list-type": "atomic" + "observedGeneration": { + "description": "The generation observed by the deployment controller.", + "type": "integer", + "format": "int64" }, - "ephemeralContainerStatuses": { - "description": "Status for any ephemeral containers that have run in this pod.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ContainerStatus" - }, - "x-kubernetes-list-type": "atomic" + "readyReplicas": { + "description": "Total number of ready pods targeted by this deployment.", + "type": "integer", + "format": "int32" }, - "hostIP": { - "description": "hostIP holds the IP address of the host to which the pod is assigned. Empty if the pod has not started yet. A pod can be assigned to a node that has a problem in kubelet which in turns mean that HostIP will not be updated even if there is a node is assigned to pod", - "type": "string" + "replicas": { + "description": "Total number of non-terminated pods targeted by this deployment (their labels match the selector).", + "type": "integer", + "format": "int32" }, - "hostIPs": { - "description": "hostIPs holds the IP addresses allocated to the host. If this field is specified, the first entry must match the hostIP field. This list is empty if the pod has not started yet. A pod can be assigned to a node that has a problem in kubelet which in turns means that HostIPs will not be updated even if there is a node is assigned to this pod.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.HostIP" - }, - "x-kubernetes-list-type": "atomic", - "x-kubernetes-patch-merge-key": "ip", - "x-kubernetes-patch-strategy": "merge" + "unavailableReplicas": { + "description": "Total number of unavailable pods targeted by this deployment. This is the total number of pods that are still required for the deployment to have 100% available capacity. They may either be pods that are running but not yet available or pods that still have not been created.", + "type": "integer", + "format": "int32" }, - "initContainerStatuses": { - "description": "The list has one entry per init container in the manifest. The most recent successful init container will have ready = true, the most recently started container will have startTime set. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ContainerStatus" - }, - "x-kubernetes-list-type": "atomic" + "updatedReplicas": { + "description": "Total number of non-terminated pods targeted by this deployment that have the desired template spec.", + "type": "integer", + "format": "int32" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1beta1", + "Kind": "DeploymentStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.DeploymentStrategy": { + "description": "DeploymentStrategy describes how to replace existing pods with new ones.", + "type": "object", + "properties": { + "rollingUpdate": { + "description": "Rolling update config params. Present only if DeploymentStrategyType = RollingUpdate.", + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.RollingUpdateDeployment" }, - "message": { - "description": "A human readable message indicating details about why the pod is in this condition.", + "type": { + "description": "Type of deployment. Can be \"Recreate\" or \"RollingUpdate\". Default is RollingUpdate.", "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1beta1", + "Kind": "DeploymentStrategy", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.HTTPIngressPath": { + "description": "HTTPIngressPath associates a path with a backend. Incoming urls matching the path are forwarded to the backend.", + "type": "object", + "required": [ + "backend" + ], + "properties": { + "backend": { + "description": "Backend defines the referenced service endpoint to which the traffic will be forwarded to.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressBackend" }, - "nominatedNodeName": { - "description": "nominatedNodeName is set only when this pod preempts other pods on the node, but it cannot be scheduled right away as preemption victims receive their graceful termination periods. This field does not guarantee that the pod will be scheduled on this node. Scheduler may decide to place the pod elsewhere if other nodes become available sooner. Scheduler may also decide to give the resources on this node to a higher priority pod that is created after preemption. As a result, this field may be different than PodSpec.nodeName when the pod is scheduled.", + "path": { + "description": "Path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional \"path\" part of a URL as defined by RFC 3986. Paths must begin with a '/'. When unspecified, all paths from incoming requests are matched.", "type": "string" }, - "phase": { - "description": "The phase of a Pod is a simple, high-level summary of where the Pod is in its lifecycle. The conditions array, the reason and message fields, and the individual container status arrays contain more detail about the pod's status. There are five possible phase values:\n\nPending: The pod has been accepted by the Kubernetes system, but one or more of the container images has not been created. This includes time before being scheduled as well as time spent downloading images over the network, which could take a while. Running: The pod has been bound to a node, and all of the containers have been created. At least one container is still running, or is in the process of starting or restarting. Succeeded: All containers in the pod have terminated in success, and will not be restarted. Failed: All containers in the pod have terminated, and at least one container has terminated in failure. The container either exited with non-zero status or was terminated by the system. Unknown: For some reason the state of the pod could not be obtained, typically due to an error in communicating with the host of the pod.\n\nMore info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-phase\n\nPossible enum values:\n - `\"Failed\"` means that all containers in the pod have terminated, and at least one container has terminated in a failure (exited with a non-zero exit code or was stopped by the system).\n - `\"Pending\"` means the pod has been accepted by the system, but one or more of the containers has not been started. This includes time before being bound to a node, as well as time spent pulling images onto the host.\n - `\"Running\"` means the pod has been bound to a node and all of the containers have been started. At least one container is still running or is in the process of being restarted.\n - `\"Succeeded\"` means that all containers in the pod have voluntarily terminated with a container exit code of 0, and the system is not going to restart any of these containers.\n - `\"Unknown\"` means that for some reason the state of the pod could not be obtained, typically due to an error in communicating with the host of the pod. Deprecated: It isn't being set since 2015 (74da3b14b0c0f658b3bb8d2def5094686d0e9095)", - "type": "string", - "enum": [ - "Failed", - "Pending", - "Running", - "Succeeded", - "Unknown" - ] - }, - "podIP": { - "description": "podIP address allocated to the pod. Routable at least within the cluster. Empty if not yet allocated.", + "pathType": { + "description": "PathType determines the interpretation of the Path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by '/'. Matching is\n done on a path element by element basis. A path element refers is the\n list of labels in the path split by the '/' separator. A request is a\n match for path p if every p is an element-wise prefix of p of the\n request path. Note that if the last element of the path is a substring\n of the last element in request path, it is not a match (e.g. /foo/bar\n matches /foo/bar/baz, but does not match /foo/barbaz).\n* ImplementationSpecific: Interpretation of the Path matching is up to\n the IngressClass. Implementations can treat this as a separate PathType\n or treat it identically to Prefix or Exact path types.\nImplementations are required to support all path types. Defaults to ImplementationSpecific.", "type": "string" - }, - "podIPs": { - "description": "podIPs holds the IP addresses allocated to the pod. If this field is specified, the 0th entry must match the podIP field. Pods may be allocated at most 1 value for each of IPv4 and IPv6. This list is empty if no IPs have been allocated yet.", + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1beta1", + "Kind": "HTTPIngressPath", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.HTTPIngressRuleValue": { + "description": "HTTPIngressRuleValue is a list of http selectors pointing to backends. In the example: http://\u003chost\u003e/\u003cpath\u003e?\u003csearchpart\u003e -\u003e backend where where parts of the url correspond to RFC 3986, this resource will be used to match against everything after the last '/' and before the first '?' or '#'.", + "type": "object", + "required": [ + "paths" + ], + "properties": { + "paths": { + "description": "A collection of paths that map requests to backends.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodIP" + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.HTTPIngressPath" }, - "x-kubernetes-list-map-keys": [ - "ip" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "ip", - "x-kubernetes-patch-strategy": "merge" - }, - "qosClass": { - "description": "The Quality of Service (QOS) classification assigned to the pod based on resource requirements See PodQOSClass type for available QOS classes More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-qos/#quality-of-service-classes\n\nPossible enum values:\n - `\"BestEffort\"` is the BestEffort qos class.\n - `\"Burstable\"` is the Burstable qos class.\n - `\"Guaranteed\"` is the Guaranteed qos class.", + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1beta1", + "Kind": "HTTPIngressRuleValue", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.IPBlock": { + "description": "DEPRECATED 1.9 - This group version of IPBlock is deprecated by networking/v1/IPBlock. IPBlock describes a particular CIDR (Ex. \"192.168.1.0/24\",\"2001:db8::/64\") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.", + "type": "object", + "required": [ + "cidr" + ], + "properties": { + "cidr": { + "description": "CIDR is a string representing the IP Block Valid examples are \"192.168.1.0/24\" or \"2001:db8::/64\"", "type": "string", - "enum": [ - "BestEffort", - "Burstable", - "Guaranteed" - ] - }, - "reason": { - "description": "A brief CamelCase message indicating details about why the pod is in this state. e.g. 'Evicted'", - "type": "string" - }, - "resize": { - "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"", - "type": "string" + "default": "" }, - "resourceClaimStatuses": { - "description": "Status of resource claims.", + "except": { + "description": "Except is a slice of CIDRs that should not be included within an IP Block Valid examples are \"192.168.1.0/24\" or \"2001:db8::/64\" Except values will be rejected if they are outside the CIDR range", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodResourceClaimStatus" + "type": "string", + "default": "" }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge,retainKeys" - }, - "startTime": { - "description": "RFC 3339 date and time at which the object was acknowledged by the Kubelet. This is before the Kubelet pulled the container image(s) for the pod.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "PodStatus", + "Version": "v1beta1", + "Kind": "IPBlock", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodStatusResult": { - "description": "PodStatusResult is a wrapper for PodStatus returned by kubelet that can be encode/decoded", + "io.k8s.api.extensions.v1beta1.Ingress": { + "description": "Ingress is a collection of rules that allow inbound connections to reach the endpoints defined by a backend. An Ingress can be configured to give services externally-reachable urls, load balance traffic, terminate SSL, offer name based virtual hosting etc. DEPRECATED - This group version of Ingress is deprecated by networking.k8s.io/v1beta1 Ingress. See the release notes for more information.", "type": "object", "properties": { "apiVersion": { @@ -34787,53 +40822,52 @@ "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, + "spec": { + "description": "Spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressSpec" + }, "status": { - "description": "Most recently observed status of the pod. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "Status is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodStatus" + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "", - "Version": "v1", - "Kind": "PodStatusResult", + "Version": "v1beta1", + "Kind": "Ingress", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodTemplate": { - "description": "PodTemplate describes a template for creating copies of a predefined pod.", + "io.k8s.api.extensions.v1beta1.IngressBackend": { + "description": "IngressBackend describes all endpoints for a given service and port.", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "resource": { + "description": "Resource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, serviceName and servicePort must not be specified.", + "$ref": "#/definitions/io.k8s.api.core.v1.TypedLocalObjectReference" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "serviceName": { + "description": "Specifies the name of the referenced service.", "type": "string" }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "template": { - "description": "Template defines the pods that will be created from this pod template. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" + "servicePort": { + "description": "Specifies the port of the referenced service.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" } }, "x-fabric8-info": { - "Type": "object", + "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "PodTemplate", + "Version": "v1beta1", + "Kind": "IngressBackend", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodTemplateList": { - "description": "PodTemplateList is a list of PodTemplates.", + "io.k8s.api.extensions.v1beta1.IngressList": { + "description": "IngressList is a collection of Ingress.", "type": "object", "required": [ "items" @@ -34844,11 +40878,11 @@ "type": "string" }, "items": { - "description": "List of pod templates", + "description": "Items is the list of Ingress.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplate" + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.Ingress" } }, "kind": { @@ -34856,7 +40890,7 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } @@ -34864,35 +40898,65 @@ "x-fabric8-info": { "Type": "list", "Group": "", - "Version": "v1", - "Kind": "PodTemplateList", + "Version": "v1beta1", + "Kind": "IngressList", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PodTemplateSpec": { - "description": "PodTemplateSpec describes the data a pod should have when created from a template", + "io.k8s.api.extensions.v1beta1.IngressLoadBalancerIngress": { + "description": "IngressLoadBalancerIngress represents the status of a load-balancer ingress point.", "type": "object", "properties": { - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "hostname": { + "description": "Hostname is set for load-balancer ingress points that are DNS based.", + "type": "string" }, - "spec": { - "description": "Specification of the desired behavior of the pod. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodSpec" + "ip": { + "description": "IP is set for load-balancer ingress points that are IP based.", + "type": "string" + }, + "ports": { + "description": "Ports provides information about the ports exposed by this LoadBalancer.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressPortStatus" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "PodTemplateSpec", + "Version": "v1beta1", + "Kind": "IngressLoadBalancerIngress", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PortStatus": { + "io.k8s.api.extensions.v1beta1.IngressLoadBalancerStatus": { + "description": "LoadBalancerStatus represents the status of a load-balancer.", + "type": "object", + "properties": { + "ingress": { + "description": "Ingress is a list containing ingress points for the load-balancer.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressLoadBalancerIngress" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1beta1", + "Kind": "IngressLoadBalancerStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.IngressPortStatus": { + "description": "IngressPortStatus represents the error condition of a service port", "type": "object", "required": [ "port", @@ -34904,13 +40968,13 @@ "type": "string" }, "port": { - "description": "Port is the port number of the service port of which status is recorded here", + "description": "Port is the port number of the ingress port.", "type": "integer", "format": "int32", "default": 0 }, "protocol": { - "description": "Protocol is the protocol of the service port of which status is recorded here The supported values are: \"TCP\", \"UDP\", \"SCTP\"\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", + "description": "Protocol is the protocol of the ingress port. The supported values are: \"TCP\", \"UDP\", \"SCTP\"\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", "type": "string", "default": "", "enum": [ @@ -34923,221 +40987,182 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "PortStatus", + "Version": "v1beta1", + "Kind": "IngressPortStatus", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PortworxVolumeSource": { - "description": "PortworxVolumeSource represents a Portworx volume resource.", + "io.k8s.api.extensions.v1beta1.IngressRule": { + "description": "IngressRule represents the rules mapping the paths under a specified host to the related backend services. Incoming requests are first evaluated for a host match, then routed to the backend associated with the matching IngressRuleValue.", "type": "object", - "required": [ - "volumeID" - ], "properties": { - "fsType": { - "description": "fSType represents the filesystem type to mount Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\". Implicitly inferred to be \"ext4\" if unspecified.", + "host": { + "description": "Host is the fully qualified domain name of a network host, as defined by RFC 3986. Note the following deviations from the \"host\" part of the URI as defined in RFC 3986: 1. IPs are not allowed. Currently an IngressRuleValue can only apply to\n the IP in the Spec of the parent Ingress.\n2. The `:` delimiter is not respected because ports are not allowed.\n\t Currently the port of an Ingress is implicitly :80 for http and\n\t :443 for https.\nBoth these may change in the future. Incoming requests are matched against the host before the IngressRuleValue. If the host is unspecified, the Ingress routes all traffic based on the specified IngressRuleValue.\n\nHost can be \"precise\" which is a domain name without the terminating dot of a network host (e.g. \"foo.bar.com\") or \"wildcard\", which is a domain name prefixed with a single wildcard label (e.g. \"*.foo.com\"). The wildcard character '*' must appear by itself as the first DNS label and matches only a single label. You cannot have a wildcard label by itself (e.g. Host == \"*\"). Requests will be matched against the Host field in the following way: 1. If Host is precise, the request matches this rule if the http host header is equal to Host. 2. If Host is a wildcard, then the request matches this rule if the http host header is to equal to the suffix (removing the first label) of the wildcard rule.", "type": "string" }, - "readOnly": { - "description": "readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", - "type": "boolean" - }, - "volumeID": { - "description": "volumeID uniquely identifies a Portworx volume", - "type": "string", - "default": "" + "http": { + "description": "http is a list of http selectors pointing to backends. A path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional \"path\" part of a URL as defined by RFC 3986. Paths must begin with a '/'. A backend defines the referenced service endpoint to which the traffic will be forwarded to.", + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.HTTPIngressRuleValue" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "PortworxVolumeSource", + "Version": "v1beta1", + "Kind": "IngressRule", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.Preconditions": { - "description": "Preconditions must be fulfilled before an operation (update, delete, etc.) is carried out.", + "io.k8s.api.extensions.v1beta1.IngressRuleValue": { + "description": "IngressRuleValue represents a rule to apply against incoming requests. If the rule is satisfied, the request is routed to the specified backend. Currently mixing different types of rules in a single Ingress is disallowed, so exactly one of the following must be set.", "type": "object", "properties": { - "uid": { - "description": "Specifies the target UID.", - "type": "string" + "http": { + "description": "http is a list of http selectors pointing to backends. A path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional \"path\" part of a URL as defined by RFC 3986. Paths must begin with a '/'. A backend defines the referenced service endpoint to which the traffic will be forwarded to.", + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.HTTPIngressRuleValue" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "Preconditions", + "Version": "v1beta1", + "Kind": "IngressRuleValue", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PreferAvoidPodsEntry": { - "description": "Describes a class of pods that should avoid this node.", + "io.k8s.api.extensions.v1beta1.IngressSpec": { + "description": "IngressSpec describes the Ingress the user wishes to exist.", "type": "object", - "required": [ - "podSignature" - ], "properties": { - "evictionTime": { - "description": "Time at which this entry was added to the list.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "backend": { + "description": "A default backend capable of servicing requests that don't match any rule. At least one of 'backend' or 'rules' must be specified. This field is optional to allow the loadbalancer controller or defaulting logic to specify a global default.", + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressBackend" }, - "message": { - "description": "Human readable message indicating why this entry was added to the list.", + "ingressClassName": { + "description": "IngressClassName is the name of the IngressClass cluster resource. The associated IngressClass defines which controller will implement the resource. This replaces the deprecated `kubernetes.io/ingress.class` annotation. For backwards compatibility, when that annotation is set, it must be given precedence over this field. The controller may emit a warning if the field and annotation have different values. Implementations of this API should ignore Ingresses without a class specified. An IngressClass resource may be marked as default, which can be used to set a default value for this field. For more information, refer to the IngressClass documentation.", "type": "string" }, - "podSignature": { - "description": "The class of pods.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodSignature" + "rules": { + "description": "A list of host rules used to configure the Ingress. If unspecified, or no rule matches, all traffic is sent to the default backend.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressRule" + }, + "x-kubernetes-list-type": "atomic" }, - "reason": { - "description": "(brief) reason why this entry was added to the list.", - "type": "string" + "tls": { + "description": "TLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressTLS" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "PreferAvoidPodsEntry", + "Version": "v1beta1", + "Kind": "IngressSpec", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.PreferredSchedulingTerm": { - "description": "An empty preferred scheduling term matches all objects with implicit weight 0 (i.e. it's a no-op). A null preferred scheduling term matches no objects (i.e. is also a no-op).", + "io.k8s.api.extensions.v1beta1.IngressStatus": { + "description": "IngressStatus describe the current state of the Ingress.", "type": "object", - "required": [ - "weight", - "preference" - ], "properties": { - "preference": { - "description": "A node selector term, associated with the corresponding weight.", + "loadBalancer": { + "description": "LoadBalancer contains the current status of the load-balancer.", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelectorTerm" - }, - "weight": { - "description": "Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.", - "type": "integer", - "format": "int32", - "default": 0 + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressLoadBalancerStatus" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "PreferredSchedulingTerm", + "Version": "v1beta1", + "Kind": "IngressStatus", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.Probe": { - "description": "Probe describes a health check to be performed against a container to determine whether it is alive or ready to receive traffic.", + "io.k8s.api.extensions.v1beta1.IngressTLS": { + "description": "IngressTLS describes the transport layer security associated with an Ingress.", "type": "object", "properties": { - "exec": { - "description": "Exec specifies the action to take.", - "$ref": "#/definitions/io.k8s.api.core.v1.ExecAction" - }, - "failureThreshold": { - "description": "Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.", - "type": "integer", - "format": "int32" - }, - "grpc": { - "description": "GRPC specifies an action involving a GRPC port.", - "$ref": "#/definitions/io.k8s.api.core.v1.GRPCAction" - }, - "httpGet": { - "description": "HTTPGet specifies the http request to perform.", - "$ref": "#/definitions/io.k8s.api.core.v1.HTTPGetAction" - }, - "initialDelaySeconds": { - "description": "Number of seconds after the container has started before liveness probes are initiated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes", - "type": "integer", - "format": "int32" - }, - "periodSeconds": { - "description": "How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.", - "type": "integer", - "format": "int32" - }, - "successThreshold": { - "description": "Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.", - "type": "integer", - "format": "int32" - }, - "tcpSocket": { - "description": "TCPSocket specifies an action involving a TCP port.", - "$ref": "#/definitions/io.k8s.api.core.v1.TCPSocketAction" - }, - "terminationGracePeriodSeconds": { - "description": "Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate. Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.", - "type": "integer", - "format": "int64" - }, - "timeoutSeconds": { - "description": "Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes", - "type": "integer", - "format": "int32" + "hosts": { + "description": "Hosts are a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "secretName": { + "description": "SecretName is the name of the secret used to terminate SSL traffic on 443. Field is left optional to allow SSL routing based on SNI hostname alone. If the SNI host in a listener conflicts with the \"Host\" header field used by an IngressRule, the SNI host is used for termination and value of the Host header is used for routing.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "Probe", + "Version": "v1beta1", + "Kind": "IngressTLS", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ProbeHandler": { - "description": "ProbeHandler defines a specific action that should be taken in a probe. One and only one of the fields must be specified.", + "io.k8s.api.extensions.v1beta1.NetworkPolicy": { + "description": "DEPRECATED 1.9 - This group version of NetworkPolicy is deprecated by networking/v1/NetworkPolicy. NetworkPolicy describes what network traffic is allowed for a set of Pods", "type": "object", "properties": { - "exec": { - "description": "Exec specifies the action to take.", - "$ref": "#/definitions/io.k8s.api.core.v1.ExecAction" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "grpc": { - "description": "GRPC specifies an action involving a GRPC port.", - "$ref": "#/definitions/io.k8s.api.core.v1.GRPCAction" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "httpGet": { - "description": "HTTPGet specifies the http request to perform.", - "$ref": "#/definitions/io.k8s.api.core.v1.HTTPGetAction" + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "tcpSocket": { - "description": "TCPSocket specifies an action involving a TCP port.", - "$ref": "#/definitions/io.k8s.api.core.v1.TCPSocketAction" + "spec": { + "description": "Specification of the desired behavior for this NetworkPolicy.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.NetworkPolicySpec" } }, "x-fabric8-info": { - "Type": "nested", + "Type": "object", "Group": "", - "Version": "v1", - "Kind": "ProbeHandler", + "Version": "v1beta1", + "Kind": "NetworkPolicy", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ProjectedVolumeSource": { - "description": "Represents a projected volume source", + "io.k8s.api.extensions.v1beta1.NetworkPolicyEgressRule": { + "description": "DEPRECATED 1.9 - This group version of NetworkPolicyEgressRule is deprecated by networking/v1/NetworkPolicyEgressRule. NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and to. This type is beta-level in 1.8", "type": "object", "properties": { - "defaultMode": { - "description": "defaultMode are the mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.", - "type": "integer", - "format": "int32" + "ports": { + "description": "List of destination ports for outgoing traffic. Each item in this list is combined using a logical OR. If this field is empty or missing, this rule matches all ports (traffic not restricted by port). If this field is present and contains at least one item, then this rule allows traffic only if the traffic matches at least one port in the list.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.NetworkPolicyPort" + }, + "x-kubernetes-list-type": "atomic" }, - "sources": { - "description": "sources is the list of volume projections. Each entry in this list handles one source.", + "to": { + "description": "List of destinations for outgoing traffic of pods selected for this rule. Items in this list are combined using a logical OR operation. If this field is empty or missing, this rule matches all destinations (traffic not restricted by destination). If this field is present and contains at least one item, this rule allows traffic only if the traffic matches at least one item in the to list.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.VolumeProjection" + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.NetworkPolicyPeer" }, "x-kubernetes-list-type": "atomic" } @@ -35145,212 +41170,185 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "ProjectedVolumeSource", + "Version": "v1beta1", + "Kind": "NetworkPolicyEgressRule", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.QuobyteVolumeSource": { - "description": "Represents a Quobyte mount that lasts the lifetime of a pod. Quobyte volumes do not support ownership management or SELinux relabeling.", + "io.k8s.api.extensions.v1beta1.NetworkPolicyIngressRule": { + "description": "DEPRECATED 1.9 - This group version of NetworkPolicyIngressRule is deprecated by networking/v1/NetworkPolicyIngressRule. This NetworkPolicyIngressRule matches traffic if and only if the traffic matches both ports AND from.", "type": "object", - "required": [ - "registry", - "volume" - ], "properties": { - "group": { - "description": "group to map volume access to Default is no group", - "type": "string" - }, - "readOnly": { - "description": "readOnly here will force the Quobyte volume to be mounted with read-only permissions. Defaults to false.", - "type": "boolean" - }, - "registry": { - "description": "registry represents a single or multiple Quobyte Registry services specified as a string as host:port pair (multiple entries are separated with commas) which acts as the central registry for volumes", - "type": "string", - "default": "" - }, - "tenant": { - "description": "tenant owning the given Quobyte volume in the Backend Used with dynamically provisioned Quobyte volumes, value is set by the plugin", - "type": "string" - }, - "user": { - "description": "user to map volume access to Defaults to serivceaccount user", - "type": "string" + "from": { + "description": "List of sources which should be able to access the pods selected for this rule. Items in this list are combined using a logical OR operation. If this field is empty or missing, this rule matches all sources (traffic not restricted by source). If this field is present and contains at least one item, this rule allows traffic only if the traffic matches at least one item in the from list.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.NetworkPolicyPeer" + }, + "x-kubernetes-list-type": "atomic" }, - "volume": { - "description": "volume is a string that references an already created Quobyte volume by name.", - "type": "string", - "default": "" + "ports": { + "description": "List of ports which should be made accessible on the pods selected for this rule. Each item in this list is combined using a logical OR. If this field is empty or missing, this rule matches all ports (traffic not restricted by port). If this field is present and contains at least one item, then this rule allows traffic only if the traffic matches at least one port in the list.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.NetworkPolicyPort" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "QuobyteVolumeSource", + "Version": "v1beta1", + "Kind": "NetworkPolicyIngressRule", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.RBDPersistentVolumeSource": { - "description": "Represents a Rados Block Device mount that lasts the lifetime of a pod. RBD volumes support ownership management and SELinux relabeling.", + "io.k8s.api.extensions.v1beta1.NetworkPolicyList": { + "description": "DEPRECATED 1.9 - This group version of NetworkPolicyList is deprecated by networking/v1/NetworkPolicyList. Network Policy List is a list of NetworkPolicy objects.", "type": "object", "required": [ - "monitors", - "image" + "items" ], "properties": { - "fsType": { - "description": "fsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "image": { - "description": "image is the rados image name. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", - "type": "string", - "default": "" - }, - "keyring": { - "description": "keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", - "type": "string", - "default": "/etc/ceph/keyring" - }, - "monitors": { - "description": "monitors is a collection of Ceph monitors. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "items": { + "description": "Items is a list of schema objects.", "type": "array", "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.NetworkPolicy" + } }, - "pool": { - "description": "pool is the rados pool name. Default is rbd. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", - "type": "string", - "default": "rbd" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "readOnly": { - "description": "readOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", - "type": "boolean" + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "", + "Version": "v1beta1", + "Kind": "NetworkPolicyList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.NetworkPolicyPeer": { + "description": "DEPRECATED 1.9 - This group version of NetworkPolicyPeer is deprecated by networking/v1/NetworkPolicyPeer.", + "type": "object", + "properties": { + "ipBlock": { + "description": "IPBlock defines policy on a particular IPBlock. If this field is set then neither of the other fields can be.", + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IPBlock" }, - "secretRef": { - "description": "secretRef is name of the authentication secret for RBDUser. If provided overrides keyring. Default is nil. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" + "namespaceSelector": { + "description": "Selects Namespaces using cluster-scoped labels. This field follows standard label selector semantics; if present but empty, it selects all namespaces.\n\nIf PodSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects all Pods in the Namespaces selected by NamespaceSelector.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" }, - "user": { - "description": "user is the rados user name. Default is admin. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", - "type": "string", - "default": "admin" + "podSelector": { + "description": "This is a label selector which selects Pods. This field follows standard label selector semantics; if present but empty, it selects all pods.\n\nIf NamespaceSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects the Pods matching PodSelector in the policy's own Namespace.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "RBDPersistentVolumeSource", + "Version": "v1beta1", + "Kind": "NetworkPolicyPeer", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.RBDVolumeSource": { - "description": "Represents a Rados Block Device mount that lasts the lifetime of a pod. RBD volumes support ownership management and SELinux relabeling.", + "io.k8s.api.extensions.v1beta1.NetworkPolicyPort": { + "description": "DEPRECATED 1.9 - This group version of NetworkPolicyPort is deprecated by networking/v1/NetworkPolicyPort.", "type": "object", - "required": [ - "monitors", - "image" - ], "properties": { - "fsType": { - "description": "fsType is the filesystem type of the volume that you want to mount. Tip: Ensure that the filesystem type is supported by the host operating system. Examples: \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd", - "type": "string" - }, - "image": { - "description": "image is the rados image name. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", - "type": "string", - "default": "" - }, - "keyring": { - "description": "keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", - "type": "string", - "default": "/etc/ceph/keyring" - }, - "monitors": { - "description": "monitors is a collection of Ceph monitors. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "pool": { - "description": "pool is the rados pool name. Default is rbd. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", - "type": "string", - "default": "rbd" - }, - "readOnly": { - "description": "readOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", - "type": "boolean" + "endPort": { + "description": "If set, indicates that the range of ports from port to endPort, inclusive, should be allowed by the policy. This field cannot be defined if the port field is not defined or if the port field is defined as a named (string) port. The endPort must be equal or greater than port.", + "type": "integer", + "format": "int32" }, - "secretRef": { - "description": "secretRef is name of the authentication secret for RBDUser. If provided overrides keyring. Default is nil. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + "port": { + "description": "The port on the given protocol. This can either be a numerical or named port on a pod. If this field is not provided, this matches all port names and numbers. If present, only traffic on the specified protocol AND port will be matched.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" }, - "user": { - "description": "user is the rados user name. Default is admin. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it", + "protocol": { + "description": "Optional. The protocol (TCP, UDP, or SCTP) which traffic must match. If not specified, this field defaults to TCP.\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", "type": "string", - "default": "admin" + "enum": [ + "SCTP", + "TCP", + "UDP" + ] } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "RBDVolumeSource", + "Version": "v1beta1", + "Kind": "NetworkPolicyPort", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.RangeAllocation": { - "description": "RangeAllocation is not a public type.", + "io.k8s.api.extensions.v1beta1.NetworkPolicySpec": { + "description": "DEPRECATED 1.9 - This group version of NetworkPolicySpec is deprecated by networking/v1/NetworkPolicySpec.", "type": "object", "required": [ - "range", - "data" + "podSelector" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "data": { - "description": "Data is a bit array containing all allocated addresses in the previous segment.", - "type": "string", - "format": "byte" + "egress": { + "description": "List of egress rules to be applied to the selected pods. Outgoing traffic is allowed if there are no NetworkPolicies selecting the pod (and cluster policy otherwise allows the traffic), OR if the traffic matches at least one egress rule across all of the NetworkPolicy objects whose podSelector matches the pod. If this field is empty then this NetworkPolicy limits all outgoing traffic (and serves solely to ensure that the pods it selects are isolated by default). This field is beta-level in 1.8", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.NetworkPolicyEgressRule" + }, + "x-kubernetes-list-type": "atomic" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "ingress": { + "description": "List of ingress rules to be applied to the selected pods. Traffic is allowed to a pod if there are no NetworkPolicies selecting the pod OR if the traffic source is the pod's local node, OR if the traffic matches at least one ingress rule across all of the NetworkPolicy objects whose podSelector matches the pod. If this field is empty then this NetworkPolicy does not allow any traffic (and serves solely to ensure that the pods it selects are isolated by default).", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.NetworkPolicyIngressRule" + }, + "x-kubernetes-list-type": "atomic" }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "podSelector": { + "description": "Selects the pods to which this NetworkPolicy object applies. The array of ingress rules is applied to any pods selected by this field. Multiple network policies can select the same set of pods. In this case, the ingress rules for each are combined additively. This field is NOT optional and follows standard label selector semantics. An empty podSelector matches all pods in this namespace.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" }, - "range": { - "description": "Range is string that identifies the range represented by 'data'.", - "type": "string", - "default": "" + "policyTypes": { + "description": "List of rule types that the NetworkPolicy relates to. Valid options are [\"Ingress\"], [\"Egress\"], or [\"Ingress\", \"Egress\"]. If this field is not specified, it will default based on the existence of Ingress or Egress rules; policies that contain an Egress section are assumed to affect Egress, and all policies (whether or not they contain an Ingress section) are assumed to affect Ingress. If you want to write an egress-only policy, you must explicitly specify policyTypes [ \"Egress\" ]. Likewise, if you want to write a policy that specifies that no egress is allowed, you must specify a policyTypes value that include \"Egress\" (since such a policy would not include an Egress section and would otherwise default to just [ \"Ingress\" ]). This field is beta-level in 1.8", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { - "Type": "object", + "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "RangeAllocation", + "Version": "v1beta1", + "Kind": "NetworkPolicySpec", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ReplicationController": { - "description": "ReplicationController represents the configuration of a replication controller.", + "io.k8s.api.extensions.v1beta1.ReplicaSet": { + "description": "DEPRECATED - This group version of ReplicaSet is deprecated by apps/v1beta2/ReplicaSet. See the release notes for more information. ReplicaSet ensures that a specified number of pod replicas are running at any given time.", "type": "object", "properties": { "apiVersion": { @@ -35362,31 +41360,31 @@ "type": "string" }, "metadata": { - "description": "If the Labels of a ReplicationController are empty, they are defaulted to be the same as the Pod(s) that the replication controller manages. Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "If the Labels of a ReplicaSet are empty, they are defaulted to be the same as the Pod(s) that the ReplicaSet manages. Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "Spec defines the specification of the desired behavior of the replication controller. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "Spec defines the specification of the desired behavior of the ReplicaSet. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationControllerSpec" + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.ReplicaSetSpec" }, "status": { - "description": "Status is the most recently observed status of the replication controller. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "Status is the most recently observed status of the ReplicaSet. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationControllerStatus" + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.ReplicaSetStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "", - "Version": "v1", - "Kind": "ReplicationController", + "Version": "v1beta1", + "Kind": "ReplicaSet", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ReplicationControllerCondition": { - "description": "ReplicationControllerCondition describes the state of a replication controller at a certain point.", + "io.k8s.api.extensions.v1beta1.ReplicaSetCondition": { + "description": "ReplicaSetCondition describes the state of a replica set at a certain point.", "type": "object", "required": [ "type", @@ -35411,7 +41409,7 @@ "default": "" }, "type": { - "description": "Type of replication controller condition.", + "description": "Type of replica set condition.", "type": "string", "default": "" } @@ -35419,13 +41417,13 @@ "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "ReplicationControllerCondition", + "Version": "v1beta1", + "Kind": "ReplicaSetCondition", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ReplicationControllerList": { - "description": "ReplicationControllerList is a collection of replication controllers.", + "io.k8s.api.extensions.v1beta1.ReplicaSetList": { + "description": "ReplicaSetList is a collection of ReplicaSets.", "type": "object", "required": [ "items" @@ -35436,11 +41434,11 @@ "type": "string" }, "items": { - "description": "List of replication controllers. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller", + "description": "List of ReplicaSets. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationController" + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.ReplicaSet" } }, "kind": { @@ -35456,13 +41454,13 @@ "x-fabric8-info": { "Type": "list", "Group": "", - "Version": "v1", - "Kind": "ReplicationControllerList", + "Version": "v1beta1", + "Kind": "ReplicaSetList", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ReplicationControllerSpec": { - "description": "ReplicationControllerSpec is the specification of a replication controller.", + "io.k8s.api.extensions.v1beta1.ReplicaSetSpec": { + "description": "ReplicaSetSpec is the specification of a ReplicaSet.", "type": "object", "properties": { "minReadySeconds": { @@ -35471,50 +41469,46 @@ "format": "int32" }, "replicas": { - "description": "Replicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. Defaults to 1. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontroller", + "description": "Replicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. Defaults to 1. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller/#what-is-a-replicationcontroller", "type": "integer", "format": "int32" }, "selector": { - "description": "Selector is a label query over pods that should match the Replicas count. If Selector is empty, it is defaulted to the labels present on the Pod template. Label keys and values that must match in order to be controlled by this replication controller, if empty defaulted to labels on Pod template. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - }, - "x-kubernetes-map-type": "atomic" + "description": "Selector is a label query over pods that should match the replica count. If the selector is empty, it is defaulted to the labels present on the pod template. Label keys and values that must match in order to be controlled by this replica set. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" }, "template": { - "description": "Template is the object that describes the pod that will be created if insufficient replicas are detected. This takes precedence over a TemplateRef. The only allowed template.spec.restartPolicy value is \"Always\". More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template", + "description": "Template is the object that describes the pod that will be created if insufficient replicas are detected. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template", + "default": {}, "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "ReplicationControllerSpec", + "Version": "v1beta1", + "Kind": "ReplicaSetSpec", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ReplicationControllerStatus": { - "description": "ReplicationControllerStatus represents the current status of a replication controller.", + "io.k8s.api.extensions.v1beta1.ReplicaSetStatus": { + "description": "ReplicaSetStatus represents the current status of a ReplicaSet.", "type": "object", "required": [ "replicas" ], "properties": { "availableReplicas": { - "description": "The number of available replicas (ready for at least minReadySeconds) for this replication controller.", + "description": "The number of available replicas (ready for at least minReadySeconds) for this replica set.", "type": "integer", "format": "int32" }, "conditions": { - "description": "Represents the latest available observations of a replication controller's current state.", + "description": "Represents the latest available observations of a replica set's current state.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ReplicationControllerCondition" + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.ReplicaSetCondition" }, "x-kubernetes-list-map-keys": [ "type" @@ -35524,117 +41518,230 @@ "x-kubernetes-patch-strategy": "merge" }, "fullyLabeledReplicas": { - "description": "The number of pods that have labels matching the labels of the pod template of the replication controller.", + "description": "The number of pods that have labels matching the labels of the pod template of the replicaset.", "type": "integer", "format": "int32" }, "observedGeneration": { - "description": "ObservedGeneration reflects the generation of the most recently observed replication controller.", + "description": "ObservedGeneration reflects the generation of the most recently observed ReplicaSet.", "type": "integer", "format": "int64" }, "readyReplicas": { - "description": "The number of ready replicas for this replication controller.", + "description": "The number of ready replicas for this replica set.", "type": "integer", "format": "int32" }, "replicas": { - "description": "Replicas is the most recently observed number of replicas. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontroller", + "description": "Replicas is the most recently observed number of replicas. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller/#what-is-a-replicationcontroller", + "type": "integer", + "format": "int32", + "default": 0 + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1beta1", + "Kind": "ReplicaSetStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.RollbackConfig": { + "description": "DEPRECATED.", + "type": "object", + "properties": { + "revision": { + "description": "The revision to rollback to. If set to 0, rollback to the last revision.", + "type": "integer", + "format": "int64" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1beta1", + "Kind": "RollbackConfig", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.RollingUpdateDaemonSet": { + "description": "Spec to control the desired behavior of daemon set rolling update.", + "type": "object", + "properties": { + "maxSurge": { + "description": "The maximum number of nodes with an existing available DaemonSet pod that can have an updated DaemonSet pod during during an update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up to a minimum of 1. Default value is 0. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their a new pod created before the old pod is marked as deleted. The update starts by launching new pods on 30% of nodes. Once an updated pod is available (Ready for at least minReadySeconds) the old DaemonSet pod on that node is marked deleted. If the old pod becomes unavailable for any reason (Ready transitions to false, is evicted, or is drained) an updated pod is immediatedly created on that node without considering surge limits. Allowing surge implies the possibility that the resources consumed by the daemonset on any given node can double if the readiness check fails, and so resource intensive daemonsets should take into account that they may cause evictions during disruption. This is an alpha field and requires enabling DaemonSetUpdateSurge feature gate.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + }, + "maxUnavailable": { + "description": "The maximum number of DaemonSet pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of total number of DaemonSet pods at the start of the update (ex: 10%). Absolute number is calculated from percentage by rounding up. This cannot be 0 if MaxSurge is 0 Default value is 1. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their pods stopped for an update at any given time. The update starts by stopping at most 30% of those DaemonSet pods and then brings up new DaemonSet pods in their place. Once the new pods are available, it then proceeds onto other DaemonSet pods, thus ensuring that at least 70% of original number of DaemonSet pods are available at all times during the update.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1beta1", + "Kind": "RollingUpdateDaemonSet", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.RollingUpdateDeployment": { + "description": "Spec to control the desired behavior of rolling update.", + "type": "object", + "properties": { + "maxSurge": { + "description": "The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up. By default, a value of 1 is used. Example: when this is set to 30%, the new RC can be scaled up immediately when the rolling update starts, such that the total number of old and new pods do not exceed 130% of desired pods. Once old pods have been killed, new RC can be scaled up further, ensuring that total number of pods running at any time during the update is at most 130% of desired pods.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + }, + "maxUnavailable": { + "description": "The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. This can not be 0 if MaxSurge is 0. By default, a fixed value of 1 is used. Example: when this is set to 30%, the old RC can be scaled down to 70% of desired pods immediately when the rolling update starts. Once new pods are ready, old RC can be scaled down further, followed by scaling up the new RC, ensuring that the total number of pods available at all times during the update is at least 70% of desired pods.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "v1beta1", + "Kind": "RollingUpdateDeployment", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.Scale": { + "description": "represents a scaling request for a resource.", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "defines the behavior of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.ScaleSpec" + }, + "status": { + "description": "current status of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. Read-only.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.ScaleStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "", + "Version": "v1beta1", + "Kind": "Scale", + "Scope": "Namespaced" + } + }, + "io.k8s.api.extensions.v1beta1.ScaleSpec": { + "description": "describes the attributes of a scale subresource", + "type": "object", + "properties": { + "replicas": { + "description": "desired number of instances for the scaled object.", "type": "integer", - "format": "int32", - "default": 0 + "format": "int32" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "ReplicationControllerStatus", + "Version": "v1beta1", + "Kind": "ScaleSpec", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ResourceClaim": { - "description": "ResourceClaim references one entry in PodSpec.ResourceClaims.", + "io.k8s.api.extensions.v1beta1.ScaleStatus": { + "description": "represents the current status of a scale subresource.", "type": "object", "required": [ - "name" + "replicas" ], "properties": { - "name": { - "description": "Name must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.", - "type": "string", - "default": "" + "replicas": { + "description": "actual number of observed instances of the scaled object.", + "type": "integer", + "format": "int32", + "default": 0 }, - "request": { - "description": "Request is the name chosen for a request in the referenced claim. If empty, everything from the claim is made available, otherwise only the result of this request.", + "selector": { + "description": "selector is a label query over pods that should match the replicas count. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + }, + "x-kubernetes-map-type": "atomic" + }, + "targetSelector": { + "description": "label selector for pods that should match the replicas count. This is a serializated version of both map-based and more expressive set-based selectors. This is done to avoid introspection in the clients. The string will be in the same format as the query-param syntax. If the target type only supports map-based selectors, both this field and map-based selector field are populated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "", - "Version": "v1", - "Kind": "ResourceClaim", + "Version": "v1beta1", + "Kind": "ScaleStatus", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ResourceFieldSelector": { - "description": "ResourceFieldSelector represents container resources (cpu, memory) and their output format", + "io.k8s.api.flowcontrol.v1.ExemptPriorityLevelConfiguration": { + "description": "ExemptPriorityLevelConfiguration describes the configurable aspects of the handling of exempt requests. In the mandatory exempt configuration object the values in the fields here can be modified by authorized users, unlike the rest of the `spec`.", "type": "object", - "required": [ - "resource" - ], "properties": { - "containerName": { - "description": "Container name: required for volumes, optional for env vars", - "type": "string" - }, - "divisor": { - "description": "Specifies the output format of the exposed resources, defaults to \"1\"", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "lendablePercent": { + "description": "`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. This value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows.\n\nLendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 )", + "type": "integer", + "format": "int32" }, - "resource": { - "description": "Required: resource to select", - "type": "string", - "default": "" + "nominalConcurrencyShares": { + "description": "`nominalConcurrencyShares` (NCS) contributes to the computation of the NominalConcurrencyLimit (NominalCL) of this level. This is the number of execution seats nominally reserved for this priority level. This DOES NOT limit the dispatching from this priority level but affects the other priority levels through the borrowing mechanism. The server's concurrency limit (ServerCL) is divided among all the priority levels in proportion to their NCS values:\n\nNominalCL(i) = ceil( ServerCL * NCS(i) / sum_ncs ) sum_ncs = sum[priority level k] NCS(k)\n\nBigger numbers mean a larger nominal concurrency limit, at the expense of every other priority level. This field has a default value of zero.", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "ResourceFieldSelector", + "Kind": "ExemptPriorityLevelConfiguration", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.core.v1.ResourceHealth": { - "description": "ResourceHealth represents the health of a resource. It has the latest device health information. This is a part of KEP https://kep.k8s.io/4680 and historical health changes are planned to be added in future iterations of a KEP.", + "io.k8s.api.flowcontrol.v1.FlowDistinguisherMethod": { + "description": "FlowDistinguisherMethod specifies the method of a flow distinguisher.", "type": "object", "required": [ - "resourceID" + "type" ], "properties": { - "health": { - "description": "Health of the resource. can be one of:\n - Healthy: operates as normal\n - Unhealthy: reported unhealthy. We consider this a temporary health issue\n since we do not have a mechanism today to distinguish\n temporary and permanent issues.\n - Unknown: The status cannot be determined.\n For example, Device Plugin got unregistered and hasn't been re-registered since.\n\nIn future we may want to introduce the PermanentlyUnhealthy Status.", - "type": "string" - }, - "resourceID": { - "description": "ResourceID is the unique identifier of the resource. See the ResourceID type for more information.", + "type": { + "description": "`type` is the type of flow distinguisher method The supported types are \"ByUser\" and \"ByNamespace\". Required.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "ResourceHealth", + "Kind": "FlowDistinguisherMethod", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ResourceQuota": { - "description": "ResourceQuota sets aggregate quota restrictions enforced per namespace", + "io.k8s.api.flowcontrol.v1.FlowSchema": { + "description": "FlowSchema defines the schema of a group of flows. Note that a flow is made up of a set of inbound API requests with similar attributes and is identified by a pair of strings: the name of the FlowSchema and a \"flow distinguisher\".", "type": "object", "properties": { "apiVersion": { @@ -35646,31 +41753,64 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "Spec defines the desired quota. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "`spec` is the specification of the desired behavior of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuotaSpec" + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.FlowSchemaSpec" }, "status": { - "description": "Status defines the actual enforced quota and its current usage. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "`status` is the current status of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuotaStatus" + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.FlowSchemaStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "ResourceQuota", + "Kind": "FlowSchema", + "Scope": "Clustered" + } + }, + "io.k8s.api.flowcontrol.v1.FlowSchemaCondition": { + "description": "FlowSchemaCondition describes conditions for a FlowSchema.", + "type": "object", + "properties": { + "lastTransitionTime": { + "description": "`lastTransitionTime` is the last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "`message` is a human-readable message indicating details about last transition.", + "type": "string" + }, + "reason": { + "description": "`reason` is a unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "`status` is the status of the condition. Can be True, False, Unknown. Required.", + "type": "string" + }, + "type": { + "description": "`type` is the type of the condition. Required.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1", + "Kind": "FlowSchemaCondition", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ResourceQuotaList": { - "description": "ResourceQuotaList is a list of ResourceQuota items.", + "io.k8s.api.flowcontrol.v1.FlowSchemaList": { + "description": "FlowSchemaList is a list of FlowSchema objects.", "type": "object", "required": [ "items" @@ -35681,11 +41821,11 @@ "type": "string" }, "items": { - "description": "Items is a list of ResourceQuota objects. More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/", + "description": "`items` is a list of FlowSchemas.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceQuota" + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.FlowSchema" } }, "kind": { @@ -35693,527 +41833,322 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "description": "`metadata` is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "ResourceQuotaList", + "Kind": "FlowSchemaList", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ResourceQuotaSpec": { - "description": "ResourceQuotaSpec defines the desired hard limits to enforce for Quota.", + "io.k8s.api.flowcontrol.v1.FlowSchemaSpec": { + "description": "FlowSchemaSpec describes how the FlowSchema's specification looks like.", "type": "object", + "required": [ + "priorityLevelConfiguration" + ], "properties": { - "hard": { - "description": "hard is the set of desired hard limits for each named resource. More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } + "distinguisherMethod": { + "description": "`distinguisherMethod` defines how to compute the flow distinguisher for requests that match this schema. `nil` specifies that the distinguisher is disabled and thus will always be the empty string.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.FlowDistinguisherMethod" }, - "scopeSelector": { - "description": "scopeSelector is also a collection of filters like scopes that must match each object tracked by a quota but expressed using ScopeSelectorOperator in combination with possible values. For a resource to match, both scopes AND scopeSelector (if specified in spec), must be matched.", - "$ref": "#/definitions/io.k8s.api.core.v1.ScopeSelector" + "matchingPrecedence": { + "description": "`matchingPrecedence` is used to choose among the FlowSchemas that match a given request. The chosen FlowSchema is among those with the numerically lowest (which we take to be logically highest) MatchingPrecedence. Each MatchingPrecedence value must be ranged in [1,10000]. Note that if the precedence is not specified, it will be set to 1000 as default.", + "type": "integer", + "format": "int32", + "default": 0 }, - "scopes": { - "description": "A collection of filters that must match each object tracked by a quota. If not specified, the quota matches all objects.", + "priorityLevelConfiguration": { + "description": "`priorityLevelConfiguration` should reference a PriorityLevelConfiguration in the cluster. If the reference cannot be resolved, the FlowSchema will be ignored and marked as invalid in its status. Required.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.PriorityLevelConfigurationReference" + }, + "rules": { + "description": "`rules` describes which requests will match this flow schema. This FlowSchema matches a request if and only if at least one member of rules matches the request. if it is an empty slice, there will be no requests matching the FlowSchema.", "type": "array", "items": { - "type": "string", - "default": "", - "enum": [ - "BestEffort", - "CrossNamespacePodAffinity", - "NotBestEffort", - "NotTerminating", - "PriorityClass", - "Terminating" - ] + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.PolicyRulesWithSubjects" }, "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "ResourceQuotaSpec", - "Scope": "Namespaced" - } - }, - "io.k8s.api.core.v1.ResourceQuotaStatus": { - "description": "ResourceQuotaStatus defines the enforced hard limits and observed use.", - "type": "object", - "properties": { - "hard": { - "description": "Hard is the set of enforced hard limits for each named resource. More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } - }, - "used": { - "description": "Used is the current observed total usage of the resource in the namespace.", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "ResourceQuotaStatus", + "Kind": "FlowSchemaSpec", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ResourceRequirements": { - "description": "ResourceRequirements describes the compute resource requirements.", + "io.k8s.api.flowcontrol.v1.FlowSchemaStatus": { + "description": "FlowSchemaStatus represents the current state of a FlowSchema.", "type": "object", "properties": { - "claims": { - "description": "Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.\n\nThis is an alpha field and requires enabling the DynamicResourceAllocation feature gate.\n\nThis field is immutable. It can only be set for containers.", + "conditions": { + "description": "`conditions` is a list of the current states of FlowSchema.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceClaim" + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.FlowSchemaCondition" }, "x-kubernetes-list-map-keys": [ - "name" + "type" ], - "x-kubernetes-list-type": "map" - }, - "limits": { - "description": "Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } - }, - "requests": { - "description": "Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "ResourceRequirements", + "Kind": "FlowSchemaStatus", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ResourceStatus": { + "io.k8s.api.flowcontrol.v1.GroupSubject": { + "description": "GroupSubject holds detailed information for group-kind subject.", "type": "object", "required": [ "name" ], "properties": { "name": { - "description": "Name of the resource. Must be unique within the pod and match one of the resources from the pod spec.", + "description": "name is the user group that matches, or \"*\" to match all user groups. See https://github.com/kubernetes/apiserver/blob/master/pkg/authentication/user/user.go for some well-known group names. Required.", "type": "string", "default": "" - }, - "resources": { - "description": "List of unique Resources health. Each element in the list contains an unique resource ID and resource health. At a minimum, ResourceID must uniquely identify the Resource allocated to the Pod on the Node for the lifetime of a Pod. See ResourceID type for it's definition.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceHealth" - }, - "x-kubernetes-list-map-keys": [ - "resourceID" - ], - "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "ResourceStatus", - "Scope": "Namespaced" - } - }, - "io.k8s.api.core.v1.SELinuxOptions": { - "description": "SELinuxOptions are the labels to be applied to the container", - "type": "object", - "properties": { - "level": { - "description": "Level is SELinux level label that applies to the container.", - "type": "string" - }, - "role": { - "description": "Role is a SELinux role label that applies to the container.", - "type": "string" - }, - "type": { - "description": "Type is a SELinux type label that applies to the container.", - "type": "string" - }, - "user": { - "description": "User is a SELinux user label that applies to the container.", - "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "SELinuxOptions", + "Kind": "GroupSubject", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ScaleIOPersistentVolumeSource": { - "description": "ScaleIOPersistentVolumeSource represents a persistent ScaleIO volume", + "io.k8s.api.flowcontrol.v1.LimitResponse": { + "description": "LimitResponse defines how to handle requests that can not be executed right now.", "type": "object", "required": [ - "gateway", - "system", - "secretRef" + "type" ], "properties": { - "fsType": { - "description": "fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Default is \"xfs\"", - "type": "string", - "default": "xfs" - }, - "gateway": { - "description": "gateway is the host address of the ScaleIO API Gateway.", - "type": "string", - "default": "" - }, - "protectionDomain": { - "description": "protectionDomain is the name of the ScaleIO Protection Domain for the configured storage.", - "type": "string" - }, - "readOnly": { - "description": "readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", - "type": "boolean" - }, - "secretRef": { - "description": "secretRef references to the secret for ScaleIO user and other sensitive information. If this is not provided, Login operation will fail.", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretReference" - }, - "sslEnabled": { - "description": "sslEnabled is the flag to enable/disable SSL communication with Gateway, default false", - "type": "boolean" - }, - "storageMode": { - "description": "storageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned.", - "type": "string", - "default": "ThinProvisioned" - }, - "storagePool": { - "description": "storagePool is the ScaleIO Storage Pool associated with the protection domain.", - "type": "string" + "queuing": { + "description": "`queuing` holds the configuration parameters for queuing. This field may be non-empty only if `type` is `\"Queue\"`.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.QueuingConfiguration" }, - "system": { - "description": "system is the name of the storage system as configured in ScaleIO.", + "type": { + "description": "`type` is \"Queue\" or \"Reject\". \"Queue\" means that requests that can not be executed upon arrival are held in a queue until they can be executed or a queuing limit is reached. \"Reject\" means that requests that can not be executed upon arrival are rejected. Required.", "type": "string", "default": "" - }, - "volumeName": { - "description": "volumeName is the name of a volume already created in the ScaleIO system that is associated with this volume source.", - "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "ScaleIOPersistentVolumeSource", + "Kind": "LimitResponse", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "queuing": "Queuing" + } + } + ] }, - "io.k8s.api.core.v1.ScaleIOVolumeSource": { - "description": "ScaleIOVolumeSource represents a persistent ScaleIO volume", + "io.k8s.api.flowcontrol.v1.LimitedPriorityLevelConfiguration": { + "description": "LimitedPriorityLevelConfiguration specifies how to handle requests that are subject to limits. It addresses two issues:\n - How are requests for this priority level limited?\n - What should be done with requests that exceed the limit?", "type": "object", - "required": [ - "gateway", - "system", - "secretRef" - ], "properties": { - "fsType": { - "description": "fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Default is \"xfs\".", - "type": "string", - "default": "xfs" - }, - "gateway": { - "description": "gateway is the host address of the ScaleIO API Gateway.", - "type": "string", - "default": "" - }, - "protectionDomain": { - "description": "protectionDomain is the name of the ScaleIO Protection Domain for the configured storage.", - "type": "string" - }, - "readOnly": { - "description": "readOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", - "type": "boolean" - }, - "secretRef": { - "description": "secretRef references to the secret for ScaleIO user and other sensitive information. If this is not provided, Login operation will fail.", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - }, - "sslEnabled": { - "description": "sslEnabled Flag enable/disable SSL communication with Gateway, default false", - "type": "boolean" - }, - "storageMode": { - "description": "storageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned.", - "type": "string", - "default": "ThinProvisioned" + "borrowingLimitPercent": { + "description": "`borrowingLimitPercent`, if present, configures a limit on how many seats this priority level can borrow from other priority levels. The limit is known as this level's BorrowingConcurrencyLimit (BorrowingCL) and is a limit on the total number of seats that this level may borrow at any one time. This field holds the ratio of that limit to the level's nominal concurrency limit. When this field is non-nil, it must hold a non-negative integer and the limit is calculated as follows.\n\nBorrowingCL(i) = round( NominalCL(i) * borrowingLimitPercent(i)/100.0 )\n\nThe value of this field can be more than 100, implying that this priority level can borrow a number of seats that is greater than its own nominal concurrency limit (NominalCL). When this field is left `nil`, the limit is effectively infinite.", + "type": "integer", + "format": "int32" }, - "storagePool": { - "description": "storagePool is the ScaleIO Storage Pool associated with the protection domain.", - "type": "string" + "lendablePercent": { + "description": "`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. The value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows.\n\nLendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 )", + "type": "integer", + "format": "int32" }, - "system": { - "description": "system is the name of the storage system as configured in ScaleIO.", - "type": "string", - "default": "" + "limitResponse": { + "description": "`limitResponse` indicates what to do with requests that can not be executed right now", + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.LimitResponse" }, - "volumeName": { - "description": "volumeName is the name of a volume already created in the ScaleIO system that is associated with this volume source.", - "type": "string" + "nominalConcurrencyShares": { + "description": "`nominalConcurrencyShares` (NCS) contributes to the computation of the NominalConcurrencyLimit (NominalCL) of this level. This is the number of execution seats available at this priority level. This is used both for requests dispatched from this priority level as well as requests dispatched from other priority levels borrowing seats from this level. The server's concurrency limit (ServerCL) is divided among the Limited priority levels in proportion to their NCS values:\n\nNominalCL(i) = ceil( ServerCL * NCS(i) / sum_ncs ) sum_ncs = sum[priority level k] NCS(k)\n\nBigger numbers mean a larger nominal concurrency limit, at the expense of every other priority level.\n\nIf not specified, this field defaults to a value of 30.\n\nSetting this field to zero supports the construction of a \"jail\" for this priority level that is used to hold some request(s)", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "ScaleIOVolumeSource", + "Kind": "LimitedPriorityLevelConfiguration", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ScopeSelector": { - "description": "A scope selector represents the AND of the selectors represented by the scoped-resource selector requirements.", - "type": "object", - "properties": { - "matchExpressions": { - "description": "A list of scope selector requirements by scope of the resources.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ScopedResourceSelectorRequirement" - }, - "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "ScopeSelector", - "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" - }, - "io.k8s.api.core.v1.ScopedResourceSelectorRequirement": { - "description": "A scoped-resource selector requirement is a selector that contains values, a scope name, and an operator that relates the scope name and values.", + "io.k8s.api.flowcontrol.v1.NonResourcePolicyRule": { + "description": "NonResourcePolicyRule is a predicate that matches non-resource requests according to their verb and the target non-resource URL. A NonResourcePolicyRule matches a request if and only if both (a) at least one member of verbs matches the request and (b) at least one member of nonResourceURLs matches the request.", "type": "object", - "required": [ - "scopeName", - "operator" - ], - "properties": { - "operator": { - "description": "Represents a scope's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist.\n\nPossible enum values:\n - `\"DoesNotExist\"`\n - `\"Exists\"`\n - `\"In\"`\n - `\"NotIn\"`", - "type": "string", - "default": "", - "enum": [ - "DoesNotExist", - "Exists", - "In", - "NotIn" - ] - }, - "scopeName": { - "description": "The name of the scope that the selector applies to.\n\nPossible enum values:\n - `\"BestEffort\"` Match all pod objects that have best effort quality of service\n - `\"CrossNamespacePodAffinity\"` Match all pod objects that have cross-namespace pod (anti)affinity mentioned.\n - `\"NotBestEffort\"` Match all pod objects that do not have best effort quality of service\n - `\"NotTerminating\"` Match all pod objects where spec.activeDeadlineSeconds is nil\n - `\"PriorityClass\"` Match all pod objects that have priority class mentioned\n - `\"Terminating\"` Match all pod objects where spec.activeDeadlineSeconds \u003e=0", - "type": "string", - "default": "", - "enum": [ - "BestEffort", - "CrossNamespacePodAffinity", - "NotBestEffort", - "NotTerminating", - "PriorityClass", - "Terminating" - ] + "required": [ + "verbs", + "nonResourceURLs" + ], + "properties": { + "nonResourceURLs": { + "description": "`nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example:\n - \"/healthz\" is legal\n - \"/hea*\" is illegal\n - \"/hea\" is legal but matches nothing\n - \"/hea/*\" also matches nothing\n - \"/healthz/*\" matches all per-component health checks.\n\"*\" matches all non-resource urls. if it is present, it must be the only entry. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "values": { - "description": "An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + "verbs": { + "description": "`verbs` is a list of matching verbs and may not be empty. \"*\" matches all verbs. If it is present, it must be the only entry. Required.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-type": "set" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "ScopedResourceSelectorRequirement", + "Kind": "NonResourcePolicyRule", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.SeccompProfile": { - "description": "SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set.", + "io.k8s.api.flowcontrol.v1.PolicyRulesWithSubjects": { + "description": "PolicyRulesWithSubjects prescribes a test that applies to a request to an apiserver. The test considers the subject making the request, the verb being requested, and the resource to be acted upon. This PolicyRulesWithSubjects matches a request if and only if both (a) at least one member of subjects matches the request and (b) at least one member of resourceRules or nonResourceRules matches the request.", "type": "object", "required": [ - "type" + "subjects" ], "properties": { - "localhostProfile": { - "description": "localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must be set if type is \"Localhost\". Must NOT be set for any other type.", - "type": "string" + "nonResourceRules": { + "description": "`nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.NonResourcePolicyRule" + }, + "x-kubernetes-list-type": "atomic" }, - "type": { - "description": "type indicates which kind of seccomp profile will be applied. Valid options are:\n\nLocalhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied.\n\nPossible enum values:\n - `\"Localhost\"` indicates a profile defined in a file on the node should be used. The file's location relative to \u003ckubelet-root-dir\u003e/seccomp.\n - `\"RuntimeDefault\"` represents the default container runtime seccomp profile.\n - `\"Unconfined\"` indicates no seccomp profile is applied (A.K.A. unconfined).", - "type": "string", - "default": "", - "enum": [ - "Localhost", - "RuntimeDefault", - "Unconfined" - ] + "resourceRules": { + "description": "`resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.ResourcePolicyRule" + }, + "x-kubernetes-list-type": "atomic" + }, + "subjects": { + "description": "subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.Subject" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "SeccompProfile", + "Kind": "PolicyRulesWithSubjects", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "localhostProfile": "LocalhostProfile" - } - } - ] + } }, - "io.k8s.api.core.v1.Secret": { - "description": "Secret holds secret data of a certain type. The total bytes of the values in the Data field must be less than MaxSecretSize bytes.", + "io.k8s.api.flowcontrol.v1.PriorityLevelConfiguration": { + "description": "PriorityLevelConfiguration represents the configuration of a priority level.", "type": "object", "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "data": { - "description": "Data contains the secret data. Each key must consist of alphanumeric characters, '-', '_' or '.'. The serialized form of the secret data is a base64 encoded string, representing the arbitrary (possibly non-string) data value here. Described in https://tools.ietf.org/html/rfc4648#section-4", - "type": "object", - "additionalProperties": { - "type": "string", - "format": "byte" - } - }, - "immutable": { - "description": "Immutable, if set to true, ensures that data stored in the Secret cannot be updated (only object metadata can be modified). If not set to true, the field can be modified at any time. Defaulted to nil.", - "type": "boolean" - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "stringData": { - "description": "stringData allows specifying non-binary secret data in string form. It is provided as a write-only input field for convenience. All keys and values are merged into the data field on write, overwriting any existing values. The stringData field is never output when reading from the API.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } + "spec": { + "description": "`spec` is the specification of the desired behavior of a \"request-priority\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.PriorityLevelConfigurationSpec" }, - "type": { - "description": "Used to facilitate programmatic handling of secret data. More info: https://kubernetes.io/docs/concepts/configuration/secret/#secret-types", - "type": "string" + "status": { + "description": "`status` is the current status of a \"request-priority\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.PriorityLevelConfigurationStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "Secret", - "Scope": "Namespaced" + "Kind": "PriorityLevelConfiguration", + "Scope": "Clustered" } }, - "io.k8s.api.core.v1.SecretEnvSource": { - "description": "SecretEnvSource selects a Secret to populate the environment variables with.\n\nThe contents of the target Secret's Data field will represent the key-value pairs as environment variables.", + "io.k8s.api.flowcontrol.v1.PriorityLevelConfigurationCondition": { + "description": "PriorityLevelConfigurationCondition defines the condition of priority level.", "type": "object", "properties": { - "name": { - "description": "Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - "type": "string", - "default": "" + "lastTransitionTime": { + "description": "`lastTransitionTime` is the last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "optional": { - "description": "Specify whether the Secret must be defined", - "type": "boolean" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "SecretEnvSource", - "Scope": "Namespaced" - } - }, - "io.k8s.api.core.v1.SecretKeySelector": { - "description": "SecretKeySelector selects a key of a Secret.", - "type": "object", - "required": [ - "key" - ], - "properties": { - "key": { - "description": "The key of the secret to select from. Must be a valid secret key.", - "type": "string", - "default": "" + "message": { + "description": "`message` is a human-readable message indicating details about last transition.", + "type": "string" }, - "name": { - "description": "Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - "type": "string", - "default": "" + "reason": { + "description": "`reason` is a unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" }, - "optional": { - "description": "Specify whether the Secret or its key must be defined", - "type": "boolean" + "status": { + "description": "`status` is the status of the condition. Can be True, False, Unknown. Required.", + "type": "string" + }, + "type": { + "description": "`type` is the type of the condition. Required.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "SecretKeySelector", + "Kind": "PriorityLevelConfigurationCondition", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.core.v1.SecretList": { - "description": "SecretList is a list of Secret.", + "io.k8s.api.flowcontrol.v1.PriorityLevelConfigurationList": { + "description": "PriorityLevelConfigurationList is a list of PriorityLevelConfiguration objects.", "type": "object", "required": [ "items" @@ -36224,11 +42159,11 @@ "type": "string" }, "items": { - "description": "Items is a list of secret objects. More info: https://kubernetes.io/docs/concepts/configuration/secret", + "description": "`items` is a list of request-priorities.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Secret" + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.PriorityLevelConfiguration" } }, "kind": { @@ -36236,444 +42171,331 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "SecretList", + "Kind": "PriorityLevelConfigurationList", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.SecretProjection": { - "description": "Adapts a secret into a projected volume.\n\nThe contents of the target Secret's Data field will be presented in a projected volume as files using the keys in the Data field as the file names. Note that this is identical to a secret volume source without the default mode.", + "io.k8s.api.flowcontrol.v1.PriorityLevelConfigurationReference": { + "description": "PriorityLevelConfigurationReference contains information that points to the \"request-priority\" being used.", "type": "object", + "required": [ + "name" + ], "properties": { - "items": { - "description": "items if unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.KeyToPath" - }, - "x-kubernetes-list-type": "atomic" - }, "name": { - "description": "Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "description": "`name` is the name of the priority level configuration being referenced Required.", "type": "string", "default": "" - }, - "optional": { - "description": "optional field specify whether the Secret or its key must be defined", - "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "SecretProjection", + "Kind": "PriorityLevelConfigurationReference", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.SecretReference": { - "description": "SecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespace", + "io.k8s.api.flowcontrol.v1.PriorityLevelConfigurationSpec": { + "description": "PriorityLevelConfigurationSpec specifies the configuration of a priority level.", "type": "object", + "required": [ + "type" + ], "properties": { - "name": { - "description": "name is unique within a namespace to reference a secret resource.", - "type": "string" + "exempt": { + "description": "`exempt` specifies how requests are handled for an exempt priority level. This field MUST be empty if `type` is `\"Limited\"`. This field MAY be non-empty if `type` is `\"Exempt\"`. If empty and `type` is `\"Exempt\"` then the default values for `ExemptPriorityLevelConfiguration` apply.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.ExemptPriorityLevelConfiguration" }, - "namespace": { - "description": "namespace defines the space within which the secret name must be unique.", - "type": "string" + "limited": { + "description": "`limited` specifies how requests are handled for a Limited priority level. This field must be non-empty if and only if `type` is `\"Limited\"`.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.LimitedPriorityLevelConfiguration" + }, + "type": { + "description": "`type` indicates whether this priority level is subject to limitation on request execution. A value of `\"Exempt\"` means that requests of this priority level are not subject to a limit (and thus are never queued) and do not detract from the capacity made available to other priority levels. A value of `\"Limited\"` means that (a) requests of this priority level _are_ subject to limits and (b) some of the server's limited capacity is made available exclusively to this priority level. Required.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "SecretReference", + "Kind": "PriorityLevelConfigurationSpec", "Scope": "Namespaced" }, - "x-kubernetes-map-type": "atomic" + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "exempt": "Exempt", + "limited": "Limited" + } + } + ] }, - "io.k8s.api.core.v1.SecretVolumeSource": { - "description": "Adapts a Secret into a volume.\n\nThe contents of the target Secret's Data field will be presented in a volume as files using the keys in the Data field as the file names. Secret volumes support ownership management and SELinux relabeling.", + "io.k8s.api.flowcontrol.v1.PriorityLevelConfigurationStatus": { + "description": "PriorityLevelConfigurationStatus represents the current state of a \"request-priority\".", "type": "object", "properties": { - "defaultMode": { - "description": "defaultMode is Optional: mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Defaults to 0644. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.", - "type": "integer", - "format": "int32" - }, - "items": { - "description": "items If unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.", + "conditions": { + "description": "`conditions` is the current state of \"request-priority\".", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.KeyToPath" + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.PriorityLevelConfigurationCondition" }, - "x-kubernetes-list-type": "atomic" - }, - "optional": { - "description": "optional field specify whether the Secret or its keys must be defined", - "type": "boolean" - }, - "secretName": { - "description": "secretName is the name of the secret in the pod's namespace to use. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret", - "type": "string" + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "SecretVolumeSource", + "Kind": "PriorityLevelConfigurationStatus", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.SecurityContext": { - "description": "SecurityContext holds security configuration that will be applied to a container. Some fields are present in both SecurityContext and PodSecurityContext. When both are set, the values in SecurityContext take precedence.", + "io.k8s.api.flowcontrol.v1.QueuingConfiguration": { + "description": "QueuingConfiguration holds the configuration parameters for queuing", "type": "object", "properties": { - "allowPrivilegeEscalation": { - "description": "AllowPrivilegeEscalation controls whether a process can gain more privileges than its parent process. This bool directly controls if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when spec.os.name is windows.", - "type": "boolean" - }, - "appArmorProfile": { - "description": "appArmorProfile is the AppArmor options to use by this container. If set, this profile overrides the pod's appArmorProfile. Note that this field cannot be set when spec.os.name is windows.", - "$ref": "#/definitions/io.k8s.api.core.v1.AppArmorProfile" - }, - "capabilities": { - "description": "The capabilities to add/drop when running containers. Defaults to the default set of capabilities granted by the container runtime. Note that this field cannot be set when spec.os.name is windows.", - "$ref": "#/definitions/io.k8s.api.core.v1.Capabilities" - }, - "privileged": { - "description": "Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows.", - "type": "boolean" - }, - "procMount": { - "description": "procMount denotes the type of proc mount to use for the containers. The default value is Default which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows.\n\nPossible enum values:\n - `\"Default\"` uses the container runtime defaults for readonly and masked paths for /proc. Most container runtimes mask certain paths in /proc to avoid accidental security exposure of special devices or information.\n - `\"Unmasked\"` bypasses the default masking behavior of the container runtime and ensures the newly created /proc the container stays in tact with no modifications.", - "type": "string", - "enum": [ - "Default", - "Unmasked" - ] - }, - "readOnlyRootFilesystem": { - "description": "Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows.", - "type": "boolean" - }, - "runAsGroup": { - "description": "The GID to run the entrypoint of the container process. Uses runtime default if unset. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.", + "handSize": { + "description": "`handSize` is a small positive number that configures the shuffle sharding of requests into queues. When enqueuing a request at this priority level the request's flow identifier (a string pair) is hashed and the hash value is used to shuffle the list of queues and deal a hand of the size specified here. The request is put into one of the shortest queues in that hand. `handSize` must be no larger than `queues`, and should be significantly smaller (so that a few heavy flows do not saturate most of the queues). See the user-facing documentation for more extensive guidance on setting this field. This field has a default value of 8.", "type": "integer", - "format": "int64" - }, - "runAsNonRoot": { - "description": "Indicates that the container must run as a non-root user. If true, the Kubelet will validate the image at runtime to ensure that it does not run as UID 0 (root) and fail to start the container if it does. If unset or false, no such validation will be performed. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.", - "type": "boolean" + "format": "int32", + "default": 0 }, - "runAsUser": { - "description": "The UID to run the entrypoint of the container process. Defaults to user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.", + "queueLengthLimit": { + "description": "`queueLengthLimit` is the maximum number of requests allowed to be waiting in a given queue of this priority level at a time; excess requests are rejected. This value must be positive. If not specified, it will be defaulted to 50.", "type": "integer", - "format": "int64" - }, - "seLinuxOptions": { - "description": "The SELinux context to be applied to the container. If unspecified, the container runtime will allocate a random SELinux context for each container. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is windows.", - "$ref": "#/definitions/io.k8s.api.core.v1.SELinuxOptions" - }, - "seccompProfile": { - "description": "The seccomp options to use by this container. If seccomp options are provided at both the pod \u0026 container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows.", - "$ref": "#/definitions/io.k8s.api.core.v1.SeccompProfile" + "format": "int32", + "default": 0 }, - "windowsOptions": { - "description": "The Windows specific settings applied to all containers. If unspecified, the options from the PodSecurityContext will be used. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence. Note that this field cannot be set when spec.os.name is linux.", - "$ref": "#/definitions/io.k8s.api.core.v1.WindowsSecurityContextOptions" + "queues": { + "description": "`queues` is the number of queues for this priority level. The queues exist independently at each apiserver. The value must be positive. Setting it to 1 effectively precludes shufflesharding and thus makes the distinguisher method of associated flow schemas irrelevant. This field has a default value of 64.", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "SecurityContext", - "Scope": "Namespaced" - } - }, - "io.k8s.api.core.v1.SerializedReference": { - "description": "SerializedReference is a reference to serialized object.", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "reference": { - "description": "The reference to an object in the system.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "SerializedReference", + "Kind": "QueuingConfiguration", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.Service": { - "description": "Service is a named abstraction of software service (for example, mysql) consisting of local port (for example 3306) that the proxy listens on, and the selector that determines which pods will answer requests sent through the proxy.", + "io.k8s.api.flowcontrol.v1.ResourcePolicyRule": { + "description": "ResourcePolicyRule is a predicate that matches some resource requests, testing the request's verb and the target resource. A ResourcePolicyRule matches a resource request if and only if: (a) at least one member of verbs matches the request, (b) at least one member of apiGroups matches the request, (c) at least one member of resources matches the request, and (d) either (d1) the request does not specify a namespace (i.e., `Namespace==\"\"`) and clusterScope is true or (d2) the request specifies a namespace and least one member of namespaces matches the request's namespace.", "type": "object", + "required": [ + "verbs", + "apiGroups", + "resources" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "apiGroups": { + "description": "`apiGroups` is a list of matching API groups and may not be empty. \"*\" matches all API groups and, if present, must be the only entry. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "clusterScope": { + "description": "`clusterScope` indicates whether to match requests that do not specify a namespace (which happens either because the resource is not namespaced or the request targets all namespaces). If this field is omitted or false then the `namespaces` field must contain a non-empty list.", + "type": "boolean" }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "namespaces": { + "description": "`namespaces` is a list of target namespaces that restricts matches. A request that specifies a target namespace matches only if either (a) this list contains that target namespace or (b) this list contains \"*\". Note that \"*\" matches any specified namespace but does not match a request that _does not specify_ a namespace (see the `clusterScope` field for that). This list may be empty, but only if `clusterScope` is true.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "spec": { - "description": "Spec defines the behavior of a service. https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ServiceSpec" + "resources": { + "description": "`resources` is a list of matching resources (i.e., lowercase and plural) with, if desired, subresource. For example, [ \"services\", \"nodes/status\" ]. This list may not be empty. \"*\" matches all resources and, if present, must be the only entry. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "status": { - "description": "Most recently observed status of the service. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ServiceStatus" + "verbs": { + "description": "`verbs` is a list of matching verbs and may not be empty. \"*\" matches all verbs and, if present, must be the only entry. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" } }, "x-fabric8-info": { - "Type": "object", - "Group": "", + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "Service", + "Kind": "ResourcePolicyRule", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ServiceAccount": { - "description": "ServiceAccount binds together: * a name, understood by users, and perhaps by peripheral systems, for an identity * a principal that can be authenticated and authorized * a set of secrets", + "io.k8s.api.flowcontrol.v1.ServiceAccountSubject": { + "description": "ServiceAccountSubject holds detailed information for service-account-kind subject.", "type": "object", + "required": [ + "namespace", + "name" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "automountServiceAccountToken": { - "description": "AutomountServiceAccountToken indicates whether pods running as this service account should have an API token automatically mounted. Can be overridden at the pod level.", - "type": "boolean" - }, - "imagePullSecrets": { - "description": "ImagePullSecrets is a list of references to secrets in the same namespace to use for pulling any images in pods that reference this ServiceAccount. ImagePullSecrets are distinct from Secrets because Secrets can be mounted in the pod, but ImagePullSecrets are only accessed by the kubelet. More info: https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - }, - "x-kubernetes-list-type": "atomic" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "name": { + "description": "`name` is the name of matching ServiceAccount objects, or \"*\" to match regardless of name. Required.", + "type": "string", + "default": "" }, - "secrets": { - "description": "Secrets is a list of the secrets in the same namespace that pods running using this ServiceAccount are allowed to use. Pods are only limited to this list if this service account has a \"kubernetes.io/enforce-mountable-secrets\" annotation set to \"true\". This field should not be used to find auto-generated service account token secrets for use outside of pods. Instead, tokens can be requested directly using the TokenRequest API, or service account token secrets can be manually created. More info: https://kubernetes.io/docs/concepts/configuration/secret", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" + "namespace": { + "description": "`namespace` is the namespace of matching ServiceAccount objects. Required.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "", + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "ServiceAccount", + "Kind": "ServiceAccountSubject", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ServiceAccountList": { - "description": "ServiceAccountList is a list of ServiceAccount objects", + "io.k8s.api.flowcontrol.v1.Subject": { + "description": "Subject matches the originator of a request, as identified by the request authentication system. There are three ways of matching an originator; by user, group, or service account.", "type": "object", "required": [ - "items" + "kind" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "List of ServiceAccounts. More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ServiceAccount" - } + "group": { + "description": "`group` matches based on user group name.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.GroupSubject" }, "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "description": "`kind` indicates which one of the other fields is non-empty. Required", + "type": "string", + "default": "" }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "serviceAccount": { + "description": "`serviceAccount` matches ServiceAccounts.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.ServiceAccountSubject" + }, + "user": { + "description": "`user` matches based on username.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.UserSubject" } }, "x-fabric8-info": { - "Type": "list", - "Group": "", + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "ServiceAccountList", + "Kind": "Subject", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "kind", + "fields-to-discriminateBy": { + "group": "Group", + "serviceAccount": "ServiceAccount", + "user": "User" + } + } + ] }, - "io.k8s.api.core.v1.ServiceAccountTokenProjection": { - "description": "ServiceAccountTokenProjection represents a projected service account token volume. This projection can be used to insert a service account token into the pods runtime filesystem for use against APIs (Kubernetes API Server or otherwise).", + "io.k8s.api.flowcontrol.v1.UserSubject": { + "description": "UserSubject holds detailed information for user-kind subject.", "type": "object", "required": [ - "path" + "name" ], "properties": { - "audience": { - "description": "audience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.", - "type": "string" - }, - "expirationSeconds": { - "description": "expirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the kubelet volume plugin will proactively rotate the service account token. The kubelet will start trying to rotate the token if the token is older than 80 percent of its time to live or if the token is older than 24 hours.Defaults to 1 hour and must be at least 10 minutes.", - "type": "integer", - "format": "int64" - }, - "path": { - "description": "path is the path relative to the mount point of the file to project the token into.", + "name": { + "description": "`name` is the username that matches, or \"*\" to match all usernames. Required.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "flowcontrol.apiserver.k8s.io", "Version": "v1", - "Kind": "ServiceAccountTokenProjection", + "Kind": "UserSubject", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ServiceList": { - "description": "ServiceList holds a list of services.", + "io.k8s.api.flowcontrol.v1beta1.ExemptPriorityLevelConfiguration": { + "description": "ExemptPriorityLevelConfiguration describes the configurable aspects of the handling of exempt requests. In the mandatory exempt configuration object the values in the fields here can be modified by authorized users, unlike the rest of the `spec`.", "type": "object", - "required": [ - "items" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "List of services", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Service" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "lendablePercent": { + "description": "`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. This value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows.\n\nLendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 )", + "type": "integer", + "format": "int32" }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "nominalConcurrencyShares": { + "description": "`nominalConcurrencyShares` (NCS) contributes to the computation of the NominalConcurrencyLimit (NominalCL) of this level. This is the number of execution seats nominally reserved for this priority level. This DOES NOT limit the dispatching from this priority level but affects the other priority levels through the borrowing mechanism. The server's concurrency limit (ServerCL) is divided among all the priority levels in proportion to their NCS values:\n\nNominalCL(i) = ceil( ServerCL * NCS(i) / sum_ncs ) sum_ncs = sum[priority level k] NCS(k)\n\nBigger numbers mean a larger nominal concurrency limit, at the expense of every other priority level. This field has a default value of zero.", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { - "Type": "list", - "Group": "", - "Version": "v1", - "Kind": "ServiceList", + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "ExemptPriorityLevelConfiguration", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ServicePort": { - "description": "ServicePort contains information on service's port.", + "io.k8s.api.flowcontrol.v1beta1.FlowDistinguisherMethod": { + "description": "FlowDistinguisherMethod specifies the method of a flow distinguisher.", "type": "object", "required": [ - "port" + "type" ], "properties": { - "appProtocol": { - "description": "The application protocol for this port. This is used as a hint for implementations to offer richer behavior for protocols that they understand. This field follows standard Kubernetes label syntax. Valid values are either:\n\n* Un-prefixed protocol names - reserved for IANA standard service names (as per RFC-6335 and https://www.iana.org/assignments/service-names).\n\n* Kubernetes-defined prefixed names:\n * 'kubernetes.io/h2c' - HTTP/2 prior knowledge over cleartext as described in https://www.rfc-editor.org/rfc/rfc9113.html#name-starting-http-2-with-prior-\n * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455\n * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455\n\n* Other protocols should use implementation-defined prefixed names such as mycompany.com/my-custom-protocol.", - "type": "string" - }, - "name": { - "description": "The name of this port within the service. This must be a DNS_LABEL. All ports within a ServiceSpec must have unique names. When considering the endpoints for a Service, this must match the 'name' field in the EndpointPort. Optional if only one ServicePort is defined on this service.", - "type": "string" - }, - "nodePort": { - "description": "The port on each node on which this service is exposed when type is NodePort or LoadBalancer. Usually assigned by the system. If a value is specified, in-range, and not in use it will be used, otherwise the operation will fail. If not specified, a port will be allocated if this Service requires one. If this field is specified when creating a Service which does not need it, creation will fail. This field will be wiped when updating a Service to no longer need it (e.g. changing type from NodePort to ClusterIP). More info: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport", - "type": "integer", - "format": "int32" - }, - "port": { - "description": "The port that will be exposed by this service.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "protocol": { - "description": "The IP protocol for this port. Supports \"TCP\", \"UDP\", and \"SCTP\". Default is TCP.\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", + "type": { + "description": "`type` is the type of flow distinguisher method The supported types are \"ByUser\" and \"ByNamespace\". Required.", "type": "string", - "default": "TCP", - "enum": [ - "SCTP", - "TCP", - "UDP" - ] - }, - "targetPort": { - "description": "Number or name of the port to access on the pods targeted by the service. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. If this is a string, it will be looked up as a named port in the target Pod's container ports. If this is not specified, the value of the 'port' field is used (an identity map). This field is ignored for services with clusterIP=None, and should be omitted or set equal to the 'port' field. More info: https://kubernetes.io/docs/concepts/services-networking/service/#defining-a-service", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "ServicePort", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "FlowDistinguisherMethod", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ServiceProxyOptions": { - "description": "ServiceProxyOptions is the query options to a Service's proxy call.", + "io.k8s.api.flowcontrol.v1beta1.FlowSchema": { + "description": "FlowSchema defines the schema of a group of flows. Note that a flow is made up of a set of inbound API requests with similar attributes and is identified by a pair of strings: the name of the FlowSchema and a \"flow distinguisher\".", "type": "object", "properties": { "apiVersion": { @@ -36684,1396 +42506,1153 @@ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "path": { - "description": "Path is the part of URLs that include service endpoints, suffixes, and parameters to use for the current proxy request to service. For example, the whole request URL is http://localhost/api/v1/namespaces/kube-system/services/elasticsearch-logging/_search?q=user:kimchy. Path is _search?q=user:kimchy.", - "type": "string" + "metadata": { + "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "`spec` is the specification of the desired behavior of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchemaSpec" + }, + "status": { + "description": "`status` is the current status of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchemaStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "", - "Version": "v1", - "Kind": "ServiceProxyOptions", - "Scope": "Namespaced" + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "FlowSchema", + "Scope": "Clustered" } }, - "io.k8s.api.core.v1.ServiceSpec": { - "description": "ServiceSpec describes the attributes that a user creates on a service.", + "io.k8s.api.flowcontrol.v1beta1.FlowSchemaCondition": { + "description": "FlowSchemaCondition describes conditions for a FlowSchema.", "type": "object", "properties": { - "allocateLoadBalancerNodePorts": { - "description": "allocateLoadBalancerNodePorts defines if NodePorts will be automatically allocated for services with type LoadBalancer. Default is \"true\". It may be set to \"false\" if the cluster load-balancer does not rely on NodePorts. If the caller requests specific NodePorts (by specifying a value), those requests will be respected, regardless of this field. This field may only be set for services with type LoadBalancer and will be cleared if the type is changed to any other type.", - "type": "boolean" - }, - "clusterIP": { - "description": "clusterIP is the IP address of the service and is usually assigned randomly. If an address is specified manually, is in-range (as per system configuration), and is not in use, it will be allocated to the service; otherwise creation of the service will fail. This field may not be changed through updates unless the type field is also being changed to ExternalName (which requires this field to be blank) or the type field is being changed from ExternalName (in which case this field may optionally be specified, as describe above). Valid values are \"None\", empty string (\"\"), or a valid IP address. Setting this to \"None\" makes a \"headless service\" (no virtual IP), which is useful when direct endpoint connections are preferred and proxying is not required. Only applies to types ClusterIP, NodePort, and LoadBalancer. If this field is specified when creating a Service of type ExternalName, creation will fail. This field will be wiped when updating a Service to type ExternalName. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies", - "type": "string" - }, - "clusterIPs": { - "description": "ClusterIPs is a list of IP addresses assigned to this service, and are usually assigned randomly. If an address is specified manually, is in-range (as per system configuration), and is not in use, it will be allocated to the service; otherwise creation of the service will fail. This field may not be changed through updates unless the type field is also being changed to ExternalName (which requires this field to be empty) or the type field is being changed from ExternalName (in which case this field may optionally be specified, as describe above). Valid values are \"None\", empty string (\"\"), or a valid IP address. Setting this to \"None\" makes a \"headless service\" (no virtual IP), which is useful when direct endpoint connections are preferred and proxying is not required. Only applies to types ClusterIP, NodePort, and LoadBalancer. If this field is specified when creating a Service of type ExternalName, creation will fail. This field will be wiped when updating a Service to type ExternalName. If this field is not specified, it will be initialized from the clusterIP field. If this field is specified, clients must ensure that clusterIPs[0] and clusterIP have the same value.\n\nThis field may hold a maximum of two entries (dual-stack IPs, in either order). These IPs must correspond to the values of the ipFamilies field. Both clusterIPs and ipFamilies are governed by the ipFamilyPolicy field. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "externalIPs": { - "description": "externalIPs is a list of IP addresses for which nodes in the cluster will also accept traffic for this service. These IPs are not managed by Kubernetes. The user is responsible for ensuring that traffic arrives at a node with this IP. A common example is external load-balancers that are not part of the Kubernetes system.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "externalName": { - "description": "externalName is the external reference that discovery mechanisms will return as an alias for this service (e.g. a DNS CNAME record). No proxying will be involved. Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) and requires `type` to be \"ExternalName\".", - "type": "string" - }, - "externalTrafficPolicy": { - "description": "externalTrafficPolicy describes how nodes distribute service traffic they receive on one of the Service's \"externally-facing\" addresses (NodePorts, ExternalIPs, and LoadBalancer IPs). If set to \"Local\", the proxy will configure the service in a way that assumes that external load balancers will take care of balancing the service traffic between nodes, and so each node will deliver traffic only to the node-local endpoints of the service, without masquerading the client source IP. (Traffic mistakenly sent to a node with no endpoints will be dropped.) The default value, \"Cluster\", uses the standard behavior of routing to all endpoints evenly (possibly modified by topology and other features). Note that traffic sent to an External IP or LoadBalancer IP from within the cluster will always get \"Cluster\" semantics, but clients sending to a NodePort from within the cluster may need to take traffic policy into account when picking a node.\n\nPossible enum values:\n - `\"Cluster\"` routes traffic to all endpoints.\n - `\"Local\"` preserves the source IP of the traffic by routing only to endpoints on the same node as the traffic was received on (dropping the traffic if there are no local endpoints).", - "type": "string", - "enum": [ - "Cluster", - "Local" - ] - }, - "healthCheckNodePort": { - "description": "healthCheckNodePort specifies the healthcheck nodePort for the service. This only applies when type is set to LoadBalancer and externalTrafficPolicy is set to Local. If a value is specified, is in-range, and is not in use, it will be used. If not specified, a value will be automatically allocated. External systems (e.g. load-balancers) can use this port to determine if a given node holds endpoints for this service or not. If this field is specified when creating a Service which does not need it, creation will fail. This field will be wiped when updating a Service to no longer need it (e.g. changing type). This field cannot be updated once set.", - "type": "integer", - "format": "int32" - }, - "internalTrafficPolicy": { - "description": "InternalTrafficPolicy describes how nodes distribute service traffic they receive on the ClusterIP. If set to \"Local\", the proxy will assume that pods only want to talk to endpoints of the service on the same node as the pod, dropping the traffic if there are no local endpoints. The default value, \"Cluster\", uses the standard behavior of routing to all endpoints evenly (possibly modified by topology and other features).\n\nPossible enum values:\n - `\"Cluster\"` routes traffic to all endpoints.\n - `\"Local\"` routes traffic only to endpoints on the same node as the client pod (dropping the traffic if there are no local endpoints).", - "type": "string", - "enum": [ - "Cluster", - "Local" - ] - }, - "ipFamilies": { - "description": "IPFamilies is a list of IP families (e.g. IPv4, IPv6) assigned to this service. This field is usually assigned automatically based on cluster configuration and the ipFamilyPolicy field. If this field is specified manually, the requested family is available in the cluster, and ipFamilyPolicy allows it, it will be used; otherwise creation of the service will fail. This field is conditionally mutable: it allows for adding or removing a secondary IP family, but it does not allow changing the primary IP family of the Service. Valid values are \"IPv4\" and \"IPv6\". This field only applies to Services of types ClusterIP, NodePort, and LoadBalancer, and does apply to \"headless\" services. This field will be wiped when updating a Service to type ExternalName.\n\nThis field may hold a maximum of two entries (dual-stack families, in either order). These families must correspond to the values of the clusterIPs field, if specified. Both clusterIPs and ipFamilies are governed by the ipFamilyPolicy field.", - "type": "array", - "items": { - "type": "string", - "default": "", - "enum": [ - "", - "IPv4", - "IPv6" - ] - }, - "x-kubernetes-list-type": "atomic" - }, - "ipFamilyPolicy": { - "description": "IPFamilyPolicy represents the dual-stack-ness requested or required by this Service. If there is no value provided, then this field will be set to SingleStack. Services can be \"SingleStack\" (a single IP family), \"PreferDualStack\" (two IP families on dual-stack configured clusters or a single IP family on single-stack clusters), or \"RequireDualStack\" (two IP families on dual-stack configured clusters, otherwise fail). The ipFamilies and clusterIPs fields depend on the value of this field. This field will be wiped when updating a service to type ExternalName.\n\nPossible enum values:\n - `\"PreferDualStack\"` indicates that this service prefers dual-stack when the cluster is configured for dual-stack. If the cluster is not configured for dual-stack the service will be assigned a single IPFamily. If the IPFamily is not set in service.spec.ipFamilies then the service will be assigned the default IPFamily configured on the cluster\n - `\"RequireDualStack\"` indicates that this service requires dual-stack. Using IPFamilyPolicyRequireDualStack on a single stack cluster will result in validation errors. The IPFamilies (and their order) assigned to this service is based on service.spec.ipFamilies. If service.spec.ipFamilies was not provided then it will be assigned according to how they are configured on the cluster. If service.spec.ipFamilies has only one entry then the alternative IPFamily will be added by apiserver\n - `\"SingleStack\"` indicates that this service is required to have a single IPFamily. The IPFamily assigned is based on the default IPFamily used by the cluster or as identified by service.spec.ipFamilies field", - "type": "string", - "enum": [ - "PreferDualStack", - "RequireDualStack", - "SingleStack" - ] + "lastTransitionTime": { + "description": "`lastTransitionTime` is the last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "loadBalancerClass": { - "description": "loadBalancerClass is the class of the load balancer implementation this Service belongs to. If specified, the value of this field must be a label-style identifier, with an optional prefix, e.g. \"internal-vip\" or \"example.com/internal-vip\". Unprefixed names are reserved for end-users. This field can only be set when the Service type is 'LoadBalancer'. If not set, the default load balancer implementation is used, today this is typically done through the cloud provider integration, but should apply for any default implementation. If set, it is assumed that a load balancer implementation is watching for Services with a matching class. Any default load balancer implementation (e.g. cloud providers) should ignore Services that set this field. This field can only be set when creating or updating a Service to type 'LoadBalancer'. Once set, it can not be changed. This field will be wiped when a service is updated to a non 'LoadBalancer' type.", + "message": { + "description": "`message` is a human-readable message indicating details about last transition.", "type": "string" }, - "loadBalancerIP": { - "description": "Only applies to Service Type: LoadBalancer. This feature depends on whether the underlying cloud-provider supports specifying the loadBalancerIP when a load balancer is created. This field will be ignored if the cloud-provider does not support the feature. Deprecated: This field was under-specified and its meaning varies across implementations. Using it is non-portable and it may not support dual-stack. Users are encouraged to use implementation-specific annotations when available.", + "reason": { + "description": "`reason` is a unique, one-word, CamelCase reason for the condition's last transition.", "type": "string" }, - "loadBalancerSourceRanges": { - "description": "If specified and supported by the platform, this will restrict traffic through the cloud-provider load-balancer will be restricted to the specified client IPs. This field will be ignored if the cloud-provider does not support the feature.\" More info: https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "ports": { - "description": "The list of ports that are exposed by this service. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ServicePort" - }, - "x-kubernetes-list-map-keys": [ - "port", - "protocol" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "port", - "x-kubernetes-patch-strategy": "merge" - }, - "publishNotReadyAddresses": { - "description": "publishNotReadyAddresses indicates that any agent which deals with endpoints for this Service should disregard any indications of ready/not-ready. The primary use case for setting this field is for a StatefulSet's Headless Service to propagate SRV DNS records for its Pods for the purpose of peer discovery. The Kubernetes controllers that generate Endpoints and EndpointSlice resources for Services interpret this to mean that all endpoints are considered \"ready\" even if the Pods themselves are not. Agents which consume only Kubernetes generated endpoints through the Endpoints or EndpointSlice resources can safely assume this behavior.", - "type": "boolean" - }, - "selector": { - "description": "Route service traffic to pods with label keys and values matching this selector. If empty or not present, the service is assumed to have an external process managing its endpoints, which Kubernetes will not modify. Only applies to types ClusterIP, NodePort, and LoadBalancer. Ignored if type is ExternalName. More info: https://kubernetes.io/docs/concepts/services-networking/service/", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - }, - "x-kubernetes-map-type": "atomic" - }, - "sessionAffinity": { - "description": "Supports \"ClientIP\" and \"None\". Used to maintain session affinity. Enable client IP based session affinity. Must be ClientIP or None. Defaults to None. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies\n\nPossible enum values:\n - `\"ClientIP\"` is the Client IP based.\n - `\"None\"` - no session affinity.", - "type": "string", - "enum": [ - "ClientIP", - "None" - ] - }, - "sessionAffinityConfig": { - "description": "sessionAffinityConfig contains the configurations of session affinity.", - "$ref": "#/definitions/io.k8s.api.core.v1.SessionAffinityConfig" - }, - "trafficDistribution": { - "description": "TrafficDistribution offers a way to express preferences for how traffic is distributed to Service endpoints. Implementations can use this field as a hint, but are not required to guarantee strict adherence. If the field is not set, the implementation will apply its default routing strategy. If set to \"PreferClose\", implementations should prioritize endpoints that are topologically close (e.g., same zone). This is an alpha field and requires enabling ServiceTrafficDistribution feature.", + "status": { + "description": "`status` is the status of the condition. Can be True, False, Unknown. Required.", "type": "string" }, "type": { - "description": "type determines how the Service is exposed. Defaults to ClusterIP. Valid options are ExternalName, ClusterIP, NodePort, and LoadBalancer. \"ClusterIP\" allocates a cluster-internal IP address for load-balancing to endpoints. Endpoints are determined by the selector or if that is not specified, by manual construction of an Endpoints object or EndpointSlice objects. If clusterIP is \"None\", no virtual IP is allocated and the endpoints are published as a set of endpoints rather than a virtual IP. \"NodePort\" builds on ClusterIP and allocates a port on every node which routes to the same endpoints as the clusterIP. \"LoadBalancer\" builds on NodePort and creates an external load-balancer (if supported in the current cloud) which routes to the same endpoints as the clusterIP. \"ExternalName\" aliases this service to the specified externalName. Several other fields do not apply to ExternalName services. More info: https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types\n\nPossible enum values:\n - `\"ClusterIP\"` means a service will only be accessible inside the cluster, via the cluster IP.\n - `\"ExternalName\"` means a service consists of only a reference to an external name that kubedns or equivalent will return as a CNAME record, with no exposing or proxying of any pods involved.\n - `\"LoadBalancer\"` means a service will be exposed via an external load balancer (if the cloud provider supports it), in addition to 'NodePort' type.\n - `\"NodePort\"` means a service will be exposed on one port of every node, in addition to 'ClusterIP' type.", - "type": "string", - "enum": [ - "ClusterIP", - "ExternalName", - "LoadBalancer", - "NodePort" - ] + "description": "`type` is the type of the condition. Required.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "ServiceSpec", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "FlowSchemaCondition", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.ServiceStatus": { - "description": "ServiceStatus represents the current status of a service.", + "io.k8s.api.flowcontrol.v1beta1.FlowSchemaList": { + "description": "FlowSchemaList is a list of FlowSchema objects.", "type": "object", + "required": [ + "items" + ], "properties": { - "conditions": { - "description": "Current service state", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "`items` is a list of FlowSchemas.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema" + } }, - "loadBalancer": { - "description": "LoadBalancer contains the current status of the load-balancer, if one is present.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "`metadata` is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.LoadBalancerStatus" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "ServiceStatus", - "Scope": "Namespaced" - } - }, - "io.k8s.api.core.v1.SessionAffinityConfig": { - "description": "SessionAffinityConfig represents the configurations of session affinity.", - "type": "object", - "properties": { - "clientIP": { - "description": "clientIP contains the configurations of Client IP based session affinity.", - "$ref": "#/definitions/io.k8s.api.core.v1.ClientIPConfig" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "SessionAffinityConfig", + "Type": "list", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "FlowSchemaList", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.SleepAction": { - "description": "SleepAction describes a \"sleep\" action.", + "io.k8s.api.flowcontrol.v1beta1.FlowSchemaSpec": { + "description": "FlowSchemaSpec describes how the FlowSchema's specification looks like.", "type": "object", "required": [ - "seconds" + "priorityLevelConfiguration" ], "properties": { - "seconds": { - "description": "Seconds is the number of seconds to sleep.", + "distinguisherMethod": { + "description": "`distinguisherMethod` defines how to compute the flow distinguisher for requests that match this schema. `nil` specifies that the distinguisher is disabled and thus will always be the empty string.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowDistinguisherMethod" + }, + "matchingPrecedence": { + "description": "`matchingPrecedence` is used to choose among the FlowSchemas that match a given request. The chosen FlowSchema is among those with the numerically lowest (which we take to be logically highest) MatchingPrecedence. Each MatchingPrecedence value must be ranged in [1,10000]. Note that if the precedence is not specified, it will be set to 1000 as default.", "type": "integer", - "format": "int64", + "format": "int32", "default": 0 - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "SleepAction", - "Scope": "Namespaced" - } - }, - "io.k8s.api.core.v1.StorageOSPersistentVolumeSource": { - "description": "Represents a StorageOS persistent volume resource.", - "type": "object", - "properties": { - "fsType": { - "description": "fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified.", - "type": "string" - }, - "readOnly": { - "description": "readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", - "type": "boolean" }, - "secretRef": { - "description": "secretRef specifies the secret to use for obtaining the StorageOS API credentials. If not specified, default values will be attempted.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "volumeName": { - "description": "volumeName is the human-readable name of the StorageOS volume. Volume names are only unique within a namespace.", - "type": "string" + "priorityLevelConfiguration": { + "description": "`priorityLevelConfiguration` should reference a PriorityLevelConfiguration in the cluster. If the reference cannot be resolved, the FlowSchema will be ignored and marked as invalid in its status. Required.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationReference" }, - "volumeNamespace": { - "description": "volumeNamespace specifies the scope of the volume within StorageOS. If no namespace is specified then the Pod's namespace will be used. This allows the Kubernetes name scoping to be mirrored within StorageOS for tighter integration. Set VolumeName to any name to override the default behaviour. Set to \"default\" if you are not using namespaces within StorageOS. Namespaces that do not pre-exist within StorageOS will be created.", - "type": "string" + "rules": { + "description": "`rules` describes which requests will match this flow schema. This FlowSchema matches a request if and only if at least one member of rules matches the request. if it is an empty slice, there will be no requests matching the FlowSchema.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PolicyRulesWithSubjects" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "StorageOSPersistentVolumeSource", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "FlowSchemaSpec", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.StorageOSVolumeSource": { - "description": "Represents a StorageOS persistent volume resource.", + "io.k8s.api.flowcontrol.v1beta1.FlowSchemaStatus": { + "description": "FlowSchemaStatus represents the current state of a FlowSchema.", "type": "object", "properties": { - "fsType": { - "description": "fsType is the filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified.", - "type": "string" - }, - "readOnly": { - "description": "readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.", - "type": "boolean" - }, - "secretRef": { - "description": "secretRef specifies the secret to use for obtaining the StorageOS API credentials. If not specified, default values will be attempted.", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" - }, - "volumeName": { - "description": "volumeName is the human-readable name of the StorageOS volume. Volume names are only unique within a namespace.", - "type": "string" - }, - "volumeNamespace": { - "description": "volumeNamespace specifies the scope of the volume within StorageOS. If no namespace is specified then the Pod's namespace will be used. This allows the Kubernetes name scoping to be mirrored within StorageOS for tighter integration. Set VolumeName to any name to override the default behaviour. Set to \"default\" if you are not using namespaces within StorageOS. Namespaces that do not pre-exist within StorageOS will be created.", - "type": "string" + "conditions": { + "description": "`conditions` is a list of the current states of FlowSchema.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchemaCondition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "StorageOSVolumeSource", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "FlowSchemaStatus", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.Sysctl": { - "description": "Sysctl defines a kernel parameter to be set", + "io.k8s.api.flowcontrol.v1beta1.GroupSubject": { + "description": "GroupSubject holds detailed information for group-kind subject.", "type": "object", "required": [ - "name", - "value" + "name" ], "properties": { "name": { - "description": "Name of a property to set", - "type": "string", - "default": "" - }, - "value": { - "description": "Value of a property to set", + "description": "name is the user group that matches, or \"*\" to match all user groups. See https://github.com/kubernetes/apiserver/blob/master/pkg/authentication/user/user.go for some well-known group names. Required.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "Sysctl", - "Scope": "Namespaced" - } - }, - "io.k8s.api.core.v1.TCPSocketAction": { - "description": "TCPSocketAction describes an action based on opening a socket", - "type": "object", - "required": [ - "port" - ], - "properties": { - "host": { - "description": "Optional: Host name to connect to, defaults to the pod IP.", - "type": "string" - }, - "port": { - "description": "Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "TCPSocketAction", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "GroupSubject", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.Taint": { - "description": "The node this Taint is attached to has the \"effect\" on any pod that does not tolerate the Taint.", + "io.k8s.api.flowcontrol.v1beta1.LimitResponse": { + "description": "LimitResponse defines how to handle requests that can not be executed right now.", "type": "object", "required": [ - "key", - "effect" + "type" ], "properties": { - "effect": { - "description": "Required. The effect of the taint on pods that do not tolerate the taint. Valid effects are NoSchedule, PreferNoSchedule and NoExecute.\n\nPossible enum values:\n - `\"NoExecute\"` Evict any already-running pods that do not tolerate the taint. Currently enforced by NodeController.\n - `\"NoSchedule\"` Do not allow new pods to schedule onto the node unless they tolerate the taint, but allow all pods submitted to Kubelet without going through the scheduler to start, and allow all already-running pods to continue running. Enforced by the scheduler.\n - `\"PreferNoSchedule\"` Like TaintEffectNoSchedule, but the scheduler tries not to schedule new pods onto the node, rather than prohibiting new pods from scheduling onto the node entirely. Enforced by the scheduler.", - "type": "string", - "default": "", - "enum": [ - "NoExecute", - "NoSchedule", - "PreferNoSchedule" - ] + "queuing": { + "description": "`queuing` holds the configuration parameters for queuing. This field may be non-empty only if `type` is `\"Queue\"`.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.QueuingConfiguration" }, - "key": { - "description": "Required. The taint key to be applied to a node.", + "type": { + "description": "`type` is \"Queue\" or \"Reject\". \"Queue\" means that requests that can not be executed upon arrival are held in a queue until they can be executed or a queuing limit is reached. \"Reject\" means that requests that can not be executed upon arrival are rejected. Required.", "type": "string", "default": "" - }, - "timeAdded": { - "description": "TimeAdded represents the time at which the taint was added. It is only written for NoExecute taints.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "value": { - "description": "The taint value corresponding to the taint key.", - "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "Taint", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "LimitResponse", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "queuing": "Queuing" + } + } + ] }, - "io.k8s.api.core.v1.Toleration": { - "description": "The pod this Toleration is attached to tolerates any taint that matches the triple \u003ckey,value,effect\u003e using the matching operator \u003coperator\u003e.", + "io.k8s.api.flowcontrol.v1beta1.LimitedPriorityLevelConfiguration": { + "description": "LimitedPriorityLevelConfiguration specifies how to handle requests that are subject to limits. It addresses two issues:\n - How are requests for this priority level limited?\n - What should be done with requests that exceed the limit?", "type": "object", "properties": { - "effect": { - "description": "Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.\n\nPossible enum values:\n - `\"NoExecute\"` Evict any already-running pods that do not tolerate the taint. Currently enforced by NodeController.\n - `\"NoSchedule\"` Do not allow new pods to schedule onto the node unless they tolerate the taint, but allow all pods submitted to Kubelet without going through the scheduler to start, and allow all already-running pods to continue running. Enforced by the scheduler.\n - `\"PreferNoSchedule\"` Like TaintEffectNoSchedule, but the scheduler tries not to schedule new pods onto the node, rather than prohibiting new pods from scheduling onto the node entirely. Enforced by the scheduler.", - "type": "string", - "enum": [ - "NoExecute", - "NoSchedule", - "PreferNoSchedule" - ] - }, - "key": { - "description": "Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys.", - "type": "string" + "assuredConcurrencyShares": { + "description": "`assuredConcurrencyShares` (ACS) configures the execution limit, which is a limit on the number of requests of this priority level that may be executing at a given time. ACS must be a positive number. The server's concurrency limit (SCL) is divided among the concurrency-controlled priority levels in proportion to their assured concurrency shares. This produces the assured concurrency value (ACV) --- the number of requests that may be executing at a time --- for each such priority level:\n\n ACV(l) = ceil( SCL * ACS(l) / ( sum[priority levels k] ACS(k) ) )\n\nbigger numbers of ACS mean more reserved concurrent requests (at the expense of every other PL). This field has a default value of 30.", + "type": "integer", + "format": "int32", + "default": 0 }, - "operator": { - "description": "Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category.\n\nPossible enum values:\n - `\"Equal\"`\n - `\"Exists\"`", - "type": "string", - "enum": [ - "Equal", - "Exists" - ] + "borrowingLimitPercent": { + "description": "`borrowingLimitPercent`, if present, configures a limit on how many seats this priority level can borrow from other priority levels. The limit is known as this level's BorrowingConcurrencyLimit (BorrowingCL) and is a limit on the total number of seats that this level may borrow at any one time. This field holds the ratio of that limit to the level's nominal concurrency limit. When this field is non-nil, it must hold a non-negative integer and the limit is calculated as follows.\n\nBorrowingCL(i) = round( NominalCL(i) * borrowingLimitPercent(i)/100.0 )\n\nThe value of this field can be more than 100, implying that this priority level can borrow a number of seats that is greater than its own nominal concurrency limit (NominalCL). When this field is left `nil`, the limit is effectively infinite.", + "type": "integer", + "format": "int32" }, - "tolerationSeconds": { - "description": "TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system.", + "lendablePercent": { + "description": "`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. The value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows.\n\nLendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 )", "type": "integer", - "format": "int64" + "format": "int32" }, - "value": { - "description": "Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string.", - "type": "string" + "limitResponse": { + "description": "`limitResponse` indicates what to do with requests that can not be executed right now", + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.LimitResponse" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "Toleration", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "LimitedPriorityLevelConfiguration", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.TopologySelectorLabelRequirement": { - "description": "A topology selector requirement is a selector that matches given label. This is an alpha feature and may change in the future.", + "io.k8s.api.flowcontrol.v1beta1.NonResourcePolicyRule": { + "description": "NonResourcePolicyRule is a predicate that matches non-resource requests according to their verb and the target non-resource URL. A NonResourcePolicyRule matches a request if and only if both (a) at least one member of verbs matches the request and (b) at least one member of nonResourceURLs matches the request.", "type": "object", "required": [ - "key", - "values" + "verbs", + "nonResourceURLs" ], "properties": { - "key": { - "description": "The label key that the selector applies to.", - "type": "string", - "default": "" + "nonResourceURLs": { + "description": "`nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example:\n - \"/healthz\" is legal\n - \"/hea*\" is illegal\n - \"/hea\" is legal but matches nothing\n - \"/hea/*\" also matches nothing\n - \"/healthz/*\" matches all per-component health checks.\n\"*\" matches all non-resource urls. if it is present, it must be the only entry. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "values": { - "description": "An array of string values. One value must match the label to be selected. Each entry in Values is ORed.", + "verbs": { + "description": "`verbs` is a list of matching verbs and may not be empty. \"*\" matches all verbs. If it is present, it must be the only entry. Required.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-type": "set" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "TopologySelectorLabelRequirement", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "NonResourcePolicyRule", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.TopologySelectorTerm": { - "description": "A topology selector term represents the result of label queries. A null or empty topology selector term matches no objects. The requirements of them are ANDed. It provides a subset of functionality as NodeSelectorTerm. This is an alpha feature and may change in the future.", + "io.k8s.api.flowcontrol.v1beta1.PolicyRulesWithSubjects": { + "description": "PolicyRulesWithSubjects prescribes a test that applies to a request to an apiserver. The test considers the subject making the request, the verb being requested, and the resource to be acted upon. This PolicyRulesWithSubjects matches a request if and only if both (a) at least one member of subjects matches the request and (b) at least one member of resourceRules or nonResourceRules matches the request.", "type": "object", + "required": [ + "subjects" + ], "properties": { - "matchLabelExpressions": { - "description": "A list of topology selector requirements by labels.", + "nonResourceRules": { + "description": "`nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.TopologySelectorLabelRequirement" + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.NonResourcePolicyRule" }, "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "TopologySelectorTerm", - "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" - }, - "io.k8s.api.core.v1.TopologySpreadConstraint": { - "description": "TopologySpreadConstraint specifies how to spread matching pods among the given topology.", - "type": "object", - "required": [ - "maxSkew", - "topologyKey", - "whenUnsatisfiable" - ], - "properties": { - "labelSelector": { - "description": "LabelSelector is used to find matching pods. Pods that match this label selector are counted to determine the number of pods in their corresponding topology domain.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" }, - "matchLabelKeys": { - "description": "MatchLabelKeys is a set of pod label keys to select the pods over which spreading will be calculated. The keys are used to lookup values from the incoming pod labels, those key-value labels are ANDed with labelSelector to select the group of existing pods over which spreading will be calculated for the incoming pod. The same key is forbidden to exist in both MatchLabelKeys and LabelSelector. MatchLabelKeys cannot be set when LabelSelector isn't set. Keys that don't exist in the incoming pod labels will be ignored. A null or empty list means only match against labelSelector.\n\nThis is a beta field and requires the MatchLabelKeysInPodTopologySpread feature gate to be enabled (enabled by default).", + "resourceRules": { + "description": "`resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.ResourcePolicyRule" }, "x-kubernetes-list-type": "atomic" }, - "maxSkew": { - "description": "MaxSkew describes the degree to which pods may be unevenly distributed. When `whenUnsatisfiable=DoNotSchedule`, it is the maximum permitted difference between the number of matching pods in the target topology and the global minimum. The global minimum is the minimum number of matching pods in an eligible domain or zero if the number of eligible domains is less than MinDomains. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 2/2/1: In this case, the global minimum is 1. | zone1 | zone2 | zone3 | | P P | P P | P | - if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 2/2/2; scheduling it onto zone1(zone2) would make the ActualSkew(3-1) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2, incoming pod can be scheduled onto any zone. When `whenUnsatisfiable=ScheduleAnyway`, it is used to give higher precedence to topologies that satisfy it. It's a required field. Default value is 1 and 0 is not allowed.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "minDomains": { - "description": "MinDomains indicates a minimum number of eligible domains. When the number of eligible domains with matching topology keys is less than minDomains, Pod Topology Spread treats \"global minimum\" as 0, and then the calculation of Skew is performed. And when the number of eligible domains with matching topology keys equals or greater than minDomains, this value has no effect on scheduling. As a result, when the number of eligible domains is less than minDomains, scheduler won't schedule more than maxSkew Pods to those domains. If value is nil, the constraint behaves as if MinDomains is equal to 1. Valid values are integers greater than 0. When value is not nil, WhenUnsatisfiable must be DoNotSchedule.\n\nFor example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the same labelSelector spread as 2/2/2: | zone1 | zone2 | zone3 | | P P | P P | P P | The number of domains is less than 5(MinDomains), so \"global minimum\" is treated as 0. In this situation, new pod with the same labelSelector cannot be scheduled, because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones, it will violate MaxSkew.", - "type": "integer", - "format": "int32" - }, - "nodeAffinityPolicy": { - "description": "NodeAffinityPolicy indicates how we will treat Pod's nodeAffinity/nodeSelector when calculating pod topology spread skew. Options are: - Honor: only nodes matching nodeAffinity/nodeSelector are included in the calculations. - Ignore: nodeAffinity/nodeSelector are ignored. All nodes are included in the calculations.\n\nIf this value is nil, the behavior is equivalent to the Honor policy. This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.\n\nPossible enum values:\n - `\"Honor\"` means use this scheduling directive when calculating pod topology spread skew.\n - `\"Ignore\"` means ignore this scheduling directive when calculating pod topology spread skew.", - "type": "string", - "enum": [ - "Honor", - "Ignore" - ] - }, - "nodeTaintsPolicy": { - "description": "NodeTaintsPolicy indicates how we will treat node taints when calculating pod topology spread skew. Options are: - Honor: nodes without taints, along with tainted nodes for which the incoming pod has a toleration, are included. - Ignore: node taints are ignored. All nodes are included.\n\nIf this value is nil, the behavior is equivalent to the Ignore policy. This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag.\n\nPossible enum values:\n - `\"Honor\"` means use this scheduling directive when calculating pod topology spread skew.\n - `\"Ignore\"` means ignore this scheduling directive when calculating pod topology spread skew.", - "type": "string", - "enum": [ - "Honor", - "Ignore" - ] - }, - "topologyKey": { - "description": "TopologyKey is the key of node labels. Nodes that have a label with this key and identical values are considered to be in the same topology. We consider each \u003ckey, value\u003e as a \"bucket\", and try to put balanced number of pods into each bucket. We define a domain as a particular instance of a topology. Also, we define an eligible domain as a domain whose nodes meet the requirements of nodeAffinityPolicy and nodeTaintsPolicy. e.g. If TopologyKey is \"kubernetes.io/hostname\", each Node is a domain of that topology. And, if TopologyKey is \"topology.kubernetes.io/zone\", each zone is a domain of that topology. It's a required field.", - "type": "string", - "default": "" - }, - "whenUnsatisfiable": { - "description": "WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy the spread constraint. - DoNotSchedule (default) tells the scheduler not to schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in any location,\n but giving higher precedence to topologies that would help reduce the\n skew.\nA constraint is considered \"Unsatisfiable\" for an incoming pod if and only if every possible node assignment for that pod would violate \"MaxSkew\" on some topology. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1: | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In other words, the cluster can still be imbalanced, but scheduler won't make it *more* imbalanced. It's a required field.\n\nPossible enum values:\n - `\"DoNotSchedule\"` instructs the scheduler not to schedule the pod when constraints are not satisfied.\n - `\"ScheduleAnyway\"` instructs the scheduler to schedule the pod even if constraints are not satisfied.", - "type": "string", - "default": "", - "enum": [ - "DoNotSchedule", - "ScheduleAnyway" - ] + "subjects": { + "description": "subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.Subject" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "TopologySpreadConstraint", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "PolicyRulesWithSubjects", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.TypedLocalObjectReference": { - "description": "TypedLocalObjectReference contains enough information to let you locate the typed referenced object inside the same namespace.", + "io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration": { + "description": "PriorityLevelConfiguration represents the configuration of a priority level.", "type": "object", - "required": [ - "kind", - "name" - ], "properties": { - "apiGroup": { - "description": "APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, "kind": { - "description": "Kind is the type of resource being referenced", - "type": "string", - "default": "" + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "name": { - "description": "Name is the name of resource being referenced", - "type": "string", - "default": "" + "metadata": { + "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "`spec` is the specification of the desired behavior of a \"request-priority\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationSpec" + }, + "status": { + "description": "`status` is the current status of a \"request-priority\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "TypedLocalObjectReference", - "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + "Type": "object", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "PriorityLevelConfiguration", + "Scope": "Clustered" + } }, - "io.k8s.api.core.v1.TypedObjectReference": { + "io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationCondition": { + "description": "PriorityLevelConfigurationCondition defines the condition of priority level.", "type": "object", - "required": [ - "kind", - "name" - ], "properties": { - "apiGroup": { - "description": "APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.", + "lastTransitionTime": { + "description": "`lastTransitionTime` is the last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "`message` is a human-readable message indicating details about last transition.", "type": "string" }, - "kind": { - "description": "Kind is the type of resource being referenced", - "type": "string", - "default": "" + "reason": { + "description": "`reason` is a unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" }, - "name": { - "description": "Name is the name of resource being referenced", - "type": "string", - "default": "" + "status": { + "description": "`status` is the status of the condition. Can be True, False, Unknown. Required.", + "type": "string" }, - "namespace": { - "description": "Namespace is the namespace of resource being referenced Note that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace's owner to accept the reference. See the ReferenceGrant documentation for details. (Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.", + "type": { + "description": "`type` is the type of the condition. Required.", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "TypedObjectReference", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "PriorityLevelConfigurationCondition", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.Volume": { - "description": "Volume represents a named volume in a pod that may be accessed by any container in the pod.", + "io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationList": { + "description": "PriorityLevelConfigurationList is a list of PriorityLevelConfiguration objects.", "type": "object", "required": [ - "name" + "items" ], "properties": { - "awsElasticBlockStore": { - "description": "awsElasticBlockStore represents an AWS Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore", - "$ref": "#/definitions/io.k8s.api.core.v1.AWSElasticBlockStoreVolumeSource" - }, - "azureDisk": { - "description": "azureDisk represents an Azure Data Disk mount on the host and bind mount to the pod.", - "$ref": "#/definitions/io.k8s.api.core.v1.AzureDiskVolumeSource" - }, - "azureFile": { - "description": "azureFile represents an Azure File Service mount on the host and bind mount to the pod.", - "$ref": "#/definitions/io.k8s.api.core.v1.AzureFileVolumeSource" - }, - "cephfs": { - "description": "cephFS represents a Ceph FS mount on the host that shares a pod's lifetime", - "$ref": "#/definitions/io.k8s.api.core.v1.CephFSVolumeSource" - }, - "cinder": { - "description": "cinder represents a cinder volume attached and mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", - "$ref": "#/definitions/io.k8s.api.core.v1.CinderVolumeSource" - }, - "configMap": { - "description": "configMap represents a configMap that should populate this volume", - "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapVolumeSource" - }, - "csi": { - "description": "csi (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers (Beta feature).", - "$ref": "#/definitions/io.k8s.api.core.v1.CSIVolumeSource" - }, - "downwardAPI": { - "description": "downwardAPI represents downward API about the pod that should populate this volume", - "$ref": "#/definitions/io.k8s.api.core.v1.DownwardAPIVolumeSource" - }, - "emptyDir": { - "description": "emptyDir represents a temporary directory that shares a pod's lifetime. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir", - "$ref": "#/definitions/io.k8s.api.core.v1.EmptyDirVolumeSource" - }, - "ephemeral": { - "description": "ephemeral represents a volume that is handled by a cluster storage driver. The volume's lifecycle is tied to the pod that defines it - it will be created before the pod starts, and deleted when the pod is removed.\n\nUse this if: a) the volume is only needed while the pod runs, b) features of normal volumes like restoring from snapshot or capacity\n tracking are needed,\nc) the storage driver is specified through a storage class, and d) the storage driver supports dynamic volume provisioning through\n a PersistentVolumeClaim (see EphemeralVolumeSource for more\n information on the connection between this volume type\n and PersistentVolumeClaim).\n\nUse PersistentVolumeClaim or one of the vendor-specific APIs for volumes that persist for longer than the lifecycle of an individual pod.\n\nUse CSI for light-weight local ephemeral volumes if the CSI driver is meant to be used that way - see the documentation of the driver for more information.\n\nA pod can use both types of ephemeral volumes and persistent volumes at the same time.", - "$ref": "#/definitions/io.k8s.api.core.v1.EphemeralVolumeSource" - }, - "fc": { - "description": "fc represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod.", - "$ref": "#/definitions/io.k8s.api.core.v1.FCVolumeSource" - }, - "flexVolume": { - "description": "flexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.", - "$ref": "#/definitions/io.k8s.api.core.v1.FlexVolumeSource" - }, - "flocker": { - "description": "flocker represents a Flocker volume attached to a kubelet's host machine. This depends on the Flocker control service being running", - "$ref": "#/definitions/io.k8s.api.core.v1.FlockerVolumeSource" - }, - "gcePersistentDisk": { - "description": "gcePersistentDisk represents a GCE Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", - "$ref": "#/definitions/io.k8s.api.core.v1.GCEPersistentDiskVolumeSource" - }, - "gitRepo": { - "description": "gitRepo represents a git repository at a particular revision. DEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod's container.", - "$ref": "#/definitions/io.k8s.api.core.v1.GitRepoVolumeSource" - }, - "glusterfs": { - "description": "glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md", - "$ref": "#/definitions/io.k8s.api.core.v1.GlusterfsVolumeSource" - }, - "hostPath": { - "description": "hostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath", - "$ref": "#/definitions/io.k8s.api.core.v1.HostPathVolumeSource" - }, - "image": { - "description": "image represents an OCI object (a container image or artifact) pulled and mounted on the kubelet's host machine. The volume is resolved at pod startup depending on which PullPolicy value is provided:\n\n- Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails. - Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn't present. - IfNotPresent: the kubelet pulls if the reference isn't already present on disk. Container creation will fail if the reference isn't present and the pull fails.\n\nThe volume gets re-resolved if the pod gets deleted and recreated, which means that new remote content will become available on pod recreation. A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message. The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field. The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images. The volume will be mounted read-only (ro) and non-executable files (noexec). Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath). The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.", - "$ref": "#/definitions/io.k8s.api.core.v1.ImageVolumeSource" - }, - "iscsi": { - "description": "iscsi represents an ISCSI Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://examples.k8s.io/volumes/iscsi/README.md", - "$ref": "#/definitions/io.k8s.api.core.v1.ISCSIVolumeSource" - }, - "name": { - "description": "name of the volume. Must be a DNS_LABEL and unique within the pod. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", - "type": "string", - "default": "" - }, - "nfs": { - "description": "nfs represents an NFS mount on the host that shares a pod's lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs", - "$ref": "#/definitions/io.k8s.api.core.v1.NFSVolumeSource" - }, - "persistentVolumeClaim": { - "description": "persistentVolumeClaimVolumeSource represents a reference to a PersistentVolumeClaim in the same namespace. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims", - "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimVolumeSource" - }, - "photonPersistentDisk": { - "description": "photonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine", - "$ref": "#/definitions/io.k8s.api.core.v1.PhotonPersistentDiskVolumeSource" - }, - "portworxVolume": { - "description": "portworxVolume represents a portworx volume attached and mounted on kubelets host machine", - "$ref": "#/definitions/io.k8s.api.core.v1.PortworxVolumeSource" - }, - "projected": { - "description": "projected items for all in one resources secrets, configmaps, and downward API", - "$ref": "#/definitions/io.k8s.api.core.v1.ProjectedVolumeSource" - }, - "quobyte": { - "description": "quobyte represents a Quobyte mount on the host that shares a pod's lifetime", - "$ref": "#/definitions/io.k8s.api.core.v1.QuobyteVolumeSource" - }, - "rbd": { - "description": "rbd represents a Rados Block Device mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md", - "$ref": "#/definitions/io.k8s.api.core.v1.RBDVolumeSource" - }, - "scaleIO": { - "description": "scaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes.", - "$ref": "#/definitions/io.k8s.api.core.v1.ScaleIOVolumeSource" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "secret": { - "description": "secret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretVolumeSource" + "items": { + "description": "`items` is a list of request-priorities.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration" + } }, - "storageos": { - "description": "storageOS represents a StorageOS volume attached and mounted on Kubernetes nodes.", - "$ref": "#/definitions/io.k8s.api.core.v1.StorageOSVolumeSource" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "vsphereVolume": { - "description": "vsphereVolume represents a vSphere volume attached and mounted on kubelets host machine", - "$ref": "#/definitions/io.k8s.api.core.v1.VsphereVirtualDiskVolumeSource" + "metadata": { + "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "Volume", + "Type": "list", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "PriorityLevelConfigurationList", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.VolumeDevice": { - "description": "volumeDevice describes a mapping of a raw block device within a container.", + "io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationReference": { + "description": "PriorityLevelConfigurationReference contains information that points to the \"request-priority\" being used.", "type": "object", "required": [ - "name", - "devicePath" + "name" ], "properties": { - "devicePath": { - "description": "devicePath is the path inside of the container that the device will be mapped to.", - "type": "string", - "default": "" - }, "name": { - "description": "name must match the name of a persistentVolumeClaim in the pod", + "description": "`name` is the name of the priority level configuration being referenced Required.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "VolumeDevice", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "PriorityLevelConfigurationReference", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.VolumeMount": { - "description": "VolumeMount describes a mounting of a Volume within a container.", + "io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationSpec": { + "description": "PriorityLevelConfigurationSpec specifies the configuration of a priority level.", "type": "object", "required": [ - "name", - "mountPath" + "type" ], "properties": { - "mountPath": { - "description": "Path within the container at which the volume should be mounted. Must not contain ':'.", - "type": "string", - "default": "" + "exempt": { + "description": "`exempt` specifies how requests are handled for an exempt priority level. This field MUST be empty if `type` is `\"Limited\"`. This field MAY be non-empty if `type` is `\"Exempt\"`. If empty and `type` is `\"Exempt\"` then the default values for `ExemptPriorityLevelConfiguration` apply.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.ExemptPriorityLevelConfiguration" }, - "mountPropagation": { - "description": "mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10. When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified (which defaults to None).\n\nPossible enum values:\n - `\"Bidirectional\"` means that the volume in a container will receive new mounts from the host or other containers, and its own mounts will be propagated from the container to the host or other containers. Note that this mode is recursively applied to all mounts in the volume (\"rshared\" in Linux terminology).\n - `\"HostToContainer\"` means that the volume in a container will receive new mounts from the host or other containers, but filesystems mounted inside the container won't be propagated to the host or other containers. Note that this mode is recursively applied to all mounts in the volume (\"rslave\" in Linux terminology).\n - `\"None\"` means that the volume in a container will not receive new mounts from the host or other containers, and filesystems mounted inside the container won't be propagated to the host or other containers. Note that this mode corresponds to \"private\" in Linux terminology.", - "type": "string", - "enum": [ - "Bidirectional", - "HostToContainer", - "None" - ] + "limited": { + "description": "`limited` specifies how requests are handled for a Limited priority level. This field must be non-empty if and only if `type` is `\"Limited\"`.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.LimitedPriorityLevelConfiguration" }, - "name": { - "description": "This must match the Name of a Volume.", + "type": { + "description": "`type` indicates whether this priority level is subject to limitation on request execution. A value of `\"Exempt\"` means that requests of this priority level are not subject to a limit (and thus are never queued) and do not detract from the capacity made available to other priority levels. A value of `\"Limited\"` means that (a) requests of this priority level _are_ subject to limits and (b) some of the server's limited capacity is made available exclusively to this priority level. Required.", "type": "string", "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "PriorityLevelConfigurationSpec", + "Scope": "Namespaced" + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "exempt": "Exempt", + "limited": "Limited" + } + } + ] + }, + "io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationStatus": { + "description": "PriorityLevelConfigurationStatus represents the current state of a \"request-priority\".", + "type": "object", + "properties": { + "conditions": { + "description": "`conditions` is the current state of \"request-priority\".", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationCondition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "PriorityLevelConfigurationStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.flowcontrol.v1beta1.QueuingConfiguration": { + "description": "QueuingConfiguration holds the configuration parameters for queuing", + "type": "object", + "properties": { + "handSize": { + "description": "`handSize` is a small positive number that configures the shuffle sharding of requests into queues. When enqueuing a request at this priority level the request's flow identifier (a string pair) is hashed and the hash value is used to shuffle the list of queues and deal a hand of the size specified here. The request is put into one of the shortest queues in that hand. `handSize` must be no larger than `queues`, and should be significantly smaller (so that a few heavy flows do not saturate most of the queues). See the user-facing documentation for more extensive guidance on setting this field. This field has a default value of 8.", + "type": "integer", + "format": "int32", + "default": 0 }, - "readOnly": { - "description": "Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.", + "queueLengthLimit": { + "description": "`queueLengthLimit` is the maximum number of requests allowed to be waiting in a given queue of this priority level at a time; excess requests are rejected. This value must be positive. If not specified, it will be defaulted to 50.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "queues": { + "description": "`queues` is the number of queues for this priority level. The queues exist independently at each apiserver. The value must be positive. Setting it to 1 effectively precludes shufflesharding and thus makes the distinguisher method of associated flow schemas irrelevant. This field has a default value of 64.", + "type": "integer", + "format": "int32", + "default": 0 + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "QueuingConfiguration", + "Scope": "Namespaced" + } + }, + "io.k8s.api.flowcontrol.v1beta1.ResourcePolicyRule": { + "description": "ResourcePolicyRule is a predicate that matches some resource requests, testing the request's verb and the target resource. A ResourcePolicyRule matches a resource request if and only if: (a) at least one member of verbs matches the request, (b) at least one member of apiGroups matches the request, (c) at least one member of resources matches the request, and (d) either (d1) the request does not specify a namespace (i.e., `Namespace==\"\"`) and clusterScope is true or (d2) the request specifies a namespace and least one member of namespaces matches the request's namespace.", + "type": "object", + "required": [ + "verbs", + "apiGroups", + "resources" + ], + "properties": { + "apiGroups": { + "description": "`apiGroups` is a list of matching API groups and may not be empty. \"*\" matches all API groups and, if present, must be the only entry. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" + }, + "clusterScope": { + "description": "`clusterScope` indicates whether to match requests that do not specify a namespace (which happens either because the resource is not namespaced or the request targets all namespaces). If this field is omitted or false then the `namespaces` field must contain a non-empty list.", "type": "boolean" }, - "recursiveReadOnly": { - "description": "RecursiveReadOnly specifies whether read-only mounts should be handled recursively.\n\nIf ReadOnly is false, this field has no meaning and must be unspecified.\n\nIf ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason.\n\nIf this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None).\n\nIf this field is not specified, it is treated as an equivalent of Disabled.", - "type": "string" + "namespaces": { + "description": "`namespaces` is a list of target namespaces that restricts matches. A request that specifies a target namespace matches only if either (a) this list contains that target namespace or (b) this list contains \"*\". Note that \"*\" matches any specified namespace but does not match a request that _does not specify_ a namespace (see the `clusterScope` field for that). This list may be empty, but only if `clusterScope` is true.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "subPath": { - "description": "Path within the volume from which the container's volume should be mounted. Defaults to \"\" (volume's root).", - "type": "string" + "resources": { + "description": "`resources` is a list of matching resources (i.e., lowercase and plural) with, if desired, subresource. For example, [ \"services\", \"nodes/status\" ]. This list may not be empty. \"*\" matches all resources and, if present, must be the only entry. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "subPathExpr": { - "description": "Expanded path within the volume from which the container's volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment. Defaults to \"\" (volume's root). SubPathExpr and SubPath are mutually exclusive.", - "type": "string" + "verbs": { + "description": "`verbs` is a list of matching verbs and may not be empty. \"*\" matches all verbs and, if present, must be the only entry. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "VolumeMount", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "ResourcePolicyRule", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.VolumeMountStatus": { - "description": "VolumeMountStatus shows status of volume mounts.", + "io.k8s.api.flowcontrol.v1beta1.ServiceAccountSubject": { + "description": "ServiceAccountSubject holds detailed information for service-account-kind subject.", "type": "object", "required": [ - "name", - "mountPath" + "namespace", + "name" ], "properties": { - "mountPath": { - "description": "MountPath corresponds to the original VolumeMount.", + "name": { + "description": "`name` is the name of matching ServiceAccount objects, or \"*\" to match regardless of name. Required.", "type": "string", "default": "" }, - "name": { - "description": "Name corresponds to the name of the original VolumeMount.", + "namespace": { + "description": "`namespace` is the namespace of matching ServiceAccount objects. Required.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "ServiceAccountSubject", + "Scope": "Namespaced" + } + }, + "io.k8s.api.flowcontrol.v1beta1.Subject": { + "description": "Subject matches the originator of a request, as identified by the request authentication system. There are three ways of matching an originator; by user, group, or service account.", + "type": "object", + "required": [ + "kind" + ], + "properties": { + "group": { + "description": "`group` matches based on user group name.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.GroupSubject" + }, + "kind": { + "description": "`kind` indicates which one of the other fields is non-empty. Required", "type": "string", "default": "" }, - "readOnly": { - "description": "ReadOnly corresponds to the original VolumeMount.", - "type": "boolean" + "serviceAccount": { + "description": "`serviceAccount` matches ServiceAccounts.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.ServiceAccountSubject" }, - "recursiveReadOnly": { - "description": "RecursiveReadOnly must be set to Disabled, Enabled, or unspecified (for non-readonly mounts). An IfPossible value in the original VolumeMount must be translated to Disabled or Enabled, depending on the mount result.", - "type": "string" + "user": { + "description": "`user` matches based on username.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.UserSubject" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "VolumeMountStatus", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "Subject", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "kind", + "fields-to-discriminateBy": { + "group": "Group", + "serviceAccount": "ServiceAccount", + "user": "User" + } + } + ] }, - "io.k8s.api.core.v1.VolumeNodeAffinity": { - "description": "VolumeNodeAffinity defines constraints that limit what nodes this volume can be accessed from.", + "io.k8s.api.flowcontrol.v1beta1.UserSubject": { + "description": "UserSubject holds detailed information for user-kind subject.", "type": "object", + "required": [ + "name" + ], "properties": { - "required": { - "description": "required specifies hard node constraints that must be met.", - "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelector" + "name": { + "description": "`name` is the username that matches, or \"*\" to match all usernames. Required.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "VolumeNodeAffinity", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta1", + "Kind": "UserSubject", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.VolumeProjection": { - "description": "Projection that may be projected along with other supported volume types. Exactly one of these fields must be set.", + "io.k8s.api.flowcontrol.v1beta2.ExemptPriorityLevelConfiguration": { + "description": "ExemptPriorityLevelConfiguration describes the configurable aspects of the handling of exempt requests. In the mandatory exempt configuration object the values in the fields here can be modified by authorized users, unlike the rest of the `spec`.", "type": "object", "properties": { - "clusterTrustBundle": { - "description": "ClusterTrustBundle allows a pod to access the `.spec.trustBundle` field of ClusterTrustBundle objects in an auto-updating file.\n\nAlpha, gated by the ClusterTrustBundleProjection feature gate.\n\nClusterTrustBundle objects can either be selected by name, or by the combination of signer name and a label selector.\n\nKubelet performs aggressive normalization of the PEM contents written into the pod filesystem. Esoteric PEM features such as inter-block comments and block headers are stripped. Certificates are deduplicated. The ordering of certificates within the file is arbitrary, and Kubelet may change the order over time.", - "$ref": "#/definitions/io.k8s.api.core.v1.ClusterTrustBundleProjection" - }, - "configMap": { - "description": "configMap information about the configMap data to project", - "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapProjection" - }, - "downwardAPI": { - "description": "downwardAPI information about the downwardAPI data to project", - "$ref": "#/definitions/io.k8s.api.core.v1.DownwardAPIProjection" - }, - "secret": { - "description": "secret information about the secret data to project", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretProjection" + "lendablePercent": { + "description": "`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. This value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows.\n\nLendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 )", + "type": "integer", + "format": "int32" }, - "serviceAccountToken": { - "description": "serviceAccountToken is information about the serviceAccountToken data to project", - "$ref": "#/definitions/io.k8s.api.core.v1.ServiceAccountTokenProjection" + "nominalConcurrencyShares": { + "description": "`nominalConcurrencyShares` (NCS) contributes to the computation of the NominalConcurrencyLimit (NominalCL) of this level. This is the number of execution seats nominally reserved for this priority level. This DOES NOT limit the dispatching from this priority level but affects the other priority levels through the borrowing mechanism. The server's concurrency limit (ServerCL) is divided among all the priority levels in proportion to their NCS values:\n\nNominalCL(i) = ceil( ServerCL * NCS(i) / sum_ncs ) sum_ncs = sum[priority level k] NCS(k)\n\nBigger numbers mean a larger nominal concurrency limit, at the expense of every other priority level. This field has a default value of zero.", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "VolumeProjection", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "ExemptPriorityLevelConfiguration", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.VolumeResourceRequirements": { - "description": "VolumeResourceRequirements describes the storage resource requirements for a volume.", + "io.k8s.api.flowcontrol.v1beta2.FlowDistinguisherMethod": { + "description": "FlowDistinguisherMethod specifies the method of a flow distinguisher.", "type": "object", + "required": [ + "type" + ], "properties": { - "limits": { - "description": "Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } - }, - "requests": { - "description": "Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } + "type": { + "description": "`type` is the type of flow distinguisher method The supported types are \"ByUser\" and \"ByNamespace\". Required.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "VolumeResourceRequirements", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "FlowDistinguisherMethod", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.VolumeSource": { - "description": "Represents the source of a volume to mount. Only one of its members may be specified.", + "io.k8s.api.flowcontrol.v1beta2.FlowSchema": { + "description": "FlowSchema defines the schema of a group of flows. Note that a flow is made up of a set of inbound API requests with similar attributes and is identified by a pair of strings: the name of the FlowSchema and a \"flow distinguisher\".", "type": "object", "properties": { - "awsElasticBlockStore": { - "description": "awsElasticBlockStore represents an AWS Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore", - "$ref": "#/definitions/io.k8s.api.core.v1.AWSElasticBlockStoreVolumeSource" - }, - "azureDisk": { - "description": "azureDisk represents an Azure Data Disk mount on the host and bind mount to the pod.", - "$ref": "#/definitions/io.k8s.api.core.v1.AzureDiskVolumeSource" - }, - "azureFile": { - "description": "azureFile represents an Azure File Service mount on the host and bind mount to the pod.", - "$ref": "#/definitions/io.k8s.api.core.v1.AzureFileVolumeSource" - }, - "cephfs": { - "description": "cephFS represents a Ceph FS mount on the host that shares a pod's lifetime", - "$ref": "#/definitions/io.k8s.api.core.v1.CephFSVolumeSource" - }, - "cinder": { - "description": "cinder represents a cinder volume attached and mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md", - "$ref": "#/definitions/io.k8s.api.core.v1.CinderVolumeSource" - }, - "configMap": { - "description": "configMap represents a configMap that should populate this volume", - "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapVolumeSource" - }, - "csi": { - "description": "csi (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers (Beta feature).", - "$ref": "#/definitions/io.k8s.api.core.v1.CSIVolumeSource" - }, - "downwardAPI": { - "description": "downwardAPI represents downward API about the pod that should populate this volume", - "$ref": "#/definitions/io.k8s.api.core.v1.DownwardAPIVolumeSource" - }, - "emptyDir": { - "description": "emptyDir represents a temporary directory that shares a pod's lifetime. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir", - "$ref": "#/definitions/io.k8s.api.core.v1.EmptyDirVolumeSource" - }, - "ephemeral": { - "description": "ephemeral represents a volume that is handled by a cluster storage driver. The volume's lifecycle is tied to the pod that defines it - it will be created before the pod starts, and deleted when the pod is removed.\n\nUse this if: a) the volume is only needed while the pod runs, b) features of normal volumes like restoring from snapshot or capacity\n tracking are needed,\nc) the storage driver is specified through a storage class, and d) the storage driver supports dynamic volume provisioning through\n a PersistentVolumeClaim (see EphemeralVolumeSource for more\n information on the connection between this volume type\n and PersistentVolumeClaim).\n\nUse PersistentVolumeClaim or one of the vendor-specific APIs for volumes that persist for longer than the lifecycle of an individual pod.\n\nUse CSI for light-weight local ephemeral volumes if the CSI driver is meant to be used that way - see the documentation of the driver for more information.\n\nA pod can use both types of ephemeral volumes and persistent volumes at the same time.", - "$ref": "#/definitions/io.k8s.api.core.v1.EphemeralVolumeSource" - }, - "fc": { - "description": "fc represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod.", - "$ref": "#/definitions/io.k8s.api.core.v1.FCVolumeSource" - }, - "flexVolume": { - "description": "flexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.", - "$ref": "#/definitions/io.k8s.api.core.v1.FlexVolumeSource" - }, - "flocker": { - "description": "flocker represents a Flocker volume attached to a kubelet's host machine. This depends on the Flocker control service being running", - "$ref": "#/definitions/io.k8s.api.core.v1.FlockerVolumeSource" - }, - "gcePersistentDisk": { - "description": "gcePersistentDisk represents a GCE Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk", - "$ref": "#/definitions/io.k8s.api.core.v1.GCEPersistentDiskVolumeSource" - }, - "gitRepo": { - "description": "gitRepo represents a git repository at a particular revision. DEPRECATED: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod's container.", - "$ref": "#/definitions/io.k8s.api.core.v1.GitRepoVolumeSource" - }, - "glusterfs": { - "description": "glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md", - "$ref": "#/definitions/io.k8s.api.core.v1.GlusterfsVolumeSource" - }, - "hostPath": { - "description": "hostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath", - "$ref": "#/definitions/io.k8s.api.core.v1.HostPathVolumeSource" - }, - "image": { - "description": "image represents an OCI object (a container image or artifact) pulled and mounted on the kubelet's host machine. The volume is resolved at pod startup depending on which PullPolicy value is provided:\n\n- Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails. - Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn't present. - IfNotPresent: the kubelet pulls if the reference isn't already present on disk. Container creation will fail if the reference isn't present and the pull fails.\n\nThe volume gets re-resolved if the pod gets deleted and recreated, which means that new remote content will become available on pod recreation. A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message. The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field. The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images. The volume will be mounted read-only (ro) and non-executable files (noexec). Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath). The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.", - "$ref": "#/definitions/io.k8s.api.core.v1.ImageVolumeSource" - }, - "iscsi": { - "description": "iscsi represents an ISCSI Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://examples.k8s.io/volumes/iscsi/README.md", - "$ref": "#/definitions/io.k8s.api.core.v1.ISCSIVolumeSource" - }, - "nfs": { - "description": "nfs represents an NFS mount on the host that shares a pod's lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs", - "$ref": "#/definitions/io.k8s.api.core.v1.NFSVolumeSource" - }, - "persistentVolumeClaim": { - "description": "persistentVolumeClaimVolumeSource represents a reference to a PersistentVolumeClaim in the same namespace. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims", - "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeClaimVolumeSource" - }, - "photonPersistentDisk": { - "description": "photonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine", - "$ref": "#/definitions/io.k8s.api.core.v1.PhotonPersistentDiskVolumeSource" - }, - "portworxVolume": { - "description": "portworxVolume represents a portworx volume attached and mounted on kubelets host machine", - "$ref": "#/definitions/io.k8s.api.core.v1.PortworxVolumeSource" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "projected": { - "description": "projected items for all in one resources secrets, configmaps, and downward API", - "$ref": "#/definitions/io.k8s.api.core.v1.ProjectedVolumeSource" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "quobyte": { - "description": "quobyte represents a Quobyte mount on the host that shares a pod's lifetime", - "$ref": "#/definitions/io.k8s.api.core.v1.QuobyteVolumeSource" + "metadata": { + "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "rbd": { - "description": "rbd represents a Rados Block Device mount on the host that shares a pod's lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md", - "$ref": "#/definitions/io.k8s.api.core.v1.RBDVolumeSource" + "spec": { + "description": "`spec` is the specification of the desired behavior of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.FlowSchemaSpec" }, - "scaleIO": { - "description": "scaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes.", - "$ref": "#/definitions/io.k8s.api.core.v1.ScaleIOVolumeSource" + "status": { + "description": "`status` is the current status of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.FlowSchemaStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "FlowSchema", + "Scope": "Clustered" + } + }, + "io.k8s.api.flowcontrol.v1beta2.FlowSchemaCondition": { + "description": "FlowSchemaCondition describes conditions for a FlowSchema.", + "type": "object", + "properties": { + "lastTransitionTime": { + "description": "`lastTransitionTime` is the last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "secret": { - "description": "secret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretVolumeSource" + "message": { + "description": "`message` is a human-readable message indicating details about last transition.", + "type": "string" }, - "storageos": { - "description": "storageOS represents a StorageOS volume attached and mounted on Kubernetes nodes.", - "$ref": "#/definitions/io.k8s.api.core.v1.StorageOSVolumeSource" + "reason": { + "description": "`reason` is a unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" }, - "vsphereVolume": { - "description": "vsphereVolume represents a vSphere volume attached and mounted on kubelets host machine", - "$ref": "#/definitions/io.k8s.api.core.v1.VsphereVirtualDiskVolumeSource" + "status": { + "description": "`status` is the status of the condition. Can be True, False, Unknown. Required.", + "type": "string" + }, + "type": { + "description": "`type` is the type of the condition. Required.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "VolumeSource", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "FlowSchemaCondition", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.VsphereVirtualDiskVolumeSource": { - "description": "Represents a vSphere volume resource.", + "io.k8s.api.flowcontrol.v1beta2.FlowSchemaList": { + "description": "FlowSchemaList is a list of FlowSchema objects.", "type": "object", "required": [ - "volumePath" + "items" ], "properties": { - "fsType": { - "description": "fsType is filesystem type to mount. Must be a filesystem type supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "storagePolicyID": { - "description": "storagePolicyID is the storage Policy Based Management (SPBM) profile ID associated with the StoragePolicyName.", - "type": "string" + "items": { + "description": "`items` is a list of FlowSchemas.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.FlowSchema" + } }, - "storagePolicyName": { - "description": "storagePolicyName is the storage Policy Based Management (SPBM) profile name.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "volumePath": { - "description": "volumePath is the path that identifies vSphere volume vmdk", - "type": "string", - "default": "" + "metadata": { + "description": "`metadata` is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "VsphereVirtualDiskVolumeSource", + "Type": "list", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "FlowSchemaList", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.WeightedPodAffinityTerm": { - "description": "The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)", + "io.k8s.api.flowcontrol.v1beta2.FlowSchemaSpec": { + "description": "FlowSchemaSpec describes how the FlowSchema's specification looks like.", "type": "object", "required": [ - "weight", - "podAffinityTerm" + "priorityLevelConfiguration" ], "properties": { - "podAffinityTerm": { - "description": "Required. A pod affinity term, associated with the corresponding weight.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodAffinityTerm" + "distinguisherMethod": { + "description": "`distinguisherMethod` defines how to compute the flow distinguisher for requests that match this schema. `nil` specifies that the distinguisher is disabled and thus will always be the empty string.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.FlowDistinguisherMethod" }, - "weight": { - "description": "weight associated with matching the corresponding podAffinityTerm, in the range 1-100.", + "matchingPrecedence": { + "description": "`matchingPrecedence` is used to choose among the FlowSchemas that match a given request. The chosen FlowSchema is among those with the numerically lowest (which we take to be logically highest) MatchingPrecedence. Each MatchingPrecedence value must be ranged in [1,10000]. Note that if the precedence is not specified, it will be set to 1000 as default.", "type": "integer", "format": "int32", "default": 0 + }, + "priorityLevelConfiguration": { + "description": "`priorityLevelConfiguration` should reference a PriorityLevelConfiguration in the cluster. If the reference cannot be resolved, the FlowSchema will be ignored and marked as invalid in its status. Required.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfigurationReference" + }, + "rules": { + "description": "`rules` describes which requests will match this flow schema. This FlowSchema matches a request if and only if at least one member of rules matches the request. if it is an empty slice, there will be no requests matching the FlowSchema.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.PolicyRulesWithSubjects" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "WeightedPodAffinityTerm", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "FlowSchemaSpec", "Scope": "Namespaced" } }, - "io.k8s.api.core.v1.WindowsSecurityContextOptions": { - "description": "WindowsSecurityContextOptions contain Windows-specific options and credentials.", + "io.k8s.api.flowcontrol.v1beta2.FlowSchemaStatus": { + "description": "FlowSchemaStatus represents the current state of a FlowSchema.", "type": "object", "properties": { - "gmsaCredentialSpec": { - "description": "GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName field.", - "type": "string" - }, - "gmsaCredentialSpecName": { - "description": "GMSACredentialSpecName is the name of the GMSA credential spec to use.", - "type": "string" - }, - "hostProcess": { - "description": "HostProcess determines if a container should be run as a 'Host Process' container. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.", - "type": "boolean" - }, - "runAsUserName": { - "description": "The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.", - "type": "string" + "conditions": { + "description": "`conditions` is a list of the current states of FlowSchema.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.FlowSchemaCondition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "WindowsSecurityContextOptions", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "FlowSchemaStatus", "Scope": "Namespaced" } }, - "io.k8s.api.discovery.v1.Endpoint": { - "description": "Endpoint represents a single logical \"backend\" implementing a service.", + "io.k8s.api.flowcontrol.v1beta2.GroupSubject": { + "description": "GroupSubject holds detailed information for group-kind subject.", "type": "object", "required": [ - "addresses" + "name" ], "properties": { - "addresses": { - "description": "addresses of this endpoint. The contents of this field are interpreted according to the corresponding EndpointSlice addressType field. Consumers must handle different types of addresses in the context of their own capabilities. This must contain at least one address but no more than 100. These are all assumed to be fungible and clients may choose to only use the first element. Refer to: https://issue.k8s.io/106267", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "conditions": { - "description": "conditions contains information about the current status of the endpoint.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointConditions" - }, - "deprecatedTopology": { - "description": "deprecatedTopology contains topology information part of the v1beta1 API. This field is deprecated, and will be removed when the v1beta1 API is removed (no sooner than kubernetes v1.24). While this field can hold values, it is not writable through the v1 API, and any attempts to write to it will be silently ignored. Topology information can be found in the zone and nodeName fields instead.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "hints": { - "description": "hints contains information associated with how an endpoint should be consumed.", - "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointHints" - }, - "hostname": { - "description": "hostname of this endpoint. This field may be used by consumers of endpoints to distinguish endpoints from each other (e.g. in DNS names). Multiple endpoints which use the same hostname should be considered fungible (e.g. multiple A values in DNS). Must be lowercase and pass DNS Label (RFC 1123) validation.", - "type": "string" - }, - "nodeName": { - "description": "nodeName represents the name of the Node hosting this endpoint. This can be used to determine endpoints local to a Node.", - "type": "string" - }, - "targetRef": { - "description": "targetRef is a reference to a Kubernetes object that represents this endpoint.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "zone": { - "description": "zone is the name of the Zone this endpoint exists in.", - "type": "string" + "name": { + "description": "name is the user group that matches, or \"*\" to match all user groups. See https://github.com/kubernetes/apiserver/blob/master/pkg/authentication/user/user.go for some well-known group names. Required.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "discovery.k8s.io", - "Version": "v1", - "Kind": "Endpoint", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "GroupSubject", "Scope": "Namespaced" } }, - "io.k8s.api.discovery.v1.EndpointConditions": { - "description": "EndpointConditions represents the current condition of an endpoint.", + "io.k8s.api.flowcontrol.v1beta2.LimitResponse": { + "description": "LimitResponse defines how to handle requests that can not be executed right now.", "type": "object", + "required": [ + "type" + ], "properties": { - "ready": { - "description": "ready indicates that this endpoint is prepared to receive traffic, according to whatever system is managing the endpoint. A nil value indicates an unknown state. In most cases consumers should interpret this unknown state as ready. For compatibility reasons, ready should never be \"true\" for terminating endpoints, except when the normal readiness behavior is being explicitly overridden, for example when the associated Service has set the publishNotReadyAddresses flag.", - "type": "boolean" - }, - "serving": { - "description": "serving is identical to ready except that it is set regardless of the terminating state of endpoints. This condition should be set to true for a ready endpoint that is terminating. If nil, consumers should defer to the ready condition.", - "type": "boolean" + "queuing": { + "description": "`queuing` holds the configuration parameters for queuing. This field may be non-empty only if `type` is `\"Queue\"`.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.QueuingConfiguration" }, - "terminating": { - "description": "terminating indicates that this endpoint is terminating. A nil value indicates an unknown state. Consumers should interpret this unknown state to mean that the endpoint is not terminating.", - "type": "boolean" + "type": { + "description": "`type` is \"Queue\" or \"Reject\". \"Queue\" means that requests that can not be executed upon arrival are held in a queue until they can be executed or a queuing limit is reached. \"Reject\" means that requests that can not be executed upon arrival are rejected. Required.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "discovery.k8s.io", - "Version": "v1", - "Kind": "EndpointConditions", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "LimitResponse", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "queuing": "Queuing" + } + } + ] }, - "io.k8s.api.discovery.v1.EndpointHints": { - "description": "EndpointHints provides hints describing how an endpoint should be consumed.", + "io.k8s.api.flowcontrol.v1beta2.LimitedPriorityLevelConfiguration": { + "description": "LimitedPriorityLevelConfiguration specifies how to handle requests that are subject to limits. It addresses two issues:\n - How are requests for this priority level limited?\n - What should be done with requests that exceed the limit?", "type": "object", "properties": { - "forZones": { - "description": "forZones indicates the zone(s) this endpoint should be consumed by to enable topology aware routing.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.discovery.v1.ForZone" - }, - "x-kubernetes-list-type": "atomic" + "assuredConcurrencyShares": { + "description": "`assuredConcurrencyShares` (ACS) configures the execution limit, which is a limit on the number of requests of this priority level that may be executing at a given time. ACS must be a positive number. The server's concurrency limit (SCL) is divided among the concurrency-controlled priority levels in proportion to their assured concurrency shares. This produces the assured concurrency value (ACV) --- the number of requests that may be executing at a time --- for each such priority level:\n\n ACV(l) = ceil( SCL * ACS(l) / ( sum[priority levels k] ACS(k) ) )\n\nbigger numbers of ACS mean more reserved concurrent requests (at the expense of every other PL). This field has a default value of 30.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "borrowingLimitPercent": { + "description": "`borrowingLimitPercent`, if present, configures a limit on how many seats this priority level can borrow from other priority levels. The limit is known as this level's BorrowingConcurrencyLimit (BorrowingCL) and is a limit on the total number of seats that this level may borrow at any one time. This field holds the ratio of that limit to the level's nominal concurrency limit. When this field is non-nil, it must hold a non-negative integer and the limit is calculated as follows.\n\nBorrowingCL(i) = round( NominalCL(i) * borrowingLimitPercent(i)/100.0 )\n\nThe value of this field can be more than 100, implying that this priority level can borrow a number of seats that is greater than its own nominal concurrency limit (NominalCL). When this field is left `nil`, the limit is effectively infinite.", + "type": "integer", + "format": "int32" + }, + "lendablePercent": { + "description": "`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. The value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows.\n\nLendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 )", + "type": "integer", + "format": "int32" + }, + "limitResponse": { + "description": "`limitResponse` indicates what to do with requests that can not be executed right now", + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.LimitResponse" } }, "x-fabric8-info": { "Type": "nested", - "Group": "discovery.k8s.io", - "Version": "v1", - "Kind": "EndpointHints", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "LimitedPriorityLevelConfiguration", "Scope": "Namespaced" } }, - "io.k8s.api.discovery.v1.EndpointPort": { - "description": "EndpointPort represents a Port used by an EndpointSlice", + "io.k8s.api.flowcontrol.v1beta2.NonResourcePolicyRule": { + "description": "NonResourcePolicyRule is a predicate that matches non-resource requests according to their verb and the target non-resource URL. A NonResourcePolicyRule matches a request if and only if both (a) at least one member of verbs matches the request and (b) at least one member of nonResourceURLs matches the request.", "type": "object", + "required": [ + "verbs", + "nonResourceURLs" + ], "properties": { - "appProtocol": { - "description": "The application protocol for this port. This is used as a hint for implementations to offer richer behavior for protocols that they understand. This field follows standard Kubernetes label syntax. Valid values are either:\n\n* Un-prefixed protocol names - reserved for IANA standard service names (as per RFC-6335 and https://www.iana.org/assignments/service-names).\n\n* Kubernetes-defined prefixed names:\n * 'kubernetes.io/h2c' - HTTP/2 prior knowledge over cleartext as described in https://www.rfc-editor.org/rfc/rfc9113.html#name-starting-http-2-with-prior-\n * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455\n * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455\n\n* Other protocols should use implementation-defined prefixed names such as mycompany.com/my-custom-protocol.", - "type": "string" - }, - "name": { - "description": "name represents the name of this port. All ports in an EndpointSlice must have a unique name. If the EndpointSlice is derived from a Kubernetes service, this corresponds to the Service.ports[].name. Name must either be an empty string or pass DNS_LABEL validation: * must be no more than 63 characters long. * must consist of lower case alphanumeric characters or '-'. * must start and end with an alphanumeric character. Default is empty string.", - "type": "string" - }, - "port": { - "description": "port represents the port number of the endpoint. If this is not specified, ports are not restricted and must be interpreted in the context of the specific consumer.", - "type": "integer", - "format": "int32" + "nonResourceURLs": { + "description": "`nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example:\n - \"/healthz\" is legal\n - \"/hea*\" is illegal\n - \"/hea\" is legal but matches nothing\n - \"/hea/*\" also matches nothing\n - \"/healthz/*\" matches all per-component health checks.\n\"*\" matches all non-resource urls. if it is present, it must be the only entry. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "protocol": { - "description": "protocol represents the IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", - "type": "string", - "enum": [ - "SCTP", - "TCP", - "UDP" - ] + "verbs": { + "description": "`verbs` is a list of matching verbs and may not be empty. \"*\" matches all verbs. If it is present, it must be the only entry. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" } }, "x-fabric8-info": { "Type": "nested", - "Group": "discovery.k8s.io", - "Version": "v1", - "Kind": "EndpointPort", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "NonResourcePolicyRule", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.discovery.v1.EndpointSlice": { - "description": "EndpointSlice represents a subset of the endpoints that implement a service. For a given service there may be multiple EndpointSlice objects, selected by labels, which must be joined to produce the full set of endpoints.", + "io.k8s.api.flowcontrol.v1beta2.PolicyRulesWithSubjects": { + "description": "PolicyRulesWithSubjects prescribes a test that applies to a request to an apiserver. The test considers the subject making the request, the verb being requested, and the resource to be acted upon. This PolicyRulesWithSubjects matches a request if and only if both (a) at least one member of subjects matches the request and (b) at least one member of resourceRules or nonResourceRules matches the request.", "type": "object", "required": [ - "addressType", - "endpoints" + "subjects" ], "properties": { - "addressType": { - "description": "addressType specifies the type of address carried by this EndpointSlice. All addresses in this slice must be the same type. This field is immutable after creation. The following address types are currently supported: * IPv4: Represents an IPv4 Address. * IPv6: Represents an IPv6 Address. * FQDN: Represents a Fully Qualified Domain Name.\n\nPossible enum values:\n - `\"FQDN\"` represents a FQDN.\n - `\"IPv4\"` represents an IPv4 Address.\n - `\"IPv6\"` represents an IPv6 Address.", - "type": "string", - "default": "", - "enum": [ - "FQDN", - "IPv4", - "IPv6" - ] + "nonResourceRules": { + "description": "`nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.NonResourcePolicyRule" + }, + "x-kubernetes-list-type": "atomic" }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "resourceRules": { + "description": "`resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.ResourcePolicyRule" + }, + "x-kubernetes-list-type": "atomic" }, - "endpoints": { - "description": "endpoints is a list of unique endpoints in this slice. Each slice may include a maximum of 1000 endpoints.", + "subjects": { + "description": "subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.discovery.v1.Endpoint" + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.Subject" }, "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "PolicyRulesWithSubjects", + "Scope": "Namespaced" + } + }, + "io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfiguration": { + "description": "PriorityLevelConfiguration represents the configuration of a priority level.", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard object's metadata.", + "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "ports": { - "description": "ports specifies the list of network ports exposed by each endpoint in this slice. Each port must have a unique name. When ports is empty, it indicates that there are no defined ports. When a port is defined with a nil port value, it indicates \"all ports\". Each slice may include a maximum of 100 ports.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointPort" - }, - "x-kubernetes-list-type": "atomic" + "spec": { + "description": "`spec` is the specification of the desired behavior of a \"request-priority\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfigurationSpec" + }, + "status": { + "description": "`status` is the current status of a \"request-priority\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfigurationStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "discovery.k8s.io", - "Version": "v1", - "Kind": "EndpointSlice", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "PriorityLevelConfiguration", + "Scope": "Clustered" + } + }, + "io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfigurationCondition": { + "description": "PriorityLevelConfigurationCondition defines the condition of priority level.", + "type": "object", + "properties": { + "lastTransitionTime": { + "description": "`lastTransitionTime` is the last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "`message` is a human-readable message indicating details about last transition.", + "type": "string" + }, + "reason": { + "description": "`reason` is a unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "`status` is the status of the condition. Can be True, False, Unknown. Required.", + "type": "string" + }, + "type": { + "description": "`type` is the type of the condition. Required.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "PriorityLevelConfigurationCondition", "Scope": "Namespaced" } }, - "io.k8s.api.discovery.v1.EndpointSliceList": { - "description": "EndpointSliceList represents a list of endpoint slices", + "io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfigurationList": { + "description": "PriorityLevelConfigurationList is a list of PriorityLevelConfiguration objects.", "type": "object", "required": [ "items" @@ -38084,11 +43663,11 @@ "type": "string" }, "items": { - "description": "items is the list of endpoint slices", + "description": "`items` is a list of request-priorities.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.discovery.v1.EndpointSlice" + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfiguration" } }, "kind": { @@ -38096,377 +43675,398 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata.", + "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "discovery.k8s.io", - "Version": "v1", - "Kind": "EndpointSliceList", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "PriorityLevelConfigurationList", "Scope": "Namespaced" } }, - "io.k8s.api.discovery.v1.ForZone": { - "description": "ForZone provides information about which zones should consume this endpoint.", + "io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfigurationReference": { + "description": "PriorityLevelConfigurationReference contains information that points to the \"request-priority\" being used.", "type": "object", "required": [ "name" ], "properties": { "name": { - "description": "name represents the name of the zone.", + "description": "`name` is the name of the priority level configuration being referenced Required.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "discovery.k8s.io", - "Version": "v1", - "Kind": "ForZone", - "Scope": "Namespaced" - } - }, - "io.k8s.api.discovery.v1beta1.Endpoint": { - "description": "Endpoint represents a single logical \"backend\" implementing a service.", - "type": "object", - "required": [ - "addresses" - ], - "properties": { - "addresses": { - "description": "addresses of this endpoint. The contents of this field are interpreted according to the corresponding EndpointSlice addressType field. Consumers must handle different types of addresses in the context of their own capabilities. This must contain at least one address but no more than 100. These are all assumed to be fungible and clients may choose to only use the first element. Refer to: https://issue.k8s.io/106267", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "conditions": { - "description": "conditions contains information about the current status of the endpoint.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointConditions" - }, - "hints": { - "description": "hints contains information associated with how an endpoint should be consumed.", - "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointHints" - }, - "hostname": { - "description": "hostname of this endpoint. This field may be used by consumers of endpoints to distinguish endpoints from each other (e.g. in DNS names). Multiple endpoints which use the same hostname should be considered fungible (e.g. multiple A values in DNS). Must be lowercase and pass DNS Label (RFC 1123) validation.", - "type": "string" - }, - "nodeName": { - "description": "nodeName represents the name of the Node hosting this endpoint. This can be used to determine endpoints local to a Node.", - "type": "string" - }, - "targetRef": { - "description": "targetRef is a reference to a Kubernetes object that represents this endpoint.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "topology": { - "description": "topology contains arbitrary topology information associated with the endpoint. These key/value pairs must conform with the label format. https://kubernetes.io/docs/concepts/overview/working-with-objects/labels Topology may include a maximum of 16 key/value pairs. This includes, but is not limited to the following well known keys: * kubernetes.io/hostname: the value indicates the hostname of the node\n where the endpoint is located. This should match the corresponding\n node label.\n* topology.kubernetes.io/zone: the value indicates the zone where the\n endpoint is located. This should match the corresponding node label.\n* topology.kubernetes.io/region: the value indicates the region where the\n endpoint is located. This should match the corresponding node label.\nThis field is deprecated and will be removed in future api versions.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "discovery.k8s.io", - "Version": "v1beta1", - "Kind": "Endpoint", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "PriorityLevelConfigurationReference", "Scope": "Namespaced" } }, - "io.k8s.api.discovery.v1beta1.EndpointConditions": { - "description": "EndpointConditions represents the current condition of an endpoint.", + "io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfigurationSpec": { + "description": "PriorityLevelConfigurationSpec specifies the configuration of a priority level.", "type": "object", + "required": [ + "type" + ], "properties": { - "ready": { - "description": "ready indicates that this endpoint is prepared to receive traffic, according to whatever system is managing the endpoint. A nil value indicates an unknown state. In most cases consumers should interpret this unknown state as ready. For compatibility reasons, ready should never be \"true\" for terminating endpoints.", - "type": "boolean" + "exempt": { + "description": "`exempt` specifies how requests are handled for an exempt priority level. This field MUST be empty if `type` is `\"Limited\"`. This field MAY be non-empty if `type` is `\"Exempt\"`. If empty and `type` is `\"Exempt\"` then the default values for `ExemptPriorityLevelConfiguration` apply.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.ExemptPriorityLevelConfiguration" }, - "serving": { - "description": "serving is identical to ready except that it is set regardless of the terminating state of endpoints. This condition should be set to true for a ready endpoint that is terminating. If nil, consumers should defer to the ready condition.", - "type": "boolean" + "limited": { + "description": "`limited` specifies how requests are handled for a Limited priority level. This field must be non-empty if and only if `type` is `\"Limited\"`.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.LimitedPriorityLevelConfiguration" }, - "terminating": { - "description": "terminating indicates that this endpoint is terminating. A nil value indicates an unknown state. Consumers should interpret this unknown state to mean that the endpoint is not terminating.", - "type": "boolean" + "type": { + "description": "`type` indicates whether this priority level is subject to limitation on request execution. A value of `\"Exempt\"` means that requests of this priority level are not subject to a limit (and thus are never queued) and do not detract from the capacity made available to other priority levels. A value of `\"Limited\"` means that (a) requests of this priority level _are_ subject to limits and (b) some of the server's limited capacity is made available exclusively to this priority level. Required.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "discovery.k8s.io", - "Version": "v1beta1", - "Kind": "EndpointConditions", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "PriorityLevelConfigurationSpec", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "exempt": "Exempt", + "limited": "Limited" + } + } + ] }, - "io.k8s.api.discovery.v1beta1.EndpointHints": { - "description": "EndpointHints provides hints describing how an endpoint should be consumed.", + "io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfigurationStatus": { + "description": "PriorityLevelConfigurationStatus represents the current state of a \"request-priority\".", "type": "object", "properties": { - "forZones": { - "description": "forZones indicates the zone(s) this endpoint should be consumed by to enable topology aware routing. May contain a maximum of 8 entries.", + "conditions": { + "description": "`conditions` is the current state of \"request-priority\".", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.ForZone" + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfigurationCondition" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", - "Group": "discovery.k8s.io", - "Version": "v1beta1", - "Kind": "EndpointHints", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "PriorityLevelConfigurationStatus", "Scope": "Namespaced" } }, - "io.k8s.api.discovery.v1beta1.EndpointPort": { - "description": "EndpointPort represents a Port used by an EndpointSlice", + "io.k8s.api.flowcontrol.v1beta2.QueuingConfiguration": { + "description": "QueuingConfiguration holds the configuration parameters for queuing", "type": "object", "properties": { - "appProtocol": { - "description": "appProtocol represents the application protocol for this port. This field follows standard Kubernetes label syntax. Un-prefixed names are reserved for IANA standard service names (as per RFC-6335 and https://www.iana.org/assignments/service-names). Non-standard protocols should use prefixed names such as mycompany.com/my-custom-protocol.", - "type": "string" - }, - "name": { - "description": "name represents the name of this port. All ports in an EndpointSlice must have a unique name. If the EndpointSlice is derived from a Kubernetes service, this corresponds to the Service.ports[].name. Name must either be an empty string or pass DNS_LABEL validation: * must be no more than 63 characters long. * must consist of lower case alphanumeric characters or '-'. * must start and end with an alphanumeric character. Default is empty string.", - "type": "string" + "handSize": { + "description": "`handSize` is a small positive number that configures the shuffle sharding of requests into queues. When enqueuing a request at this priority level the request's flow identifier (a string pair) is hashed and the hash value is used to shuffle the list of queues and deal a hand of the size specified here. The request is put into one of the shortest queues in that hand. `handSize` must be no larger than `queues`, and should be significantly smaller (so that a few heavy flows do not saturate most of the queues). See the user-facing documentation for more extensive guidance on setting this field. This field has a default value of 8.", + "type": "integer", + "format": "int32", + "default": 0 }, - "port": { - "description": "port represents the port number of the endpoint. If this is not specified, ports are not restricted and must be interpreted in the context of the specific consumer.", + "queueLengthLimit": { + "description": "`queueLengthLimit` is the maximum number of requests allowed to be waiting in a given queue of this priority level at a time; excess requests are rejected. This value must be positive. If not specified, it will be defaulted to 50.", "type": "integer", - "format": "int32" + "format": "int32", + "default": 0 }, - "protocol": { - "description": "protocol represents the IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", - "type": "string", - "enum": [ - "SCTP", - "TCP", - "UDP" - ] + "queues": { + "description": "`queues` is the number of queues for this priority level. The queues exist independently at each apiserver. The value must be positive. Setting it to 1 effectively precludes shufflesharding and thus makes the distinguisher method of associated flow schemas irrelevant. This field has a default value of 64.", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "discovery.k8s.io", - "Version": "v1beta1", - "Kind": "EndpointPort", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "QueuingConfiguration", "Scope": "Namespaced" } }, - "io.k8s.api.discovery.v1beta1.EndpointSlice": { - "description": "EndpointSlice represents a subset of the endpoints that implement a service. For a given service there may be multiple EndpointSlice objects, selected by labels, which must be joined to produce the full set of endpoints.", + "io.k8s.api.flowcontrol.v1beta2.ResourcePolicyRule": { + "description": "ResourcePolicyRule is a predicate that matches some resource requests, testing the request's verb and the target resource. A ResourcePolicyRule matches a resource request if and only if: (a) at least one member of verbs matches the request, (b) at least one member of apiGroups matches the request, (c) at least one member of resources matches the request, and (d) either (d1) the request does not specify a namespace (i.e., `Namespace==\"\"`) and clusterScope is true or (d2) the request specifies a namespace and least one member of namespaces matches the request's namespace.", "type": "object", "required": [ - "addressType", - "endpoints" + "verbs", + "apiGroups", + "resources" ], "properties": { - "addressType": { - "description": "addressType specifies the type of address carried by this EndpointSlice. All addresses in this slice must be the same type. This field is immutable after creation. The following address types are currently supported: * IPv4: Represents an IPv4 Address. * IPv6: Represents an IPv6 Address. * FQDN: Represents a Fully Qualified Domain Name.", - "type": "string", - "default": "" + "apiGroups": { + "description": "`apiGroups` is a list of matching API groups and may not be empty. \"*\" matches all API groups and, if present, must be the only entry. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "clusterScope": { + "description": "`clusterScope` indicates whether to match requests that do not specify a namespace (which happens either because the resource is not namespaced or the request targets all namespaces). If this field is omitted or false then the `namespaces` field must contain a non-empty list.", + "type": "boolean" }, - "endpoints": { - "description": "endpoints is a list of unique endpoints in this slice. Each slice may include a maximum of 1000 endpoints.", + "namespaces": { + "description": "`namespaces` is a list of target namespaces that restricts matches. A request that specifies a target namespace matches only if either (a) this list contains that target namespace or (b) this list contains \"*\". Note that \"*\" matches any specified namespace but does not match a request that _does not specify_ a namespace (see the `clusterScope` field for that). This list may be empty, but only if `clusterScope` is true.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.Endpoint" + "type": "string", + "default": "" }, - "x-kubernetes-list-type": "atomic" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "x-kubernetes-list-type": "set" }, - "metadata": { - "description": "Standard object's metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "resources": { + "description": "`resources` is a list of matching resources (i.e., lowercase and plural) with, if desired, subresource. For example, [ \"services\", \"nodes/status\" ]. This list may not be empty. \"*\" matches all resources and, if present, must be the only entry. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "ports": { - "description": "ports specifies the list of network ports exposed by each endpoint in this slice. Each port must have a unique name. When ports is empty, it indicates that there are no defined ports. When a port is defined with a nil port value, it indicates \"all ports\". Each slice may include a maximum of 100 ports.", + "verbs": { + "description": "`verbs` is a list of matching verbs and may not be empty. \"*\" matches all verbs and, if present, must be the only entry. Required.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointPort" + "type": "string", + "default": "" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-type": "set" } }, "x-fabric8-info": { - "Type": "object", - "Group": "discovery.k8s.io", - "Version": "v1beta1", - "Kind": "EndpointSlice", + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "ResourcePolicyRule", "Scope": "Namespaced" } }, - "io.k8s.api.discovery.v1beta1.EndpointSliceList": { - "description": "EndpointSliceList represents a list of endpoint slices", + "io.k8s.api.flowcontrol.v1beta2.ServiceAccountSubject": { + "description": "ServiceAccountSubject holds detailed information for service-account-kind subject.", "type": "object", "required": [ - "items" + "namespace", + "name" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "name": { + "description": "`name` is the name of matching ServiceAccount objects, or \"*\" to match regardless of name. Required.", + "type": "string", + "default": "" }, - "items": { - "description": "items is the list of endpoint slices", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.discovery.v1beta1.EndpointSlice" - } + "namespace": { + "description": "`namespace` is the namespace of matching ServiceAccount objects. Required.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "ServiceAccountSubject", + "Scope": "Namespaced" + } + }, + "io.k8s.api.flowcontrol.v1beta2.Subject": { + "description": "Subject matches the originator of a request, as identified by the request authentication system. There are three ways of matching an originator; by user, group, or service account.", + "type": "object", + "required": [ + "kind" + ], + "properties": { + "group": { + "description": "`group` matches based on user group name.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.GroupSubject" }, "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "description": "`kind` indicates which one of the other fields is non-empty. Required", + "type": "string", + "default": "" }, - "metadata": { - "description": "Standard list metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "serviceAccount": { + "description": "`serviceAccount` matches ServiceAccounts.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.ServiceAccountSubject" + }, + "user": { + "description": "`user` matches based on username.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.UserSubject" } }, "x-fabric8-info": { - "Type": "list", - "Group": "discovery.k8s.io", - "Version": "v1beta1", - "Kind": "EndpointSliceList", + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "Subject", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "kind", + "fields-to-discriminateBy": { + "group": "Group", + "serviceAccount": "ServiceAccount", + "user": "User" + } + } + ] }, - "io.k8s.api.discovery.v1beta1.ForZone": { - "description": "ForZone provides information about which zones should consume this endpoint.", + "io.k8s.api.flowcontrol.v1beta2.UserSubject": { + "description": "UserSubject holds detailed information for user-kind subject.", "type": "object", "required": [ "name" ], "properties": { "name": { - "description": "name represents the name of the zone.", + "description": "`name` is the username that matches, or \"*\" to match all usernames. Required.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "discovery.k8s.io", - "Version": "v1beta1", - "Kind": "ForZone", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta2", + "Kind": "UserSubject", "Scope": "Namespaced" } }, - "io.k8s.api.events.v1.Event": { - "description": "Event is a report of an event somewhere in the cluster. It generally denotes some state change in the system. Events have a limited retention time and triggers and messages may evolve with time. Event consumers should not rely on the timing of an event with a given Reason reflecting a consistent underlying trigger, or the continued existence of events with that Reason. Events should be treated as informative, best-effort, supplemental data.", + "io.k8s.api.flowcontrol.v1beta3.ExemptPriorityLevelConfiguration": { + "description": "ExemptPriorityLevelConfiguration describes the configurable aspects of the handling of exempt requests. In the mandatory exempt configuration object the values in the fields here can be modified by authorized users, unlike the rest of the `spec`.", + "type": "object", + "properties": { + "lendablePercent": { + "description": "`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. This value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows.\n\nLendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 )", + "type": "integer", + "format": "int32" + }, + "nominalConcurrencyShares": { + "description": "`nominalConcurrencyShares` (NCS) contributes to the computation of the NominalConcurrencyLimit (NominalCL) of this level. This is the number of execution seats nominally reserved for this priority level. This DOES NOT limit the dispatching from this priority level but affects the other priority levels through the borrowing mechanism. The server's concurrency limit (ServerCL) is divided among all the priority levels in proportion to their NCS values:\n\nNominalCL(i) = ceil( ServerCL * NCS(i) / sum_ncs ) sum_ncs = sum[priority level k] NCS(k)\n\nBigger numbers mean a larger nominal concurrency limit, at the expense of every other priority level. This field has a default value of zero.", + "type": "integer", + "format": "int32" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "ExemptPriorityLevelConfiguration", + "Scope": "Namespaced" + } + }, + "io.k8s.api.flowcontrol.v1beta3.FlowDistinguisherMethod": { + "description": "FlowDistinguisherMethod specifies the method of a flow distinguisher.", "type": "object", "required": [ - "eventTime" + "type" ], "properties": { - "action": { - "description": "action is what action was taken/failed regarding to the regarding object. It is machine-readable. This field cannot be empty for new Events and it can have at most 128 characters.", - "type": "string" - }, + "type": { + "description": "`type` is the type of flow distinguisher method The supported types are \"ByUser\" and \"ByNamespace\". Required.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "FlowDistinguisherMethod", + "Scope": "Namespaced" + } + }, + "io.k8s.api.flowcontrol.v1beta3.FlowSchema": { + "description": "FlowSchema defines the schema of a group of flows. Note that a flow is made up of a set of inbound API requests with similar attributes and is identified by a pair of strings: the name of the FlowSchema and a \"flow distinguisher\".", + "type": "object", + "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "deprecatedCount": { - "description": "deprecatedCount is the deprecated field assuring backward compatibility with core.v1 Event type.", - "type": "integer", - "format": "int32" - }, - "deprecatedFirstTimestamp": { - "description": "deprecatedFirstTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "deprecatedLastTimestamp": { - "description": "deprecatedLastTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "deprecatedSource": { - "description": "deprecatedSource is the deprecated field assuring backward compatibility with core.v1 Event type.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EventSource" - }, - "eventTime": { - "description": "eventTime is the time when this Event was first observed. It is required.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "note": { - "description": "note is a human-readable description of the status of this operation. Maximal length of the note is 1kB, but libraries should be prepared to handle values up to 64kB.", - "type": "string" - }, - "reason": { - "description": "reason is why the action was taken. It is human-readable. This field cannot be empty for new Events and it can have at most 128 characters.", - "type": "string" - }, - "regarding": { - "description": "regarding contains the object this Event is about. In most cases it's an Object reporting controller implements, e.g. ReplicaSetController implements ReplicaSets and this event is emitted because it acts on some changes in a ReplicaSet object.", + "spec": { + "description": "`spec` is the specification of the desired behavior of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.FlowSchemaSpec" }, - "related": { - "description": "related is the optional secondary object for more complex actions. E.g. when regarding object triggers a creation or deletion of related object.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "status": { + "description": "`status` is the current status of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.FlowSchemaStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "FlowSchema", + "Scope": "Clustered" + } + }, + "io.k8s.api.flowcontrol.v1beta3.FlowSchemaCondition": { + "description": "FlowSchemaCondition describes conditions for a FlowSchema.", + "type": "object", + "properties": { + "lastTransitionTime": { + "description": "`lastTransitionTime` is the last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "reportingController": { - "description": "reportingController is the name of the controller that emitted this Event, e.g. `kubernetes.io/kubelet`. This field cannot be empty for new Events.", + "message": { + "description": "`message` is a human-readable message indicating details about last transition.", "type": "string" }, - "reportingInstance": { - "description": "reportingInstance is the ID of the controller instance, e.g. `kubelet-xyzf`. This field cannot be empty for new Events and it can have at most 128 characters.", + "reason": { + "description": "`reason` is a unique, one-word, CamelCase reason for the condition's last transition.", "type": "string" }, - "series": { - "description": "series is data about the Event series this event represents or nil if it's a singleton Event.", - "$ref": "#/definitions/io.k8s.api.events.v1.EventSeries" + "status": { + "description": "`status` is the status of the condition. Can be True, False, Unknown. Required.", + "type": "string" }, "type": { - "description": "type is the type of this event (Normal, Warning), new types could be added in the future. It is machine-readable. This field cannot be empty for new Events.", + "description": "`type` is the type of the condition. Required.", "type": "string" } }, "x-fabric8-info": { - "Type": "object", - "Group": "events.k8s.io", - "Version": "v1", - "Kind": "Event", + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "FlowSchemaCondition", "Scope": "Namespaced" } }, - "io.k8s.api.events.v1.EventList": { - "description": "EventList is a list of Event objects.", + "io.k8s.api.flowcontrol.v1beta3.FlowSchemaList": { + "description": "FlowSchemaList is a list of FlowSchema objects.", "type": "object", "required": [ "items" @@ -38477,11 +44077,11 @@ "type": "string" }, "items": { - "description": "items is a list of schema objects.", + "description": "`items` is a list of FlowSchemas.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.events.v1.Event" + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.FlowSchema" } }, "kind": { @@ -38489,200 +44089,254 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "`metadata` is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "events.k8s.io", - "Version": "v1", - "Kind": "EventList", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "FlowSchemaList", "Scope": "Namespaced" } }, - "io.k8s.api.events.v1.EventSeries": { - "description": "EventSeries contain information on series of events, i.e. thing that was/is happening continuously for some time. How often to update the EventSeries is up to the event reporters. The default event reporter in \"k8s.io/client-go/tools/events/event_broadcaster.go\" shows how this struct is updated on heartbeats and can guide customized reporter implementations.", + "io.k8s.api.flowcontrol.v1beta3.FlowSchemaSpec": { + "description": "FlowSchemaSpec describes how the FlowSchema's specification looks like.", "type": "object", "required": [ - "count", - "lastObservedTime" + "priorityLevelConfiguration" ], "properties": { - "count": { - "description": "count is the number of occurrences in this series up to the last heartbeat time.", + "distinguisherMethod": { + "description": "`distinguisherMethod` defines how to compute the flow distinguisher for requests that match this schema. `nil` specifies that the distinguisher is disabled and thus will always be the empty string.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.FlowDistinguisherMethod" + }, + "matchingPrecedence": { + "description": "`matchingPrecedence` is used to choose among the FlowSchemas that match a given request. The chosen FlowSchema is among those with the numerically lowest (which we take to be logically highest) MatchingPrecedence. Each MatchingPrecedence value must be ranged in [1,10000]. Note that if the precedence is not specified, it will be set to 1000 as default.", "type": "integer", "format": "int32", "default": 0 }, - "lastObservedTime": { - "description": "lastObservedTime is the time when last Event from the series was seen before last heartbeat.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" + "priorityLevelConfiguration": { + "description": "`priorityLevelConfiguration` should reference a PriorityLevelConfiguration in the cluster. If the reference cannot be resolved, the FlowSchema will be ignored and marked as invalid in its status. Required.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfigurationReference" + }, + "rules": { + "description": "`rules` describes which requests will match this flow schema. This FlowSchema matches a request if and only if at least one member of rules matches the request. if it is an empty slice, there will be no requests matching the FlowSchema.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.PolicyRulesWithSubjects" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "FlowSchemaSpec", + "Scope": "Namespaced" + } + }, + "io.k8s.api.flowcontrol.v1beta3.FlowSchemaStatus": { + "description": "FlowSchemaStatus represents the current state of a FlowSchema.", + "type": "object", + "properties": { + "conditions": { + "description": "`conditions` is a list of the current states of FlowSchema.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.FlowSchemaCondition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "FlowSchemaStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.flowcontrol.v1beta3.GroupSubject": { + "description": "GroupSubject holds detailed information for group-kind subject.", + "type": "object", + "required": [ + "name" + ], + "properties": { + "name": { + "description": "name is the user group that matches, or \"*\" to match all user groups. See https://github.com/kubernetes/apiserver/blob/master/pkg/authentication/user/user.go for some well-known group names. Required.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "GroupSubject", + "Scope": "Namespaced" + } + }, + "io.k8s.api.flowcontrol.v1beta3.LimitResponse": { + "description": "LimitResponse defines how to handle requests that can not be executed right now.", + "type": "object", + "required": [ + "type" + ], + "properties": { + "queuing": { + "description": "`queuing` holds the configuration parameters for queuing. This field may be non-empty only if `type` is `\"Queue\"`.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.QueuingConfiguration" + }, + "type": { + "description": "`type` is \"Queue\" or \"Reject\". \"Queue\" means that requests that can not be executed upon arrival are held in a queue until they can be executed or a queuing limit is reached. \"Reject\" means that requests that can not be executed upon arrival are rejected. Required.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "events.k8s.io", - "Version": "v1", - "Kind": "EventSeries", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "LimitResponse", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "queuing": "Queuing" + } + } + ] }, - "io.k8s.api.events.v1beta1.Event": { - "description": "Event is a report of an event somewhere in the cluster. It generally denotes some state change in the system. Events have a limited retention time and triggers and messages may evolve with time. Event consumers should not rely on the timing of an event with a given Reason reflecting a consistent underlying trigger, or the continued existence of events with that Reason. Events should be treated as informative, best-effort, supplemental data.", + "io.k8s.api.flowcontrol.v1beta3.LimitedPriorityLevelConfiguration": { + "description": "LimitedPriorityLevelConfiguration specifies how to handle requests that are subject to limits. It addresses two issues:\n - How are requests for this priority level limited?\n - What should be done with requests that exceed the limit?", "type": "object", - "required": [ - "eventTime" - ], "properties": { - "action": { - "description": "action is what action was taken/failed regarding to the regarding object. It is machine-readable. This field can have at most 128 characters.", - "type": "string" - }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "deprecatedCount": { - "description": "deprecatedCount is the deprecated field assuring backward compatibility with core.v1 Event type.", + "borrowingLimitPercent": { + "description": "`borrowingLimitPercent`, if present, configures a limit on how many seats this priority level can borrow from other priority levels. The limit is known as this level's BorrowingConcurrencyLimit (BorrowingCL) and is a limit on the total number of seats that this level may borrow at any one time. This field holds the ratio of that limit to the level's nominal concurrency limit. When this field is non-nil, it must hold a non-negative integer and the limit is calculated as follows.\n\nBorrowingCL(i) = round( NominalCL(i) * borrowingLimitPercent(i)/100.0 )\n\nThe value of this field can be more than 100, implying that this priority level can borrow a number of seats that is greater than its own nominal concurrency limit (NominalCL). When this field is left `nil`, the limit is effectively infinite.", "type": "integer", "format": "int32" }, - "deprecatedFirstTimestamp": { - "description": "deprecatedFirstTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "deprecatedLastTimestamp": { - "description": "deprecatedLastTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "deprecatedSource": { - "description": "deprecatedSource is the deprecated field assuring backward compatibility with core.v1 Event type.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EventSource" - }, - "eventTime": { - "description": "eventTime is the time when this Event was first observed. It is required.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "note": { - "description": "note is a human-readable description of the status of this operation. Maximal length of the note is 1kB, but libraries should be prepared to handle values up to 64kB.", - "type": "string" - }, - "reason": { - "description": "reason is why the action was taken. It is human-readable. This field can have at most 128 characters.", - "type": "string" + "lendablePercent": { + "description": "`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. The value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows.\n\nLendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 )", + "type": "integer", + "format": "int32" }, - "regarding": { - "description": "regarding contains the object this Event is about. In most cases it's an Object reporting controller implements, e.g. ReplicaSetController implements ReplicaSets and this event is emitted because it acts on some changes in a ReplicaSet object.", + "limitResponse": { + "description": "`limitResponse` indicates what to do with requests that can not be executed right now", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "related": { - "description": "related is the optional secondary object for more complex actions. E.g. when regarding object triggers a creation or deletion of related object.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "reportingController": { - "description": "reportingController is the name of the controller that emitted this Event, e.g. `kubernetes.io/kubelet`. This field cannot be empty for new Events.", - "type": "string" - }, - "reportingInstance": { - "description": "reportingInstance is the ID of the controller instance, e.g. `kubelet-xyzf`. This field cannot be empty for new Events and it can have at most 128 characters.", - "type": "string" - }, - "series": { - "description": "series is data about the Event series this event represents or nil if it's a singleton Event.", - "$ref": "#/definitions/io.k8s.api.events.v1beta1.EventSeries" + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.LimitResponse" }, - "type": { - "description": "type is the type of this event (Normal, Warning), new types could be added in the future. It is machine-readable.", - "type": "string" + "nominalConcurrencyShares": { + "description": "`nominalConcurrencyShares` (NCS) contributes to the computation of the NominalConcurrencyLimit (NominalCL) of this level. This is the number of execution seats available at this priority level. This is used both for requests dispatched from this priority level as well as requests dispatched from other priority levels borrowing seats from this level. The server's concurrency limit (ServerCL) is divided among the Limited priority levels in proportion to their NCS values:\n\nNominalCL(i) = ceil( ServerCL * NCS(i) / sum_ncs ) sum_ncs = sum[priority level k] NCS(k)\n\nBigger numbers mean a larger nominal concurrency limit, at the expense of every other priority level. This field has a default value of 30.", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { - "Type": "object", - "Group": "events.k8s.io", - "Version": "v1beta1", - "Kind": "Event", + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "LimitedPriorityLevelConfiguration", "Scope": "Namespaced" } }, - "io.k8s.api.events.v1beta1.EventList": { - "description": "EventList is a list of Event objects.", + "io.k8s.api.flowcontrol.v1beta3.NonResourcePolicyRule": { + "description": "NonResourcePolicyRule is a predicate that matches non-resource requests according to their verb and the target non-resource URL. A NonResourcePolicyRule matches a request if and only if both (a) at least one member of verbs matches the request and (b) at least one member of nonResourceURLs matches the request.", "type": "object", "required": [ - "items" + "verbs", + "nonResourceURLs" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a list of schema objects.", + "nonResourceURLs": { + "description": "`nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example:\n - \"/healthz\" is legal\n - \"/hea*\" is illegal\n - \"/hea\" is legal but matches nothing\n - \"/hea/*\" also matches nothing\n - \"/healthz/*\" matches all per-component health checks.\n\"*\" matches all non-resource urls. if it is present, it must be the only entry. Required.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.events.v1beta1.Event" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "verbs": { + "description": "`verbs` is a list of matching verbs and may not be empty. \"*\" matches all verbs. If it is present, it must be the only entry. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" } }, "x-fabric8-info": { - "Type": "list", - "Group": "events.k8s.io", - "Version": "v1beta1", - "Kind": "EventList", + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "NonResourcePolicyRule", "Scope": "Namespaced" } }, - "io.k8s.api.events.v1beta1.EventSeries": { - "description": "EventSeries contain information on series of events, i.e. thing that was/is happening continuously for some time.", + "io.k8s.api.flowcontrol.v1beta3.PolicyRulesWithSubjects": { + "description": "PolicyRulesWithSubjects prescribes a test that applies to a request to an apiserver. The test considers the subject making the request, the verb being requested, and the resource to be acted upon. This PolicyRulesWithSubjects matches a request if and only if both (a) at least one member of subjects matches the request and (b) at least one member of resourceRules or nonResourceRules matches the request.", "type": "object", "required": [ - "count", - "lastObservedTime" + "subjects" ], "properties": { - "count": { - "description": "count is the number of occurrences in this series up to the last heartbeat time.", - "type": "integer", - "format": "int32", - "default": 0 + "nonResourceRules": { + "description": "`nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.NonResourcePolicyRule" + }, + "x-kubernetes-list-type": "atomic" }, - "lastObservedTime": { - "description": "lastObservedTime is the time when last Event from the series was seen before last heartbeat.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime" + "resourceRules": { + "description": "`resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.ResourcePolicyRule" + }, + "x-kubernetes-list-type": "atomic" + }, + "subjects": { + "description": "subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.Subject" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "events.k8s.io", - "Version": "v1beta1", - "Kind": "EventSeries", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "PolicyRulesWithSubjects", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.DaemonSet": { - "description": "DEPRECATED - This group version of DaemonSet is deprecated by apps/v1beta2/DaemonSet. See the release notes for more information. DaemonSet represents the configuration of a daemon set.", + "io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfiguration": { + "description": "PriorityLevelConfiguration represents the configuration of a priority level.", "type": "object", "properties": { "apiVersion": { @@ -38694,70 +44348,64 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "The desired behavior of this daemon set. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "`spec` is the specification of the desired behavior of a \"request-priority\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.DaemonSetSpec" + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfigurationSpec" }, "status": { - "description": "The current status of this daemon set. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "`status` is the current status of a \"request-priority\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.DaemonSetStatus" + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfigurationStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "", - "Version": "v1beta1", - "Kind": "DaemonSet", - "Scope": "Namespaced" + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "PriorityLevelConfiguration", + "Scope": "Clustered" } }, - "io.k8s.api.extensions.v1beta1.DaemonSetCondition": { - "description": "DaemonSetCondition describes the state of a DaemonSet at a certain point.", + "io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfigurationCondition": { + "description": "PriorityLevelConfigurationCondition defines the condition of priority level.", "type": "object", - "required": [ - "type", - "status" - ], "properties": { "lastTransitionTime": { - "description": "Last time the condition transitioned from one status to another.", + "description": "`lastTransitionTime` is the last time the condition transitioned from one status to another.", "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, "message": { - "description": "A human readable message indicating details about the transition.", + "description": "`message` is a human-readable message indicating details about last transition.", "type": "string" }, "reason": { - "description": "The reason for the condition's last transition.", + "description": "`reason` is a unique, one-word, CamelCase reason for the condition's last transition.", "type": "string" }, "status": { - "description": "Status of the condition, one of True, False, Unknown.", - "type": "string", - "default": "" + "description": "`status` is the status of the condition. Can be True, False, Unknown. Required.", + "type": "string" }, "type": { - "description": "Type of DaemonSet condition.", - "type": "string", - "default": "" + "description": "`type` is the type of the condition. Required.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "DaemonSetCondition", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "PriorityLevelConfigurationCondition", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.DaemonSetList": { - "description": "DaemonSetList is a collection of daemon sets.", + "io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfigurationList": { + "description": "PriorityLevelConfigurationList is a list of PriorityLevelConfiguration objects.", "type": "object", "required": [ "items" @@ -38768,11 +44416,11 @@ "type": "string" }, "items": { - "description": "A list of daemon sets.", + "description": "`items` is a list of request-priorities.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.DaemonSet" + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfiguration" } }, "kind": { @@ -38780,85 +44428,88 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "", - "Version": "v1beta1", - "Kind": "DaemonSetList", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "PriorityLevelConfigurationList", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.DaemonSetSpec": { - "description": "DaemonSetSpec is the specification of a daemon set.", + "io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfigurationReference": { + "description": "PriorityLevelConfigurationReference contains information that points to the \"request-priority\" being used.", "type": "object", "required": [ - "template" + "name" ], "properties": { - "minReadySeconds": { - "description": "The minimum number of seconds for which a newly created DaemonSet pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready).", - "type": "integer", - "format": "int32" - }, - "revisionHistoryLimit": { - "description": "The number of old history to retain to allow rollback. This is a pointer to distinguish between explicit zero and not specified. Defaults to 10.", - "type": "integer", - "format": "int32" - }, - "selector": { - "description": "A label query over pods that are managed by the daemon set. Must match in order to be controlled. If empty, defaulted to labels on Pod template. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "template": { - "description": "An object that describes the pod that will be created. The DaemonSet will create exactly one copy of this pod on every node that matches the template's node selector (or on every node if no node selector is specified). More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" - }, - "templateGeneration": { - "description": "DEPRECATED. A sequence number representing a specific generation of the template. Populated by the system. It can be set only during the creation.", - "type": "integer", - "format": "int64" - }, - "updateStrategy": { - "description": "An update strategy to replace existing DaemonSet pods with new pods.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.DaemonSetUpdateStrategy" + "name": { + "description": "`name` is the name of the priority level configuration being referenced Required.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "DaemonSetSpec", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "PriorityLevelConfigurationReference", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.DaemonSetStatus": { - "description": "DaemonSetStatus represents the current status of a daemon set.", + "io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfigurationSpec": { + "description": "PriorityLevelConfigurationSpec specifies the configuration of a priority level.", "type": "object", "required": [ - "currentNumberScheduled", - "numberMisscheduled", - "desiredNumberScheduled", - "numberReady" + "type" ], "properties": { - "collisionCount": { - "description": "Count of hash collisions for the DaemonSet. The DaemonSet controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ControllerRevision.", - "type": "integer", - "format": "int32" + "exempt": { + "description": "`exempt` specifies how requests are handled for an exempt priority level. This field MUST be empty if `type` is `\"Limited\"`. This field MAY be non-empty if `type` is `\"Exempt\"`. If empty and `type` is `\"Exempt\"` then the default values for `ExemptPriorityLevelConfiguration` apply.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.ExemptPriorityLevelConfiguration" + }, + "limited": { + "description": "`limited` specifies how requests are handled for a Limited priority level. This field must be non-empty if and only if `type` is `\"Limited\"`.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.LimitedPriorityLevelConfiguration" }, + "type": { + "description": "`type` indicates whether this priority level is subject to limitation on request execution. A value of `\"Exempt\"` means that requests of this priority level are not subject to a limit (and thus are never queued) and do not detract from the capacity made available to other priority levels. A value of `\"Limited\"` means that (a) requests of this priority level _are_ subject to limits and (b) some of the server's limited capacity is made available exclusively to this priority level. Required.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "PriorityLevelConfigurationSpec", + "Scope": "Namespaced" + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "exempt": "Exempt", + "limited": "Limited" + } + } + ] + }, + "io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfigurationStatus": { + "description": "PriorityLevelConfigurationStatus represents the current state of a \"request-priority\".", + "type": "object", + "properties": { "conditions": { - "description": "Represents the latest available observations of a DaemonSet's current state.", + "description": "`conditions` is the current state of \"request-priority\".", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.DaemonSetCondition" + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfigurationCondition" }, "x-kubernetes-list-map-keys": [ "type" @@ -38866,203 +44517,201 @@ "x-kubernetes-list-type": "map", "x-kubernetes-patch-merge-key": "type", "x-kubernetes-patch-strategy": "merge" - }, - "currentNumberScheduled": { - "description": "The number of nodes that are running at least 1 daemon pod and are supposed to run the daemon pod. More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/", - "type": "integer", - "format": "int32", - "default": 0 - }, - "desiredNumberScheduled": { - "description": "The total number of nodes that should be running the daemon pod (including nodes correctly running the daemon pod). More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/", + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "PriorityLevelConfigurationStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.flowcontrol.v1beta3.QueuingConfiguration": { + "description": "QueuingConfiguration holds the configuration parameters for queuing", + "type": "object", + "properties": { + "handSize": { + "description": "`handSize` is a small positive number that configures the shuffle sharding of requests into queues. When enqueuing a request at this priority level the request's flow identifier (a string pair) is hashed and the hash value is used to shuffle the list of queues and deal a hand of the size specified here. The request is put into one of the shortest queues in that hand. `handSize` must be no larger than `queues`, and should be significantly smaller (so that a few heavy flows do not saturate most of the queues). See the user-facing documentation for more extensive guidance on setting this field. This field has a default value of 8.", "type": "integer", "format": "int32", "default": 0 }, - "numberAvailable": { - "description": "The number of nodes that should be running the daemon pod and have one or more of the daemon pod running and available (ready for at least spec.minReadySeconds)", - "type": "integer", - "format": "int32" - }, - "numberMisscheduled": { - "description": "The number of nodes that are running the daemon pod, but are not supposed to run the daemon pod. More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/", + "queueLengthLimit": { + "description": "`queueLengthLimit` is the maximum number of requests allowed to be waiting in a given queue of this priority level at a time; excess requests are rejected. This value must be positive. If not specified, it will be defaulted to 50.", "type": "integer", "format": "int32", "default": 0 }, - "numberReady": { - "description": "The number of nodes that should be running the daemon pod and have one or more of the daemon pod running and ready.", + "queues": { + "description": "`queues` is the number of queues for this priority level. The queues exist independently at each apiserver. The value must be positive. Setting it to 1 effectively precludes shufflesharding and thus makes the distinguisher method of associated flow schemas irrelevant. This field has a default value of 64.", "type": "integer", "format": "int32", "default": 0 - }, - "numberUnavailable": { - "description": "The number of nodes that should be running the daemon pod and have none of the daemon pod running and available (ready for at least spec.minReadySeconds)", - "type": "integer", - "format": "int32" - }, - "observedGeneration": { - "description": "The most recent generation observed by the daemon set controller.", - "type": "integer", - "format": "int64" - }, - "updatedNumberScheduled": { - "description": "The total number of nodes that are running updated daemon pod", - "type": "integer", - "format": "int32" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "DaemonSetStatus", - "Scope": "Namespaced" - } - }, - "io.k8s.api.extensions.v1beta1.DaemonSetUpdateStrategy": { - "description": "DaemonSetUpdateStrategy indicates the strategy that the DaemonSet controller will use to perform updates. It includes any additional parameters necessary to perform the update for the indicated strategy.", - "type": "object", - "properties": { - "rollingUpdate": { - "description": "Rolling update config params. Present only if type = \"RollingUpdate\".", - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.RollingUpdateDaemonSet" - }, - "type": { - "description": "Type of daemon set update. Can be \"RollingUpdate\" or \"OnDelete\". Default is OnDelete.", - "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "DaemonSetUpdateStrategy", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "QueuingConfiguration", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.Deployment": { - "description": "DEPRECATED - This group version of Deployment is deprecated by apps/v1beta2/Deployment. See the release notes for more information. Deployment enables declarative updates for Pods and ReplicaSets.", + "io.k8s.api.flowcontrol.v1beta3.ResourcePolicyRule": { + "description": "ResourcePolicyRule is a predicate that matches some resource requests, testing the request's verb and the target resource. A ResourcePolicyRule matches a resource request if and only if: (a) at least one member of verbs matches the request, (b) at least one member of apiGroups matches the request, (c) at least one member of resources matches the request, and (d) either (d1) the request does not specify a namespace (i.e., `Namespace==\"\"`) and clusterScope is true or (d2) the request specifies a namespace and least one member of namespaces matches the request's namespace.", "type": "object", + "required": [ + "verbs", + "apiGroups", + "resources" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "apiGroups": { + "description": "`apiGroups` is a list of matching API groups and may not be empty. \"*\" matches all API groups and, if present, must be the only entry. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "clusterScope": { + "description": "`clusterScope` indicates whether to match requests that do not specify a namespace (which happens either because the resource is not namespaced or the request targets all namespaces). If this field is omitted or false then the `namespaces` field must contain a non-empty list.", + "type": "boolean" }, - "metadata": { - "description": "Standard object metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "namespaces": { + "description": "`namespaces` is a list of target namespaces that restricts matches. A request that specifies a target namespace matches only if either (a) this list contains that target namespace or (b) this list contains \"*\". Note that \"*\" matches any specified namespace but does not match a request that _does not specify_ a namespace (see the `clusterScope` field for that). This list may be empty, but only if `clusterScope` is true.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "spec": { - "description": "Specification of the desired behavior of the Deployment.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.DeploymentSpec" + "resources": { + "description": "`resources` is a list of matching resources (i.e., lowercase and plural) with, if desired, subresource. For example, [ \"services\", \"nodes/status\" ]. This list may not be empty. \"*\" matches all resources and, if present, must be the only entry. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "status": { - "description": "Most recently observed status of the Deployment.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.DeploymentStatus" + "verbs": { + "description": "`verbs` is a list of matching verbs and may not be empty. \"*\" matches all verbs and, if present, must be the only entry. Required.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" } }, "x-fabric8-info": { - "Type": "object", - "Group": "", - "Version": "v1beta1", - "Kind": "Deployment", + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "ResourcePolicyRule", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.DeploymentCondition": { - "description": "DeploymentCondition describes the state of a deployment at a certain point.", + "io.k8s.api.flowcontrol.v1beta3.ServiceAccountSubject": { + "description": "ServiceAccountSubject holds detailed information for service-account-kind subject.", "type": "object", "required": [ - "type", - "status" + "namespace", + "name" ], "properties": { - "lastTransitionTime": { - "description": "Last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "lastUpdateTime": { - "description": "The last time this condition was updated.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "A human readable message indicating details about the transition.", - "type": "string" - }, - "reason": { - "description": "The reason for the condition's last transition.", - "type": "string" - }, - "status": { - "description": "Status of the condition, one of True, False, Unknown.", + "name": { + "description": "`name` is the name of matching ServiceAccount objects, or \"*\" to match regardless of name. Required.", "type": "string", "default": "" }, - "type": { - "description": "Type of deployment condition.", + "namespace": { + "description": "`namespace` is the namespace of matching ServiceAccount objects. Required.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "DeploymentCondition", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "ServiceAccountSubject", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.DeploymentList": { - "description": "DeploymentList is a list of Deployments.", + "io.k8s.api.flowcontrol.v1beta3.Subject": { + "description": "Subject matches the originator of a request, as identified by the request authentication system. There are three ways of matching an originator; by user, group, or service account.", "type": "object", "required": [ - "items" + "kind" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "Items is the list of Deployments.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.Deployment" - } + "group": { + "description": "`group` matches based on user group name.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.GroupSubject" }, "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "description": "`kind` indicates which one of the other fields is non-empty. Required", + "type": "string", + "default": "" }, - "metadata": { - "description": "Standard list metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "serviceAccount": { + "description": "`serviceAccount` matches ServiceAccounts.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.ServiceAccountSubject" + }, + "user": { + "description": "`user` matches based on username.", + "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.UserSubject" } }, "x-fabric8-info": { - "Type": "list", - "Group": "", - "Version": "v1beta1", - "Kind": "DeploymentList", + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "Subject", + "Scope": "Namespaced" + }, + "x-kubernetes-unions": [ + { + "discriminator": "kind", + "fields-to-discriminateBy": { + "group": "Group", + "serviceAccount": "ServiceAccount", + "user": "User" + } + } + ] + }, + "io.k8s.api.flowcontrol.v1beta3.UserSubject": { + "description": "UserSubject holds detailed information for user-kind subject.", + "type": "object", + "required": [ + "name" + ], + "properties": { + "name": { + "description": "`name` is the username that matches, or \"*\" to match all usernames. Required.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "flowcontrol.apiserver.k8s.io", + "Version": "v1beta3", + "Kind": "UserSubject", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.DeploymentRollback": { - "description": "DEPRECATED. DeploymentRollback stores the information required to rollback a deployment.", + "io.k8s.api.imagepolicy.v1alpha1.ImageReview": { + "description": "ImageReview checks if the set of images in a pod are allowed.", "type": "object", "required": [ - "name", - "rollbackTo" + "spec" ], "properties": { "apiVersion": { @@ -39073,205 +44722,150 @@ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "name": { - "description": "Required: This must match the Name of a deployment.", - "type": "string", - "default": "" + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "rollbackTo": { - "description": "The config of this deployment rollback.", + "spec": { + "description": "Spec holds information about the pod being evaluated", "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.RollbackConfig" + "$ref": "#/definitions/io.k8s.api.imagepolicy.v1alpha1.ImageReviewSpec" }, - "updatedAnnotations": { - "description": "The annotations to be updated to a deployment", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } + "status": { + "description": "Status is filled in by the backend and indicates whether the pod should be allowed.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.imagepolicy.v1alpha1.ImageReviewStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "", - "Version": "v1beta1", - "Kind": "DeploymentRollback", - "Scope": "Namespaced" + "Group": "imagepolicy.k8s.io", + "Version": "v1alpha1", + "Kind": "ImageReview", + "Scope": "Clustered" } }, - "io.k8s.api.extensions.v1beta1.DeploymentSpec": { - "description": "DeploymentSpec is the specification of the desired behavior of the Deployment.", + "io.k8s.api.imagepolicy.v1alpha1.ImageReviewContainerSpec": { + "description": "ImageReviewContainerSpec is a description of a container within the pod creation request.", "type": "object", - "required": [ - "template" - ], "properties": { - "minReadySeconds": { - "description": "Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", - "type": "integer", - "format": "int32" - }, - "paused": { - "description": "Indicates that the deployment is paused and will not be processed by the deployment controller.", - "type": "boolean" - }, - "progressDeadlineSeconds": { - "description": "The maximum time in seconds for a deployment to make progress before it is considered to be failed. The deployment controller will continue to process failed deployments and a condition with a ProgressDeadlineExceeded reason will be surfaced in the deployment status. Note that progress will not be estimated during the time a deployment is paused. This is set to the max value of int32 (i.e. 2147483647) by default, which means \"no deadline\".", - "type": "integer", - "format": "int32" - }, - "replicas": { - "description": "Number of desired pods. This is a pointer to distinguish between explicit zero and not specified. Defaults to 1.", - "type": "integer", - "format": "int32" - }, - "revisionHistoryLimit": { - "description": "The number of old ReplicaSets to retain to allow rollback. This is a pointer to distinguish between explicit zero and not specified. This is set to the max value of int32 (i.e. 2147483647) by default, which means \"retaining all old ReplicaSets\".", - "type": "integer", - "format": "int32" - }, - "rollbackTo": { - "description": "DEPRECATED. The config this deployment is rolling back to. Will be cleared after rollback is done.", - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.RollbackConfig" - }, - "selector": { - "description": "Label selector for pods. Existing ReplicaSets whose pods are selected by this will be the ones affected by this deployment.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "strategy": { - "description": "The deployment strategy to use to replace existing pods with new ones.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.DeploymentStrategy", - "x-kubernetes-patch-strategy": "retainKeys" - }, - "template": { - "description": "Template describes the pods that will be created.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" + "image": { + "description": "This can be in the form image:tag or image@SHA:012345679abcdef.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "DeploymentSpec", + "Group": "imagepolicy.k8s.io", + "Version": "v1alpha1", + "Kind": "ImageReviewContainerSpec", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.DeploymentStatus": { - "description": "DeploymentStatus is the most recently observed status of the Deployment.", + "io.k8s.api.imagepolicy.v1alpha1.ImageReviewSpec": { + "description": "ImageReviewSpec is a description of the pod creation request.", "type": "object", "properties": { - "availableReplicas": { - "description": "Total number of available pods (ready for at least minReadySeconds) targeted by this deployment.", - "type": "integer", - "format": "int32" - }, - "collisionCount": { - "description": "Count of hash collisions for the Deployment. The Deployment controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ReplicaSet.", - "type": "integer", - "format": "int32" + "annotations": { + "description": "Annotations is a list of key-value pairs extracted from the Pod's annotations. It only includes keys which match the pattern `*.image-policy.k8s.io/*`. It is up to each webhook backend to determine how to interpret these annotations, if at all.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } }, - "conditions": { - "description": "Represents the latest available observations of a deployment's current state.", + "containers": { + "description": "Containers is a list of a subset of the information in each container of the Pod being created.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.DeploymentCondition" + "$ref": "#/definitions/io.k8s.api.imagepolicy.v1alpha1.ImageReviewContainerSpec" }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "observedGeneration": { - "description": "The generation observed by the deployment controller.", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "Total number of ready pods targeted by this deployment.", - "type": "integer", - "format": "int32" - }, - "replicas": { - "description": "Total number of non-terminated pods targeted by this deployment (their labels match the selector).", - "type": "integer", - "format": "int32" - }, - "unavailableReplicas": { - "description": "Total number of unavailable pods targeted by this deployment. This is the total number of pods that are still required for the deployment to have 100% available capacity. They may either be pods that are running but not yet available or pods that still have not been created.", - "type": "integer", - "format": "int32" + "x-kubernetes-list-type": "atomic" }, - "updatedReplicas": { - "description": "Total number of non-terminated pods targeted by this deployment that have the desired template spec.", - "type": "integer", - "format": "int32" + "namespace": { + "description": "Namespace is the namespace the pod is being created in.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "DeploymentStatus", + "Group": "imagepolicy.k8s.io", + "Version": "v1alpha1", + "Kind": "ImageReviewSpec", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.DeploymentStrategy": { - "description": "DeploymentStrategy describes how to replace existing pods with new ones.", + "io.k8s.api.imagepolicy.v1alpha1.ImageReviewStatus": { + "description": "ImageReviewStatus is the result of the review for the pod creation request.", "type": "object", + "required": [ + "allowed" + ], "properties": { - "rollingUpdate": { - "description": "Rolling update config params. Present only if DeploymentStrategyType = RollingUpdate.", - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.RollingUpdateDeployment" + "allowed": { + "description": "Allowed indicates that all images were allowed to be run.", + "type": "boolean", + "default": false }, - "type": { - "description": "Type of deployment. Can be \"Recreate\" or \"RollingUpdate\". Default is RollingUpdate.", + "auditAnnotations": { + "description": "AuditAnnotations will be added to the attributes object of the admission controller request using 'AddAnnotation'. The keys should be prefix-less (i.e., the admission controller will add an appropriate prefix).", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "reason": { + "description": "Reason should be empty unless Allowed is false in which case it may contain a short description of what is wrong. Kubernetes may truncate excessively long errors when displaying to the user.", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "DeploymentStrategy", + "Group": "imagepolicy.k8s.io", + "Version": "v1alpha1", + "Kind": "ImageReviewStatus", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.HTTPIngressPath": { + "io.k8s.api.networking.v1.HTTPIngressPath": { "description": "HTTPIngressPath associates a path with a backend. Incoming urls matching the path are forwarded to the backend.", "type": "object", "required": [ + "pathType", "backend" ], "properties": { "backend": { - "description": "Backend defines the referenced service endpoint to which the traffic will be forwarded to.", + "description": "backend defines the referenced service endpoint to which the traffic will be forwarded to.", "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressBackend" + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressBackend" }, "path": { - "description": "Path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional \"path\" part of a URL as defined by RFC 3986. Paths must begin with a '/'. When unspecified, all paths from incoming requests are matched.", + "description": "path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional \"path\" part of a URL as defined by RFC 3986. Paths must begin with a '/' and must be present when using PathType with value \"Exact\" or \"Prefix\".", "type": "string" }, "pathType": { - "description": "PathType determines the interpretation of the Path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by '/'. Matching is\n done on a path element by element basis. A path element refers is the\n list of labels in the path split by the '/' separator. A request is a\n match for path p if every p is an element-wise prefix of p of the\n request path. Note that if the last element of the path is a substring\n of the last element in request path, it is not a match (e.g. /foo/bar\n matches /foo/bar/baz, but does not match /foo/barbaz).\n* ImplementationSpecific: Interpretation of the Path matching is up to\n the IngressClass. Implementations can treat this as a separate PathType\n or treat it identically to Prefix or Exact path types.\nImplementations are required to support all path types. Defaults to ImplementationSpecific.", - "type": "string" + "description": "pathType determines the interpretation of the path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by '/'. Matching is\n done on a path element by element basis. A path element refers is the\n list of labels in the path split by the '/' separator. A request is a\n match for path p if every p is an element-wise prefix of p of the\n request path. Note that if the last element of the path is a substring\n of the last element in request path, it is not a match (e.g. /foo/bar\n matches /foo/bar/baz, but does not match /foo/barbaz).\n* ImplementationSpecific: Interpretation of the Path matching is up to\n the IngressClass. Implementations can treat this as a separate PathType\n or treat it identically to Prefix or Exact path types.\nImplementations are required to support all path types.\n\nPossible enum values:\n - `\"Exact\"` matches the URL path exactly and with case sensitivity.\n - `\"ImplementationSpecific\"` matching is up to the IngressClass. Implementations can treat this as a separate PathType or treat it identically to Prefix or Exact path types.\n - `\"Prefix\"` matches based on a URL path prefix split by '/'. Matching is case sensitive and done on a path element by element basis. A path element refers to the list of labels in the path split by the '/' separator. A request is a match for path p if every p is an element-wise prefix of p of the request path. Note that if the last element of the path is a substring of the last element in request path, it is not a match (e.g. /foo/bar matches /foo/bar/baz, but does not match /foo/barbaz). If multiple matching paths exist in an Ingress spec, the longest matching path is given priority. Examples: - /foo/bar does not match requests to /foo/barbaz - /foo/bar matches request to /foo/bar and /foo/bar/baz - /foo and /foo/ both match requests to /foo and /foo/. If both paths are present in an Ingress spec, the longest matching path (/foo/) is given priority.", + "type": "string", + "enum": [ + "Exact", + "ImplementationSpecific", + "Prefix" + ] } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", + "Group": "networking.k8s.io", + "Version": "v1", "Kind": "HTTPIngressPath", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.HTTPIngressRuleValue": { + "io.k8s.api.networking.v1.HTTPIngressRuleValue": { "description": "HTTPIngressRuleValue is a list of http selectors pointing to backends. In the example: http://\u003chost\u003e/\u003cpath\u003e?\u003csearchpart\u003e -\u003e backend where where parts of the url correspond to RFC 3986, this resource will be used to match against everything after the last '/' and before the first '?' or '#'.", "type": "object", "required": [ @@ -39279,37 +44873,37 @@ ], "properties": { "paths": { - "description": "A collection of paths that map requests to backends.", + "description": "paths is a collection of paths that map requests to backends.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.HTTPIngressPath" + "$ref": "#/definitions/io.k8s.api.networking.v1.HTTPIngressPath" }, "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", + "Group": "networking.k8s.io", + "Version": "v1", "Kind": "HTTPIngressRuleValue", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.IPBlock": { - "description": "DEPRECATED 1.9 - This group version of IPBlock is deprecated by networking/v1/IPBlock. IPBlock describes a particular CIDR (Ex. \"192.168.1.0/24\",\"2001:db8::/64\") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.", + "io.k8s.api.networking.v1.IPBlock": { + "description": "IPBlock describes a particular CIDR (Ex. \"192.168.1.0/24\",\"2001:db8::/64\") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.", "type": "object", "required": [ "cidr" ], "properties": { "cidr": { - "description": "CIDR is a string representing the IP Block Valid examples are \"192.168.1.0/24\" or \"2001:db8::/64\"", + "description": "cidr is a string representing the IPBlock Valid examples are \"192.168.1.0/24\" or \"2001:db8::/64\"", "type": "string", "default": "" }, "except": { - "description": "Except is a slice of CIDRs that should not be included within an IP Block Valid examples are \"192.168.1.0/24\" or \"2001:db8::/64\" Except values will be rejected if they are outside the CIDR range", + "description": "except is a slice of CIDRs that should not be included within an IPBlock Valid examples are \"192.168.1.0/24\" or \"2001:db8::/64\" Except values will be rejected if they are outside the cidr range", "type": "array", "items": { "type": "string", @@ -39320,14 +44914,14 @@ }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", + "Group": "networking.k8s.io", + "Version": "v1", "Kind": "IPBlock", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.Ingress": { - "description": "Ingress is a collection of rules that allow inbound connections to reach the endpoints defined by a backend. An Ingress can be configured to give services externally-reachable urls, load balance traffic, terminate SSL, offer name based virtual hosting etc. DEPRECATED - This group version of Ingress is deprecated by networking.k8s.io/v1beta1 Ingress. See the release notes for more information.", + "io.k8s.api.networking.v1.Ingress": { + "description": "Ingress is a collection of rules that allow inbound connections to reach the endpoints defined by a backend. An Ingress can be configured to give services externally-reachable urls, load balance traffic, terminate SSL, offer name based virtual hosting etc.", "type": "object", "properties": { "apiVersion": { @@ -39344,50 +44938,174 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "Spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressSpec" + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressSpec" }, "status": { - "description": "Status is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "status is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressStatus" + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "", - "Version": "v1beta1", + "Group": "networking.k8s.io", + "Version": "v1", "Kind": "Ingress", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.IngressBackend": { + "io.k8s.api.networking.v1.IngressBackend": { "description": "IngressBackend describes all endpoints for a given service and port.", "type": "object", "properties": { "resource": { - "description": "Resource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, serviceName and servicePort must not be specified.", + "description": "resource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, a service.Name and service.Port must not be specified. This is a mutually exclusive setting with \"Service\".", "$ref": "#/definitions/io.k8s.api.core.v1.TypedLocalObjectReference" }, - "serviceName": { - "description": "Specifies the name of the referenced service.", + "service": { + "description": "service references a service as a backend. This is a mutually exclusive setting with \"Resource\".", + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressServiceBackend" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "networking.k8s.io", + "Version": "v1", + "Kind": "IngressBackend", + "Scope": "Namespaced" + } + }, + "io.k8s.api.networking.v1.IngressClass": { + "description": "IngressClass represents the class of the Ingress, referenced by the Ingress Spec. The `ingressclass.kubernetes.io/is-default-class` annotation can be used to indicate that an IngressClass should be considered default. When a single IngressClass resource has this annotation set to true, new Ingress resources without a class specified will be assigned this default class.", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "spec is the desired state of the IngressClass. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressClassSpec" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "networking.k8s.io", + "Version": "v1", + "Kind": "IngressClass", + "Scope": "Clustered" + } + }, + "io.k8s.api.networking.v1.IngressClassList": { + "description": "IngressClassList is a collection of IngressClasses.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is the list of IngressClasses.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressClass" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "networking.k8s.io", + "Version": "v1", + "Kind": "IngressClassList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.networking.v1.IngressClassParametersReference": { + "description": "IngressClassParametersReference identifies an API object. This can be used to specify a cluster or namespace-scoped resource.", + "type": "object", + "required": [ + "kind", + "name" + ], + "properties": { + "apiGroup": { + "description": "apiGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.", + "type": "string" + }, + "kind": { + "description": "kind is the type of resource being referenced.", + "type": "string", + "default": "" + }, + "name": { + "description": "name is the name of resource being referenced.", + "type": "string", + "default": "" + }, + "namespace": { + "description": "namespace is the namespace of the resource being referenced. This field is required when scope is set to \"Namespace\" and must be unset when scope is set to \"Cluster\".", + "type": "string" + }, + "scope": { + "description": "scope represents if this refers to a cluster or namespace scoped resource. This may be set to \"Cluster\" (default) or \"Namespace\".", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "networking.k8s.io", + "Version": "v1", + "Kind": "IngressClassParametersReference", + "Scope": "Namespaced" + } + }, + "io.k8s.api.networking.v1.IngressClassSpec": { + "description": "IngressClassSpec provides information about the class of an Ingress.", + "type": "object", + "properties": { + "controller": { + "description": "controller refers to the name of the controller that should handle this class. This allows for different \"flavors\" that are controlled by the same controller. For example, you may have different parameters for the same implementing controller. This should be specified as a domain-prefixed path no more than 250 characters in length, e.g. \"acme.io/ingress-controller\". This field is immutable.", "type": "string" }, - "servicePort": { - "description": "Specifies the port of the referenced service.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + "parameters": { + "description": "parameters is a link to a custom resource containing additional configuration for the controller. This is optional if the controller does not require extra parameters.", + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressClassParametersReference" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "IngressBackend", + "Group": "networking.k8s.io", + "Version": "v1", + "Kind": "IngressClassSpec", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.IngressList": { + "io.k8s.api.networking.v1.IngressList": { "description": "IngressList is a collection of Ingress.", "type": "object", "required": [ @@ -39399,11 +45117,11 @@ "type": "string" }, "items": { - "description": "Items is the list of Ingress.", + "description": "items is the list of Ingress.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.Ingress" + "$ref": "#/definitions/io.k8s.api.networking.v1.Ingress" } }, "kind": { @@ -39418,65 +45136,65 @@ }, "x-fabric8-info": { "Type": "list", - "Group": "", - "Version": "v1beta1", + "Group": "networking.k8s.io", + "Version": "v1", "Kind": "IngressList", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.IngressLoadBalancerIngress": { + "io.k8s.api.networking.v1.IngressLoadBalancerIngress": { "description": "IngressLoadBalancerIngress represents the status of a load-balancer ingress point.", "type": "object", "properties": { "hostname": { - "description": "Hostname is set for load-balancer ingress points that are DNS based.", + "description": "hostname is set for load-balancer ingress points that are DNS based.", "type": "string" }, "ip": { - "description": "IP is set for load-balancer ingress points that are IP based.", + "description": "ip is set for load-balancer ingress points that are IP based.", "type": "string" }, "ports": { - "description": "Ports provides information about the ports exposed by this LoadBalancer.", + "description": "ports provides information about the ports exposed by this LoadBalancer.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressPortStatus" + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressPortStatus" }, "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", + "Group": "networking.k8s.io", + "Version": "v1", "Kind": "IngressLoadBalancerIngress", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.IngressLoadBalancerStatus": { - "description": "LoadBalancerStatus represents the status of a load-balancer.", + "io.k8s.api.networking.v1.IngressLoadBalancerStatus": { + "description": "IngressLoadBalancerStatus represents the status of a load-balancer.", "type": "object", "properties": { "ingress": { - "description": "Ingress is a list containing ingress points for the load-balancer.", + "description": "ingress is a list containing ingress points for the load-balancer.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressLoadBalancerIngress" + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressLoadBalancerIngress" }, "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", + "Group": "networking.k8s.io", + "Version": "v1", "Kind": "IngressLoadBalancerStatus", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.IngressPortStatus": { + "io.k8s.api.networking.v1.IngressPortStatus": { "description": "IngressPortStatus represents the error condition of a service port", "type": "object", "required": [ @@ -39485,17 +45203,17 @@ ], "properties": { "error": { - "description": "Error is to record the problem with the service port The format of the error shall comply with the following rules: - built-in error values shall be specified in this file and those shall use\n CamelCase names\n- cloud provider specific error values must have names that comply with the\n format foo.example.com/CamelCase.", + "description": "error is to record the problem with the service port The format of the error shall comply with the following rules: - built-in error values shall be specified in this file and those shall use\n CamelCase names\n- cloud provider specific error values must have names that comply with the\n format foo.example.com/CamelCase.", "type": "string" }, "port": { - "description": "Port is the port number of the ingress port.", + "description": "port is the port number of the ingress port.", "type": "integer", "format": "int32", "default": 0 }, "protocol": { - "description": "Protocol is the protocol of the ingress port. The supported values are: \"TCP\", \"UDP\", \"SCTP\"\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", + "description": "protocol is the protocol of the ingress port. The supported values are: \"TCP\", \"UDP\", \"SCTP\"\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", "type": "string", "default": "", "enum": [ @@ -39507,113 +45225,137 @@ }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", + "Group": "networking.k8s.io", + "Version": "v1", "Kind": "IngressPortStatus", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.IngressRule": { + "io.k8s.api.networking.v1.IngressRule": { "description": "IngressRule represents the rules mapping the paths under a specified host to the related backend services. Incoming requests are first evaluated for a host match, then routed to the backend associated with the matching IngressRuleValue.", "type": "object", "properties": { "host": { - "description": "Host is the fully qualified domain name of a network host, as defined by RFC 3986. Note the following deviations from the \"host\" part of the URI as defined in RFC 3986: 1. IPs are not allowed. Currently an IngressRuleValue can only apply to\n the IP in the Spec of the parent Ingress.\n2. The `:` delimiter is not respected because ports are not allowed.\n\t Currently the port of an Ingress is implicitly :80 for http and\n\t :443 for https.\nBoth these may change in the future. Incoming requests are matched against the host before the IngressRuleValue. If the host is unspecified, the Ingress routes all traffic based on the specified IngressRuleValue.\n\nHost can be \"precise\" which is a domain name without the terminating dot of a network host (e.g. \"foo.bar.com\") or \"wildcard\", which is a domain name prefixed with a single wildcard label (e.g. \"*.foo.com\"). The wildcard character '*' must appear by itself as the first DNS label and matches only a single label. You cannot have a wildcard label by itself (e.g. Host == \"*\"). Requests will be matched against the Host field in the following way: 1. If Host is precise, the request matches this rule if the http host header is equal to Host. 2. If Host is a wildcard, then the request matches this rule if the http host header is to equal to the suffix (removing the first label) of the wildcard rule.", + "description": "host is the fully qualified domain name of a network host, as defined by RFC 3986. Note the following deviations from the \"host\" part of the URI as defined in RFC 3986: 1. IPs are not allowed. Currently an IngressRuleValue can only apply to\n the IP in the Spec of the parent Ingress.\n2. The `:` delimiter is not respected because ports are not allowed.\n\t Currently the port of an Ingress is implicitly :80 for http and\n\t :443 for https.\nBoth these may change in the future. Incoming requests are matched against the host before the IngressRuleValue. If the host is unspecified, the Ingress routes all traffic based on the specified IngressRuleValue.\n\nhost can be \"precise\" which is a domain name without the terminating dot of a network host (e.g. \"foo.bar.com\") or \"wildcard\", which is a domain name prefixed with a single wildcard label (e.g. \"*.foo.com\"). The wildcard character '*' must appear by itself as the first DNS label and matches only a single label. You cannot have a wildcard label by itself (e.g. Host == \"*\"). Requests will be matched against the Host field in the following way: 1. If host is precise, the request matches this rule if the http host header is equal to Host. 2. If host is a wildcard, then the request matches this rule if the http host header is to equal to the suffix (removing the first label) of the wildcard rule.", "type": "string" }, "http": { - "description": "http is a list of http selectors pointing to backends. A path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional \"path\" part of a URL as defined by RFC 3986. Paths must begin with a '/'. A backend defines the referenced service endpoint to which the traffic will be forwarded to.", - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.HTTPIngressRuleValue" + "$ref": "#/definitions/io.k8s.api.networking.v1.HTTPIngressRuleValue" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", + "Group": "networking.k8s.io", + "Version": "v1", "Kind": "IngressRule", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.IngressRuleValue": { + "io.k8s.api.networking.v1.IngressRuleValue": { "description": "IngressRuleValue represents a rule to apply against incoming requests. If the rule is satisfied, the request is routed to the specified backend. Currently mixing different types of rules in a single Ingress is disallowed, so exactly one of the following must be set.", "type": "object", "properties": { "http": { - "description": "http is a list of http selectors pointing to backends. A path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional \"path\" part of a URL as defined by RFC 3986. Paths must begin with a '/'. A backend defines the referenced service endpoint to which the traffic will be forwarded to.", - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.HTTPIngressRuleValue" + "$ref": "#/definitions/io.k8s.api.networking.v1.HTTPIngressRuleValue" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", + "Group": "networking.k8s.io", + "Version": "v1", "Kind": "IngressRuleValue", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.IngressSpec": { + "io.k8s.api.networking.v1.IngressServiceBackend": { + "description": "IngressServiceBackend references a Kubernetes Service as a Backend.", + "type": "object", + "required": [ + "name" + ], + "properties": { + "name": { + "description": "name is the referenced service. The service must exist in the same namespace as the Ingress object.", + "type": "string", + "default": "" + }, + "port": { + "description": "port of the referenced service. A port name or port number is required for a IngressServiceBackend.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.networking.v1.ServiceBackendPort" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "networking.k8s.io", + "Version": "v1", + "Kind": "IngressServiceBackend", + "Scope": "Namespaced" + } + }, + "io.k8s.api.networking.v1.IngressSpec": { "description": "IngressSpec describes the Ingress the user wishes to exist.", "type": "object", "properties": { - "backend": { - "description": "A default backend capable of servicing requests that don't match any rule. At least one of 'backend' or 'rules' must be specified. This field is optional to allow the loadbalancer controller or defaulting logic to specify a global default.", - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressBackend" + "defaultBackend": { + "description": "defaultBackend is the backend that should handle requests that don't match any rule. If Rules are not specified, DefaultBackend must be specified. If DefaultBackend is not set, the handling of requests that do not match any of the rules will be up to the Ingress controller.", + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressBackend" }, "ingressClassName": { - "description": "IngressClassName is the name of the IngressClass cluster resource. The associated IngressClass defines which controller will implement the resource. This replaces the deprecated `kubernetes.io/ingress.class` annotation. For backwards compatibility, when that annotation is set, it must be given precedence over this field. The controller may emit a warning if the field and annotation have different values. Implementations of this API should ignore Ingresses without a class specified. An IngressClass resource may be marked as default, which can be used to set a default value for this field. For more information, refer to the IngressClass documentation.", + "description": "ingressClassName is the name of an IngressClass cluster resource. Ingress controller implementations use this field to know whether they should be serving this Ingress resource, by a transitive connection (controller -\u003e IngressClass -\u003e Ingress resource). Although the `kubernetes.io/ingress.class` annotation (simple constant name) was never formally defined, it was widely supported by Ingress controllers to create a direct binding between Ingress controller and Ingress resources. Newly created Ingress resources should prefer using the field. However, even though the annotation is officially deprecated, for backwards compatibility reasons, ingress controllers should still honor that annotation if present.", "type": "string" }, "rules": { - "description": "A list of host rules used to configure the Ingress. If unspecified, or no rule matches, all traffic is sent to the default backend.", + "description": "rules is a list of host rules used to configure the Ingress. If unspecified, or no rule matches, all traffic is sent to the default backend.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressRule" + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressRule" }, "x-kubernetes-list-type": "atomic" }, "tls": { - "description": "TLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.", + "description": "tls represents the TLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressTLS" + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressTLS" }, "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", + "Group": "networking.k8s.io", + "Version": "v1", "Kind": "IngressSpec", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.IngressStatus": { + "io.k8s.api.networking.v1.IngressStatus": { "description": "IngressStatus describe the current state of the Ingress.", "type": "object", "properties": { "loadBalancer": { - "description": "LoadBalancer contains the current status of the load-balancer.", + "description": "loadBalancer contains the current status of the load-balancer.", "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IngressLoadBalancerStatus" + "$ref": "#/definitions/io.k8s.api.networking.v1.IngressLoadBalancerStatus" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", + "Group": "networking.k8s.io", + "Version": "v1", "Kind": "IngressStatus", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.IngressTLS": { - "description": "IngressTLS describes the transport layer security associated with an Ingress.", + "io.k8s.api.networking.v1.IngressTLS": { + "description": "IngressTLS describes the transport layer security associated with an ingress.", "type": "object", "properties": { "hosts": { - "description": "Hosts are a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.", + "description": "hosts is a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.", "type": "array", "items": { "type": "string", @@ -39622,20 +45364,20 @@ "x-kubernetes-list-type": "atomic" }, "secretName": { - "description": "SecretName is the name of the secret used to terminate SSL traffic on 443. Field is left optional to allow SSL routing based on SNI hostname alone. If the SNI host in a listener conflicts with the \"Host\" header field used by an IngressRule, the SNI host is used for termination and value of the Host header is used for routing.", + "description": "secretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. If the SNI host in a listener conflicts with the \"Host\" header field used by an IngressRule, the SNI host is used for termination and value of the \"Host\" header is used for routing.", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", + "Group": "networking.k8s.io", + "Version": "v1", "Kind": "IngressTLS", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.NetworkPolicy": { - "description": "DEPRECATED 1.9 - This group version of NetworkPolicy is deprecated by networking/v1/NetworkPolicy. NetworkPolicy describes what network traffic is allowed for a set of Pods", + "io.k8s.api.networking.v1.NetworkPolicy": { + "description": "NetworkPolicy describes what network traffic is allowed for a set of Pods", "type": "object", "properties": { "apiVersion": { @@ -39652,83 +45394,408 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "Specification of the desired behavior for this NetworkPolicy.", + "description": "spec represents the specification of the desired behavior for this NetworkPolicy.", "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.NetworkPolicySpec" + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicySpec" } }, "x-fabric8-info": { "Type": "object", - "Group": "", - "Version": "v1beta1", + "Group": "networking.k8s.io", + "Version": "v1", "Kind": "NetworkPolicy", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.NetworkPolicyEgressRule": { - "description": "DEPRECATED 1.9 - This group version of NetworkPolicyEgressRule is deprecated by networking/v1/NetworkPolicyEgressRule. NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and to. This type is beta-level in 1.8", + "io.k8s.api.networking.v1.NetworkPolicyEgressRule": { + "description": "NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and to. This type is beta-level in 1.8", "type": "object", "properties": { "ports": { - "description": "List of destination ports for outgoing traffic. Each item in this list is combined using a logical OR. If this field is empty or missing, this rule matches all ports (traffic not restricted by port). If this field is present and contains at least one item, then this rule allows traffic only if the traffic matches at least one port in the list.", + "description": "ports is a list of destination ports for outgoing traffic. Each item in this list is combined using a logical OR. If this field is empty or missing, this rule matches all ports (traffic not restricted by port). If this field is present and contains at least one item, then this rule allows traffic only if the traffic matches at least one port in the list.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.NetworkPolicyPort" + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicyPort" }, "x-kubernetes-list-type": "atomic" }, "to": { - "description": "List of destinations for outgoing traffic of pods selected for this rule. Items in this list are combined using a logical OR operation. If this field is empty or missing, this rule matches all destinations (traffic not restricted by destination). If this field is present and contains at least one item, this rule allows traffic only if the traffic matches at least one item in the to list.", + "description": "to is a list of destinations for outgoing traffic of pods selected for this rule. Items in this list are combined using a logical OR operation. If this field is empty or missing, this rule matches all destinations (traffic not restricted by destination). If this field is present and contains at least one item, this rule allows traffic only if the traffic matches at least one item in the to list.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.NetworkPolicyPeer" + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicyPeer" }, "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", + "Group": "networking.k8s.io", + "Version": "v1", "Kind": "NetworkPolicyEgressRule", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.NetworkPolicyIngressRule": { - "description": "DEPRECATED 1.9 - This group version of NetworkPolicyIngressRule is deprecated by networking/v1/NetworkPolicyIngressRule. This NetworkPolicyIngressRule matches traffic if and only if the traffic matches both ports AND from.", + "io.k8s.api.networking.v1.NetworkPolicyIngressRule": { + "description": "NetworkPolicyIngressRule describes a particular set of traffic that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and from.", "type": "object", "properties": { "from": { - "description": "List of sources which should be able to access the pods selected for this rule. Items in this list are combined using a logical OR operation. If this field is empty or missing, this rule matches all sources (traffic not restricted by source). If this field is present and contains at least one item, this rule allows traffic only if the traffic matches at least one item in the from list.", + "description": "from is a list of sources which should be able to access the pods selected for this rule. Items in this list are combined using a logical OR operation. If this field is empty or missing, this rule matches all sources (traffic not restricted by source). If this field is present and contains at least one item, this rule allows traffic only if the traffic matches at least one item in the from list.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.NetworkPolicyPeer" + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicyPeer" }, "x-kubernetes-list-type": "atomic" }, "ports": { - "description": "List of ports which should be made accessible on the pods selected for this rule. Each item in this list is combined using a logical OR. If this field is empty or missing, this rule matches all ports (traffic not restricted by port). If this field is present and contains at least one item, then this rule allows traffic only if the traffic matches at least one port in the list.", + "description": "ports is a list of ports which should be made accessible on the pods selected for this rule. Each item in this list is combined using a logical OR. If this field is empty or missing, this rule matches all ports (traffic not restricted by port). If this field is present and contains at least one item, then this rule allows traffic only if the traffic matches at least one port in the list.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.NetworkPolicyPort" + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicyPort" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "networking.k8s.io", + "Version": "v1", + "Kind": "NetworkPolicyIngressRule", + "Scope": "Namespaced" + } + }, + "io.k8s.api.networking.v1.NetworkPolicyList": { + "description": "NetworkPolicyList is a list of NetworkPolicy objects.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is a list of schema objects.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicy" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "networking.k8s.io", + "Version": "v1", + "Kind": "NetworkPolicyList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.networking.v1.NetworkPolicyPeer": { + "description": "NetworkPolicyPeer describes a peer to allow traffic to/from. Only certain combinations of fields are allowed", + "type": "object", + "properties": { + "ipBlock": { + "description": "ipBlock defines policy on a particular IPBlock. If this field is set then neither of the other fields can be.", + "$ref": "#/definitions/io.k8s.api.networking.v1.IPBlock" + }, + "namespaceSelector": { + "description": "namespaceSelector selects namespaces using cluster-scoped labels. This field follows standard label selector semantics; if present but empty, it selects all namespaces.\n\nIf podSelector is also set, then the NetworkPolicyPeer as a whole selects the pods matching podSelector in the namespaces selected by namespaceSelector. Otherwise it selects all pods in the namespaces selected by namespaceSelector.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "podSelector": { + "description": "podSelector is a label selector which selects pods. This field follows standard label selector semantics; if present but empty, it selects all pods.\n\nIf namespaceSelector is also set, then the NetworkPolicyPeer as a whole selects the pods matching podSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects the pods matching podSelector in the policy's own namespace.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "networking.k8s.io", + "Version": "v1", + "Kind": "NetworkPolicyPeer", + "Scope": "Namespaced" + } + }, + "io.k8s.api.networking.v1.NetworkPolicyPort": { + "description": "NetworkPolicyPort describes a port to allow traffic on", + "type": "object", + "properties": { + "endPort": { + "description": "endPort indicates that the range of ports from port to endPort if set, inclusive, should be allowed by the policy. This field cannot be defined if the port field is not defined or if the port field is defined as a named (string) port. The endPort must be equal or greater than port.", + "type": "integer", + "format": "int32" + }, + "port": { + "description": "port represents the port on the given protocol. This can either be a numerical or named port on a pod. If this field is not provided, this matches all port names and numbers. If present, only traffic on the specified protocol AND port will be matched.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + }, + "protocol": { + "description": "protocol represents the protocol (TCP, UDP, or SCTP) which traffic must match. If not specified, this field defaults to TCP.\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", + "type": "string", + "enum": [ + "SCTP", + "TCP", + "UDP" + ] + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "networking.k8s.io", + "Version": "v1", + "Kind": "NetworkPolicyPort", + "Scope": "Namespaced" + } + }, + "io.k8s.api.networking.v1.NetworkPolicySpec": { + "description": "NetworkPolicySpec provides the specification of a NetworkPolicy", + "type": "object", + "required": [ + "podSelector" + ], + "properties": { + "egress": { + "description": "egress is a list of egress rules to be applied to the selected pods. Outgoing traffic is allowed if there are no NetworkPolicies selecting the pod (and cluster policy otherwise allows the traffic), OR if the traffic matches at least one egress rule across all of the NetworkPolicy objects whose podSelector matches the pod. If this field is empty then this NetworkPolicy limits all outgoing traffic (and serves solely to ensure that the pods it selects are isolated by default). This field is beta-level in 1.8", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicyEgressRule" + }, + "x-kubernetes-list-type": "atomic" + }, + "ingress": { + "description": "ingress is a list of ingress rules to be applied to the selected pods. Traffic is allowed to a pod if there are no NetworkPolicies selecting the pod (and cluster policy otherwise allows the traffic), OR if the traffic source is the pod's local node, OR if the traffic matches at least one ingress rule across all of the NetworkPolicy objects whose podSelector matches the pod. If this field is empty then this NetworkPolicy does not allow any traffic (and serves solely to ensure that the pods it selects are isolated by default)", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicyIngressRule" + }, + "x-kubernetes-list-type": "atomic" + }, + "podSelector": { + "description": "podSelector selects the pods to which this NetworkPolicy object applies. The array of ingress rules is applied to any pods selected by this field. Multiple network policies can select the same set of pods. In this case, the ingress rules for each are combined additively. This field is NOT optional and follows standard label selector semantics. An empty podSelector matches all pods in this namespace.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "policyTypes": { + "description": "policyTypes is a list of rule types that the NetworkPolicy relates to. Valid options are [\"Ingress\"], [\"Egress\"], or [\"Ingress\", \"Egress\"]. If this field is not specified, it will default based on the existence of ingress or egress rules; policies that contain an egress section are assumed to affect egress, and all policies (whether or not they contain an ingress section) are assumed to affect ingress. If you want to write an egress-only policy, you must explicitly specify policyTypes [ \"Egress\" ]. Likewise, if you want to write a policy that specifies that no egress is allowed, you must specify a policyTypes value that include \"Egress\" (since such a policy would not include an egress section and would otherwise default to just [ \"Ingress\" ]). This field is beta-level in 1.8", + "type": "array", + "items": { + "type": "string", + "default": "", + "enum": [ + "Egress", + "Ingress" + ] }, "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "NetworkPolicyIngressRule", - "Scope": "Namespaced" + "Type": "nested", + "Group": "networking.k8s.io", + "Version": "v1", + "Kind": "NetworkPolicySpec", + "Scope": "Namespaced" + } + }, + "io.k8s.api.networking.v1.ServiceBackendPort": { + "description": "ServiceBackendPort is the service port being referenced.", + "type": "object", + "properties": { + "name": { + "description": "name is the name of the port on the Service. This is a mutually exclusive setting with \"Number\".", + "type": "string" + }, + "number": { + "description": "number is the numerical port number (e.g. 80) on the Service. This is a mutually exclusive setting with \"Name\".", + "type": "integer", + "format": "int32" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "networking.k8s.io", + "Version": "v1", + "Kind": "ServiceBackendPort", + "Scope": "Namespaced" + }, + "x-kubernetes-map-type": "atomic" + }, + "io.k8s.api.networking.v1alpha1.IPAddress": { + "description": "IPAddress represents a single IP of a single IP Family. The object is designed to be used by APIs that operate on IP addresses. The object is used by the Service core API for allocation of IP addresses. An IP address can be represented in different formats, to guarantee the uniqueness of the IP, the name of the object is the IP address in canonical format, four decimal digits separated by dots suppressing leading zeros for IPv4 and the representation defined by RFC 5952 for IPv6. Valid: 192.168.1.5 or 2001:db8::1 or 2001:db8:aaaa:bbbb:cccc:dddd:eeee:1 Invalid: 10.01.2.3 or 2001:db8:0:0:0::1", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "spec is the desired state of the IPAddress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.networking.v1alpha1.IPAddressSpec" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "networking.k8s.io", + "Version": "v1alpha1", + "Kind": "IPAddress", + "Scope": "Clustered" + } + }, + "io.k8s.api.networking.v1alpha1.IPAddressList": { + "description": "IPAddressList contains a list of IPAddress.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is the list of IPAddresses.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.networking.v1alpha1.IPAddress" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "networking.k8s.io", + "Version": "v1alpha1", + "Kind": "IPAddressList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.networking.v1alpha1.IPAddressSpec": { + "description": "IPAddressSpec describe the attributes in an IP Address.", + "type": "object", + "required": [ + "parentRef" + ], + "properties": { + "parentRef": { + "description": "ParentRef references the resource that an IPAddress is attached to. An IPAddress must reference a parent object.", + "$ref": "#/definitions/io.k8s.api.networking.v1alpha1.ParentReference" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "networking.k8s.io", + "Version": "v1alpha1", + "Kind": "IPAddressSpec", + "Scope": "Namespaced" + } + }, + "io.k8s.api.networking.v1alpha1.ParentReference": { + "description": "ParentReference describes a reference to a parent object.", + "type": "object", + "required": [ + "resource", + "name" + ], + "properties": { + "group": { + "description": "Group is the group of the object being referenced.", + "type": "string" + }, + "name": { + "description": "Name is the name of the object being referenced.", + "type": "string" + }, + "namespace": { + "description": "Namespace is the namespace of the object being referenced.", + "type": "string" + }, + "resource": { + "description": "Resource is the resource of the object being referenced.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "networking.k8s.io", + "Version": "v1alpha1", + "Kind": "ParentReference", + "Scope": "Namespaced" + } + }, + "io.k8s.api.networking.v1alpha1.ServiceCIDR": { + "description": "ServiceCIDR defines a range of IP addresses using CIDR format (e.g. 192.168.0.0/24 or 2001:db2::/64). This range is used to allocate ClusterIPs to Service objects.", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "spec is the desired state of the ServiceCIDR. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.networking.v1alpha1.ServiceCIDRSpec" + }, + "status": { + "description": "status represents the current state of the ServiceCIDR. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.networking.v1alpha1.ServiceCIDRStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "networking.k8s.io", + "Version": "v1alpha1", + "Kind": "ServiceCIDR", + "Scope": "Clustered" } }, - "io.k8s.api.extensions.v1beta1.NetworkPolicyList": { - "description": "DEPRECATED 1.9 - This group version of NetworkPolicyList is deprecated by networking/v1/NetworkPolicyList. Network Policy List is a list of NetworkPolicy objects.", + "io.k8s.api.networking.v1alpha1.ServiceCIDRList": { + "description": "ServiceCIDRList contains a list of ServiceCIDR objects.", "type": "object", "required": [ "items" @@ -39739,11 +45806,11 @@ "type": "string" }, "items": { - "description": "Items is a list of schema objects.", + "description": "items is the list of ServiceCIDRs.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.NetworkPolicy" + "$ref": "#/definitions/io.k8s.api.networking.v1alpha1.ServiceCIDR" } }, "kind": { @@ -39751,125 +45818,124 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "", - "Version": "v1beta1", - "Kind": "NetworkPolicyList", + "Group": "networking.k8s.io", + "Version": "v1alpha1", + "Kind": "ServiceCIDRList", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.NetworkPolicyPeer": { - "description": "DEPRECATED 1.9 - This group version of NetworkPolicyPeer is deprecated by networking/v1/NetworkPolicyPeer.", + "io.k8s.api.networking.v1alpha1.ServiceCIDRSpec": { + "description": "ServiceCIDRSpec define the CIDRs the user wants to use for allocating ClusterIPs for Services.", "type": "object", "properties": { - "ipBlock": { - "description": "IPBlock defines policy on a particular IPBlock. If this field is set then neither of the other fields can be.", - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.IPBlock" - }, - "namespaceSelector": { - "description": "Selects Namespaces using cluster-scoped labels. This field follows standard label selector semantics; if present but empty, it selects all namespaces.\n\nIf PodSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects all Pods in the Namespaces selected by NamespaceSelector.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "podSelector": { - "description": "This is a label selector which selects Pods. This field follows standard label selector semantics; if present but empty, it selects all pods.\n\nIf NamespaceSelector is also set, then the NetworkPolicyPeer as a whole selects the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects the Pods matching PodSelector in the policy's own Namespace.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "cidrs": { + "description": "CIDRs defines the IP blocks in CIDR notation (e.g. \"192.168.0.0/24\" or \"2001:db8::/64\") from which to assign service cluster IPs. Max of two CIDRs is allowed, one of each IP family. The network address of each CIDR, the address that identifies the subnet of a host, is reserved and will not be allocated. The broadcast address for IPv4 CIDRs is also reserved and will not be allocated. This field is immutable.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "NetworkPolicyPeer", + "Group": "networking.k8s.io", + "Version": "v1alpha1", + "Kind": "ServiceCIDRSpec", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.NetworkPolicyPort": { - "description": "DEPRECATED 1.9 - This group version of NetworkPolicyPort is deprecated by networking/v1/NetworkPolicyPort.", + "io.k8s.api.networking.v1alpha1.ServiceCIDRStatus": { + "description": "ServiceCIDRStatus describes the current state of the ServiceCIDR.", "type": "object", "properties": { - "endPort": { - "description": "If set, indicates that the range of ports from port to endPort, inclusive, should be allowed by the policy. This field cannot be defined if the port field is not defined or if the port field is defined as a named (string) port. The endPort must be equal or greater than port.", - "type": "integer", - "format": "int32" + "conditions": { + "description": "conditions holds an array of metav1.Condition that describe the state of the ServiceCIDR. Current service state", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "networking.k8s.io", + "Version": "v1alpha1", + "Kind": "ServiceCIDRStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.networking.v1beta1.HTTPIngressPath": { + "description": "HTTPIngressPath associates a path with a backend. Incoming urls matching the path are forwarded to the backend.", + "type": "object", + "required": [ + "backend" + ], + "properties": { + "backend": { + "description": "backend defines the referenced service endpoint to which the traffic will be forwarded to.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressBackend" }, - "port": { - "description": "The port on the given protocol. This can either be a numerical or named port on a pod. If this field is not provided, this matches all port names and numbers. If present, only traffic on the specified protocol AND port will be matched.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + "path": { + "description": "path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional \"path\" part of a URL as defined by RFC 3986. Paths must begin with a '/' and must be present when using PathType with value \"Exact\" or \"Prefix\".", + "type": "string" }, - "protocol": { - "description": "Optional. The protocol (TCP, UDP, or SCTP) which traffic must match. If not specified, this field defaults to TCP.\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", - "type": "string", - "enum": [ - "SCTP", - "TCP", - "UDP" - ] + "pathType": { + "description": "pathType determines the interpretation of the path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by '/'. Matching is\n done on a path element by element basis. A path element refers is the\n list of labels in the path split by the '/' separator. A request is a\n match for path p if every p is an element-wise prefix of p of the\n request path. Note that if the last element of the path is a substring\n of the last element in request path, it is not a match (e.g. /foo/bar\n matches /foo/bar/baz, but does not match /foo/barbaz).\n* ImplementationSpecific: Interpretation of the Path matching is up to\n the IngressClass. Implementations can treat this as a separate PathType\n or treat it identically to Prefix or Exact path types.\nImplementations are required to support all path types. Defaults to ImplementationSpecific.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "networking.k8s.io", "Version": "v1beta1", - "Kind": "NetworkPolicyPort", + "Kind": "HTTPIngressPath", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.NetworkPolicySpec": { - "description": "DEPRECATED 1.9 - This group version of NetworkPolicySpec is deprecated by networking/v1/NetworkPolicySpec.", + "io.k8s.api.networking.v1beta1.HTTPIngressRuleValue": { + "description": "HTTPIngressRuleValue is a list of http selectors pointing to backends. In the example: http://\u003chost\u003e/\u003cpath\u003e?\u003csearchpart\u003e -\u003e backend where where parts of the url correspond to RFC 3986, this resource will be used to match against everything after the last '/' and before the first '?' or '#'.", "type": "object", "required": [ - "podSelector" + "paths" ], "properties": { - "egress": { - "description": "List of egress rules to be applied to the selected pods. Outgoing traffic is allowed if there are no NetworkPolicies selecting the pod (and cluster policy otherwise allows the traffic), OR if the traffic matches at least one egress rule across all of the NetworkPolicy objects whose podSelector matches the pod. If this field is empty then this NetworkPolicy limits all outgoing traffic (and serves solely to ensure that the pods it selects are isolated by default). This field is beta-level in 1.8", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.NetworkPolicyEgressRule" - }, - "x-kubernetes-list-type": "atomic" - }, - "ingress": { - "description": "List of ingress rules to be applied to the selected pods. Traffic is allowed to a pod if there are no NetworkPolicies selecting the pod OR if the traffic source is the pod's local node, OR if the traffic matches at least one ingress rule across all of the NetworkPolicy objects whose podSelector matches the pod. If this field is empty then this NetworkPolicy does not allow any traffic (and serves solely to ensure that the pods it selects are isolated by default).", + "paths": { + "description": "paths is a collection of paths that map requests to backends.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.NetworkPolicyIngressRule" - }, - "x-kubernetes-list-type": "atomic" - }, - "podSelector": { - "description": "Selects the pods to which this NetworkPolicy object applies. The array of ingress rules is applied to any pods selected by this field. Multiple network policies can select the same set of pods. In this case, the ingress rules for each are combined additively. This field is NOT optional and follows standard label selector semantics. An empty podSelector matches all pods in this namespace.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "policyTypes": { - "description": "List of rule types that the NetworkPolicy relates to. Valid options are [\"Ingress\"], [\"Egress\"], or [\"Ingress\", \"Egress\"]. If this field is not specified, it will default based on the existence of Ingress or Egress rules; policies that contain an Egress section are assumed to affect Egress, and all policies (whether or not they contain an Ingress section) are assumed to affect Ingress. If you want to write an egress-only policy, you must explicitly specify policyTypes [ \"Egress\" ]. Likewise, if you want to write a policy that specifies that no egress is allowed, you must specify a policyTypes value that include \"Egress\" (since such a policy would not include an Egress section and would otherwise default to just [ \"Ingress\" ]). This field is beta-level in 1.8", - "type": "array", - "items": { - "type": "string", - "default": "" + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.HTTPIngressPath" }, "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "networking.k8s.io", "Version": "v1beta1", - "Kind": "NetworkPolicySpec", + "Kind": "HTTPIngressRuleValue", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.ReplicaSet": { - "description": "DEPRECATED - This group version of ReplicaSet is deprecated by apps/v1beta2/ReplicaSet. See the release notes for more information. ReplicaSet ensures that a specified number of pod replicas are running at any given time.", + "io.k8s.api.networking.v1beta1.IPAddress": { + "description": "IPAddress represents a single IP of a single IP Family. The object is designed to be used by APIs that operate on IP addresses. The object is used by the Service core API for allocation of IP addresses. An IP address can be represented in different formats, to guarantee the uniqueness of the IP, the name of the object is the IP address in canonical format, four decimal digits separated by dots suppressing leading zeros for IPv4 and the representation defined by RFC 5952 for IPv6. Valid: 192.168.1.5 or 2001:db8::1 or 2001:db8:aaaa:bbbb:cccc:dddd:eeee:1 Invalid: 10.01.2.3 or 2001:db8:0:0:0::1", "type": "object", "properties": { "apiVersion": { @@ -39881,70 +45947,26 @@ "type": "string" }, "metadata": { - "description": "If the Labels of a ReplicaSet are empty, they are defaulted to be the same as the Pod(s) that the ReplicaSet manages. Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "Spec defines the specification of the desired behavior of the ReplicaSet. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.ReplicaSetSpec" - }, - "status": { - "description": "Status is the most recently observed status of the ReplicaSet. This data may be out of date by some window of time. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "spec is the desired state of the IPAddress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.ReplicaSetStatus" + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IPAddressSpec" } }, "x-fabric8-info": { "Type": "object", - "Group": "", - "Version": "v1beta1", - "Kind": "ReplicaSet", - "Scope": "Namespaced" - } - }, - "io.k8s.api.extensions.v1beta1.ReplicaSetCondition": { - "description": "ReplicaSetCondition describes the state of a replica set at a certain point.", - "type": "object", - "required": [ - "type", - "status" - ], - "properties": { - "lastTransitionTime": { - "description": "The last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "A human readable message indicating details about the transition.", - "type": "string" - }, - "reason": { - "description": "The reason for the condition's last transition.", - "type": "string" - }, - "status": { - "description": "Status of the condition, one of True, False, Unknown.", - "type": "string", - "default": "" - }, - "type": { - "description": "Type of replica set condition.", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", + "Group": "networking.k8s.io", "Version": "v1beta1", - "Kind": "ReplicaSetCondition", - "Scope": "Namespaced" + "Kind": "IPAddress", + "Scope": "Clustered" } }, - "io.k8s.api.extensions.v1beta1.ReplicaSetList": { - "description": "ReplicaSetList is a collection of ReplicaSets.", + "io.k8s.api.networking.v1beta1.IPAddressList": { + "description": "IPAddressList contains a list of IPAddress.", "type": "object", "required": [ "items" @@ -39955,11 +45977,11 @@ "type": "string" }, "items": { - "description": "List of ReplicaSets. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller", + "description": "items is the list of IPAddresses.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.ReplicaSet" + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IPAddress" } }, "kind": { @@ -39967,169 +45989,102 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "", + "Group": "networking.k8s.io", "Version": "v1beta1", - "Kind": "ReplicaSetList", + "Kind": "IPAddressList", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.ReplicaSetSpec": { - "description": "ReplicaSetSpec is the specification of a ReplicaSet.", + "io.k8s.api.networking.v1beta1.IPAddressSpec": { + "description": "IPAddressSpec describe the attributes in an IP Address.", "type": "object", + "required": [ + "parentRef" + ], "properties": { - "minReadySeconds": { - "description": "Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", - "type": "integer", - "format": "int32" - }, - "replicas": { - "description": "Replicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. Defaults to 1. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller/#what-is-a-replicationcontroller", - "type": "integer", - "format": "int32" - }, - "selector": { - "description": "Selector is a label query over pods that should match the replica count. If the selector is empty, it is defaulted to the labels present on the pod template. Label keys and values that must match in order to be controlled by this replica set. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "template": { - "description": "Template is the object that describes the pod that will be created if insufficient replicas are detected. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" + "parentRef": { + "description": "ParentRef references the resource that an IPAddress is attached to. An IPAddress must reference a parent object.", + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.ParentReference" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "networking.k8s.io", "Version": "v1beta1", - "Kind": "ReplicaSetSpec", + "Kind": "IPAddressSpec", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.ReplicaSetStatus": { - "description": "ReplicaSetStatus represents the current status of a ReplicaSet.", + "io.k8s.api.networking.v1beta1.Ingress": { + "description": "Ingress is a collection of rules that allow inbound connections to reach the endpoints defined by a backend. An Ingress can be configured to give services externally-reachable urls, load balance traffic, terminate SSL, offer name based virtual hosting etc.", "type": "object", - "required": [ - "replicas" - ], "properties": { - "availableReplicas": { - "description": "The number of available replicas (ready for at least minReadySeconds) for this replica set.", - "type": "integer", - "format": "int32" - }, - "conditions": { - "description": "Represents the latest available observations of a replica set's current state.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.ReplicaSetCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "fullyLabeledReplicas": { - "description": "The number of pods that have labels matching the labels of the pod template of the replicaset.", - "type": "integer", - "format": "int32" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "observedGeneration": { - "description": "ObservedGeneration reflects the generation of the most recently observed ReplicaSet.", - "type": "integer", - "format": "int64" + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "readyReplicas": { - "description": "The number of ready replicas for this replica set.", - "type": "integer", - "format": "int32" + "spec": { + "description": "spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressSpec" }, - "replicas": { - "description": "Replicas is the most recently observed number of replicas. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller/#what-is-a-replicationcontroller", - "type": "integer", - "format": "int32", - "default": 0 - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "ReplicaSetStatus", - "Scope": "Namespaced" - } - }, - "io.k8s.api.extensions.v1beta1.RollbackConfig": { - "description": "DEPRECATED.", - "type": "object", - "properties": { - "revision": { - "description": "The revision to rollback to. If set to 0, rollback to the last revision.", - "type": "integer", - "format": "int64" + "status": { + "description": "status is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "default": {}, + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", + "Type": "object", + "Group": "networking.k8s.io", "Version": "v1beta1", - "Kind": "RollbackConfig", + "Kind": "Ingress", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.RollingUpdateDaemonSet": { - "description": "Spec to control the desired behavior of daemon set rolling update.", + "io.k8s.api.networking.v1beta1.IngressBackend": { + "description": "IngressBackend describes all endpoints for a given service and port.", "type": "object", "properties": { - "maxSurge": { - "description": "The maximum number of nodes with an existing available DaemonSet pod that can have an updated DaemonSet pod during during an update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up to a minimum of 1. Default value is 0. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their a new pod created before the old pod is marked as deleted. The update starts by launching new pods on 30% of nodes. Once an updated pod is available (Ready for at least minReadySeconds) the old DaemonSet pod on that node is marked deleted. If the old pod becomes unavailable for any reason (Ready transitions to false, is evicted, or is drained) an updated pod is immediatedly created on that node without considering surge limits. Allowing surge implies the possibility that the resources consumed by the daemonset on any given node can double if the readiness check fails, and so resource intensive daemonsets should take into account that they may cause evictions during disruption. This is an alpha field and requires enabling DaemonSetUpdateSurge feature gate.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + "resource": { + "description": "resource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, serviceName and servicePort must not be specified.", + "$ref": "#/definitions/io.k8s.api.core.v1.TypedLocalObjectReference" }, - "maxUnavailable": { - "description": "The maximum number of DaemonSet pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of total number of DaemonSet pods at the start of the update (ex: 10%). Absolute number is calculated from percentage by rounding up. This cannot be 0 if MaxSurge is 0 Default value is 1. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their pods stopped for an update at any given time. The update starts by stopping at most 30% of those DaemonSet pods and then brings up new DaemonSet pods in their place. Once the new pods are available, it then proceeds onto other DaemonSet pods, thus ensuring that at least 70% of original number of DaemonSet pods are available at all times during the update.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "RollingUpdateDaemonSet", - "Scope": "Namespaced" - } - }, - "io.k8s.api.extensions.v1beta1.RollingUpdateDeployment": { - "description": "Spec to control the desired behavior of rolling update.", - "type": "object", - "properties": { - "maxSurge": { - "description": "The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up. By default, a value of 1 is used. Example: when this is set to 30%, the new RC can be scaled up immediately when the rolling update starts, such that the total number of old and new pods do not exceed 130% of desired pods. Once old pods have been killed, new RC can be scaled up further, ensuring that total number of pods running at any time during the update is at most 130% of desired pods.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + "serviceName": { + "description": "serviceName specifies the name of the referenced service.", + "type": "string" }, - "maxUnavailable": { - "description": "The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. This can not be 0 if MaxSurge is 0. By default, a fixed value of 1 is used. Example: when this is set to 30%, the old RC can be scaled down to 70% of desired pods immediately when the rolling update starts. Once new pods are ready, old RC can be scaled down further, followed by scaling up the new RC, ensuring that the total number of pods available at all times during the update is at least 70% of desired pods.", + "servicePort": { + "description": "servicePort Specifies the port of the referenced service.", "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "networking.k8s.io", "Version": "v1beta1", - "Kind": "RollingUpdateDeployment", + "Kind": "IngressBackend", "Scope": "Namespaced" } }, - "io.k8s.api.extensions.v1beta1.Scale": { - "description": "represents a scaling request for a resource.", + "io.k8s.api.networking.v1beta1.IngressClass": { + "description": "IngressClass represents the class of the Ingress, referenced by the Ingress Spec. The `ingressclass.kubernetes.io/is-default-class` annotation can be used to indicate that an IngressClass should be considered default. When a single IngressClass resource has this annotation set to true, new Ingress resources without a class specified will be assigned this default class.", "type": "object", "properties": { "apiVersion": { @@ -40141,197 +46096,124 @@ "type": "string" }, "metadata": { - "description": "Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "defines the behavior of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.ScaleSpec" - }, - "status": { - "description": "current status of the scale. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. Read-only.", + "description": "spec is the desired state of the IngressClass. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.extensions.v1beta1.ScaleStatus" + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressClassSpec" } }, "x-fabric8-info": { "Type": "object", - "Group": "", - "Version": "v1beta1", - "Kind": "Scale", - "Scope": "Namespaced" - } - }, - "io.k8s.api.extensions.v1beta1.ScaleSpec": { - "description": "describes the attributes of a scale subresource", - "type": "object", - "properties": { - "replicas": { - "description": "desired number of instances for the scaled object.", - "type": "integer", - "format": "int32" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", + "Group": "networking.k8s.io", "Version": "v1beta1", - "Kind": "ScaleSpec", - "Scope": "Namespaced" + "Kind": "IngressClass", + "Scope": "Clustered" } }, - "io.k8s.api.extensions.v1beta1.ScaleStatus": { - "description": "represents the current status of a scale subresource.", + "io.k8s.api.networking.v1beta1.IngressClassList": { + "description": "IngressClassList is a collection of IngressClasses.", "type": "object", "required": [ - "replicas" + "items" ], "properties": { - "replicas": { - "description": "actual number of observed instances of the scaled object.", - "type": "integer", - "format": "int32", - "default": 0 + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "selector": { - "description": "selector is a label query over pods that should match the replicas count. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - }, - "x-kubernetes-map-type": "atomic" + "items": { + "description": "items is the list of IngressClasses.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressClass" + } }, - "targetSelector": { - "description": "label selector for pods that should match the replicas count. This is a serializated version of both map-based and more expressive set-based selectors. This is done to avoid introspection in the clients. The string will be in the same format as the query-param syntax. If the target type only supports map-based selectors, both this field and map-based selector field are populated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1beta1", - "Kind": "ScaleStatus", - "Scope": "Namespaced" - } - }, - "io.k8s.api.flowcontrol.v1.ExemptPriorityLevelConfiguration": { - "description": "ExemptPriorityLevelConfiguration describes the configurable aspects of the handling of exempt requests. In the mandatory exempt configuration object the values in the fields here can be modified by authorized users, unlike the rest of the `spec`.", - "type": "object", - "properties": { - "lendablePercent": { - "description": "`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. This value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows.\n\nLendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 )", - "type": "integer", - "format": "int32" }, - "nominalConcurrencyShares": { - "description": "`nominalConcurrencyShares` (NCS) contributes to the computation of the NominalConcurrencyLimit (NominalCL) of this level. This is the number of execution seats nominally reserved for this priority level. This DOES NOT limit the dispatching from this priority level but affects the other priority levels through the borrowing mechanism. The server's concurrency limit (ServerCL) is divided among all the priority levels in proportion to their NCS values:\n\nNominalCL(i) = ceil( ServerCL * NCS(i) / sum_ncs ) sum_ncs = sum[priority level k] NCS(k)\n\nBigger numbers mean a larger nominal concurrency limit, at the expense of every other priority level. This field has a default value of zero.", - "type": "integer", - "format": "int32" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1", - "Kind": "ExemptPriorityLevelConfiguration", - "Scope": "Namespaced" - } - }, - "io.k8s.api.flowcontrol.v1.FlowDistinguisherMethod": { - "description": "FlowDistinguisherMethod specifies the method of a flow distinguisher.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "type": { - "description": "`type` is the type of flow distinguisher method The supported types are \"ByUser\" and \"ByNamespace\". Required.", - "type": "string", - "default": "" + "metadata": { + "description": "Standard list metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1", - "Kind": "FlowDistinguisherMethod", + "Type": "list", + "Group": "networking.k8s.io", + "Version": "v1beta1", + "Kind": "IngressClassList", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1.FlowSchema": { - "description": "FlowSchema defines the schema of a group of flows. Note that a flow is made up of a set of inbound API requests with similar attributes and is identified by a pair of strings: the name of the FlowSchema and a \"flow distinguisher\".", + "io.k8s.api.networking.v1beta1.IngressClassParametersReference": { + "description": "IngressClassParametersReference identifies an API object. This can be used to specify a cluster or namespace-scoped resource.", "type": "object", + "required": [ + "kind", + "name", + "scope" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "apiGroup": { + "description": "apiGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.", "type": "string" }, "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "description": "kind is the type of resource being referenced.", + "type": "string", + "default": "" }, - "metadata": { - "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "name": { + "description": "name is the name of resource being referenced.", + "type": "string", + "default": "" }, - "spec": { - "description": "`spec` is the specification of the desired behavior of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.FlowSchemaSpec" + "namespace": { + "description": "namespace is the namespace of the resource being referenced. This field is required when scope is set to \"Namespace\" and must be unset when scope is set to \"Cluster\".", + "type": "string" }, - "status": { - "description": "`status` is the current status of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.FlowSchemaStatus" + "scope": { + "description": "scope represents if this refers to a cluster or namespace scoped resource. This may be set to \"Cluster\" (default) or \"Namespace\".", + "type": "string" } }, "x-fabric8-info": { - "Type": "object", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1", - "Kind": "FlowSchema", - "Scope": "Clustered" + "Type": "nested", + "Group": "networking.k8s.io", + "Version": "v1beta1", + "Kind": "IngressClassParametersReference", + "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1.FlowSchemaCondition": { - "description": "FlowSchemaCondition describes conditions for a FlowSchema.", + "io.k8s.api.networking.v1beta1.IngressClassSpec": { + "description": "IngressClassSpec provides information about the class of an Ingress.", "type": "object", "properties": { - "lastTransitionTime": { - "description": "`lastTransitionTime` is the last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "`message` is a human-readable message indicating details about last transition.", - "type": "string" - }, - "reason": { - "description": "`reason` is a unique, one-word, CamelCase reason for the condition's last transition.", - "type": "string" - }, - "status": { - "description": "`status` is the status of the condition. Can be True, False, Unknown. Required.", + "controller": { + "description": "controller refers to the name of the controller that should handle this class. This allows for different \"flavors\" that are controlled by the same controller. For example, you may have different parameters for the same implementing controller. This should be specified as a domain-prefixed path no more than 250 characters in length, e.g. \"acme.io/ingress-controller\". This field is immutable.", "type": "string" }, - "type": { - "description": "`type` is the type of the condition. Required.", - "type": "string" + "parameters": { + "description": "parameters is a link to a custom resource containing additional configuration for the controller. This is optional if the controller does not require extra parameters.", + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressClassParametersReference" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1", - "Kind": "FlowSchemaCondition", + "Group": "networking.k8s.io", + "Version": "v1beta1", + "Kind": "IngressClassSpec", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1.FlowSchemaList": { - "description": "FlowSchemaList is a list of FlowSchema objects.", + "io.k8s.api.networking.v1beta1.IngressList": { + "description": "IngressList is a collection of Ingress.", "type": "object", "required": [ "items" @@ -40342,11 +46224,11 @@ "type": "string" }, "items": { - "description": "`items` is a list of FlowSchemas.", + "description": "items is the list of Ingress.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.FlowSchema" + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.Ingress" } }, "kind": { @@ -40354,253 +46236,262 @@ "type": "string" }, "metadata": { - "description": "`metadata` is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1", - "Kind": "FlowSchemaList", + "Group": "networking.k8s.io", + "Version": "v1beta1", + "Kind": "IngressList", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1.FlowSchemaSpec": { - "description": "FlowSchemaSpec describes how the FlowSchema's specification looks like.", + "io.k8s.api.networking.v1beta1.IngressLoadBalancerIngress": { + "description": "IngressLoadBalancerIngress represents the status of a load-balancer ingress point.", "type": "object", - "required": [ - "priorityLevelConfiguration" - ], "properties": { - "distinguisherMethod": { - "description": "`distinguisherMethod` defines how to compute the flow distinguisher for requests that match this schema. `nil` specifies that the distinguisher is disabled and thus will always be the empty string.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.FlowDistinguisherMethod" - }, - "matchingPrecedence": { - "description": "`matchingPrecedence` is used to choose among the FlowSchemas that match a given request. The chosen FlowSchema is among those with the numerically lowest (which we take to be logically highest) MatchingPrecedence. Each MatchingPrecedence value must be ranged in [1,10000]. Note that if the precedence is not specified, it will be set to 1000 as default.", - "type": "integer", - "format": "int32", - "default": 0 + "hostname": { + "description": "hostname is set for load-balancer ingress points that are DNS based.", + "type": "string" }, - "priorityLevelConfiguration": { - "description": "`priorityLevelConfiguration` should reference a PriorityLevelConfiguration in the cluster. If the reference cannot be resolved, the FlowSchema will be ignored and marked as invalid in its status. Required.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.PriorityLevelConfigurationReference" + "ip": { + "description": "ip is set for load-balancer ingress points that are IP based.", + "type": "string" }, - "rules": { - "description": "`rules` describes which requests will match this flow schema. This FlowSchema matches a request if and only if at least one member of rules matches the request. if it is an empty slice, there will be no requests matching the FlowSchema.", + "ports": { + "description": "ports provides information about the ports exposed by this LoadBalancer.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.PolicyRulesWithSubjects" + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressPortStatus" }, "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1", - "Kind": "FlowSchemaSpec", + "Group": "networking.k8s.io", + "Version": "v1beta1", + "Kind": "IngressLoadBalancerIngress", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1.FlowSchemaStatus": { - "description": "FlowSchemaStatus represents the current state of a FlowSchema.", + "io.k8s.api.networking.v1beta1.IngressLoadBalancerStatus": { + "description": "LoadBalancerStatus represents the status of a load-balancer.", "type": "object", "properties": { - "conditions": { - "description": "`conditions` is a list of the current states of FlowSchema.", + "ingress": { + "description": "ingress is a list containing ingress points for the load-balancer.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.FlowSchemaCondition" + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressLoadBalancerIngress" }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1", - "Kind": "FlowSchemaStatus", + "Group": "networking.k8s.io", + "Version": "v1beta1", + "Kind": "IngressLoadBalancerStatus", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1.GroupSubject": { - "description": "GroupSubject holds detailed information for group-kind subject.", + "io.k8s.api.networking.v1beta1.IngressPortStatus": { + "description": "IngressPortStatus represents the error condition of a service port", "type": "object", "required": [ - "name" + "port", + "protocol" ], "properties": { - "name": { - "description": "name is the user group that matches, or \"*\" to match all user groups. See https://github.com/kubernetes/apiserver/blob/master/pkg/authentication/user/user.go for some well-known group names. Required.", + "error": { + "description": "error is to record the problem with the service port The format of the error shall comply with the following rules: - built-in error values shall be specified in this file and those shall use\n CamelCase names\n- cloud provider specific error values must have names that comply with the\n format foo.example.com/CamelCase.", + "type": "string" + }, + "port": { + "description": "port is the port number of the ingress port.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "protocol": { + "description": "protocol is the protocol of the ingress port. The supported values are: \"TCP\", \"UDP\", \"SCTP\"\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", "type": "string", - "default": "" + "default": "", + "enum": [ + "SCTP", + "TCP", + "UDP" + ] } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1", - "Kind": "GroupSubject", + "Group": "networking.k8s.io", + "Version": "v1beta1", + "Kind": "IngressPortStatus", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1.LimitResponse": { - "description": "LimitResponse defines how to handle requests that can not be executed right now.", + "io.k8s.api.networking.v1beta1.IngressRule": { + "description": "IngressRule represents the rules mapping the paths under a specified host to the related backend services. Incoming requests are first evaluated for a host match, then routed to the backend associated with the matching IngressRuleValue.", "type": "object", - "required": [ - "type" - ], "properties": { - "queuing": { - "description": "`queuing` holds the configuration parameters for queuing. This field may be non-empty only if `type` is `\"Queue\"`.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.QueuingConfiguration" + "host": { + "description": "host is the fully qualified domain name of a network host, as defined by RFC 3986. Note the following deviations from the \"host\" part of the URI as defined in RFC 3986: 1. IPs are not allowed. Currently an IngressRuleValue can only apply to\n the IP in the Spec of the parent Ingress.\n2. The `:` delimiter is not respected because ports are not allowed.\n\t Currently the port of an Ingress is implicitly :80 for http and\n\t :443 for https.\nBoth these may change in the future. Incoming requests are matched against the host before the IngressRuleValue. If the host is unspecified, the Ingress routes all traffic based on the specified IngressRuleValue.\n\nhost can be \"precise\" which is a domain name without the terminating dot of a network host (e.g. \"foo.bar.com\") or \"wildcard\", which is a domain name prefixed with a single wildcard label (e.g. \"*.foo.com\"). The wildcard character '*' must appear by itself as the first DNS label and matches only a single label. You cannot have a wildcard label by itself (e.g. Host == \"*\"). Requests will be matched against the Host field in the following way: 1. If Host is precise, the request matches this rule if the http host header is equal to Host. 2. If Host is a wildcard, then the request matches this rule if the http host header is to equal to the suffix (removing the first label) of the wildcard rule.", + "type": "string" }, - "type": { - "description": "`type` is \"Queue\" or \"Reject\". \"Queue\" means that requests that can not be executed upon arrival are held in a queue until they can be executed or a queuing limit is reached. \"Reject\" means that requests that can not be executed upon arrival are rejected. Required.", - "type": "string", - "default": "" + "http": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.HTTPIngressRuleValue" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1", - "Kind": "LimitResponse", + "Group": "networking.k8s.io", + "Version": "v1beta1", + "Kind": "IngressRule", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "queuing": "Queuing" - } + } + }, + "io.k8s.api.networking.v1beta1.IngressRuleValue": { + "description": "IngressRuleValue represents a rule to apply against incoming requests. If the rule is satisfied, the request is routed to the specified backend. Currently mixing different types of rules in a single Ingress is disallowed, so exactly one of the following must be set.", + "type": "object", + "properties": { + "http": { + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.HTTPIngressRuleValue" } - ] + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "networking.k8s.io", + "Version": "v1beta1", + "Kind": "IngressRuleValue", + "Scope": "Namespaced" + } }, - "io.k8s.api.flowcontrol.v1.LimitedPriorityLevelConfiguration": { - "description": "LimitedPriorityLevelConfiguration specifies how to handle requests that are subject to limits. It addresses two issues:\n - How are requests for this priority level limited?\n - What should be done with requests that exceed the limit?", + "io.k8s.api.networking.v1beta1.IngressSpec": { + "description": "IngressSpec describes the Ingress the user wishes to exist.", "type": "object", "properties": { - "borrowingLimitPercent": { - "description": "`borrowingLimitPercent`, if present, configures a limit on how many seats this priority level can borrow from other priority levels. The limit is known as this level's BorrowingConcurrencyLimit (BorrowingCL) and is a limit on the total number of seats that this level may borrow at any one time. This field holds the ratio of that limit to the level's nominal concurrency limit. When this field is non-nil, it must hold a non-negative integer and the limit is calculated as follows.\n\nBorrowingCL(i) = round( NominalCL(i) * borrowingLimitPercent(i)/100.0 )\n\nThe value of this field can be more than 100, implying that this priority level can borrow a number of seats that is greater than its own nominal concurrency limit (NominalCL). When this field is left `nil`, the limit is effectively infinite.", - "type": "integer", - "format": "int32" + "backend": { + "description": "backend is the default backend capable of servicing requests that don't match any rule. At least one of 'backend' or 'rules' must be specified. This field is optional to allow the loadbalancer controller or defaulting logic to specify a global default.", + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressBackend" }, - "lendablePercent": { - "description": "`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. The value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows.\n\nLendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 )", - "type": "integer", - "format": "int32" + "ingressClassName": { + "description": "ingressClassName is the name of the IngressClass cluster resource. The associated IngressClass defines which controller will implement the resource. This replaces the deprecated `kubernetes.io/ingress.class` annotation. For backwards compatibility, when that annotation is set, it must be given precedence over this field. The controller may emit a warning if the field and annotation have different values. Implementations of this API should ignore Ingresses without a class specified. An IngressClass resource may be marked as default, which can be used to set a default value for this field. For more information, refer to the IngressClass documentation.", + "type": "string" }, - "limitResponse": { - "description": "`limitResponse` indicates what to do with requests that can not be executed right now", - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.LimitResponse" + "rules": { + "description": "rules is a list of host rules used to configure the Ingress. If unspecified, or no rule matches, all traffic is sent to the default backend.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressRule" + }, + "x-kubernetes-list-type": "atomic" }, - "nominalConcurrencyShares": { - "description": "`nominalConcurrencyShares` (NCS) contributes to the computation of the NominalConcurrencyLimit (NominalCL) of this level. This is the number of execution seats available at this priority level. This is used both for requests dispatched from this priority level as well as requests dispatched from other priority levels borrowing seats from this level. The server's concurrency limit (ServerCL) is divided among the Limited priority levels in proportion to their NCS values:\n\nNominalCL(i) = ceil( ServerCL * NCS(i) / sum_ncs ) sum_ncs = sum[priority level k] NCS(k)\n\nBigger numbers mean a larger nominal concurrency limit, at the expense of every other priority level.\n\nIf not specified, this field defaults to a value of 30.\n\nSetting this field to zero supports the construction of a \"jail\" for this priority level that is used to hold some request(s)", - "type": "integer", - "format": "int32" + "tls": { + "description": "tls represents the TLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressTLS" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1", - "Kind": "LimitedPriorityLevelConfiguration", + "Group": "networking.k8s.io", + "Version": "v1beta1", + "Kind": "IngressSpec", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1.NonResourcePolicyRule": { - "description": "NonResourcePolicyRule is a predicate that matches non-resource requests according to their verb and the target non-resource URL. A NonResourcePolicyRule matches a request if and only if both (a) at least one member of verbs matches the request and (b) at least one member of nonResourceURLs matches the request.", + "io.k8s.api.networking.v1beta1.IngressStatus": { + "description": "IngressStatus describes the current state of the Ingress.", "type": "object", - "required": [ - "verbs", - "nonResourceURLs" - ], "properties": { - "nonResourceURLs": { - "description": "`nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example:\n - \"/healthz\" is legal\n - \"/hea*\" is illegal\n - \"/hea\" is legal but matches nothing\n - \"/hea/*\" also matches nothing\n - \"/healthz/*\" matches all per-component health checks.\n\"*\" matches all non-resource urls. if it is present, it must be the only entry. Required.", + "loadBalancer": { + "description": "loadBalancer contains the current status of the load-balancer.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressLoadBalancerStatus" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "networking.k8s.io", + "Version": "v1beta1", + "Kind": "IngressStatus", + "Scope": "Namespaced" + } + }, + "io.k8s.api.networking.v1beta1.IngressTLS": { + "description": "IngressTLS describes the transport layer security associated with an Ingress.", + "type": "object", + "properties": { + "hosts": { + "description": "hosts is a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-list-type": "set" + "x-kubernetes-list-type": "atomic" }, - "verbs": { - "description": "`verbs` is a list of matching verbs and may not be empty. \"*\" matches all verbs. If it is present, it must be the only entry. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "secretName": { + "description": "secretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. If the SNI host in a listener conflicts with the \"Host\" header field used by an IngressRule, the SNI host is used for termination and value of the Host header is used for routing.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1", - "Kind": "NonResourcePolicyRule", + "Group": "networking.k8s.io", + "Version": "v1beta1", + "Kind": "IngressTLS", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1.PolicyRulesWithSubjects": { - "description": "PolicyRulesWithSubjects prescribes a test that applies to a request to an apiserver. The test considers the subject making the request, the verb being requested, and the resource to be acted upon. This PolicyRulesWithSubjects matches a request if and only if both (a) at least one member of subjects matches the request and (b) at least one member of resourceRules or nonResourceRules matches the request.", + "io.k8s.api.networking.v1beta1.ParentReference": { + "description": "ParentReference describes a reference to a parent object.", "type": "object", "required": [ - "subjects" + "resource", + "name" ], "properties": { - "nonResourceRules": { - "description": "`nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.NonResourcePolicyRule" - }, - "x-kubernetes-list-type": "atomic" + "group": { + "description": "Group is the group of the object being referenced.", + "type": "string" }, - "resourceRules": { - "description": "`resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.ResourcePolicyRule" - }, - "x-kubernetes-list-type": "atomic" + "name": { + "description": "Name is the name of the object being referenced.", + "type": "string" }, - "subjects": { - "description": "subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.Subject" - }, - "x-kubernetes-list-type": "atomic" + "namespace": { + "description": "Namespace is the namespace of the object being referenced.", + "type": "string" + }, + "resource": { + "description": "Resource is the resource of the object being referenced.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1", - "Kind": "PolicyRulesWithSubjects", + "Group": "networking.k8s.io", + "Version": "v1beta1", + "Kind": "ParentReference", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1.PriorityLevelConfiguration": { - "description": "PriorityLevelConfiguration represents the configuration of a priority level.", + "io.k8s.api.networking.v1beta1.ServiceCIDR": { + "description": "ServiceCIDR defines a range of IP addresses using CIDR format (e.g. 192.168.0.0/24 or 2001:db2::/64). This range is used to allocate ClusterIPs to Service objects.", "type": "object", "properties": { "apiVersion": { @@ -40612,64 +46503,31 @@ "type": "string" }, "metadata": { - "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "`spec` is the specification of the desired behavior of a \"request-priority\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "spec is the desired state of the ServiceCIDR. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.PriorityLevelConfigurationSpec" + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.ServiceCIDRSpec" }, "status": { - "description": "`status` is the current status of a \"request-priority\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "status represents the current state of the ServiceCIDR. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.PriorityLevelConfigurationStatus" + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.ServiceCIDRStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1", - "Kind": "PriorityLevelConfiguration", + "Group": "networking.k8s.io", + "Version": "v1beta1", + "Kind": "ServiceCIDR", "Scope": "Clustered" } }, - "io.k8s.api.flowcontrol.v1.PriorityLevelConfigurationCondition": { - "description": "PriorityLevelConfigurationCondition defines the condition of priority level.", - "type": "object", - "properties": { - "lastTransitionTime": { - "description": "`lastTransitionTime` is the last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "`message` is a human-readable message indicating details about last transition.", - "type": "string" - }, - "reason": { - "description": "`reason` is a unique, one-word, CamelCase reason for the condition's last transition.", - "type": "string" - }, - "status": { - "description": "`status` is the status of the condition. Can be True, False, Unknown. Required.", - "type": "string" - }, - "type": { - "description": "`type` is the type of the condition. Required.", - "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1", - "Kind": "PriorityLevelConfigurationCondition", - "Scope": "Namespaced" - } - }, - "io.k8s.api.flowcontrol.v1.PriorityLevelConfigurationList": { - "description": "PriorityLevelConfigurationList is a list of PriorityLevelConfiguration objects.", + "io.k8s.api.networking.v1beta1.ServiceCIDRList": { + "description": "ServiceCIDRList contains a list of ServiceCIDR objects.", "type": "object", "required": [ "items" @@ -40680,11 +46538,11 @@ "type": "string" }, "items": { - "description": "`items` is a list of request-priorities.", + "description": "items is the list of ServiceCIDRs.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.PriorityLevelConfiguration" + "$ref": "#/definitions/io.k8s.api.networking.v1beta1.ServiceCIDR" } }, "kind": { @@ -40692,88 +46550,51 @@ "type": "string" }, "metadata": { - "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1", - "Kind": "PriorityLevelConfigurationList", - "Scope": "Namespaced" - } - }, - "io.k8s.api.flowcontrol.v1.PriorityLevelConfigurationReference": { - "description": "PriorityLevelConfigurationReference contains information that points to the \"request-priority\" being used.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "`name` is the name of the priority level configuration being referenced Required.", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1", - "Kind": "PriorityLevelConfigurationReference", + "Group": "networking.k8s.io", + "Version": "v1beta1", + "Kind": "ServiceCIDRList", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1.PriorityLevelConfigurationSpec": { - "description": "PriorityLevelConfigurationSpec specifies the configuration of a priority level.", + "io.k8s.api.networking.v1beta1.ServiceCIDRSpec": { + "description": "ServiceCIDRSpec define the CIDRs the user wants to use for allocating ClusterIPs for Services.", "type": "object", - "required": [ - "type" - ], "properties": { - "exempt": { - "description": "`exempt` specifies how requests are handled for an exempt priority level. This field MUST be empty if `type` is `\"Limited\"`. This field MAY be non-empty if `type` is `\"Exempt\"`. If empty and `type` is `\"Exempt\"` then the default values for `ExemptPriorityLevelConfiguration` apply.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.ExemptPriorityLevelConfiguration" - }, - "limited": { - "description": "`limited` specifies how requests are handled for a Limited priority level. This field must be non-empty if and only if `type` is `\"Limited\"`.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.LimitedPriorityLevelConfiguration" - }, - "type": { - "description": "`type` indicates whether this priority level is subject to limitation on request execution. A value of `\"Exempt\"` means that requests of this priority level are not subject to a limit (and thus are never queued) and do not detract from the capacity made available to other priority levels. A value of `\"Limited\"` means that (a) requests of this priority level _are_ subject to limits and (b) some of the server's limited capacity is made available exclusively to this priority level. Required.", - "type": "string", - "default": "" + "cidrs": { + "description": "CIDRs defines the IP blocks in CIDR notation (e.g. \"192.168.0.0/24\" or \"2001:db8::/64\") from which to assign service cluster IPs. Max of two CIDRs is allowed, one of each IP family. This field is immutable.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1", - "Kind": "PriorityLevelConfigurationSpec", + "Group": "networking.k8s.io", + "Version": "v1beta1", + "Kind": "ServiceCIDRSpec", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "exempt": "Exempt", - "limited": "Limited" - } - } - ] + } }, - "io.k8s.api.flowcontrol.v1.PriorityLevelConfigurationStatus": { - "description": "PriorityLevelConfigurationStatus represents the current state of a \"request-priority\".", + "io.k8s.api.networking.v1beta1.ServiceCIDRStatus": { + "description": "ServiceCIDRStatus describes the current state of the ServiceCIDR.", "type": "object", "properties": { "conditions": { - "description": "`conditions` is the current state of \"request-priority\".", + "description": "conditions holds an array of metav1.Condition that describe the state of the ServiceCIDR. Current service state", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.PriorityLevelConfigurationCondition" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" }, "x-kubernetes-list-map-keys": [ "type" @@ -40785,239 +46606,168 @@ }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1", - "Kind": "PriorityLevelConfigurationStatus", + "Group": "networking.k8s.io", + "Version": "v1beta1", + "Kind": "ServiceCIDRStatus", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1.QueuingConfiguration": { - "description": "QueuingConfiguration holds the configuration parameters for queuing", + "io.k8s.api.node.v1.Overhead": { + "description": "Overhead structure represents the resource overhead associated with running a pod.", "type": "object", "properties": { - "handSize": { - "description": "`handSize` is a small positive number that configures the shuffle sharding of requests into queues. When enqueuing a request at this priority level the request's flow identifier (a string pair) is hashed and the hash value is used to shuffle the list of queues and deal a hand of the size specified here. The request is put into one of the shortest queues in that hand. `handSize` must be no larger than `queues`, and should be significantly smaller (so that a few heavy flows do not saturate most of the queues). See the user-facing documentation for more extensive guidance on setting this field. This field has a default value of 8.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "queueLengthLimit": { - "description": "`queueLengthLimit` is the maximum number of requests allowed to be waiting in a given queue of this priority level at a time; excess requests are rejected. This value must be positive. If not specified, it will be defaulted to 50.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "queues": { - "description": "`queues` is the number of queues for this priority level. The queues exist independently at each apiserver. The value must be positive. Setting it to 1 effectively precludes shufflesharding and thus makes the distinguisher method of associated flow schemas irrelevant. This field has a default value of 64.", - "type": "integer", - "format": "int32", - "default": 0 + "podFixed": { + "description": "podFixed represents the fixed resource overhead associated with running a pod.", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", + "Group": "node.k8s.io", "Version": "v1", - "Kind": "QueuingConfiguration", + "Kind": "Overhead", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1.ResourcePolicyRule": { - "description": "ResourcePolicyRule is a predicate that matches some resource requests, testing the request's verb and the target resource. A ResourcePolicyRule matches a resource request if and only if: (a) at least one member of verbs matches the request, (b) at least one member of apiGroups matches the request, (c) at least one member of resources matches the request, and (d) either (d1) the request does not specify a namespace (i.e., `Namespace==\"\"`) and clusterScope is true or (d2) the request specifies a namespace and least one member of namespaces matches the request's namespace.", + "io.k8s.api.node.v1.RuntimeClass": { + "description": "RuntimeClass defines a class of container runtime supported in the cluster. The RuntimeClass is used to determine which container runtime is used to run all containers in a pod. RuntimeClasses are manually defined by a user or cluster provisioner, and referenced in the PodSpec. The Kubelet is responsible for resolving the RuntimeClassName reference before running the pod. For more details, see https://kubernetes.io/docs/concepts/containers/runtime-class/", "type": "object", "required": [ - "verbs", - "apiGroups", - "resources" + "handler" ], "properties": { - "apiGroups": { - "description": "`apiGroups` is a list of matching API groups and may not be empty. \"*\" matches all API groups and, if present, must be the only entry. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "clusterScope": { - "description": "`clusterScope` indicates whether to match requests that do not specify a namespace (which happens either because the resource is not namespaced or the request targets all namespaces). If this field is omitted or false then the `namespaces` field must contain a non-empty list.", - "type": "boolean" + "handler": { + "description": "handler specifies the underlying runtime and configuration that the CRI implementation will use to handle pods of this class. The possible values are specific to the node \u0026 CRI configuration. It is assumed that all handlers are available on every node, and handlers of the same name are equivalent on every node. For example, a handler called \"runc\" might specify that the runc OCI runtime (using native Linux containers) will be used to run the containers in a pod. The Handler must be lowercase, conform to the DNS Label (RFC 1123) requirements, and is immutable.", + "type": "string", + "default": "" }, - "namespaces": { - "description": "`namespaces` is a list of target namespaces that restricts matches. A request that specifies a target namespace matches only if either (a) this list contains that target namespace or (b) this list contains \"*\". Note that \"*\" matches any specified namespace but does not match a request that _does not specify_ a namespace (see the `clusterScope` field for that). This list may be empty, but only if `clusterScope` is true.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "resources": { - "description": "`resources` is a list of matching resources (i.e., lowercase and plural) with, if desired, subresource. For example, [ \"services\", \"nodes/status\" ]. This list may not be empty. \"*\" matches all resources and, if present, must be the only entry. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "metadata": { + "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "verbs": { - "description": "`verbs` is a list of matching verbs and may not be empty. \"*\" matches all verbs and, if present, must be the only entry. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1", - "Kind": "ResourcePolicyRule", - "Scope": "Namespaced" - } - }, - "io.k8s.api.flowcontrol.v1.ServiceAccountSubject": { - "description": "ServiceAccountSubject holds detailed information for service-account-kind subject.", - "type": "object", - "required": [ - "namespace", - "name" - ], - "properties": { - "name": { - "description": "`name` is the name of matching ServiceAccount objects, or \"*\" to match regardless of name. Required.", - "type": "string", - "default": "" + "overhead": { + "description": "overhead represents the resource overhead associated with running a pod for a given RuntimeClass. For more details, see\n https://kubernetes.io/docs/concepts/scheduling-eviction/pod-overhead/", + "$ref": "#/definitions/io.k8s.api.node.v1.Overhead" }, - "namespace": { - "description": "`namespace` is the namespace of matching ServiceAccount objects. Required.", - "type": "string", - "default": "" + "scheduling": { + "description": "scheduling holds the scheduling constraints to ensure that pods running with this RuntimeClass are scheduled to nodes that support it. If scheduling is nil, this RuntimeClass is assumed to be supported by all nodes.", + "$ref": "#/definitions/io.k8s.api.node.v1.Scheduling" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", + "Type": "object", + "Group": "node.k8s.io", "Version": "v1", - "Kind": "ServiceAccountSubject", - "Scope": "Namespaced" + "Kind": "RuntimeClass", + "Scope": "Clustered" } }, - "io.k8s.api.flowcontrol.v1.Subject": { - "description": "Subject matches the originator of a request, as identified by the request authentication system. There are three ways of matching an originator; by user, group, or service account.", + "io.k8s.api.node.v1.RuntimeClassList": { + "description": "RuntimeClassList is a list of RuntimeClass objects.", "type": "object", "required": [ - "kind" + "items" ], "properties": { - "group": { - "description": "`group` matches based on user group name.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.GroupSubject" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "kind": { - "description": "`kind` indicates which one of the other fields is non-empty. Required", - "type": "string", - "default": "" + "items": { + "description": "items is a list of schema objects.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.node.v1.RuntimeClass" + } }, - "serviceAccount": { - "description": "`serviceAccount` matches ServiceAccounts.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.ServiceAccountSubject" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "user": { - "description": "`user` matches based on username.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1.UserSubject" + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", + "Type": "list", + "Group": "node.k8s.io", "Version": "v1", - "Kind": "Subject", + "Kind": "RuntimeClassList", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "kind", - "fields-to-discriminateBy": { - "group": "Group", - "serviceAccount": "ServiceAccount", - "user": "User" - } - } - ] + } }, - "io.k8s.api.flowcontrol.v1.UserSubject": { - "description": "UserSubject holds detailed information for user-kind subject.", + "io.k8s.api.node.v1.Scheduling": { + "description": "Scheduling specifies the scheduling constraints for nodes supporting a RuntimeClass.", "type": "object", - "required": [ - "name" - ], "properties": { - "name": { - "description": "`name` is the username that matches, or \"*\" to match all usernames. Required.", - "type": "string", - "default": "" + "nodeSelector": { + "description": "nodeSelector lists labels that must be present on nodes that support this RuntimeClass. Pods using this RuntimeClass can only be scheduled to a node matched by this selector. The RuntimeClass nodeSelector is merged with a pod's existing nodeSelector. Any conflicts will cause the pod to be rejected in admission.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + }, + "x-kubernetes-map-type": "atomic" + }, + "tolerations": { + "description": "tolerations are appended (excluding duplicates) to pods running with this RuntimeClass during admission, effectively unioning the set of nodes tolerated by the pod and the RuntimeClass.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", + "Group": "node.k8s.io", "Version": "v1", - "Kind": "UserSubject", + "Kind": "Scheduling", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta1.ExemptPriorityLevelConfiguration": { - "description": "ExemptPriorityLevelConfiguration describes the configurable aspects of the handling of exempt requests. In the mandatory exempt configuration object the values in the fields here can be modified by authorized users, unlike the rest of the `spec`.", + "io.k8s.api.node.v1alpha1.Overhead": { + "description": "Overhead structure represents the resource overhead associated with running a pod.", "type": "object", "properties": { - "lendablePercent": { - "description": "`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. This value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows.\n\nLendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 )", - "type": "integer", - "format": "int32" - }, - "nominalConcurrencyShares": { - "description": "`nominalConcurrencyShares` (NCS) contributes to the computation of the NominalConcurrencyLimit (NominalCL) of this level. This is the number of execution seats nominally reserved for this priority level. This DOES NOT limit the dispatching from this priority level but affects the other priority levels through the borrowing mechanism. The server's concurrency limit (ServerCL) is divided among all the priority levels in proportion to their NCS values:\n\nNominalCL(i) = ceil( ServerCL * NCS(i) / sum_ncs ) sum_ncs = sum[priority level k] NCS(k)\n\nBigger numbers mean a larger nominal concurrency limit, at the expense of every other priority level. This field has a default value of zero.", - "type": "integer", - "format": "int32" + "podFixed": { + "description": "podFixed represents the fixed resource overhead associated with running a pod.", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta1", - "Kind": "ExemptPriorityLevelConfiguration", + "Group": "node.k8s.io", + "Version": "v1alpha1", + "Kind": "Overhead", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta1.FlowDistinguisherMethod": { - "description": "FlowDistinguisherMethod specifies the method of a flow distinguisher.", + "io.k8s.api.node.v1alpha1.RuntimeClass": { + "description": "RuntimeClass defines a class of container runtime supported in the cluster. The RuntimeClass is used to determine which container runtime is used to run all containers in a pod. RuntimeClasses are (currently) manually defined by a user or cluster provisioner, and referenced in the PodSpec. The Kubelet is responsible for resolving the RuntimeClassName reference before running the pod. For more details, see https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class", "type": "object", "required": [ - "type" + "spec" ], - "properties": { - "type": { - "description": "`type` is the type of flow distinguisher method The supported types are \"ByUser\" and \"ByNamespace\". Required.", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta1", - "Kind": "FlowDistinguisherMethod", - "Scope": "Namespaced" - } - }, - "io.k8s.api.flowcontrol.v1beta1.FlowSchema": { - "description": "FlowSchema defines the schema of a group of flows. Note that a flow is made up of a set of inbound API requests with similar attributes and is identified by a pair of strings: the name of the FlowSchema and a \"flow distinguisher\".", - "type": "object", "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -41028,64 +46778,26 @@ "type": "string" }, "metadata": { - "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "`spec` is the specification of the desired behavior of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchemaSpec" - }, - "status": { - "description": "`status` is the current status of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "spec represents specification of the RuntimeClass More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchemaStatus" + "$ref": "#/definitions/io.k8s.api.node.v1alpha1.RuntimeClassSpec" } }, "x-fabric8-info": { "Type": "object", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta1", - "Kind": "FlowSchema", + "Group": "node.k8s.io", + "Version": "v1alpha1", + "Kind": "RuntimeClass", "Scope": "Clustered" } }, - "io.k8s.api.flowcontrol.v1beta1.FlowSchemaCondition": { - "description": "FlowSchemaCondition describes conditions for a FlowSchema.", - "type": "object", - "properties": { - "lastTransitionTime": { - "description": "`lastTransitionTime` is the last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "`message` is a human-readable message indicating details about last transition.", - "type": "string" - }, - "reason": { - "description": "`reason` is a unique, one-word, CamelCase reason for the condition's last transition.", - "type": "string" - }, - "status": { - "description": "`status` is the status of the condition. Can be True, False, Unknown. Required.", - "type": "string" - }, - "type": { - "description": "`type` is the type of the condition. Required.", - "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta1", - "Kind": "FlowSchemaCondition", - "Scope": "Namespaced" - } - }, - "io.k8s.api.flowcontrol.v1beta1.FlowSchemaList": { - "description": "FlowSchemaList is a list of FlowSchema objects.", + "io.k8s.api.node.v1alpha1.RuntimeClassList": { + "description": "RuntimeClassList is a list of RuntimeClass objects.", "type": "object", "required": [ "items" @@ -41096,11 +46808,11 @@ "type": "string" }, "items": { - "description": "`items` is a list of FlowSchemas.", + "description": "items is a list of schema objects.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchema" + "$ref": "#/definitions/io.k8s.api.node.v1alpha1.RuntimeClass" } }, "kind": { @@ -41108,321 +46820,277 @@ "type": "string" }, "metadata": { - "description": "`metadata` is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta1", - "Kind": "FlowSchemaList", + "Group": "node.k8s.io", + "Version": "v1alpha1", + "Kind": "RuntimeClassList", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta1.FlowSchemaSpec": { - "description": "FlowSchemaSpec describes how the FlowSchema's specification looks like.", + "io.k8s.api.node.v1alpha1.RuntimeClassSpec": { + "description": "RuntimeClassSpec is a specification of a RuntimeClass. It contains parameters that are required to describe the RuntimeClass to the Container Runtime Interface (CRI) implementation, as well as any other components that need to understand how the pod will be run. The RuntimeClassSpec is immutable.", "type": "object", "required": [ - "priorityLevelConfiguration" + "runtimeHandler" ], "properties": { - "distinguisherMethod": { - "description": "`distinguisherMethod` defines how to compute the flow distinguisher for requests that match this schema. `nil` specifies that the distinguisher is disabled and thus will always be the empty string.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowDistinguisherMethod" - }, - "matchingPrecedence": { - "description": "`matchingPrecedence` is used to choose among the FlowSchemas that match a given request. The chosen FlowSchema is among those with the numerically lowest (which we take to be logically highest) MatchingPrecedence. Each MatchingPrecedence value must be ranged in [1,10000]. Note that if the precedence is not specified, it will be set to 1000 as default.", - "type": "integer", - "format": "int32", - "default": 0 + "overhead": { + "description": "overhead represents the resource overhead associated with running a pod for a given RuntimeClass. For more details, see https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md", + "$ref": "#/definitions/io.k8s.api.node.v1alpha1.Overhead" }, - "priorityLevelConfiguration": { - "description": "`priorityLevelConfiguration` should reference a PriorityLevelConfiguration in the cluster. If the reference cannot be resolved, the FlowSchema will be ignored and marked as invalid in its status. Required.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationReference" + "runtimeHandler": { + "description": "runtimeHandler specifies the underlying runtime and configuration that the CRI implementation will use to handle pods of this class. The possible values are specific to the node \u0026 CRI configuration. It is assumed that all handlers are available on every node, and handlers of the same name are equivalent on every node. For example, a handler called \"runc\" might specify that the runc OCI runtime (using native Linux containers) will be used to run the containers in a pod. The runtimeHandler must be lowercase, conform to the DNS Label (RFC 1123) requirements, and is immutable.", + "type": "string", + "default": "" }, - "rules": { - "description": "`rules` describes which requests will match this flow schema. This FlowSchema matches a request if and only if at least one member of rules matches the request. if it is an empty slice, there will be no requests matching the FlowSchema.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PolicyRulesWithSubjects" - }, - "x-kubernetes-list-type": "atomic" + "scheduling": { + "description": "scheduling holds the scheduling constraints to ensure that pods running with this RuntimeClass are scheduled to nodes that support it. If scheduling is nil, this RuntimeClass is assumed to be supported by all nodes.", + "$ref": "#/definitions/io.k8s.api.node.v1alpha1.Scheduling" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta1", - "Kind": "FlowSchemaSpec", + "Group": "node.k8s.io", + "Version": "v1alpha1", + "Kind": "RuntimeClassSpec", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta1.FlowSchemaStatus": { - "description": "FlowSchemaStatus represents the current state of a FlowSchema.", + "io.k8s.api.node.v1alpha1.Scheduling": { + "description": "Scheduling specifies the scheduling constraints for nodes supporting a RuntimeClass.", "type": "object", "properties": { - "conditions": { - "description": "`conditions` is a list of the current states of FlowSchema.", + "nodeSelector": { + "description": "nodeSelector lists labels that must be present on nodes that support this RuntimeClass. Pods using this RuntimeClass can only be scheduled to a node matched by this selector. The RuntimeClass nodeSelector is merged with a pod's existing nodeSelector. Any conflicts will cause the pod to be rejected in admission.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + }, + "x-kubernetes-map-type": "atomic" + }, + "tolerations": { + "description": "tolerations are appended (excluding duplicates) to pods running with this RuntimeClass during admission, effectively unioning the set of nodes tolerated by the pod and the RuntimeClass.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.FlowSchemaCondition" + "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta1", - "Kind": "FlowSchemaStatus", + "Group": "node.k8s.io", + "Version": "v1alpha1", + "Kind": "Scheduling", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta1.GroupSubject": { - "description": "GroupSubject holds detailed information for group-kind subject.", + "io.k8s.api.node.v1beta1.Overhead": { + "description": "Overhead structure represents the resource overhead associated with running a pod.", "type": "object", - "required": [ - "name" - ], "properties": { - "name": { - "description": "name is the user group that matches, or \"*\" to match all user groups. See https://github.com/kubernetes/apiserver/blob/master/pkg/authentication/user/user.go for some well-known group names. Required.", - "type": "string", - "default": "" + "podFixed": { + "description": "podFixed represents the fixed resource overhead associated with running a pod.", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", + "Group": "node.k8s.io", "Version": "v1beta1", - "Kind": "GroupSubject", + "Kind": "Overhead", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta1.LimitResponse": { - "description": "LimitResponse defines how to handle requests that can not be executed right now.", + "io.k8s.api.node.v1beta1.RuntimeClass": { + "description": "RuntimeClass defines a class of container runtime supported in the cluster. The RuntimeClass is used to determine which container runtime is used to run all containers in a pod. RuntimeClasses are (currently) manually defined by a user or cluster provisioner, and referenced in the PodSpec. The Kubelet is responsible for resolving the RuntimeClassName reference before running the pod. For more details, see https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class", "type": "object", "required": [ - "type" + "handler" ], "properties": { - "queuing": { - "description": "`queuing` holds the configuration parameters for queuing. This field may be non-empty only if `type` is `\"Queue\"`.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.QueuingConfiguration" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "type": { - "description": "`type` is \"Queue\" or \"Reject\". \"Queue\" means that requests that can not be executed upon arrival are held in a queue until they can be executed or a queuing limit is reached. \"Reject\" means that requests that can not be executed upon arrival are rejected. Required.", + "handler": { + "description": "handler specifies the underlying runtime and configuration that the CRI implementation will use to handle pods of this class. The possible values are specific to the node \u0026 CRI configuration. It is assumed that all handlers are available on every node, and handlers of the same name are equivalent on every node. For example, a handler called \"runc\" might specify that the runc OCI runtime (using native Linux containers) will be used to run the containers in a pod. The handler must be lowercase, conform to the DNS Label (RFC 1123) requirements, and is immutable.", "type": "string", "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta1", - "Kind": "LimitResponse", - "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "queuing": "Queuing" - } - } - ] - }, - "io.k8s.api.flowcontrol.v1beta1.LimitedPriorityLevelConfiguration": { - "description": "LimitedPriorityLevelConfiguration specifies how to handle requests that are subject to limits. It addresses two issues:\n - How are requests for this priority level limited?\n - What should be done with requests that exceed the limit?", - "type": "object", - "properties": { - "assuredConcurrencyShares": { - "description": "`assuredConcurrencyShares` (ACS) configures the execution limit, which is a limit on the number of requests of this priority level that may be executing at a given time. ACS must be a positive number. The server's concurrency limit (SCL) is divided among the concurrency-controlled priority levels in proportion to their assured concurrency shares. This produces the assured concurrency value (ACV) --- the number of requests that may be executing at a time --- for each such priority level:\n\n ACV(l) = ceil( SCL * ACS(l) / ( sum[priority levels k] ACS(k) ) )\n\nbigger numbers of ACS mean more reserved concurrent requests (at the expense of every other PL). This field has a default value of 30.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "borrowingLimitPercent": { - "description": "`borrowingLimitPercent`, if present, configures a limit on how many seats this priority level can borrow from other priority levels. The limit is known as this level's BorrowingConcurrencyLimit (BorrowingCL) and is a limit on the total number of seats that this level may borrow at any one time. This field holds the ratio of that limit to the level's nominal concurrency limit. When this field is non-nil, it must hold a non-negative integer and the limit is calculated as follows.\n\nBorrowingCL(i) = round( NominalCL(i) * borrowingLimitPercent(i)/100.0 )\n\nThe value of this field can be more than 100, implying that this priority level can borrow a number of seats that is greater than its own nominal concurrency limit (NominalCL). When this field is left `nil`, the limit is effectively infinite.", - "type": "integer", - "format": "int32" }, - "lendablePercent": { - "description": "`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. The value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows.\n\nLendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 )", - "type": "integer", - "format": "int32" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "limitResponse": { - "description": "`limitResponse` indicates what to do with requests that can not be executed right now", + "metadata": { + "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.LimitResponse" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "overhead": { + "description": "overhead represents the resource overhead associated with running a pod for a given RuntimeClass. For more details, see https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md", + "$ref": "#/definitions/io.k8s.api.node.v1beta1.Overhead" + }, + "scheduling": { + "description": "scheduling holds the scheduling constraints to ensure that pods running with this RuntimeClass are scheduled to nodes that support it. If scheduling is nil, this RuntimeClass is assumed to be supported by all nodes.", + "$ref": "#/definitions/io.k8s.api.node.v1beta1.Scheduling" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", + "Type": "object", + "Group": "node.k8s.io", "Version": "v1beta1", - "Kind": "LimitedPriorityLevelConfiguration", - "Scope": "Namespaced" + "Kind": "RuntimeClass", + "Scope": "Clustered" } }, - "io.k8s.api.flowcontrol.v1beta1.NonResourcePolicyRule": { - "description": "NonResourcePolicyRule is a predicate that matches non-resource requests according to their verb and the target non-resource URL. A NonResourcePolicyRule matches a request if and only if both (a) at least one member of verbs matches the request and (b) at least one member of nonResourceURLs matches the request.", + "io.k8s.api.node.v1beta1.RuntimeClassList": { + "description": "RuntimeClassList is a list of RuntimeClass objects.", "type": "object", "required": [ - "verbs", - "nonResourceURLs" + "items" ], "properties": { - "nonResourceURLs": { - "description": "`nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example:\n - \"/healthz\" is legal\n - \"/hea*\" is illegal\n - \"/hea\" is legal but matches nothing\n - \"/hea/*\" also matches nothing\n - \"/healthz/*\" matches all per-component health checks.\n\"*\" matches all non-resource urls. if it is present, it must be the only entry. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "verbs": { - "description": "`verbs` is a list of matching verbs and may not be empty. \"*\" matches all verbs. If it is present, it must be the only entry. Required.", + "items": { + "description": "items is a list of schema objects.", "type": "array", "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "default": {}, + "$ref": "#/definitions/io.k8s.api.node.v1beta1.RuntimeClass" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", + "Type": "list", + "Group": "node.k8s.io", "Version": "v1beta1", - "Kind": "NonResourcePolicyRule", + "Kind": "RuntimeClassList", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta1.PolicyRulesWithSubjects": { - "description": "PolicyRulesWithSubjects prescribes a test that applies to a request to an apiserver. The test considers the subject making the request, the verb being requested, and the resource to be acted upon. This PolicyRulesWithSubjects matches a request if and only if both (a) at least one member of subjects matches the request and (b) at least one member of resourceRules or nonResourceRules matches the request.", + "io.k8s.api.node.v1beta1.Scheduling": { + "description": "Scheduling specifies the scheduling constraints for nodes supporting a RuntimeClass.", "type": "object", - "required": [ - "subjects" - ], "properties": { - "nonResourceRules": { - "description": "`nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.NonResourcePolicyRule" - }, - "x-kubernetes-list-type": "atomic" - }, - "resourceRules": { - "description": "`resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.ResourcePolicyRule" + "nodeSelector": { + "description": "nodeSelector lists labels that must be present on nodes that support this RuntimeClass. Pods using this RuntimeClass can only be scheduled to a node matched by this selector. The RuntimeClass nodeSelector is merged with a pod's existing nodeSelector. Any conflicts will cause the pod to be rejected in admission.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-map-type": "atomic" }, - "subjects": { - "description": "subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.", + "tolerations": { + "description": "tolerations are appended (excluding duplicates) to pods running with this RuntimeClass during admission, effectively unioning the set of nodes tolerated by the pod and the RuntimeClass.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.Subject" + "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" }, "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", + "Group": "node.k8s.io", "Version": "v1beta1", - "Kind": "PolicyRulesWithSubjects", + "Kind": "Scheduling", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration": { - "description": "PriorityLevelConfiguration represents the configuration of a priority level.", + "io.k8s.api.policy.v1.Eviction": { + "description": "Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod. A request to cause such an eviction is created by POSTing to .../pods/\u003cpod name\u003e/evictions.", "type": "object", "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "deleteOptions": { + "description": "DeleteOptions may be provided", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "ObjectMeta describes the pod that is being evicted.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "`spec` is the specification of the desired behavior of a \"request-priority\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationSpec" - }, - "status": { - "description": "`status` is the current status of a \"request-priority\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta1", - "Kind": "PriorityLevelConfiguration", - "Scope": "Clustered" + "Group": "", + "Version": "v1", + "Kind": "Eviction", + "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationCondition": { - "description": "PriorityLevelConfigurationCondition defines the condition of priority level.", + "io.k8s.api.policy.v1.PodDisruptionBudget": { + "description": "PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods", "type": "object", "properties": { - "lastTransitionTime": { - "description": "`lastTransitionTime` is the last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "`message` is a human-readable message indicating details about last transition.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "reason": { - "description": "`reason` is a unique, one-word, CamelCase reason for the condition's last transition.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "status": { - "description": "`status` is the status of the condition. Can be True, False, Unknown. Required.", - "type": "string" + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "type": { - "description": "`type` is the type of the condition. Required.", - "type": "string" + "spec": { + "description": "Specification of the desired behavior of the PodDisruptionBudget.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudgetSpec" + }, + "status": { + "description": "Most recently observed status of the PodDisruptionBudget.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudgetStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta1", - "Kind": "PriorityLevelConfigurationCondition", + "Type": "object", + "Group": "", + "Version": "v1", + "Kind": "PodDisruptionBudget", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationList": { - "description": "PriorityLevelConfigurationList is a list of PriorityLevelConfiguration objects.", + "io.k8s.api.policy.v1.PodDisruptionBudgetList": { + "description": "PodDisruptionBudgetList is a collection of PodDisruptionBudgets.", "type": "object", "required": [ "items" @@ -41433,11 +47101,11 @@ "type": "string" }, "items": { - "description": "`items` is a list of request-priorities.", + "description": "Items is a list of PodDisruptionBudgets", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfiguration" + "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget" } }, "kind": { @@ -41445,331 +47113,357 @@ "type": "string" }, "metadata": { - "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta1", - "Kind": "PriorityLevelConfigurationList", + "Group": "", + "Version": "v1", + "Kind": "PodDisruptionBudgetList", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationReference": { - "description": "PriorityLevelConfigurationReference contains information that points to the \"request-priority\" being used.", + "io.k8s.api.policy.v1.PodDisruptionBudgetSpec": { + "description": "PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.", "type": "object", - "required": [ - "name" - ], "properties": { - "name": { - "description": "`name` is the name of the priority level configuration being referenced Required.", + "maxUnavailable": { + "description": "An eviction is allowed if at most \"maxUnavailable\" pods selected by \"selector\" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with \"minAvailable\".", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + }, + "minAvailable": { + "description": "An eviction is allowed if at least \"minAvailable\" pods selected by \"selector\" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying \"100%\".", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + }, + "selector": { + "description": "Label query over pods whose evictions are managed by the disruption budget. A null selector will match no pods, while an empty ({}) selector will select all pods within the namespace.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", + "x-kubernetes-patch-strategy": "replace" + }, + "unhealthyPodEvictionPolicy": { + "description": "UnhealthyPodEvictionPolicy defines the criteria for when unhealthy pods should be considered for eviction. Current implementation considers healthy pods, as pods that have status.conditions item with type=\"Ready\",status=\"True\".\n\nValid policies are IfHealthyBudget and AlwaysAllow. If no policy is specified, the default behavior will be used, which corresponds to the IfHealthyBudget policy.\n\nIfHealthyBudget policy means that running pods (status.phase=\"Running\"), but not yet healthy can be evicted only if the guarded application is not disrupted (status.currentHealthy is at least equal to status.desiredHealthy). Healthy pods will be subject to the PDB for eviction.\n\nAlwaysAllow policy means that all running pods (status.phase=\"Running\"), but not yet healthy are considered disrupted and can be evicted regardless of whether the criteria in a PDB is met. This means perspective running pods of a disrupted application might not get a chance to become healthy. Healthy pods will be subject to the PDB for eviction.\n\nAdditional policies may be added in the future. Clients making eviction decisions should disallow eviction of unhealthy pods if they encounter an unrecognized policy in this field.\n\nThis field is beta-level. The eviction API uses this field when the feature gate PDBUnhealthyPodEvictionPolicy is enabled (enabled by default).\n\nPossible enum values:\n - `\"AlwaysAllow\"` policy means that all running pods (status.phase=\"Running\"), but not yet healthy are considered disrupted and can be evicted regardless of whether the criteria in a PDB is met. This means perspective running pods of a disrupted application might not get a chance to become healthy. Healthy pods will be subject to the PDB for eviction.\n - `\"IfHealthyBudget\"` policy means that running pods (status.phase=\"Running\"), but not yet healthy can be evicted only if the guarded application is not disrupted (status.currentHealthy is at least equal to status.desiredHealthy). Healthy pods will be subject to the PDB for eviction.", "type": "string", - "default": "" + "enum": [ + "AlwaysAllow", + "IfHealthyBudget" + ] } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta1", - "Kind": "PriorityLevelConfigurationReference", + "Group": "", + "Version": "v1", + "Kind": "PodDisruptionBudgetSpec", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationSpec": { - "description": "PriorityLevelConfigurationSpec specifies the configuration of a priority level.", + "io.k8s.api.policy.v1.PodDisruptionBudgetStatus": { + "description": "PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.", "type": "object", "required": [ - "type" + "disruptionsAllowed", + "currentHealthy", + "desiredHealthy", + "expectedPods" ], - "properties": { - "exempt": { - "description": "`exempt` specifies how requests are handled for an exempt priority level. This field MUST be empty if `type` is `\"Limited\"`. This field MAY be non-empty if `type` is `\"Exempt\"`. If empty and `type` is `\"Exempt\"` then the default values for `ExemptPriorityLevelConfiguration` apply.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.ExemptPriorityLevelConfiguration" - }, - "limited": { - "description": "`limited` specifies how requests are handled for a Limited priority level. This field must be non-empty if and only if `type` is `\"Limited\"`.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.LimitedPriorityLevelConfiguration" - }, - "type": { - "description": "`type` indicates whether this priority level is subject to limitation on request execution. A value of `\"Exempt\"` means that requests of this priority level are not subject to a limit (and thus are never queued) and do not detract from the capacity made available to other priority levels. A value of `\"Limited\"` means that (a) requests of this priority level _are_ subject to limits and (b) some of the server's limited capacity is made available exclusively to this priority level. Required.", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta1", - "Kind": "PriorityLevelConfigurationSpec", - "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "exempt": "Exempt", - "limited": "Limited" - } - } - ] - }, - "io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationStatus": { - "description": "PriorityLevelConfigurationStatus represents the current state of a \"request-priority\".", - "type": "object", "properties": { "conditions": { - "description": "`conditions` is the current state of \"request-priority\".", + "description": "Conditions contain conditions for PDB. The disruption controller sets the DisruptionAllowed condition. The following are known values for the reason field (additional reasons could be added in the future): - SyncFailed: The controller encountered an error and wasn't able to compute\n the number of allowed disruptions. Therefore no disruptions are\n allowed and the status of the condition will be False.\n- InsufficientPods: The number of pods are either at or below the number\n required by the PodDisruptionBudget. No disruptions are\n allowed and the status of the condition will be False.\n- SufficientPods: There are more pods than required by the PodDisruptionBudget.\n The condition will be True, and the number of allowed\n disruptions are provided by the disruptionsAllowed property.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.PriorityLevelConfigurationCondition" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" }, "x-kubernetes-list-map-keys": [ "type" ], - "x-kubernetes-list-type": "map" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta1", - "Kind": "PriorityLevelConfigurationStatus", - "Scope": "Namespaced" - } - }, - "io.k8s.api.flowcontrol.v1beta1.QueuingConfiguration": { - "description": "QueuingConfiguration holds the configuration parameters for queuing", - "type": "object", - "properties": { - "handSize": { - "description": "`handSize` is a small positive number that configures the shuffle sharding of requests into queues. When enqueuing a request at this priority level the request's flow identifier (a string pair) is hashed and the hash value is used to shuffle the list of queues and deal a hand of the size specified here. The request is put into one of the shortest queues in that hand. `handSize` must be no larger than `queues`, and should be significantly smaller (so that a few heavy flows do not saturate most of the queues). See the user-facing documentation for more extensive guidance on setting this field. This field has a default value of 8.", + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "currentHealthy": { + "description": "current number of healthy pods", "type": "integer", "format": "int32", "default": 0 }, - "queueLengthLimit": { - "description": "`queueLengthLimit` is the maximum number of requests allowed to be waiting in a given queue of this priority level at a time; excess requests are rejected. This value must be positive. If not specified, it will be defaulted to 50.", + "desiredHealthy": { + "description": "minimum desired number of healthy pods", "type": "integer", "format": "int32", "default": 0 }, - "queues": { - "description": "`queues` is the number of queues for this priority level. The queues exist independently at each apiserver. The value must be positive. Setting it to 1 effectively precludes shufflesharding and thus makes the distinguisher method of associated flow schemas irrelevant. This field has a default value of 64.", + "disruptedPods": { + "description": "DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + } + }, + "disruptionsAllowed": { + "description": "Number of pod disruptions that are currently allowed.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "expectedPods": { + "description": "total number of pods counted by this disruption budget", "type": "integer", "format": "int32", "default": 0 + }, + "observedGeneration": { + "description": "Most recent generation observed when updating this PDB status. DisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.", + "type": "integer", + "format": "int64" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta1", - "Kind": "QueuingConfiguration", + "Group": "", + "Version": "v1", + "Kind": "PodDisruptionBudgetStatus", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta1.ResourcePolicyRule": { - "description": "ResourcePolicyRule is a predicate that matches some resource requests, testing the request's verb and the target resource. A ResourcePolicyRule matches a resource request if and only if: (a) at least one member of verbs matches the request, (b) at least one member of apiGroups matches the request, (c) at least one member of resources matches the request, and (d) either (d1) the request does not specify a namespace (i.e., `Namespace==\"\"`) and clusterScope is true or (d2) the request specifies a namespace and least one member of namespaces matches the request's namespace.", + "io.k8s.api.policy.v1beta1.Eviction": { + "description": "Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod. A request to cause such an eviction is created by POSTing to .../pods/\u003cpod name\u003e/evictions.", "type": "object", - "required": [ - "verbs", - "apiGroups", - "resources" - ], "properties": { - "apiGroups": { - "description": "`apiGroups` is a list of matching API groups and may not be empty. \"*\" matches all API groups and, if present, must be the only entry. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "clusterScope": { - "description": "`clusterScope` indicates whether to match requests that do not specify a namespace (which happens either because the resource is not namespaced or the request targets all namespaces). If this field is omitted or false then the `namespaces` field must contain a non-empty list.", - "type": "boolean" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "namespaces": { - "description": "`namespaces` is a list of target namespaces that restricts matches. A request that specifies a target namespace matches only if either (a) this list contains that target namespace or (b) this list contains \"*\". Note that \"*\" matches any specified namespace but does not match a request that _does not specify_ a namespace (see the `clusterScope` field for that). This list may be empty, but only if `clusterScope` is true.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "deleteOptions": { + "description": "DeleteOptions may be provided", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" }, - "resources": { - "description": "`resources` is a list of matching resources (i.e., lowercase and plural) with, if desired, subresource. For example, [ \"services\", \"nodes/status\" ]. This list may not be empty. \"*\" matches all resources and, if present, must be the only entry. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "verbs": { - "description": "`verbs` is a list of matching verbs and may not be empty. \"*\" matches all verbs and, if present, must be the only entry. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "metadata": { + "description": "ObjectMeta describes the pod that is being evicted.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", + "Type": "object", + "Group": "", "Version": "v1beta1", - "Kind": "ResourcePolicyRule", + "Kind": "Eviction", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta1.ServiceAccountSubject": { - "description": "ServiceAccountSubject holds detailed information for service-account-kind subject.", + "io.k8s.api.policy.v1beta1.PodDisruptionBudget": { + "description": "PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods", "type": "object", - "required": [ - "namespace", - "name" - ], "properties": { - "name": { - "description": "`name` is the name of matching ServiceAccount objects, or \"*\" to match regardless of name. Required.", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "namespace": { - "description": "`namespace` is the namespace of matching ServiceAccount objects. Required.", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "Specification of the desired behavior of the PodDisruptionBudget.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudgetSpec" + }, + "status": { + "description": "Most recently observed status of the PodDisruptionBudget.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudgetStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", + "Type": "object", + "Group": "", "Version": "v1beta1", - "Kind": "ServiceAccountSubject", + "Kind": "PodDisruptionBudget", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta1.Subject": { - "description": "Subject matches the originator of a request, as identified by the request authentication system. There are three ways of matching an originator; by user, group, or service account.", + "io.k8s.api.policy.v1beta1.PodDisruptionBudgetList": { + "description": "PodDisruptionBudgetList is a collection of PodDisruptionBudgets.", "type": "object", "required": [ - "kind" + "items" ], "properties": { - "group": { - "description": "`group` matches based on user group name.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.GroupSubject" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "kind": { - "description": "`kind` indicates which one of the other fields is non-empty. Required", - "type": "string", - "default": "" + "items": { + "description": "items list individual PodDisruptionBudget objects", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget" + } }, - "serviceAccount": { - "description": "`serviceAccount` matches ServiceAccounts.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.ServiceAccountSubject" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "user": { - "description": "`user` matches based on username.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta1.UserSubject" + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", + "Type": "list", + "Group": "", "Version": "v1beta1", - "Kind": "Subject", + "Kind": "PodDisruptionBudgetList", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "kind", - "fields-to-discriminateBy": { - "group": "Group", - "serviceAccount": "ServiceAccount", - "user": "User" - } - } - ] + } }, - "io.k8s.api.flowcontrol.v1beta1.UserSubject": { - "description": "UserSubject holds detailed information for user-kind subject.", + "io.k8s.api.policy.v1beta1.PodDisruptionBudgetSpec": { + "description": "PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.", "type": "object", - "required": [ - "name" - ], "properties": { - "name": { - "description": "`name` is the username that matches, or \"*\" to match all usernames. Required.", + "maxUnavailable": { + "description": "An eviction is allowed if at most \"maxUnavailable\" pods selected by \"selector\" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with \"minAvailable\".", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + }, + "minAvailable": { + "description": "An eviction is allowed if at least \"minAvailable\" pods selected by \"selector\" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying \"100%\".", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + }, + "selector": { + "description": "Label query over pods whose evictions are managed by the disruption budget. A null selector selects no pods. An empty selector ({}) also selects no pods, which differs from standard behavior of selecting all pods. In policy/v1, an empty selector will select all pods in the namespace.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "unhealthyPodEvictionPolicy": { + "description": "UnhealthyPodEvictionPolicy defines the criteria for when unhealthy pods should be considered for eviction. Current implementation considers healthy pods, as pods that have status.conditions item with type=\"Ready\",status=\"True\".\n\nValid policies are IfHealthyBudget and AlwaysAllow. If no policy is specified, the default behavior will be used, which corresponds to the IfHealthyBudget policy.\n\nIfHealthyBudget policy means that running pods (status.phase=\"Running\"), but not yet healthy can be evicted only if the guarded application is not disrupted (status.currentHealthy is at least equal to status.desiredHealthy). Healthy pods will be subject to the PDB for eviction.\n\nAlwaysAllow policy means that all running pods (status.phase=\"Running\"), but not yet healthy are considered disrupted and can be evicted regardless of whether the criteria in a PDB is met. This means perspective running pods of a disrupted application might not get a chance to become healthy. Healthy pods will be subject to the PDB for eviction.\n\nAdditional policies may be added in the future. Clients making eviction decisions should disallow eviction of unhealthy pods if they encounter an unrecognized policy in this field.\n\nThis field is beta-level. The eviction API uses this field when the feature gate PDBUnhealthyPodEvictionPolicy is enabled (enabled by default).\n\nPossible enum values:\n - `\"AlwaysAllow\"` policy means that all running pods (status.phase=\"Running\"), but not yet healthy are considered disrupted and can be evicted regardless of whether the criteria in a PDB is met. This means perspective running pods of a disrupted application might not get a chance to become healthy. Healthy pods will be subject to the PDB for eviction.\n - `\"IfHealthyBudget\"` policy means that running pods (status.phase=\"Running\"), but not yet healthy can be evicted only if the guarded application is not disrupted (status.currentHealthy is at least equal to status.desiredHealthy). Healthy pods will be subject to the PDB for eviction.", "type": "string", - "default": "" + "enum": [ + "AlwaysAllow", + "IfHealthyBudget" + ] } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", + "Group": "", "Version": "v1beta1", - "Kind": "UserSubject", + "Kind": "PodDisruptionBudgetSpec", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta2.ExemptPriorityLevelConfiguration": { - "description": "ExemptPriorityLevelConfiguration describes the configurable aspects of the handling of exempt requests. In the mandatory exempt configuration object the values in the fields here can be modified by authorized users, unlike the rest of the `spec`.", + "io.k8s.api.policy.v1beta1.PodDisruptionBudgetStatus": { + "description": "PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.", "type": "object", + "required": [ + "disruptionsAllowed", + "currentHealthy", + "desiredHealthy", + "expectedPods" + ], "properties": { - "lendablePercent": { - "description": "`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. This value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows.\n\nLendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 )", + "conditions": { + "description": "Conditions contain conditions for PDB. The disruption controller sets the DisruptionAllowed condition. The following are known values for the reason field (additional reasons could be added in the future): - SyncFailed: The controller encountered an error and wasn't able to compute\n the number of allowed disruptions. Therefore no disruptions are\n allowed and the status of the condition will be False.\n- InsufficientPods: The number of pods are either at or below the number\n required by the PodDisruptionBudget. No disruptions are\n allowed and the status of the condition will be False.\n- SufficientPods: There are more pods than required by the PodDisruptionBudget.\n The condition will be True, and the number of allowed\n disruptions are provided by the disruptionsAllowed property.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "currentHealthy": { + "description": "current number of healthy pods", "type": "integer", - "format": "int32" + "format": "int32", + "default": 0 }, - "nominalConcurrencyShares": { - "description": "`nominalConcurrencyShares` (NCS) contributes to the computation of the NominalConcurrencyLimit (NominalCL) of this level. This is the number of execution seats nominally reserved for this priority level. This DOES NOT limit the dispatching from this priority level but affects the other priority levels through the borrowing mechanism. The server's concurrency limit (ServerCL) is divided among all the priority levels in proportion to their NCS values:\n\nNominalCL(i) = ceil( ServerCL * NCS(i) / sum_ncs ) sum_ncs = sum[priority level k] NCS(k)\n\nBigger numbers mean a larger nominal concurrency limit, at the expense of every other priority level. This field has a default value of zero.", + "desiredHealthy": { + "description": "minimum desired number of healthy pods", "type": "integer", - "format": "int32" + "format": "int32", + "default": 0 + }, + "disruptedPods": { + "description": "DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + } + }, + "disruptionsAllowed": { + "description": "Number of pod disruptions that are currently allowed.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "expectedPods": { + "description": "total number of pods counted by this disruption budget", + "type": "integer", + "format": "int32", + "default": 0 + }, + "observedGeneration": { + "description": "Most recent generation observed when updating this PDB status. DisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.", + "type": "integer", + "format": "int64" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "ExemptPriorityLevelConfiguration", + "Group": "", + "Version": "v1beta1", + "Kind": "PodDisruptionBudgetStatus", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta2.FlowDistinguisherMethod": { - "description": "FlowDistinguisherMethod specifies the method of a flow distinguisher.", + "io.k8s.api.rbac.v1.AggregationRule": { + "description": "AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole", "type": "object", - "required": [ - "type" - ], "properties": { - "type": { - "description": "`type` is the type of flow distinguisher method The supported types are \"ByUser\" and \"ByNamespace\". Required.", - "type": "string", - "default": "" + "clusterRoleSelectors": { + "description": "ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "FlowDistinguisherMethod", + "Group": "rbac.authorization.k8s.io", + "Version": "v1", + "Kind": "AggregationRule", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta2.FlowSchema": { - "description": "FlowSchema defines the schema of a group of flows. Note that a flow is made up of a set of inbound API requests with similar attributes and is identified by a pair of strings: the name of the FlowSchema and a \"flow distinguisher\".", + "io.k8s.api.rbac.v1.ClusterRole": { + "description": "ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.", "type": "object", "properties": { + "aggregationRule": { + "description": "AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.", + "$ref": "#/definitions/io.k8s.api.rbac.v1.AggregationRule" + }, "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" @@ -41779,64 +47473,110 @@ "type": "string" }, "metadata": { - "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "spec": { - "description": "`spec` is the specification of the desired behavior of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "rules": { + "description": "Rules holds all the PolicyRules for this ClusterRole", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1.PolicyRule" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "rbac.authorization.k8s.io", + "Version": "v1", + "Kind": "ClusterRole", + "Scope": "Clustered" + } + }, + "io.k8s.api.rbac.v1.ClusterRoleBinding": { + "description": "ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject.", + "type": "object", + "required": [ + "roleRef" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata.", "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.FlowSchemaSpec" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "status": { - "description": "`status` is the current status of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "roleRef": { + "description": "RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. This field is immutable.", "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.FlowSchemaStatus" + "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleRef" + }, + "subjects": { + "description": "Subjects holds references to the objects the role applies to.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1.Subject" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "object", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "FlowSchema", + "Group": "rbac.authorization.k8s.io", + "Version": "v1", + "Kind": "ClusterRoleBinding", "Scope": "Clustered" } }, - "io.k8s.api.flowcontrol.v1beta2.FlowSchemaCondition": { - "description": "FlowSchemaCondition describes conditions for a FlowSchema.", + "io.k8s.api.rbac.v1.ClusterRoleBindingList": { + "description": "ClusterRoleBindingList is a collection of ClusterRoleBindings", "type": "object", + "required": [ + "items" + ], "properties": { - "lastTransitionTime": { - "description": "`lastTransitionTime` is the last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "`message` is a human-readable message indicating details about last transition.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "reason": { - "description": "`reason` is a unique, one-word, CamelCase reason for the condition's last transition.", - "type": "string" + "items": { + "description": "Items is a list of ClusterRoleBindings", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRoleBinding" + } }, - "status": { - "description": "`status` is the status of the condition. Can be True, False, Unknown. Required.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "type": { - "description": "`type` is the type of the condition. Required.", - "type": "string" + "metadata": { + "description": "Standard object's metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "FlowSchemaCondition", + "Type": "list", + "Group": "rbac.authorization.k8s.io", + "Version": "v1", + "Kind": "ClusterRoleBindingList", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta2.FlowSchemaList": { - "description": "FlowSchemaList is a list of FlowSchema objects.", + "io.k8s.api.rbac.v1.ClusterRoleList": { + "description": "ClusterRoleList is a collection of ClusterRoles", "type": "object", "required": [ "items" @@ -41847,11 +47587,11 @@ "type": "string" }, "items": { - "description": "`items` is a list of FlowSchemas.", + "description": "Items is a list of ClusterRoles", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.FlowSchema" + "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRole" } }, "kind": { @@ -41859,254 +47599,332 @@ "type": "string" }, "metadata": { - "description": "`metadata` is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "FlowSchemaList", + "Group": "rbac.authorization.k8s.io", + "Version": "v1", + "Kind": "ClusterRoleList", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta2.FlowSchemaSpec": { - "description": "FlowSchemaSpec describes how the FlowSchema's specification looks like.", + "io.k8s.api.rbac.v1.PolicyRule": { + "description": "PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.", "type": "object", "required": [ - "priorityLevelConfiguration" + "verbs" ], "properties": { - "distinguisherMethod": { - "description": "`distinguisherMethod` defines how to compute the flow distinguisher for requests that match this schema. `nil` specifies that the distinguisher is disabled and thus will always be the empty string.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.FlowDistinguisherMethod" + "apiGroups": { + "description": "APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. \"\" represents the core API group and \"*\" represents all API groups.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "matchingPrecedence": { - "description": "`matchingPrecedence` is used to choose among the FlowSchemas that match a given request. The chosen FlowSchema is among those with the numerically lowest (which we take to be logically highest) MatchingPrecedence. Each MatchingPrecedence value must be ranged in [1,10000]. Note that if the precedence is not specified, it will be set to 1000 as default.", - "type": "integer", - "format": "int32", - "default": 0 + "nonResourceURLs": { + "description": "NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as \"pods\" or \"secrets\") or non-resource URL paths (such as \"/api\"), but not both.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "priorityLevelConfiguration": { - "description": "`priorityLevelConfiguration` should reference a PriorityLevelConfiguration in the cluster. If the reference cannot be resolved, the FlowSchema will be ignored and marked as invalid in its status. Required.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfigurationReference" + "resourceNames": { + "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "rules": { - "description": "`rules` describes which requests will match this flow schema. This FlowSchema matches a request if and only if at least one member of rules matches the request. if it is an empty slice, there will be no requests matching the FlowSchema.", + "resources": { + "description": "Resources is a list of resources this rule applies to. '*' represents all resources.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.PolicyRulesWithSubjects" + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "verbs": { + "description": "Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.", + "type": "array", + "items": { + "type": "string", + "default": "" }, "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "FlowSchemaSpec", + "Group": "rbac.authorization.k8s.io", + "Version": "v1", + "Kind": "PolicyRule", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta2.FlowSchemaStatus": { - "description": "FlowSchemaStatus represents the current state of a FlowSchema.", + "io.k8s.api.rbac.v1.Role": { + "description": "Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding.", "type": "object", "properties": { - "conditions": { - "description": "`conditions` is a list of the current states of FlowSchema.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "rules": { + "description": "Rules holds all the PolicyRules for this Role", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.FlowSchemaCondition" + "$ref": "#/definitions/io.k8s.api.rbac.v1.PolicyRule" }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "FlowSchemaStatus", + "Type": "object", + "Group": "rbac.authorization.k8s.io", + "Version": "v1", + "Kind": "Role", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta2.GroupSubject": { - "description": "GroupSubject holds detailed information for group-kind subject.", + "io.k8s.api.rbac.v1.RoleBinding": { + "description": "RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace.", "type": "object", "required": [ - "name" + "roleRef" ], "properties": { - "name": { - "description": "name is the user group that matches, or \"*\" to match all user groups. See https://github.com/kubernetes/apiserver/blob/master/pkg/authentication/user/user.go for some well-known group names. Required.", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "roleRef": { + "description": "RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. This field is immutable.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleRef" + }, + "subjects": { + "description": "Subjects holds references to the objects the role applies to.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1.Subject" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "GroupSubject", + "Type": "object", + "Group": "rbac.authorization.k8s.io", + "Version": "v1", + "Kind": "RoleBinding", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta2.LimitResponse": { - "description": "LimitResponse defines how to handle requests that can not be executed right now.", + "io.k8s.api.rbac.v1.RoleBindingList": { + "description": "RoleBindingList is a collection of RoleBindings", "type": "object", "required": [ - "type" + "items" ], "properties": { - "queuing": { - "description": "`queuing` holds the configuration parameters for queuing. This field may be non-empty only if `type` is `\"Queue\"`.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.QueuingConfiguration" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "type": { - "description": "`type` is \"Queue\" or \"Reject\". \"Queue\" means that requests that can not be executed upon arrival are held in a queue until they can be executed or a queuing limit is reached. \"Reject\" means that requests that can not be executed upon arrival are rejected. Required.", - "type": "string", - "default": "" + "items": { + "description": "Items is a list of RoleBindings", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleBinding" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "LimitResponse", + "Type": "list", + "Group": "rbac.authorization.k8s.io", + "Version": "v1", + "Kind": "RoleBindingList", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "queuing": "Queuing" - } - } - ] + } }, - "io.k8s.api.flowcontrol.v1beta2.LimitedPriorityLevelConfiguration": { - "description": "LimitedPriorityLevelConfiguration specifies how to handle requests that are subject to limits. It addresses two issues:\n - How are requests for this priority level limited?\n - What should be done with requests that exceed the limit?", + "io.k8s.api.rbac.v1.RoleList": { + "description": "RoleList is a collection of Roles", "type": "object", + "required": [ + "items" + ], "properties": { - "assuredConcurrencyShares": { - "description": "`assuredConcurrencyShares` (ACS) configures the execution limit, which is a limit on the number of requests of this priority level that may be executing at a given time. ACS must be a positive number. The server's concurrency limit (SCL) is divided among the concurrency-controlled priority levels in proportion to their assured concurrency shares. This produces the assured concurrency value (ACV) --- the number of requests that may be executing at a time --- for each such priority level:\n\n ACV(l) = ceil( SCL * ACS(l) / ( sum[priority levels k] ACS(k) ) )\n\nbigger numbers of ACS mean more reserved concurrent requests (at the expense of every other PL). This field has a default value of 30.", - "type": "integer", - "format": "int32", - "default": 0 + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "borrowingLimitPercent": { - "description": "`borrowingLimitPercent`, if present, configures a limit on how many seats this priority level can borrow from other priority levels. The limit is known as this level's BorrowingConcurrencyLimit (BorrowingCL) and is a limit on the total number of seats that this level may borrow at any one time. This field holds the ratio of that limit to the level's nominal concurrency limit. When this field is non-nil, it must hold a non-negative integer and the limit is calculated as follows.\n\nBorrowingCL(i) = round( NominalCL(i) * borrowingLimitPercent(i)/100.0 )\n\nThe value of this field can be more than 100, implying that this priority level can borrow a number of seats that is greater than its own nominal concurrency limit (NominalCL). When this field is left `nil`, the limit is effectively infinite.", - "type": "integer", - "format": "int32" + "items": { + "description": "Items is a list of Roles", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1.Role" + } }, - "lendablePercent": { - "description": "`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. The value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows.\n\nLendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 )", - "type": "integer", - "format": "int32" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "limitResponse": { - "description": "`limitResponse` indicates what to do with requests that can not be executed right now", + "metadata": { + "description": "Standard object's metadata.", "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.LimitResponse" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "LimitedPriorityLevelConfiguration", + "Type": "list", + "Group": "rbac.authorization.k8s.io", + "Version": "v1", + "Kind": "RoleList", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta2.NonResourcePolicyRule": { - "description": "NonResourcePolicyRule is a predicate that matches non-resource requests according to their verb and the target non-resource URL. A NonResourcePolicyRule matches a request if and only if both (a) at least one member of verbs matches the request and (b) at least one member of nonResourceURLs matches the request.", + "io.k8s.api.rbac.v1.RoleRef": { + "description": "RoleRef contains information that points to the role being used", "type": "object", "required": [ - "verbs", - "nonResourceURLs" + "apiGroup", + "kind", + "name" ], "properties": { - "nonResourceURLs": { - "description": "`nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example:\n - \"/healthz\" is legal\n - \"/hea*\" is illegal\n - \"/hea\" is legal but matches nothing\n - \"/hea/*\" also matches nothing\n - \"/healthz/*\" matches all per-component health checks.\n\"*\" matches all non-resource urls. if it is present, it must be the only entry. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "apiGroup": { + "description": "APIGroup is the group for the resource being referenced", + "type": "string", + "default": "" }, - "verbs": { - "description": "`verbs` is a list of matching verbs and may not be empty. \"*\" matches all verbs. If it is present, it must be the only entry. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "kind": { + "description": "Kind is the type of resource being referenced", + "type": "string", + "default": "" + }, + "name": { + "description": "Name is the name of resource being referenced", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "NonResourcePolicyRule", + "Group": "rbac.authorization.k8s.io", + "Version": "v1", + "Kind": "RoleRef", "Scope": "Namespaced" - } + }, + "x-kubernetes-map-type": "atomic" }, - "io.k8s.api.flowcontrol.v1beta2.PolicyRulesWithSubjects": { - "description": "PolicyRulesWithSubjects prescribes a test that applies to a request to an apiserver. The test considers the subject making the request, the verb being requested, and the resource to be acted upon. This PolicyRulesWithSubjects matches a request if and only if both (a) at least one member of subjects matches the request and (b) at least one member of resourceRules or nonResourceRules matches the request.", + "io.k8s.api.rbac.v1.Subject": { + "description": "Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.", "type": "object", "required": [ - "subjects" + "kind", + "name" ], "properties": { - "nonResourceRules": { - "description": "`nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.NonResourcePolicyRule" - }, - "x-kubernetes-list-type": "atomic" + "apiGroup": { + "description": "APIGroup holds the API group of the referenced subject. Defaults to \"\" for ServiceAccount subjects. Defaults to \"rbac.authorization.k8s.io\" for User and Group subjects.", + "type": "string" }, - "resourceRules": { - "description": "`resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.ResourcePolicyRule" - }, - "x-kubernetes-list-type": "atomic" + "kind": { + "description": "Kind of object being referenced. Values defined by this API group are \"User\", \"Group\", and \"ServiceAccount\". If the Authorizer does not recognized the kind value, the Authorizer should report an error.", + "type": "string", + "default": "" }, - "subjects": { - "description": "subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.", + "name": { + "description": "Name of the object being referenced.", + "type": "string", + "default": "" + }, + "namespace": { + "description": "Namespace of the referenced object. If the object kind is non-namespace, such as \"User\" or \"Group\", and this value is not empty the Authorizer should report an error.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "rbac.authorization.k8s.io", + "Version": "v1", + "Kind": "Subject", + "Scope": "Namespaced" + }, + "x-kubernetes-map-type": "atomic" + }, + "io.k8s.api.rbac.v1alpha1.AggregationRule": { + "description": "AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole", + "type": "object", + "properties": { + "clusterRoleSelectors": { + "description": "ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.Subject" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" }, "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "PolicyRulesWithSubjects", + "Group": "rbac.authorization.k8s.io", + "Version": "v1alpha1", + "Kind": "AggregationRule", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfiguration": { - "description": "PriorityLevelConfiguration represents the configuration of a priority level.", + "io.k8s.api.rbac.v1alpha1.ClusterRole": { + "description": "ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRole, and will no longer be served in v1.22.", "type": "object", "properties": { + "aggregationRule": { + "description": "AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.", + "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.AggregationRule" + }, "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" @@ -42116,64 +47934,73 @@ "type": "string" }, "metadata": { - "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "spec": { - "description": "`spec` is the specification of the desired behavior of a \"request-priority\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfigurationSpec" - }, - "status": { - "description": "`status` is the current status of a \"request-priority\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfigurationStatus" + "rules": { + "description": "Rules holds all the PolicyRules for this ClusterRole", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.PolicyRule" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "object", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "PriorityLevelConfiguration", + "Group": "rbac.authorization.k8s.io", + "Version": "v1alpha1", + "Kind": "ClusterRole", "Scope": "Clustered" } }, - "io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfigurationCondition": { - "description": "PriorityLevelConfigurationCondition defines the condition of priority level.", + "io.k8s.api.rbac.v1alpha1.ClusterRoleBinding": { + "description": "ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoleBinding, and will no longer be served in v1.22.", "type": "object", + "required": [ + "roleRef" + ], "properties": { - "lastTransitionTime": { - "description": "`lastTransitionTime` is the last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "`message` is a human-readable message indicating details about last transition.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "reason": { - "description": "`reason` is a unique, one-word, CamelCase reason for the condition's last transition.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "status": { - "description": "`status` is the status of the condition. Can be True, False, Unknown. Required.", - "type": "string" + "metadata": { + "description": "Standard object's metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "type": { - "description": "`type` is the type of the condition. Required.", - "type": "string" + "roleRef": { + "description": "RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.RoleRef" + }, + "subjects": { + "description": "Subjects holds references to the objects the role applies to.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.Subject" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "PriorityLevelConfigurationCondition", - "Scope": "Namespaced" + "Type": "object", + "Group": "rbac.authorization.k8s.io", + "Version": "v1alpha1", + "Kind": "ClusterRoleBinding", + "Scope": "Clustered" } }, - "io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfigurationList": { - "description": "PriorityLevelConfigurationList is a list of PriorityLevelConfiguration objects.", + "io.k8s.api.rbac.v1alpha1.ClusterRoleBindingList": { + "description": "ClusterRoleBindingList is a collection of ClusterRoleBindings. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoleBindings, and will no longer be served in v1.22.", "type": "object", "required": [ "items" @@ -42184,11 +48011,11 @@ "type": "string" }, "items": { - "description": "`items` is a list of request-priorities.", + "description": "Items is a list of ClusterRoleBindings", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfiguration" + "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.ClusterRoleBinding" } }, "kind": { @@ -42196,331 +48023,367 @@ "type": "string" }, "metadata": { - "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "PriorityLevelConfigurationList", - "Scope": "Namespaced" - } - }, - "io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfigurationReference": { - "description": "PriorityLevelConfigurationReference contains information that points to the \"request-priority\" being used.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "`name` is the name of the priority level configuration being referenced Required.", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "PriorityLevelConfigurationReference", + "Group": "rbac.authorization.k8s.io", + "Version": "v1alpha1", + "Kind": "ClusterRoleBindingList", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfigurationSpec": { - "description": "PriorityLevelConfigurationSpec specifies the configuration of a priority level.", + "io.k8s.api.rbac.v1alpha1.ClusterRoleList": { + "description": "ClusterRoleList is a collection of ClusterRoles. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoles, and will no longer be served in v1.22.", "type": "object", "required": [ - "type" + "items" ], "properties": { - "exempt": { - "description": "`exempt` specifies how requests are handled for an exempt priority level. This field MUST be empty if `type` is `\"Limited\"`. This field MAY be non-empty if `type` is `\"Exempt\"`. If empty and `type` is `\"Exempt\"` then the default values for `ExemptPriorityLevelConfiguration` apply.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.ExemptPriorityLevelConfiguration" - }, - "limited": { - "description": "`limited` specifies how requests are handled for a Limited priority level. This field must be non-empty if and only if `type` is `\"Limited\"`.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.LimitedPriorityLevelConfiguration" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "type": { - "description": "`type` indicates whether this priority level is subject to limitation on request execution. A value of `\"Exempt\"` means that requests of this priority level are not subject to a limit (and thus are never queued) and do not detract from the capacity made available to other priority levels. A value of `\"Limited\"` means that (a) requests of this priority level _are_ subject to limits and (b) some of the server's limited capacity is made available exclusively to this priority level. Required.", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "PriorityLevelConfigurationSpec", - "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "exempt": "Exempt", - "limited": "Limited" - } - } - ] - }, - "io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfigurationStatus": { - "description": "PriorityLevelConfigurationStatus represents the current state of a \"request-priority\".", - "type": "object", - "properties": { - "conditions": { - "description": "`conditions` is the current state of \"request-priority\".", + "items": { + "description": "Items is a list of ClusterRoles", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.PriorityLevelConfigurationCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "PriorityLevelConfigurationStatus", - "Scope": "Namespaced" - } - }, - "io.k8s.api.flowcontrol.v1beta2.QueuingConfiguration": { - "description": "QueuingConfiguration holds the configuration parameters for queuing", - "type": "object", - "properties": { - "handSize": { - "description": "`handSize` is a small positive number that configures the shuffle sharding of requests into queues. When enqueuing a request at this priority level the request's flow identifier (a string pair) is hashed and the hash value is used to shuffle the list of queues and deal a hand of the size specified here. The request is put into one of the shortest queues in that hand. `handSize` must be no larger than `queues`, and should be significantly smaller (so that a few heavy flows do not saturate most of the queues). See the user-facing documentation for more extensive guidance on setting this field. This field has a default value of 8.", - "type": "integer", - "format": "int32", - "default": 0 + "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.ClusterRole" + } }, - "queueLengthLimit": { - "description": "`queueLengthLimit` is the maximum number of requests allowed to be waiting in a given queue of this priority level at a time; excess requests are rejected. This value must be positive. If not specified, it will be defaulted to 50.", - "type": "integer", - "format": "int32", - "default": 0 + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "queues": { - "description": "`queues` is the number of queues for this priority level. The queues exist independently at each apiserver. The value must be positive. Setting it to 1 effectively precludes shufflesharding and thus makes the distinguisher method of associated flow schemas irrelevant. This field has a default value of 64.", - "type": "integer", - "format": "int32", - "default": 0 + "metadata": { + "description": "Standard object's metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "QueuingConfiguration", + "Type": "list", + "Group": "rbac.authorization.k8s.io", + "Version": "v1alpha1", + "Kind": "ClusterRoleList", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta2.ResourcePolicyRule": { - "description": "ResourcePolicyRule is a predicate that matches some resource requests, testing the request's verb and the target resource. A ResourcePolicyRule matches a resource request if and only if: (a) at least one member of verbs matches the request, (b) at least one member of apiGroups matches the request, (c) at least one member of resources matches the request, and (d) either (d1) the request does not specify a namespace (i.e., `Namespace==\"\"`) and clusterScope is true or (d2) the request specifies a namespace and least one member of namespaces matches the request's namespace.", + "io.k8s.api.rbac.v1alpha1.PolicyRule": { + "description": "PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.", "type": "object", "required": [ - "verbs", - "apiGroups", - "resources" + "verbs" ], "properties": { "apiGroups": { - "description": "`apiGroups` is a list of matching API groups and may not be empty. \"*\" matches all API groups and, if present, must be the only entry. Required.", + "description": "APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. \"\" represents the core API group and \"*\" represents all API groups.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-list-type": "set" + "x-kubernetes-list-type": "atomic" }, - "clusterScope": { - "description": "`clusterScope` indicates whether to match requests that do not specify a namespace (which happens either because the resource is not namespaced or the request targets all namespaces). If this field is omitted or false then the `namespaces` field must contain a non-empty list.", - "type": "boolean" + "nonResourceURLs": { + "description": "NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as \"pods\" or \"secrets\") or non-resource URL paths (such as \"/api\"), but not both.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "namespaces": { - "description": "`namespaces` is a list of target namespaces that restricts matches. A request that specifies a target namespace matches only if either (a) this list contains that target namespace or (b) this list contains \"*\". Note that \"*\" matches any specified namespace but does not match a request that _does not specify_ a namespace (see the `clusterScope` field for that). This list may be empty, but only if `clusterScope` is true.", + "resourceNames": { + "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-list-type": "set" + "x-kubernetes-list-type": "atomic" }, "resources": { - "description": "`resources` is a list of matching resources (i.e., lowercase and plural) with, if desired, subresource. For example, [ \"services\", \"nodes/status\" ]. This list may not be empty. \"*\" matches all resources and, if present, must be the only entry. Required.", + "description": "Resources is a list of resources this rule applies to. '*' represents all resources.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-list-type": "set" + "x-kubernetes-list-type": "atomic" }, "verbs": { - "description": "`verbs` is a list of matching verbs and may not be empty. \"*\" matches all verbs and, if present, must be the only entry. Required.", + "description": "Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-list-type": "set" + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "ResourcePolicyRule", + "Group": "rbac.authorization.k8s.io", + "Version": "v1alpha1", + "Kind": "PolicyRule", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta2.ServiceAccountSubject": { - "description": "ServiceAccountSubject holds detailed information for service-account-kind subject.", + "io.k8s.api.rbac.v1alpha1.Role": { + "description": "Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 Role, and will no longer be served in v1.22.", "type": "object", - "required": [ - "namespace", - "name" - ], "properties": { - "name": { - "description": "`name` is the name of matching ServiceAccount objects, or \"*\" to match regardless of name. Required.", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "namespace": { - "description": "`namespace` is the namespace of matching ServiceAccount objects. Required.", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "rules": { + "description": "Rules holds all the PolicyRules for this Role", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.PolicyRule" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "ServiceAccountSubject", + "Type": "object", + "Group": "rbac.authorization.k8s.io", + "Version": "v1alpha1", + "Kind": "Role", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta2.Subject": { - "description": "Subject matches the originator of a request, as identified by the request authentication system. There are three ways of matching an originator; by user, group, or service account.", + "io.k8s.api.rbac.v1alpha1.RoleBinding": { + "description": "RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBinding, and will no longer be served in v1.22.", "type": "object", "required": [ - "kind" + "roleRef" ], "properties": { - "group": { - "description": "`group` matches based on user group name.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.GroupSubject" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, "kind": { - "description": "`kind` indicates which one of the other fields is non-empty. Required", - "type": "string", - "default": "" + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "serviceAccount": { - "description": "`serviceAccount` matches ServiceAccounts.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.ServiceAccountSubject" + "metadata": { + "description": "Standard object's metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "user": { - "description": "`user` matches based on username.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta2.UserSubject" + "roleRef": { + "description": "RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.RoleRef" + }, + "subjects": { + "description": "Subjects holds references to the objects the role applies to.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.Subject" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "Subject", + "Type": "object", + "Group": "rbac.authorization.k8s.io", + "Version": "v1alpha1", + "Kind": "RoleBinding", "Scope": "Namespaced" + } + }, + "io.k8s.api.rbac.v1alpha1.RoleBindingList": { + "description": "RoleBindingList is a collection of RoleBindings Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBindingList, and will no longer be served in v1.22.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of RoleBindings", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.RoleBinding" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } }, - "x-kubernetes-unions": [ - { - "discriminator": "kind", - "fields-to-discriminateBy": { - "group": "Group", - "serviceAccount": "ServiceAccount", - "user": "User" + "x-fabric8-info": { + "Type": "list", + "Group": "rbac.authorization.k8s.io", + "Version": "v1alpha1", + "Kind": "RoleBindingList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.rbac.v1alpha1.RoleList": { + "description": "RoleList is a collection of Roles. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleList, and will no longer be served in v1.22.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is a list of Roles", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.Role" } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } - ] + }, + "x-fabric8-info": { + "Type": "list", + "Group": "rbac.authorization.k8s.io", + "Version": "v1alpha1", + "Kind": "RoleList", + "Scope": "Namespaced" + } }, - "io.k8s.api.flowcontrol.v1beta2.UserSubject": { - "description": "UserSubject holds detailed information for user-kind subject.", + "io.k8s.api.rbac.v1alpha1.RoleRef": { + "description": "RoleRef contains information that points to the role being used", "type": "object", "required": [ + "apiGroup", + "kind", "name" ], "properties": { + "apiGroup": { + "description": "APIGroup is the group for the resource being referenced", + "type": "string", + "default": "" + }, + "kind": { + "description": "Kind is the type of resource being referenced", + "type": "string", + "default": "" + }, "name": { - "description": "`name` is the username that matches, or \"*\" to match all usernames. Required.", + "description": "Name is the name of resource being referenced", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta2", - "Kind": "UserSubject", + "Group": "rbac.authorization.k8s.io", + "Version": "v1alpha1", + "Kind": "RoleRef", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta3.ExemptPriorityLevelConfiguration": { - "description": "ExemptPriorityLevelConfiguration describes the configurable aspects of the handling of exempt requests. In the mandatory exempt configuration object the values in the fields here can be modified by authorized users, unlike the rest of the `spec`.", + "io.k8s.api.rbac.v1alpha1.Subject": { + "description": "Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.", "type": "object", + "required": [ + "kind", + "name" + ], "properties": { - "lendablePercent": { - "description": "`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. This value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows.\n\nLendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 )", - "type": "integer", - "format": "int32" + "apiVersion": { + "description": "APIVersion holds the API group and version of the referenced subject. Defaults to \"v1\" for ServiceAccount subjects. Defaults to \"rbac.authorization.k8s.io/v1alpha1\" for User and Group subjects.", + "type": "string" }, - "nominalConcurrencyShares": { - "description": "`nominalConcurrencyShares` (NCS) contributes to the computation of the NominalConcurrencyLimit (NominalCL) of this level. This is the number of execution seats nominally reserved for this priority level. This DOES NOT limit the dispatching from this priority level but affects the other priority levels through the borrowing mechanism. The server's concurrency limit (ServerCL) is divided among all the priority levels in proportion to their NCS values:\n\nNominalCL(i) = ceil( ServerCL * NCS(i) / sum_ncs ) sum_ncs = sum[priority level k] NCS(k)\n\nBigger numbers mean a larger nominal concurrency limit, at the expense of every other priority level. This field has a default value of zero.", - "type": "integer", - "format": "int32" + "kind": { + "description": "Kind of object being referenced. Values defined by this API group are \"User\", \"Group\", and \"ServiceAccount\". If the Authorizer does not recognized the kind value, the Authorizer should report an error.", + "type": "string", + "default": "" + }, + "name": { + "description": "Name of the object being referenced.", + "type": "string", + "default": "" + }, + "namespace": { + "description": "Namespace of the referenced object. If the object kind is non-namespace, such as \"User\" or \"Group\", and this value is not empty the Authorizer should report an error.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "ExemptPriorityLevelConfiguration", + "Group": "rbac.authorization.k8s.io", + "Version": "v1alpha1", + "Kind": "Subject", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta3.FlowDistinguisherMethod": { - "description": "FlowDistinguisherMethod specifies the method of a flow distinguisher.", + "io.k8s.api.rbac.v1beta1.AggregationRule": { + "description": "AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole", "type": "object", - "required": [ - "type" - ], "properties": { - "type": { - "description": "`type` is the type of flow distinguisher method The supported types are \"ByUser\" and \"ByNamespace\". Required.", - "type": "string", - "default": "" + "clusterRoleSelectors": { + "description": "ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "FlowDistinguisherMethod", + "Group": "rbac.authorization.k8s.io", + "Version": "v1beta1", + "Kind": "AggregationRule", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta3.FlowSchema": { - "description": "FlowSchema defines the schema of a group of flows. Note that a flow is made up of a set of inbound API requests with similar attributes and is identified by a pair of strings: the name of the FlowSchema and a \"flow distinguisher\".", + "io.k8s.api.rbac.v1beta1.ClusterRole": { + "description": "ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRole, and will no longer be served in v1.22.", "type": "object", "properties": { + "aggregationRule": { + "description": "AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.", + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.AggregationRule" + }, "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" @@ -42530,64 +48393,73 @@ "type": "string" }, "metadata": { - "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "spec": { - "description": "`spec` is the specification of the desired behavior of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.FlowSchemaSpec" - }, - "status": { - "description": "`status` is the current status of a FlowSchema. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.FlowSchemaStatus" + "rules": { + "description": "Rules holds all the PolicyRules for this ClusterRole", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.PolicyRule" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "object", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "FlowSchema", + "Group": "rbac.authorization.k8s.io", + "Version": "v1beta1", + "Kind": "ClusterRole", "Scope": "Clustered" } }, - "io.k8s.api.flowcontrol.v1beta3.FlowSchemaCondition": { - "description": "FlowSchemaCondition describes conditions for a FlowSchema.", + "io.k8s.api.rbac.v1beta1.ClusterRoleBinding": { + "description": "ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoleBinding, and will no longer be served in v1.22.", "type": "object", + "required": [ + "roleRef" + ], "properties": { - "lastTransitionTime": { - "description": "`lastTransitionTime` is the last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "`message` is a human-readable message indicating details about last transition.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "reason": { - "description": "`reason` is a unique, one-word, CamelCase reason for the condition's last transition.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "status": { - "description": "`status` is the status of the condition. Can be True, False, Unknown. Required.", - "type": "string" + "metadata": { + "description": "Standard object's metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "type": { - "description": "`type` is the type of the condition. Required.", - "type": "string" + "roleRef": { + "description": "RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleRef" + }, + "subjects": { + "description": "Subjects holds references to the objects the role applies to.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.Subject" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "FlowSchemaCondition", - "Scope": "Namespaced" + "Type": "object", + "Group": "rbac.authorization.k8s.io", + "Version": "v1beta1", + "Kind": "ClusterRoleBinding", + "Scope": "Clustered" } }, - "io.k8s.api.flowcontrol.v1beta3.FlowSchemaList": { - "description": "FlowSchemaList is a list of FlowSchema objects.", + "io.k8s.api.rbac.v1beta1.ClusterRoleBindingList": { + "description": "ClusterRoleBindingList is a collection of ClusterRoleBindings. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoleBindingList, and will no longer be served in v1.22.", "type": "object", "required": [ "items" @@ -42598,11 +48470,11 @@ "type": "string" }, "items": { - "description": "`items` is a list of FlowSchemas.", + "description": "Items is a list of ClusterRoleBindings", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.FlowSchema" + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBinding" } }, "kind": { @@ -42610,255 +48482,158 @@ "type": "string" }, "metadata": { - "description": "`metadata` is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "FlowSchemaList", + "Group": "rbac.authorization.k8s.io", + "Version": "v1beta1", + "Kind": "ClusterRoleBindingList", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta3.FlowSchemaSpec": { - "description": "FlowSchemaSpec describes how the FlowSchema's specification looks like.", + "io.k8s.api.rbac.v1beta1.ClusterRoleList": { + "description": "ClusterRoleList is a collection of ClusterRoles. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoles, and will no longer be served in v1.22.", "type": "object", "required": [ - "priorityLevelConfiguration" + "items" ], "properties": { - "distinguisherMethod": { - "description": "`distinguisherMethod` defines how to compute the flow distinguisher for requests that match this schema. `nil` specifies that the distinguisher is disabled and thus will always be the empty string.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.FlowDistinguisherMethod" - }, - "matchingPrecedence": { - "description": "`matchingPrecedence` is used to choose among the FlowSchemas that match a given request. The chosen FlowSchema is among those with the numerically lowest (which we take to be logically highest) MatchingPrecedence. Each MatchingPrecedence value must be ranged in [1,10000]. Note that if the precedence is not specified, it will be set to 1000 as default.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "priorityLevelConfiguration": { - "description": "`priorityLevelConfiguration` should reference a PriorityLevelConfiguration in the cluster. If the reference cannot be resolved, the FlowSchema will be ignored and marked as invalid in its status. Required.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfigurationReference" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "rules": { - "description": "`rules` describes which requests will match this flow schema. This FlowSchema matches a request if and only if at least one member of rules matches the request. if it is an empty slice, there will be no requests matching the FlowSchema.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.PolicyRulesWithSubjects" - }, - "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "FlowSchemaSpec", - "Scope": "Namespaced" - } - }, - "io.k8s.api.flowcontrol.v1beta3.FlowSchemaStatus": { - "description": "FlowSchemaStatus represents the current state of a FlowSchema.", - "type": "object", - "properties": { - "conditions": { - "description": "`conditions` is a list of the current states of FlowSchema.", + "items": { + "description": "Items is a list of ClusterRoles", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.FlowSchemaCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "FlowSchemaStatus", - "Scope": "Namespaced" - } - }, - "io.k8s.api.flowcontrol.v1beta3.GroupSubject": { - "description": "GroupSubject holds detailed information for group-kind subject.", - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is the user group that matches, or \"*\" to match all user groups. See https://github.com/kubernetes/apiserver/blob/master/pkg/authentication/user/user.go for some well-known group names. Required.", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "GroupSubject", - "Scope": "Namespaced" - } - }, - "io.k8s.api.flowcontrol.v1beta3.LimitResponse": { - "description": "LimitResponse defines how to handle requests that can not be executed right now.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "queuing": { - "description": "`queuing` holds the configuration parameters for queuing. This field may be non-empty only if `type` is `\"Queue\"`.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.QueuingConfiguration" - }, - "type": { - "description": "`type` is \"Queue\" or \"Reject\". \"Queue\" means that requests that can not be executed upon arrival are held in a queue until they can be executed or a queuing limit is reached. \"Reject\" means that requests that can not be executed upon arrival are rejected. Required.", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "LimitResponse", - "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "queuing": "Queuing" + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRole" } - } - ] - }, - "io.k8s.api.flowcontrol.v1beta3.LimitedPriorityLevelConfiguration": { - "description": "LimitedPriorityLevelConfiguration specifies how to handle requests that are subject to limits. It addresses two issues:\n - How are requests for this priority level limited?\n - What should be done with requests that exceed the limit?", - "type": "object", - "properties": { - "borrowingLimitPercent": { - "description": "`borrowingLimitPercent`, if present, configures a limit on how many seats this priority level can borrow from other priority levels. The limit is known as this level's BorrowingConcurrencyLimit (BorrowingCL) and is a limit on the total number of seats that this level may borrow at any one time. This field holds the ratio of that limit to the level's nominal concurrency limit. When this field is non-nil, it must hold a non-negative integer and the limit is calculated as follows.\n\nBorrowingCL(i) = round( NominalCL(i) * borrowingLimitPercent(i)/100.0 )\n\nThe value of this field can be more than 100, implying that this priority level can borrow a number of seats that is greater than its own nominal concurrency limit (NominalCL). When this field is left `nil`, the limit is effectively infinite.", - "type": "integer", - "format": "int32" }, - "lendablePercent": { - "description": "`lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. The value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows.\n\nLendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 )", - "type": "integer", - "format": "int32" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "limitResponse": { - "description": "`limitResponse` indicates what to do with requests that can not be executed right now", + "metadata": { + "description": "Standard object's metadata.", "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.LimitResponse" - }, - "nominalConcurrencyShares": { - "description": "`nominalConcurrencyShares` (NCS) contributes to the computation of the NominalConcurrencyLimit (NominalCL) of this level. This is the number of execution seats available at this priority level. This is used both for requests dispatched from this priority level as well as requests dispatched from other priority levels borrowing seats from this level. The server's concurrency limit (ServerCL) is divided among the Limited priority levels in proportion to their NCS values:\n\nNominalCL(i) = ceil( ServerCL * NCS(i) / sum_ncs ) sum_ncs = sum[priority level k] NCS(k)\n\nBigger numbers mean a larger nominal concurrency limit, at the expense of every other priority level. This field has a default value of 30.", - "type": "integer", - "format": "int32", - "default": 0 + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "LimitedPriorityLevelConfiguration", + "Type": "list", + "Group": "rbac.authorization.k8s.io", + "Version": "v1beta1", + "Kind": "ClusterRoleList", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta3.NonResourcePolicyRule": { - "description": "NonResourcePolicyRule is a predicate that matches non-resource requests according to their verb and the target non-resource URL. A NonResourcePolicyRule matches a request if and only if both (a) at least one member of verbs matches the request and (b) at least one member of nonResourceURLs matches the request.", + "io.k8s.api.rbac.v1beta1.PolicyRule": { + "description": "PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.", "type": "object", "required": [ - "verbs", - "nonResourceURLs" + "verbs" ], "properties": { + "apiGroups": { + "description": "APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. \"\" represents the core API group and \"*\" represents all API groups.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, "nonResourceURLs": { - "description": "`nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example:\n - \"/healthz\" is legal\n - \"/hea*\" is illegal\n - \"/hea\" is legal but matches nothing\n - \"/hea/*\" also matches nothing\n - \"/healthz/*\" matches all per-component health checks.\n\"*\" matches all non-resource urls. if it is present, it must be the only entry. Required.", + "description": "NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as \"pods\" or \"secrets\") or non-resource URL paths (such as \"/api\"), but not both.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-list-type": "set" + "x-kubernetes-list-type": "atomic" + }, + "resourceNames": { + "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "resources": { + "description": "Resources is a list of resources this rule applies to. '*' represents all resources in the specified apiGroups. '*/foo' represents the subresource 'foo' for all resources in the specified apiGroups.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, "verbs": { - "description": "`verbs` is a list of matching verbs and may not be empty. \"*\" matches all verbs. If it is present, it must be the only entry. Required.", + "description": "Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-list-type": "set" + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "NonResourcePolicyRule", + "Group": "rbac.authorization.k8s.io", + "Version": "v1beta1", + "Kind": "PolicyRule", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta3.PolicyRulesWithSubjects": { - "description": "PolicyRulesWithSubjects prescribes a test that applies to a request to an apiserver. The test considers the subject making the request, the verb being requested, and the resource to be acted upon. This PolicyRulesWithSubjects matches a request if and only if both (a) at least one member of subjects matches the request and (b) at least one member of resourceRules or nonResourceRules matches the request.", + "io.k8s.api.rbac.v1beta1.Role": { + "description": "Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 Role, and will no longer be served in v1.22.", "type": "object", - "required": [ - "subjects" - ], "properties": { - "nonResourceRules": { - "description": "`nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.NonResourcePolicyRule" - }, - "x-kubernetes-list-type": "atomic" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "resourceRules": { - "description": "`resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.ResourcePolicyRule" - }, - "x-kubernetes-list-type": "atomic" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "subjects": { - "description": "subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.", + "metadata": { + "description": "Standard object's metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "rules": { + "description": "Rules holds all the PolicyRules for this Role", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.Subject" + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.PolicyRule" }, "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "PolicyRulesWithSubjects", + "Type": "object", + "Group": "rbac.authorization.k8s.io", + "Version": "v1beta1", + "Kind": "Role", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfiguration": { - "description": "PriorityLevelConfiguration represents the configuration of a priority level.", + "io.k8s.api.rbac.v1beta1.RoleBinding": { + "description": "RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBinding, and will no longer be served in v1.22.", "type": "object", + "required": [ + "roleRef" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -42869,64 +48644,72 @@ "type": "string" }, "metadata": { - "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "spec": { - "description": "`spec` is the specification of the desired behavior of a \"request-priority\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "roleRef": { + "description": "RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.", "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfigurationSpec" + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleRef" }, - "status": { - "description": "`status` is the current status of a \"request-priority\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfigurationStatus" + "subjects": { + "description": "Subjects holds references to the objects the role applies to.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.Subject" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "object", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "PriorityLevelConfiguration", - "Scope": "Clustered" + "Group": "rbac.authorization.k8s.io", + "Version": "v1beta1", + "Kind": "RoleBinding", + "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfigurationCondition": { - "description": "PriorityLevelConfigurationCondition defines the condition of priority level.", + "io.k8s.api.rbac.v1beta1.RoleBindingList": { + "description": "RoleBindingList is a collection of RoleBindings Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBindingList, and will no longer be served in v1.22.", "type": "object", + "required": [ + "items" + ], "properties": { - "lastTransitionTime": { - "description": "`lastTransitionTime` is the last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "`message` is a human-readable message indicating details about last transition.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "reason": { - "description": "`reason` is a unique, one-word, CamelCase reason for the condition's last transition.", - "type": "string" + "items": { + "description": "Items is a list of RoleBindings", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleBinding" + } }, - "status": { - "description": "`status` is the status of the condition. Can be True, False, Unknown. Required.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "type": { - "description": "`type` is the type of the condition. Required.", - "type": "string" + "metadata": { + "description": "Standard object's metadata.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "PriorityLevelConfigurationCondition", + "Type": "list", + "Group": "rbac.authorization.k8s.io", + "Version": "v1beta1", + "Kind": "RoleBindingList", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfigurationList": { - "description": "PriorityLevelConfigurationList is a list of PriorityLevelConfiguration objects.", + "io.k8s.api.rbac.v1beta1.RoleList": { + "description": "RoleList is a collection of Roles Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleList, and will no longer be served in v1.22.", "type": "object", "required": [ "items" @@ -42937,11 +48720,11 @@ "type": "string" }, "items": { - "description": "`items` is a list of request-priorities.", + "description": "Items is a list of Roles", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfiguration" + "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.Role" } }, "kind": { @@ -42949,287 +48732,350 @@ "type": "string" }, "metadata": { - "description": "`metadata` is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "PriorityLevelConfigurationList", + "Group": "rbac.authorization.k8s.io", + "Version": "v1beta1", + "Kind": "RoleList", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfigurationReference": { - "description": "PriorityLevelConfigurationReference contains information that points to the \"request-priority\" being used.", + "io.k8s.api.rbac.v1beta1.RoleRef": { + "description": "RoleRef contains information that points to the role being used", "type": "object", "required": [ + "apiGroup", + "kind", "name" ], "properties": { + "apiGroup": { + "description": "APIGroup is the group for the resource being referenced", + "type": "string", + "default": "" + }, + "kind": { + "description": "Kind is the type of resource being referenced", + "type": "string", + "default": "" + }, "name": { - "description": "`name` is the name of the priority level configuration being referenced Required.", + "description": "Name is the name of resource being referenced", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "PriorityLevelConfigurationReference", + "Group": "rbac.authorization.k8s.io", + "Version": "v1beta1", + "Kind": "RoleRef", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfigurationSpec": { - "description": "PriorityLevelConfigurationSpec specifies the configuration of a priority level.", + "io.k8s.api.rbac.v1beta1.Subject": { + "description": "Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.", "type": "object", "required": [ - "type" + "kind", + "name" ], "properties": { - "exempt": { - "description": "`exempt` specifies how requests are handled for an exempt priority level. This field MUST be empty if `type` is `\"Limited\"`. This field MAY be non-empty if `type` is `\"Exempt\"`. If empty and `type` is `\"Exempt\"` then the default values for `ExemptPriorityLevelConfiguration` apply.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.ExemptPriorityLevelConfiguration" + "apiGroup": { + "description": "APIGroup holds the API group of the referenced subject. Defaults to \"\" for ServiceAccount subjects. Defaults to \"rbac.authorization.k8s.io\" for User and Group subjects.", + "type": "string" }, - "limited": { - "description": "`limited` specifies how requests are handled for a Limited priority level. This field must be non-empty if and only if `type` is `\"Limited\"`.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.LimitedPriorityLevelConfiguration" + "kind": { + "description": "Kind of object being referenced. Values defined by this API group are \"User\", \"Group\", and \"ServiceAccount\". If the Authorizer does not recognized the kind value, the Authorizer should report an error.", + "type": "string", + "default": "" }, - "type": { - "description": "`type` indicates whether this priority level is subject to limitation on request execution. A value of `\"Exempt\"` means that requests of this priority level are not subject to a limit (and thus are never queued) and do not detract from the capacity made available to other priority levels. A value of `\"Limited\"` means that (a) requests of this priority level _are_ subject to limits and (b) some of the server's limited capacity is made available exclusively to this priority level. Required.", + "name": { + "description": "Name of the object being referenced.", "type": "string", "default": "" + }, + "namespace": { + "description": "Namespace of the referenced object. If the object kind is non-namespace, such as \"User\" or \"Group\", and this value is not empty the Authorizer should report an error.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "PriorityLevelConfigurationSpec", + "Group": "rbac.authorization.k8s.io", + "Version": "v1beta1", + "Kind": "Subject", "Scope": "Namespaced" + } + }, + "io.k8s.api.resource.v1alpha3.AllocationResult": { + "description": "AllocationResult contains attributes of an allocated resource.", + "type": "object", + "properties": { + "controller": { + "description": "Controller is the name of the DRA driver which handled the allocation. That driver is also responsible for deallocating the claim. It is empty when the claim can be deallocated without involving a driver.\n\nA driver may allocate devices provided by other drivers, so this driver name here can be different from the driver names listed for the results.\n\nThis is an alpha field and requires enabling the DRAControlPlaneController feature gate.", + "type": "string" + }, + "devices": { + "description": "Devices is the result of allocating devices.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceAllocationResult" + }, + "nodeSelector": { + "description": "NodeSelector defines where the allocated resources are available. If unset, they are available everywhere.", + "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelector" + } }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "exempt": "Exempt", - "limited": "Limited" + "x-fabric8-info": { + "Type": "nested", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "AllocationResult", + "Scope": "Namespaced" + } + }, + "io.k8s.api.resource.v1alpha3.BasicDevice": { + "description": "BasicDevice defines one device instance.", + "type": "object", + "properties": { + "attributes": { + "description": "Attributes defines the set of attributes for this device. The name of each attribute must be unique in that set.\n\nThe maximum number of attributes and capacities combined is 32.", + "type": "object", + "additionalProperties": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceAttribute" + } + }, + "capacity": { + "description": "Capacity defines the set of capacities for this device. The name of each capacity must be unique in that set.\n\nThe maximum number of attributes and capacities combined is 32.", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" } } - ] + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "BasicDevice", + "Scope": "Namespaced" + } }, - "io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfigurationStatus": { - "description": "PriorityLevelConfigurationStatus represents the current state of a \"request-priority\".", + "io.k8s.api.resource.v1alpha3.CELDeviceSelector": { + "description": "CELDeviceSelector contains a CEL expression for selecting a device.", "type": "object", + "required": [ + "expression" + ], "properties": { - "conditions": { - "description": "`conditions` is the current state of \"request-priority\".", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.PriorityLevelConfigurationCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "expression": { + "description": "Expression is a CEL expression which evaluates a single device. It must evaluate to true when the device under consideration satisfies the desired criteria, and false when it does not. Any other result is an error and causes allocation of devices to abort.\n\nThe expression's input is an object named \"device\", which carries the following properties:\n - driver (string): the name of the driver which defines this device.\n - attributes (map[string]object): the device's attributes, grouped by prefix\n (e.g. device.attributes[\"dra.example.com\"] evaluates to an object with all\n of the attributes which were prefixed by \"dra.example.com\".\n - capacity (map[string]object): the device's capacities, grouped by prefix.\n\nExample: Consider a device with driver=\"dra.example.com\", which exposes two attributes named \"model\" and \"ext.example.com/family\" and which exposes one capacity named \"modules\". This input to this expression would have the following fields:\n\n device.driver\n device.attributes[\"dra.example.com\"].model\n device.attributes[\"ext.example.com\"].family\n device.capacity[\"dra.example.com\"].modules\n\nThe device.driver field can be used to check for a specific driver, either as a high-level precondition (i.e. you only want to consider devices from this driver) or as part of a multi-clause expression that is meant to consider devices from different drivers.\n\nThe value type of each attribute is defined by the device definition, and users who write these expressions must consult the documentation for their specific drivers. The value type of each capacity is Quantity.\n\nIf an unknown prefix is used as a lookup in either device.attributes or device.capacity, an empty map will be returned. Any reference to an unknown field will cause an evaluation error and allocation to abort.\n\nA robust expression should check for the existence of attributes before referencing them.\n\nFor ease of use, the cel.bind() function is enabled, and can be used to simplify expressions that access multiple attributes with the same domain. For example:\n\n cel.bind(dra, device.attributes[\"dra.example.com\"], dra.someBool \u0026\u0026 dra.anotherBool)", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "PriorityLevelConfigurationStatus", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "CELDeviceSelector", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta3.QueuingConfiguration": { - "description": "QueuingConfiguration holds the configuration parameters for queuing", + "io.k8s.api.resource.v1alpha3.Device": { + "description": "Device represents one individual hardware instance that can be selected based on its attributes. Besides the name, exactly one field must be set.", "type": "object", + "required": [ + "name" + ], "properties": { - "handSize": { - "description": "`handSize` is a small positive number that configures the shuffle sharding of requests into queues. When enqueuing a request at this priority level the request's flow identifier (a string pair) is hashed and the hash value is used to shuffle the list of queues and deal a hand of the size specified here. The request is put into one of the shortest queues in that hand. `handSize` must be no larger than `queues`, and should be significantly smaller (so that a few heavy flows do not saturate most of the queues). See the user-facing documentation for more extensive guidance on setting this field. This field has a default value of 8.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "queueLengthLimit": { - "description": "`queueLengthLimit` is the maximum number of requests allowed to be waiting in a given queue of this priority level at a time; excess requests are rejected. This value must be positive. If not specified, it will be defaulted to 50.", - "type": "integer", - "format": "int32", - "default": 0 + "basic": { + "description": "Basic defines one device instance.", + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.BasicDevice" }, - "queues": { - "description": "`queues` is the number of queues for this priority level. The queues exist independently at each apiserver. The value must be positive. Setting it to 1 effectively precludes shufflesharding and thus makes the distinguisher method of associated flow schemas irrelevant. This field has a default value of 64.", - "type": "integer", - "format": "int32", - "default": 0 + "name": { + "description": "Name is unique identifier among all devices managed by the driver in the pool. It must be a DNS label.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "QueuingConfiguration", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "Device", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta3.ResourcePolicyRule": { - "description": "ResourcePolicyRule is a predicate that matches some resource requests, testing the request's verb and the target resource. A ResourcePolicyRule matches a resource request if and only if: (a) at least one member of verbs matches the request, (b) at least one member of apiGroups matches the request, (c) at least one member of resources matches the request, and (d) either (d1) the request does not specify a namespace (i.e., `Namespace==\"\"`) and clusterScope is true or (d2) the request specifies a namespace and least one member of namespaces matches the request's namespace.", + "io.k8s.api.resource.v1alpha3.DeviceAllocationConfiguration": { + "description": "DeviceAllocationConfiguration gets embedded in an AllocationResult.", "type": "object", "required": [ - "verbs", - "apiGroups", - "resources" + "source" ], "properties": { - "apiGroups": { - "description": "`apiGroups` is a list of matching API groups and may not be empty. \"*\" matches all API groups and, if present, must be the only entry. Required.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "clusterScope": { - "description": "`clusterScope` indicates whether to match requests that do not specify a namespace (which happens either because the resource is not namespaced or the request targets all namespaces). If this field is omitted or false then the `namespaces` field must contain a non-empty list.", - "type": "boolean" + "opaque": { + "description": "Opaque provides driver-specific configuration parameters.", + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.OpaqueDeviceConfiguration" }, - "namespaces": { - "description": "`namespaces` is a list of target namespaces that restricts matches. A request that specifies a target namespace matches only if either (a) this list contains that target namespace or (b) this list contains \"*\". Note that \"*\" matches any specified namespace but does not match a request that _does not specify_ a namespace (see the `clusterScope` field for that). This list may be empty, but only if `clusterScope` is true.", + "requests": { + "description": "Requests lists the names of requests where the configuration applies. If empty, its applies to all requests.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-list-type": "set" + "x-kubernetes-list-type": "atomic" }, - "resources": { - "description": "`resources` is a list of matching resources (i.e., lowercase and plural) with, if desired, subresource. For example, [ \"services\", \"nodes/status\" ]. This list may not be empty. \"*\" matches all resources and, if present, must be the only entry. Required.", + "source": { + "description": "Source records whether the configuration comes from a class and thus is not something that a normal user would have been able to set or from a claim.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "DeviceAllocationConfiguration", + "Scope": "Namespaced" + } + }, + "io.k8s.api.resource.v1alpha3.DeviceAllocationResult": { + "description": "DeviceAllocationResult is the result of allocating devices.", + "type": "object", + "properties": { + "config": { + "description": "This field is a combination of all the claim and class configuration parameters. Drivers can distinguish between those based on a flag.\n\nThis includes configuration parameters for drivers which have no allocated devices in the result because it is up to the drivers which configuration parameters they support. They can silently ignore unknown configuration parameters.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceAllocationConfiguration" }, - "x-kubernetes-list-type": "set" + "x-kubernetes-list-type": "atomic" }, - "verbs": { - "description": "`verbs` is a list of matching verbs and may not be empty. \"*\" matches all verbs and, if present, must be the only entry. Required.", + "results": { + "description": "Results lists all allocated devices.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceRequestAllocationResult" }, - "x-kubernetes-list-type": "set" + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "ResourcePolicyRule", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "DeviceAllocationResult", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta3.ServiceAccountSubject": { - "description": "ServiceAccountSubject holds detailed information for service-account-kind subject.", + "io.k8s.api.resource.v1alpha3.DeviceAttribute": { + "description": "DeviceAttribute must have exactly one field set.", "type": "object", - "required": [ - "namespace", - "name" - ], "properties": { - "name": { - "description": "`name` is the name of matching ServiceAccount objects, or \"*\" to match regardless of name. Required.", - "type": "string", - "default": "" + "bool": { + "description": "BoolValue is a true/false value.", + "type": "boolean" }, - "namespace": { - "description": "`namespace` is the namespace of matching ServiceAccount objects. Required.", - "type": "string", - "default": "" + "int": { + "description": "IntValue is a number.", + "type": "integer", + "format": "int64" + }, + "string": { + "description": "StringValue is a string. Must not be longer than 64 characters.", + "type": "string" + }, + "version": { + "description": "VersionValue is a semantic version according to semver.org spec 2.0.0. Must not be longer than 64 characters.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "ServiceAccountSubject", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "DeviceAttribute", "Scope": "Namespaced" } }, - "io.k8s.api.flowcontrol.v1beta3.Subject": { - "description": "Subject matches the originator of a request, as identified by the request authentication system. There are three ways of matching an originator; by user, group, or service account.", + "io.k8s.api.resource.v1alpha3.DeviceClaim": { + "description": "DeviceClaim defines how to request devices with a ResourceClaim.", "type": "object", - "required": [ - "kind" - ], "properties": { - "group": { - "description": "`group` matches based on user group name.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.GroupSubject" - }, - "kind": { - "description": "`kind` indicates which one of the other fields is non-empty. Required", - "type": "string", - "default": "" + "config": { + "description": "This field holds configuration for multiple potential drivers which could satisfy requests in this claim. It is ignored while allocating the claim.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceClaimConfiguration" + }, + "x-kubernetes-list-type": "atomic" }, - "serviceAccount": { - "description": "`serviceAccount` matches ServiceAccounts.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.ServiceAccountSubject" + "constraints": { + "description": "These constraints must be satisfied by the set of devices that get allocated for the claim.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceConstraint" + }, + "x-kubernetes-list-type": "atomic" }, - "user": { - "description": "`user` matches based on username.", - "$ref": "#/definitions/io.k8s.api.flowcontrol.v1beta3.UserSubject" + "requests": { + "description": "Requests represent individual requests for distinct devices which must all be satisfied. If empty, nothing needs to be allocated.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceRequest" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "Subject", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "DeviceClaim", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "kind", - "fields-to-discriminateBy": { - "group": "Group", - "serviceAccount": "ServiceAccount", - "user": "User" - } - } - ] + } }, - "io.k8s.api.flowcontrol.v1beta3.UserSubject": { - "description": "UserSubject holds detailed information for user-kind subject.", + "io.k8s.api.resource.v1alpha3.DeviceClaimConfiguration": { + "description": "DeviceClaimConfiguration is used for configuration parameters in DeviceClaim.", "type": "object", - "required": [ - "name" - ], "properties": { - "name": { - "description": "`name` is the username that matches, or \"*\" to match all usernames. Required.", - "type": "string", - "default": "" + "opaque": { + "description": "Opaque provides driver-specific configuration parameters.", + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.OpaqueDeviceConfiguration" + }, + "requests": { + "description": "Requests lists the names of requests where the configuration applies. If empty, it applies to all requests.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "flowcontrol.apiserver.k8s.io", - "Version": "v1beta3", - "Kind": "UserSubject", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "DeviceClaimConfiguration", "Scope": "Namespaced" } }, - "io.k8s.api.imagepolicy.v1alpha1.ImageReview": { - "description": "ImageReview checks if the set of images in a pod are allowed.", + "io.k8s.api.resource.v1alpha3.DeviceClass": { + "description": "DeviceClass is a vendor- or admin-provided resource that contains device configuration and selectors. It can be referenced in the device requests of a claim to apply these presets. Cluster scoped.\n\nThis is an alpha type and requires enabling the DynamicResourceAllocation feature gate.", "type": "object", "required": [ "spec" @@ -43244,263 +49090,294 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "Spec holds information about the pod being evaluated", - "default": {}, - "$ref": "#/definitions/io.k8s.api.imagepolicy.v1alpha1.ImageReviewSpec" - }, - "status": { - "description": "Status is filled in by the backend and indicates whether the pod should be allowed.", + "description": "Spec defines what can be allocated and how to configure it.\n\nThis is mutable. Consumers have to be prepared for classes changing at any time, either because they get updated or replaced. Claim allocations are done once based on whatever was set in classes at the time of allocation.\n\nChanging the spec automatically increments the metadata.generation number.", "default": {}, - "$ref": "#/definitions/io.k8s.api.imagepolicy.v1alpha1.ImageReviewStatus" + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceClassSpec" } }, "x-fabric8-info": { "Type": "object", - "Group": "imagepolicy.k8s.io", - "Version": "v1alpha1", - "Kind": "ImageReview", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "DeviceClass", "Scope": "Clustered" } }, - "io.k8s.api.imagepolicy.v1alpha1.ImageReviewContainerSpec": { - "description": "ImageReviewContainerSpec is a description of a container within the pod creation request.", + "io.k8s.api.resource.v1alpha3.DeviceClassConfiguration": { + "description": "DeviceClassConfiguration is used in DeviceClass.", "type": "object", "properties": { - "image": { - "description": "This can be in the form image:tag or image@SHA:012345679abcdef.", - "type": "string" + "opaque": { + "description": "Opaque provides driver-specific configuration parameters.", + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.OpaqueDeviceConfiguration" } }, "x-fabric8-info": { "Type": "nested", - "Group": "imagepolicy.k8s.io", - "Version": "v1alpha1", - "Kind": "ImageReviewContainerSpec", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "DeviceClassConfiguration", "Scope": "Namespaced" } }, - "io.k8s.api.imagepolicy.v1alpha1.ImageReviewSpec": { - "description": "ImageReviewSpec is a description of the pod creation request.", + "io.k8s.api.resource.v1alpha3.DeviceClassList": { + "description": "DeviceClassList is a collection of classes.", "type": "object", + "required": [ + "items" + ], "properties": { - "annotations": { - "description": "Annotations is a list of key-value pairs extracted from the Pod's annotations. It only includes keys which match the pattern `*.image-policy.k8s.io/*`. It is up to each webhook backend to determine how to interpret these annotations, if at all.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "Items is the list of resource classes.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceClass" } }, - "containers": { - "description": "Containers is a list of a subset of the information in each container of the Pod being created.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "DeviceClassList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.resource.v1alpha3.DeviceClassSpec": { + "description": "DeviceClassSpec is used in a [DeviceClass] to define what can be allocated and how to configure it.", + "type": "object", + "properties": { + "config": { + "description": "Config defines configuration parameters that apply to each device that is claimed via this class. Some classses may potentially be satisfied by multiple drivers, so each instance of a vendor configuration applies to exactly one driver.\n\nThey are passed to the driver, but are not considered while allocating the claim.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.imagepolicy.v1alpha1.ImageReviewContainerSpec" + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceClassConfiguration" }, "x-kubernetes-list-type": "atomic" }, - "namespace": { - "description": "Namespace is the namespace the pod is being created in.", - "type": "string" + "selectors": { + "description": "Each selector must be satisfied by a device which is claimed via this class.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceSelector" + }, + "x-kubernetes-list-type": "atomic" + }, + "suitableNodes": { + "description": "Only nodes matching the selector will be considered by the scheduler when trying to find a Node that fits a Pod when that Pod uses a claim that has not been allocated yet *and* that claim gets allocated through a control plane controller. It is ignored when the claim does not use a control plane controller for allocation.\n\nSetting this field is optional. If unset, all Nodes are candidates.\n\nThis is an alpha field and requires enabling the DRAControlPlaneController feature gate.", + "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelector" } }, "x-fabric8-info": { "Type": "nested", - "Group": "imagepolicy.k8s.io", - "Version": "v1alpha1", - "Kind": "ImageReviewSpec", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "DeviceClassSpec", "Scope": "Namespaced" } }, - "io.k8s.api.imagepolicy.v1alpha1.ImageReviewStatus": { - "description": "ImageReviewStatus is the result of the review for the pod creation request.", + "io.k8s.api.resource.v1alpha3.DeviceConfiguration": { + "description": "DeviceConfiguration must have exactly one field set. It gets embedded inline in some other structs which have other fields, so field names must not conflict with those.", "type": "object", - "required": [ - "allowed" - ], "properties": { - "allowed": { - "description": "Allowed indicates that all images were allowed to be run.", - "type": "boolean", - "default": false - }, - "auditAnnotations": { - "description": "AuditAnnotations will be added to the attributes object of the admission controller request using 'AddAnnotation'. The keys should be prefix-less (i.e., the admission controller will add an appropriate prefix).", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "reason": { - "description": "Reason should be empty unless Allowed is false in which case it may contain a short description of what is wrong. Kubernetes may truncate excessively long errors when displaying to the user.", - "type": "string" + "opaque": { + "description": "Opaque provides driver-specific configuration parameters.", + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.OpaqueDeviceConfiguration" } }, "x-fabric8-info": { "Type": "nested", - "Group": "imagepolicy.k8s.io", - "Version": "v1alpha1", - "Kind": "ImageReviewStatus", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "DeviceConfiguration", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1.HTTPIngressPath": { - "description": "HTTPIngressPath associates a path with a backend. Incoming urls matching the path are forwarded to the backend.", + "io.k8s.api.resource.v1alpha3.DeviceConstraint": { + "description": "DeviceConstraint must have exactly one field set besides Requests.", "type": "object", - "required": [ - "pathType", - "backend" - ], "properties": { - "backend": { - "description": "backend defines the referenced service endpoint to which the traffic will be forwarded to.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.IngressBackend" - }, - "path": { - "description": "path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional \"path\" part of a URL as defined by RFC 3986. Paths must begin with a '/' and must be present when using PathType with value \"Exact\" or \"Prefix\".", + "matchAttribute": { + "description": "MatchAttribute requires that all devices in question have this attribute and that its type and value are the same across those devices.\n\nFor example, if you specified \"dra.example.com/numa\" (a hypothetical example!), then only devices in the same NUMA node will be chosen. A device which does not have that attribute will not be chosen. All devices should use a value of the same type for this attribute because that is part of its specification, but if one device doesn't, then it also will not be chosen.\n\nMust include the domain qualifier.", "type": "string" }, - "pathType": { - "description": "pathType determines the interpretation of the path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by '/'. Matching is\n done on a path element by element basis. A path element refers is the\n list of labels in the path split by the '/' separator. A request is a\n match for path p if every p is an element-wise prefix of p of the\n request path. Note that if the last element of the path is a substring\n of the last element in request path, it is not a match (e.g. /foo/bar\n matches /foo/bar/baz, but does not match /foo/barbaz).\n* ImplementationSpecific: Interpretation of the Path matching is up to\n the IngressClass. Implementations can treat this as a separate PathType\n or treat it identically to Prefix or Exact path types.\nImplementations are required to support all path types.\n\nPossible enum values:\n - `\"Exact\"` matches the URL path exactly and with case sensitivity.\n - `\"ImplementationSpecific\"` matching is up to the IngressClass. Implementations can treat this as a separate PathType or treat it identically to Prefix or Exact path types.\n - `\"Prefix\"` matches based on a URL path prefix split by '/'. Matching is case sensitive and done on a path element by element basis. A path element refers to the list of labels in the path split by the '/' separator. A request is a match for path p if every p is an element-wise prefix of p of the request path. Note that if the last element of the path is a substring of the last element in request path, it is not a match (e.g. /foo/bar matches /foo/bar/baz, but does not match /foo/barbaz). If multiple matching paths exist in an Ingress spec, the longest matching path is given priority. Examples: - /foo/bar does not match requests to /foo/barbaz - /foo/bar matches request to /foo/bar and /foo/bar/baz - /foo and /foo/ both match requests to /foo and /foo/. If both paths are present in an Ingress spec, the longest matching path (/foo/) is given priority.", - "type": "string", - "enum": [ - "Exact", - "ImplementationSpecific", - "Prefix" - ] + "requests": { + "description": "Requests is a list of the one or more requests in this claim which must co-satisfy this constraint. If a request is fulfilled by multiple devices, then all of the devices must satisfy the constraint. If this is not specified, this constraint applies to all requests in this claim.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "HTTPIngressPath", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "DeviceConstraint", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1.HTTPIngressRuleValue": { - "description": "HTTPIngressRuleValue is a list of http selectors pointing to backends. In the example: http://\u003chost\u003e/\u003cpath\u003e?\u003csearchpart\u003e -\u003e backend where where parts of the url correspond to RFC 3986, this resource will be used to match against everything after the last '/' and before the first '?' or '#'.", + "io.k8s.api.resource.v1alpha3.DeviceRequest": { + "description": "DeviceRequest is a request for devices required for a claim. This is typically a request for a single resource like a device, but can also ask for several identical devices.\n\nA DeviceClassName is currently required. Clients must check that it is indeed set. It's absence indicates that something changed in a way that is not supported by the client yet, in which case it must refuse to handle the request.", "type": "object", "required": [ - "paths" + "name", + "deviceClassName" ], "properties": { - "paths": { - "description": "paths is a collection of paths that map requests to backends.", + "adminAccess": { + "description": "AdminAccess indicates that this is a claim for administrative access to the device(s). Claims with AdminAccess are expected to be used for monitoring or other management services for a device. They ignore all ordinary claims to the device with respect to access modes and any resource allocations.", + "type": "boolean", + "default": false + }, + "allocationMode": { + "description": "AllocationMode and its related fields define how devices are allocated to satisfy this request. Supported values are:\n\n- ExactCount: This request is for a specific number of devices.\n This is the default. The exact number is provided in the\n count field.\n\n- All: This request is for all of the matching devices in a pool.\n Allocation will fail if some devices are already allocated,\n unless adminAccess is requested.\n\nIf AlloctionMode is not specified, the default mode is ExactCount. If the mode is ExactCount and count is not specified, the default count is one. Any other requests must specify this field.\n\nMore modes may get added in the future. Clients must refuse to handle requests with unknown modes.", + "type": "string" + }, + "count": { + "description": "Count is used only when the count mode is \"ExactCount\". Must be greater than zero. If AllocationMode is ExactCount and this field is not specified, the default is one.", + "type": "integer", + "format": "int64" + }, + "deviceClassName": { + "description": "DeviceClassName references a specific DeviceClass, which can define additional configuration and selectors to be inherited by this request.\n\nA class is required. Which classes are available depends on the cluster.\n\nAdministrators may use this to restrict which devices may get requested by only installing classes with selectors for permitted devices. If users are free to request anything without restrictions, then administrators can create an empty DeviceClass for users to reference.", + "type": "string", + "default": "" + }, + "name": { + "description": "Name can be used to reference this request in a pod.spec.containers[].resources.claims entry and in a constraint of the claim.\n\nMust be a DNS label.", + "type": "string", + "default": "" + }, + "selectors": { + "description": "Selectors define criteria which must be satisfied by a specific device in order for that device to be considered for this request. All selectors must be satisfied for a device to be considered.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.HTTPIngressPath" + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceSelector" }, "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "HTTPIngressRuleValue", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "DeviceRequest", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1.IPBlock": { - "description": "IPBlock describes a particular CIDR (Ex. \"192.168.1.0/24\",\"2001:db8::/64\") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.", + "io.k8s.api.resource.v1alpha3.DeviceRequestAllocationResult": { + "description": "DeviceRequestAllocationResult contains the allocation result for one request.", "type": "object", "required": [ - "cidr" + "request", + "driver", + "pool", + "device" ], "properties": { - "cidr": { - "description": "cidr is a string representing the IPBlock Valid examples are \"192.168.1.0/24\" or \"2001:db8::/64\"", + "device": { + "description": "Device references one device instance via its name in the driver's resource pool. It must be a DNS label.", "type": "string", "default": "" }, - "except": { - "description": "except is a slice of CIDRs that should not be included within an IPBlock Valid examples are \"192.168.1.0/24\" or \"2001:db8::/64\" Except values will be rejected if they are outside the cidr range", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "driver": { + "description": "Driver specifies the name of the DRA driver whose kubelet plugin should be invoked to process the allocation once the claim is needed on a node.\n\nMust be a DNS subdomain and should end with a DNS domain owned by the vendor of the driver.", + "type": "string", + "default": "" + }, + "pool": { + "description": "This name together with the driver name and the device name field identify which device was allocated (`\u003cdriver name\u003e/\u003cpool name\u003e/\u003cdevice name\u003e`).\n\nMust not be longer than 253 characters and may contain one or more DNS sub-domains separated by slashes.", + "type": "string", + "default": "" + }, + "request": { + "description": "Request is the name of the request in the claim which caused this device to be allocated. Multiple devices may have been allocated per request.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "IPBlock", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "DeviceRequestAllocationResult", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1.Ingress": { - "description": "Ingress is a collection of rules that allow inbound connections to reach the endpoints defined by a backend. An Ingress can be configured to give services externally-reachable urls, load balance traffic, terminate SSL, offer name based virtual hosting etc.", + "io.k8s.api.resource.v1alpha3.DeviceSelector": { + "description": "DeviceSelector must have exactly one field set.", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.IngressSpec" - }, - "status": { - "description": "status is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.IngressStatus" + "cel": { + "description": "CEL contains a CEL expression for selecting a device.", + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.CELDeviceSelector" } }, "x-fabric8-info": { - "Type": "object", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "Ingress", + "Type": "nested", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "DeviceSelector", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1.IngressBackend": { - "description": "IngressBackend describes all endpoints for a given service and port.", + "io.k8s.api.resource.v1alpha3.OpaqueDeviceConfiguration": { + "description": "OpaqueDeviceConfiguration contains configuration parameters for a driver in a format defined by the driver vendor.", "type": "object", + "required": [ + "driver", + "parameters" + ], "properties": { - "resource": { - "description": "resource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, a service.Name and service.Port must not be specified. This is a mutually exclusive setting with \"Service\".", - "$ref": "#/definitions/io.k8s.api.core.v1.TypedLocalObjectReference" + "driver": { + "description": "Driver is used to determine which kubelet plugin needs to be passed these configuration parameters.\n\nAn admission policy provided by the driver developer could use this to decide whether it needs to validate them.\n\nMust be a DNS subdomain and should end with a DNS domain owned by the vendor of the driver.", + "type": "string", + "default": "" }, - "service": { - "description": "service references a service as a backend. This is a mutually exclusive setting with \"Resource\".", - "$ref": "#/definitions/io.k8s.api.networking.v1.IngressServiceBackend" + "parameters": { + "description": "Parameters can contain arbitrary data. It is the responsibility of the driver developer to handle validation and versioning. Typically this includes self-identification and a version (\"kind\" + \"apiVersion\" for Kubernetes types), with conversion between different versions.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" } }, "x-fabric8-info": { "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "IngressBackend", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "OpaqueDeviceConfiguration", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1.IngressClass": { - "description": "IngressClass represents the class of the Ingress, referenced by the Ingress Spec. The `ingressclass.kubernetes.io/is-default-class` annotation can be used to indicate that an IngressClass should be considered default. When a single IngressClass resource has this annotation set to true, new Ingress resources without a class specified will be assigned this default class.", + "io.k8s.api.resource.v1alpha3.PodSchedulingContext": { + "description": "PodSchedulingContext objects hold information that is needed to schedule a Pod with ResourceClaims that use \"WaitForFirstConsumer\" allocation mode.\n\nThis is an alpha type and requires enabling the DRAControlPlaneController feature gate.", "type": "object", + "required": [ + "spec" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -43511,26 +49388,31 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec is the desired state of the IngressClass. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "Spec describes where resources for the Pod are needed.", "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.IngressClassSpec" + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.PodSchedulingContextSpec" + }, + "status": { + "description": "Status describes where resources for the Pod can be allocated.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.PodSchedulingContextStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "IngressClass", - "Scope": "Clustered" + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "PodSchedulingContext", + "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1.IngressClassList": { - "description": "IngressClassList is a collection of IngressClasses.", + "io.k8s.api.resource.v1alpha3.PodSchedulingContextList": { + "description": "PodSchedulingContextList is a collection of Pod scheduling objects.", "type": "object", "required": [ "items" @@ -43541,11 +49423,11 @@ "type": "string" }, "items": { - "description": "items is the list of IngressClasses.", + "description": "Items is the list of PodSchedulingContext objects.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.IngressClass" + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.PodSchedulingContext" } }, "kind": { @@ -43553,353 +49435,276 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata.", + "description": "Standard list metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "IngressClassList", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "PodSchedulingContextList", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1.IngressClassParametersReference": { - "description": "IngressClassParametersReference identifies an API object. This can be used to specify a cluster or namespace-scoped resource.", + "io.k8s.api.resource.v1alpha3.PodSchedulingContextSpec": { + "description": "PodSchedulingContextSpec describes where resources for the Pod are needed.", "type": "object", - "required": [ - "kind", - "name" - ], "properties": { - "apiGroup": { - "description": "apiGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.", - "type": "string" - }, - "kind": { - "description": "kind is the type of resource being referenced.", - "type": "string", - "default": "" - }, - "name": { - "description": "name is the name of resource being referenced.", - "type": "string", - "default": "" - }, - "namespace": { - "description": "namespace is the namespace of the resource being referenced. This field is required when scope is set to \"Namespace\" and must be unset when scope is set to \"Cluster\".", - "type": "string" + "potentialNodes": { + "description": "PotentialNodes lists nodes where the Pod might be able to run.\n\nThe size of this field is limited to 128. This is large enough for many clusters. Larger clusters may need more attempts to find a node that suits all pending resources. This may get increased in the future, but not reduced.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "scope": { - "description": "scope represents if this refers to a cluster or namespace scoped resource. This may be set to \"Cluster\" (default) or \"Namespace\".", + "selectedNode": { + "description": "SelectedNode is the node for which allocation of ResourceClaims that are referenced by the Pod and that use \"WaitForFirstConsumer\" allocation is to be attempted.", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "IngressClassParametersReference", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "PodSchedulingContextSpec", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1.IngressClassSpec": { - "description": "IngressClassSpec provides information about the class of an Ingress.", + "io.k8s.api.resource.v1alpha3.PodSchedulingContextStatus": { + "description": "PodSchedulingContextStatus describes where resources for the Pod can be allocated.", "type": "object", "properties": { - "controller": { - "description": "controller refers to the name of the controller that should handle this class. This allows for different \"flavors\" that are controlled by the same controller. For example, you may have different parameters for the same implementing controller. This should be specified as a domain-prefixed path no more than 250 characters in length, e.g. \"acme.io/ingress-controller\". This field is immutable.", - "type": "string" - }, - "parameters": { - "description": "parameters is a link to a custom resource containing additional configuration for the controller. This is optional if the controller does not require extra parameters.", - "$ref": "#/definitions/io.k8s.api.networking.v1.IngressClassParametersReference" + "resourceClaims": { + "description": "ResourceClaims describes resource availability for each pod.spec.resourceClaim entry where the corresponding ResourceClaim uses \"WaitForFirstConsumer\" allocation mode.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourceClaimSchedulingStatus" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "IngressClassSpec", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "PodSchedulingContextStatus", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1.IngressList": { - "description": "IngressList is a collection of Ingress.", + "io.k8s.api.resource.v1alpha3.ResourceClaim": { + "description": "ResourceClaim describes a request for access to resources in the cluster, for use by workloads. For example, if a workload needs an accelerator device with specific properties, this is how that request is expressed. The status stanza tracks whether this claim has been satisfied and what specific resources have been allocated.\n\nThis is an alpha type and requires enabling the DynamicResourceAllocation feature gate.", "type": "object", "required": [ - "items" + "spec" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "items is the list of Ingress.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.Ingress" - } - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object metadata", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - }, - "x-fabric8-info": { - "Type": "list", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "IngressList", - "Scope": "Namespaced" - } - }, - "io.k8s.api.networking.v1.IngressLoadBalancerIngress": { - "description": "IngressLoadBalancerIngress represents the status of a load-balancer ingress point.", - "type": "object", - "properties": { - "hostname": { - "description": "hostname is set for load-balancer ingress points that are DNS based.", - "type": "string" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "ip": { - "description": "ip is set for load-balancer ingress points that are IP based.", - "type": "string" + "spec": { + "description": "Spec describes what is being requested and how to configure it. The spec is immutable.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourceClaimSpec" }, - "ports": { - "description": "ports provides information about the ports exposed by this LoadBalancer.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.IngressPortStatus" - }, - "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "IngressLoadBalancerIngress", - "Scope": "Namespaced" - } - }, - "io.k8s.api.networking.v1.IngressLoadBalancerStatus": { - "description": "IngressLoadBalancerStatus represents the status of a load-balancer.", - "type": "object", - "properties": { - "ingress": { - "description": "ingress is a list containing ingress points for the load-balancer.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.IngressLoadBalancerIngress" - }, - "x-kubernetes-list-type": "atomic" + "status": { + "description": "Status describes whether the claim is ready to use and what has been allocated.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourceClaimStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "IngressLoadBalancerStatus", + "Type": "object", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "ResourceClaim", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1.IngressPortStatus": { - "description": "IngressPortStatus represents the error condition of a service port", + "io.k8s.api.resource.v1alpha3.ResourceClaimConsumerReference": { + "description": "ResourceClaimConsumerReference contains enough information to let you locate the consumer of a ResourceClaim. The user must be a resource in the same namespace as the ResourceClaim.", "type": "object", "required": [ - "port", - "protocol" + "resource", + "name", + "uid" ], "properties": { - "error": { - "description": "error is to record the problem with the service port The format of the error shall comply with the following rules: - built-in error values shall be specified in this file and those shall use\n CamelCase names\n- cloud provider specific error values must have names that comply with the\n format foo.example.com/CamelCase.", + "apiGroup": { + "description": "APIGroup is the group for the resource being referenced. It is empty for the core API. This matches the group in the APIVersion that is used when creating the resources.", "type": "string" }, - "port": { - "description": "port is the port number of the ingress port.", - "type": "integer", - "format": "int32", - "default": 0 + "name": { + "description": "Name is the name of resource being referenced.", + "type": "string", + "default": "" }, - "protocol": { - "description": "protocol is the protocol of the ingress port. The supported values are: \"TCP\", \"UDP\", \"SCTP\"\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", + "resource": { + "description": "Resource is the type of resource being referenced, for example \"pods\".", "type": "string", - "default": "", - "enum": [ - "SCTP", - "TCP", - "UDP" - ] + "default": "" + }, + "uid": { + "description": "UID identifies exactly one incarnation of the resource.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "IngressPortStatus", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "ResourceClaimConsumerReference", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1.IngressRule": { - "description": "IngressRule represents the rules mapping the paths under a specified host to the related backend services. Incoming requests are first evaluated for a host match, then routed to the backend associated with the matching IngressRuleValue.", + "io.k8s.api.resource.v1alpha3.ResourceClaimList": { + "description": "ResourceClaimList is a collection of claims.", "type": "object", + "required": [ + "items" + ], "properties": { - "host": { - "description": "host is the fully qualified domain name of a network host, as defined by RFC 3986. Note the following deviations from the \"host\" part of the URI as defined in RFC 3986: 1. IPs are not allowed. Currently an IngressRuleValue can only apply to\n the IP in the Spec of the parent Ingress.\n2. The `:` delimiter is not respected because ports are not allowed.\n\t Currently the port of an Ingress is implicitly :80 for http and\n\t :443 for https.\nBoth these may change in the future. Incoming requests are matched against the host before the IngressRuleValue. If the host is unspecified, the Ingress routes all traffic based on the specified IngressRuleValue.\n\nhost can be \"precise\" which is a domain name without the terminating dot of a network host (e.g. \"foo.bar.com\") or \"wildcard\", which is a domain name prefixed with a single wildcard label (e.g. \"*.foo.com\"). The wildcard character '*' must appear by itself as the first DNS label and matches only a single label. You cannot have a wildcard label by itself (e.g. Host == \"*\"). Requests will be matched against the Host field in the following way: 1. If host is precise, the request matches this rule if the http host header is equal to Host. 2. If host is a wildcard, then the request matches this rule if the http host header is to equal to the suffix (removing the first label) of the wildcard rule.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "http": { - "$ref": "#/definitions/io.k8s.api.networking.v1.HTTPIngressRuleValue" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "IngressRule", - "Scope": "Namespaced" - } - }, - "io.k8s.api.networking.v1.IngressRuleValue": { - "description": "IngressRuleValue represents a rule to apply against incoming requests. If the rule is satisfied, the request is routed to the specified backend. Currently mixing different types of rules in a single Ingress is disallowed, so exactly one of the following must be set.", - "type": "object", - "properties": { - "http": { - "$ref": "#/definitions/io.k8s.api.networking.v1.HTTPIngressRuleValue" + "items": { + "description": "Items is the list of resource claims.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourceClaim" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "IngressRuleValue", + "Type": "list", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "ResourceClaimList", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1.IngressServiceBackend": { - "description": "IngressServiceBackend references a Kubernetes Service as a Backend.", + "io.k8s.api.resource.v1alpha3.ResourceClaimSchedulingStatus": { + "description": "ResourceClaimSchedulingStatus contains information about one particular ResourceClaim with \"WaitForFirstConsumer\" allocation mode.", "type": "object", "required": [ "name" ], "properties": { "name": { - "description": "name is the referenced service. The service must exist in the same namespace as the Ingress object.", + "description": "Name matches the pod.spec.resourceClaims[*].Name field.", "type": "string", "default": "" }, - "port": { - "description": "port of the referenced service. A port name or port number is required for a IngressServiceBackend.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.ServiceBackendPort" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "IngressServiceBackend", - "Scope": "Namespaced" - } - }, - "io.k8s.api.networking.v1.IngressSpec": { - "description": "IngressSpec describes the Ingress the user wishes to exist.", - "type": "object", - "properties": { - "defaultBackend": { - "description": "defaultBackend is the backend that should handle requests that don't match any rule. If Rules are not specified, DefaultBackend must be specified. If DefaultBackend is not set, the handling of requests that do not match any of the rules will be up to the Ingress controller.", - "$ref": "#/definitions/io.k8s.api.networking.v1.IngressBackend" - }, - "ingressClassName": { - "description": "ingressClassName is the name of an IngressClass cluster resource. Ingress controller implementations use this field to know whether they should be serving this Ingress resource, by a transitive connection (controller -\u003e IngressClass -\u003e Ingress resource). Although the `kubernetes.io/ingress.class` annotation (simple constant name) was never formally defined, it was widely supported by Ingress controllers to create a direct binding between Ingress controller and Ingress resources. Newly created Ingress resources should prefer using the field. However, even though the annotation is officially deprecated, for backwards compatibility reasons, ingress controllers should still honor that annotation if present.", - "type": "string" - }, - "rules": { - "description": "rules is a list of host rules used to configure the Ingress. If unspecified, or no rule matches, all traffic is sent to the default backend.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.IngressRule" - }, - "x-kubernetes-list-type": "atomic" - }, - "tls": { - "description": "tls represents the TLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.", + "unsuitableNodes": { + "description": "UnsuitableNodes lists nodes that the ResourceClaim cannot be allocated for.\n\nThe size of this field is limited to 128, the same as for PodSchedulingSpec.PotentialNodes. This may get increased in the future, but not reduced.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.IngressTLS" + "type": "string", + "default": "" }, "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "IngressSpec", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "ResourceClaimSchedulingStatus", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1.IngressStatus": { - "description": "IngressStatus describe the current state of the Ingress.", + "io.k8s.api.resource.v1alpha3.ResourceClaimSpec": { + "description": "ResourceClaimSpec defines what is being requested in a ResourceClaim and how to configure it.", "type": "object", "properties": { - "loadBalancer": { - "description": "loadBalancer contains the current status of the load-balancer.", + "controller": { + "description": "Controller is the name of the DRA driver that is meant to handle allocation of this claim. If empty, allocation is handled by the scheduler while scheduling a pod.\n\nMust be a DNS subdomain and should end with a DNS domain owned by the vendor of the driver.\n\nThis is an alpha field and requires enabling the DRAControlPlaneController feature gate.", + "type": "string" + }, + "devices": { + "description": "Devices defines how to request devices.", "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.IngressLoadBalancerStatus" + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceClaim" } }, "x-fabric8-info": { "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "IngressStatus", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "ResourceClaimSpec", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1.IngressTLS": { - "description": "IngressTLS describes the transport layer security associated with an ingress.", + "io.k8s.api.resource.v1alpha3.ResourceClaimStatus": { + "description": "ResourceClaimStatus tracks whether the resource has been allocated and what the result of that was.", "type": "object", "properties": { - "hosts": { - "description": "hosts is a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.", + "allocation": { + "description": "Allocation is set once the claim has been allocated successfully.", + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.AllocationResult" + }, + "deallocationRequested": { + "description": "Indicates that a claim is to be deallocated. While this is set, no new consumers may be added to ReservedFor.\n\nThis is only used if the claim needs to be deallocated by a DRA driver. That driver then must deallocate this claim and reset the field together with clearing the Allocation field.\n\nThis is an alpha field and requires enabling the DRAControlPlaneController feature gate.", + "type": "boolean" + }, + "reservedFor": { + "description": "ReservedFor indicates which entities are currently allowed to use the claim. A Pod which references a ResourceClaim which is not reserved for that Pod will not be started. A claim that is in use or might be in use because it has been reserved must not get deallocated.\n\nIn a cluster with multiple scheduler instances, two pods might get scheduled concurrently by different schedulers. When they reference the same ResourceClaim which already has reached its maximum number of consumers, only one pod can be scheduled.\n\nBoth schedulers try to add their pod to the claim.status.reservedFor field, but only the update that reaches the API server first gets stored. The other one fails with an error and the scheduler which issued it knows that it must put the pod back into the queue, waiting for the ResourceClaim to become usable again.\n\nThere can be at most 32 such reservations. This may get increased in the future, but not reduced.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourceClaimConsumerReference" }, - "x-kubernetes-list-type": "atomic" - }, - "secretName": { - "description": "secretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. If the SNI host in a listener conflicts with the \"Host\" header field used by an IngressRule, the SNI host is used for termination and value of the \"Host\" header is used for routing.", - "type": "string" + "x-kubernetes-list-map-keys": [ + "uid" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "uid", + "x-kubernetes-patch-strategy": "merge" } }, "x-fabric8-info": { "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "IngressTLS", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "ResourceClaimStatus", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1.NetworkPolicy": { - "description": "NetworkPolicy describes what network traffic is allowed for a set of Pods", + "io.k8s.api.resource.v1alpha3.ResourceClaimTemplate": { + "description": "ResourceClaimTemplate is used to produce ResourceClaim objects.\n\nThis is an alpha type and requires enabling the DynamicResourceAllocation feature gate.", "type": "object", + "required": [ + "spec" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -43910,88 +49715,26 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec represents the specification of the desired behavior for this NetworkPolicy.", + "description": "Describes the ResourceClaim that is to be generated.\n\nThis field is immutable. A ResourceClaim will get created by the control plane for a Pod when needed and then not get updated anymore.", "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicySpec" + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourceClaimTemplateSpec" } }, "x-fabric8-info": { "Type": "object", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "NetworkPolicy", - "Scope": "Namespaced" - } - }, - "io.k8s.api.networking.v1.NetworkPolicyEgressRule": { - "description": "NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and to. This type is beta-level in 1.8", - "type": "object", - "properties": { - "ports": { - "description": "ports is a list of destination ports for outgoing traffic. Each item in this list is combined using a logical OR. If this field is empty or missing, this rule matches all ports (traffic not restricted by port). If this field is present and contains at least one item, then this rule allows traffic only if the traffic matches at least one port in the list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicyPort" - }, - "x-kubernetes-list-type": "atomic" - }, - "to": { - "description": "to is a list of destinations for outgoing traffic of pods selected for this rule. Items in this list are combined using a logical OR operation. If this field is empty or missing, this rule matches all destinations (traffic not restricted by destination). If this field is present and contains at least one item, this rule allows traffic only if the traffic matches at least one item in the to list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicyPeer" - }, - "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "NetworkPolicyEgressRule", - "Scope": "Namespaced" - } - }, - "io.k8s.api.networking.v1.NetworkPolicyIngressRule": { - "description": "NetworkPolicyIngressRule describes a particular set of traffic that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and from.", - "type": "object", - "properties": { - "from": { - "description": "from is a list of sources which should be able to access the pods selected for this rule. Items in this list are combined using a logical OR operation. If this field is empty or missing, this rule matches all sources (traffic not restricted by source). If this field is present and contains at least one item, this rule allows traffic only if the traffic matches at least one item in the from list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicyPeer" - }, - "x-kubernetes-list-type": "atomic" - }, - "ports": { - "description": "ports is a list of ports which should be made accessible on the pods selected for this rule. Each item in this list is combined using a logical OR. If this field is empty or missing, this rule matches all ports (traffic not restricted by port). If this field is present and contains at least one item, then this rule allows traffic only if the traffic matches at least one port in the list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicyPort" - }, - "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "NetworkPolicyIngressRule", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "ResourceClaimTemplate", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1.NetworkPolicyList": { - "description": "NetworkPolicyList is a list of NetworkPolicy objects.", + "io.k8s.api.resource.v1alpha3.ResourceClaimTemplateList": { + "description": "ResourceClaimTemplateList is a collection of claim templates.", "type": "object", "required": [ "items" @@ -44002,11 +49745,11 @@ "type": "string" }, "items": { - "description": "items is a list of schema objects.", + "description": "Items is the list of resource claim templates.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicy" + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourceClaimTemplate" } }, "kind": { @@ -44014,153 +49757,86 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard list metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "NetworkPolicyList", - "Scope": "Namespaced" - } - }, - "io.k8s.api.networking.v1.NetworkPolicyPeer": { - "description": "NetworkPolicyPeer describes a peer to allow traffic to/from. Only certain combinations of fields are allowed", - "type": "object", - "properties": { - "ipBlock": { - "description": "ipBlock defines policy on a particular IPBlock. If this field is set then neither of the other fields can be.", - "$ref": "#/definitions/io.k8s.api.networking.v1.IPBlock" - }, - "namespaceSelector": { - "description": "namespaceSelector selects namespaces using cluster-scoped labels. This field follows standard label selector semantics; if present but empty, it selects all namespaces.\n\nIf podSelector is also set, then the NetworkPolicyPeer as a whole selects the pods matching podSelector in the namespaces selected by namespaceSelector. Otherwise it selects all pods in the namespaces selected by namespaceSelector.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "podSelector": { - "description": "podSelector is a label selector which selects pods. This field follows standard label selector semantics; if present but empty, it selects all pods.\n\nIf namespaceSelector is also set, then the NetworkPolicyPeer as a whole selects the pods matching podSelector in the Namespaces selected by NamespaceSelector. Otherwise it selects the pods matching podSelector in the policy's own namespace.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "NetworkPolicyPeer", - "Scope": "Namespaced" - } - }, - "io.k8s.api.networking.v1.NetworkPolicyPort": { - "description": "NetworkPolicyPort describes a port to allow traffic on", - "type": "object", - "properties": { - "endPort": { - "description": "endPort indicates that the range of ports from port to endPort if set, inclusive, should be allowed by the policy. This field cannot be defined if the port field is not defined or if the port field is defined as a named (string) port. The endPort must be equal or greater than port.", - "type": "integer", - "format": "int32" - }, - "port": { - "description": "port represents the port on the given protocol. This can either be a numerical or named port on a pod. If this field is not provided, this matches all port names and numbers. If present, only traffic on the specified protocol AND port will be matched.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" - }, - "protocol": { - "description": "protocol represents the protocol (TCP, UDP, or SCTP) which traffic must match. If not specified, this field defaults to TCP.\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", - "type": "string", - "enum": [ - "SCTP", - "TCP", - "UDP" - ] - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "NetworkPolicyPort", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "ResourceClaimTemplateList", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1.NetworkPolicySpec": { - "description": "NetworkPolicySpec provides the specification of a NetworkPolicy", + "io.k8s.api.resource.v1alpha3.ResourceClaimTemplateSpec": { + "description": "ResourceClaimTemplateSpec contains the metadata and fields for a ResourceClaim.", "type": "object", "required": [ - "podSelector" + "spec" ], "properties": { - "egress": { - "description": "egress is a list of egress rules to be applied to the selected pods. Outgoing traffic is allowed if there are no NetworkPolicies selecting the pod (and cluster policy otherwise allows the traffic), OR if the traffic matches at least one egress rule across all of the NetworkPolicy objects whose podSelector matches the pod. If this field is empty then this NetworkPolicy limits all outgoing traffic (and serves solely to ensure that the pods it selects are isolated by default). This field is beta-level in 1.8", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicyEgressRule" - }, - "x-kubernetes-list-type": "atomic" - }, - "ingress": { - "description": "ingress is a list of ingress rules to be applied to the selected pods. Traffic is allowed to a pod if there are no NetworkPolicies selecting the pod (and cluster policy otherwise allows the traffic), OR if the traffic source is the pod's local node, OR if the traffic matches at least one ingress rule across all of the NetworkPolicy objects whose podSelector matches the pod. If this field is empty then this NetworkPolicy does not allow any traffic (and serves solely to ensure that the pods it selects are isolated by default)", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1.NetworkPolicyIngressRule" - }, - "x-kubernetes-list-type": "atomic" - }, - "podSelector": { - "description": "podSelector selects the pods to which this NetworkPolicy object applies. The array of ingress rules is applied to any pods selected by this field. Multiple network policies can select the same set of pods. In this case, the ingress rules for each are combined additively. This field is NOT optional and follows standard label selector semantics. An empty podSelector matches all pods in this namespace.", + "metadata": { + "description": "ObjectMeta may contain labels and annotations that will be copied into the PVC when creating it. No other fields are allowed and will be rejected during validation.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "policyTypes": { - "description": "policyTypes is a list of rule types that the NetworkPolicy relates to. Valid options are [\"Ingress\"], [\"Egress\"], or [\"Ingress\", \"Egress\"]. If this field is not specified, it will default based on the existence of ingress or egress rules; policies that contain an egress section are assumed to affect egress, and all policies (whether or not they contain an ingress section) are assumed to affect ingress. If you want to write an egress-only policy, you must explicitly specify policyTypes [ \"Egress\" ]. Likewise, if you want to write a policy that specifies that no egress is allowed, you must specify a policyTypes value that include \"Egress\" (since such a policy would not include an egress section and would otherwise default to just [ \"Ingress\" ]). This field is beta-level in 1.8", - "type": "array", - "items": { - "type": "string", - "default": "", - "enum": [ - "Egress", - "Ingress" - ] - }, - "x-kubernetes-list-type": "atomic" + "spec": { + "description": "Spec for the ResourceClaim. The entire content is copied unchanged into the ResourceClaim that gets created from this template. The same fields as in a ResourceClaim are also valid here.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourceClaimSpec" } }, "x-fabric8-info": { "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "NetworkPolicySpec", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "ResourceClaimTemplateSpec", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1.ServiceBackendPort": { - "description": "ServiceBackendPort is the service port being referenced.", + "io.k8s.api.resource.v1alpha3.ResourcePool": { + "description": "ResourcePool describes the pool that ResourceSlices belong to.", "type": "object", + "required": [ + "name", + "generation", + "resourceSliceCount" + ], "properties": { + "generation": { + "description": "Generation tracks the change in a pool over time. Whenever a driver changes something about one or more of the resources in a pool, it must change the generation in all ResourceSlices which are part of that pool. Consumers of ResourceSlices should only consider resources from the pool with the highest generation number. The generation may be reset by drivers, which should be fine for consumers, assuming that all ResourceSlices in a pool are updated to match or deleted.\n\nCombined with ResourceSliceCount, this mechanism enables consumers to detect pools which are comprised of multiple ResourceSlices and are in an incomplete state.", + "type": "integer", + "format": "int64", + "default": 0 + }, "name": { - "description": "name is the name of the port on the Service. This is a mutually exclusive setting with \"Number\".", - "type": "string" + "description": "Name is used to identify the pool. For node-local devices, this is often the node name, but this is not required.\n\nIt must not be longer than 253 characters and must consist of one or more DNS sub-domains separated by slashes. This field is immutable.", + "type": "string", + "default": "" }, - "number": { - "description": "number is the numerical port number (e.g. 80) on the Service. This is a mutually exclusive setting with \"Name\".", + "resourceSliceCount": { + "description": "ResourceSliceCount is the total number of ResourceSlices in the pool at this generation number. Must be greater than zero.\n\nConsumers can use this to check whether they have seen all ResourceSlices belonging to the same pool.", "type": "integer", - "format": "int32" + "format": "int64", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1", - "Kind": "ServiceBackendPort", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "ResourcePool", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.networking.v1alpha1.IPAddress": { - "description": "IPAddress represents a single IP of a single IP Family. The object is designed to be used by APIs that operate on IP addresses. The object is used by the Service core API for allocation of IP addresses. An IP address can be represented in different formats, to guarantee the uniqueness of the IP, the name of the object is the IP address in canonical format, four decimal digits separated by dots suppressing leading zeros for IPv4 and the representation defined by RFC 5952 for IPv6. Valid: 192.168.1.5 or 2001:db8::1 or 2001:db8:aaaa:bbbb:cccc:dddd:eeee:1 Invalid: 10.01.2.3 or 2001:db8:0:0:0::1", + "io.k8s.api.resource.v1alpha3.ResourceSlice": { + "description": "ResourceSlice represents one or more resources in a pool of similar resources, managed by a common driver. A pool may span more than one ResourceSlice, and exactly how many ResourceSlices comprise a pool is determined by the driver.\n\nAt the moment, the only supported resources are devices with attributes and capacities. Each device in a given pool, regardless of how many ResourceSlices, must have a unique name. The ResourceSlice in which a device gets published may change over time. The unique identifier for a device is the tuple \u003cdriver name\u003e, \u003cpool name\u003e, \u003cdevice name\u003e.\n\nWhenever a driver needs to update a pool, it increments the pool.Spec.Pool.Generation number and updates all ResourceSlices with that new number and new resource definitions. A consumer must only use ResourceSlices with the highest generation number and ignore all others.\n\nWhen allocating all resources in a pool matching certain criteria or when looking for the best solution among several different alternatives, a consumer should check the number of ResourceSlices in a pool (included in each ResourceSlice) to determine whether its view of a pool is complete and if not, should wait until the driver has completed updating the pool.\n\nFor resources that are not local to a node, the node name is not set. Instead, the driver may use a node selector to specify where the devices are available.\n\nThis is an alpha type and requires enabling the DynamicResourceAllocation feature gate.", "type": "object", + "required": [ + "spec" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -44171,26 +49847,26 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec is the desired state of the IPAddress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "Contains the information published by the driver.\n\nChanging the spec automatically increments the metadata.generation number.", "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1alpha1.IPAddressSpec" + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourceSliceSpec" } }, "x-fabric8-info": { "Type": "object", - "Group": "networking.k8s.io", - "Version": "v1alpha1", - "Kind": "IPAddress", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "ResourceSlice", "Scope": "Clustered" } }, - "io.k8s.api.networking.v1alpha1.IPAddressList": { - "description": "IPAddressList contains a list of IPAddress.", + "io.k8s.api.resource.v1alpha3.ResourceSliceList": { + "description": "ResourceSliceList is a collection of ResourceSlices.", "type": "object", "required": [ "items" @@ -44201,11 +49877,11 @@ "type": "string" }, "items": { - "description": "items is the list of IPAddresses.", + "description": "Items is the list of resource ResourceSlices.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1alpha1.IPAddress" + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourceSlice" } }, "kind": { @@ -44213,80 +49889,174 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard list metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "networking.k8s.io", - "Version": "v1alpha1", - "Kind": "IPAddressList", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "ResourceSliceList", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1alpha1.IPAddressSpec": { - "description": "IPAddressSpec describe the attributes in an IP Address.", + "io.k8s.api.resource.v1alpha3.ResourceSliceSpec": { + "description": "ResourceSliceSpec contains the information published by the driver in one ResourceSlice.", "type": "object", "required": [ - "parentRef" + "driver", + "pool" ], "properties": { - "parentRef": { - "description": "ParentRef references the resource that an IPAddress is attached to. An IPAddress must reference a parent object.", - "$ref": "#/definitions/io.k8s.api.networking.v1alpha1.ParentReference" + "allNodes": { + "description": "AllNodes indicates that all nodes have access to the resources in the pool.\n\nExactly one of NodeName, NodeSelector and AllNodes must be set.", + "type": "boolean" + }, + "devices": { + "description": "Devices lists some or all of the devices in this pool.\n\nMust not have more than 128 entries.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.Device" + }, + "x-kubernetes-list-type": "atomic" + }, + "driver": { + "description": "Driver identifies the DRA driver providing the capacity information. A field selector can be used to list only ResourceSlice objects with a certain driver name.\n\nMust be a DNS subdomain and should end with a DNS domain owned by the vendor of the driver. This field is immutable.", + "type": "string", + "default": "" + }, + "nodeName": { + "description": "NodeName identifies the node which provides the resources in this pool. A field selector can be used to list only ResourceSlice objects belonging to a certain node.\n\nThis field can be used to limit access from nodes to ResourceSlices with the same node name. It also indicates to autoscalers that adding new nodes of the same type as some old node might also make new resources available.\n\nExactly one of NodeName, NodeSelector and AllNodes must be set. This field is immutable.", + "type": "string" + }, + "nodeSelector": { + "description": "NodeSelector defines which nodes have access to the resources in the pool, when that pool is not limited to a single node.\n\nMust use exactly one term.\n\nExactly one of NodeName, NodeSelector and AllNodes must be set.", + "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelector" + }, + "pool": { + "description": "Pool describes the pool that this ResourceSlice belongs to.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourcePool" } }, "x-fabric8-info": { "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1alpha1", - "Kind": "IPAddressSpec", + "Group": "resource.k8s.io", + "Version": "v1alpha3", + "Kind": "ResourceSliceSpec", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1alpha1.ParentReference": { - "description": "ParentReference describes a reference to a parent object.", + "io.k8s.api.scheduling.v1.PriorityClass": { + "description": "PriorityClass defines mapping from a priority class name to the priority integer value. The value can be any valid integer.", "type": "object", "required": [ - "resource", - "name" + "value" ], "properties": { - "group": { - "description": "Group is the group of the object being referenced.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "name": { - "description": "Name is the name of the object being referenced.", + "description": { + "description": "description is an arbitrary string that usually provides guidelines on when this priority class should be used.", "type": "string" }, - "namespace": { - "description": "Namespace is the namespace of the object being referenced.", + "globalDefault": { + "description": "globalDefault specifies whether this PriorityClass should be considered as the default priority for pods that do not have any priority class. Only one PriorityClass can be marked as `globalDefault`. However, if more than one PriorityClasses exists with their `globalDefault` field set to true, the smallest value of such global default PriorityClasses will be used as the default priority.", + "type": "boolean" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "preemptionPolicy": { + "description": "preemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset.\n\nPossible enum values:\n - `\"Never\"` means that pod never preempts other pods with lower priority.\n - `\"PreemptLowerPriority\"` means that pod can preempt other pods with lower priority.", + "type": "string", + "enum": [ + "Never", + "PreemptLowerPriority" + ] + }, + "value": { + "description": "value represents the integer value of this priority class. This is the actual priority that pods receive when they have the name of this class in their pod spec.", + "type": "integer", + "format": "int32", + "default": 0 + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "scheduling.k8s.io", + "Version": "v1", + "Kind": "PriorityClass", + "Scope": "Clustered" + } + }, + "io.k8s.api.scheduling.v1.PriorityClassList": { + "description": "PriorityClassList is a collection of priority classes.", + "type": "object", + "required": [ + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "resource": { - "description": "Resource is the resource of the object being referenced.", + "items": { + "description": "items is the list of PriorityClasses", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.scheduling.v1.PriorityClass" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + }, + "metadata": { + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1alpha1", - "Kind": "ParentReference", + "Type": "list", + "Group": "scheduling.k8s.io", + "Version": "v1", + "Kind": "PriorityClassList", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1alpha1.ServiceCIDR": { - "description": "ServiceCIDR defines a range of IP addresses using CIDR format (e.g. 192.168.0.0/24 or 2001:db2::/64). This range is used to allocate ClusterIPs to Service objects.", + "io.k8s.api.scheduling.v1alpha1.PriorityClass": { + "description": "DEPRECATED - This group version of PriorityClass is deprecated by scheduling.k8s.io/v1/PriorityClass. PriorityClass defines mapping from a priority class name to the priority integer value. The value can be any valid integer.", "type": "object", + "required": [ + "value" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "description": { + "description": "description is an arbitrary string that usually provides guidelines on when this priority class should be used.", + "type": "string" + }, + "globalDefault": { + "description": "globalDefault specifies whether this PriorityClass should be considered as the default priority for pods that do not have any priority class. Only one PriorityClass can be marked as `globalDefault`. However, if more than one PriorityClasses exists with their `globalDefault` field set to true, the smallest value of such global default PriorityClasses will be used as the default priority.", + "type": "boolean" + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" @@ -44296,27 +50066,31 @@ "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "spec": { - "description": "spec is the desired state of the ServiceCIDR. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1alpha1.ServiceCIDRSpec" + "preemptionPolicy": { + "description": "preemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset.\n\nPossible enum values:\n - `\"Never\"` means that pod never preempts other pods with lower priority.\n - `\"PreemptLowerPriority\"` means that pod can preempt other pods with lower priority.", + "type": "string", + "enum": [ + "Never", + "PreemptLowerPriority" + ] }, - "status": { - "description": "status represents the current state of the ServiceCIDR. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1alpha1.ServiceCIDRStatus" + "value": { + "description": "value represents the integer value of this priority class. This is the actual priority that pods receive when they have the name of this class in their pod spec.", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { "Type": "object", - "Group": "networking.k8s.io", + "Group": "scheduling.k8s.io", "Version": "v1alpha1", - "Kind": "ServiceCIDR", + "Kind": "PriorityClass", "Scope": "Clustered" } }, - "io.k8s.api.networking.v1alpha1.ServiceCIDRList": { - "description": "ServiceCIDRList contains a list of ServiceCIDR objects.", + "io.k8s.api.scheduling.v1alpha1.PriorityClassList": { + "description": "PriorityClassList is a collection of priority classes.", "type": "object", "required": [ "items" @@ -44327,11 +50101,11 @@ "type": "string" }, "items": { - "description": "items is the list of ServiceCIDRs.", + "description": "items is the list of PriorityClasses", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1alpha1.ServiceCIDR" + "$ref": "#/definitions/io.k8s.api.scheduling.v1alpha1.PriorityClass" } }, "kind": { @@ -44339,125 +50113,113 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "networking.k8s.io", - "Version": "v1alpha1", - "Kind": "ServiceCIDRList", - "Scope": "Namespaced" - } - }, - "io.k8s.api.networking.v1alpha1.ServiceCIDRSpec": { - "description": "ServiceCIDRSpec define the CIDRs the user wants to use for allocating ClusterIPs for Services.", - "type": "object", - "properties": { - "cidrs": { - "description": "CIDRs defines the IP blocks in CIDR notation (e.g. \"192.168.0.0/24\" or \"2001:db8::/64\") from which to assign service cluster IPs. Max of two CIDRs is allowed, one of each IP family. The network address of each CIDR, the address that identifies the subnet of a host, is reserved and will not be allocated. The broadcast address for IPv4 CIDRs is also reserved and will not be allocated. This field is immutable.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1alpha1", - "Kind": "ServiceCIDRSpec", - "Scope": "Namespaced" - } - }, - "io.k8s.api.networking.v1alpha1.ServiceCIDRStatus": { - "description": "ServiceCIDRStatus describes the current state of the ServiceCIDR.", - "type": "object", - "properties": { - "conditions": { - "description": "conditions holds an array of metav1.Condition that describe the state of the ServiceCIDR. Current service state", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", + "Group": "scheduling.k8s.io", "Version": "v1alpha1", - "Kind": "ServiceCIDRStatus", + "Kind": "PriorityClassList", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1beta1.HTTPIngressPath": { - "description": "HTTPIngressPath associates a path with a backend. Incoming urls matching the path are forwarded to the backend.", + "io.k8s.api.scheduling.v1beta1.PriorityClass": { + "description": "DEPRECATED - This group version of PriorityClass is deprecated by scheduling.k8s.io/v1/PriorityClass. PriorityClass defines mapping from a priority class name to the priority integer value. The value can be any valid integer.", "type": "object", "required": [ - "backend" + "value" ], "properties": { - "backend": { - "description": "backend defines the referenced service endpoint to which the traffic will be forwarded to.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressBackend" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "path": { - "description": "path is matched against the path of an incoming request. Currently it can contain characters disallowed from the conventional \"path\" part of a URL as defined by RFC 3986. Paths must begin with a '/' and must be present when using PathType with value \"Exact\" or \"Prefix\".", + "description": { + "description": "description is an arbitrary string that usually provides guidelines on when this priority class should be used.", "type": "string" }, - "pathType": { - "description": "pathType determines the interpretation of the path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by '/'. Matching is\n done on a path element by element basis. A path element refers is the\n list of labels in the path split by the '/' separator. A request is a\n match for path p if every p is an element-wise prefix of p of the\n request path. Note that if the last element of the path is a substring\n of the last element in request path, it is not a match (e.g. /foo/bar\n matches /foo/bar/baz, but does not match /foo/barbaz).\n* ImplementationSpecific: Interpretation of the Path matching is up to\n the IngressClass. Implementations can treat this as a separate PathType\n or treat it identically to Prefix or Exact path types.\nImplementations are required to support all path types. Defaults to ImplementationSpecific.", + "globalDefault": { + "description": "globalDefault specifies whether this PriorityClass should be considered as the default priority for pods that do not have any priority class. Only one PriorityClass can be marked as `globalDefault`. However, if more than one PriorityClasses exists with their `globalDefault` field set to true, the smallest value of such global default PriorityClasses will be used as the default priority.", + "type": "boolean" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "preemptionPolicy": { + "description": "preemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset.\n\nPossible enum values:\n - `\"Never\"` means that pod never preempts other pods with lower priority.\n - `\"PreemptLowerPriority\"` means that pod can preempt other pods with lower priority.", + "type": "string", + "enum": [ + "Never", + "PreemptLowerPriority" + ] + }, + "value": { + "description": "value represents the integer value of this priority class. This is the actual priority that pods receive when they have the name of this class in their pod spec.", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", + "Type": "object", + "Group": "scheduling.k8s.io", "Version": "v1beta1", - "Kind": "HTTPIngressPath", - "Scope": "Namespaced" + "Kind": "PriorityClass", + "Scope": "Clustered" } }, - "io.k8s.api.networking.v1beta1.HTTPIngressRuleValue": { - "description": "HTTPIngressRuleValue is a list of http selectors pointing to backends. In the example: http://\u003chost\u003e/\u003cpath\u003e?\u003csearchpart\u003e -\u003e backend where where parts of the url correspond to RFC 3986, this resource will be used to match against everything after the last '/' and before the first '?' or '#'.", + "io.k8s.api.scheduling.v1beta1.PriorityClassList": { + "description": "PriorityClassList is a collection of priority classes.", "type": "object", "required": [ - "paths" + "items" ], "properties": { - "paths": { - "description": "paths is a collection of paths that map requests to backends.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is the list of PriorityClasses", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.HTTPIngressPath" - }, - "x-kubernetes-list-type": "atomic" + "$ref": "#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClass" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", + "Type": "list", + "Group": "scheduling.k8s.io", "Version": "v1beta1", - "Kind": "HTTPIngressRuleValue", + "Kind": "PriorityClassList", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1beta1.IPAddress": { - "description": "IPAddress represents a single IP of a single IP Family. The object is designed to be used by APIs that operate on IP addresses. The object is used by the Service core API for allocation of IP addresses. An IP address can be represented in different formats, to guarantee the uniqueness of the IP, the name of the object is the IP address in canonical format, four decimal digits separated by dots suppressing leading zeros for IPv4 and the representation defined by RFC 5952 for IPv6. Valid: 192.168.1.5 or 2001:db8::1 or 2001:db8:aaaa:bbbb:cccc:dddd:eeee:1 Invalid: 10.01.2.3 or 2001:db8:0:0:0::1", + "io.k8s.api.storage.v1.CSIDriver": { + "description": "CSIDriver captures information about a Container Storage Interface (CSI) volume driver deployed on the cluster. Kubernetes attach detach controller uses this object to determine whether attach is required. Kubelet uses this object to determine whether pod information needs to be passed on mount. CSIDriver objects are non-namespaced.", "type": "object", + "required": [ + "spec" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -44468,26 +50230,26 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object metadata. metadata.Name indicates the name of the CSI driver that this object refers to; it MUST be the same name returned by the CSI GetPluginName() call for that driver. The driver name must be 63 characters or less, beginning and ending with an alphanumeric character ([a-z0-9A-Z]) with dashes (-), dots (.), and alphanumerics between. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec is the desired state of the IPAddress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "spec represents the specification of the CSI Driver.", "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IPAddressSpec" + "$ref": "#/definitions/io.k8s.api.storage.v1.CSIDriverSpec" } }, "x-fabric8-info": { "Type": "object", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "IPAddress", + "Group": "storage.k8s.io", + "Version": "v1", + "Kind": "CSIDriver", "Scope": "Clustered" } }, - "io.k8s.api.networking.v1beta1.IPAddressList": { - "description": "IPAddressList contains a list of IPAddress.", + "io.k8s.api.storage.v1.CSIDriverList": { + "description": "CSIDriverList is a collection of CSIDriver objects.", "type": "object", "required": [ "items" @@ -44498,11 +50260,11 @@ "type": "string" }, "items": { - "description": "items is the list of IPAddresses.", + "description": "items is the list of CSIDriver", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IPAddress" + "$ref": "#/definitions/io.k8s.api.storage.v1.CSIDriver" } }, "kind": { @@ -44510,42 +50272,80 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "IPAddressList", + "Group": "storage.k8s.io", + "Version": "v1", + "Kind": "CSIDriverList", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1beta1.IPAddressSpec": { - "description": "IPAddressSpec describe the attributes in an IP Address.", + "io.k8s.api.storage.v1.CSIDriverSpec": { + "description": "CSIDriverSpec is the specification of a CSIDriver.", "type": "object", - "required": [ - "parentRef" - ], "properties": { - "parentRef": { - "description": "ParentRef references the resource that an IPAddress is attached to. An IPAddress must reference a parent object.", - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.ParentReference" + "attachRequired": { + "description": "attachRequired indicates this CSI volume driver requires an attach operation (because it implements the CSI ControllerPublishVolume() method), and that the Kubernetes attach detach controller should call the attach volume interface which checks the volumeattachment status and waits until the volume is attached before proceeding to mounting. The CSI external-attacher coordinates with CSI volume driver and updates the volumeattachment status when the attach operation is complete. If the CSIDriverRegistry feature gate is enabled and the value is specified to false, the attach operation will be skipped. Otherwise the attach operation will be called.\n\nThis field is immutable.", + "type": "boolean" + }, + "fsGroupPolicy": { + "description": "fsGroupPolicy defines if the underlying volume supports changing ownership and permission of the volume before being mounted. Refer to the specific FSGroupPolicy values for additional details.\n\nThis field was immutable in Kubernetes \u003c 1.29 and now is mutable.\n\nDefaults to ReadWriteOnceWithFSType, which will examine each volume to determine if Kubernetes should modify ownership and permissions of the volume. With the default policy the defined fsGroup will only be applied if a fstype is defined and the volume's access mode contains ReadWriteOnce.", + "type": "string" + }, + "podInfoOnMount": { + "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes \u003c 1.29 and now is mutable.", + "type": "boolean" + }, + "requiresRepublish": { + "description": "requiresRepublish indicates the CSI driver wants `NodePublishVolume` being periodically called to reflect any possible change in the mounted volume. This field defaults to false.\n\nNote: After a successful initial NodePublishVolume call, subsequent calls to NodePublishVolume should only update the contents of the volume. New mount points will not be seen by a running container.", + "type": "boolean" + }, + "seLinuxMount": { + "description": "seLinuxMount specifies if the CSI driver supports \"-o context\" mount option.\n\nWhen \"true\", the CSI driver must ensure that all volumes provided by this CSI driver can be mounted separately with different `-o context` options. This is typical for storage backends that provide volumes as filesystems on block devices or as independent shared volumes. Kubernetes will call NodeStage / NodePublish with \"-o context=xyz\" mount option when mounting a ReadWriteOncePod volume used in Pod that has explicitly set SELinux context. In the future, it may be expanded to other volume AccessModes. In any case, Kubernetes will ensure that the volume is mounted only with a single SELinux context.\n\nWhen \"false\", Kubernetes won't pass any special SELinux mount options to the driver. This is typical for volumes that represent subdirectories of a bigger shared filesystem.\n\nDefault is \"false\".", + "type": "boolean" + }, + "storageCapacity": { + "description": "storageCapacity indicates that the CSI volume driver wants pod scheduling to consider the storage capacity that the driver deployment will report by creating CSIStorageCapacity objects with capacity information, if set to true.\n\nThe check can be enabled immediately when deploying a driver. In that case, provisioning new volumes with late binding will pause until the driver deployment has published some suitable CSIStorageCapacity object.\n\nAlternatively, the driver can be deployed with the field unset or false and it can be flipped later when storage capacity information has been published.\n\nThis field was immutable in Kubernetes \u003c= 1.22 and now is mutable.", + "type": "boolean" + }, + "tokenRequests": { + "description": "tokenRequests indicates the CSI driver needs pods' service account tokens it is mounting volume for to do necessary authentication. Kubelet will pass the tokens in VolumeContext in the CSI NodePublishVolume calls. The CSI driver should parse and validate the following VolumeContext: \"csi.storage.k8s.io/serviceAccount.tokens\": {\n \"\u003caudience\u003e\": {\n \"token\": \u003ctoken\u003e,\n \"expirationTimestamp\": \u003cexpiration timestamp in RFC3339\u003e,\n },\n ...\n}\n\nNote: Audience in each TokenRequest should be different and at most one token is empty string. To receive a new token after expiry, RequiresRepublish can be used to trigger NodePublishVolume periodically.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.storage.v1.TokenRequest" + }, + "x-kubernetes-list-type": "atomic" + }, + "volumeLifecycleModes": { + "description": "volumeLifecycleModes defines what kind of volumes this CSI volume driver supports. The default if the list is empty is \"Persistent\", which is the usage defined by the CSI specification and implemented in Kubernetes via the usual PV/PVC mechanism.\n\nThe other mode is \"Ephemeral\". In this mode, volumes are defined inline inside the pod spec with CSIVolumeSource and their lifecycle is tied to the lifecycle of that pod. A driver has to be aware of this because it is only going to get a NodePublishVolume call for such a volume.\n\nFor more information about implementing this mode, see https://kubernetes-csi.github.io/docs/ephemeral-local-volumes.html A driver can support one or more of these modes and more modes may be added in the future.\n\nThis field is beta. This field is immutable.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" } }, "x-fabric8-info": { "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "IPAddressSpec", + "Group": "storage.k8s.io", + "Version": "v1", + "Kind": "CSIDriverSpec", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1beta1.Ingress": { - "description": "Ingress is a collection of rules that allow inbound connections to reach the endpoints defined by a backend. An Ingress can be configured to give services externally-reachable urls, load balance traffic, terminate SSL, offer name based virtual hosting etc.", + "io.k8s.api.storage.v1.CSINode": { + "description": "CSINode holds information about all CSI drivers installed on a node. CSI drivers do not need to create the CSINode object directly. As long as they use the node-driver-registrar sidecar container, the kubelet will automatically populate the CSINode object for the CSI driver as part of kubelet plugin registration. CSINode has the same name as a node. If the object is missing, it means either there are no CSI Drivers available on the node, or the Kubelet version is low enough that it doesn't create this object. CSINode has an OwnerReference that points to the corresponding node object.", "type": "object", + "required": [ + "spec" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -44556,87 +50356,66 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata. metadata.name must be the Kubernetes node name.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec is the desired state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressSpec" - }, - "status": { - "description": "status is the current state of the Ingress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "spec is the specification of CSINode", "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressStatus" + "$ref": "#/definitions/io.k8s.api.storage.v1.CSINodeSpec" } }, "x-fabric8-info": { "Type": "object", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "Ingress", - "Scope": "Namespaced" + "Group": "storage.k8s.io", + "Version": "v1", + "Kind": "CSINode", + "Scope": "Clustered" } }, - "io.k8s.api.networking.v1beta1.IngressBackend": { - "description": "IngressBackend describes all endpoints for a given service and port.", + "io.k8s.api.storage.v1.CSINodeDriver": { + "description": "CSINodeDriver holds information about the specification of one CSI driver installed on a node", "type": "object", + "required": [ + "name", + "nodeID" + ], "properties": { - "resource": { - "description": "resource is an ObjectRef to another Kubernetes resource in the namespace of the Ingress object. If resource is specified, serviceName and servicePort must not be specified.", - "$ref": "#/definitions/io.k8s.api.core.v1.TypedLocalObjectReference" + "allocatable": { + "description": "allocatable represents the volume resources of a node that are available for scheduling. This field is beta.", + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeNodeResources" }, - "serviceName": { - "description": "serviceName specifies the name of the referenced service.", - "type": "string" + "name": { + "description": "name represents the name of the CSI driver that this object refers to. This MUST be the same name returned by the CSI GetPluginName() call for that driver.", + "type": "string", + "default": "" }, - "servicePort": { - "description": "servicePort Specifies the port of the referenced service.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + "nodeID": { + "description": "nodeID of the node from the driver point of view. This field enables Kubernetes to communicate with storage systems that do not share the same nomenclature for nodes. For example, Kubernetes may refer to a given node as \"node1\", but the storage system may refer to the same node as \"nodeA\". When Kubernetes issues a command to the storage system to attach a volume to a specific node, it can use this field to refer to the node name using the ID that the storage system will understand, e.g. \"nodeA\" instead of \"node1\". This field is required.", + "type": "string", + "default": "" + }, + "topologyKeys": { + "description": "topologyKeys is the list of keys supported by the driver. When a driver is initialized on a cluster, it provides a set of topology keys that it understands (e.g. \"company.com/zone\", \"company.com/region\"). When a driver is initialized on a node, it provides the same topology keys along with values. Kubelet will expose these topology keys as labels on its own node object. When Kubernetes does topology aware provisioning, it can use this list to determine which labels it should retrieve from the node object and pass back to the driver. It is possible for different nodes to use different topology keys. This can be empty if driver does not support topology.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "IngressBackend", + "Group": "storage.k8s.io", + "Version": "v1", + "Kind": "CSINodeDriver", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1beta1.IngressClass": { - "description": "IngressClass represents the class of the Ingress, referenced by the Ingress Spec. The `ingressclass.kubernetes.io/is-default-class` annotation can be used to indicate that an IngressClass should be considered default. When a single IngressClass resource has this annotation set to true, new Ingress resources without a class specified will be assigned this default class.", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is the desired state of the IngressClass. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressClassSpec" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "IngressClass", - "Scope": "Clustered" - } - }, - "io.k8s.api.networking.v1beta1.IngressClassList": { - "description": "IngressClassList is a collection of IngressClasses.", + "io.k8s.api.storage.v1.CSINodeList": { + "description": "CSINodeList is a collection of CSINode objects.", "type": "object", "required": [ "items" @@ -44647,11 +50426,11 @@ "type": "string" }, "items": { - "description": "items is the list of IngressClasses.", + "description": "items is the list of CSINode", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressClass" + "$ref": "#/definitions/io.k8s.api.storage.v1.CSINode" } }, "kind": { @@ -44659,82 +50438,97 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata.", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "IngressClassList", + "Group": "storage.k8s.io", + "Version": "v1", + "Kind": "CSINodeList", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1beta1.IngressClassParametersReference": { - "description": "IngressClassParametersReference identifies an API object. This can be used to specify a cluster or namespace-scoped resource.", + "io.k8s.api.storage.v1.CSINodeSpec": { + "description": "CSINodeSpec holds information about the specification of all CSI drivers installed on a node", "type": "object", "required": [ - "kind", - "name", - "scope" + "drivers" ], "properties": { - "apiGroup": { - "description": "apiGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.", - "type": "string" - }, - "kind": { - "description": "kind is the type of resource being referenced.", - "type": "string", - "default": "" - }, - "name": { - "description": "name is the name of resource being referenced.", - "type": "string", - "default": "" - }, - "namespace": { - "description": "namespace is the namespace of the resource being referenced. This field is required when scope is set to \"Namespace\" and must be unset when scope is set to \"Cluster\".", - "type": "string" - }, - "scope": { - "description": "scope represents if this refers to a cluster or namespace scoped resource. This may be set to \"Cluster\" (default) or \"Namespace\".", - "type": "string" + "drivers": { + "description": "drivers is a list of information of all CSI Drivers existing on a node. If all drivers in the list are uninstalled, this can become empty.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.storage.v1.CSINodeDriver" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" } }, "x-fabric8-info": { "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "IngressClassParametersReference", + "Group": "storage.k8s.io", + "Version": "v1", + "Kind": "CSINodeSpec", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1beta1.IngressClassSpec": { - "description": "IngressClassSpec provides information about the class of an Ingress.", + "io.k8s.api.storage.v1.CSIStorageCapacity": { + "description": "CSIStorageCapacity stores the result of one CSI GetCapacity call. For a given StorageClass, this describes the available capacity in a particular topology segment. This can be used when considering where to instantiate new PersistentVolumes.\n\nFor example this can express things like: - StorageClass \"standard\" has \"1234 GiB\" available in \"topology.kubernetes.io/zone=us-east1\" - StorageClass \"localssd\" has \"10 GiB\" available in \"kubernetes.io/hostname=knode-abc123\"\n\nThe following three cases all imply that no capacity is available for a certain combination: - no object exists with suitable topology and storage class name - such an object exists, but the capacity is unset - such an object exists, but the capacity is zero\n\nThe producer of these objects can decide which approach is more suitable.\n\nThey are consumed by the kube-scheduler when a CSI driver opts into capacity-aware scheduling with CSIDriverSpec.StorageCapacity. The scheduler compares the MaximumVolumeSize against the requested size of pending volumes to filter out unsuitable nodes. If MaximumVolumeSize is unset, it falls back to a comparison against the less precise Capacity. If that is also unset, the scheduler assumes that capacity is insufficient and tries some other node.", "type": "object", + "required": [ + "storageClassName" + ], "properties": { - "controller": { - "description": "controller refers to the name of the controller that should handle this class. This allows for different \"flavors\" that are controlled by the same controller. For example, you may have different parameters for the same implementing controller. This should be specified as a domain-prefixed path no more than 250 characters in length, e.g. \"acme.io/ingress-controller\". This field is immutable.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "parameters": { - "description": "parameters is a link to a custom resource containing additional configuration for the controller. This is optional if the controller does not require extra parameters.", - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressClassParametersReference" + "capacity": { + "description": "capacity is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.\n\nThe semantic is currently (CSI spec 1.2) defined as: The available capacity, in bytes, of the storage that can be used to provision volumes. If not set, that information is currently unavailable.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "maximumVolumeSize": { + "description": "maximumVolumeSize is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.\n\nThis is defined since CSI spec 1.4.0 as the largest size that may be used in a CreateVolumeRequest.capacity_range.required_bytes field to create a volume with the same parameters as those in GetCapacityRequest. The corresponding value in the Kubernetes API is ResourceRequirements.Requests in a volume claim.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, + "metadata": { + "description": "Standard object's metadata. The name has no particular meaning. It must be a DNS subdomain (dots allowed, 253 characters). To ensure that there are no conflicts with other CSI drivers on the cluster, the recommendation is to use csisc-\u003cuuid\u003e, a generated name, or a reverse-domain name which ends with the unique CSI driver name.\n\nObjects are namespaced.\n\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "nodeTopology": { + "description": "nodeTopology defines which nodes have access to the storage for which capacity was reported. If not set, the storage is not accessible from any node in the cluster. If empty, the storage is accessible from all nodes. This field is immutable.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "storageClassName": { + "description": "storageClassName represents the name of the StorageClass that the reported capacity applies to. It must meet the same requirements as the name of a StorageClass object (non-empty, DNS subdomain). If that object no longer exists, the CSIStorageCapacity object is obsolete and should be removed by its creator. This field is immutable.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "IngressClassSpec", + "Type": "object", + "Group": "storage.k8s.io", + "Version": "v1", + "Kind": "CSIStorageCapacity", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1beta1.IngressList": { - "description": "IngressList is a collection of Ingress.", + "io.k8s.api.storage.v1.CSIStorageCapacityList": { + "description": "CSIStorageCapacityList is a collection of CSIStorageCapacity objects.", "type": "object", "required": [ "items" @@ -44745,11 +50539,11 @@ "type": "string" }, "items": { - "description": "items is the list of Ingress.", + "description": "items is the list of CSIStorageCapacity objects.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.Ingress" + "$ref": "#/definitions/io.k8s.api.storage.v1.CSIStorageCapacity" } }, "kind": { @@ -44757,263 +50551,169 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "IngressList", + "Group": "storage.k8s.io", + "Version": "v1", + "Kind": "CSIStorageCapacityList", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1beta1.IngressLoadBalancerIngress": { - "description": "IngressLoadBalancerIngress represents the status of a load-balancer ingress point.", + "io.k8s.api.storage.v1.StorageClass": { + "description": "StorageClass describes the parameters for a class of storage for which PersistentVolumes can be dynamically provisioned.\n\nStorageClasses are non-namespaced; the name of the storage class according to etcd is in ObjectMeta.Name.", "type": "object", + "required": [ + "provisioner" + ], "properties": { - "hostname": { - "description": "hostname is set for load-balancer ingress points that are DNS based.", - "type": "string" - }, - "ip": { - "description": "ip is set for load-balancer ingress points that are IP based.", - "type": "string" + "allowVolumeExpansion": { + "description": "allowVolumeExpansion shows whether the storage class allow volume expand.", + "type": "boolean" }, - "ports": { - "description": "ports provides information about the ports exposed by this LoadBalancer.", + "allowedTopologies": { + "description": "allowedTopologies restrict the node topologies where volumes can be dynamically provisioned. Each volume plugin defines its own supported topology specifications. An empty TopologySelectorTerm list means there is no topology restriction. This field is only honored by servers that enable the VolumeScheduling feature.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressPortStatus" + "$ref": "#/definitions/io.k8s.api.core.v1.TopologySelectorTerm" }, "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "IngressLoadBalancerIngress", - "Scope": "Namespaced" - } - }, - "io.k8s.api.networking.v1beta1.IngressLoadBalancerStatus": { - "description": "LoadBalancerStatus represents the status of a load-balancer.", - "type": "object", - "properties": { - "ingress": { - "description": "ingress is a list containing ingress points for the load-balancer.", + }, + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "mountOptions": { + "description": "mountOptions controls the mountOptions for dynamically provisioned PersistentVolumes of this storage class. e.g. [\"ro\", \"soft\"]. Not validated - mount of the PVs will simply fail if one is invalid.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressLoadBalancerIngress" + "type": "string", + "default": "" }, "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "IngressLoadBalancerStatus", - "Scope": "Namespaced" - } - }, - "io.k8s.api.networking.v1beta1.IngressPortStatus": { - "description": "IngressPortStatus represents the error condition of a service port", - "type": "object", - "required": [ - "port", - "protocol" - ], - "properties": { - "error": { - "description": "error is to record the problem with the service port The format of the error shall comply with the following rules: - built-in error values shall be specified in this file and those shall use\n CamelCase names\n- cloud provider specific error values must have names that comply with the\n format foo.example.com/CamelCase.", - "type": "string" }, - "port": { - "description": "port is the port number of the ingress port.", - "type": "integer", - "format": "int32", - "default": 0 + "parameters": { + "description": "parameters holds the parameters for the provisioner that should create volumes of this storage class.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } }, - "protocol": { - "description": "protocol is the protocol of the ingress port. The supported values are: \"TCP\", \"UDP\", \"SCTP\"\n\nPossible enum values:\n - `\"SCTP\"` is the SCTP protocol.\n - `\"TCP\"` is the TCP protocol.\n - `\"UDP\"` is the UDP protocol.", + "provisioner": { + "description": "provisioner indicates the type of the provisioner.", + "type": "string", + "default": "" + }, + "reclaimPolicy": { + "description": "reclaimPolicy controls the reclaimPolicy for dynamically provisioned PersistentVolumes of this storage class. Defaults to Delete.\n\nPossible enum values:\n - `\"Delete\"` means the volume will be deleted from Kubernetes on release from its claim. The volume plugin must support Deletion.\n - `\"Recycle\"` means the volume will be recycled back into the pool of unbound persistent volumes on release from its claim. The volume plugin must support Recycling.\n - `\"Retain\"` means the volume will be left in its current phase (Released) for manual reclamation by the administrator. The default policy is Retain.", "type": "string", - "default": "", "enum": [ - "SCTP", - "TCP", - "UDP" + "Delete", + "Recycle", + "Retain" ] - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "IngressPortStatus", - "Scope": "Namespaced" - } - }, - "io.k8s.api.networking.v1beta1.IngressRule": { - "description": "IngressRule represents the rules mapping the paths under a specified host to the related backend services. Incoming requests are first evaluated for a host match, then routed to the backend associated with the matching IngressRuleValue.", - "type": "object", - "properties": { - "host": { - "description": "host is the fully qualified domain name of a network host, as defined by RFC 3986. Note the following deviations from the \"host\" part of the URI as defined in RFC 3986: 1. IPs are not allowed. Currently an IngressRuleValue can only apply to\n the IP in the Spec of the parent Ingress.\n2. The `:` delimiter is not respected because ports are not allowed.\n\t Currently the port of an Ingress is implicitly :80 for http and\n\t :443 for https.\nBoth these may change in the future. Incoming requests are matched against the host before the IngressRuleValue. If the host is unspecified, the Ingress routes all traffic based on the specified IngressRuleValue.\n\nhost can be \"precise\" which is a domain name without the terminating dot of a network host (e.g. \"foo.bar.com\") or \"wildcard\", which is a domain name prefixed with a single wildcard label (e.g. \"*.foo.com\"). The wildcard character '*' must appear by itself as the first DNS label and matches only a single label. You cannot have a wildcard label by itself (e.g. Host == \"*\"). Requests will be matched against the Host field in the following way: 1. If Host is precise, the request matches this rule if the http host header is equal to Host. 2. If Host is a wildcard, then the request matches this rule if the http host header is to equal to the suffix (removing the first label) of the wildcard rule.", - "type": "string" }, - "http": { - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.HTTPIngressRuleValue" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "IngressRule", - "Scope": "Namespaced" - } - }, - "io.k8s.api.networking.v1beta1.IngressRuleValue": { - "description": "IngressRuleValue represents a rule to apply against incoming requests. If the rule is satisfied, the request is routed to the specified backend. Currently mixing different types of rules in a single Ingress is disallowed, so exactly one of the following must be set.", - "type": "object", - "properties": { - "http": { - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.HTTPIngressRuleValue" + "volumeBindingMode": { + "description": "volumeBindingMode indicates how PersistentVolumeClaims should be provisioned and bound. When unset, VolumeBindingImmediate is used. This field is only honored by servers that enable the VolumeScheduling feature.\n\nPossible enum values:\n - `\"Immediate\"` indicates that PersistentVolumeClaims should be immediately provisioned and bound. This is the default mode.\n - `\"WaitForFirstConsumer\"` indicates that PersistentVolumeClaims should not be provisioned and bound until the first Pod is created that references the PeristentVolumeClaim. The volume provisioning and binding will occur during Pod scheduing.", + "type": "string", + "enum": [ + "Immediate", + "WaitForFirstConsumer" + ] } }, "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "IngressRuleValue", - "Scope": "Namespaced" + "Type": "object", + "Group": "storage.k8s.io", + "Version": "v1", + "Kind": "StorageClass", + "Scope": "Clustered" } }, - "io.k8s.api.networking.v1beta1.IngressSpec": { - "description": "IngressSpec describes the Ingress the user wishes to exist.", + "io.k8s.api.storage.v1.StorageClassList": { + "description": "StorageClassList is a collection of storage classes.", "type": "object", + "required": [ + "items" + ], "properties": { - "backend": { - "description": "backend is the default backend capable of servicing requests that don't match any rule. At least one of 'backend' or 'rules' must be specified. This field is optional to allow the loadbalancer controller or defaulting logic to specify a global default.", - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressBackend" - }, - "ingressClassName": { - "description": "ingressClassName is the name of the IngressClass cluster resource. The associated IngressClass defines which controller will implement the resource. This replaces the deprecated `kubernetes.io/ingress.class` annotation. For backwards compatibility, when that annotation is set, it must be given precedence over this field. The controller may emit a warning if the field and annotation have different values. Implementations of this API should ignore Ingresses without a class specified. An IngressClass resource may be marked as default, which can be used to set a default value for this field. For more information, refer to the IngressClass documentation.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "rules": { - "description": "rules is a list of host rules used to configure the Ingress. If unspecified, or no rule matches, all traffic is sent to the default backend.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressRule" - }, - "x-kubernetes-list-type": "atomic" - }, - "tls": { - "description": "tls represents the TLS configuration. Currently the Ingress only supports a single TLS port, 443. If multiple members of this list specify different hosts, they will be multiplexed on the same port according to the hostname specified through the SNI TLS extension, if the ingress controller fulfilling the ingress supports SNI.", + "items": { + "description": "items is the list of StorageClasses", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressTLS" - }, - "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "IngressSpec", - "Scope": "Namespaced" - } - }, - "io.k8s.api.networking.v1beta1.IngressStatus": { - "description": "IngressStatus describes the current state of the Ingress.", - "type": "object", - "properties": { - "loadBalancer": { - "description": "loadBalancer contains the current status of the load-balancer.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.IngressLoadBalancerStatus" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "IngressStatus", - "Scope": "Namespaced" - } - }, - "io.k8s.api.networking.v1beta1.IngressTLS": { - "description": "IngressTLS describes the transport layer security associated with an Ingress.", - "type": "object", - "properties": { - "hosts": { - "description": "hosts is a list of hosts included in the TLS certificate. The values in this list must match the name/s used in the tlsSecret. Defaults to the wildcard host setting for the loadbalancer controller fulfilling this Ingress, if left unspecified.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "$ref": "#/definitions/io.k8s.api.storage.v1.StorageClass" + } }, - "secretName": { - "description": "secretName is the name of the secret used to terminate TLS traffic on port 443. Field is left optional to allow TLS routing based on SNI hostname alone. If the SNI host in a listener conflicts with the \"Host\" header field used by an IngressRule, the SNI host is used for termination and value of the Host header is used for routing.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + }, + "metadata": { + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "IngressTLS", + "Type": "list", + "Group": "storage.k8s.io", + "Version": "v1", + "Kind": "StorageClassList", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1beta1.ParentReference": { - "description": "ParentReference describes a reference to a parent object.", + "io.k8s.api.storage.v1.TokenRequest": { + "description": "TokenRequest contains parameters of a service account token.", "type": "object", "required": [ - "resource", - "name" + "audience" ], "properties": { - "group": { - "description": "Group is the group of the object being referenced.", - "type": "string" - }, - "name": { - "description": "Name is the name of the object being referenced.", - "type": "string" - }, - "namespace": { - "description": "Namespace is the namespace of the object being referenced.", - "type": "string" + "audience": { + "description": "audience is the intended audience of the token in \"TokenRequestSpec\". It will default to the audiences of kube apiserver.", + "type": "string", + "default": "" }, - "resource": { - "description": "Resource is the resource of the object being referenced.", - "type": "string" + "expirationSeconds": { + "description": "expirationSeconds is the duration of validity of the token in \"TokenRequestSpec\". It has the same default value of \"ExpirationSeconds\" in \"TokenRequestSpec\".", + "type": "integer", + "format": "int64" } }, "x-fabric8-info": { "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "ParentReference", + "Group": "storage.k8s.io", + "Version": "v1", + "Kind": "TokenRequest", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1beta1.ServiceCIDR": { - "description": "ServiceCIDR defines a range of IP addresses using CIDR format (e.g. 192.168.0.0/24 or 2001:db2::/64). This range is used to allocate ClusterIPs to Service objects.", + "io.k8s.api.storage.v1.VolumeAttachment": { + "description": "VolumeAttachment captures the intent to attach or detach the specified volume to/from the specified node.\n\nVolumeAttachment objects are non-namespaced.", "type": "object", + "required": [ + "spec" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -45024,31 +50724,31 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec is the desired state of the ServiceCIDR. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "spec represents specification of the desired attach/detach volume behavior. Populated by the Kubernetes system.", "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.ServiceCIDRSpec" + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachmentSpec" }, "status": { - "description": "status represents the current state of the ServiceCIDR. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "status represents status of the VolumeAttachment request. Populated by the entity completing the attach or detach operation, i.e. the external-attacher.", "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.ServiceCIDRStatus" + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachmentStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "ServiceCIDR", + "Group": "storage.k8s.io", + "Version": "v1", + "Kind": "VolumeAttachment", "Scope": "Clustered" } }, - "io.k8s.api.networking.v1beta1.ServiceCIDRList": { - "description": "ServiceCIDRList contains a list of ServiceCIDR objects.", + "io.k8s.api.storage.v1.VolumeAttachmentList": { + "description": "VolumeAttachmentList is a collection of VolumeAttachment objects.", "type": "object", "required": [ "items" @@ -45059,11 +50759,11 @@ "type": "string" }, "items": { - "description": "items is the list of ServiceCIDRs.", + "description": "items is the list of VolumeAttachments", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.networking.v1beta1.ServiceCIDR" + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachment" } }, "kind": { @@ -45071,132 +50771,197 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "ServiceCIDRList", + "Group": "storage.k8s.io", + "Version": "v1", + "Kind": "VolumeAttachmentList", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1beta1.ServiceCIDRSpec": { - "description": "ServiceCIDRSpec define the CIDRs the user wants to use for allocating ClusterIPs for Services.", + "io.k8s.api.storage.v1.VolumeAttachmentSource": { + "description": "VolumeAttachmentSource represents a volume that should be attached. Right now only PersistenVolumes can be attached via external attacher, in future we may allow also inline volumes in pods. Exactly one member can be set.", "type": "object", "properties": { - "cidrs": { - "description": "CIDRs defines the IP blocks in CIDR notation (e.g. \"192.168.0.0/24\" or \"2001:db8::/64\") from which to assign service cluster IPs. Max of two CIDRs is allowed, one of each IP family. This field is immutable.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "inlineVolumeSpec": { + "description": "inlineVolumeSpec contains all the information necessary to attach a persistent volume defined by a pod's inline VolumeSource. This field is populated only for the CSIMigration feature. It contains translated fields from a pod's inline VolumeSource to a PersistentVolumeSpec. This field is beta-level and is only honored by servers that enabled the CSIMigration feature.", + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeSpec" + }, + "persistentVolumeName": { + "description": "persistentVolumeName represents the name of the persistent volume to attach.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "ServiceCIDRSpec", + "Group": "storage.k8s.io", + "Version": "v1", + "Kind": "VolumeAttachmentSource", "Scope": "Namespaced" } }, - "io.k8s.api.networking.v1beta1.ServiceCIDRStatus": { - "description": "ServiceCIDRStatus describes the current state of the ServiceCIDR.", + "io.k8s.api.storage.v1.VolumeAttachmentSpec": { + "description": "VolumeAttachmentSpec is the specification of a VolumeAttachment request.", "type": "object", + "required": [ + "attacher", + "source", + "nodeName" + ], "properties": { - "conditions": { - "description": "conditions holds an array of metav1.Condition that describe the state of the ServiceCIDR. Current service state", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "attacher": { + "description": "attacher indicates the name of the volume driver that MUST handle this request. This is the name returned by GetPluginName().", + "type": "string", + "default": "" + }, + "nodeName": { + "description": "nodeName represents the node that the volume should be attached to.", + "type": "string", + "default": "" + }, + "source": { + "description": "source represents the volume that should be attached.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachmentSource" } }, "x-fabric8-info": { "Type": "nested", - "Group": "networking.k8s.io", - "Version": "v1beta1", - "Kind": "ServiceCIDRStatus", + "Group": "storage.k8s.io", + "Version": "v1", + "Kind": "VolumeAttachmentSpec", "Scope": "Namespaced" } }, - "io.k8s.api.node.v1.Overhead": { - "description": "Overhead structure represents the resource overhead associated with running a pod.", + "io.k8s.api.storage.v1.VolumeAttachmentStatus": { + "description": "VolumeAttachmentStatus is the status of a VolumeAttachment request.", "type": "object", + "required": [ + "attached" + ], "properties": { - "podFixed": { - "description": "podFixed represents the fixed resource overhead associated with running a pod.", + "attachError": { + "description": "attachError represents the last error encountered during attach operation, if any. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeError" + }, + "attached": { + "description": "attached indicates the volume is successfully attached. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", + "type": "boolean", + "default": false + }, + "attachmentMetadata": { + "description": "attachmentMetadata is populated with any information returned by the attach operation, upon successful attach, that must be passed into subsequent WaitForAttach or Mount calls. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", "type": "object", "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "type": "string", + "default": "" } + }, + "detachError": { + "description": "detachError represents the last error encountered during detach operation, if any. This field must only be set by the entity completing the detach operation, i.e. the external-attacher.", + "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeError" } }, "x-fabric8-info": { "Type": "nested", - "Group": "node.k8s.io", + "Group": "storage.k8s.io", "Version": "v1", - "Kind": "Overhead", + "Kind": "VolumeAttachmentStatus", "Scope": "Namespaced" } }, - "io.k8s.api.node.v1.RuntimeClass": { - "description": "RuntimeClass defines a class of container runtime supported in the cluster. The RuntimeClass is used to determine which container runtime is used to run all containers in a pod. RuntimeClasses are manually defined by a user or cluster provisioner, and referenced in the PodSpec. The Kubelet is responsible for resolving the RuntimeClassName reference before running the pod. For more details, see https://kubernetes.io/docs/concepts/containers/runtime-class/", + "io.k8s.api.storage.v1.VolumeError": { + "description": "VolumeError captures an error encountered during a volume operation.", + "type": "object", + "properties": { + "message": { + "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.", + "type": "string" + }, + "time": { + "description": "time represents the time the error was encountered.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "storage.k8s.io", + "Version": "v1", + "Kind": "VolumeError", + "Scope": "Namespaced" + } + }, + "io.k8s.api.storage.v1.VolumeNodeResources": { + "description": "VolumeNodeResources is a set of resource limits for scheduling of volumes.", + "type": "object", + "properties": { + "count": { + "description": "count indicates the maximum number of unique volumes managed by the CSI driver that can be used on a node. A volume that is both attached and mounted on a node is considered to be used once, not twice. The same rule applies for a unique volume that is shared among multiple pods on the same node. If this field is not specified, then the supported number of volumes on this node is unbounded.", + "type": "integer", + "format": "int32" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "storage.k8s.io", + "Version": "v1", + "Kind": "VolumeNodeResources", + "Scope": "Namespaced" + } + }, + "io.k8s.api.storage.v1alpha1.CSIStorageCapacity": { + "description": "CSIStorageCapacity stores the result of one CSI GetCapacity call. For a given StorageClass, this describes the available capacity in a particular topology segment. This can be used when considering where to instantiate new PersistentVolumes.\n\nFor example this can express things like: - StorageClass \"standard\" has \"1234 GiB\" available in \"topology.kubernetes.io/zone=us-east1\" - StorageClass \"localssd\" has \"10 GiB\" available in \"kubernetes.io/hostname=knode-abc123\"\n\nThe following three cases all imply that no capacity is available for a certain combination: - no object exists with suitable topology and storage class name - such an object exists, but the capacity is unset - such an object exists, but the capacity is zero\n\nThe producer of these objects can decide which approach is more suitable.\n\nThey are consumed by the kube-scheduler when a CSI driver opts into capacity-aware scheduling with CSIDriverSpec.StorageCapacity. The scheduler compares the MaximumVolumeSize against the requested size of pending volumes to filter out unsuitable nodes. If MaximumVolumeSize is unset, it falls back to a comparison against the less precise Capacity. If that is also unset, the scheduler assumes that capacity is insufficient and tries some other node.", "type": "object", "required": [ - "handler" + "storageClassName" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "handler": { - "description": "handler specifies the underlying runtime and configuration that the CRI implementation will use to handle pods of this class. The possible values are specific to the node \u0026 CRI configuration. It is assumed that all handlers are available on every node, and handlers of the same name are equivalent on every node. For example, a handler called \"runc\" might specify that the runc OCI runtime (using native Linux containers) will be used to run the containers in a pod. The Handler must be lowercase, conform to the DNS Label (RFC 1123) requirements, and is immutable.", - "type": "string", - "default": "" + "capacity": { + "description": "capacity is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.\n\nThe semantic is currently (CSI spec 1.2) defined as: The available capacity, in bytes, of the storage that can be used to provision volumes. If not set, that information is currently unavailable.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, + "maximumVolumeSize": { + "description": "maximumVolumeSize is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.\n\nThis is defined since CSI spec 1.4.0 as the largest size that may be used in a CreateVolumeRequest.capacity_range.required_bytes field to create a volume with the same parameters as those in GetCapacityRequest. The corresponding value in the Kubernetes API is ResourceRequirements.Requests in a volume claim.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + }, "metadata": { - "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata. The name has no particular meaning. It must be be a DNS subdomain (dots allowed, 253 characters). To ensure that there are no conflicts with other CSI drivers on the cluster, the recommendation is to use csisc-\u003cuuid\u003e, a generated name, or a reverse-domain name which ends with the unique CSI driver name.\n\nObjects are namespaced.\n\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "overhead": { - "description": "overhead represents the resource overhead associated with running a pod for a given RuntimeClass. For more details, see\n https://kubernetes.io/docs/concepts/scheduling-eviction/pod-overhead/", - "$ref": "#/definitions/io.k8s.api.node.v1.Overhead" + "nodeTopology": { + "description": "nodeTopology defines which nodes have access to the storage for which capacity was reported. If not set, the storage is not accessible from any node in the cluster. If empty, the storage is accessible from all nodes. This field is immutable.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" }, - "scheduling": { - "description": "scheduling holds the scheduling constraints to ensure that pods running with this RuntimeClass are scheduled to nodes that support it. If scheduling is nil, this RuntimeClass is assumed to be supported by all nodes.", - "$ref": "#/definitions/io.k8s.api.node.v1.Scheduling" + "storageClassName": { + "description": "storageClassName represents the name of the StorageClass that the reported capacity applies to. It must meet the same requirements as the name of a StorageClass object (non-empty, DNS subdomain). If that object no longer exists, the CSIStorageCapacity object is obsolete and should be removed by its creator. This field is immutable.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "object", - "Group": "node.k8s.io", - "Version": "v1", - "Kind": "RuntimeClass", - "Scope": "Clustered" + "Group": "storage.k8s.io", + "Version": "v1alpha1", + "Kind": "CSIStorageCapacity", + "Scope": "Namespaced" } }, - "io.k8s.api.node.v1.RuntimeClassList": { - "description": "RuntimeClassList is a list of RuntimeClass objects.", + "io.k8s.api.storage.v1alpha1.CSIStorageCapacityList": { + "description": "CSIStorageCapacityList is a collection of CSIStorageCapacity objects.", "type": "object", "required": [ "items" @@ -45207,11 +50972,11 @@ "type": "string" }, "items": { - "description": "items is a list of schema objects.", + "description": "items is the list of CSIStorageCapacity objects.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.node.v1.RuntimeClass" + "$ref": "#/definitions/io.k8s.api.storage.v1alpha1.CSIStorageCapacity" } }, "kind": { @@ -45219,72 +50984,21 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "node.k8s.io", - "Version": "v1", - "Kind": "RuntimeClassList", - "Scope": "Namespaced" - } - }, - "io.k8s.api.node.v1.Scheduling": { - "description": "Scheduling specifies the scheduling constraints for nodes supporting a RuntimeClass.", - "type": "object", - "properties": { - "nodeSelector": { - "description": "nodeSelector lists labels that must be present on nodes that support this RuntimeClass. Pods using this RuntimeClass can only be scheduled to a node matched by this selector. The RuntimeClass nodeSelector is merged with a pod's existing nodeSelector. Any conflicts will cause the pod to be rejected in admission.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - }, - "x-kubernetes-map-type": "atomic" - }, - "tolerations": { - "description": "tolerations are appended (excluding duplicates) to pods running with this RuntimeClass during admission, effectively unioning the set of nodes tolerated by the pod and the RuntimeClass.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - }, - "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "node.k8s.io", - "Version": "v1", - "Kind": "Scheduling", - "Scope": "Namespaced" - } - }, - "io.k8s.api.node.v1alpha1.Overhead": { - "description": "Overhead structure represents the resource overhead associated with running a pod.", - "type": "object", - "properties": { - "podFixed": { - "description": "podFixed represents the fixed resource overhead associated with running a pod.", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "node.k8s.io", + "Group": "storage.k8s.io", "Version": "v1alpha1", - "Kind": "Overhead", + "Kind": "CSIStorageCapacityList", "Scope": "Namespaced" } }, - "io.k8s.api.node.v1alpha1.RuntimeClass": { - "description": "RuntimeClass defines a class of container runtime supported in the cluster. The RuntimeClass is used to determine which container runtime is used to run all containers in a pod. RuntimeClasses are (currently) manually defined by a user or cluster provisioner, and referenced in the PodSpec. The Kubelet is responsible for resolving the RuntimeClassName reference before running the pod. For more details, see https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class", + "io.k8s.api.storage.v1alpha1.VolumeAttachment": { + "description": "VolumeAttachment captures the intent to attach or detach the specified volume to/from the specified node.\n\nVolumeAttachment objects are non-namespaced.", "type": "object", "required": [ "spec" @@ -45299,26 +51013,31 @@ "type": "string" }, "metadata": { - "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec represents specification of the RuntimeClass More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "description": "spec represents specification of the desired attach/detach volume behavior. Populated by the Kubernetes system.", "default": {}, - "$ref": "#/definitions/io.k8s.api.node.v1alpha1.RuntimeClassSpec" + "$ref": "#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachmentSpec" + }, + "status": { + "description": "status represents status of the VolumeAttachment request. Populated by the entity completing the attach or detach operation, i.e. the external-attacher.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachmentStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "node.k8s.io", + "Group": "storage.k8s.io", "Version": "v1alpha1", - "Kind": "RuntimeClass", + "Kind": "VolumeAttachment", "Scope": "Clustered" } }, - "io.k8s.api.node.v1alpha1.RuntimeClassList": { - "description": "RuntimeClassList is a list of RuntimeClass objects.", + "io.k8s.api.storage.v1alpha1.VolumeAttachmentList": { + "description": "VolumeAttachmentList is a collection of VolumeAttachment objects.", "type": "object", "required": [ "items" @@ -45329,11 +51048,11 @@ "type": "string" }, "items": { - "description": "items is a list of schema objects.", + "description": "items is the list of VolumeAttachments", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.node.v1alpha1.RuntimeClass" + "$ref": "#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachment" } }, "kind": { @@ -45341,112 +51060,123 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "node.k8s.io", + "Group": "storage.k8s.io", "Version": "v1alpha1", - "Kind": "RuntimeClassList", + "Kind": "VolumeAttachmentList", "Scope": "Namespaced" } }, - "io.k8s.api.node.v1alpha1.RuntimeClassSpec": { - "description": "RuntimeClassSpec is a specification of a RuntimeClass. It contains parameters that are required to describe the RuntimeClass to the Container Runtime Interface (CRI) implementation, as well as any other components that need to understand how the pod will be run. The RuntimeClassSpec is immutable.", + "io.k8s.api.storage.v1alpha1.VolumeAttachmentSource": { + "description": "VolumeAttachmentSource represents a volume that should be attached. Right now only PersistenVolumes can be attached via external attacher, in future we may allow also inline volumes in pods. Exactly one member can be set.", "type": "object", - "required": [ - "runtimeHandler" - ], "properties": { - "overhead": { - "description": "overhead represents the resource overhead associated with running a pod for a given RuntimeClass. For more details, see https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md", - "$ref": "#/definitions/io.k8s.api.node.v1alpha1.Overhead" - }, - "runtimeHandler": { - "description": "runtimeHandler specifies the underlying runtime and configuration that the CRI implementation will use to handle pods of this class. The possible values are specific to the node \u0026 CRI configuration. It is assumed that all handlers are available on every node, and handlers of the same name are equivalent on every node. For example, a handler called \"runc\" might specify that the runc OCI runtime (using native Linux containers) will be used to run the containers in a pod. The runtimeHandler must be lowercase, conform to the DNS Label (RFC 1123) requirements, and is immutable.", - "type": "string", - "default": "" + "inlineVolumeSpec": { + "description": "inlineVolumeSpec contains all the information necessary to attach a persistent volume defined by a pod's inline VolumeSource. This field is populated only for the CSIMigration feature. It contains translated fields from a pod's inline VolumeSource to a PersistentVolumeSpec. This field is alpha-level and is only honored by servers that enabled the CSIMigration feature.", + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeSpec" }, - "scheduling": { - "description": "scheduling holds the scheduling constraints to ensure that pods running with this RuntimeClass are scheduled to nodes that support it. If scheduling is nil, this RuntimeClass is assumed to be supported by all nodes.", - "$ref": "#/definitions/io.k8s.api.node.v1alpha1.Scheduling" + "persistentVolumeName": { + "description": "persistentVolumeName represents the name of the persistent volume to attach.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "node.k8s.io", + "Group": "storage.k8s.io", "Version": "v1alpha1", - "Kind": "RuntimeClassSpec", + "Kind": "VolumeAttachmentSource", "Scope": "Namespaced" } }, - "io.k8s.api.node.v1alpha1.Scheduling": { - "description": "Scheduling specifies the scheduling constraints for nodes supporting a RuntimeClass.", + "io.k8s.api.storage.v1alpha1.VolumeAttachmentSpec": { + "description": "VolumeAttachmentSpec is the specification of a VolumeAttachment request.", "type": "object", + "required": [ + "attacher", + "source", + "nodeName" + ], "properties": { - "nodeSelector": { - "description": "nodeSelector lists labels that must be present on nodes that support this RuntimeClass. Pods using this RuntimeClass can only be scheduled to a node matched by this selector. The RuntimeClass nodeSelector is merged with a pod's existing nodeSelector. Any conflicts will cause the pod to be rejected in admission.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - }, - "x-kubernetes-map-type": "atomic" + "attacher": { + "description": "attacher indicates the name of the volume driver that MUST handle this request. This is the name returned by GetPluginName().", + "type": "string", + "default": "" }, - "tolerations": { - "description": "tolerations are appended (excluding duplicates) to pods running with this RuntimeClass during admission, effectively unioning the set of nodes tolerated by the pod and the RuntimeClass.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - }, - "x-kubernetes-list-type": "atomic" + "nodeName": { + "description": "nodeName represents the node that the volume should be attached to.", + "type": "string", + "default": "" + }, + "source": { + "description": "source represents the volume that should be attached.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachmentSource" } }, "x-fabric8-info": { "Type": "nested", - "Group": "node.k8s.io", + "Group": "storage.k8s.io", "Version": "v1alpha1", - "Kind": "Scheduling", + "Kind": "VolumeAttachmentSpec", "Scope": "Namespaced" } }, - "io.k8s.api.node.v1beta1.Overhead": { - "description": "Overhead structure represents the resource overhead associated with running a pod.", + "io.k8s.api.storage.v1alpha1.VolumeAttachmentStatus": { + "description": "VolumeAttachmentStatus is the status of a VolumeAttachment request.", "type": "object", + "required": [ + "attached" + ], "properties": { - "podFixed": { - "description": "podFixed represents the fixed resource overhead associated with running a pod.", + "attachError": { + "description": "attachError represents the last error encountered during attach operation, if any. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", + "$ref": "#/definitions/io.k8s.api.storage.v1alpha1.VolumeError" + }, + "attached": { + "description": "attached indicates the volume is successfully attached. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", + "type": "boolean", + "default": false + }, + "attachmentMetadata": { + "description": "attachmentMetadata is populated with any information returned by the attach operation, upon successful attach, that must be passed into subsequent WaitForAttach or Mount calls. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", "type": "object", "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "type": "string", + "default": "" } + }, + "detachError": { + "description": "detachError represents the last error encountered during detach operation, if any. This field must only be set by the entity completing the detach operation, i.e. the external-attacher.", + "$ref": "#/definitions/io.k8s.api.storage.v1alpha1.VolumeError" } }, "x-fabric8-info": { "Type": "nested", - "Group": "node.k8s.io", - "Version": "v1beta1", - "Kind": "Overhead", + "Group": "storage.k8s.io", + "Version": "v1alpha1", + "Kind": "VolumeAttachmentStatus", "Scope": "Namespaced" } }, - "io.k8s.api.node.v1beta1.RuntimeClass": { - "description": "RuntimeClass defines a class of container runtime supported in the cluster. The RuntimeClass is used to determine which container runtime is used to run all containers in a pod. RuntimeClasses are (currently) manually defined by a user or cluster provisioner, and referenced in the PodSpec. The Kubelet is responsible for resolving the RuntimeClassName reference before running the pod. For more details, see https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class", + "io.k8s.api.storage.v1alpha1.VolumeAttributesClass": { + "description": "VolumeAttributesClass represents a specification of mutable volume attributes defined by the CSI driver. The class can be specified during dynamic provisioning of PersistentVolumeClaims, and changed in the PersistentVolumeClaim spec after provisioning.", "type": "object", "required": [ - "handler" + "driverName" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "handler": { - "description": "handler specifies the underlying runtime and configuration that the CRI implementation will use to handle pods of this class. The possible values are specific to the node \u0026 CRI configuration. It is assumed that all handlers are available on every node, and handlers of the same name are equivalent on every node. For example, a handler called \"runc\" might specify that the runc OCI runtime (using native Linux containers) will be used to run the containers in a pod. The handler must be lowercase, conform to the DNS Label (RFC 1123) requirements, and is immutable.", + "driverName": { + "description": "Name of the CSI driver This field is immutable.", "type": "string", "default": "" }, @@ -45455,29 +51185,29 @@ "type": "string" }, "metadata": { - "description": "More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "overhead": { - "description": "overhead represents the resource overhead associated with running a pod for a given RuntimeClass. For more details, see https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md", - "$ref": "#/definitions/io.k8s.api.node.v1beta1.Overhead" - }, - "scheduling": { - "description": "scheduling holds the scheduling constraints to ensure that pods running with this RuntimeClass are scheduled to nodes that support it. If scheduling is nil, this RuntimeClass is assumed to be supported by all nodes.", - "$ref": "#/definitions/io.k8s.api.node.v1beta1.Scheduling" + "parameters": { + "description": "parameters hold volume attributes defined by the CSI driver. These values are opaque to the Kubernetes and are passed directly to the CSI driver. The underlying storage provider supports changing these attributes on an existing volume, however the parameters field itself is immutable. To invoke a volume update, a new VolumeAttributesClass should be created with new parameters, and the PersistentVolumeClaim should be updated to reference the new VolumeAttributesClass.\n\nThis field is required and must contain at least one key/value pair. The keys cannot be empty, and the maximum number of parameters is 512, with a cumulative max size of 256K. If the CSI driver rejects invalid parameters, the target PersistentVolumeClaim will be set to an \"Infeasible\" state in the modifyVolumeStatus field.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { "Type": "object", - "Group": "node.k8s.io", - "Version": "v1beta1", - "Kind": "RuntimeClass", + "Group": "storage.k8s.io", + "Version": "v1alpha1", + "Kind": "VolumeAttributesClass", "Scope": "Clustered" } }, - "io.k8s.api.node.v1beta1.RuntimeClassList": { - "description": "RuntimeClassList is a list of RuntimeClass objects.", + "io.k8s.api.storage.v1alpha1.VolumeAttributesClassList": { + "description": "VolumeAttributesClassList is a collection of VolumeAttributesClass objects.", "type": "object", "required": [ "items" @@ -45488,11 +51218,11 @@ "type": "string" }, "items": { - "description": "items is a list of schema objects.", + "description": "items is the list of VolumeAttributesClass objects.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.node.v1beta1.RuntimeClass" + "$ref": "#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttributesClass" } }, "kind": { @@ -45500,83 +51230,46 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "node.k8s.io", - "Version": "v1beta1", - "Kind": "RuntimeClassList", - "Scope": "Namespaced" - } - }, - "io.k8s.api.node.v1beta1.Scheduling": { - "description": "Scheduling specifies the scheduling constraints for nodes supporting a RuntimeClass.", - "type": "object", - "properties": { - "nodeSelector": { - "description": "nodeSelector lists labels that must be present on nodes that support this RuntimeClass. Pods using this RuntimeClass can only be scheduled to a node matched by this selector. The RuntimeClass nodeSelector is merged with a pod's existing nodeSelector. Any conflicts will cause the pod to be rejected in admission.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - }, - "x-kubernetes-map-type": "atomic" - }, - "tolerations": { - "description": "tolerations are appended (excluding duplicates) to pods running with this RuntimeClass during admission, effectively unioning the set of nodes tolerated by the pod and the RuntimeClass.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - }, - "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "node.k8s.io", - "Version": "v1beta1", - "Kind": "Scheduling", + "Group": "storage.k8s.io", + "Version": "v1alpha1", + "Kind": "VolumeAttributesClassList", "Scope": "Namespaced" } }, - "io.k8s.api.policy.v1.Eviction": { - "description": "Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod. A request to cause such an eviction is created by POSTing to .../pods/\u003cpod name\u003e/evictions.", + "io.k8s.api.storage.v1alpha1.VolumeError": { + "description": "VolumeError captures an error encountered during a volume operation.", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "deleteOptions": { - "description": "DeleteOptions may be provided", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "message": { + "description": "message represents the error encountered during Attach or Detach operation. This string maybe logged, so it should not contain sensitive information.", "type": "string" }, - "metadata": { - "description": "ObjectMeta describes the pod that is being evicted.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "time": { + "description": "time represents the time the error was encountered.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" } }, "x-fabric8-info": { - "Type": "object", - "Group": "", - "Version": "v1", - "Kind": "Eviction", + "Type": "nested", + "Group": "storage.k8s.io", + "Version": "v1alpha1", + "Kind": "VolumeError", "Scope": "Namespaced" } }, - "io.k8s.api.policy.v1.PodDisruptionBudget": { - "description": "PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods", + "io.k8s.api.storage.v1beta1.CSIDriver": { + "description": "CSIDriver captures information about a Container Storage Interface (CSI) volume driver deployed on the cluster. CSI drivers do not need to create the CSIDriver object directly. Instead they may use the cluster-driver-registrar sidecar container. When deployed with a CSI driver it automatically creates a CSIDriver object representing the driver. Kubernetes attach detach controller uses this object to determine whether attach is required. Kubelet uses this object to determine whether pod information needs to be passed on mount. CSIDriver objects are non-namespaced.", "type": "object", + "required": [ + "spec" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -45587,31 +51280,26 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard object metadata. metadata.Name indicates the name of the CSI driver that this object refers to; it MUST be the same name returned by the CSI GetPluginName() call for that driver. The driver name must be 63 characters or less, beginning and ending with an alphanumeric character ([a-z0-9A-Z]) with dashes (-), dots (.), and alphanumerics between. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "Specification of the desired behavior of the PodDisruptionBudget.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudgetSpec" - }, - "status": { - "description": "Most recently observed status of the PodDisruptionBudget.", + "description": "spec represents the specification of the CSI Driver.", "default": {}, - "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudgetStatus" + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIDriverSpec" } }, "x-fabric8-info": { "Type": "object", - "Group": "", - "Version": "v1", - "Kind": "PodDisruptionBudget", - "Scope": "Namespaced" + "Group": "storage.k8s.io", + "Version": "v1beta1", + "Kind": "CSIDriver", + "Scope": "Clustered" } }, - "io.k8s.api.policy.v1.PodDisruptionBudgetList": { - "description": "PodDisruptionBudgetList is a collection of PodDisruptionBudgets.", + "io.k8s.api.storage.v1beta1.CSIDriverList": { + "description": "CSIDriverList is a collection of CSIDriver objects.", "type": "object", "required": [ "items" @@ -45622,11 +51310,11 @@ "type": "string" }, "items": { - "description": "Items is a list of PodDisruptionBudgets", + "description": "items is the list of CSIDriver", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.policy.v1.PodDisruptionBudget" + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIDriver" } }, "kind": { @@ -45634,155 +51322,80 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "", - "Version": "v1", - "Kind": "PodDisruptionBudgetList", + "Group": "storage.k8s.io", + "Version": "v1beta1", + "Kind": "CSIDriverList", "Scope": "Namespaced" } }, - "io.k8s.api.policy.v1.PodDisruptionBudgetSpec": { - "description": "PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.", + "io.k8s.api.storage.v1beta1.CSIDriverSpec": { + "description": "CSIDriverSpec is the specification of a CSIDriver.", "type": "object", "properties": { - "maxUnavailable": { - "description": "An eviction is allowed if at most \"maxUnavailable\" pods selected by \"selector\" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with \"minAvailable\".", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + "attachRequired": { + "description": "attachRequired indicates this CSI volume driver requires an attach operation (because it implements the CSI ControllerPublishVolume() method), and that the Kubernetes attach detach controller should call the attach volume interface which checks the volumeattachment status and waits until the volume is attached before proceeding to mounting. The CSI external-attacher coordinates with CSI volume driver and updates the volumeattachment status when the attach operation is complete. If the CSIDriverRegistry feature gate is enabled and the value is specified to false, the attach operation will be skipped. Otherwise the attach operation will be called.\n\nThis field is immutable.", + "type": "boolean" }, - "minAvailable": { - "description": "An eviction is allowed if at least \"minAvailable\" pods selected by \"selector\" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying \"100%\".", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + "fsGroupPolicy": { + "description": "fsGroupPolicy defines if the underlying volume supports changing ownership and permission of the volume before being mounted. Refer to the specific FSGroupPolicy values for additional details.\n\nThis field is immutable.\n\nDefaults to ReadWriteOnceWithFSType, which will examine each volume to determine if Kubernetes should modify ownership and permissions of the volume. With the default policy the defined fsGroup will only be applied if a fstype is defined and the volume's access mode contains ReadWriteOnce.", + "type": "string" }, - "selector": { - "description": "Label query over pods whose evictions are managed by the disruption budget. A null selector will match no pods, while an empty ({}) selector will select all pods within the namespace.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector", - "x-kubernetes-patch-strategy": "replace" + "podInfoOnMount": { + "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field is immutable.", + "type": "boolean" }, - "unhealthyPodEvictionPolicy": { - "description": "UnhealthyPodEvictionPolicy defines the criteria for when unhealthy pods should be considered for eviction. Current implementation considers healthy pods, as pods that have status.conditions item with type=\"Ready\",status=\"True\".\n\nValid policies are IfHealthyBudget and AlwaysAllow. If no policy is specified, the default behavior will be used, which corresponds to the IfHealthyBudget policy.\n\nIfHealthyBudget policy means that running pods (status.phase=\"Running\"), but not yet healthy can be evicted only if the guarded application is not disrupted (status.currentHealthy is at least equal to status.desiredHealthy). Healthy pods will be subject to the PDB for eviction.\n\nAlwaysAllow policy means that all running pods (status.phase=\"Running\"), but not yet healthy are considered disrupted and can be evicted regardless of whether the criteria in a PDB is met. This means perspective running pods of a disrupted application might not get a chance to become healthy. Healthy pods will be subject to the PDB for eviction.\n\nAdditional policies may be added in the future. Clients making eviction decisions should disallow eviction of unhealthy pods if they encounter an unrecognized policy in this field.\n\nThis field is beta-level. The eviction API uses this field when the feature gate PDBUnhealthyPodEvictionPolicy is enabled (enabled by default).\n\nPossible enum values:\n - `\"AlwaysAllow\"` policy means that all running pods (status.phase=\"Running\"), but not yet healthy are considered disrupted and can be evicted regardless of whether the criteria in a PDB is met. This means perspective running pods of a disrupted application might not get a chance to become healthy. Healthy pods will be subject to the PDB for eviction.\n - `\"IfHealthyBudget\"` policy means that running pods (status.phase=\"Running\"), but not yet healthy can be evicted only if the guarded application is not disrupted (status.currentHealthy is at least equal to status.desiredHealthy). Healthy pods will be subject to the PDB for eviction.", - "type": "string", - "enum": [ - "AlwaysAllow", - "IfHealthyBudget" - ] - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "PodDisruptionBudgetSpec", - "Scope": "Namespaced" - } - }, - "io.k8s.api.policy.v1.PodDisruptionBudgetStatus": { - "description": "PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.", - "type": "object", - "required": [ - "disruptionsAllowed", - "currentHealthy", - "desiredHealthy", - "expectedPods" - ], - "properties": { - "conditions": { - "description": "Conditions contain conditions for PDB. The disruption controller sets the DisruptionAllowed condition. The following are known values for the reason field (additional reasons could be added in the future): - SyncFailed: The controller encountered an error and wasn't able to compute\n the number of allowed disruptions. Therefore no disruptions are\n allowed and the status of the condition will be False.\n- InsufficientPods: The number of pods are either at or below the number\n required by the PodDisruptionBudget. No disruptions are\n allowed and the status of the condition will be False.\n- SufficientPods: There are more pods than required by the PodDisruptionBudget.\n The condition will be True, and the number of allowed\n disruptions are provided by the disruptionsAllowed property.", + "requiresRepublish": { + "description": "requiresRepublish indicates the CSI driver wants `NodePublishVolume` being periodically called to reflect any possible change in the mounted volume. This field defaults to false.\n\nNote: After a successful initial NodePublishVolume call, subsequent calls to NodePublishVolume should only update the contents of the volume. New mount points will not be seen by a running container.", + "type": "boolean" + }, + "seLinuxMount": { + "description": "seLinuxMount specifies if the CSI driver supports \"-o context\" mount option.\n\nWhen \"true\", the CSI driver must ensure that all volumes provided by this CSI driver can be mounted separately with different `-o context` options. This is typical for storage backends that provide volumes as filesystems on block devices or as independent shared volumes. Kubernetes will call NodeStage / NodePublish with \"-o context=xyz\" mount option when mounting a ReadWriteOncePod volume used in Pod that has explicitly set SELinux context. In the future, it may be expanded to other volume AccessModes. In any case, Kubernetes will ensure that the volume is mounted only with a single SELinux context.\n\nWhen \"false\", Kubernetes won't pass any special SELinux mount options to the driver. This is typical for volumes that represent subdirectories of a bigger shared filesystem.\n\nDefault is \"false\".", + "type": "boolean" + }, + "storageCapacity": { + "description": "storageCapacity indicates that the CSI volume driver wants pod scheduling to consider the storage capacity that the driver deployment will report by creating CSIStorageCapacity objects with capacity information, if set to true.\n\nThe check can be enabled immediately when deploying a driver. In that case, provisioning new volumes with late binding will pause until the driver deployment has published some suitable CSIStorageCapacity object.\n\nAlternatively, the driver can be deployed with the field unset or false and it can be flipped later when storage capacity information has been published.\n\nThis field was immutable in Kubernetes \u003c= 1.22 and now is mutable.", + "type": "boolean" + }, + "tokenRequests": { + "description": "tokenRequests indicates the CSI driver needs pods' service account tokens it is mounting volume for to do necessary authentication. Kubelet will pass the tokens in VolumeContext in the CSI NodePublishVolume calls. The CSI driver should parse and validate the following VolumeContext: \"csi.storage.k8s.io/serviceAccount.tokens\": {\n \"\u003caudience\u003e\": {\n \"token\": \u003ctoken\u003e,\n \"expirationTimestamp\": \u003cexpiration timestamp in RFC3339\u003e,\n },\n ...\n}\n\nNote: Audience in each TokenRequest should be different and at most one token is empty string. To receive a new token after expiry, RequiresRepublish can be used to trigger NodePublishVolume periodically.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.TokenRequest" }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "currentHealthy": { - "description": "current number of healthy pods", - "type": "integer", - "format": "int32", - "default": 0 - }, - "desiredHealthy": { - "description": "minimum desired number of healthy pods", - "type": "integer", - "format": "int32", - "default": 0 - }, - "disruptedPods": { - "description": "DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - } - }, - "disruptionsAllowed": { - "description": "Number of pod disruptions that are currently allowed.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "expectedPods": { - "description": "total number of pods counted by this disruption budget", - "type": "integer", - "format": "int32", - "default": 0 + "x-kubernetes-list-type": "atomic" }, - "observedGeneration": { - "description": "Most recent generation observed when updating this PDB status. DisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.", - "type": "integer", - "format": "int64" + "volumeLifecycleModes": { + "description": "volumeLifecycleModes defines what kind of volumes this CSI volume driver supports. The default if the list is empty is \"Persistent\", which is the usage defined by the CSI specification and implemented in Kubernetes via the usual PV/PVC mechanism.\n\nThe other mode is \"Ephemeral\". In this mode, volumes are defined inline inside the pod spec with CSIVolumeSource and their lifecycle is tied to the lifecycle of that pod. A driver has to be aware of this because it is only going to get a NodePublishVolume call for such a volume.\n\nFor more information about implementing this mode, see https://kubernetes-csi.github.io/docs/ephemeral-local-volumes.html A driver can support one or more of these modes and more modes may be added in the future.\n\nThis field is immutable.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "v1", - "Kind": "PodDisruptionBudgetStatus", - "Scope": "Namespaced" - } - }, - "io.k8s.api.policy.v1beta1.Eviction": { - "description": "Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod. A request to cause such an eviction is created by POSTing to .../pods/\u003cpod name\u003e/evictions.", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "deleteOptions": { - "description": "DeleteOptions may be provided", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "ObjectMeta describes the pod that is being evicted.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "", + "Group": "storage.k8s.io", "Version": "v1beta1", - "Kind": "Eviction", + "Kind": "CSIDriverSpec", "Scope": "Namespaced" } }, - "io.k8s.api.policy.v1beta1.PodDisruptionBudget": { - "description": "PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods", + "io.k8s.api.storage.v1beta1.CSINode": { + "description": "DEPRECATED - This group version of CSINode is deprecated by storage/v1/CSINode. See the release notes for more information. CSINode holds information about all CSI drivers installed on a node. CSI drivers do not need to create the CSINode object directly. As long as they use the node-driver-registrar sidecar container, the kubelet will automatically populate the CSINode object for the CSI driver as part of kubelet plugin registration. CSINode has the same name as a node. If the object is missing, it means either there are no CSI Drivers available on the node, or the Kubelet version is low enough that it doesn't create this object. CSINode has an OwnerReference that points to the corresponding node object.", "type": "object", + "required": [ + "spec" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -45793,31 +51406,66 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "metadata.name must be the Kubernetes node name.", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "Specification of the desired behavior of the PodDisruptionBudget.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudgetSpec" - }, - "status": { - "description": "Most recently observed status of the PodDisruptionBudget.", + "description": "spec is the specification of CSINode", "default": {}, - "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudgetStatus" + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINodeSpec" } }, "x-fabric8-info": { "Type": "object", - "Group": "", + "Group": "storage.k8s.io", "Version": "v1beta1", - "Kind": "PodDisruptionBudget", + "Kind": "CSINode", + "Scope": "Clustered" + } + }, + "io.k8s.api.storage.v1beta1.CSINodeDriver": { + "description": "CSINodeDriver holds information about the specification of one CSI driver installed on a node", + "type": "object", + "required": [ + "name", + "nodeID" + ], + "properties": { + "allocatable": { + "description": "allocatable represents the volume resources of a node that are available for scheduling.", + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeNodeResources" + }, + "name": { + "description": "name represents the name of the CSI driver that this object refers to. This MUST be the same name returned by the CSI GetPluginName() call for that driver.", + "type": "string", + "default": "" + }, + "nodeID": { + "description": "nodeID of the node from the driver point of view. This field enables Kubernetes to communicate with storage systems that do not share the same nomenclature for nodes. For example, Kubernetes may refer to a given node as \"node1\", but the storage system may refer to the same node as \"nodeA\". When Kubernetes issues a command to the storage system to attach a volume to a specific node, it can use this field to refer to the node name using the ID that the storage system will understand, e.g. \"nodeA\" instead of \"node1\". This field is required.", + "type": "string", + "default": "" + }, + "topologyKeys": { + "description": "topologyKeys is the list of keys supported by the driver. When a driver is initialized on a cluster, it provides a set of topology keys that it understands (e.g. \"company.com/zone\", \"company.com/region\"). When a driver is initialized on a node, it provides the same topology keys along with values. Kubelet will expose these topology keys as labels on its own node object. When Kubernetes does topology aware provisioning, it can use this list to determine which labels it should retrieve from the node object and pass back to the driver. It is possible for different nodes to use different topology keys. This can be empty if driver does not support topology.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "storage.k8s.io", + "Version": "v1beta1", + "Kind": "CSINodeDriver", "Scope": "Namespaced" } }, - "io.k8s.api.policy.v1beta1.PodDisruptionBudgetList": { - "description": "PodDisruptionBudgetList is a collection of PodDisruptionBudgets.", + "io.k8s.api.storage.v1beta1.CSINodeList": { + "description": "CSINodeList is a collection of CSINode objects.", "type": "object", "required": [ "items" @@ -45828,11 +51476,11 @@ "type": "string" }, "items": { - "description": "items list individual PodDisruptionBudget objects", + "description": "items is the list of CSINode", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.policy.v1beta1.PodDisruptionBudget" + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINode" } }, "kind": { @@ -45840,150 +51488,151 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "", + "Group": "storage.k8s.io", "Version": "v1beta1", - "Kind": "PodDisruptionBudgetList", + "Kind": "CSINodeList", "Scope": "Namespaced" } }, - "io.k8s.api.policy.v1beta1.PodDisruptionBudgetSpec": { - "description": "PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.", + "io.k8s.api.storage.v1beta1.CSINodeSpec": { + "description": "CSINodeSpec holds information about the specification of all CSI drivers installed on a node", "type": "object", + "required": [ + "drivers" + ], "properties": { - "maxUnavailable": { - "description": "An eviction is allowed if at most \"maxUnavailable\" pods selected by \"selector\" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with \"minAvailable\".", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" - }, - "minAvailable": { - "description": "An eviction is allowed if at least \"minAvailable\" pods selected by \"selector\" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying \"100%\".", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" - }, - "selector": { - "description": "Label query over pods whose evictions are managed by the disruption budget. A null selector selects no pods. An empty selector ({}) also selects no pods, which differs from standard behavior of selecting all pods. In policy/v1, an empty selector will select all pods in the namespace.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "unhealthyPodEvictionPolicy": { - "description": "UnhealthyPodEvictionPolicy defines the criteria for when unhealthy pods should be considered for eviction. Current implementation considers healthy pods, as pods that have status.conditions item with type=\"Ready\",status=\"True\".\n\nValid policies are IfHealthyBudget and AlwaysAllow. If no policy is specified, the default behavior will be used, which corresponds to the IfHealthyBudget policy.\n\nIfHealthyBudget policy means that running pods (status.phase=\"Running\"), but not yet healthy can be evicted only if the guarded application is not disrupted (status.currentHealthy is at least equal to status.desiredHealthy). Healthy pods will be subject to the PDB for eviction.\n\nAlwaysAllow policy means that all running pods (status.phase=\"Running\"), but not yet healthy are considered disrupted and can be evicted regardless of whether the criteria in a PDB is met. This means perspective running pods of a disrupted application might not get a chance to become healthy. Healthy pods will be subject to the PDB for eviction.\n\nAdditional policies may be added in the future. Clients making eviction decisions should disallow eviction of unhealthy pods if they encounter an unrecognized policy in this field.\n\nThis field is beta-level. The eviction API uses this field when the feature gate PDBUnhealthyPodEvictionPolicy is enabled (enabled by default).\n\nPossible enum values:\n - `\"AlwaysAllow\"` policy means that all running pods (status.phase=\"Running\"), but not yet healthy are considered disrupted and can be evicted regardless of whether the criteria in a PDB is met. This means perspective running pods of a disrupted application might not get a chance to become healthy. Healthy pods will be subject to the PDB for eviction.\n - `\"IfHealthyBudget\"` policy means that running pods (status.phase=\"Running\"), but not yet healthy can be evicted only if the guarded application is not disrupted (status.currentHealthy is at least equal to status.desiredHealthy). Healthy pods will be subject to the PDB for eviction.", - "type": "string", - "enum": [ - "AlwaysAllow", - "IfHealthyBudget" - ] + "drivers": { + "description": "drivers is a list of information of all CSI Drivers existing on a node. If all drivers in the list are uninstalled, this can become empty.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINodeDriver" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", + "Group": "storage.k8s.io", "Version": "v1beta1", - "Kind": "PodDisruptionBudgetSpec", + "Kind": "CSINodeSpec", "Scope": "Namespaced" } }, - "io.k8s.api.policy.v1beta1.PodDisruptionBudgetStatus": { - "description": "PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.", + "io.k8s.api.storage.v1beta1.CSIStorageCapacity": { + "description": "CSIStorageCapacity stores the result of one CSI GetCapacity call. For a given StorageClass, this describes the available capacity in a particular topology segment. This can be used when considering where to instantiate new PersistentVolumes.\n\nFor example this can express things like: - StorageClass \"standard\" has \"1234 GiB\" available in \"topology.kubernetes.io/zone=us-east1\" - StorageClass \"localssd\" has \"10 GiB\" available in \"kubernetes.io/hostname=knode-abc123\"\n\nThe following three cases all imply that no capacity is available for a certain combination: - no object exists with suitable topology and storage class name - such an object exists, but the capacity is unset - such an object exists, but the capacity is zero\n\nThe producer of these objects can decide which approach is more suitable.\n\nThey are consumed by the kube-scheduler when a CSI driver opts into capacity-aware scheduling with CSIDriverSpec.StorageCapacity. The scheduler compares the MaximumVolumeSize against the requested size of pending volumes to filter out unsuitable nodes. If MaximumVolumeSize is unset, it falls back to a comparison against the less precise Capacity. If that is also unset, the scheduler assumes that capacity is insufficient and tries some other node.", "type": "object", "required": [ - "disruptionsAllowed", - "currentHealthy", - "desiredHealthy", - "expectedPods" + "storageClassName" ], "properties": { - "conditions": { - "description": "Conditions contain conditions for PDB. The disruption controller sets the DisruptionAllowed condition. The following are known values for the reason field (additional reasons could be added in the future): - SyncFailed: The controller encountered an error and wasn't able to compute\n the number of allowed disruptions. Therefore no disruptions are\n allowed and the status of the condition will be False.\n- InsufficientPods: The number of pods are either at or below the number\n required by the PodDisruptionBudget. No disruptions are\n allowed and the status of the condition will be False.\n- SufficientPods: There are more pods than required by the PodDisruptionBudget.\n The condition will be True, and the number of allowed\n disruptions are provided by the disruptionsAllowed property.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "currentHealthy": { - "description": "current number of healthy pods", - "type": "integer", - "format": "int32", - "default": 0 + "capacity": { + "description": "capacity is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.\n\nThe semantic is currently (CSI spec 1.2) defined as: The available capacity, in bytes, of the storage that can be used to provision volumes. If not set, that information is currently unavailable.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" }, - "desiredHealthy": { - "description": "minimum desired number of healthy pods", - "type": "integer", - "format": "int32", - "default": 0 + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "disruptedPods": { - "description": "DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - } + "maximumVolumeSize": { + "description": "maximumVolumeSize is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.\n\nThis is defined since CSI spec 1.4.0 as the largest size that may be used in a CreateVolumeRequest.capacity_range.required_bytes field to create a volume with the same parameters as those in GetCapacityRequest. The corresponding value in the Kubernetes API is ResourceRequirements.Requests in a volume claim.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" }, - "disruptionsAllowed": { - "description": "Number of pod disruptions that are currently allowed.", - "type": "integer", - "format": "int32", - "default": 0 + "metadata": { + "description": "Standard object's metadata. The name has no particular meaning. It must be be a DNS subdomain (dots allowed, 253 characters). To ensure that there are no conflicts with other CSI drivers on the cluster, the recommendation is to use csisc-\u003cuuid\u003e, a generated name, or a reverse-domain name which ends with the unique CSI driver name.\n\nObjects are namespaced.\n\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "expectedPods": { - "description": "total number of pods counted by this disruption budget", - "type": "integer", - "format": "int32", - "default": 0 + "nodeTopology": { + "description": "nodeTopology defines which nodes have access to the storage for which capacity was reported. If not set, the storage is not accessible from any node in the cluster. If empty, the storage is accessible from all nodes. This field is immutable.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" }, - "observedGeneration": { - "description": "Most recent generation observed when updating this PDB status. DisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.", - "type": "integer", - "format": "int64" + "storageClassName": { + "description": "storageClassName represents the name of the StorageClass that the reported capacity applies to. It must meet the same requirements as the name of a StorageClass object (non-empty, DNS subdomain). If that object no longer exists, the CSIStorageCapacity object is obsolete and should be removed by its creator. This field is immutable.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "", + "Type": "object", + "Group": "storage.k8s.io", "Version": "v1beta1", - "Kind": "PodDisruptionBudgetStatus", + "Kind": "CSIStorageCapacity", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1.AggregationRule": { - "description": "AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole", + "io.k8s.api.storage.v1beta1.CSIStorageCapacityList": { + "description": "CSIStorageCapacityList is a collection of CSIStorageCapacity objects.", "type": "object", + "required": [ + "items" + ], "properties": { - "clusterRoleSelectors": { - "description": "ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "description": "items is the list of CSIStorageCapacity objects.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "x-kubernetes-list-type": "atomic" + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacity" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "rbac.authorization.k8s.io", - "Version": "v1", - "Kind": "AggregationRule", + "Type": "list", + "Group": "storage.k8s.io", + "Version": "v1beta1", + "Kind": "CSIStorageCapacityList", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1.ClusterRole": { - "description": "ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.", + "io.k8s.api.storage.v1beta1.StorageClass": { + "description": "StorageClass describes the parameters for a class of storage for which PersistentVolumes can be dynamically provisioned.\n\nStorageClasses are non-namespaced; the name of the storage class according to etcd is in ObjectMeta.Name.", "type": "object", + "required": [ + "provisioner" + ], "properties": { - "aggregationRule": { - "description": "AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.", - "$ref": "#/definitions/io.k8s.api.rbac.v1.AggregationRule" + "allowVolumeExpansion": { + "description": "allowVolumeExpansion shows whether the storage class allow volume expand", + "type": "boolean" + }, + "allowedTopologies": { + "description": "allowedTopologies restrict the node topologies where volumes can be dynamically provisioned. Each volume plugin defines its own supported topology specifications. An empty TopologySelectorTerm list means there is no topology restriction. This field is only honored by servers that enable the VolumeScheduling feature.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.TopologySelectorTerm" + }, + "x-kubernetes-list-type": "atomic" }, "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -45994,110 +51643,158 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata.", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "rules": { - "description": "Rules holds all the PolicyRules for this ClusterRole", + "mountOptions": { + "description": "mountOptions controls the mountOptions for dynamically provisioned PersistentVolumes of this storage class. e.g. [\"ro\", \"soft\"]. Not validated - mount of the PVs will simply fail if one is invalid.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1.PolicyRule" + "type": "string", + "default": "" }, "x-kubernetes-list-type": "atomic" + }, + "parameters": { + "description": "parameters holds the parameters for the provisioner that should create volumes of this storage class.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "provisioner": { + "description": "provisioner indicates the type of the provisioner.", + "type": "string", + "default": "" + }, + "reclaimPolicy": { + "description": "reclaimPolicy controls the reclaimPolicy for dynamically provisioned PersistentVolumes of this storage class. Defaults to Delete.\n\nPossible enum values:\n - `\"Delete\"` means the volume will be deleted from Kubernetes on release from its claim. The volume plugin must support Deletion.\n - `\"Recycle\"` means the volume will be recycled back into the pool of unbound persistent volumes on release from its claim. The volume plugin must support Recycling.\n - `\"Retain\"` means the volume will be left in its current phase (Released) for manual reclamation by the administrator. The default policy is Retain.", + "type": "string", + "enum": [ + "Delete", + "Recycle", + "Retain" + ] + }, + "volumeBindingMode": { + "description": "volumeBindingMode indicates how PersistentVolumeClaims should be provisioned and bound. When unset, VolumeBindingImmediate is used. This field is only honored by servers that enable the VolumeScheduling feature.", + "type": "string" } }, "x-fabric8-info": { "Type": "object", - "Group": "rbac.authorization.k8s.io", - "Version": "v1", - "Kind": "ClusterRole", + "Group": "storage.k8s.io", + "Version": "v1beta1", + "Kind": "StorageClass", "Scope": "Clustered" } }, - "io.k8s.api.rbac.v1.ClusterRoleBinding": { - "description": "ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject.", + "io.k8s.api.storage.v1beta1.StorageClassList": { + "description": "StorageClassList is a collection of storage classes.", "type": "object", "required": [ - "roleRef" + "items" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "items": { + "description": "items is the list of StorageClasses", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.StorageClass" + } + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard object's metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "roleRef": { - "description": "RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. This field is immutable.", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleRef" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "storage.k8s.io", + "Version": "v1beta1", + "Kind": "StorageClassList", + "Scope": "Namespaced" + } + }, + "io.k8s.api.storage.v1beta1.TokenRequest": { + "description": "TokenRequest contains parameters of a service account token.", + "type": "object", + "required": [ + "audience" + ], + "properties": { + "audience": { + "description": "audience is the intended audience of the token in \"TokenRequestSpec\". It will default to the audiences of kube apiserver.", + "type": "string", + "default": "" }, - "subjects": { - "description": "Subjects holds references to the objects the role applies to.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1.Subject" - }, - "x-kubernetes-list-type": "atomic" + "expirationSeconds": { + "description": "expirationSeconds is the duration of validity of the token in \"TokenRequestSpec\". It has the same default value of \"ExpirationSeconds\" in \"TokenRequestSpec\"", + "type": "integer", + "format": "int64" } }, "x-fabric8-info": { - "Type": "object", - "Group": "rbac.authorization.k8s.io", - "Version": "v1", - "Kind": "ClusterRoleBinding", - "Scope": "Clustered" + "Type": "nested", + "Group": "storage.k8s.io", + "Version": "v1beta1", + "Kind": "TokenRequest", + "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1.ClusterRoleBindingList": { - "description": "ClusterRoleBindingList is a collection of ClusterRoleBindings", + "io.k8s.api.storage.v1beta1.VolumeAttachment": { + "description": "VolumeAttachment captures the intent to attach or detach the specified volume to/from the specified node.\n\nVolumeAttachment objects are non-namespaced.", "type": "object", "required": [ - "items" + "spec" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "Items is a list of ClusterRoleBindings", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRoleBinding" - } - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard object's metadata.", + "description": "Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "spec represents specification of the desired attach/detach volume behavior. Populated by the Kubernetes system.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachmentSpec" + }, + "status": { + "description": "status represents status of the VolumeAttachment request. Populated by the entity completing the attach or detach operation, i.e. the external-attacher.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachmentStatus" } }, "x-fabric8-info": { - "Type": "list", - "Group": "rbac.authorization.k8s.io", - "Version": "v1", - "Kind": "ClusterRoleBindingList", - "Scope": "Namespaced" + "Type": "object", + "Group": "storage.k8s.io", + "Version": "v1beta1", + "Kind": "VolumeAttachment", + "Scope": "Clustered" } }, - "io.k8s.api.rbac.v1.ClusterRoleList": { - "description": "ClusterRoleList is a collection of ClusterRoles", + "io.k8s.api.storage.v1beta1.VolumeAttachmentList": { + "description": "VolumeAttachmentList is a collection of VolumeAttachment objects.", "type": "object", "required": [ "items" @@ -46108,11 +51805,11 @@ "type": "string" }, "items": { - "description": "Items is a list of ClusterRoles", + "description": "items is the list of VolumeAttachments", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1.ClusterRole" + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment" } }, "kind": { @@ -46120,197 +51817,154 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata.", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "rbac.authorization.k8s.io", - "Version": "v1", - "Kind": "ClusterRoleList", + "Group": "storage.k8s.io", + "Version": "v1beta1", + "Kind": "VolumeAttachmentList", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1.PolicyRule": { - "description": "PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.", + "io.k8s.api.storage.v1beta1.VolumeAttachmentSource": { + "description": "VolumeAttachmentSource represents a volume that should be attached. Right now only PersistenVolumes can be attached via external attacher, in future we may allow also inline volumes in pods. Exactly one member can be set.", "type": "object", - "required": [ - "verbs" - ], "properties": { - "apiGroups": { - "description": "APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. \"\" represents the core API group and \"*\" represents all API groups.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "nonResourceURLs": { - "description": "NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as \"pods\" or \"secrets\") or non-resource URL paths (such as \"/api\"), but not both.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "resourceNames": { - "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "resources": { - "description": "Resources is a list of resources this rule applies to. '*' represents all resources.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "inlineVolumeSpec": { + "description": "inlineVolumeSpec contains all the information necessary to attach a persistent volume defined by a pod's inline VolumeSource. This field is populated only for the CSIMigration feature. It contains translated fields from a pod's inline VolumeSource to a PersistentVolumeSpec. This field is beta-level and is only honored by servers that enabled the CSIMigration feature.", + "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeSpec" }, - "verbs": { - "description": "Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "persistentVolumeName": { + "description": "persistentVolumeName represents the name of the persistent volume to attach.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "rbac.authorization.k8s.io", - "Version": "v1", - "Kind": "PolicyRule", + "Group": "storage.k8s.io", + "Version": "v1beta1", + "Kind": "VolumeAttachmentSource", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1.Role": { - "description": "Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding.", + "io.k8s.api.storage.v1beta1.VolumeAttachmentSpec": { + "description": "VolumeAttachmentSpec is the specification of a VolumeAttachment request.", "type": "object", + "required": [ + "attacher", + "source", + "nodeName" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard object's metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "rules": { - "description": "Rules holds all the PolicyRules for this Role", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1.PolicyRule" - }, - "x-kubernetes-list-type": "atomic" + "attacher": { + "description": "attacher indicates the name of the volume driver that MUST handle this request. This is the name returned by GetPluginName().", + "type": "string", + "default": "" + }, + "nodeName": { + "description": "nodeName represents the node that the volume should be attached to.", + "type": "string", + "default": "" + }, + "source": { + "description": "source represents the volume that should be attached.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachmentSource" } }, "x-fabric8-info": { - "Type": "object", - "Group": "rbac.authorization.k8s.io", - "Version": "v1", - "Kind": "Role", + "Type": "nested", + "Group": "storage.k8s.io", + "Version": "v1beta1", + "Kind": "VolumeAttachmentSpec", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1.RoleBinding": { - "description": "RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace.", + "io.k8s.api.storage.v1beta1.VolumeAttachmentStatus": { + "description": "VolumeAttachmentStatus is the status of a VolumeAttachment request.", "type": "object", "required": [ - "roleRef" + "attached" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "attachError": { + "description": "attachError represents the last error encountered during attach operation, if any. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeError" }, - "metadata": { - "description": "Standard object's metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "attached": { + "description": "attached indicates the volume is successfully attached. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", + "type": "boolean", + "default": false }, - "roleRef": { - "description": "RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. This field is immutable.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleRef" + "attachmentMetadata": { + "description": "attachmentMetadata is populated with any information returned by the attach operation, upon successful attach, that must be passed into subsequent WaitForAttach or Mount calls. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } }, - "subjects": { - "description": "Subjects holds references to the objects the role applies to.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1.Subject" - }, - "x-kubernetes-list-type": "atomic" + "detachError": { + "description": "detachError represents the last error encountered during detach operation, if any. This field must only be set by the entity completing the detach operation, i.e. the external-attacher.", + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeError" } }, "x-fabric8-info": { - "Type": "object", - "Group": "rbac.authorization.k8s.io", - "Version": "v1", - "Kind": "RoleBinding", + "Type": "nested", + "Group": "storage.k8s.io", + "Version": "v1beta1", + "Kind": "VolumeAttachmentStatus", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1.RoleBindingList": { - "description": "RoleBindingList is a collection of RoleBindings", + "io.k8s.api.storage.v1beta1.VolumeAttributesClass": { + "description": "VolumeAttributesClass represents a specification of mutable volume attributes defined by the CSI driver. The class can be specified during dynamic provisioning of PersistentVolumeClaims, and changed in the PersistentVolumeClaim spec after provisioning.", "type": "object", "required": [ - "items" + "driverName" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "Items is a list of RoleBindings", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1.RoleBinding" - } + "driverName": { + "description": "Name of the CSI driver This field is immutable.", + "type": "string", + "default": "" }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard object's metadata.", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "parameters": { + "description": "parameters hold volume attributes defined by the CSI driver. These values are opaque to the Kubernetes and are passed directly to the CSI driver. The underlying storage provider supports changing these attributes on an existing volume, however the parameters field itself is immutable. To invoke a volume update, a new VolumeAttributesClass should be created with new parameters, and the PersistentVolumeClaim should be updated to reference the new VolumeAttributesClass.\n\nThis field is required and must contain at least one key/value pair. The keys cannot be empty, and the maximum number of parameters is 512, with a cumulative max size of 256K. If the CSI driver rejects invalid parameters, the target PersistentVolumeClaim will be set to an \"Infeasible\" state in the modifyVolumeStatus field.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { - "Type": "list", - "Group": "rbac.authorization.k8s.io", - "Version": "v1", - "Kind": "RoleBindingList", - "Scope": "Namespaced" + "Type": "object", + "Group": "storage.k8s.io", + "Version": "v1beta1", + "Kind": "VolumeAttributesClass", + "Scope": "Clustered" } }, - "io.k8s.api.rbac.v1.RoleList": { - "description": "RoleList is a collection of Roles", + "io.k8s.api.storage.v1beta1.VolumeAttributesClassList": { + "description": "VolumeAttributesClassList is a collection of VolumeAttributesClass objects.", "type": "object", "required": [ "items" @@ -46321,11 +51975,11 @@ "type": "string" }, "items": { - "description": "Items is a list of Roles", + "description": "items is the list of VolumeAttributesClass objects.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1.Role" + "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttributesClass" } }, "kind": { @@ -46333,156 +51987,125 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata.", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "rbac.authorization.k8s.io", - "Version": "v1", - "Kind": "RoleList", + "Group": "storage.k8s.io", + "Version": "v1beta1", + "Kind": "VolumeAttributesClassList", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1.RoleRef": { - "description": "RoleRef contains information that points to the role being used", + "io.k8s.api.storage.v1beta1.VolumeError": { + "description": "VolumeError captures an error encountered during a volume operation.", "type": "object", - "required": [ - "apiGroup", - "kind", - "name" - ], "properties": { - "apiGroup": { - "description": "APIGroup is the group for the resource being referenced", - "type": "string", - "default": "" - }, - "kind": { - "description": "Kind is the type of resource being referenced", - "type": "string", - "default": "" + "message": { + "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.", + "type": "string" }, - "name": { - "description": "Name is the name of resource being referenced", - "type": "string", - "default": "" + "time": { + "description": "time represents the time the error was encountered.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" } }, "x-fabric8-info": { "Type": "nested", - "Group": "rbac.authorization.k8s.io", - "Version": "v1", - "Kind": "RoleRef", + "Group": "storage.k8s.io", + "Version": "v1beta1", + "Kind": "VolumeError", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.rbac.v1.Subject": { - "description": "Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.", + "io.k8s.api.storage.v1beta1.VolumeNodeResources": { + "description": "VolumeNodeResources is a set of resource limits for scheduling of volumes.", "type": "object", - "required": [ - "kind", - "name" - ], "properties": { - "apiGroup": { - "description": "APIGroup holds the API group of the referenced subject. Defaults to \"\" for ServiceAccount subjects. Defaults to \"rbac.authorization.k8s.io\" for User and Group subjects.", - "type": "string" - }, - "kind": { - "description": "Kind of object being referenced. Values defined by this API group are \"User\", \"Group\", and \"ServiceAccount\". If the Authorizer does not recognized the kind value, the Authorizer should report an error.", - "type": "string", - "default": "" - }, - "name": { - "description": "Name of the object being referenced.", - "type": "string", - "default": "" - }, - "namespace": { - "description": "Namespace of the referenced object. If the object kind is non-namespace, such as \"User\" or \"Group\", and this value is not empty the Authorizer should report an error.", - "type": "string" + "count": { + "description": "count indicates the maximum number of unique volumes managed by the CSI driver that can be used on a node. A volume that is both attached and mounted on a node is considered to be used once, not twice. The same rule applies for a unique volume that is shared among multiple pods on the same node. If this field is nil, then the supported number of volumes on this node is unbounded.", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { "Type": "nested", - "Group": "rbac.authorization.k8s.io", - "Version": "v1", - "Kind": "Subject", + "Group": "storage.k8s.io", + "Version": "v1beta1", + "Kind": "VolumeNodeResources", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.api.rbac.v1alpha1.AggregationRule": { - "description": "AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole", + "io.k8s.api.storagemigration.v1alpha1.GroupVersionResource": { + "description": "The names of the group, the version, and the resource.", "type": "object", "properties": { - "clusterRoleSelectors": { - "description": "ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "x-kubernetes-list-type": "atomic" + "group": { + "description": "The name of the group.", + "type": "string" + }, + "resource": { + "description": "The name of the resource.", + "type": "string" + }, + "version": { + "description": "The name of the version.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "rbac.authorization.k8s.io", + "Group": "storagemigration.k8s.io", "Version": "v1alpha1", - "Kind": "AggregationRule", + "Kind": "GroupVersionResource", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1alpha1.ClusterRole": { - "description": "ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRole, and will no longer be served in v1.22.", + "io.k8s.api.storagemigration.v1alpha1.MigrationCondition": { + "description": "Describes the state of a migration at a certain point.", "type": "object", + "required": [ + "type", + "status" + ], "properties": { - "aggregationRule": { - "description": "AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.", - "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.AggregationRule" + "lastUpdateTime": { + "description": "The last time this condition was updated.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "message": { + "description": "A human readable message indicating details about the transition.", "type": "string" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "reason": { + "description": "The reason for the condition's last transition.", "type": "string" }, - "metadata": { - "description": "Standard object's metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "status": { + "description": "Status of the condition, one of True, False, Unknown.", + "type": "string", + "default": "" }, - "rules": { - "description": "Rules holds all the PolicyRules for this ClusterRole", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.PolicyRule" - }, - "x-kubernetes-list-type": "atomic" + "type": { + "description": "Type of the condition.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "rbac.authorization.k8s.io", + "Type": "nested", + "Group": "storagemigration.k8s.io", "Version": "v1alpha1", - "Kind": "ClusterRole", - "Scope": "Clustered" + "Kind": "MigrationCondition", + "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1alpha1.ClusterRoleBinding": { - "description": "ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoleBinding, and will no longer be served in v1.22.", + "io.k8s.api.storagemigration.v1alpha1.StorageVersionMigration": { + "description": "StorageVersionMigration represents a migration of stored data to the latest storage version.", "type": "object", - "required": [ - "roleRef" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -46493,35 +52116,31 @@ "type": "string" }, "metadata": { - "description": "Standard object's metadata.", + "description": "Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "roleRef": { - "description": "RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.", + "spec": { + "description": "Specification of the migration.", "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.RoleRef" + "$ref": "#/definitions/io.k8s.api.storagemigration.v1alpha1.StorageVersionMigrationSpec" }, - "subjects": { - "description": "Subjects holds references to the objects the role applies to.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.Subject" - }, - "x-kubernetes-list-type": "atomic" + "status": { + "description": "Status of the migration.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.storagemigration.v1alpha1.StorageVersionMigrationStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "rbac.authorization.k8s.io", + "Group": "storagemigration.k8s.io", "Version": "v1alpha1", - "Kind": "ClusterRoleBinding", + "Kind": "StorageVersionMigration", "Scope": "Clustered" } }, - "io.k8s.api.rbac.v1alpha1.ClusterRoleBindingList": { - "description": "ClusterRoleBindingList is a collection of ClusterRoleBindings. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoleBindings, and will no longer be served in v1.22.", + "io.k8s.api.storagemigration.v1alpha1.StorageVersionMigrationList": { + "description": "StorageVersionMigrationList is a collection of storage version migrations.", "type": "object", "required": [ "items" @@ -46532,169 +52151,99 @@ "type": "string" }, "items": { - "description": "Items is a list of ClusterRoleBindings", + "description": "Items is the list of StorageVersionMigration", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.ClusterRoleBinding" - } + "$ref": "#/definitions/io.k8s.api.storagemigration.v1alpha1.StorageVersionMigration" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard object's metadata.", + "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "rbac.authorization.k8s.io", + "Group": "storagemigration.k8s.io", "Version": "v1alpha1", - "Kind": "ClusterRoleBindingList", + "Kind": "StorageVersionMigrationList", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1alpha1.ClusterRoleList": { - "description": "ClusterRoleList is a collection of ClusterRoles. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoles, and will no longer be served in v1.22.", + "io.k8s.api.storagemigration.v1alpha1.StorageVersionMigrationSpec": { + "description": "Spec of the storage version migration.", "type": "object", "required": [ - "items" + "resource" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "Items is a list of ClusterRoles", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.ClusterRole" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "continueToken": { + "description": "The token used in the list options to get the next chunk of objects to migrate. When the .status.conditions indicates the migration is \"Running\", users can use this token to check the progress of the migration.", "type": "string" }, - "metadata": { - "description": "Standard object's metadata.", + "resource": { + "description": "The resource that is being migrated. The migrator sends requests to the endpoint serving the resource. Immutable.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - }, - "x-fabric8-info": { - "Type": "list", - "Group": "rbac.authorization.k8s.io", - "Version": "v1alpha1", - "Kind": "ClusterRoleList", - "Scope": "Namespaced" - } - }, - "io.k8s.api.rbac.v1alpha1.PolicyRule": { - "description": "PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.", - "type": "object", - "required": [ - "verbs" - ], - "properties": { - "apiGroups": { - "description": "APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. \"\" represents the core API group and \"*\" represents all API groups.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "nonResourceURLs": { - "description": "NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as \"pods\" or \"secrets\") or non-resource URL paths (such as \"/api\"), but not both.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "resourceNames": { - "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "resources": { - "description": "Resources is a list of resources this rule applies to. '*' represents all resources.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "verbs": { - "description": "Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "$ref": "#/definitions/io.k8s.api.storagemigration.v1alpha1.GroupVersionResource" } }, "x-fabric8-info": { "Type": "nested", - "Group": "rbac.authorization.k8s.io", + "Group": "storagemigration.k8s.io", "Version": "v1alpha1", - "Kind": "PolicyRule", + "Kind": "StorageVersionMigrationSpec", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1alpha1.Role": { - "description": "Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 Role, and will no longer be served in v1.22.", + "io.k8s.api.storagemigration.v1alpha1.StorageVersionMigrationStatus": { + "description": "Status of the storage version migration.", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard object's metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "rules": { - "description": "Rules holds all the PolicyRules for this Role", + "conditions": { + "description": "The latest available observations of the migration's current state.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.PolicyRule" + "$ref": "#/definitions/io.k8s.api.storagemigration.v1alpha1.MigrationCondition" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "resourceVersion": { + "description": "ResourceVersion to compare with the GC cache for performing the migration. This is the current resource version of given group, version and resource when kube-controller-manager first observes this StorageVersionMigration resource.", + "type": "string" } }, "x-fabric8-info": { - "Type": "object", - "Group": "rbac.authorization.k8s.io", + "Type": "nested", + "Group": "storagemigration.k8s.io", "Version": "v1alpha1", - "Kind": "Role", + "Kind": "StorageVersionMigrationStatus", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1alpha1.RoleBinding": { - "description": "RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBinding, and will no longer be served in v1.22.", + "io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup": { + "description": "APIGroup contains the name, the supported versions, and the preferred version of a group.", "type": "object", "required": [ - "roleRef" + "name", + "versions" ], "properties": { "apiVersion": { @@ -46705,242 +52254,199 @@ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "metadata": { - "description": "Standard object's metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "name": { + "description": "name is the name of the group.", + "type": "string", + "default": "" }, - "roleRef": { - "description": "RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.", + "preferredVersion": { + "description": "preferredVersion is the version preferred by the API server, which probably is the storage version.", "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.RoleRef" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionForDiscovery" }, - "subjects": { - "description": "Subjects holds references to the objects the role applies to.", + "serverAddressByClientCIDRs": { + "description": "a map of client CIDR to server address that is serving this group. This is to help clients reach servers in the most network-efficient way possible. Clients can use the appropriate server address as per the CIDR that they match. In case of multiple matches, clients should use the longest matching CIDR. The server returns only those CIDRs that it thinks that the client can match. For example: the master will return an internal IP CIDR only, if the client reaches the server using an internal IP. Server looks at X-Forwarded-For header or X-Real-Ip header or request.RemoteAddr (in that order) to get the client IP.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.Subject" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ServerAddressByClientCIDR" }, "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "rbac.authorization.k8s.io", - "Version": "v1alpha1", - "Kind": "RoleBinding", - "Scope": "Namespaced" - } - }, - "io.k8s.api.rbac.v1alpha1.RoleBindingList": { - "description": "RoleBindingList is a collection of RoleBindings Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBindingList, and will no longer be served in v1.22.", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" }, - "items": { - "description": "Items is a list of RoleBindings", + "versions": { + "description": "versions are the versions supported in this group.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.RoleBinding" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard object's metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionForDiscovery" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { - "Type": "list", - "Group": "rbac.authorization.k8s.io", - "Version": "v1alpha1", - "Kind": "RoleBindingList", + "Type": "object", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "APIGroup", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1alpha1.RoleList": { - "description": "RoleList is a collection of Roles. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleList, and will no longer be served in v1.22.", + "io.k8s.apimachinery.pkg.apis.meta.v1.APIGroupList": { + "description": "APIGroupList is a list of APIGroup, to allow clients to discover the API at /apis.", "type": "object", "required": [ - "items" + "groups" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "Items is a list of Roles", + "groups": { + "description": "groups is a list of APIGroup.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1alpha1.Role" - } + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" + }, + "x-kubernetes-list-type": "atomic" }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" - }, - "metadata": { - "description": "Standard object's metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "list", - "Group": "rbac.authorization.k8s.io", - "Version": "v1alpha1", - "Kind": "RoleList", + "Type": "object", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "APIGroupList", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1alpha1.RoleRef": { - "description": "RoleRef contains information that points to the role being used", + "io.k8s.apimachinery.pkg.apis.meta.v1.APIResource": { + "description": "APIResource specifies the name of a resource and whether it is namespaced.", "type": "object", "required": [ - "apiGroup", + "name", + "singularName", + "namespaced", "kind", - "name" + "verbs" ], "properties": { - "apiGroup": { - "description": "APIGroup is the group for the resource being referenced", - "type": "string", - "default": "" + "categories": { + "description": "categories is a list of the grouped resources this resource belongs to (e.g. 'all')", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "group": { + "description": "group is the preferred group of the resource. Empty implies the group of the containing resource list. For subresources, this may have a different value, for example: Scale\".", + "type": "string" }, "kind": { - "description": "Kind is the type of resource being referenced", + "description": "kind is the kind for the resource (e.g. 'Foo' is the kind for a resource 'foo')", "type": "string", "default": "" }, "name": { - "description": "Name is the name of resource being referenced", + "description": "name is the plural name of the resource.", "type": "string", "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "rbac.authorization.k8s.io", - "Version": "v1alpha1", - "Kind": "RoleRef", - "Scope": "Namespaced" - } - }, - "io.k8s.api.rbac.v1alpha1.Subject": { - "description": "Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.", - "type": "object", - "required": [ - "kind", - "name" - ], - "properties": { - "apiVersion": { - "description": "APIVersion holds the API group and version of the referenced subject. Defaults to \"v1\" for ServiceAccount subjects. Defaults to \"rbac.authorization.k8s.io/v1alpha1\" for User and Group subjects.", - "type": "string" }, - "kind": { - "description": "Kind of object being referenced. Values defined by this API group are \"User\", \"Group\", and \"ServiceAccount\". If the Authorizer does not recognized the kind value, the Authorizer should report an error.", - "type": "string", - "default": "" + "namespaced": { + "description": "namespaced indicates if a resource is namespaced or not.", + "type": "boolean", + "default": false }, - "name": { - "description": "Name of the object being referenced.", + "shortNames": { + "description": "shortNames is a list of suggested short names of the resource.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "singularName": { + "description": "singularName is the singular name of the resource. This allows clients to handle plural and singular opaquely. The singularName is more correct for reporting status on a single item and both singular and plural are allowed from the kubectl CLI interface.", "type": "string", "default": "" }, - "namespace": { - "description": "Namespace of the referenced object. If the object kind is non-namespace, such as \"User\" or \"Group\", and this value is not empty the Authorizer should report an error.", + "storageVersionHash": { + "description": "The hash value of the storage version, the version this resource is converted to when written to the data store. Value must be treated as opaque by clients. Only equality comparison on the value is valid. This is an alpha feature and may change or be removed in the future. The field is populated by the apiserver only if the StorageVersionHash feature gate is enabled. This field will remain optional even if it graduates.", "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "rbac.authorization.k8s.io", - "Version": "v1alpha1", - "Kind": "Subject", - "Scope": "Namespaced" - } - }, - "io.k8s.api.rbac.v1beta1.AggregationRule": { - "description": "AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole", - "type": "object", - "properties": { - "clusterRoleSelectors": { - "description": "ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added", + }, + "verbs": { + "description": "verbs is a list of supported kube verbs (this includes get, list, watch, create, update, patch, delete, deletecollection, and proxy)", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "x-kubernetes-list-type": "atomic" + "type": "string", + "default": "" + } + }, + "version": { + "description": "version is the preferred version of the resource. Empty implies the version of the containing resource list For subresources, this may have a different value, for example: v1 (while inside a v1beta1 version of the core resource's group)\".", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "rbac.authorization.k8s.io", - "Version": "v1beta1", - "Kind": "AggregationRule", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "APIResource", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1beta1.ClusterRole": { - "description": "ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRole, and will no longer be served in v1.22.", + "io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList": { + "description": "APIResourceList is a list of APIResource, it is used to expose the name of the resources supported in a specific group and version, and if the resource is namespaced.", "type": "object", + "required": [ + "groupVersion", + "resources" + ], "properties": { - "aggregationRule": { - "description": "AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.", - "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.AggregationRule" - }, "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "groupVersion": { + "description": "groupVersion is the group and version this APIResourceList is for.", + "type": "string", + "default": "" + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "metadata": { - "description": "Standard object's metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "rules": { - "description": "Rules holds all the PolicyRules for this ClusterRole", + "resources": { + "description": "resources contains the name of the resources and if they are namespaced.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.PolicyRule" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResource" }, "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "object", - "Group": "rbac.authorization.k8s.io", - "Version": "v1beta1", - "Kind": "ClusterRole", - "Scope": "Clustered" + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "APIResourceList", + "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1beta1.ClusterRoleBinding": { - "description": "ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoleBinding, and will no longer be served in v1.22.", + "io.k8s.apimachinery.pkg.apis.meta.v1.APIVersions": { + "description": "APIVersions lists the versions that are available, to allow clients to discover the API at /api, which is the root path of the legacy v1 API.", "type": "object", "required": [ - "roleRef" + "versions", + "serverAddressByClientCIDRs" ], "properties": { "apiVersion": { @@ -46951,135 +52457,136 @@ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "metadata": { - "description": "Standard object's metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "roleRef": { - "description": "RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleRef" - }, - "subjects": { - "description": "Subjects holds references to the objects the role applies to.", + "serverAddressByClientCIDRs": { + "description": "a map of client CIDR to server address that is serving this group. This is to help clients reach servers in the most network-efficient way possible. Clients can use the appropriate server address as per the CIDR that they match. In case of multiple matches, clients should use the longest matching CIDR. The server returns only those CIDRs that it thinks that the client can match. For example: the master will return an internal IP CIDR only, if the client reaches the server using an internal IP. Server looks at X-Forwarded-For header or X-Real-Ip header or request.RemoteAddr (in that order) to get the client IP.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.Subject" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ServerAddressByClientCIDR" + }, + "x-kubernetes-list-type": "atomic" + }, + "versions": { + "description": "versions are the api versions that are available.", + "type": "array", + "items": { + "type": "string", + "default": "" }, "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "object", - "Group": "rbac.authorization.k8s.io", - "Version": "v1beta1", - "Kind": "ClusterRoleBinding", - "Scope": "Clustered" + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "APIVersions", + "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1beta1.ClusterRoleBindingList": { - "description": "ClusterRoleBindingList is a collection of ClusterRoleBindings. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoleBindingList, and will no longer be served in v1.22.", + "io.k8s.apimachinery.pkg.apis.meta.v1.ApplyOptions": { + "description": "ApplyOptions may be provided when applying an API object. FieldManager is required for apply requests. ApplyOptions is equivalent to PatchOptions. It is provided as a convenience with documentation that speaks specifically to how the options fields relate to apply.", "type": "object", "required": [ - "items" + "force", + "fieldManager" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "Items is a list of ClusterRoleBindings", + "dryRun": { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRoleBinding" - } + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "fieldManager": { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required.", + "type": "string", + "default": "" + }, + "force": { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people.", + "type": "boolean", + "default": false }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" - }, - "metadata": { - "description": "Standard object's metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "list", - "Group": "rbac.authorization.k8s.io", - "Version": "v1beta1", - "Kind": "ClusterRoleBindingList", + "Type": "object", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "ApplyOptions", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1beta1.ClusterRoleList": { - "description": "ClusterRoleList is a collection of ClusterRoles. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoles, and will no longer be served in v1.22.", + "io.k8s.apimachinery.pkg.apis.meta.v1.Condition": { + "description": "Condition contains details for one aspect of the current state of this API Resource.", "type": "object", "required": [ - "items" + "type", + "status", + "lastTransitionTime", + "reason", + "message" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "lastTransitionTime": { + "description": "lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "items": { - "description": "Items is a list of ClusterRoles", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.ClusterRole" - } + "message": { + "description": "message is a human readable message indicating details about the transition. This may be an empty string.", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "observedGeneration": { + "description": "observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.", + "type": "integer", + "format": "int64" }, - "metadata": { - "description": "Standard object's metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "reason": { + "description": "reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.", + "type": "string", + "default": "" + }, + "status": { + "description": "status of the condition, one of True, False, Unknown.", + "type": "string", + "default": "" + }, + "type": { + "description": "type of condition in CamelCase or in foo.example.com/CamelCase.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "list", - "Group": "rbac.authorization.k8s.io", - "Version": "v1beta1", - "Kind": "ClusterRoleList", + "Type": "nested", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "Condition", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1beta1.PolicyRule": { - "description": "PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.", + "io.k8s.apimachinery.pkg.apis.meta.v1.CreateOptions": { + "description": "CreateOptions may be provided when creating an API object.", "type": "object", - "required": [ - "verbs" - ], "properties": { - "apiGroups": { - "description": "APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. \"\" represents the core API group and \"*\" represents all API groups.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "nonResourceURLs": { - "description": "NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as \"pods\" or \"secrets\") or non-resource URL paths (such as \"/api\"), but not both.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "resourceNames": { - "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.", + "dryRun": { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", "type": "array", "items": { "type": "string", @@ -47087,498 +52594,395 @@ }, "x-kubernetes-list-type": "atomic" }, - "resources": { - "description": "Resources is a list of resources this rule applies to. '*' represents all resources in the specified apiGroups. '*/foo' represents the subresource 'foo' for all resources in the specified apiGroups.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "fieldManager": { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "type": "string" }, - "verbs": { - "description": "Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "rbac.authorization.k8s.io", - "Version": "v1beta1", - "Kind": "PolicyRule", - "Scope": "Namespaced" - } - }, - "io.k8s.api.rbac.v1beta1.Role": { - "description": "Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 Role, and will no longer be served in v1.22.", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "fieldValidation": { + "description": "fieldValidation instructs the server on how to handle objects in the request (POST/PUT/PATCH) containing unknown or duplicate fields. Valid values are: - Ignore: This will ignore any unknown fields that are silently dropped from the object, and will ignore all but the last duplicate field that the decoder encounters. This is the default behavior prior to v1.23. - Warn: This will send a warning via the standard warning response header for each unknown field that is dropped from the object, and for each duplicate field that is encountered. The request will still succeed if there are no other errors, and will only persist the last of any duplicate fields. This is the default in v1.23+ - Strict: This will fail the request with a BadRequest error if any unknown fields would be dropped from the object, or if any duplicate fields are present. The error returned from the server will contain all unknown and duplicate fields encountered.", "type": "string" }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" - }, - "metadata": { - "description": "Standard object's metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "rules": { - "description": "Rules holds all the PolicyRules for this Role", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.PolicyRule" - }, - "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "object", - "Group": "rbac.authorization.k8s.io", - "Version": "v1beta1", - "Kind": "Role", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "CreateOptions", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1beta1.RoleBinding": { - "description": "RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBinding, and will no longer be served in v1.22.", + "io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions": { + "description": "DeleteOptions may be provided when deleting an API object.", "type": "object", - "required": [ - "roleRef" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "dryRun": { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "gracePeriodSeconds": { + "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", + "type": "integer", + "format": "int64" + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "metadata": { - "description": "Standard object's metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "orphanDependents": { + "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", + "type": "boolean" }, - "roleRef": { - "description": "RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleRef" + "preconditions": { + "description": "Must be fulfilled before a deletion is carried out. If not possible, a 409 Conflict status will be returned.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Preconditions" }, - "subjects": { - "description": "Subjects holds references to the objects the role applies to.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.Subject" - }, - "x-kubernetes-list-type": "atomic" + "propagationPolicy": { + "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", + "type": "string" } }, "x-fabric8-info": { "Type": "object", - "Group": "rbac.authorization.k8s.io", - "Version": "v1beta1", - "Kind": "RoleBinding", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "DeleteOptions", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1beta1.RoleBindingList": { - "description": "RoleBindingList is a collection of RoleBindings Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBindingList, and will no longer be served in v1.22.", + "io.k8s.apimachinery.pkg.apis.meta.v1.Duration": { + "description": "Duration is a wrapper around time.Duration which supports correct marshaling to YAML and JSON. In particular, it marshals into strings, which can be used as map keys in json.", + "type": "string", + "x-fabric8-info": { + "Type": "nested", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "Duration", + "Scope": "Namespaced" + } + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.FieldSelectorRequirement": { + "description": "FieldSelectorRequirement is a selector that contains values, a key, and an operator that relates the key and values.", "type": "object", "required": [ - "items" + "key", + "operator" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "key": { + "description": "key is the field selector key that the requirement applies to.", + "type": "string", + "default": "" + }, + "operator": { + "description": "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. The list of operators may grow in the future.", + "type": "string", + "default": "" }, - "items": { - "description": "Items is a list of RoleBindings", + "values": { + "description": "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.RoleBinding" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard object's metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { - "Type": "list", - "Group": "rbac.authorization.k8s.io", - "Version": "v1beta1", - "Kind": "RoleBindingList", + "Type": "nested", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "FieldSelectorRequirement", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1beta1.RoleList": { - "description": "RoleList is a collection of Roles Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleList, and will no longer be served in v1.22.", + "io.k8s.apimachinery.pkg.apis.meta.v1.FieldsV1": { + "description": "FieldsV1 stores a set of fields in a data structure like a Trie, in JSON format.\n\nEach key is either a '.' representing the field itself, and will always map to an empty set, or a string representing a sub-field or item. The string will follow one of these four formats: 'f:\u003cname\u003e', where \u003cname\u003e is the name of a field in a struct, or key in a map 'v:\u003cvalue\u003e', where \u003cvalue\u003e is the exact json formatted value of a list item 'i:\u003cindex\u003e', where \u003cindex\u003e is position of a item in a list 'k:\u003ckeys\u003e', where \u003ckeys\u003e is a map of a list item's key fields to their unique values If a key maps to an empty Fields value, the field that key represents is part of the set.\n\nThe exact format is defined in sigs.k8s.io/structured-merge-diff", + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "FieldsV1", + "Scope": "Namespaced" + } + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.GetOptions": { + "description": "GetOptions is the standard query options to the standard REST get call.", "type": "object", - "required": [ - "items" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "Items is a list of Roles", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.rbac.v1beta1.Role" - } - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "metadata": { - "description": "Standard object's metadata.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "resourceVersion": { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "type": "string" } }, "x-fabric8-info": { - "Type": "list", - "Group": "rbac.authorization.k8s.io", - "Version": "v1beta1", - "Kind": "RoleList", + "Type": "object", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "GetOptions", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1beta1.RoleRef": { - "description": "RoleRef contains information that points to the role being used", + "io.k8s.apimachinery.pkg.apis.meta.v1.GroupKind": { + "description": "GroupKind specifies a Group and a Kind, but does not force a version. This is useful for identifying concepts during lookup stages without having partially valid types", "type": "object", "required": [ - "apiGroup", - "kind", - "name" + "group", + "kind" ], "properties": { - "apiGroup": { - "description": "APIGroup is the group for the resource being referenced", + "group": { "type": "string", "default": "" }, "kind": { - "description": "Kind is the type of resource being referenced", - "type": "string", - "default": "" - }, - "name": { - "description": "Name is the name of resource being referenced", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "rbac.authorization.k8s.io", - "Version": "v1beta1", - "Kind": "RoleRef", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "GroupKind", "Scope": "Namespaced" } }, - "io.k8s.api.rbac.v1beta1.Subject": { - "description": "Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.", + "io.k8s.apimachinery.pkg.apis.meta.v1.GroupResource": { + "description": "GroupResource specifies a Group and a Resource, but does not force a version. This is useful for identifying concepts during lookup stages without having partially valid types", "type": "object", "required": [ - "kind", - "name" + "group", + "resource" ], "properties": { - "apiGroup": { - "description": "APIGroup holds the API group of the referenced subject. Defaults to \"\" for ServiceAccount subjects. Defaults to \"rbac.authorization.k8s.io\" for User and Group subjects.", - "type": "string" - }, - "kind": { - "description": "Kind of object being referenced. Values defined by this API group are \"User\", \"Group\", and \"ServiceAccount\". If the Authorizer does not recognized the kind value, the Authorizer should report an error.", + "group": { "type": "string", "default": "" }, - "name": { - "description": "Name of the object being referenced.", + "resource": { "type": "string", "default": "" - }, - "namespace": { - "description": "Namespace of the referenced object. If the object kind is non-namespace, such as \"User\" or \"Group\", and this value is not empty the Authorizer should report an error.", - "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "rbac.authorization.k8s.io", - "Version": "v1beta1", - "Kind": "Subject", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "GroupResource", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.AllocationResult": { - "description": "AllocationResult contains attributes of an allocated resource.", + "io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersion": { + "description": "GroupVersion contains the \"group\" and the \"version\", which uniquely identifies the API.", "type": "object", + "required": [ + "group", + "version" + ], "properties": { - "controller": { - "description": "Controller is the name of the DRA driver which handled the allocation. That driver is also responsible for deallocating the claim. It is empty when the claim can be deallocated without involving a driver.\n\nA driver may allocate devices provided by other drivers, so this driver name here can be different from the driver names listed for the results.\n\nThis is an alpha field and requires enabling the DRAControlPlaneController feature gate.", - "type": "string" - }, - "devices": { - "description": "Devices is the result of allocating devices.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceAllocationResult" + "group": { + "type": "string", + "default": "" }, - "nodeSelector": { - "description": "NodeSelector defines where the allocated resources are available. If unset, they are available everywhere.", - "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelector" + "version": { + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "AllocationResult", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "GroupVersion", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.BasicDevice": { - "description": "BasicDevice defines one device instance.", + "io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionForDiscovery": { + "description": "GroupVersion contains the \"group/version\" and \"version\" string of a version. It is made a struct to keep extensibility.", "type": "object", + "required": [ + "groupVersion", + "version" + ], "properties": { - "attributes": { - "description": "Attributes defines the set of attributes for this device. The name of each attribute must be unique in that set.\n\nThe maximum number of attributes and capacities combined is 32.", - "type": "object", - "additionalProperties": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceAttribute" - } + "groupVersion": { + "description": "groupVersion specifies the API group and version in the form \"group/version\"", + "type": "string", + "default": "" }, - "capacity": { - "description": "Capacity defines the set of capacities for this device. The name of each capacity must be unique in that set.\n\nThe maximum number of attributes and capacities combined is 32.", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - } + "version": { + "description": "version specifies the version in the form of \"version\". This is to save the clients the trouble of splitting the GroupVersion.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "BasicDevice", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "GroupVersionForDiscovery", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.CELDeviceSelector": { - "description": "CELDeviceSelector contains a CEL expression for selecting a device.", + "io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind": { + "description": "GroupVersionKind unambiguously identifies a kind. It doesn't anonymously include GroupVersion to avoid automatic coercion. It doesn't use a GroupVersion to avoid custom marshalling", "type": "object", "required": [ - "expression" + "group", + "version", + "kind" ], "properties": { - "expression": { - "description": "Expression is a CEL expression which evaluates a single device. It must evaluate to true when the device under consideration satisfies the desired criteria, and false when it does not. Any other result is an error and causes allocation of devices to abort.\n\nThe expression's input is an object named \"device\", which carries the following properties:\n - driver (string): the name of the driver which defines this device.\n - attributes (map[string]object): the device's attributes, grouped by prefix\n (e.g. device.attributes[\"dra.example.com\"] evaluates to an object with all\n of the attributes which were prefixed by \"dra.example.com\".\n - capacity (map[string]object): the device's capacities, grouped by prefix.\n\nExample: Consider a device with driver=\"dra.example.com\", which exposes two attributes named \"model\" and \"ext.example.com/family\" and which exposes one capacity named \"modules\". This input to this expression would have the following fields:\n\n device.driver\n device.attributes[\"dra.example.com\"].model\n device.attributes[\"ext.example.com\"].family\n device.capacity[\"dra.example.com\"].modules\n\nThe device.driver field can be used to check for a specific driver, either as a high-level precondition (i.e. you only want to consider devices from this driver) or as part of a multi-clause expression that is meant to consider devices from different drivers.\n\nThe value type of each attribute is defined by the device definition, and users who write these expressions must consult the documentation for their specific drivers. The value type of each capacity is Quantity.\n\nIf an unknown prefix is used as a lookup in either device.attributes or device.capacity, an empty map will be returned. Any reference to an unknown field will cause an evaluation error and allocation to abort.\n\nA robust expression should check for the existence of attributes before referencing them.\n\nFor ease of use, the cel.bind() function is enabled, and can be used to simplify expressions that access multiple attributes with the same domain. For example:\n\n cel.bind(dra, device.attributes[\"dra.example.com\"], dra.someBool \u0026\u0026 dra.anotherBool)", + "group": { + "type": "string", + "default": "" + }, + "kind": { + "type": "string", + "default": "" + }, + "version": { "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "CELDeviceSelector", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "GroupVersionKind", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.Device": { - "description": "Device represents one individual hardware instance that can be selected based on its attributes. Besides the name, exactly one field must be set.", + "io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionResource": { + "description": "GroupVersionResource unambiguously identifies a resource. It doesn't anonymously include GroupVersion to avoid automatic coercion. It doesn't use a GroupVersion to avoid custom marshalling", "type": "object", "required": [ - "name" + "group", + "version", + "resource" ], "properties": { - "basic": { - "description": "Basic defines one device instance.", - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.BasicDevice" + "group": { + "type": "string", + "default": "" }, - "name": { - "description": "Name is unique identifier among all devices managed by the driver in the pool. It must be a DNS label.", + "resource": { + "type": "string", + "default": "" + }, + "version": { "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "Device", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "GroupVersionResource", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.DeviceAllocationConfiguration": { - "description": "DeviceAllocationConfiguration gets embedded in an AllocationResult.", + "io.k8s.apimachinery.pkg.apis.meta.v1.InternalEvent": { + "description": "InternalEvent makes watch.Event versioned", "type": "object", "required": [ - "source" + "Type", + "Object" ], "properties": { - "opaque": { - "description": "Opaque provides driver-specific configuration parameters.", - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.OpaqueDeviceConfiguration" - }, - "requests": { - "description": "Requests lists the names of requests where the configuration applies. If empty, its applies to all requests.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "Object": { + "description": "Object is:\n * If Type is Added or Modified: the new state of the object.\n * If Type is Deleted: the state of the object immediately before deletion.\n * If Type is Bookmark: the object (instance of a type being watched) where\n only ResourceVersion field is set. On successful restart of watch from a\n bookmark resourceVersion, client is guaranteed to not get repeat event\n nor miss any events.\n * If Type is Error: *api.Status is recommended; other types may make sense\n depending on context.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.Object" }, - "source": { - "description": "Source records whether the configuration comes from a class and thus is not something that a normal user would have been able to set or from a claim.", + "Type": { "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "DeviceAllocationConfiguration", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "InternalEvent", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.DeviceAllocationResult": { - "description": "DeviceAllocationResult is the result of allocating devices.", + "io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector": { + "description": "A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all objects. A null label selector matches no objects.", "type": "object", "properties": { - "config": { - "description": "This field is a combination of all the claim and class configuration parameters. Drivers can distinguish between those based on a flag.\n\nThis includes configuration parameters for drivers which have no allocated devices in the result because it is up to the drivers which configuration parameters they support. They can silently ignore unknown configuration parameters.", + "matchExpressions": { + "description": "matchExpressions is a list of label selector requirements. The requirements are ANDed.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceAllocationConfiguration" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelectorRequirement" }, "x-kubernetes-list-type": "atomic" }, - "results": { - "description": "Results lists all allocated devices.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceRequestAllocationResult" - }, - "x-kubernetes-list-type": "atomic" + "matchLabels": { + "description": "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is \"key\", the operator is \"In\", and the values array contains only \"value\". The requirements are ANDed.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "DeviceAllocationResult", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "LabelSelector", "Scope": "Namespaced" - } - }, - "io.k8s.api.resource.v1alpha3.DeviceAttribute": { - "description": "DeviceAttribute must have exactly one field set.", - "type": "object", - "properties": { - "bool": { - "description": "BoolValue is a true/false value.", - "type": "boolean" - }, - "int": { - "description": "IntValue is a number.", - "type": "integer", - "format": "int64" - }, - "string": { - "description": "StringValue is a string. Must not be longer than 64 characters.", - "type": "string" - }, - "version": { - "description": "VersionValue is a semantic version according to semver.org spec 2.0.0. Must not be longer than 64 characters.", - "type": "string" - } }, - "x-fabric8-info": { - "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "DeviceAttribute", - "Scope": "Namespaced" - } + "x-kubernetes-map-type": "atomic" }, - "io.k8s.api.resource.v1alpha3.DeviceClaim": { - "description": "DeviceClaim defines how to request devices with a ResourceClaim.", + "io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelectorRequirement": { + "description": "A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.", "type": "object", + "required": [ + "key", + "operator" + ], "properties": { - "config": { - "description": "This field holds configuration for multiple potential drivers which could satisfy requests in this claim. It is ignored while allocating the claim.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceClaimConfiguration" - }, - "x-kubernetes-list-type": "atomic" - }, - "constraints": { - "description": "These constraints must be satisfied by the set of devices that get allocated for the claim.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceConstraint" - }, - "x-kubernetes-list-type": "atomic" + "key": { + "description": "key is the label key that the selector applies to.", + "type": "string", + "default": "" }, - "requests": { - "description": "Requests represent individual requests for distinct devices which must all be satisfied. If empty, nothing needs to be allocated.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceRequest" - }, - "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "DeviceClaim", - "Scope": "Namespaced" - } - }, - "io.k8s.api.resource.v1alpha3.DeviceClaimConfiguration": { - "description": "DeviceClaimConfiguration is used for configuration parameters in DeviceClaim.", - "type": "object", - "properties": { - "opaque": { - "description": "Opaque provides driver-specific configuration parameters.", - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.OpaqueDeviceConfiguration" + "operator": { + "description": "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", + "type": "string", + "default": "" }, - "requests": { - "description": "Requests lists the names of requests where the configuration applies. If empty, it applies to all requests.", + "values": { + "description": "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", "type": "array", "items": { "type": "string", @@ -47589,316 +52993,349 @@ }, "x-fabric8-info": { "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "DeviceClaimConfiguration", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "LabelSelectorRequirement", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.DeviceClass": { - "description": "DeviceClass is a vendor- or admin-provided resource that contains device configuration and selectors. It can be referenced in the device requests of a claim to apply these presets. Cluster scoped.\n\nThis is an alpha type and requires enabling the DynamicResourceAllocation feature gate.", + "io.k8s.apimachinery.pkg.apis.meta.v1.List": { + "description": "List holds a list of objects, which may not be known by the server.", "type": "object", "required": [ - "spec" + "items" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "items": { + "description": "List of objects", + "type": "array", + "items": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + } + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard object metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "Spec defines what can be allocated and how to configure it.\n\nThis is mutable. Consumers have to be prepared for classes changing at any time, either because they get updated or replaced. Claim allocations are done once based on whatever was set in classes at the time of allocation.\n\nChanging the spec automatically increments the metadata.generation number.", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceClassSpec" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "object", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "DeviceClass", - "Scope": "Clustered" + "Type": "list", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "List", + "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.DeviceClassConfiguration": { - "description": "DeviceClassConfiguration is used in DeviceClass.", + "io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta": { + "description": "ListMeta describes metadata that synthetic resources must have, including lists and various status objects. A resource may have only one of {ObjectMeta, ListMeta}.", "type": "object", "properties": { - "opaque": { - "description": "Opaque provides driver-specific configuration parameters.", - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.OpaqueDeviceConfiguration" + "continue": { + "description": "continue may be set if the user set a limit on the number of items returned, and indicates that the server has more data available. The value is opaque and may be used to issue another request to the endpoint that served this list to retrieve the next set of available objects. Continuing a consistent list may not be possible if the server configuration has changed or more than a few minutes have passed. The resourceVersion field returned when using this continue value will be identical to the value in the first response, unless you have received this token from an error message.", + "type": "string" + }, + "remainingItemCount": { + "description": "remainingItemCount is the number of subsequent items in the list which are not included in this list response. If the list request contained label or field selectors, then the number of remaining items is unknown and the field will be left unset and omitted during serialization. If the list is complete (either because it is not chunking or because this is the last chunk), then there are no more remaining items and this field will be left unset and omitted during serialization. Servers older than v1.15 do not set this field. The intended use of the remainingItemCount is *estimating* the size of a collection. Clients should not rely on the remainingItemCount to be set or to be exact.", + "type": "integer", + "format": "int64" + }, + "resourceVersion": { + "description": "String that identifies the server's internal version of this object that can be used by clients to determine when objects have changed. Value must be treated as opaque by clients and passed unmodified back to the server. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency", + "type": "string" + }, + "selfLink": { + "description": "Deprecated: selfLink is a legacy read-only field that is no longer populated by the system.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "DeviceClassConfiguration", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "ListMeta", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.DeviceClassList": { - "description": "DeviceClassList is a collection of classes.", + "io.k8s.apimachinery.pkg.apis.meta.v1.ListOptions": { + "description": "ListOptions is the query options to a standard REST list call.", "type": "object", - "required": [ - "items" - ], "properties": { + "allowWatchBookmarks": { + "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored.", + "type": "boolean" + }, "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "Items is the list of resource classes.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceClass" - } + "continue": { + "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "type": "string" + }, + "fieldSelector": { + "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", + "type": "string" }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "metadata": { - "description": "Standard list metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "labelSelector": { + "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", + "type": "string" + }, + "limit": { + "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "type": "integer", + "format": "int64" + }, + "resourceVersion": { + "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "type": "string" + }, + "resourceVersionMatch": { + "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "type": "string" + }, + "sendInitialEvents": { + "description": "`sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic \"Bookmark\" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `\"k8s.io/initial-events-end\": \"true\"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched.\n\nWhen `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan\n is interpreted as \"data at least as new as the provided `resourceVersion`\"\n and the bookmark event is send when the state is synced\n to a `resourceVersion` at least as fresh as the one provided by the ListOptions.\n If `resourceVersion` is unset, this is interpreted as \"consistent read\" and the\n bookmark event is send when the state is synced at least to the moment\n when request started being processed.\n- `resourceVersionMatch` set to any other value or unset\n Invalid error is returned.\n\nDefaults to true if `resourceVersion=\"\"` or `resourceVersion=\"0\"` (for backward compatibility reasons) and to false otherwise.", + "type": "boolean" + }, + "timeoutSeconds": { + "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "type": "integer", + "format": "int64" + }, + "watch": { + "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "type": "boolean" } }, "x-fabric8-info": { - "Type": "list", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "DeviceClassList", + "Type": "object", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "ListOptions", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.DeviceClassSpec": { - "description": "DeviceClassSpec is used in a [DeviceClass] to define what can be allocated and how to configure it.", + "io.k8s.apimachinery.pkg.apis.meta.v1.ManagedFieldsEntry": { + "description": "ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of the resource that the fieldset applies to.", "type": "object", "properties": { - "config": { - "description": "Config defines configuration parameters that apply to each device that is claimed via this class. Some classses may potentially be satisfied by multiple drivers, so each instance of a vendor configuration applies to exactly one driver.\n\nThey are passed to the driver, but are not considered while allocating the claim.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceClassConfiguration" - }, - "x-kubernetes-list-type": "atomic" + "apiVersion": { + "description": "APIVersion defines the version of this resource that this field set applies to. The format is \"group/version\" just like the top-level APIVersion field. It is necessary to track the version of a field set because it cannot be automatically converted.", + "type": "string" }, - "selectors": { - "description": "Each selector must be satisfied by a device which is claimed via this class.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceSelector" - }, - "x-kubernetes-list-type": "atomic" + "fieldsType": { + "description": "FieldsType is the discriminator for the different fields format and version. There is currently only one possible value: \"FieldsV1\"", + "type": "string" }, - "suitableNodes": { - "description": "Only nodes matching the selector will be considered by the scheduler when trying to find a Node that fits a Pod when that Pod uses a claim that has not been allocated yet *and* that claim gets allocated through a control plane controller. It is ignored when the claim does not use a control plane controller for allocation.\n\nSetting this field is optional. If unset, all Nodes are candidates.\n\nThis is an alpha field and requires enabling the DRAControlPlaneController feature gate.", - "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelector" + "fieldsV1": { + "description": "FieldsV1 holds the first JSON version format as described in the \"FieldsV1\" type.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.FieldsV1" + }, + "manager": { + "description": "Manager is an identifier of the workflow managing these fields.", + "type": "string" + }, + "operation": { + "description": "Operation is the type of operation which lead to this ManagedFieldsEntry being created. The only valid values for this field are 'Apply' and 'Update'.", + "type": "string" + }, + "subresource": { + "description": "Subresource is the name of the subresource used to update that object, or empty string if the object was updated through the main resource. The value of this field is used to distinguish between managers, even if they share the same name. For example, a status update will be distinct from a regular update using the same manager name. Note that the APIVersion field is not related to the Subresource field and it always corresponds to the version of the main resource.", + "type": "string" + }, + "time": { + "description": "Time is the timestamp of when the ManagedFields entry was added. The timestamp will also be updated if a field is added, the manager changes any of the owned fields value or removes a field. The timestamp does not update when a field is removed from the entry because another manager took it over.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" } }, "x-fabric8-info": { "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "DeviceClassSpec", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "ManagedFieldsEntry", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.DeviceConfiguration": { - "description": "DeviceConfiguration must have exactly one field set. It gets embedded inline in some other structs which have other fields, so field names must not conflict with those.", - "type": "object", - "properties": { - "opaque": { - "description": "Opaque provides driver-specific configuration parameters.", - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.OpaqueDeviceConfiguration" - } - }, + "io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime": { + "description": "MicroTime is version of Time with microsecond level precision.", + "type": "string", + "format": "date-time", "x-fabric8-info": { "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "DeviceConfiguration", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "MicroTime", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.DeviceConstraint": { - "description": "DeviceConstraint must have exactly one field set besides Requests.", + "io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta": { + "description": "ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create.", "type": "object", "properties": { - "matchAttribute": { - "description": "MatchAttribute requires that all devices in question have this attribute and that its type and value are the same across those devices.\n\nFor example, if you specified \"dra.example.com/numa\" (a hypothetical example!), then only devices in the same NUMA node will be chosen. A device which does not have that attribute will not be chosen. All devices should use a value of the same type for this attribute because that is part of its specification, but if one device doesn't, then it also will not be chosen.\n\nMust include the domain qualifier.", - "type": "string" + "annotations": { + "description": "Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } }, - "requests": { - "description": "Requests is a list of the one or more requests in this claim which must co-satisfy this constraint. If a request is fulfilled by multiple devices, then all of the devices must satisfy the constraint. If this is not specified, this constraint applies to all requests in this claim.", + "creationTimestamp": { + "description": "CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC.\n\nPopulated by the system. Read-only. Null for lists. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "deletionGracePeriodSeconds": { + "description": "Number of seconds allowed for this object to gracefully terminate before it will be removed from the system. Only set when deletionTimestamp is also set. May only be shortened. Read-only.", + "type": "integer", + "format": "int64" + }, + "deletionTimestamp": { + "description": "DeletionTimestamp is RFC 3339 date and time at which this resource will be deleted. This field is set by the server when a graceful deletion is requested by the user, and is not directly settable by a client. The resource is expected to be deleted (no longer visible from resource lists, and not reachable by name) after the time in this field, once the finalizers list is empty. As long as the finalizers list contains items, deletion is blocked. Once the deletionTimestamp is set, this value may not be unset or be set further into the future, although it may be shortened or the resource may be deleted prior to this time. For example, a user may request that a pod is deleted in 30 seconds. The Kubelet will react by sending a graceful termination signal to the containers in the pod. After that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL) to the container and after cleanup, remove the pod from the API. In the presence of network partitions, this object may still exist after this timestamp, until an administrator or automated process can determine the resource is fully terminated. If not set, graceful deletion of the object has not been requested.\n\nPopulated by the system when a graceful deletion is requested. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "finalizers": { + "description": "Must be empty before the object is deleted from the registry. Each entry is an identifier for the responsible component that will remove the entry from the list. If the deletionTimestamp of the object is non-nil, entries in this list can only be removed. Finalizers may be processed and removed in any order. Order is NOT enforced because it introduces significant risk of stuck finalizers. finalizers is a shared field, any actor with permission can reorder it. If the finalizer list is processed in order, then this can lead to a situation in which the component responsible for the first finalizer in the list is waiting for a signal (field value, external system, or other) produced by a component responsible for a finalizer later in the list, resulting in a deadlock. Without enforced ordering finalizers are free to order amongst themselves and are not vulnerable to ordering changes in the list.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "DeviceConstraint", - "Scope": "Namespaced" - } - }, - "io.k8s.api.resource.v1alpha3.DeviceRequest": { - "description": "DeviceRequest is a request for devices required for a claim. This is typically a request for a single resource like a device, but can also ask for several identical devices.\n\nA DeviceClassName is currently required. Clients must check that it is indeed set. It's absence indicates that something changed in a way that is not supported by the client yet, in which case it must refuse to handle the request.", - "type": "object", - "required": [ - "name", - "deviceClassName" - ], - "properties": { - "adminAccess": { - "description": "AdminAccess indicates that this is a claim for administrative access to the device(s). Claims with AdminAccess are expected to be used for monitoring or other management services for a device. They ignore all ordinary claims to the device with respect to access modes and any resource allocations.", - "type": "boolean", - "default": false + "x-kubernetes-list-type": "set", + "x-kubernetes-patch-strategy": "merge" }, - "allocationMode": { - "description": "AllocationMode and its related fields define how devices are allocated to satisfy this request. Supported values are:\n\n- ExactCount: This request is for a specific number of devices.\n This is the default. The exact number is provided in the\n count field.\n\n- All: This request is for all of the matching devices in a pool.\n Allocation will fail if some devices are already allocated,\n unless adminAccess is requested.\n\nIf AlloctionMode is not specified, the default mode is ExactCount. If the mode is ExactCount and count is not specified, the default count is one. Any other requests must specify this field.\n\nMore modes may get added in the future. Clients must refuse to handle requests with unknown modes.", + "generateName": { + "description": "GenerateName is an optional prefix, used by the server, to generate a unique name ONLY IF the Name field has not been provided. If this field is used, the name returned to the client will be different than the name passed. This value will also be combined with a unique suffix. The provided value has the same validation rules as the Name field, and may be truncated by the length of the suffix required to make the value unique on the server.\n\nIf this field is specified and the generated name exists, the server will return a 409.\n\nApplied only if Name is not specified. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency", "type": "string" }, - "count": { - "description": "Count is used only when the count mode is \"ExactCount\". Must be greater than zero. If AllocationMode is ExactCount and this field is not specified, the default is one.", + "generation": { + "description": "A sequence number representing a specific generation of the desired state. Populated by the system. Read-only.", "type": "integer", "format": "int64" }, - "deviceClassName": { - "description": "DeviceClassName references a specific DeviceClass, which can define additional configuration and selectors to be inherited by this request.\n\nA class is required. Which classes are available depends on the cluster.\n\nAdministrators may use this to restrict which devices may get requested by only installing classes with selectors for permitted devices. If users are free to request anything without restrictions, then administrators can create an empty DeviceClass for users to reference.", - "type": "string", - "default": "" + "labels": { + "description": "Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "managedFields": { + "description": "ManagedFields maps workflow-id and version to the set of fields that are managed by that workflow. This is mostly for internal housekeeping, and users typically shouldn't need to set or understand this field. A workflow can be the user's name, a controller's name, or the name of a specific apply path like \"ci-cd\". The set of fields is always in the version that the workflow used when modifying the object.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ManagedFieldsEntry" + }, + "x-kubernetes-list-type": "atomic" }, "name": { - "description": "Name can be used to reference this request in a pod.spec.containers[].resources.claims entry and in a constraint of the claim.\n\nMust be a DNS label.", - "type": "string", - "default": "" + "description": "Name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names", + "type": "string" }, - "selectors": { - "description": "Selectors define criteria which must be satisfied by a specific device in order for that device to be considered for this request. All selectors must be satisfied for a device to be considered.", + "namespace": { + "description": "Namespace defines the space within which each name must be unique. An empty namespace is equivalent to the \"default\" namespace, but \"default\" is the canonical representation. Not all objects are required to be scoped to a namespace - the value of this field for those objects will be empty.\n\nMust be a DNS_LABEL. Cannot be updated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces", + "type": "string" + }, + "ownerReferences": { + "description": "List of objects depended by this object. If ALL objects in the list have been deleted, this object will be garbage collected. If this object is managed by a controller, then an entry in this list will point to this controller, with the controller field set to true. There cannot be more than one managing controller.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceSelector" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.OwnerReference" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-map-keys": [ + "uid" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "uid", + "x-kubernetes-patch-strategy": "merge" + }, + "resourceVersion": { + "description": "An opaque value that represents the internal version of this object that can be used by clients to determine when objects have changed. May be used for optimistic concurrency, change detection, and the watch operation on a resource or set of resources. Clients must treat these values as opaque and passed unmodified back to the server. They may only be valid for a particular resource or set of resources.\n\nPopulated by the system. Read-only. Value must be treated as opaque by clients and . More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency", + "type": "string" + }, + "selfLink": { + "description": "Deprecated: selfLink is a legacy read-only field that is no longer populated by the system.", + "type": "string" + }, + "uid": { + "description": "UID is the unique in time and space value for this object. It is typically generated by the server on successful creation of a resource and is not allowed to change on PUT operations.\n\nPopulated by the system. Read-only. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "DeviceRequest", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "ObjectMeta", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.DeviceRequestAllocationResult": { - "description": "DeviceRequestAllocationResult contains the allocation result for one request.", + "io.k8s.apimachinery.pkg.apis.meta.v1.OwnerReference": { + "description": "OwnerReference contains enough information to let you identify an owning object. An owning object must be in the same namespace as the dependent, or be cluster-scoped, so there is no namespace field.", "type": "object", "required": [ - "request", - "driver", - "pool", - "device" + "apiVersion", + "kind", + "name", + "uid" ], "properties": { - "device": { - "description": "Device references one device instance via its name in the driver's resource pool. It must be a DNS label.", + "apiVersion": { + "description": "API version of the referent.", "type": "string", "default": "" }, - "driver": { - "description": "Driver specifies the name of the DRA driver whose kubelet plugin should be invoked to process the allocation once the claim is needed on a node.\n\nMust be a DNS subdomain and should end with a DNS domain owned by the vendor of the driver.", + "blockOwnerDeletion": { + "description": "If true, AND if the owner has the \"foregroundDeletion\" finalizer, then the owner cannot be deleted from the key-value store until this reference is removed. See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion for how the garbage collector interacts with this field and enforces the foreground deletion. Defaults to false. To set this field, a user needs \"delete\" permission of the owner, otherwise 422 (Unprocessable Entity) will be returned.", + "type": "boolean" + }, + "controller": { + "description": "If true, this reference points to the managing controller.", + "type": "boolean" + }, + "kind": { + "description": "Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string", "default": "" }, - "pool": { - "description": "This name together with the driver name and the device name field identify which device was allocated (`\u003cdriver name\u003e/\u003cpool name\u003e/\u003cdevice name\u003e`).\n\nMust not be longer than 253 characters and may contain one or more DNS sub-domains separated by slashes.", + "name": { + "description": "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names", "type": "string", "default": "" }, - "request": { - "description": "Request is the name of the request in the claim which caused this device to be allocated. Multiple devices may have been allocated per request.", + "uid": { + "description": "UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "DeviceRequestAllocationResult", - "Scope": "Namespaced" - } - }, - "io.k8s.api.resource.v1alpha3.DeviceSelector": { - "description": "DeviceSelector must have exactly one field set.", - "type": "object", - "properties": { - "cel": { - "description": "CEL contains a CEL expression for selecting a device.", - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.CELDeviceSelector" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "DeviceSelector", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "OwnerReference", "Scope": "Namespaced" - } - }, - "io.k8s.api.resource.v1alpha3.OpaqueDeviceConfiguration": { - "description": "OpaqueDeviceConfiguration contains configuration parameters for a driver in a format defined by the driver vendor.", - "type": "object", - "required": [ - "driver", - "parameters" - ], - "properties": { - "driver": { - "description": "Driver is used to determine which kubelet plugin needs to be passed these configuration parameters.\n\nAn admission policy provided by the driver developer could use this to decide whether it needs to validate them.\n\nMust be a DNS subdomain and should end with a DNS domain owned by the vendor of the driver.", - "type": "string", - "default": "" - }, - "parameters": { - "description": "Parameters can contain arbitrary data. It is the responsibility of the driver developer to handle validation and versioning. Typically this includes self-identification and a version (\"kind\" + \"apiVersion\" for Kubernetes types), with conversion between different versions.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - } }, - "x-fabric8-info": { - "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "OpaqueDeviceConfiguration", - "Scope": "Namespaced" - } + "x-kubernetes-map-type": "atomic" }, - "io.k8s.api.resource.v1alpha3.PodSchedulingContext": { - "description": "PodSchedulingContext objects hold information that is needed to schedule a Pod with ResourceClaims that use \"WaitForFirstConsumer\" allocation mode.\n\nThis is an alpha type and requires enabling the DRAControlPlaneController feature gate.", + "io.k8s.apimachinery.pkg.apis.meta.v1.PartialObjectMetadata": { + "description": "PartialObjectMetadata is a generic representation of any object with ObjectMeta. It allows clients to get access to a particular ObjectMeta schema without knowing the details of the version.", "type": "object", - "required": [ - "spec" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -47909,31 +53346,21 @@ "type": "string" }, "metadata": { - "description": "Standard object metadata", + "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "Spec describes where resources for the Pod are needed.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.PodSchedulingContextSpec" - }, - "status": { - "description": "Status describes where resources for the Pod can be allocated.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.PodSchedulingContextStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "PodSchedulingContext", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "PartialObjectMetadata", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.PodSchedulingContextList": { - "description": "PodSchedulingContextList is a collection of Pod scheduling objects.", + "io.k8s.apimachinery.pkg.apis.meta.v1.PartialObjectMetadataList": { + "description": "PartialObjectMetadataList contains a list of objects containing only their metadata", "type": "object", "required": [ "items" @@ -47944,11 +53371,11 @@ "type": "string" }, "items": { - "description": "Items is the list of PodSchedulingContext objects.", + "description": "items contains each of the included items.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.PodSchedulingContext" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PartialObjectMetadata" } }, "kind": { @@ -47956,25 +53383,40 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "PodSchedulingContextList", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "PartialObjectMetadataList", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.PodSchedulingContextSpec": { - "description": "PodSchedulingContextSpec describes where resources for the Pod are needed.", + "io.k8s.apimachinery.pkg.apis.meta.v1.Patch": { + "description": "Patch is provided to give a concrete name and type to the Kubernetes PATCH request body.", + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "Patch", + "Scope": "Namespaced" + } + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.PatchOptions": { + "description": "PatchOptions may be provided when patching an API object. PatchOptions is meant to be a superset of UpdateOptions.", "type": "object", "properties": { - "potentialNodes": { - "description": "PotentialNodes lists nodes where the Pod might be able to run.\n\nThe size of this field is limited to 128. This is large enough for many clusters. Larger clusters may need more attempts to find a node that suits all pending resources. This may get increased in the future, but not reduced.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "dryRun": { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", "type": "array", "items": { "type": "string", @@ -47982,363 +53424,439 @@ }, "x-kubernetes-list-type": "atomic" }, - "selectedNode": { - "description": "SelectedNode is the node for which allocation of ResourceClaims that are referenced by the Pod and that use \"WaitForFirstConsumer\" allocation is to be attempted.", + "fieldManager": { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", + "type": "string" + }, + "fieldValidation": { + "description": "fieldValidation instructs the server on how to handle objects in the request (POST/PUT/PATCH) containing unknown or duplicate fields. Valid values are: - Ignore: This will ignore any unknown fields that are silently dropped from the object, and will ignore all but the last duplicate field that the decoder encounters. This is the default behavior prior to v1.23. - Warn: This will send a warning via the standard warning response header for each unknown field that is dropped from the object, and for each duplicate field that is encountered. The request will still succeed if there are no other errors, and will only persist the last of any duplicate fields. This is the default in v1.23+ - Strict: This will fail the request with a BadRequest error if any unknown fields would be dropped from the object, or if any duplicate fields are present. The error returned from the server will contain all unknown and duplicate fields encountered.", + "type": "string" + }, + "force": { + "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", + "type": "boolean" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "PatchOptions", + "Scope": "Namespaced" + } + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.Preconditions": { + "description": "Preconditions must be fulfilled before an operation (update, delete, etc.) is carried out.", + "type": "object", + "properties": { + "resourceVersion": { + "description": "Specifies the target ResourceVersion", + "type": "string" + }, + "uid": { + "description": "Specifies the target UID.", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "PodSchedulingContextSpec", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "Preconditions", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.PodSchedulingContextStatus": { - "description": "PodSchedulingContextStatus describes where resources for the Pod can be allocated.", + "io.k8s.apimachinery.pkg.apis.meta.v1.RootPaths": { + "description": "RootPaths lists the paths available at root. For example: \"/healthz\", \"/apis\".", "type": "object", + "required": [ + "paths" + ], "properties": { - "resourceClaims": { - "description": "ResourceClaims describes resource availability for each pod.spec.resourceClaim entry where the corresponding ResourceClaim uses \"WaitForFirstConsumer\" allocation mode.", + "paths": { + "description": "paths are the paths available at root.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourceClaimSchedulingStatus" + "type": "string", + "default": "" }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "PodSchedulingContextStatus", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "RootPaths", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.ResourceClaim": { - "description": "ResourceClaim describes a request for access to resources in the cluster, for use by workloads. For example, if a workload needs an accelerator device with specific properties, this is how that request is expressed. The status stanza tracks whether this claim has been satisfied and what specific resources have been allocated.\n\nThis is an alpha type and requires enabling the DynamicResourceAllocation feature gate.", + "io.k8s.apimachinery.pkg.apis.meta.v1.ServerAddressByClientCIDR": { + "description": "ServerAddressByClientCIDR helps the client to determine the server address that they should use, depending on the clientCIDR that they match.", "type": "object", "required": [ - "spec" + "clientCIDR", + "serverAddress" ], + "properties": { + "clientCIDR": { + "description": "The CIDR with which clients can match their IP to figure out the server address that they should use.", + "type": "string", + "default": "" + }, + "serverAddress": { + "description": "Address of this server, suitable for a client that matches the above CIDR. This can be a hostname, hostname:port, IP or IP:port.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "ServerAddressByClientCIDR", + "Scope": "Namespaced" + } + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.Status": { + "description": "Status is a return value for calls that don't return other objects.", + "type": "object", "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "code": { + "description": "Suggested HTTP return code for this status, 0 if not set.", + "type": "integer", + "format": "int32" + }, + "details": { + "description": "Extended data associated with the reason. Each reason may define its own extended details. This field is optional and the data returned is not guaranteed to conform to any schema except that defined by the reason type.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusDetails", + "x-kubernetes-list-type": "atomic" + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, + "message": { + "description": "A human-readable description of the status of this operation.", + "type": "string" + }, "metadata": { - "description": "Standard object metadata", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" }, - "spec": { - "description": "Spec describes what is being requested and how to configure it. The spec is immutable.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourceClaimSpec" + "reason": { + "description": "A machine-readable description of why this operation is in the \"Failure\" status. If this value is empty there is no information available. A Reason clarifies an HTTP status code but does not override it.", + "type": "string" + }, + "status": { + "description": "Status of the operation. One of: \"Success\" or \"Failure\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "Status", + "Scope": "Namespaced" + } + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.StatusCause": { + "description": "StatusCause provides more information about an api.Status failure, including cases when multiple errors are encountered.", + "type": "object", + "properties": { + "field": { + "description": "The field of the resource that has caused this error, as named by its JSON serialization. May include dot and postfix notation for nested attributes. Arrays are zero-indexed. Fields may appear more than once in an array of causes due to fields having multiple errors. Optional.\n\nExamples:\n \"name\" - the field \"name\" on the current resource\n \"items[0].name\" - the field \"name\" on the first array entry in \"items\"", + "type": "string" + }, + "message": { + "description": "A human-readable description of the cause of the error. This field may be presented as-is to a reader.", + "type": "string" }, - "status": { - "description": "Status describes whether the claim is ready to use and what has been allocated.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourceClaimStatus" + "reason": { + "description": "A machine-readable description of the cause of the error. If this value is empty there is no information available.", + "type": "string" } }, "x-fabric8-info": { - "Type": "object", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "ResourceClaim", + "Type": "nested", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "StatusCause", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.ResourceClaimConsumerReference": { - "description": "ResourceClaimConsumerReference contains enough information to let you locate the consumer of a ResourceClaim. The user must be a resource in the same namespace as the ResourceClaim.", + "io.k8s.apimachinery.pkg.apis.meta.v1.StatusDetails": { + "description": "StatusDetails is a set of additional properties that MAY be set by the server to provide additional information about a response. The Reason field of a Status object defines what attributes will be set. Clients must ignore fields that do not match the defined type of each attribute, and should assume that any attribute may be empty, invalid, or under defined.", "type": "object", - "required": [ - "resource", - "name", - "uid" - ], "properties": { - "apiGroup": { - "description": "APIGroup is the group for the resource being referenced. It is empty for the core API. This matches the group in the APIVersion that is used when creating the resources.", + "causes": { + "description": "The Causes array includes more details associated with the StatusReason failure. Not all StatusReasons may provide detailed causes.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusCause" + }, + "x-kubernetes-list-type": "atomic" + }, + "group": { + "description": "The group attribute of the resource associated with the status StatusReason.", + "type": "string" + }, + "kind": { + "description": "The kind attribute of the resource associated with the status StatusReason. On some operations may differ from the requested resource Kind. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "name": { - "description": "Name is the name of resource being referenced.", - "type": "string", - "default": "" + "description": "The name attribute of the resource associated with the status StatusReason (when there is a single name which can be described).", + "type": "string" }, - "resource": { - "description": "Resource is the type of resource being referenced, for example \"pods\".", - "type": "string", - "default": "" + "retryAfterSeconds": { + "description": "If specified, the time in seconds before the operation should be retried. Some errors may indicate the client must take an alternate action - for those errors this field may indicate how long to wait before taking the alternate action.", + "type": "integer", + "format": "int32" }, "uid": { - "description": "UID identifies exactly one incarnation of the resource.", - "type": "string", - "default": "" + "description": "UID of the resource. (when there is a single resource which can be described). More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "ResourceClaimConsumerReference", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "StatusDetails", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.ResourceClaimList": { - "description": "ResourceClaimList is a collection of claims.", + "io.k8s.apimachinery.pkg.apis.meta.v1.Table": { + "description": "Table is a tabular representation of a set of API resources. The server transforms the object into a set of preferred columns for quickly reviewing the objects.", "type": "object", "required": [ - "items" + "columnDefinitions", + "rows" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "Items is the list of resource claims.", + "columnDefinitions": { + "description": "columnDefinitions describes each column in the returned items array. The number of cells per row will always match the number of column definitions.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourceClaim" - } + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.TableColumnDefinition" + }, + "x-kubernetes-list-type": "atomic" }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard list metadata", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + }, + "rows": { + "description": "rows is the list of items in the table.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.TableRow" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "list", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "ResourceClaimList", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "Table", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.ResourceClaimSchedulingStatus": { - "description": "ResourceClaimSchedulingStatus contains information about one particular ResourceClaim with \"WaitForFirstConsumer\" allocation mode.", + "io.k8s.apimachinery.pkg.apis.meta.v1.TableColumnDefinition": { + "description": "TableColumnDefinition contains information about a column returned in the Table.", "type": "object", "required": [ - "name" + "name", + "type", + "format", + "description", + "priority" ], "properties": { - "name": { - "description": "Name matches the pod.spec.resourceClaims[*].Name field.", + "description": { + "description": "description is a human readable description of this column.", "type": "string", "default": "" }, - "unsuitableNodes": { - "description": "UnsuitableNodes lists nodes that the ResourceClaim cannot be allocated for.\n\nThe size of this field is limited to 128, the same as for PodSchedulingSpec.PotentialNodes. This may get increased in the future, but not reduced.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "ResourceClaimSchedulingStatus", - "Scope": "Namespaced" - } - }, - "io.k8s.api.resource.v1alpha3.ResourceClaimSpec": { - "description": "ResourceClaimSpec defines what is being requested in a ResourceClaim and how to configure it.", - "type": "object", - "properties": { - "controller": { - "description": "Controller is the name of the DRA driver that is meant to handle allocation of this claim. If empty, allocation is handled by the scheduler while scheduling a pod.\n\nMust be a DNS subdomain and should end with a DNS domain owned by the vendor of the driver.\n\nThis is an alpha field and requires enabling the DRAControlPlaneController feature gate.", - "type": "string" + "format": { + "description": "format is an optional OpenAPI type modifier for this column. A format modifies the type and imposes additional rules, like date or time formatting for a string. The 'name' format is applied to the primary identifier column which has type 'string' to assist in clients identifying column is the resource name. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for more.", + "type": "string", + "default": "" }, - "devices": { - "description": "Devices defines how to request devices.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.DeviceClaim" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "ResourceClaimSpec", - "Scope": "Namespaced" - } - }, - "io.k8s.api.resource.v1alpha3.ResourceClaimStatus": { - "description": "ResourceClaimStatus tracks whether the resource has been allocated and what the result of that was.", - "type": "object", - "properties": { - "allocation": { - "description": "Allocation is set once the claim has been allocated successfully.", - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.AllocationResult" + "name": { + "description": "name is a human readable name for the column.", + "type": "string", + "default": "" }, - "deallocationRequested": { - "description": "Indicates that a claim is to be deallocated. While this is set, no new consumers may be added to ReservedFor.\n\nThis is only used if the claim needs to be deallocated by a DRA driver. That driver then must deallocate this claim and reset the field together with clearing the Allocation field.\n\nThis is an alpha field and requires enabling the DRAControlPlaneController feature gate.", - "type": "boolean" + "priority": { + "description": "priority is an integer defining the relative importance of this column compared to others. Lower numbers are considered higher priority. Columns that may be omitted in limited space scenarios should be given a higher priority.", + "type": "integer", + "format": "int32", + "default": 0 }, - "reservedFor": { - "description": "ReservedFor indicates which entities are currently allowed to use the claim. A Pod which references a ResourceClaim which is not reserved for that Pod will not be started. A claim that is in use or might be in use because it has been reserved must not get deallocated.\n\nIn a cluster with multiple scheduler instances, two pods might get scheduled concurrently by different schedulers. When they reference the same ResourceClaim which already has reached its maximum number of consumers, only one pod can be scheduled.\n\nBoth schedulers try to add their pod to the claim.status.reservedFor field, but only the update that reaches the API server first gets stored. The other one fails with an error and the scheduler which issued it knows that it must put the pod back into the queue, waiting for the ResourceClaim to become usable again.\n\nThere can be at most 32 such reservations. This may get increased in the future, but not reduced.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourceClaimConsumerReference" - }, - "x-kubernetes-list-map-keys": [ - "uid" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "uid", - "x-kubernetes-patch-strategy": "merge" + "type": { + "description": "type is an OpenAPI type definition for this column, such as number, integer, string, or array. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for more.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "ResourceClaimStatus", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "TableColumnDefinition", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.ResourceClaimTemplate": { - "description": "ResourceClaimTemplate is used to produce ResourceClaim objects.\n\nThis is an alpha type and requires enabling the DynamicResourceAllocation feature gate.", + "io.k8s.apimachinery.pkg.apis.meta.v1.TableOptions": { + "description": "TableOptions are used when a Table is requested by the caller.", "type": "object", - "required": [ - "spec" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "includeObject": { + "description": "includeObject decides whether to include each object along with its columnar information. Specifying \"None\" will return no object, specifying \"Object\" will return the full object contents, and specifying \"Metadata\" (the default) will return the object's metadata in the PartialObjectMetadata kind in version v1beta1 of the meta.k8s.io API group.", + "type": "string" + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" - }, - "metadata": { - "description": "Standard object metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "Describes the ResourceClaim that is to be generated.\n\nThis field is immutable. A ResourceClaim will get created by the control plane for a Pod when needed and then not get updated anymore.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourceClaimTemplateSpec" } }, "x-fabric8-info": { "Type": "object", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "ResourceClaimTemplate", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "TableOptions", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.ResourceClaimTemplateList": { - "description": "ResourceClaimTemplateList is a collection of claim templates.", + "io.k8s.apimachinery.pkg.apis.meta.v1.TableRow": { + "description": "TableRow is an individual row in a table.", "type": "object", "required": [ - "items" + "cells" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "cells": { + "description": "cells will be as wide as the column definitions array and may contain strings, numbers (float64 or int64), booleans, simple maps, lists, or null. See the type field of the column definition for a more detailed description.", + "type": "array", + "items": { + "type": "object" + }, + "x-kubernetes-list-type": "atomic" }, - "items": { - "description": "Items is the list of resource claim templates.", + "conditions": { + "description": "conditions describe additional status of a row that are relevant for a human user. These conditions apply to the row, not to the object, and will be specific to table output. The only defined condition type is 'Completed', for a row that indicates a resource that has run to completion and can be given less visual priority.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourceClaimTemplate" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.TableRowCondition" + }, + "x-kubernetes-list-type": "atomic" }, - "metadata": { - "description": "Standard list metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "object": { + "description": "This field contains the requested additional information about each object based on the includeObject policy when requesting the Table. If \"None\", this field is empty, if \"Object\" this will be the default serialization of the object for the current API version, and if \"Metadata\" (the default) will contain the object metadata. Check the returned kind and apiVersion of the object before parsing. The media type of the object will always match the enclosing list - if this as a JSON table, these will be JSON encoded objects.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" } }, "x-fabric8-info": { - "Type": "list", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "ResourceClaimTemplateList", + "Type": "nested", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "TableRow", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.ResourceClaimTemplateSpec": { - "description": "ResourceClaimTemplateSpec contains the metadata and fields for a ResourceClaim.", + "io.k8s.apimachinery.pkg.apis.meta.v1.TableRowCondition": { + "description": "TableRowCondition allows a row to be marked with additional information.", "type": "object", "required": [ - "spec" + "type", + "status" ], "properties": { - "metadata": { - "description": "ObjectMeta may contain labels and annotations that will be copied into the PVC when creating it. No other fields are allowed and will be rejected during validation.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "message": { + "description": "Human readable message indicating details about last transition.", + "type": "string" }, - "spec": { - "description": "Spec for the ResourceClaim. The entire content is copied unchanged into the ResourceClaim that gets created from this template. The same fields as in a ResourceClaim are also valid here.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourceClaimSpec" + "reason": { + "description": "(brief) machine readable reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status of the condition, one of True, False, Unknown.", + "type": "string", + "default": "" + }, + "type": { + "description": "Type of row condition. The only defined value is 'Completed' indicating that the object this row represents has reached a completed state and may be given less visual priority than other rows. Clients are not required to honor any conditions but should be consistent where possible about handling the conditions.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "ResourceClaimTemplateSpec", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "TableRowCondition", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.ResourcePool": { - "description": "ResourcePool describes the pool that ResourceSlices belong to.", + "io.k8s.apimachinery.pkg.apis.meta.v1.Time": { + "description": "Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers.", + "type": "string", + "format": "date-time", + "x-fabric8-info": { + "Type": "nested", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "Time", + "Scope": "Namespaced" + } + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.Timestamp": { + "description": "Timestamp is a struct that is equivalent to Time, but intended for protobuf marshalling/unmarshalling. It is generated into a serialization that matches Time. Do not use in Go structs.", "type": "object", "required": [ - "name", - "generation", - "resourceSliceCount" + "seconds", + "nanos" ], "properties": { - "generation": { - "description": "Generation tracks the change in a pool over time. Whenever a driver changes something about one or more of the resources in a pool, it must change the generation in all ResourceSlices which are part of that pool. Consumers of ResourceSlices should only consider resources from the pool with the highest generation number. The generation may be reset by drivers, which should be fine for consumers, assuming that all ResourceSlices in a pool are updated to match or deleted.\n\nCombined with ResourceSliceCount, this mechanism enables consumers to detect pools which are comprised of multiple ResourceSlices and are in an incomplete state.", + "nanos": { + "description": "Non-negative fractions of a second at nanosecond resolution. Negative second values with fractions must still have non-negative nanos values that count forward in time. Must be from 0 to 999,999,999 inclusive. This field may be limited in precision depending on context.", "type": "integer", - "format": "int64", + "format": "int32", "default": 0 }, - "name": { - "description": "Name is used to identify the pool. For node-local devices, this is often the node name, but this is not required.\n\nIt must not be longer than 253 characters and must consist of one or more DNS sub-domains separated by slashes. This field is immutable.", - "type": "string", - "default": "" - }, - "resourceSliceCount": { - "description": "ResourceSliceCount is the total number of ResourceSlices in the pool at this generation number. Must be greater than zero.\n\nConsumers can use this to check whether they have seen all ResourceSlices belonging to the same pool.", + "seconds": { + "description": "Represents seconds of UTC time since Unix epoch 1970-01-01T00:00:00Z. Must be from 0001-01-01T00:00:00Z to 9999-12-31T23:59:59Z inclusive.", "type": "integer", "format": "int64", "default": 0 @@ -48346,18 +53864,15 @@ }, "x-fabric8-info": { "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "ResourcePool", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "Timestamp", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.ResourceSlice": { - "description": "ResourceSlice represents one or more resources in a pool of similar resources, managed by a common driver. A pool may span more than one ResourceSlice, and exactly how many ResourceSlices comprise a pool is determined by the driver.\n\nAt the moment, the only supported resources are devices with attributes and capacities. Each device in a given pool, regardless of how many ResourceSlices, must have a unique name. The ResourceSlice in which a device gets published may change over time. The unique identifier for a device is the tuple \u003cdriver name\u003e, \u003cpool name\u003e, \u003cdevice name\u003e.\n\nWhenever a driver needs to update a pool, it increments the pool.Spec.Pool.Generation number and updates all ResourceSlices with that new number and new resource definitions. A consumer must only use ResourceSlices with the highest generation number and ignore all others.\n\nWhen allocating all resources in a pool matching certain criteria or when looking for the best solution among several different alternatives, a consumer should check the number of ResourceSlices in a pool (included in each ResourceSlice) to determine whether its view of a pool is complete and if not, should wait until the driver has completed updating the pool.\n\nFor resources that are not local to a node, the node name is not set. Instead, the driver may use a node selector to specify where the devices are available.\n\nThis is an alpha type and requires enabling the DynamicResourceAllocation feature gate.", + "io.k8s.apimachinery.pkg.apis.meta.v1.TypeMeta": { + "description": "TypeMeta describes an individual object in an API response or request with strings representing the type of the object and its API schema version. Structures that are versioned or persisted should inline TypeMeta.", "type": "object", - "required": [ - "spec" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -48366,340 +53881,271 @@ "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" - }, - "metadata": { - "description": "Standard object metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "Contains the information published by the driver.\n\nChanging the spec automatically increments the metadata.generation number.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourceSliceSpec" } }, "x-fabric8-info": { - "Type": "object", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "ResourceSlice", - "Scope": "Clustered" + "Type": "nested", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "TypeMeta", + "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.ResourceSliceList": { - "description": "ResourceSliceList is a collection of ResourceSlices.", + "io.k8s.apimachinery.pkg.apis.meta.v1.UpdateOptions": { + "description": "UpdateOptions may be provided when updating an API object. All fields in UpdateOptions should also be present in PatchOptions.", "type": "object", - "required": [ - "items" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "Items is the list of resource ResourceSlices.", + "dryRun": { + "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourceSlice" - } + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "fieldManager": { + "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "type": "string" + }, + "fieldValidation": { + "description": "fieldValidation instructs the server on how to handle objects in the request (POST/PUT/PATCH) containing unknown or duplicate fields. Valid values are: - Ignore: This will ignore any unknown fields that are silently dropped from the object, and will ignore all but the last duplicate field that the decoder encounters. This is the default behavior prior to v1.23. - Warn: This will send a warning via the standard warning response header for each unknown field that is dropped from the object, and for each duplicate field that is encountered. The request will still succeed if there are no other errors, and will only persist the last of any duplicate fields. This is the default in v1.23+ - Strict: This will fail the request with a BadRequest error if any unknown fields would be dropped from the object, or if any duplicate fields are present. The error returned from the server will contain all unknown and duplicate fields encountered.", + "type": "string" }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" - }, - "metadata": { - "description": "Standard list metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "list", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "ResourceSliceList", + "Type": "object", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "UpdateOptions", "Scope": "Namespaced" } }, - "io.k8s.api.resource.v1alpha3.ResourceSliceSpec": { - "description": "ResourceSliceSpec contains the information published by the driver in one ResourceSlice.", + "io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent": { + "description": "Event represents a single event to a watched resource.", "type": "object", "required": [ - "driver", - "pool" + "type", + "object" ], "properties": { - "allNodes": { - "description": "AllNodes indicates that all nodes have access to the resources in the pool.\n\nExactly one of NodeName, NodeSelector and AllNodes must be set.", - "type": "boolean" - }, - "devices": { - "description": "Devices lists some or all of the devices in this pool.\n\nMust not have more than 128 entries.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.Device" - }, - "x-kubernetes-list-type": "atomic" + "object": { + "description": "Object is:\n * If Type is Added or Modified: the new state of the object.\n * If Type is Deleted: the state of the object immediately before deletion.\n * If Type is Error: *Status is recommended; other types may make sense\n depending on context.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" }, - "driver": { - "description": "Driver identifies the DRA driver providing the capacity information. A field selector can be used to list only ResourceSlice objects with a certain driver name.\n\nMust be a DNS subdomain and should end with a DNS domain owned by the vendor of the driver. This field is immutable.", + "type": { "type": "string", "default": "" - }, - "nodeName": { - "description": "NodeName identifies the node which provides the resources in this pool. A field selector can be used to list only ResourceSlice objects belonging to a certain node.\n\nThis field can be used to limit access from nodes to ResourceSlices with the same node name. It also indicates to autoscalers that adding new nodes of the same type as some old node might also make new resources available.\n\nExactly one of NodeName, NodeSelector and AllNodes must be set. This field is immutable.", - "type": "string" - }, - "nodeSelector": { - "description": "NodeSelector defines which nodes have access to the resources in the pool, when that pool is not limited to a single node.\n\nMust use exactly one term.\n\nExactly one of NodeName, NodeSelector and AllNodes must be set.", - "$ref": "#/definitions/io.k8s.api.core.v1.NodeSelector" - }, - "pool": { - "description": "Pool describes the pool that this ResourceSlice belongs to.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.resource.v1alpha3.ResourcePool" } }, "x-fabric8-info": { "Type": "nested", - "Group": "resource.k8s.io", - "Version": "v1alpha3", - "Kind": "ResourceSliceSpec", + "Group": "meta.k8s.io", + "Version": "v1", + "Kind": "WatchEvent", "Scope": "Namespaced" } }, - "io.k8s.api.scheduling.v1.PriorityClass": { - "description": "PriorityClass defines mapping from a priority class name to the priority integer value. The value can be any valid integer.", + "io.k8s.apimachinery.pkg.apis.meta.v1.unstructured.Unstructured": { + "description": "Unstructured allows objects that do not have Golang structs registered to be manipulated generically. This can be used to deal with the API objects from a plug-in. Unstructured objects still have functioning TypeMeta features-- kind, version, etc.\n\nWARNING: This object has accessors for the v1 standard metadata. You *MUST NOT* use this type if you are dealing with objects that are not in the server meta v1 schema.", "type": "object", "required": [ - "value" + "Object" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "description": { - "description": "description is an arbitrary string that usually provides guidelines on when this priority class should be used.", - "type": "string" - }, - "globalDefault": { - "description": "globalDefault specifies whether this PriorityClass should be considered as the default priority for pods that do not have any priority class. Only one PriorityClass can be marked as `globalDefault`. However, if more than one PriorityClasses exists with their `globalDefault` field set to true, the smallest value of such global default PriorityClasses will be used as the default priority.", - "type": "boolean" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "preemptionPolicy": { - "description": "preemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset.\n\nPossible enum values:\n - `\"Never\"` means that pod never preempts other pods with lower priority.\n - `\"PreemptLowerPriority\"` means that pod can preempt other pods with lower priority.", - "type": "string", - "enum": [ - "Never", - "PreemptLowerPriority" - ] - }, - "value": { - "description": "value represents the integer value of this priority class. This is the actual priority that pods receive when they have the name of this class in their pod spec.", - "type": "integer", - "format": "int32", - "default": 0 - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "scheduling.k8s.io", - "Version": "v1", - "Kind": "PriorityClass", - "Scope": "Clustered" + "Object": { + "description": "Object is a JSON compatible map with string, float, int, bool, []interface{}, or map[string]interface{} children.", + "type": "object", + "additionalProperties": { + "type": "object" + } + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "unstructured", + "Kind": "Unstructured", + "Scope": "Namespaced" } }, - "io.k8s.api.scheduling.v1.PriorityClassList": { - "description": "PriorityClassList is a collection of priority classes.", + "io.k8s.apimachinery.pkg.apis.meta.v1.unstructured.UnstructuredList": { + "description": "UnstructuredList allows lists that do not have Golang structs registered to be manipulated generically. This can be used to deal with the API lists from a plug-in.", "type": "object", "required": [ + "Object", "items" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "Object": { + "type": "object", + "additionalProperties": { + "type": "object" + } }, "items": { - "description": "items is the list of PriorityClasses", + "description": "Items is a list of unstructured objects.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.scheduling.v1.PriorityClass" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.unstructured.Unstructured" } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "list", - "Group": "scheduling.k8s.io", - "Version": "v1", - "Kind": "PriorityClassList", + "Type": "nested", + "Group": "", + "Version": "unstructured", + "Kind": "UnstructuredList", "Scope": "Namespaced" } }, - "io.k8s.api.scheduling.v1alpha1.PriorityClass": { - "description": "DEPRECATED - This group version of PriorityClass is deprecated by scheduling.k8s.io/v1/PriorityClass. PriorityClass defines mapping from a priority class name to the priority integer value. The value can be any valid integer.", + "io.k8s.apimachinery.pkg.apis.meta.v1.unstructured.jsonFallbackEncoder": { "type": "object", "required": [ - "value" + "encoder", + "identifier" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "description": { - "description": "description is an arbitrary string that usually provides guidelines on when this priority class should be used.", - "type": "string" - }, - "globalDefault": { - "description": "globalDefault specifies whether this PriorityClass should be considered as the default priority for pods that do not have any priority class. Only one PriorityClass can be marked as `globalDefault`. However, if more than one PriorityClasses exists with their `globalDefault` field set to true, the smallest value of such global default PriorityClasses will be used as the default priority.", - "type": "boolean" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "encoder": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.Encoder" }, - "preemptionPolicy": { - "description": "preemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset.\n\nPossible enum values:\n - `\"Never\"` means that pod never preempts other pods with lower priority.\n - `\"PreemptLowerPriority\"` means that pod can preempt other pods with lower priority.", + "identifier": { "type": "string", - "enum": [ - "Never", - "PreemptLowerPriority" - ] - }, - "value": { - "description": "value represents the integer value of this priority class. This is the actual priority that pods receive when they have the name of this class in their pod spec.", - "type": "integer", - "format": "int32", - "default": 0 + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "scheduling.k8s.io", - "Version": "v1alpha1", - "Kind": "PriorityClass", - "Scope": "Clustered" + "Type": "nested", + "Group": "", + "Version": "unstructured", + "Kind": "jsonFallbackEncoder", + "Scope": "Namespaced" } }, - "io.k8s.api.scheduling.v1alpha1.PriorityClassList": { - "description": "PriorityClassList is a collection of priority classes.", + "io.k8s.apimachinery.pkg.apis.meta.v1.unstructured.unstructuredJSONScheme": { + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "unstructured", + "Kind": "unstructuredJSONScheme", + "Scope": "Namespaced" + } + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.unstructured.unstructuredscheme.unstructuredCreator": { + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "unstructuredscheme", + "Kind": "unstructuredCreator", + "Scope": "Namespaced" + } + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.unstructured.unstructuredscheme.unstructuredDefaulter": { + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "unstructuredscheme", + "Kind": "unstructuredDefaulter", + "Scope": "Namespaced" + } + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.unstructured.unstructuredscheme.unstructuredNegotiatedSerializer": { "type": "object", "required": [ - "items" + "scheme", + "typer", + "creator" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is the list of PriorityClasses", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.scheduling.v1alpha1.PriorityClass" - } + "creator": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.ObjectCreater" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "scheme": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.Scheme" }, - "metadata": { - "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "typer": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.ObjectTyper" } }, "x-fabric8-info": { - "Type": "list", - "Group": "scheduling.k8s.io", - "Version": "v1alpha1", - "Kind": "PriorityClassList", + "Type": "nested", + "Group": "", + "Version": "unstructuredscheme", + "Kind": "unstructuredNegotiatedSerializer", "Scope": "Namespaced" } }, - "io.k8s.api.scheduling.v1beta1.PriorityClass": { - "description": "DEPRECATED - This group version of PriorityClass is deprecated by scheduling.k8s.io/v1/PriorityClass. PriorityClass defines mapping from a priority class name to the priority integer value. The value can be any valid integer.", + "io.k8s.apimachinery.pkg.apis.meta.v1.unstructured.unstructuredscheme.unstructuredObjectTyper": { + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "unstructuredscheme", + "Kind": "unstructuredObjectTyper", + "Scope": "Namespaced" + } + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.validation.FieldSelectorValidationOptions": { + "description": "FieldSelectorValidationOptions is a struct that can be passed to ValidateFieldSelectorRequirement to record the validate options", "type": "object", "required": [ - "value" + "AllowUnknownOperatorInRequirement" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "description": { - "description": "description is an arbitrary string that usually provides guidelines on when this priority class should be used.", - "type": "string" - }, - "globalDefault": { - "description": "globalDefault specifies whether this PriorityClass should be considered as the default priority for pods that do not have any priority class. Only one PriorityClass can be marked as `globalDefault`. However, if more than one PriorityClasses exists with their `globalDefault` field set to true, the smallest value of such global default PriorityClasses will be used as the default priority.", - "type": "boolean" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "preemptionPolicy": { - "description": "preemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset.\n\nPossible enum values:\n - `\"Never\"` means that pod never preempts other pods with lower priority.\n - `\"PreemptLowerPriority\"` means that pod can preempt other pods with lower priority.", - "type": "string", - "enum": [ - "Never", - "PreemptLowerPriority" - ] + "AllowUnknownOperatorInRequirement": { + "description": "Allows an operator that is not interpretable to pass validation. This is useful for cases where a broader check can be performed, as in a *SubjectAccessReview", + "type": "boolean", + "default": false + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "", + "Version": "validation", + "Kind": "FieldSelectorValidationOptions", + "Scope": "Namespaced" + } + }, + "io.k8s.apimachinery.pkg.apis.meta.v1.validation.LabelSelectorValidationOptions": { + "description": "LabelSelectorValidationOptions is a struct that can be passed to ValidateLabelSelector to record the validate options", + "type": "object", + "required": [ + "AllowInvalidLabelValueInSelector", + "AllowUnknownOperatorInRequirement" + ], + "properties": { + "AllowInvalidLabelValueInSelector": { + "description": "Allow invalid label value in selector", + "type": "boolean", + "default": false }, - "value": { - "description": "value represents the integer value of this priority class. This is the actual priority that pods receive when they have the name of this class in their pod spec.", - "type": "integer", - "format": "int32", - "default": 0 + "AllowUnknownOperatorInRequirement": { + "description": "Allows an operator that is not interpretable to pass validation. This is useful for cases where a broader check can be performed, as in a *SubjectAccessReview", + "type": "boolean", + "default": false } }, "x-fabric8-info": { - "Type": "object", - "Group": "scheduling.k8s.io", - "Version": "v1beta1", - "Kind": "PriorityClass", - "Scope": "Clustered" + "Type": "nested", + "Group": "", + "Version": "validation", + "Kind": "LabelSelectorValidationOptions", + "Scope": "Namespaced" } }, - "io.k8s.api.scheduling.v1beta1.PriorityClassList": { - "description": "PriorityClassList is a collection of priority classes.", + "io.k8s.apimachinery.pkg.apis.meta.v1beta1.PartialObjectMetadataList": { + "description": "PartialObjectMetadataList contains a list of objects containing only their metadata.", "type": "object", "required": [ "items" @@ -48710,11 +54156,11 @@ "type": "string" }, "items": { - "description": "items is the list of PriorityClasses", + "description": "items contains each of the included items.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.scheduling.v1beta1.PriorityClass" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PartialObjectMetadata" } }, "kind": { @@ -48722,21 +54168,21 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "scheduling.k8s.io", + "Group": "meta.k8s.io", "Version": "v1beta1", - "Kind": "PriorityClassList", + "Kind": "PartialObjectMetadataList", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1.CSIDriver": { - "description": "CSIDriver captures information about a Container Storage Interface (CSI) volume driver deployed on the cluster. Kubernetes attach detach controller uses this object to determine whether attach is required. Kubelet uses this object to determine whether pod information needs to be passed on mount. CSIDriver objects are non-namespaced.", + "io.openshift.apiserver.v1.APIRequestCount": { + "description": "APIRequestCount tracks requests made to an API. The instance name must be of the form `resource.version.group`, matching the resource.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "spec" @@ -48751,28 +54197,34 @@ "type": "string" }, "metadata": { - "description": "Standard object metadata. metadata.Name indicates the name of the CSI driver that this object refers to; it MUST be the same name returned by the CSI GetPluginName() call for that driver. The driver name must be 63 characters or less, beginning and ending with an alphanumeric character ([a-z0-9A-Z]) with dashes (-), dots (.), and alphanumerics between. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec represents the specification of the CSI Driver.", + "description": "spec defines the characteristics of the resource.", "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1.CSIDriverSpec" + "$ref": "#/definitions/io.openshift.apiserver.v1.APIRequestCountSpec" + }, + "status": { + "description": "status contains the observed state of the resource.", + "default": {}, + "$ref": "#/definitions/io.openshift.apiserver.v1.APIRequestCountStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "storage.k8s.io", + "Group": "apiserver.openshift.io", "Version": "v1", - "Kind": "CSIDriver", + "Kind": "APIRequestCount", "Scope": "Clustered" } }, - "io.k8s.api.storage.v1.CSIDriverList": { - "description": "CSIDriverList is a collection of CSIDriver objects.", + "io.openshift.apiserver.v1.APIRequestCountList": { + "description": "APIRequestCountList is a list of APIRequestCount resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ + "metadata", "items" ], "properties": { @@ -48781,11 +54233,10 @@ "type": "string" }, "items": { - "description": "items is the list of CSIDriver", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1.CSIDriver" + "$ref": "#/definitions/io.openshift.apiserver.v1.APIRequestCount" } }, "kind": { @@ -48793,444 +54244,348 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "storage.k8s.io", + "Group": "apiserver.openshift.io", "Version": "v1", - "Kind": "CSIDriverList", + "Kind": "APIRequestCountList", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1.CSIDriverSpec": { - "description": "CSIDriverSpec is the specification of a CSIDriver.", + "io.openshift.apiserver.v1.APIRequestCountSpec": { "type": "object", "properties": { - "attachRequired": { - "description": "attachRequired indicates this CSI volume driver requires an attach operation (because it implements the CSI ControllerPublishVolume() method), and that the Kubernetes attach detach controller should call the attach volume interface which checks the volumeattachment status and waits until the volume is attached before proceeding to mounting. The CSI external-attacher coordinates with CSI volume driver and updates the volumeattachment status when the attach operation is complete. If the CSIDriverRegistry feature gate is enabled and the value is specified to false, the attach operation will be skipped. Otherwise the attach operation will be called.\n\nThis field is immutable.", - "type": "boolean" - }, - "fsGroupPolicy": { - "description": "fsGroupPolicy defines if the underlying volume supports changing ownership and permission of the volume before being mounted. Refer to the specific FSGroupPolicy values for additional details.\n\nThis field was immutable in Kubernetes \u003c 1.29 and now is mutable.\n\nDefaults to ReadWriteOnceWithFSType, which will examine each volume to determine if Kubernetes should modify ownership and permissions of the volume. With the default policy the defined fsGroup will only be applied if a fstype is defined and the volume's access mode contains ReadWriteOnce.", - "type": "string" - }, - "podInfoOnMount": { - "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes \u003c 1.29 and now is mutable.", - "type": "boolean" - }, - "requiresRepublish": { - "description": "requiresRepublish indicates the CSI driver wants `NodePublishVolume` being periodically called to reflect any possible change in the mounted volume. This field defaults to false.\n\nNote: After a successful initial NodePublishVolume call, subsequent calls to NodePublishVolume should only update the contents of the volume. New mount points will not be seen by a running container.", - "type": "boolean" - }, - "seLinuxMount": { - "description": "seLinuxMount specifies if the CSI driver supports \"-o context\" mount option.\n\nWhen \"true\", the CSI driver must ensure that all volumes provided by this CSI driver can be mounted separately with different `-o context` options. This is typical for storage backends that provide volumes as filesystems on block devices or as independent shared volumes. Kubernetes will call NodeStage / NodePublish with \"-o context=xyz\" mount option when mounting a ReadWriteOncePod volume used in Pod that has explicitly set SELinux context. In the future, it may be expanded to other volume AccessModes. In any case, Kubernetes will ensure that the volume is mounted only with a single SELinux context.\n\nWhen \"false\", Kubernetes won't pass any special SELinux mount options to the driver. This is typical for volumes that represent subdirectories of a bigger shared filesystem.\n\nDefault is \"false\".", - "type": "boolean" - }, - "storageCapacity": { - "description": "storageCapacity indicates that the CSI volume driver wants pod scheduling to consider the storage capacity that the driver deployment will report by creating CSIStorageCapacity objects with capacity information, if set to true.\n\nThe check can be enabled immediately when deploying a driver. In that case, provisioning new volumes with late binding will pause until the driver deployment has published some suitable CSIStorageCapacity object.\n\nAlternatively, the driver can be deployed with the field unset or false and it can be flipped later when storage capacity information has been published.\n\nThis field was immutable in Kubernetes \u003c= 1.22 and now is mutable.", - "type": "boolean" - }, - "tokenRequests": { - "description": "tokenRequests indicates the CSI driver needs pods' service account tokens it is mounting volume for to do necessary authentication. Kubelet will pass the tokens in VolumeContext in the CSI NodePublishVolume calls. The CSI driver should parse and validate the following VolumeContext: \"csi.storage.k8s.io/serviceAccount.tokens\": {\n \"\u003caudience\u003e\": {\n \"token\": \u003ctoken\u003e,\n \"expirationTimestamp\": \u003cexpiration timestamp in RFC3339\u003e,\n },\n ...\n}\n\nNote: Audience in each TokenRequest should be different and at most one token is empty string. To receive a new token after expiry, RequiresRepublish can be used to trigger NodePublishVolume periodically.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1.TokenRequest" - }, - "x-kubernetes-list-type": "atomic" - }, - "volumeLifecycleModes": { - "description": "volumeLifecycleModes defines what kind of volumes this CSI volume driver supports. The default if the list is empty is \"Persistent\", which is the usage defined by the CSI specification and implemented in Kubernetes via the usual PV/PVC mechanism.\n\nThe other mode is \"Ephemeral\". In this mode, volumes are defined inline inside the pod spec with CSIVolumeSource and their lifecycle is tied to the lifecycle of that pod. A driver has to be aware of this because it is only going to get a NodePublishVolume call for such a volume.\n\nFor more information about implementing this mode, see https://kubernetes-csi.github.io/docs/ephemeral-local-volumes.html A driver can support one or more of these modes and more modes may be added in the future.\n\nThis field is beta. This field is immutable.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "numberOfUsersToReport": { + "description": "numberOfUsersToReport is the number of users to include in the report. If unspecified or zero, the default is ten. This is default is subject to change.", + "type": "integer", + "format": "int64", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "storage.k8s.io", + "Group": "apiserver.openshift.io", "Version": "v1", - "Kind": "CSIDriverSpec", + "Kind": "APIRequestCountSpec", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1.CSINode": { - "description": "CSINode holds information about all CSI drivers installed on a node. CSI drivers do not need to create the CSINode object directly. As long as they use the node-driver-registrar sidecar container, the kubelet will automatically populate the CSINode object for the CSI driver as part of kubelet plugin registration. CSINode has the same name as a node. If the object is missing, it means either there are no CSI Drivers available on the node, or the Kubelet version is low enough that it doesn't create this object. CSINode has an OwnerReference that points to the corresponding node object.", + "io.openshift.apiserver.v1.APIRequestCountStatus": { "type": "object", "required": [ - "spec" + "conditions", + "requestCount" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "conditions": { + "description": "conditions contains details of the current status of this API Resource.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" }, - "metadata": { - "description": "Standard object's metadata. metadata.name must be the Kubernetes node name.", + "currentHour": { + "description": "currentHour contains request history for the current hour. This is porcelain to make the API easier to read by humans seeing if they addressed a problem. This field is reset on the hour.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "$ref": "#/definitions/io.openshift.apiserver.v1.PerResourceAPIRequestLog" }, - "spec": { - "description": "spec is the specification of CSINode", - "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1.CSINodeSpec" + "last24h": { + "description": "last24h contains request history for the last 24 hours, indexed by the hour, so 12:00AM-12:59 is in index 0, 6am-6:59am is index 6, etc. The index of the current hour is updated live and then duplicated into the requestsLastHour field.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.apiserver.v1.PerResourceAPIRequestLog" + } + }, + "removedInRelease": { + "description": "removedInRelease is when the API will be removed.", + "type": "string" + }, + "requestCount": { + "description": "requestCount is a sum of all requestCounts across all current hours, nodes, and users.", + "type": "integer", + "format": "int64", + "default": 0 } }, "x-fabric8-info": { - "Type": "object", - "Group": "storage.k8s.io", + "Type": "nested", + "Group": "apiserver.openshift.io", "Version": "v1", - "Kind": "CSINode", - "Scope": "Clustered" + "Kind": "APIRequestCountStatus", + "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1.CSINodeDriver": { - "description": "CSINodeDriver holds information about the specification of one CSI driver installed on a node", + "io.openshift.apiserver.v1.PerNodeAPIRequestLog": { + "description": "PerNodeAPIRequestLog contains logs of requests to a certain node.", "type": "object", "required": [ - "name", - "nodeID" + "nodeName", + "requestCount", + "byUser" ], "properties": { - "allocatable": { - "description": "allocatable represents the volume resources of a node that are available for scheduling. This field is beta.", - "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeNodeResources" - }, - "name": { - "description": "name represents the name of the CSI driver that this object refers to. This MUST be the same name returned by the CSI GetPluginName() call for that driver.", - "type": "string", - "default": "" + "byUser": { + "description": "byUser contains request details by top .spec.numberOfUsersToReport users. Note that because in the case of an apiserver, restart the list of top users is determined on a best-effort basis, the list might be imprecise. In addition, some system users may be explicitly included in the list.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.apiserver.v1.PerUserAPIRequestCount" + } }, - "nodeID": { - "description": "nodeID of the node from the driver point of view. This field enables Kubernetes to communicate with storage systems that do not share the same nomenclature for nodes. For example, Kubernetes may refer to a given node as \"node1\", but the storage system may refer to the same node as \"nodeA\". When Kubernetes issues a command to the storage system to attach a volume to a specific node, it can use this field to refer to the node name using the ID that the storage system will understand, e.g. \"nodeA\" instead of \"node1\". This field is required.", + "nodeName": { + "description": "nodeName where the request are being handled.", "type": "string", "default": "" }, - "topologyKeys": { - "description": "topologyKeys is the list of keys supported by the driver. When a driver is initialized on a cluster, it provides a set of topology keys that it understands (e.g. \"company.com/zone\", \"company.com/region\"). When a driver is initialized on a node, it provides the same topology keys along with values. Kubelet will expose these topology keys as labels on its own node object. When Kubernetes does topology aware provisioning, it can use this list to determine which labels it should retrieve from the node object and pass back to the driver. It is possible for different nodes to use different topology keys. This can be empty if driver does not support topology.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "requestCount": { + "description": "requestCount is a sum of all requestCounts across all users, even those outside of the top 10 users.", + "type": "integer", + "format": "int64", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "storage.k8s.io", + "Group": "apiserver.openshift.io", "Version": "v1", - "Kind": "CSINodeDriver", + "Kind": "PerNodeAPIRequestLog", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1.CSINodeList": { - "description": "CSINodeList is a collection of CSINode objects.", + "io.openshift.apiserver.v1.PerResourceAPIRequestLog": { + "description": "PerResourceAPIRequestLog logs request for various nodes.", "type": "object", "required": [ - "items" + "requestCount" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is the list of CSINode", + "byNode": { + "description": "byNode contains logs of requests per node.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1.CSINode" + "$ref": "#/definitions/io.openshift.apiserver.v1.PerNodeAPIRequestLog" } }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "requestCount": { + "description": "requestCount is a sum of all requestCounts across nodes.", + "type": "integer", + "format": "int64", + "default": 0 } }, "x-fabric8-info": { - "Type": "list", - "Group": "storage.k8s.io", + "Type": "nested", + "Group": "apiserver.openshift.io", "Version": "v1", - "Kind": "CSINodeList", + "Kind": "PerResourceAPIRequestLog", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1.CSINodeSpec": { - "description": "CSINodeSpec holds information about the specification of all CSI drivers installed on a node", + "io.openshift.apiserver.v1.PerUserAPIRequestCount": { + "description": "PerUserAPIRequestCount contains logs of a user's requests.", "type": "object", "required": [ - "drivers" + "username", + "userAgent", + "requestCount", + "byVerb" ], "properties": { - "drivers": { - "description": "drivers is a list of information of all CSI Drivers existing on a node. If all drivers in the list are uninstalled, this can become empty.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1.CSINodeDriver" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" + "byVerb": { + "description": "byVerb details by verb.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.apiserver.v1.PerVerbAPIRequestCount" + } + }, + "requestCount": { + "description": "requestCount of requests by the user across all verbs.", + "type": "integer", + "format": "int64", + "default": 0 + }, + "userAgent": { + "description": "userAgent that made the request. The same user often has multiple binaries which connect (pods with many containers). The different binaries will have different userAgents, but the same user. In addition, we have userAgents with version information embedded and the userName isn't likely to change.", + "type": "string", + "default": "" + }, + "username": { + "description": "userName that made the request.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "storage.k8s.io", + "Group": "apiserver.openshift.io", "Version": "v1", - "Kind": "CSINodeSpec", + "Kind": "PerUserAPIRequestCount", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1.CSIStorageCapacity": { - "description": "CSIStorageCapacity stores the result of one CSI GetCapacity call. For a given StorageClass, this describes the available capacity in a particular topology segment. This can be used when considering where to instantiate new PersistentVolumes.\n\nFor example this can express things like: - StorageClass \"standard\" has \"1234 GiB\" available in \"topology.kubernetes.io/zone=us-east1\" - StorageClass \"localssd\" has \"10 GiB\" available in \"kubernetes.io/hostname=knode-abc123\"\n\nThe following three cases all imply that no capacity is available for a certain combination: - no object exists with suitable topology and storage class name - such an object exists, but the capacity is unset - such an object exists, but the capacity is zero\n\nThe producer of these objects can decide which approach is more suitable.\n\nThey are consumed by the kube-scheduler when a CSI driver opts into capacity-aware scheduling with CSIDriverSpec.StorageCapacity. The scheduler compares the MaximumVolumeSize against the requested size of pending volumes to filter out unsuitable nodes. If MaximumVolumeSize is unset, it falls back to a comparison against the less precise Capacity. If that is also unset, the scheduler assumes that capacity is insufficient and tries some other node.", + "io.openshift.apiserver.v1.PerVerbAPIRequestCount": { + "description": "PerVerbAPIRequestCount requestCounts requests by API request verb.", "type": "object", "required": [ - "storageClassName" + "verb", + "requestCount" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "capacity": { - "description": "capacity is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.\n\nThe semantic is currently (CSI spec 1.2) defined as: The available capacity, in bytes, of the storage that can be used to provision volumes. If not set, that information is currently unavailable.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "maximumVolumeSize": { - "description": "maximumVolumeSize is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.\n\nThis is defined since CSI spec 1.4.0 as the largest size that may be used in a CreateVolumeRequest.capacity_range.required_bytes field to create a volume with the same parameters as those in GetCapacityRequest. The corresponding value in the Kubernetes API is ResourceRequirements.Requests in a volume claim.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - }, - "metadata": { - "description": "Standard object's metadata. The name has no particular meaning. It must be a DNS subdomain (dots allowed, 253 characters). To ensure that there are no conflicts with other CSI drivers on the cluster, the recommendation is to use csisc-\u003cuuid\u003e, a generated name, or a reverse-domain name which ends with the unique CSI driver name.\n\nObjects are namespaced.\n\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "nodeTopology": { - "description": "nodeTopology defines which nodes have access to the storage for which capacity was reported. If not set, the storage is not accessible from any node in the cluster. If empty, the storage is accessible from all nodes. This field is immutable.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "requestCount": { + "description": "requestCount of requests for verb.", + "type": "integer", + "format": "int64", + "default": 0 }, - "storageClassName": { - "description": "storageClassName represents the name of the StorageClass that the reported capacity applies to. It must meet the same requirements as the name of a StorageClass object (non-empty, DNS subdomain). If that object no longer exists, the CSIStorageCapacity object is obsolete and should be removed by its creator. This field is immutable.", + "verb": { + "description": "verb of API request (get, list, create, etc...)", "type": "string", "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "storage.k8s.io", + "Type": "nested", + "Group": "apiserver.openshift.io", "Version": "v1", - "Kind": "CSIStorageCapacity", + "Kind": "PerVerbAPIRequestCount", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1.CSIStorageCapacityList": { - "description": "CSIStorageCapacityList is a collection of CSIStorageCapacity objects.", + "io.openshift.apps.v1.CustomDeploymentStrategyParams": { + "description": "CustomDeploymentStrategyParams are the input to the Custom deployment strategy.", "type": "object", - "required": [ - "items" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "command": { + "description": "Command is optional and overrides CMD in the container Image.", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "items": { - "description": "items is the list of CSIStorageCapacity objects.", + "environment": { + "description": "Environment holds the environment which will be given to the container for Image.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1.CSIStorageCapacity" + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" } }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "image": { + "description": "Image specifies a container image which can carry out a deployment.", "type": "string" - }, - "metadata": { - "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "list", - "Group": "storage.k8s.io", + "Type": "nested", + "Group": "apps.openshift.io", "Version": "v1", - "Kind": "CSIStorageCapacityList", + "Kind": "CustomDeploymentStrategyParams", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1.StorageClass": { - "description": "StorageClass describes the parameters for a class of storage for which PersistentVolumes can be dynamically provisioned.\n\nStorageClasses are non-namespaced; the name of the storage class according to etcd is in ObjectMeta.Name.", + "io.openshift.apps.v1.DeploymentCause": { + "description": "DeploymentCause captures information about a particular cause of a deployment.", "type": "object", "required": [ - "provisioner" + "type" ], "properties": { - "allowVolumeExpansion": { - "description": "allowVolumeExpansion shows whether the storage class allow volume expand.", - "type": "boolean" - }, - "allowedTopologies": { - "description": "allowedTopologies restrict the node topologies where volumes can be dynamically provisioned. Each volume plugin defines its own supported topology specifications. An empty TopologySelectorTerm list means there is no topology restriction. This field is only honored by servers that enable the VolumeScheduling feature.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.TopologySelectorTerm" - }, - "x-kubernetes-list-type": "atomic" - }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "mountOptions": { - "description": "mountOptions controls the mountOptions for dynamically provisioned PersistentVolumes of this storage class. e.g. [\"ro\", \"soft\"]. Not validated - mount of the PVs will simply fail if one is invalid.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "parameters": { - "description": "parameters holds the parameters for the provisioner that should create volumes of this storage class.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } + "imageTrigger": { + "description": "ImageTrigger contains the image trigger details, if this trigger was fired based on an image change", + "$ref": "#/definitions/io.openshift.apps.v1.DeploymentCauseImageTrigger" }, - "provisioner": { - "description": "provisioner indicates the type of the provisioner.", + "type": { + "description": "Type of the trigger that resulted in the creation of a new deployment", "type": "string", "default": "" - }, - "reclaimPolicy": { - "description": "reclaimPolicy controls the reclaimPolicy for dynamically provisioned PersistentVolumes of this storage class. Defaults to Delete.\n\nPossible enum values:\n - `\"Delete\"` means the volume will be deleted from Kubernetes on release from its claim. The volume plugin must support Deletion.\n - `\"Recycle\"` means the volume will be recycled back into the pool of unbound persistent volumes on release from its claim. The volume plugin must support Recycling.\n - `\"Retain\"` means the volume will be left in its current phase (Released) for manual reclamation by the administrator. The default policy is Retain.", - "type": "string", - "enum": [ - "Delete", - "Recycle", - "Retain" - ] - }, - "volumeBindingMode": { - "description": "volumeBindingMode indicates how PersistentVolumeClaims should be provisioned and bound. When unset, VolumeBindingImmediate is used. This field is only honored by servers that enable the VolumeScheduling feature.\n\nPossible enum values:\n - `\"Immediate\"` indicates that PersistentVolumeClaims should be immediately provisioned and bound. This is the default mode.\n - `\"WaitForFirstConsumer\"` indicates that PersistentVolumeClaims should not be provisioned and bound until the first Pod is created that references the PeristentVolumeClaim. The volume provisioning and binding will occur during Pod scheduing.", - "type": "string", - "enum": [ - "Immediate", - "WaitForFirstConsumer" - ] } }, "x-fabric8-info": { - "Type": "object", - "Group": "storage.k8s.io", + "Type": "nested", + "Group": "apps.openshift.io", "Version": "v1", - "Kind": "StorageClass", - "Scope": "Clustered" + "Kind": "DeploymentCause", + "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1.StorageClassList": { - "description": "StorageClassList is a collection of storage classes.", + "io.openshift.apps.v1.DeploymentCauseImageTrigger": { + "description": "DeploymentCauseImageTrigger represents details about the cause of a deployment originating from an image change trigger", "type": "object", "required": [ - "items" + "from" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is the list of StorageClasses", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1.StorageClass" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "from": { + "description": "From is a reference to the changed object which triggered a deployment. The field may have the kinds DockerImage, ImageStreamTag, or ImageStreamImage.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" } }, "x-fabric8-info": { - "Type": "list", - "Group": "storage.k8s.io", + "Type": "nested", + "Group": "apps.openshift.io", "Version": "v1", - "Kind": "StorageClassList", + "Kind": "DeploymentCauseImageTrigger", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1.TokenRequest": { - "description": "TokenRequest contains parameters of a service account token.", + "io.openshift.apps.v1.DeploymentCondition": { + "description": "DeploymentCondition describes the state of a deployment config at a certain point.", "type": "object", "required": [ - "audience" + "type", + "status" ], "properties": { - "audience": { - "description": "audience is the intended audience of the token in \"TokenRequestSpec\". It will default to the audiences of kube apiserver.", + "lastTransitionTime": { + "description": "The last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "lastUpdateTime": { + "description": "The last time this condition was updated.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "A human readable message indicating details about the transition.", + "type": "string" + }, + "reason": { + "description": "The reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status of the condition, one of True, False, Unknown.", "type": "string", "default": "" }, - "expirationSeconds": { - "description": "expirationSeconds is the duration of validity of the token in \"TokenRequestSpec\". It has the same default value of \"ExpirationSeconds\" in \"TokenRequestSpec\".", - "type": "integer", - "format": "int64" + "type": { + "description": "Type of deployment condition.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "storage.k8s.io", + "Group": "apps.openshift.io", "Version": "v1", - "Kind": "TokenRequest", + "Kind": "DeploymentCondition", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1.VolumeAttachment": { - "description": "VolumeAttachment captures the intent to attach or detach the specified volume to/from the specified node.\n\nVolumeAttachment objects are non-namespaced.", + "io.openshift.apps.v1.DeploymentConfig": { + "description": "Deployment Configs define the template for a pod and manages deploying new images or configuration changes. A single deployment configuration is usually analogous to a single micro-service. Can support many different deployment patterns, including full restart, customizable rolling updates, and fully custom behaviors, as well as pre- and post- deployment hooks. Each individual deployment is represented as a replication controller.\n\nA deployment is \"triggered\" when its configuration is changed or a tag in an Image Stream is changed. Triggers can be disabled to allow manual control over a deployment. The \"strategy\" determines how the deployment is carried out and may be changed at any time. The `latestVersion` field is updated when a new deployment is triggered by any means.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). Deprecated: Use deployments or other means for declarative updates for pods instead.", "type": "object", "required": [ "spec" @@ -49245,31 +54600,31 @@ "type": "string" }, "metadata": { - "description": "Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec represents specification of the desired attach/detach volume behavior. Populated by the Kubernetes system.", + "description": "Spec represents a desired deployment state and how to deploy to it.", "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachmentSpec" + "$ref": "#/definitions/io.openshift.apps.v1.DeploymentConfigSpec" }, "status": { - "description": "status represents status of the VolumeAttachment request. Populated by the entity completing the attach or detach operation, i.e. the external-attacher.", + "description": "Status represents the current deployment state.", "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachmentStatus" + "$ref": "#/definitions/io.openshift.apps.v1.DeploymentConfigStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "storage.k8s.io", + "Group": "apps.openshift.io", "Version": "v1", - "Kind": "VolumeAttachment", - "Scope": "Clustered" + "Kind": "DeploymentConfig", + "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1.VolumeAttachmentList": { - "description": "VolumeAttachmentList is a collection of VolumeAttachment objects.", + "io.openshift.apps.v1.DeploymentConfigList": { + "description": "DeploymentConfigList is a collection of deployment configs.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "items" @@ -49280,11 +54635,11 @@ "type": "string" }, "items": { - "description": "items is the list of VolumeAttachments", + "description": "Items is a list of deployment configs", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachment" + "$ref": "#/definitions/io.openshift.apps.v1.DeploymentConfig" } }, "kind": { @@ -49292,506 +54647,785 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "storage.k8s.io", + "Group": "apps.openshift.io", "Version": "v1", - "Kind": "VolumeAttachmentList", + "Kind": "DeploymentConfigList", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1.VolumeAttachmentSource": { - "description": "VolumeAttachmentSource represents a volume that should be attached. Right now only PersistenVolumes can be attached via external attacher, in future we may allow also inline volumes in pods. Exactly one member can be set.", + "io.openshift.apps.v1.DeploymentConfigRollback": { + "description": "DeploymentConfigRollback provides the input to rollback generation.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", + "required": [ + "name", + "spec" + ], "properties": { - "inlineVolumeSpec": { - "description": "inlineVolumeSpec contains all the information necessary to attach a persistent volume defined by a pod's inline VolumeSource. This field is populated only for the CSIMigration feature. It contains translated fields from a pod's inline VolumeSource to a PersistentVolumeSpec. This field is beta-level and is only honored by servers that enabled the CSIMigration feature.", - "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeSpec" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "persistentVolumeName": { - "description": "persistentVolumeName represents the name of the persistent volume to attach.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + }, + "name": { + "description": "Name of the deployment config that will be rolled back.", + "type": "string", + "default": "" + }, + "spec": { + "description": "Spec defines the options to rollback generation.", + "default": {}, + "$ref": "#/definitions/io.openshift.apps.v1.DeploymentConfigRollbackSpec" + }, + "updatedAnnotations": { + "description": "UpdatedAnnotations is a set of new annotations that will be added in the deployment config.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { - "Type": "nested", - "Group": "storage.k8s.io", + "Type": "object", + "Group": "apps.openshift.io", "Version": "v1", - "Kind": "VolumeAttachmentSource", + "Kind": "DeploymentConfigRollback", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1.VolumeAttachmentSpec": { - "description": "VolumeAttachmentSpec is the specification of a VolumeAttachment request.", + "io.openshift.apps.v1.DeploymentConfigRollbackSpec": { + "description": "DeploymentConfigRollbackSpec represents the options for rollback generation.", "type": "object", "required": [ - "attacher", - "source", - "nodeName" + "from", + "includeTriggers", + "includeTemplate", + "includeReplicationMeta", + "includeStrategy" ], "properties": { - "attacher": { - "description": "attacher indicates the name of the volume driver that MUST handle this request. This is the name returned by GetPluginName().", - "type": "string", - "default": "" + "from": { + "description": "From points to a ReplicationController which is a deployment.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" }, - "nodeName": { - "description": "nodeName represents the node that the volume should be attached to.", - "type": "string", - "default": "" + "includeReplicationMeta": { + "description": "IncludeReplicationMeta specifies whether to include the replica count and selector.", + "type": "boolean", + "default": false }, - "source": { - "description": "source represents the volume that should be attached.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeAttachmentSource" + "includeStrategy": { + "description": "IncludeStrategy specifies whether to include the deployment Strategy.", + "type": "boolean", + "default": false + }, + "includeTemplate": { + "description": "IncludeTemplate specifies whether to include the PodTemplateSpec.", + "type": "boolean", + "default": false + }, + "includeTriggers": { + "description": "IncludeTriggers specifies whether to include config Triggers.", + "type": "boolean", + "default": false + }, + "revision": { + "description": "Revision to rollback to. If set to 0, rollback to the last revision.", + "type": "integer", + "format": "int64" } }, "x-fabric8-info": { "Type": "nested", - "Group": "storage.k8s.io", + "Group": "apps.openshift.io", "Version": "v1", - "Kind": "VolumeAttachmentSpec", + "Kind": "DeploymentConfigRollbackSpec", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1.VolumeAttachmentStatus": { - "description": "VolumeAttachmentStatus is the status of a VolumeAttachment request.", + "io.openshift.apps.v1.DeploymentConfigSpec": { + "description": "DeploymentConfigSpec represents the desired state of the deployment.", "type": "object", - "required": [ - "attached" - ], "properties": { - "attachError": { - "description": "attachError represents the last error encountered during attach operation, if any. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", - "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeError" + "minReadySeconds": { + "description": "MinReadySeconds is the minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", + "type": "integer", + "format": "int32" }, - "attached": { - "description": "attached indicates the volume is successfully attached. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", - "type": "boolean", - "default": false + "paused": { + "description": "Paused indicates that the deployment config is paused resulting in no new deployments on template changes or changes in the template caused by other triggers.", + "type": "boolean" }, - "attachmentMetadata": { - "description": "attachmentMetadata is populated with any information returned by the attach operation, upon successful attach, that must be passed into subsequent WaitForAttach or Mount calls. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", + "replicas": { + "description": "Replicas is the number of desired replicas.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "revisionHistoryLimit": { + "description": "RevisionHistoryLimit is the number of old ReplicationControllers to retain to allow for rollbacks. This field is a pointer to allow for differentiation between an explicit zero and not specified. Defaults to 10. (This only applies to DeploymentConfigs created via the new group API resource, not the legacy resource.)", + "type": "integer", + "format": "int32" + }, + "selector": { + "description": "Selector is a label query over pods that should match the Replicas count.", "type": "object", "additionalProperties": { "type": "string", "default": "" } }, - "detachError": { - "description": "detachError represents the last error encountered during detach operation, if any. This field must only be set by the entity completing the detach operation, i.e. the external-attacher.", - "$ref": "#/definitions/io.k8s.api.storage.v1.VolumeError" + "strategy": { + "description": "Strategy describes how a deployment is executed.", + "default": {}, + "$ref": "#/definitions/io.openshift.apps.v1.DeploymentStrategy" + }, + "template": { + "description": "Template is the object that describes the pod that will be created if insufficient replicas are detected.", + "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" + }, + "test": { + "description": "Test ensures that this deployment config will have zero replicas except while a deployment is running. This allows the deployment config to be used as a continuous deployment test - triggering on images, running the deployment, and then succeeding or failing. Post strategy hooks and After actions can be used to integrate successful deployment with an action.", + "type": "boolean", + "default": false + }, + "triggers": { + "description": "Triggers determine how updates to a DeploymentConfig result in new deployments. If no triggers are defined, a new deployment can only occur as a result of an explicit client update to the DeploymentConfig with a new LatestVersion. If null, defaults to having a config change trigger.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.apps.v1.DeploymentTriggerPolicy" + } + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "apps.openshift.io", + "Version": "v1", + "Kind": "DeploymentConfigSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.apps.v1.DeploymentConfigStatus": { + "description": "DeploymentConfigStatus represents the current deployment state.", + "type": "object", + "required": [ + "latestVersion", + "observedGeneration", + "replicas", + "updatedReplicas", + "availableReplicas", + "unavailableReplicas" + ], + "properties": { + "availableReplicas": { + "description": "AvailableReplicas is the total number of available pods targeted by this deployment config.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "conditions": { + "description": "Conditions represents the latest available observations of a deployment config's current state.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.apps.v1.DeploymentCondition" + }, + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "details": { + "description": "Details are the reasons for the update to this deployment config. This could be based on a change made by the user or caused by an automatic trigger", + "$ref": "#/definitions/io.openshift.apps.v1.DeploymentDetails" + }, + "latestVersion": { + "description": "LatestVersion is used to determine whether the current deployment associated with a deployment config is out of sync.", + "type": "integer", + "format": "int64", + "default": 0 + }, + "observedGeneration": { + "description": "ObservedGeneration is the most recent generation observed by the deployment config controller.", + "type": "integer", + "format": "int64", + "default": 0 + }, + "readyReplicas": { + "description": "Total number of ready pods targeted by this deployment.", + "type": "integer", + "format": "int32" + }, + "replicas": { + "description": "Replicas is the total number of pods targeted by this deployment config.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "unavailableReplicas": { + "description": "UnavailableReplicas is the total number of unavailable pods targeted by this deployment config.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "updatedReplicas": { + "description": "UpdatedReplicas is the total number of non-terminated pods targeted by this deployment config that have the desired template spec.", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "storage.k8s.io", + "Group": "apps.openshift.io", "Version": "v1", - "Kind": "VolumeAttachmentStatus", + "Kind": "DeploymentConfigStatus", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1.VolumeError": { - "description": "VolumeError captures an error encountered during a volume operation.", + "io.openshift.apps.v1.DeploymentDetails": { + "description": "DeploymentDetails captures information about the causes of a deployment.", "type": "object", + "required": [ + "causes" + ], "properties": { + "causes": { + "description": "Causes are extended data associated with all the causes for creating a new deployment", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.apps.v1.DeploymentCause" + } + }, "message": { - "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.", + "description": "Message is the user specified change message, if this deployment was triggered manually by the user", "type": "string" - }, - "time": { - "description": "time represents the time the error was encountered.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" } }, "x-fabric8-info": { "Type": "nested", - "Group": "storage.k8s.io", + "Group": "apps.openshift.io", "Version": "v1", - "Kind": "VolumeError", + "Kind": "DeploymentDetails", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1.VolumeNodeResources": { - "description": "VolumeNodeResources is a set of resource limits for scheduling of volumes.", + "io.openshift.apps.v1.DeploymentLog": { + "description": "DeploymentLog represents the logs for a deployment\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "properties": { - "count": { - "description": "count indicates the maximum number of unique volumes managed by the CSI driver that can be used on a node. A volume that is both attached and mounted on a node is considered to be used once, not twice. The same rule applies for a unique volume that is shared among multiple pods on the same node. If this field is not specified, then the supported number of volumes on this node is unbounded.", - "type": "integer", - "format": "int32" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "storage.k8s.io", + "Type": "object", + "Group": "apps.openshift.io", "Version": "v1", - "Kind": "VolumeNodeResources", + "Kind": "DeploymentLog", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1alpha1.CSIStorageCapacity": { - "description": "CSIStorageCapacity stores the result of one CSI GetCapacity call. For a given StorageClass, this describes the available capacity in a particular topology segment. This can be used when considering where to instantiate new PersistentVolumes.\n\nFor example this can express things like: - StorageClass \"standard\" has \"1234 GiB\" available in \"topology.kubernetes.io/zone=us-east1\" - StorageClass \"localssd\" has \"10 GiB\" available in \"kubernetes.io/hostname=knode-abc123\"\n\nThe following three cases all imply that no capacity is available for a certain combination: - no object exists with suitable topology and storage class name - such an object exists, but the capacity is unset - such an object exists, but the capacity is zero\n\nThe producer of these objects can decide which approach is more suitable.\n\nThey are consumed by the kube-scheduler when a CSI driver opts into capacity-aware scheduling with CSIDriverSpec.StorageCapacity. The scheduler compares the MaximumVolumeSize against the requested size of pending volumes to filter out unsuitable nodes. If MaximumVolumeSize is unset, it falls back to a comparison against the less precise Capacity. If that is also unset, the scheduler assumes that capacity is insufficient and tries some other node.", + "io.openshift.apps.v1.DeploymentLogOptions": { + "description": "DeploymentLogOptions is the REST options for a deployment log\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", - "required": [ - "storageClassName" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "capacity": { - "description": "capacity is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.\n\nThe semantic is currently (CSI spec 1.2) defined as: The available capacity, in bytes, of the storage that can be used to provision volumes. If not set, that information is currently unavailable.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "container": { + "description": "The container for which to stream logs. Defaults to only container if there is one container in the pod.", + "type": "string" + }, + "follow": { + "description": "Follow if true indicates that the build log should be streamed until the build terminates.", + "type": "boolean" }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "maximumVolumeSize": { - "description": "maximumVolumeSize is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.\n\nThis is defined since CSI spec 1.4.0 as the largest size that may be used in a CreateVolumeRequest.capacity_range.required_bytes field to create a volume with the same parameters as those in GetCapacityRequest. The corresponding value in the Kubernetes API is ResourceRequirements.Requests in a volume claim.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "limitBytes": { + "description": "If set, the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.", + "type": "integer", + "format": "int64" }, - "metadata": { - "description": "Standard object's metadata. The name has no particular meaning. It must be be a DNS subdomain (dots allowed, 253 characters). To ensure that there are no conflicts with other CSI drivers on the cluster, the recommendation is to use csisc-\u003cuuid\u003e, a generated name, or a reverse-domain name which ends with the unique CSI driver name.\n\nObjects are namespaced.\n\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "nowait": { + "description": "NoWait if true causes the call to return immediately even if the deployment is not available yet. Otherwise the server will wait until the deployment has started.", + "type": "boolean" }, - "nodeTopology": { - "description": "nodeTopology defines which nodes have access to the storage for which capacity was reported. If not set, the storage is not accessible from any node in the cluster. If empty, the storage is accessible from all nodes. This field is immutable.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "previous": { + "description": "Return previous deployment logs. Defaults to false.", + "type": "boolean" }, - "storageClassName": { - "description": "storageClassName represents the name of the StorageClass that the reported capacity applies to. It must meet the same requirements as the name of a StorageClass object (non-empty, DNS subdomain). If that object no longer exists, the CSIStorageCapacity object is obsolete and should be removed by its creator. This field is immutable.", - "type": "string", - "default": "" + "sinceSeconds": { + "description": "A relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", + "type": "integer", + "format": "int64" + }, + "sinceTime": { + "description": "An RFC3339 timestamp from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "tailLines": { + "description": "If set, the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime", + "type": "integer", + "format": "int64" + }, + "timestamps": { + "description": "If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.", + "type": "boolean" + }, + "version": { + "description": "Version of the deployment for which to view logs.", + "type": "integer", + "format": "int64" } }, "x-fabric8-info": { "Type": "object", - "Group": "storage.k8s.io", - "Version": "v1alpha1", - "Kind": "CSIStorageCapacity", + "Group": "apps.openshift.io", + "Version": "v1", + "Kind": "DeploymentLogOptions", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1alpha1.CSIStorageCapacityList": { - "description": "CSIStorageCapacityList is a collection of CSIStorageCapacity objects.", + "io.openshift.apps.v1.DeploymentRequest": { + "description": "DeploymentRequest is a request to a deployment config for a new deployment.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "items" + "name", + "latest", + "force" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "items is the list of CSIStorageCapacity objects.", + "excludeTriggers": { + "description": "ExcludeTriggers instructs the instantiator to avoid processing the specified triggers. This field overrides the triggers from latest and allows clients to control specific logic. This field is ignored if not specified.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1alpha1.CSIStorageCapacity" + "type": "string", + "default": "" } }, + "force": { + "description": "Force will try to force a new deployment to run. If the deployment config is paused, then setting this to true will return an Invalid error.", + "type": "boolean", + "default": false + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "metadata": { - "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "latest": { + "description": "Latest will update the deployment config with the latest state from all triggers.", + "type": "boolean", + "default": false + }, + "name": { + "description": "Name of the deployment config for requesting a new deployment.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "list", - "Group": "storage.k8s.io", - "Version": "v1alpha1", - "Kind": "CSIStorageCapacityList", + "Type": "object", + "Group": "apps.openshift.io", + "Version": "v1", + "Kind": "DeploymentRequest", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1alpha1.VolumeAttachment": { - "description": "VolumeAttachment captures the intent to attach or detach the specified volume to/from the specified node.\n\nVolumeAttachment objects are non-namespaced.", + "io.openshift.apps.v1.DeploymentStrategy": { + "description": "DeploymentStrategy describes how to perform a deployment.", "type": "object", - "required": [ - "spec" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "activeDeadlineSeconds": { + "description": "ActiveDeadlineSeconds is the duration in seconds that the deployer pods for this deployment config may be active on a node before the system actively tries to terminate them.", + "type": "integer", + "format": "int64" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "annotations": { + "description": "Annotations is a set of key, value pairs added to custom deployer and lifecycle pre/post hook pods.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } }, - "metadata": { - "description": "Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "customParams": { + "description": "CustomParams are the input to the Custom deployment strategy, and may also be specified for the Recreate and Rolling strategies to customize the execution process that runs the deployment.", + "$ref": "#/definitions/io.openshift.apps.v1.CustomDeploymentStrategyParams" }, - "spec": { - "description": "spec represents specification of the desired attach/detach volume behavior. Populated by the Kubernetes system.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachmentSpec" + "labels": { + "description": "Labels is a set of key, value pairs added to custom deployer and lifecycle pre/post hook pods.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } }, - "status": { - "description": "status represents status of the VolumeAttachment request. Populated by the entity completing the attach or detach operation, i.e. the external-attacher.", + "recreateParams": { + "description": "RecreateParams are the input to the Recreate deployment strategy.", + "$ref": "#/definitions/io.openshift.apps.v1.RecreateDeploymentStrategyParams" + }, + "resources": { + "description": "Resources contains resource requirements to execute the deployment and any hooks.", "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachmentStatus" + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" + }, + "rollingParams": { + "description": "RollingParams are the input to the Rolling deployment strategy.", + "$ref": "#/definitions/io.openshift.apps.v1.RollingDeploymentStrategyParams" + }, + "type": { + "description": "Type is the name of a deployment strategy.", + "type": "string" } }, "x-fabric8-info": { - "Type": "object", - "Group": "storage.k8s.io", - "Version": "v1alpha1", - "Kind": "VolumeAttachment", - "Scope": "Clustered" + "Type": "nested", + "Group": "apps.openshift.io", + "Version": "v1", + "Kind": "DeploymentStrategy", + "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1alpha1.VolumeAttachmentList": { - "description": "VolumeAttachmentList is a collection of VolumeAttachment objects.", + "io.openshift.apps.v1.DeploymentTriggerImageChangeParams": { + "description": "DeploymentTriggerImageChangeParams represents the parameters to the ImageChange trigger.", "type": "object", "required": [ - "items" + "from" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "automatic": { + "description": "Automatic means that the detection of a new tag value should result in an image update inside the pod template.", + "type": "boolean" }, - "items": { - "description": "items is the list of VolumeAttachments", + "containerNames": { + "description": "ContainerNames is used to restrict tag updates to the specified set of container names in a pod. If multiple triggers point to the same containers, the resulting behavior is undefined. Future API versions will make this a validation error. If ContainerNames does not point to a valid container, the trigger will be ignored. Future API versions will make this a validation error.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachment" + "type": "string", + "default": "" } }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "from": { + "description": "From is a reference to an image stream tag to watch for changes. From.Name is the only required subfield - if From.Namespace is blank, the namespace of the current deployment trigger will be used.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + }, + "lastTriggeredImage": { + "description": "LastTriggeredImage is the last image to be triggered.", + "type": "string" } }, "x-fabric8-info": { - "Type": "list", - "Group": "storage.k8s.io", - "Version": "v1alpha1", - "Kind": "VolumeAttachmentList", + "Type": "nested", + "Group": "apps.openshift.io", + "Version": "v1", + "Kind": "DeploymentTriggerImageChangeParams", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1alpha1.VolumeAttachmentSource": { - "description": "VolumeAttachmentSource represents a volume that should be attached. Right now only PersistenVolumes can be attached via external attacher, in future we may allow also inline volumes in pods. Exactly one member can be set.", + "io.openshift.apps.v1.DeploymentTriggerPolicy": { + "description": "DeploymentTriggerPolicy describes a policy for a single trigger that results in a new deployment.", "type": "object", "properties": { - "inlineVolumeSpec": { - "description": "inlineVolumeSpec contains all the information necessary to attach a persistent volume defined by a pod's inline VolumeSource. This field is populated only for the CSIMigration feature. It contains translated fields from a pod's inline VolumeSource to a PersistentVolumeSpec. This field is alpha-level and is only honored by servers that enabled the CSIMigration feature.", - "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeSpec" + "imageChangeParams": { + "description": "ImageChangeParams represents the parameters for the ImageChange trigger.", + "$ref": "#/definitions/io.openshift.apps.v1.DeploymentTriggerImageChangeParams" }, - "persistentVolumeName": { - "description": "persistentVolumeName represents the name of the persistent volume to attach.", + "type": { + "description": "Type of the trigger", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "storage.k8s.io", - "Version": "v1alpha1", - "Kind": "VolumeAttachmentSource", + "Group": "apps.openshift.io", + "Version": "v1", + "Kind": "DeploymentTriggerPolicy", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1alpha1.VolumeAttachmentSpec": { - "description": "VolumeAttachmentSpec is the specification of a VolumeAttachment request.", + "io.openshift.apps.v1.ExecNewPodHook": { + "description": "ExecNewPodHook is a hook implementation which runs a command in a new pod based on the specified container which is assumed to be part of the deployment template.", "type": "object", "required": [ - "attacher", - "source", - "nodeName" + "command", + "containerName" ], "properties": { - "attacher": { - "description": "attacher indicates the name of the volume driver that MUST handle this request. This is the name returned by GetPluginName().", - "type": "string", - "default": "" + "command": { + "description": "Command is the action command and its arguments.", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "nodeName": { - "description": "nodeName represents the node that the volume should be attached to.", + "containerName": { + "description": "ContainerName is the name of a container in the deployment pod template whose container image will be used for the hook pod's container.", "type": "string", "default": "" }, - "source": { - "description": "source represents the volume that should be attached.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttachmentSource" + "env": { + "description": "Env is a set of environment variables to supply to the hook pod's container.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" + } + }, + "volumes": { + "description": "Volumes is a list of named volumes from the pod template which should be copied to the hook pod. Volumes names not found in pod spec are ignored. An empty list means no volumes will be copied.", + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "storage.k8s.io", - "Version": "v1alpha1", - "Kind": "VolumeAttachmentSpec", + "Group": "apps.openshift.io", + "Version": "v1", + "Kind": "ExecNewPodHook", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1alpha1.VolumeAttachmentStatus": { - "description": "VolumeAttachmentStatus is the status of a VolumeAttachment request.", + "io.openshift.apps.v1.LifecycleHook": { + "description": "LifecycleHook defines a specific deployment lifecycle action. Only one type of action may be specified at any time.", "type": "object", "required": [ - "attached" + "failurePolicy" ], "properties": { - "attachError": { - "description": "attachError represents the last error encountered during attach operation, if any. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", - "$ref": "#/definitions/io.k8s.api.storage.v1alpha1.VolumeError" + "execNewPod": { + "description": "ExecNewPod specifies the options for a lifecycle hook backed by a pod.", + "$ref": "#/definitions/io.openshift.apps.v1.ExecNewPodHook" }, - "attached": { - "description": "attached indicates the volume is successfully attached. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", - "type": "boolean", - "default": false + "failurePolicy": { + "description": "FailurePolicy specifies what action to take if the hook fails.", + "type": "string", + "default": "" }, - "attachmentMetadata": { - "description": "attachmentMetadata is populated with any information returned by the attach operation, upon successful attach, that must be passed into subsequent WaitForAttach or Mount calls. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" + "tagImages": { + "description": "TagImages instructs the deployer to tag the current image referenced under a container onto an image stream tag.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.apps.v1.TagImageHook" } - }, - "detachError": { - "description": "detachError represents the last error encountered during detach operation, if any. This field must only be set by the entity completing the detach operation, i.e. the external-attacher.", - "$ref": "#/definitions/io.k8s.api.storage.v1alpha1.VolumeError" } }, "x-fabric8-info": { "Type": "nested", - "Group": "storage.k8s.io", - "Version": "v1alpha1", - "Kind": "VolumeAttachmentStatus", + "Group": "apps.openshift.io", + "Version": "v1", + "Kind": "LifecycleHook", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1alpha1.VolumeAttributesClass": { - "description": "VolumeAttributesClass represents a specification of mutable volume attributes defined by the CSI driver. The class can be specified during dynamic provisioning of PersistentVolumeClaims, and changed in the PersistentVolumeClaim spec after provisioning.", + "io.openshift.apps.v1.RecreateDeploymentStrategyParams": { + "description": "RecreateDeploymentStrategyParams are the input to the Recreate deployment strategy.", "type": "object", - "required": [ - "driverName" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "driverName": { - "description": "Name of the CSI driver This field is immutable.", - "type": "string", - "default": "" + "mid": { + "description": "Mid is a lifecycle hook which is executed while the deployment is scaled down to zero before the first new pod is created. All LifecycleHookFailurePolicy values are supported.", + "$ref": "#/definitions/io.openshift.apps.v1.LifecycleHook" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "post": { + "description": "Post is a lifecycle hook which is executed after the strategy has finished all deployment logic. All LifecycleHookFailurePolicy values are supported.", + "$ref": "#/definitions/io.openshift.apps.v1.LifecycleHook" }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "pre": { + "description": "Pre is a lifecycle hook which is executed before the strategy manipulates the deployment. All LifecycleHookFailurePolicy values are supported.", + "$ref": "#/definitions/io.openshift.apps.v1.LifecycleHook" }, - "parameters": { - "description": "parameters hold volume attributes defined by the CSI driver. These values are opaque to the Kubernetes and are passed directly to the CSI driver. The underlying storage provider supports changing these attributes on an existing volume, however the parameters field itself is immutable. To invoke a volume update, a new VolumeAttributesClass should be created with new parameters, and the PersistentVolumeClaim should be updated to reference the new VolumeAttributesClass.\n\nThis field is required and must contain at least one key/value pair. The keys cannot be empty, and the maximum number of parameters is 512, with a cumulative max size of 256K. If the CSI driver rejects invalid parameters, the target PersistentVolumeClaim will be set to an \"Infeasible\" state in the modifyVolumeStatus field.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } + "timeoutSeconds": { + "description": "TimeoutSeconds is the time to wait for updates before giving up. If the value is nil, a default will be used.", + "type": "integer", + "format": "int64" } }, "x-fabric8-info": { - "Type": "object", - "Group": "storage.k8s.io", - "Version": "v1alpha1", - "Kind": "VolumeAttributesClass", - "Scope": "Clustered" + "Type": "nested", + "Group": "apps.openshift.io", + "Version": "v1", + "Kind": "RecreateDeploymentStrategyParams", + "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1alpha1.VolumeAttributesClassList": { - "description": "VolumeAttributesClassList is a collection of VolumeAttributesClass objects.", + "io.openshift.apps.v1.RollingDeploymentStrategyParams": { + "description": "RollingDeploymentStrategyParams are the input to the Rolling deployment strategy.", "type": "object", - "required": [ - "items" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "intervalSeconds": { + "description": "IntervalSeconds is the time to wait between polling deployment status after update. If the value is nil, a default will be used.", + "type": "integer", + "format": "int64" }, - "items": { - "description": "items is the list of VolumeAttributesClass objects.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1alpha1.VolumeAttributesClass" - } + "maxSurge": { + "description": "MaxSurge is the maximum number of pods that can be scheduled above the original number of pods. Value can be an absolute number (ex: 5) or a percentage of total pods at the start of the update (ex: 10%). Absolute number is calculated from percentage by rounding up.\n\nThis cannot be 0 if MaxUnavailable is 0. By default, 25% is used.\n\nExample: when this is set to 30%, the new RC can be scaled up by 30% immediately when the rolling update starts. Once old pods have been killed, new RC can be scaled up further, ensuring that total number of pods running at any time during the update is atmost 130% of original pods.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "maxUnavailable": { + "description": "MaxUnavailable is the maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of total pods at the start of update (ex: 10%). Absolute number is calculated from percentage by rounding down.\n\nThis cannot be 0 if MaxSurge is 0. By default, 25% is used.\n\nExample: when this is set to 30%, the old RC can be scaled down by 30% immediately when the rolling update starts. Once new pods are ready, old RC can be scaled down further, followed by scaling up the new RC, ensuring that at least 70% of original number of pods are available at all times during the update.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + }, + "post": { + "description": "Post is a lifecycle hook which is executed after the strategy has finished all deployment logic. All LifecycleHookFailurePolicy values are supported.", + "$ref": "#/definitions/io.openshift.apps.v1.LifecycleHook" + }, + "pre": { + "description": "Pre is a lifecycle hook which is executed before the deployment process begins. All LifecycleHookFailurePolicy values are supported.", + "$ref": "#/definitions/io.openshift.apps.v1.LifecycleHook" + }, + "timeoutSeconds": { + "description": "TimeoutSeconds is the time to wait for updates before giving up. If the value is nil, a default will be used.", + "type": "integer", + "format": "int64" + }, + "updatePeriodSeconds": { + "description": "UpdatePeriodSeconds is the time to wait between individual pod updates. If the value is nil, a default will be used.", + "type": "integer", + "format": "int64" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "apps.openshift.io", + "Version": "v1", + "Kind": "RollingDeploymentStrategyParams", + "Scope": "Namespaced" + } + }, + "io.openshift.apps.v1.TagImageHook": { + "description": "TagImageHook is a request to tag the image in a particular container onto an ImageStreamTag.", + "type": "object", + "required": [ + "containerName", + "to" + ], + "properties": { + "containerName": { + "description": "ContainerName is the name of a container in the deployment config whose image value will be used as the source of the tag. If there is only a single container this value will be defaulted to the name of that container.", + "type": "string", + "default": "" }, - "metadata": { - "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "to": { + "description": "To is the target ImageStreamTag to set the container's image onto.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" } }, "x-fabric8-info": { - "Type": "list", - "Group": "storage.k8s.io", - "Version": "v1alpha1", - "Kind": "VolumeAttributesClassList", + "Type": "nested", + "Group": "apps.openshift.io", + "Version": "v1", + "Kind": "TagImageHook", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1alpha1.VolumeError": { - "description": "VolumeError captures an error encountered during a volume operation.", + "io.openshift.authorization.v1.Action": { + "description": "Action describes a request to the API server", "type": "object", + "required": [ + "namespace", + "verb", + "resourceAPIGroup", + "resourceAPIVersion", + "resource", + "resourceName", + "path", + "isNonResourceURL" + ], "properties": { - "message": { - "description": "message represents the error encountered during Attach or Detach operation. This string maybe logged, so it should not contain sensitive information.", - "type": "string" + "content": { + "description": "Content is the actual content of the request for create and update", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" }, - "time": { - "description": "time represents the time the error was encountered.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "isNonResourceURL": { + "description": "IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)", + "type": "boolean", + "default": false + }, + "namespace": { + "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces", + "type": "string", + "default": "" + }, + "path": { + "description": "Path is the path of a non resource URL", + "type": "string", + "default": "" + }, + "resource": { + "description": "Resource is one of the existing resource types", + "type": "string", + "default": "" + }, + "resourceAPIGroup": { + "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined", + "type": "string", + "default": "" + }, + "resourceAPIVersion": { + "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined", + "type": "string", + "default": "" + }, + "resourceName": { + "description": "ResourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"", + "type": "string", + "default": "" + }, + "verb": { + "description": "Verb is one of: get, list, watch, create, update, delete", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "storage.k8s.io", - "Version": "v1alpha1", - "Kind": "VolumeError", + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "Action", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1beta1.CSIDriver": { - "description": "CSIDriver captures information about a Container Storage Interface (CSI) volume driver deployed on the cluster. CSI drivers do not need to create the CSIDriver object directly. Instead they may use the cluster-driver-registrar sidecar container. When deployed with a CSI driver it automatically creates a CSIDriver object representing the driver. Kubernetes attach detach controller uses this object to determine whether attach is required. Kubelet uses this object to determine whether pod information needs to be passed on mount. CSIDriver objects are non-namespaced.", + "io.openshift.authorization.v1.ClusterRole": { + "description": "ClusterRole is a logical grouping of PolicyRules that can be referenced as a unit by ClusterRoleBindings.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "spec" + "rules" ], "properties": { + "aggregationRule": { + "description": "AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.", + "$ref": "#/definitions/io.k8s.api.rbac.v1.AggregationRule" + }, "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" @@ -49801,41 +55435,45 @@ "type": "string" }, "metadata": { - "description": "Standard object metadata. metadata.Name indicates the name of the CSI driver that this object refers to; it MUST be the same name returned by the CSI GetPluginName() call for that driver. The driver name must be 63 characters or less, beginning and ending with an alphanumeric character ([a-z0-9A-Z]) with dashes (-), dots (.), and alphanumerics between. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "spec": { - "description": "spec represents the specification of the CSI Driver.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIDriverSpec" + "rules": { + "description": "Rules holds all the PolicyRules for this ClusterRole", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.authorization.v1.PolicyRule" + } } }, "x-fabric8-info": { "Type": "object", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "CSIDriver", + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "ClusterRole", "Scope": "Clustered" } }, - "io.k8s.api.storage.v1beta1.CSIDriverList": { - "description": "CSIDriverList is a collection of CSIDriver objects.", + "io.openshift.authorization.v1.ClusterRoleBinding": { + "description": "ClusterRoleBinding references a ClusterRole, but not contain it. It can reference any ClusterRole in the same namespace or in the global namespace. It adds who information via (Users and Groups) OR Subjects and namespace information by which namespace it exists in. ClusterRoleBindings in a given namespace only have effect in that namespace (excepting the master namespace which has power in all namespaces).\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "items" + "subjects", + "roleRef" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "items is the list of CSIDriver", + "groupNames": { + "description": "GroupNames holds all the groups directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIDriver" + "type": "string", + "default": "" } }, "kind": { @@ -49843,150 +55481,79 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - }, - "x-fabric8-info": { - "Type": "list", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "CSIDriverList", - "Scope": "Namespaced" - } - }, - "io.k8s.api.storage.v1beta1.CSIDriverSpec": { - "description": "CSIDriverSpec is the specification of a CSIDriver.", - "type": "object", - "properties": { - "attachRequired": { - "description": "attachRequired indicates this CSI volume driver requires an attach operation (because it implements the CSI ControllerPublishVolume() method), and that the Kubernetes attach detach controller should call the attach volume interface which checks the volumeattachment status and waits until the volume is attached before proceeding to mounting. The CSI external-attacher coordinates with CSI volume driver and updates the volumeattachment status when the attach operation is complete. If the CSIDriverRegistry feature gate is enabled and the value is specified to false, the attach operation will be skipped. Otherwise the attach operation will be called.\n\nThis field is immutable.", - "type": "boolean" - }, - "fsGroupPolicy": { - "description": "fsGroupPolicy defines if the underlying volume supports changing ownership and permission of the volume before being mounted. Refer to the specific FSGroupPolicy values for additional details.\n\nThis field is immutable.\n\nDefaults to ReadWriteOnceWithFSType, which will examine each volume to determine if Kubernetes should modify ownership and permissions of the volume. With the default policy the defined fsGroup will only be applied if a fstype is defined and the volume's access mode contains ReadWriteOnce.", - "type": "string" - }, - "podInfoOnMount": { - "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field is immutable.", - "type": "boolean" - }, - "requiresRepublish": { - "description": "requiresRepublish indicates the CSI driver wants `NodePublishVolume` being periodically called to reflect any possible change in the mounted volume. This field defaults to false.\n\nNote: After a successful initial NodePublishVolume call, subsequent calls to NodePublishVolume should only update the contents of the volume. New mount points will not be seen by a running container.", - "type": "boolean" - }, - "seLinuxMount": { - "description": "seLinuxMount specifies if the CSI driver supports \"-o context\" mount option.\n\nWhen \"true\", the CSI driver must ensure that all volumes provided by this CSI driver can be mounted separately with different `-o context` options. This is typical for storage backends that provide volumes as filesystems on block devices or as independent shared volumes. Kubernetes will call NodeStage / NodePublish with \"-o context=xyz\" mount option when mounting a ReadWriteOncePod volume used in Pod that has explicitly set SELinux context. In the future, it may be expanded to other volume AccessModes. In any case, Kubernetes will ensure that the volume is mounted only with a single SELinux context.\n\nWhen \"false\", Kubernetes won't pass any special SELinux mount options to the driver. This is typical for volumes that represent subdirectories of a bigger shared filesystem.\n\nDefault is \"false\".", - "type": "boolean" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "storageCapacity": { - "description": "storageCapacity indicates that the CSI volume driver wants pod scheduling to consider the storage capacity that the driver deployment will report by creating CSIStorageCapacity objects with capacity information, if set to true.\n\nThe check can be enabled immediately when deploying a driver. In that case, provisioning new volumes with late binding will pause until the driver deployment has published some suitable CSIStorageCapacity object.\n\nAlternatively, the driver can be deployed with the field unset or false and it can be flipped later when storage capacity information has been published.\n\nThis field was immutable in Kubernetes \u003c= 1.22 and now is mutable.", - "type": "boolean" + "roleRef": { + "description": "RoleRef can only reference the current namespace and the global namespace. If the ClusterRoleRef cannot be resolved, the Authorizer must return an error. Since Policy is a singleton, this is sufficient knowledge to locate a role.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" }, - "tokenRequests": { - "description": "tokenRequests indicates the CSI driver needs pods' service account tokens it is mounting volume for to do necessary authentication. Kubelet will pass the tokens in VolumeContext in the CSI NodePublishVolume calls. The CSI driver should parse and validate the following VolumeContext: \"csi.storage.k8s.io/serviceAccount.tokens\": {\n \"\u003caudience\u003e\": {\n \"token\": \u003ctoken\u003e,\n \"expirationTimestamp\": \u003cexpiration timestamp in RFC3339\u003e,\n },\n ...\n}\n\nNote: Audience in each TokenRequest should be different and at most one token is empty string. To receive a new token after expiry, RequiresRepublish can be used to trigger NodePublishVolume periodically.", + "subjects": { + "description": "Subjects hold object references to authorize with this rule. This field is ignored if UserNames or GroupNames are specified to support legacy clients and servers. Thus newer clients that do not need to support backwards compatibility should send only fully qualified Subjects and should omit the UserNames and GroupNames fields. Clients that need to support backwards compatibility can use this field to build the UserNames and GroupNames.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1beta1.TokenRequest" - }, - "x-kubernetes-list-type": "atomic" + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + } }, - "volumeLifecycleModes": { - "description": "volumeLifecycleModes defines what kind of volumes this CSI volume driver supports. The default if the list is empty is \"Persistent\", which is the usage defined by the CSI specification and implemented in Kubernetes via the usual PV/PVC mechanism.\n\nThe other mode is \"Ephemeral\". In this mode, volumes are defined inline inside the pod spec with CSIVolumeSource and their lifecycle is tied to the lifecycle of that pod. A driver has to be aware of this because it is only going to get a NodePublishVolume call for such a volume.\n\nFor more information about implementing this mode, see https://kubernetes-csi.github.io/docs/ephemeral-local-volumes.html A driver can support one or more of these modes and more modes may be added in the future.\n\nThis field is immutable.", + "userNames": { + "description": "UserNames holds all the usernames directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.", "type": "array", "items": { "type": "string", "default": "" - }, - "x-kubernetes-list-type": "atomic" + } } }, "x-fabric8-info": { - "Type": "nested", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "CSIDriverSpec", - "Scope": "Namespaced" + "Type": "object", + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "ClusterRoleBinding", + "Scope": "Clustered" } }, - "io.k8s.api.storage.v1beta1.CSINode": { - "description": "DEPRECATED - This group version of CSINode is deprecated by storage/v1/CSINode. See the release notes for more information. CSINode holds information about all CSI drivers installed on a node. CSI drivers do not need to create the CSINode object directly. As long as they use the node-driver-registrar sidecar container, the kubelet will automatically populate the CSINode object for the CSI driver as part of kubelet plugin registration. CSINode has the same name as a node. If the object is missing, it means either there are no CSI Drivers available on the node, or the Kubelet version is low enough that it doesn't create this object. CSINode has an OwnerReference that points to the corresponding node object.", + "io.openshift.authorization.v1.ClusterRoleBindingList": { + "description": "ClusterRoleBindingList is a collection of ClusterRoleBindings\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "spec" + "items" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "items": { + "description": "Items is a list of ClusterRoleBindings", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.authorization.v1.ClusterRoleBinding" + } + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "metadata.name must be the Kubernetes node name.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is the specification of CSINode", + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINodeSpec" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "CSINode", - "Scope": "Clustered" - } - }, - "io.k8s.api.storage.v1beta1.CSINodeDriver": { - "description": "CSINodeDriver holds information about the specification of one CSI driver installed on a node", - "type": "object", - "required": [ - "name", - "nodeID" - ], - "properties": { - "allocatable": { - "description": "allocatable represents the volume resources of a node that are available for scheduling.", - "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeNodeResources" - }, - "name": { - "description": "name represents the name of the CSI driver that this object refers to. This MUST be the same name returned by the CSI GetPluginName() call for that driver.", - "type": "string", - "default": "" - }, - "nodeID": { - "description": "nodeID of the node from the driver point of view. This field enables Kubernetes to communicate with storage systems that do not share the same nomenclature for nodes. For example, Kubernetes may refer to a given node as \"node1\", but the storage system may refer to the same node as \"nodeA\". When Kubernetes issues a command to the storage system to attach a volume to a specific node, it can use this field to refer to the node name using the ID that the storage system will understand, e.g. \"nodeA\" instead of \"node1\". This field is required.", - "type": "string", - "default": "" - }, - "topologyKeys": { - "description": "topologyKeys is the list of keys supported by the driver. When a driver is initialized on a cluster, it provides a set of topology keys that it understands (e.g. \"company.com/zone\", \"company.com/region\"). When a driver is initialized on a node, it provides the same topology keys along with values. Kubelet will expose these topology keys as labels on its own node object. When Kubernetes does topology aware provisioning, it can use this list to determine which labels it should retrieve from the node object and pass back to the driver. It is possible for different nodes to use different topology keys. This can be empty if driver does not support topology.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "CSINodeDriver", + "Type": "list", + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "ClusterRoleBindingList", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1beta1.CSINodeList": { - "description": "CSINodeList is a collection of CSINode objects.", + "io.openshift.authorization.v1.ClusterRoleList": { + "description": "ClusterRoleList is a collection of ClusterRoles\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "items" @@ -49997,11 +55564,11 @@ "type": "string" }, "items": { - "description": "items is the list of CSINode", + "description": "Items is a list of ClusterRoles", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINode" + "$ref": "#/definitions/io.openshift.authorization.v1.ClusterRole" } }, "kind": { @@ -50009,624 +55576,697 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "CSINodeList", + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "ClusterRoleList", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1beta1.CSINodeSpec": { - "description": "CSINodeSpec holds information about the specification of all CSI drivers installed on a node", + "io.openshift.authorization.v1.GroupRestriction": { + "description": "GroupRestriction matches a group either by a string match on the group name or a label selector applied to group labels.", "type": "object", "required": [ - "drivers" + "groups", + "labels" ], "properties": { - "drivers": { - "description": "drivers is a list of information of all CSI Drivers existing on a node. If all drivers in the list are uninstalled, this can become empty.", + "groups": { + "description": "Groups is a list of groups used to match against an individual user's groups. If the user is a member of one of the whitelisted groups, the user is allowed to be bound to a role.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "labels": { + "description": "Selectors specifies a list of label selectors over group labels.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSINodeDriver" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "CSINodeSpec", + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "GroupRestriction", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1beta1.CSIStorageCapacity": { - "description": "CSIStorageCapacity stores the result of one CSI GetCapacity call. For a given StorageClass, this describes the available capacity in a particular topology segment. This can be used when considering where to instantiate new PersistentVolumes.\n\nFor example this can express things like: - StorageClass \"standard\" has \"1234 GiB\" available in \"topology.kubernetes.io/zone=us-east1\" - StorageClass \"localssd\" has \"10 GiB\" available in \"kubernetes.io/hostname=knode-abc123\"\n\nThe following three cases all imply that no capacity is available for a certain combination: - no object exists with suitable topology and storage class name - such an object exists, but the capacity is unset - such an object exists, but the capacity is zero\n\nThe producer of these objects can decide which approach is more suitable.\n\nThey are consumed by the kube-scheduler when a CSI driver opts into capacity-aware scheduling with CSIDriverSpec.StorageCapacity. The scheduler compares the MaximumVolumeSize against the requested size of pending volumes to filter out unsuitable nodes. If MaximumVolumeSize is unset, it falls back to a comparison against the less precise Capacity. If that is also unset, the scheduler assumes that capacity is insufficient and tries some other node.", + "io.openshift.authorization.v1.IsPersonalSubjectAccessReview": { + "description": "IsPersonalSubjectAccessReview is a marker for PolicyRule.AttributeRestrictions that denotes that subjectaccessreviews on self should be allowed\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", - "required": [ - "storageClassName" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "capacity": { - "description": "capacity is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.\n\nThe semantic is currently (CSI spec 1.2) defined as: The available capacity, in bytes, of the storage that can be used to provision volumes. If not set, that information is currently unavailable.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" - }, - "maximumVolumeSize": { - "description": "maximumVolumeSize is the value reported by the CSI driver in its GetCapacityResponse for a GetCapacityRequest with topology and parameters that match the previous fields.\n\nThis is defined since CSI spec 1.4.0 as the largest size that may be used in a CreateVolumeRequest.capacity_range.required_bytes field to create a volume with the same parameters as those in GetCapacityRequest. The corresponding value in the Kubernetes API is ResourceRequirements.Requests in a volume claim.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" - }, - "metadata": { - "description": "Standard object's metadata. The name has no particular meaning. It must be be a DNS subdomain (dots allowed, 253 characters). To ensure that there are no conflicts with other CSI drivers on the cluster, the recommendation is to use csisc-\u003cuuid\u003e, a generated name, or a reverse-domain name which ends with the unique CSI driver name.\n\nObjects are namespaced.\n\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "nodeTopology": { - "description": "nodeTopology defines which nodes have access to the storage for which capacity was reported. If not set, the storage is not accessible from any node in the cluster. If empty, the storage is accessible from all nodes. This field is immutable.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - }, - "storageClassName": { - "description": "storageClassName represents the name of the StorageClass that the reported capacity applies to. It must meet the same requirements as the name of a StorageClass object (non-empty, DNS subdomain). If that object no longer exists, the CSIStorageCapacity object is obsolete and should be removed by its creator. This field is immutable.", - "type": "string", - "default": "" } }, "x-fabric8-info": { "Type": "object", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "CSIStorageCapacity", + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "IsPersonalSubjectAccessReview", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1beta1.CSIStorageCapacityList": { - "description": "CSIStorageCapacityList is a collection of CSIStorageCapacity objects.", + "io.openshift.authorization.v1.LocalResourceAccessReview": { + "description": "LocalResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec in a particular namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "items" + "namespace", + "verb", + "resourceAPIGroup", + "resourceAPIVersion", + "resource", + "resourceName", + "path", + "isNonResourceURL" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "items is the list of CSIStorageCapacity objects.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1beta1.CSIStorageCapacity" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - }, - "x-fabric8-info": { - "Type": "list", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "CSIStorageCapacityList", - "Scope": "Namespaced" - } - }, - "io.k8s.api.storage.v1beta1.StorageClass": { - "description": "StorageClass describes the parameters for a class of storage for which PersistentVolumes can be dynamically provisioned.\n\nStorageClasses are non-namespaced; the name of the storage class according to etcd is in ObjectMeta.Name.", - "type": "object", - "required": [ - "provisioner" - ], - "properties": { - "allowVolumeExpansion": { - "description": "allowVolumeExpansion shows whether the storage class allow volume expand", - "type": "boolean" - }, - "allowedTopologies": { - "description": "allowedTopologies restrict the node topologies where volumes can be dynamically provisioned. Each volume plugin defines its own supported topology specifications. An empty TopologySelectorTerm list means there is no topology restriction. This field is only honored by servers that enable the VolumeScheduling feature.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.TopologySelectorTerm" - }, - "x-kubernetes-list-type": "atomic" + "content": { + "description": "Content is the actual content of the request for create and update", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "isNonResourceURL": { + "description": "IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)", + "type": "boolean", + "default": false }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "mountOptions": { - "description": "mountOptions controls the mountOptions for dynamically provisioned PersistentVolumes of this storage class. e.g. [\"ro\", \"soft\"]. Not validated - mount of the PVs will simply fail if one is invalid.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "namespace": { + "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces", + "type": "string", + "default": "" }, - "parameters": { - "description": "parameters holds the parameters for the provisioner that should create volumes of this storage class.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } + "path": { + "description": "Path is the path of a non resource URL", + "type": "string", + "default": "" }, - "provisioner": { - "description": "provisioner indicates the type of the provisioner.", + "resource": { + "description": "Resource is one of the existing resource types", "type": "string", "default": "" }, - "reclaimPolicy": { - "description": "reclaimPolicy controls the reclaimPolicy for dynamically provisioned PersistentVolumes of this storage class. Defaults to Delete.\n\nPossible enum values:\n - `\"Delete\"` means the volume will be deleted from Kubernetes on release from its claim. The volume plugin must support Deletion.\n - `\"Recycle\"` means the volume will be recycled back into the pool of unbound persistent volumes on release from its claim. The volume plugin must support Recycling.\n - `\"Retain\"` means the volume will be left in its current phase (Released) for manual reclamation by the administrator. The default policy is Retain.", + "resourceAPIGroup": { + "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined", "type": "string", - "enum": [ - "Delete", - "Recycle", - "Retain" - ] + "default": "" }, - "volumeBindingMode": { - "description": "volumeBindingMode indicates how PersistentVolumeClaims should be provisioned and bound. When unset, VolumeBindingImmediate is used. This field is only honored by servers that enable the VolumeScheduling feature.", - "type": "string" + "resourceAPIVersion": { + "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined", + "type": "string", + "default": "" + }, + "resourceName": { + "description": "ResourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"", + "type": "string", + "default": "" + }, + "verb": { + "description": "Verb is one of: get, list, watch, create, update, delete", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "object", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "StorageClass", - "Scope": "Clustered" + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "LocalResourceAccessReview", + "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1beta1.StorageClassList": { - "description": "StorageClassList is a collection of storage classes.", + "io.openshift.authorization.v1.LocalSubjectAccessReview": { + "description": "LocalSubjectAccessReview is an object for requesting information about whether a user or group can perform an action in a particular namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "items" + "namespace", + "verb", + "resourceAPIGroup", + "resourceAPIVersion", + "resource", + "resourceName", + "path", + "isNonResourceURL", + "user", + "groups", + "scopes" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "items is the list of StorageClasses", + "content": { + "description": "Content is the actual content of the request for create and update", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + }, + "groups": { + "description": "Groups is optional. Groups is the list of groups to which the User belongs.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1beta1.StorageClass" + "type": "string", + "default": "" } }, + "isNonResourceURL": { + "description": "IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)", + "type": "boolean", + "default": false + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "namespace": { + "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces", + "type": "string", + "default": "" + }, + "path": { + "description": "Path is the path of a non resource URL", + "type": "string", + "default": "" + }, + "resource": { + "description": "Resource is one of the existing resource types", + "type": "string", + "default": "" + }, + "resourceAPIGroup": { + "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined", + "type": "string", + "default": "" + }, + "resourceAPIVersion": { + "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined", + "type": "string", + "default": "" + }, + "resourceName": { + "description": "ResourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"", + "type": "string", + "default": "" + }, + "scopes": { + "description": "Scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\". Nil for a self-SAR, means \"use the scopes on this request\". Nil for a regular SAR, means the same as empty.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "user": { + "description": "User is optional. If both User and Groups are empty, the current authenticated user is used.", + "type": "string", + "default": "" + }, + "verb": { + "description": "Verb is one of: get, list, watch, create, update, delete", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "list", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "StorageClassList", + "Type": "object", + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "LocalSubjectAccessReview", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1beta1.TokenRequest": { - "description": "TokenRequest contains parameters of a service account token.", + "io.openshift.authorization.v1.NamedClusterRole": { + "description": "NamedClusterRole relates a name with a cluster role", "type": "object", "required": [ - "audience" + "name", + "role" ], "properties": { - "audience": { - "description": "audience is the intended audience of the token in \"TokenRequestSpec\". It will default to the audiences of kube apiserver.", + "name": { + "description": "Name is the name of the cluster role", "type": "string", "default": "" }, - "expirationSeconds": { - "description": "expirationSeconds is the duration of validity of the token in \"TokenRequestSpec\". It has the same default value of \"ExpirationSeconds\" in \"TokenRequestSpec\"", - "type": "integer", - "format": "int64" + "role": { + "description": "Role is the cluster role being named", + "default": {}, + "$ref": "#/definitions/io.openshift.authorization.v1.ClusterRole" } }, "x-fabric8-info": { "Type": "nested", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "TokenRequest", + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "NamedClusterRole", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1beta1.VolumeAttachment": { - "description": "VolumeAttachment captures the intent to attach or detach the specified volume to/from the specified node.\n\nVolumeAttachment objects are non-namespaced.", + "io.openshift.authorization.v1.NamedClusterRoleBinding": { + "description": "NamedClusterRoleBinding relates a name with a cluster role binding", "type": "object", "required": [ - "spec" + "name", + "roleBinding" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec represents specification of the desired attach/detach volume behavior. Populated by the Kubernetes system.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachmentSpec" + "name": { + "description": "Name is the name of the cluster role binding", + "type": "string", + "default": "" }, - "status": { - "description": "status represents status of the VolumeAttachment request. Populated by the entity completing the attach or detach operation, i.e. the external-attacher.", + "roleBinding": { + "description": "RoleBinding is the cluster role binding being named", "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachmentStatus" + "$ref": "#/definitions/io.openshift.authorization.v1.ClusterRoleBinding" } }, "x-fabric8-info": { - "Type": "object", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "VolumeAttachment", - "Scope": "Clustered" + "Type": "nested", + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "NamedClusterRoleBinding", + "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1beta1.VolumeAttachmentList": { - "description": "VolumeAttachmentList is a collection of VolumeAttachment objects.", + "io.openshift.authorization.v1.NamedRole": { + "description": "NamedRole relates a Role with a name", "type": "object", "required": [ - "items" + "name", + "role" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is the list of VolumeAttachments", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachment" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "name": { + "description": "Name is the name of the role", + "type": "string", + "default": "" }, - "metadata": { - "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "role": { + "description": "Role is the role being named", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - }, - "x-fabric8-info": { - "Type": "list", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "VolumeAttachmentList", - "Scope": "Namespaced" - } - }, - "io.k8s.api.storage.v1beta1.VolumeAttachmentSource": { - "description": "VolumeAttachmentSource represents a volume that should be attached. Right now only PersistenVolumes can be attached via external attacher, in future we may allow also inline volumes in pods. Exactly one member can be set.", - "type": "object", - "properties": { - "inlineVolumeSpec": { - "description": "inlineVolumeSpec contains all the information necessary to attach a persistent volume defined by a pod's inline VolumeSource. This field is populated only for the CSIMigration feature. It contains translated fields from a pod's inline VolumeSource to a PersistentVolumeSpec. This field is beta-level and is only honored by servers that enabled the CSIMigration feature.", - "$ref": "#/definitions/io.k8s.api.core.v1.PersistentVolumeSpec" - }, - "persistentVolumeName": { - "description": "persistentVolumeName represents the name of the persistent volume to attach.", - "type": "string" + "$ref": "#/definitions/io.openshift.authorization.v1.Role" } }, "x-fabric8-info": { "Type": "nested", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "VolumeAttachmentSource", + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "NamedRole", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1beta1.VolumeAttachmentSpec": { - "description": "VolumeAttachmentSpec is the specification of a VolumeAttachment request.", + "io.openshift.authorization.v1.NamedRoleBinding": { + "description": "NamedRoleBinding relates a role binding with a name", "type": "object", "required": [ - "attacher", - "source", - "nodeName" + "name", + "roleBinding" ], "properties": { - "attacher": { - "description": "attacher indicates the name of the volume driver that MUST handle this request. This is the name returned by GetPluginName().", - "type": "string", - "default": "" - }, - "nodeName": { - "description": "nodeName represents the node that the volume should be attached to.", + "name": { + "description": "Name is the name of the role binding", "type": "string", "default": "" }, - "source": { - "description": "source represents the volume that should be attached.", + "roleBinding": { + "description": "RoleBinding is the role binding being named", "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttachmentSource" + "$ref": "#/definitions/io.openshift.authorization.v1.RoleBinding" } }, "x-fabric8-info": { "Type": "nested", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "VolumeAttachmentSpec", + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "NamedRoleBinding", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1beta1.VolumeAttachmentStatus": { - "description": "VolumeAttachmentStatus is the status of a VolumeAttachment request.", + "io.openshift.authorization.v1.PolicyRule": { + "description": "PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.", "type": "object", "required": [ - "attached" + "verbs", + "resources" ], "properties": { - "attachError": { - "description": "attachError represents the last error encountered during attach operation, if any. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", - "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeError" + "apiGroups": { + "description": "APIGroups is the name of the APIGroup that contains the resources. If this field is empty, then both kubernetes and origin API groups are assumed. That means that if an action is requested against one of the enumerated resources in either the kubernetes or the origin API group, the request will be allowed", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "attached": { - "description": "attached indicates the volume is successfully attached. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", - "type": "boolean", - "default": false + "attributeRestrictions": { + "description": "AttributeRestrictions will vary depending on what the Authorizer/AuthorizationAttributeBuilder pair supports. If the Authorizer does not recognize how to handle the AttributeRestrictions, the Authorizer should report an error.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" }, - "attachmentMetadata": { - "description": "attachmentMetadata is populated with any information returned by the attach operation, upon successful attach, that must be passed into subsequent WaitForAttach or Mount calls. This field must only be set by the entity completing the attach operation, i.e. the external-attacher.", - "type": "object", - "additionalProperties": { + "nonResourceURLs": { + "description": "NonResourceURLsSlice is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path This name is intentionally different than the internal type so that the DefaultConvert works nicely and because the ordering may be different.", + "type": "array", + "items": { "type": "string", "default": "" } }, - "detachError": { - "description": "detachError represents the last error encountered during detach operation, if any. This field must only be set by the entity completing the detach operation, i.e. the external-attacher.", - "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeError" + "resourceNames": { + "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "resources": { + "description": "Resources is a list of resources this rule applies to. ResourceAll represents all resources.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "verbs": { + "description": "Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all kinds.", + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "VolumeAttachmentStatus", + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "PolicyRule", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1beta1.VolumeAttributesClass": { - "description": "VolumeAttributesClass represents a specification of mutable volume attributes defined by the CSI driver. The class can be specified during dynamic provisioning of PersistentVolumeClaims, and changed in the PersistentVolumeClaim spec after provisioning.", + "io.openshift.authorization.v1.ResourceAccessReview": { + "description": "ResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "driverName" + "namespace", + "verb", + "resourceAPIGroup", + "resourceAPIVersion", + "resource", + "resourceName", + "path", + "isNonResourceURL" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "driverName": { - "description": "Name of the CSI driver This field is immutable.", - "type": "string", - "default": "" + "content": { + "description": "Content is the actual content of the request for create and update", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + }, + "isNonResourceURL": { + "description": "IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)", + "type": "boolean", + "default": false }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "parameters": { - "description": "parameters hold volume attributes defined by the CSI driver. These values are opaque to the Kubernetes and are passed directly to the CSI driver. The underlying storage provider supports changing these attributes on an existing volume, however the parameters field itself is immutable. To invoke a volume update, a new VolumeAttributesClass should be created with new parameters, and the PersistentVolumeClaim should be updated to reference the new VolumeAttributesClass.\n\nThis field is required and must contain at least one key/value pair. The keys cannot be empty, and the maximum number of parameters is 512, with a cumulative max size of 256K. If the CSI driver rejects invalid parameters, the target PersistentVolumeClaim will be set to an \"Infeasible\" state in the modifyVolumeStatus field.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } + "namespace": { + "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces", + "type": "string", + "default": "" + }, + "path": { + "description": "Path is the path of a non resource URL", + "type": "string", + "default": "" + }, + "resource": { + "description": "Resource is one of the existing resource types", + "type": "string", + "default": "" + }, + "resourceAPIGroup": { + "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined", + "type": "string", + "default": "" + }, + "resourceAPIVersion": { + "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined", + "type": "string", + "default": "" + }, + "resourceName": { + "description": "ResourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"", + "type": "string", + "default": "" + }, + "verb": { + "description": "Verb is one of: get, list, watch, create, update, delete", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "object", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "VolumeAttributesClass", + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "ResourceAccessReview", "Scope": "Clustered" } }, - "io.k8s.api.storage.v1beta1.VolumeAttributesClassList": { - "description": "VolumeAttributesClassList is a collection of VolumeAttributesClass objects.", + "io.openshift.authorization.v1.ResourceAccessReviewResponse": { + "description": "ResourceAccessReviewResponse describes who can perform the action\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "items" + "users", + "groups", + "evalutionError" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "items is the list of VolumeAttributesClass objects.", + "evalutionError": { + "description": "EvaluationError is an indication that some error occurred during resolution, but partial results can still be returned. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. This is most common when a bound role is missing, but enough roles are still present and bound to reason about the request.", + "type": "string", + "default": "" + }, + "groups": { + "description": "GroupsSlice is the list of groups who can perform the action", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.storage.v1beta1.VolumeAttributesClass" + "type": "string", + "default": "" } }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "metadata": { - "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - }, - "x-fabric8-info": { - "Type": "list", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "VolumeAttributesClassList", - "Scope": "Namespaced" - } - }, - "io.k8s.api.storage.v1beta1.VolumeError": { - "description": "VolumeError captures an error encountered during a volume operation.", - "type": "object", - "properties": { - "message": { - "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.", + "namespace": { + "description": "Namespace is the namespace used for the access review", "type": "string" }, - "time": { - "description": "time represents the time the error was encountered.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "users": { + "description": "UsersSlice is the list of users who can perform the action", + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { - "Type": "nested", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "VolumeError", + "Type": "object", + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "ResourceAccessReviewResponse", "Scope": "Namespaced" } }, - "io.k8s.api.storage.v1beta1.VolumeNodeResources": { - "description": "VolumeNodeResources is a set of resource limits for scheduling of volumes.", + "io.openshift.authorization.v1.Role": { + "description": "Role is a logical grouping of PolicyRules that can be referenced as a unit by RoleBindings.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", + "required": [ + "rules" + ], "properties": { - "count": { - "description": "count indicates the maximum number of unique volumes managed by the CSI driver that can be used on a node. A volume that is both attached and mounted on a node is considered to be used once, not twice. The same rule applies for a unique volume that is shared among multiple pods on the same node. If this field is nil, then the supported number of volumes on this node is unbounded.", - "type": "integer", - "format": "int32" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "rules": { + "description": "Rules holds all the PolicyRules for this Role", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.authorization.v1.PolicyRule" + } } }, "x-fabric8-info": { - "Type": "nested", - "Group": "storage.k8s.io", - "Version": "v1beta1", - "Kind": "VolumeNodeResources", + "Type": "object", + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "Role", "Scope": "Namespaced" } }, - "io.k8s.api.storagemigration.v1alpha1.GroupVersionResource": { - "description": "The names of the group, the version, and the resource.", + "io.openshift.authorization.v1.RoleBinding": { + "description": "RoleBinding references a Role, but not contain it. It can reference any Role in the same namespace or in the global namespace. It adds who information via (Users and Groups) OR Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace (excepting the master namespace which has power in all namespaces).\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", + "required": [ + "subjects", + "roleRef" + ], "properties": { - "group": { - "description": "The name of the group.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "resource": { - "description": "The name of the resource.", + "groupNames": { + "description": "GroupNames holds all the groups directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "version": { - "description": "The name of the version.", - "type": "string" + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "roleRef": { + "description": "RoleRef can only reference the current namespace and the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. Since Policy is a singleton, this is sufficient knowledge to locate a role.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + }, + "subjects": { + "description": "Subjects hold object references to authorize with this rule. This field is ignored if UserNames or GroupNames are specified to support legacy clients and servers. Thus newer clients that do not need to support backwards compatibility should send only fully qualified Subjects and should omit the UserNames and GroupNames fields. Clients that need to support backwards compatibility can use this field to build the UserNames and GroupNames.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + } + }, + "userNames": { + "description": "UserNames holds all the usernames directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.", + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { - "Type": "nested", - "Group": "storagemigration.k8s.io", - "Version": "v1alpha1", - "Kind": "GroupVersionResource", + "Type": "object", + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "RoleBinding", "Scope": "Namespaced" } }, - "io.k8s.api.storagemigration.v1alpha1.MigrationCondition": { - "description": "Describes the state of a migration at a certain point.", + "io.openshift.authorization.v1.RoleBindingList": { + "description": "RoleBindingList is a collection of RoleBindings\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "type", - "status" + "items" ], "properties": { - "lastUpdateTime": { - "description": "The last time this condition was updated.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "A human readable message indicating details about the transition.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "reason": { - "description": "The reason for the condition's last transition.", - "type": "string" + "items": { + "description": "Items is a list of RoleBindings", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.authorization.v1.RoleBinding" + } }, - "status": { - "description": "Status of the condition, one of True, False, Unknown.", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "type": { - "description": "Type of the condition.", - "type": "string", - "default": "" + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "storagemigration.k8s.io", - "Version": "v1alpha1", - "Kind": "MigrationCondition", + "Type": "list", + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "RoleBindingList", "Scope": "Namespaced" } }, - "io.k8s.api.storagemigration.v1alpha1.StorageVersionMigration": { - "description": "StorageVersionMigration represents a migration of stored data to the latest storage version.", + "io.openshift.authorization.v1.RoleBindingRestriction": { + "description": "RoleBindingRestriction is an object that can be matched against a subject (user, group, or service account) to determine whether rolebindings on that subject are allowed in the namespace to which the RoleBindingRestriction belongs. If any one of those RoleBindingRestriction objects matches a subject, rolebindings on that subject in the namespace are allowed.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", + "required": [ + "metadata", + "spec" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -50637,31 +56277,26 @@ "type": "string" }, "metadata": { - "description": "Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "Specification of the migration.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.storagemigration.v1alpha1.StorageVersionMigrationSpec" - }, - "status": { - "description": "Status of the migration.", + "description": "Spec defines the matcher.", "default": {}, - "$ref": "#/definitions/io.k8s.api.storagemigration.v1alpha1.StorageVersionMigrationStatus" + "$ref": "#/definitions/io.openshift.authorization.v1.RoleBindingRestrictionSpec" } }, "x-fabric8-info": { "Type": "object", - "Group": "storagemigration.k8s.io", - "Version": "v1alpha1", - "Kind": "StorageVersionMigration", - "Scope": "Clustered" + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "RoleBindingRestriction", + "Scope": "Namespaced" } }, - "io.k8s.api.storagemigration.v1alpha1.StorageVersionMigrationList": { - "description": "StorageVersionMigrationList is a collection of storage version migrations.", + "io.openshift.authorization.v1.RoleBindingRestrictionList": { + "description": "RoleBindingRestrictionList is a collection of RoleBindingRestriction objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "items" @@ -50672,856 +56307,881 @@ "type": "string" }, "items": { - "description": "Items is the list of StorageVersionMigration", + "description": "Items is a list of RoleBindingRestriction objects.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.storagemigration.v1alpha1.StorageVersionMigration" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "$ref": "#/definitions/io.openshift.authorization.v1.RoleBindingRestriction" + } }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { - "description": "Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "storagemigration.k8s.io", - "Version": "v1alpha1", - "Kind": "StorageVersionMigrationList", + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "RoleBindingRestrictionList", "Scope": "Namespaced" } }, - "io.k8s.api.storagemigration.v1alpha1.StorageVersionMigrationSpec": { - "description": "Spec of the storage version migration.", + "io.openshift.authorization.v1.RoleBindingRestrictionSpec": { + "description": "RoleBindingRestrictionSpec defines a rolebinding restriction. Exactly one field must be non-nil.", "type": "object", "required": [ - "resource" + "userrestriction", + "grouprestriction", + "serviceaccountrestriction" ], "properties": { - "continueToken": { - "description": "The token used in the list options to get the next chunk of objects to migrate. When the .status.conditions indicates the migration is \"Running\", users can use this token to check the progress of the migration.", - "type": "string" + "grouprestriction": { + "description": "GroupRestriction matches against group subjects.", + "$ref": "#/definitions/io.openshift.authorization.v1.GroupRestriction" }, - "resource": { - "description": "The resource that is being migrated. The migrator sends requests to the endpoint serving the resource. Immutable.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.storagemigration.v1alpha1.GroupVersionResource" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "storagemigration.k8s.io", - "Version": "v1alpha1", - "Kind": "StorageVersionMigrationSpec", - "Scope": "Namespaced" - } - }, - "io.k8s.api.storagemigration.v1alpha1.StorageVersionMigrationStatus": { - "description": "Status of the storage version migration.", - "type": "object", - "properties": { - "conditions": { - "description": "The latest available observations of the migration's current state.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.storagemigration.v1alpha1.MigrationCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "serviceaccountrestriction": { + "description": "ServiceAccountRestriction matches against service-account subjects.", + "$ref": "#/definitions/io.openshift.authorization.v1.ServiceAccountRestriction" }, - "resourceVersion": { - "description": "ResourceVersion to compare with the GC cache for performing the migration. This is the current resource version of given group, version and resource when kube-controller-manager first observes this StorageVersionMigration resource.", - "type": "string" + "userrestriction": { + "description": "UserRestriction matches against user subjects.", + "$ref": "#/definitions/io.openshift.authorization.v1.UserRestriction" } }, "x-fabric8-info": { "Type": "nested", - "Group": "storagemigration.k8s.io", - "Version": "v1alpha1", - "Kind": "StorageVersionMigrationStatus", + "Group": "authorization.openshift.io", + "Version": "v1", + "Kind": "RoleBindingRestrictionSpec", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup": { - "description": "APIGroup contains the name, the supported versions, and the preferred version of a group.", + "io.openshift.authorization.v1.RoleList": { + "description": "RoleList is a collection of Roles\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "name", - "versions" + "items" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "items": { + "description": "Items is a list of Roles", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.authorization.v1.Role" + } + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "name": { - "description": "name is the name of the group.", - "type": "string", - "default": "" - }, - "preferredVersion": { - "description": "preferredVersion is the version preferred by the API server, which probably is the storage version.", + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionForDiscovery" - }, - "serverAddressByClientCIDRs": { - "description": "a map of client CIDR to server address that is serving this group. This is to help clients reach servers in the most network-efficient way possible. Clients can use the appropriate server address as per the CIDR that they match. In case of multiple matches, clients should use the longest matching CIDR. The server returns only those CIDRs that it thinks that the client can match. For example: the master will return an internal IP CIDR only, if the client reaches the server using an internal IP. Server looks at X-Forwarded-For header or X-Real-Ip header or request.RemoteAddr (in that order) to get the client IP.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ServerAddressByClientCIDR" - }, - "x-kubernetes-list-type": "atomic" - }, - "versions": { - "description": "versions are the versions supported in this group.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionForDiscovery" - }, - "x-kubernetes-list-type": "atomic" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "object", - "Group": "meta.k8s.io", + "Type": "list", + "Group": "authorization.openshift.io", "Version": "v1", - "Kind": "APIGroup", + "Kind": "RoleList", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.APIGroupList": { - "description": "APIGroupList is a list of APIGroup, to allow clients to discover the API at /apis.", + "io.openshift.authorization.v1.SelfSubjectRulesReview": { + "description": "SelfSubjectRulesReview is a resource you can create to determine which actions you can perform in a namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "groups" + "spec" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "groups": { - "description": "groups is a list of APIGroup.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIGroup" - }, - "x-kubernetes-list-type": "atomic" - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + }, + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "Spec adds information about how to conduct the check", + "default": {}, + "$ref": "#/definitions/io.openshift.authorization.v1.SelfSubjectRulesReviewSpec" + }, + "status": { + "description": "Status is completed by the server to tell which permissions you have", + "default": {}, + "$ref": "#/definitions/io.openshift.authorization.v1.SubjectRulesReviewStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "meta.k8s.io", + "Group": "authorization.openshift.io", "Version": "v1", - "Kind": "APIGroupList", + "Kind": "SelfSubjectRulesReview", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.APIResource": { - "description": "APIResource specifies the name of a resource and whether it is namespaced.", + "io.openshift.authorization.v1.SelfSubjectRulesReviewSpec": { + "description": "SelfSubjectRulesReviewSpec adds information about how to conduct the check", "type": "object", "required": [ - "name", - "singularName", - "namespaced", - "kind", - "verbs" + "scopes" ], "properties": { - "categories": { - "description": "categories is a list of the grouped resources this resource belongs to (e.g. 'all')", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "group": { - "description": "group is the preferred group of the resource. Empty implies the group of the containing resource list. For subresources, this may have a different value, for example: Scale\".", - "type": "string" - }, - "kind": { - "description": "kind is the kind for the resource (e.g. 'Foo' is the kind for a resource 'foo')", - "type": "string", - "default": "" - }, - "name": { - "description": "name is the plural name of the resource.", - "type": "string", - "default": "" - }, - "namespaced": { - "description": "namespaced indicates if a resource is namespaced or not.", - "type": "boolean", - "default": false - }, - "shortNames": { - "description": "shortNames is a list of suggested short names of the resource.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "singularName": { - "description": "singularName is the singular name of the resource. This allows clients to handle plural and singular opaquely. The singularName is more correct for reporting status on a single item and both singular and plural are allowed from the kubectl CLI interface.", - "type": "string", - "default": "" - }, - "storageVersionHash": { - "description": "The hash value of the storage version, the version this resource is converted to when written to the data store. Value must be treated as opaque by clients. Only equality comparison on the value is valid. This is an alpha feature and may change or be removed in the future. The field is populated by the apiserver only if the StorageVersionHash feature gate is enabled. This field will remain optional even if it graduates.", - "type": "string" - }, - "verbs": { - "description": "verbs is a list of supported kube verbs (this includes get, list, watch, create, update, patch, delete, deletecollection, and proxy)", + "scopes": { + "description": "Scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\". Nil means \"use the scopes on this request\".", "type": "array", "items": { "type": "string", "default": "" } - }, - "version": { - "description": "version is the preferred version of the resource. Empty implies the version of the containing resource list For subresources, this may have a different value, for example: v1 (while inside a v1beta1 version of the core resource's group)\".", - "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "authorization.openshift.io", "Version": "v1", - "Kind": "APIResource", + "Kind": "SelfSubjectRulesReviewSpec", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.APIResourceList": { - "description": "APIResourceList is a list of APIResource, it is used to expose the name of the resources supported in a specific group and version, and if the resource is namespaced.", + "io.openshift.authorization.v1.ServiceAccountReference": { + "description": "ServiceAccountReference specifies a service account and namespace by their names.", "type": "object", "required": [ - "groupVersion", - "resources" + "name", + "namespace" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "groupVersion": { - "description": "groupVersion is the group and version this APIResourceList is for.", + "name": { + "description": "Name is the name of the service account.", "type": "string", "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "resources": { - "description": "resources contains the name of the resources and if they are namespaced.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.APIResource" - }, - "x-kubernetes-list-type": "atomic" + "namespace": { + "description": "Namespace is the namespace of the service account. Service accounts from inside the whitelisted namespaces are allowed to be bound to roles. If Namespace is empty, then the namespace of the RoleBindingRestriction in which the ServiceAccountReference is embedded is used.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "meta.k8s.io", + "Type": "nested", + "Group": "authorization.openshift.io", "Version": "v1", - "Kind": "APIResourceList", + "Kind": "ServiceAccountReference", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.APIVersions": { - "description": "APIVersions lists the versions that are available, to allow clients to discover the API at /api, which is the root path of the legacy v1 API.", + "io.openshift.authorization.v1.ServiceAccountRestriction": { + "description": "ServiceAccountRestriction matches a service account by a string match on either the service-account name or the name of the service account's namespace.", "type": "object", "required": [ - "versions", - "serverAddressByClientCIDRs" + "serviceaccounts", + "namespaces" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "serverAddressByClientCIDRs": { - "description": "a map of client CIDR to server address that is serving this group. This is to help clients reach servers in the most network-efficient way possible. Clients can use the appropriate server address as per the CIDR that they match. In case of multiple matches, clients should use the longest matching CIDR. The server returns only those CIDRs that it thinks that the client can match. For example: the master will return an internal IP CIDR only, if the client reaches the server using an internal IP. Server looks at X-Forwarded-For header or X-Real-Ip header or request.RemoteAddr (in that order) to get the client IP.", + "namespaces": { + "description": "Namespaces specifies a list of literal namespace names.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ServerAddressByClientCIDR" - }, - "x-kubernetes-list-type": "atomic" + "type": "string", + "default": "" + } }, - "versions": { - "description": "versions are the api versions that are available.", + "serviceaccounts": { + "description": "ServiceAccounts specifies a list of literal service-account names.", "type": "array", "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "default": {}, + "$ref": "#/definitions/io.openshift.authorization.v1.ServiceAccountReference" + } } }, "x-fabric8-info": { - "Type": "object", - "Group": "meta.k8s.io", + "Type": "nested", + "Group": "authorization.openshift.io", "Version": "v1", - "Kind": "APIVersions", + "Kind": "ServiceAccountRestriction", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.ApplyOptions": { - "description": "ApplyOptions may be provided when applying an API object. FieldManager is required for apply requests. ApplyOptions is equivalent to PatchOptions. It is provided as a convenience with documentation that speaks specifically to how the options fields relate to apply.", + "io.openshift.authorization.v1.SubjectAccessReview": { + "description": "SubjectAccessReview is an object for requesting information about whether a user or group can perform an action\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "force", - "fieldManager" + "namespace", + "verb", + "resourceAPIGroup", + "resourceAPIVersion", + "resource", + "resourceName", + "path", + "isNonResourceURL", + "user", + "groups", + "scopes" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "dryRun": { - "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "content": { + "description": "Content is the actual content of the request for create and update", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + }, + "groups": { + "description": "GroupsSlice is optional. Groups is the list of groups to which the User belongs.", "type": "array", "items": { "type": "string", "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "fieldManager": { - "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required.", - "type": "string", - "default": "" + } }, - "force": { - "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people.", + "isNonResourceURL": { + "description": "IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)", "type": "boolean", "default": false }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "meta.k8s.io", - "Version": "v1", - "Kind": "ApplyOptions", - "Scope": "Namespaced" - } - }, - "io.k8s.apimachinery.pkg.apis.meta.v1.Condition": { - "description": "Condition contains details for one aspect of the current state of this API Resource.", - "type": "object", - "required": [ - "type", - "status", - "lastTransitionTime", - "reason", - "message" - ], - "properties": { - "lastTransitionTime": { - "description": "lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "message": { - "description": "message is a human readable message indicating details about the transition. This may be an empty string.", + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "namespace": { + "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces", "type": "string", "default": "" }, - "observedGeneration": { - "description": "observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.", - "type": "integer", - "format": "int64" + "path": { + "description": "Path is the path of a non resource URL", + "type": "string", + "default": "" }, - "reason": { - "description": "reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.", + "resource": { + "description": "Resource is one of the existing resource types", + "type": "string", + "default": "" + }, + "resourceAPIGroup": { + "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined", + "type": "string", + "default": "" + }, + "resourceAPIVersion": { + "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined", + "type": "string", + "default": "" + }, + "resourceName": { + "description": "ResourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"", "type": "string", "default": "" }, - "status": { - "description": "status of the condition, one of True, False, Unknown.", + "scopes": { + "description": "Scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\". Nil for a self-SAR, means \"use the scopes on this request\". Nil for a regular SAR, means the same as empty.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "user": { + "description": "User is optional. If both User and Groups are empty, the current authenticated user is used.", "type": "string", "default": "" }, - "type": { - "description": "type of condition in CamelCase or in foo.example.com/CamelCase.", + "verb": { + "description": "Verb is one of: get, list, watch, create, update, delete", "type": "string", "default": "" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "meta.k8s.io", + "Type": "object", + "Group": "authorization.openshift.io", "Version": "v1", - "Kind": "Condition", - "Scope": "Namespaced" + "Kind": "SubjectAccessReview", + "Scope": "Clustered" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.CreateOptions": { - "description": "CreateOptions may be provided when creating an API object.", + "io.openshift.authorization.v1.SubjectAccessReviewResponse": { + "description": "SubjectAccessReviewResponse describes whether or not a user or group can perform an action\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", + "required": [ + "allowed" + ], "properties": { + "allowed": { + "description": "Allowed is required. True if the action would be allowed, false otherwise.", + "type": "boolean", + "default": false + }, "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "dryRun": { - "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "evaluationError": { + "description": "EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. This is most common when a bound role is missing, but enough roles are still present and bound to reason about the request.", + "type": "string" }, - "fieldManager": { - "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "fieldValidation": { - "description": "fieldValidation instructs the server on how to handle objects in the request (POST/PUT/PATCH) containing unknown or duplicate fields. Valid values are: - Ignore: This will ignore any unknown fields that are silently dropped from the object, and will ignore all but the last duplicate field that the decoder encounters. This is the default behavior prior to v1.23. - Warn: This will send a warning via the standard warning response header for each unknown field that is dropped from the object, and for each duplicate field that is encountered. The request will still succeed if there are no other errors, and will only persist the last of any duplicate fields. This is the default in v1.23+ - Strict: This will fail the request with a BadRequest error if any unknown fields would be dropped from the object, or if any duplicate fields are present. The error returned from the server will contain all unknown and duplicate fields encountered.", + "namespace": { + "description": "Namespace is the namespace used for the access review", "type": "string" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "reason": { + "description": "Reason is optional. It indicates why a request was allowed or denied.", "type": "string" } }, "x-fabric8-info": { "Type": "object", - "Group": "meta.k8s.io", + "Group": "authorization.openshift.io", "Version": "v1", - "Kind": "CreateOptions", + "Kind": "SubjectAccessReviewResponse", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.DeleteOptions": { - "description": "DeleteOptions may be provided when deleting an API object.", + "io.openshift.authorization.v1.SubjectRulesReview": { + "description": "SubjectRulesReview is a resource you can create to determine which actions another user can perform in a namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", + "required": [ + "spec" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "dryRun": { - "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "gracePeriodSeconds": { - "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.", - "type": "integer", - "format": "int64" - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "orphanDependents": { - "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.", - "type": "boolean" + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "preconditions": { - "description": "Must be fulfilled before a deletion is carried out. If not possible, a 409 Conflict status will be returned.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Preconditions" + "spec": { + "description": "Spec adds information about how to conduct the check", + "default": {}, + "$ref": "#/definitions/io.openshift.authorization.v1.SubjectRulesReviewSpec" }, - "propagationPolicy": { - "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.", - "type": "string" + "status": { + "description": "Status is completed by the server to tell which permissions you have", + "default": {}, + "$ref": "#/definitions/io.openshift.authorization.v1.SubjectRulesReviewStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "meta.k8s.io", + "Group": "authorization.openshift.io", "Version": "v1", - "Kind": "DeleteOptions", + "Kind": "SubjectRulesReview", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.Duration": { - "description": "Duration is a wrapper around time.Duration which supports correct marshaling to YAML and JSON. In particular, it marshals into strings, which can be used as map keys in json.", - "type": "string", + "io.openshift.authorization.v1.SubjectRulesReviewSpec": { + "description": "SubjectRulesReviewSpec adds information about how to conduct the check", + "type": "object", + "required": [ + "user", + "groups", + "scopes" + ], + "properties": { + "groups": { + "description": "Groups is optional. Groups is the list of groups to which the User belongs. At least one of User and Groups must be specified.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "scopes": { + "description": "Scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\".", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "user": { + "description": "User is optional. At least one of User and Groups must be specified.", + "type": "string", + "default": "" + } + }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "authorization.openshift.io", "Version": "v1", - "Kind": "Duration", + "Kind": "SubjectRulesReviewSpec", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.FieldSelectorRequirement": { - "description": "FieldSelectorRequirement is a selector that contains values, a key, and an operator that relates the key and values.", + "io.openshift.authorization.v1.SubjectRulesReviewStatus": { + "description": "SubjectRulesReviewStatus is contains the result of a rules check", "type": "object", "required": [ - "key", - "operator" + "rules" ], "properties": { - "key": { - "description": "key is the field selector key that the requirement applies to.", - "type": "string", - "default": "" - }, - "operator": { - "description": "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. The list of operators may grow in the future.", - "type": "string", - "default": "" + "evaluationError": { + "description": "EvaluationError can appear in combination with Rules. It means some error happened during evaluation that may have prevented additional rules from being populated.", + "type": "string" }, - "values": { - "description": "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty.", + "rules": { + "description": "Rules is the list of rules (no particular sort) that are allowed for the subject", "type": "array", "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "default": {}, + "$ref": "#/definitions/io.openshift.authorization.v1.PolicyRule" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "authorization.openshift.io", "Version": "v1", - "Kind": "FieldSelectorRequirement", + "Kind": "SubjectRulesReviewStatus", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.FieldsV1": { - "description": "FieldsV1 stores a set of fields in a data structure like a Trie, in JSON format.\n\nEach key is either a '.' representing the field itself, and will always map to an empty set, or a string representing a sub-field or item. The string will follow one of these four formats: 'f:\u003cname\u003e', where \u003cname\u003e is the name of a field in a struct, or key in a map 'v:\u003cvalue\u003e', where \u003cvalue\u003e is the exact json formatted value of a list item 'i:\u003cindex\u003e', where \u003cindex\u003e is position of a item in a list 'k:\u003ckeys\u003e', where \u003ckeys\u003e is a map of a list item's key fields to their unique values If a key maps to an empty Fields value, the field that key represents is part of the set.\n\nThe exact format is defined in sigs.k8s.io/structured-merge-diff", + "io.openshift.authorization.v1.UserRestriction": { + "description": "UserRestriction matches a user either by a string match on the user name, a string match on the name of a group to which the user belongs, or a label selector applied to the user labels.", "type": "object", + "required": [ + "users", + "groups", + "labels" + ], + "properties": { + "groups": { + "description": "Groups specifies a list of literal group names.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "labels": { + "description": "Selectors specifies a list of label selectors over user labels.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + } + }, + "users": { + "description": "Users specifies a list of literal user names.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + } + }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "authorization.openshift.io", "Version": "v1", - "Kind": "FieldsV1", + "Kind": "UserRestriction", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.GetOptions": { - "description": "GetOptions is the standard query options to the standard REST get call.", + "io.openshift.build.v1.BinaryBuildRequestOptions": { + "description": "BinaryBuildRequestOptions are the options required to fully speficy a binary build request\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "asFile": { + "description": "asFile determines if the binary should be created as a file within the source rather than extracted as an archive", + "type": "string" + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "resourceVersion": { - "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "revision.authorEmail": { + "description": "revision.authorEmail of the source control user", + "type": "string" + }, + "revision.authorName": { + "description": "revision.authorName of the source control user", + "type": "string" + }, + "revision.commit": { + "description": "revision.commit is the value identifying a specific commit", + "type": "string" + }, + "revision.committerEmail": { + "description": "revision.committerEmail of the source control user", + "type": "string" + }, + "revision.committerName": { + "description": "revision.committerName of the source control user", + "type": "string" + }, + "revision.message": { + "description": "revision.message is the description of a specific commit", "type": "string" } }, "x-fabric8-info": { "Type": "object", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "GetOptions", + "Kind": "BinaryBuildRequestOptions", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.GroupKind": { - "description": "GroupKind specifies a Group and a Kind, but does not force a version. This is useful for identifying concepts during lookup stages without having partially valid types", + "io.openshift.build.v1.BinaryBuildSource": { + "description": "BinaryBuildSource describes a binary file to be used for the Docker and Source build strategies, where the file will be extracted and used as the build source.", "type": "object", - "required": [ - "group", - "kind" - ], "properties": { - "group": { - "type": "string", - "default": "" - }, - "kind": { - "type": "string", - "default": "" + "asFile": { + "description": "asFile indicates that the provided binary input should be considered a single file within the build input. For example, specifying \"webapp.war\" would place the provided binary as `/webapp.war` for the builder. If left empty, the Docker and Source build strategies assume this file is a zip, tar, or tar.gz file and extract it as the source. The custom strategy receives this binary as standard input. This filename may not contain slashes or be '..' or '.'.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "GroupKind", + "Kind": "BinaryBuildSource", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.GroupResource": { - "description": "GroupResource specifies a Group and a Resource, but does not force a version. This is useful for identifying concepts during lookup stages without having partially valid types", + "io.openshift.build.v1.BitbucketWebHookCause": { + "description": "BitbucketWebHookCause has information about a Bitbucket webhook that triggered a build.", "type": "object", - "required": [ - "group", - "resource" - ], "properties": { - "group": { - "type": "string", - "default": "" + "revision": { + "description": "Revision is the git source revision information of the trigger.", + "$ref": "#/definitions/io.openshift.build.v1.SourceRevision" }, - "resource": { - "type": "string", - "default": "" + "secret": { + "description": "Secret is the obfuscated webhook secret that triggered a build.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "GroupResource", + "Kind": "BitbucketWebHookCause", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersion": { - "description": "GroupVersion contains the \"group\" and the \"version\", which uniquely identifies the API.", + "io.openshift.build.v1.Build": { + "description": "Build encapsulates the inputs needed to produce a new deployable image, as well as the status of the execution and a reference to the Pod which executed the build.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", - "required": [ - "group", - "version" - ], "properties": { - "group": { - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "version": { - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "spec is all the inputs used to execute the build.", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildSpec" + }, + "status": { + "description": "status is the current status of the build.", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "meta.k8s.io", + "Type": "object", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "GroupVersion", + "Kind": "Build", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionForDiscovery": { - "description": "GroupVersion contains the \"group/version\" and \"version\" string of a version. It is made a struct to keep extensibility.", + "io.openshift.build.v1.BuildCondition": { + "description": "BuildCondition describes the state of a build at a certain point.", "type": "object", "required": [ - "groupVersion", - "version" + "type", + "status" ], "properties": { - "groupVersion": { - "description": "groupVersion specifies the API group and version in the form \"group/version\"", + "lastTransitionTime": { + "description": "The last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "lastUpdateTime": { + "description": "The last time this condition was updated.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "A human readable message indicating details about the transition.", + "type": "string" + }, + "reason": { + "description": "The reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status of the condition, one of True, False, Unknown.", "type": "string", "default": "" }, - "version": { - "description": "version specifies the version in the form of \"version\". This is to save the clients the trouble of splitting the GroupVersion.", + "type": { + "description": "Type of build condition.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "GroupVersionForDiscovery", + "Kind": "BuildCondition", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionKind": { - "description": "GroupVersionKind unambiguously identifies a kind. It doesn't anonymously include GroupVersion to avoid automatic coercion. It doesn't use a GroupVersion to avoid custom marshalling", + "io.openshift.build.v1.BuildConfig": { + "description": "Build configurations define a build process for new container images. There are three types of builds possible - a container image build using a Dockerfile, a Source-to-Image build that uses a specially prepared base image that accepts source code that it can make runnable, and a custom build that can run // arbitrary container images as a base and accept the build parameters. Builds run on the cluster and on completion are pushed to the container image registry specified in the \"output\" section. A build can be triggered via a webhook, when the base image changes, or when a user manually requests a new build be // created.\n\nEach build created by a build configuration is numbered and refers back to its parent configuration. Multiple builds can be triggered at once. Builds that do not have \"output\" set can be used to test code or run a verification build.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "group", - "version", - "kind" + "spec" ], "properties": { - "group": { - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, "kind": { - "type": "string", - "default": "" + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "version": { - "type": "string", - "default": "" + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "spec holds all the input necessary to produce a new build, and the conditions when to trigger them.", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildConfigSpec" + }, + "status": { + "description": "status holds any relevant information about a build config", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildConfigStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "meta.k8s.io", + "Type": "object", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "GroupVersionKind", + "Kind": "BuildConfig", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.GroupVersionResource": { - "description": "GroupVersionResource unambiguously identifies a resource. It doesn't anonymously include GroupVersion to avoid automatic coercion. It doesn't use a GroupVersion to avoid custom marshalling", + "io.openshift.build.v1.BuildConfigList": { + "description": "BuildConfigList is a collection of BuildConfigs.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "group", - "version", - "resource" + "items" ], "properties": { - "group": { - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "resource": { - "type": "string", - "default": "" + "items": { + "description": "items is a list of build configs", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildConfig" + } }, - "version": { - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "meta.k8s.io", + "Type": "list", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "GroupVersionResource", + "Kind": "BuildConfigList", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.InternalEvent": { - "description": "InternalEvent makes watch.Event versioned", + "io.openshift.build.v1.BuildConfigSpec": { + "description": "BuildConfigSpec describes when and how builds are created", "type": "object", "required": [ - "Type", - "Object" + "strategy" ], "properties": { - "Object": { - "description": "Object is:\n * If Type is Added or Modified: the new state of the object.\n * If Type is Deleted: the state of the object immediately before deletion.\n * If Type is Bookmark: the object (instance of a type being watched) where\n only ResourceVersion field is set. On successful restart of watch from a\n bookmark resourceVersion, client is guaranteed to not get repeat event\n nor miss any events.\n * If Type is Error: *api.Status is recommended; other types may make sense\n depending on context.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.Object" + "completionDeadlineSeconds": { + "description": "completionDeadlineSeconds is an optional duration in seconds, counted from the time when a build pod gets scheduled in the system, that the build may be active on a node before the system actively tries to terminate the build; value must be positive integer", + "type": "integer", + "format": "int64" }, - "Type": { - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "meta.k8s.io", - "Version": "v1", - "Kind": "InternalEvent", - "Scope": "Namespaced" - } - }, - "io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector": { - "description": "A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all objects. A null label selector matches no objects.", - "type": "object", - "properties": { - "matchExpressions": { - "description": "matchExpressions is a list of label selector requirements. The requirements are ANDed.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelectorRequirement" - }, - "x-kubernetes-list-type": "atomic" + "failedBuildsHistoryLimit": { + "description": "failedBuildsHistoryLimit is the number of old failed builds to retain. When a BuildConfig is created, the 5 most recent failed builds are retained unless this value is set. If removed after the BuildConfig has been created, all failed builds are retained.", + "type": "integer", + "format": "int32" + }, + "mountTrustedCA": { + "description": "mountTrustedCA bind mounts the cluster's trusted certificate authorities, as defined in the cluster's proxy configuration, into the build. This lets processes within a build trust components signed by custom PKI certificate authorities, such as private artifact repositories and HTTPS proxies.\n\nWhen this field is set to true, the contents of `/etc/pki/ca-trust` within the build are managed by the build container, and any changes to this directory or its subdirectories (for example - within a Dockerfile `RUN` instruction) are not persisted in the build's output image.", + "type": "boolean" }, - "matchLabels": { - "description": "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is \"key\", the operator is \"In\", and the values array contains only \"value\". The requirements are ANDed.", + "nodeSelector": { + "description": "nodeSelector is a selector which must be true for the build pod to fit on a node If nil, it can be overridden by default build nodeselector values for the cluster. If set to an empty map or a map with any values, default build nodeselector values are ignored.", "type": "object", "additionalProperties": { "type": "string", "default": "" } + }, + "output": { + "description": "output describes the container image the Strategy should produce.", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildOutput" + }, + "postCommit": { + "description": "postCommit is a build hook executed after the build output image is committed, before it is pushed to a registry.", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildPostCommitSpec" + }, + "resources": { + "description": "resources computes resource requirements to execute the build.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" + }, + "revision": { + "description": "revision is the information from the source for a specific repo snapshot. This is optional.", + "$ref": "#/definitions/io.openshift.build.v1.SourceRevision" + }, + "runPolicy": { + "description": "RunPolicy describes how the new build created from this build configuration will be scheduled for execution. This is optional, if not specified we default to \"Serial\".", + "type": "string" + }, + "serviceAccount": { + "description": "serviceAccount is the name of the ServiceAccount to use to run the pod created by this build. The pod will be allowed to use secrets referenced by the ServiceAccount", + "type": "string" + }, + "source": { + "description": "source describes the SCM in use.", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildSource" + }, + "strategy": { + "description": "strategy defines how to perform a build.", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildStrategy" + }, + "successfulBuildsHistoryLimit": { + "description": "successfulBuildsHistoryLimit is the number of old successful builds to retain. When a BuildConfig is created, the 5 most recent successful builds are retained unless this value is set. If removed after the BuildConfig has been created, all successful builds are retained.", + "type": "integer", + "format": "int32" + }, + "triggers": { + "description": "triggers determine how new Builds can be launched from a BuildConfig. If no triggers are defined, a new build can only occur as a result of an explicit client build creation.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildTriggerPolicy" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "LabelSelector", + "Kind": "BuildConfigSpec", "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" + } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelectorRequirement": { - "description": "A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.", + "io.openshift.build.v1.BuildConfigStatus": { + "description": "BuildConfigStatus contains current state of the build config object.", "type": "object", "required": [ - "key", - "operator" + "lastVersion" ], "properties": { - "key": { - "description": "key is the label key that the selector applies to.", - "type": "string", - "default": "" - }, - "operator": { - "description": "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.", - "type": "string", - "default": "" - }, - "values": { - "description": "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.", + "imageChangeTriggers": { + "description": "ImageChangeTriggers captures the runtime state of any ImageChangeTrigger specified in the BuildConfigSpec, including the value reconciled by the OpenShift APIServer for the lastTriggeredImageID. There is a single entry in this array for each image change trigger in spec. Each trigger status references the ImageStreamTag that acts as the source of the trigger.", "type": "array", "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.ImageChangeTriggerStatus" + } + }, + "lastVersion": { + "description": "lastVersion is used to inform about number of last triggered build.", + "type": "integer", + "format": "int64", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "LabelSelectorRequirement", + "Kind": "BuildConfigStatus", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.List": { - "description": "List holds a list of objects, which may not be known by the server.", + "io.openshift.build.v1.BuildList": { + "description": "BuildList is a collection of Builds.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "items" @@ -51532,10 +57192,11 @@ "type": "string" }, "items": { - "description": "List of objects", + "description": "items is a list of builds", "type": "array", "items": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.Build" } }, "kind": { @@ -51543,1650 +57204,1801 @@ "type": "string" }, "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "List", + "Kind": "BuildList", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta": { - "description": "ListMeta describes metadata that synthetic resources must have, including lists and various status objects. A resource may have only one of {ObjectMeta, ListMeta}.", + "io.openshift.build.v1.BuildLog": { + "description": "BuildLog is the (unused) resource associated with the build log redirector\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "properties": { - "continue": { - "description": "continue may be set if the user set a limit on the number of items returned, and indicates that the server has more data available. The value is opaque and may be used to issue another request to the endpoint that served this list to retrieve the next set of available objects. Continuing a consistent list may not be possible if the server configuration has changed or more than a few minutes have passed. The resourceVersion field returned when using this continue value will be identical to the value in the first response, unless you have received this token from an error message.", - "type": "string" - }, - "remainingItemCount": { - "description": "remainingItemCount is the number of subsequent items in the list which are not included in this list response. If the list request contained label or field selectors, then the number of remaining items is unknown and the field will be left unset and omitted during serialization. If the list is complete (either because it is not chunking or because this is the last chunk), then there are no more remaining items and this field will be left unset and omitted during serialization. Servers older than v1.15 do not set this field. The intended use of the remainingItemCount is *estimating* the size of a collection. Clients should not rely on the remainingItemCount to be set or to be exact.", - "type": "integer", - "format": "int64" - }, - "resourceVersion": { - "description": "String that identifies the server's internal version of this object that can be used by clients to determine when objects have changed. Value must be treated as opaque by clients and passed unmodified back to the server. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "selfLink": { - "description": "Deprecated: selfLink is a legacy read-only field that is no longer populated by the system.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "meta.k8s.io", + "Type": "object", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "ListMeta", + "Kind": "BuildLog", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.ListOptions": { - "description": "ListOptions is the query options to a standard REST list call.", + "io.openshift.build.v1.BuildLogOptions": { + "description": "BuildLogOptions is the REST options for a build log\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "properties": { - "allowWatchBookmarks": { - "description": "allowWatchBookmarks requests watch events with type \"BOOKMARK\". Servers that do not implement bookmarks may ignore this flag and bookmarks are sent at the server's discretion. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session. If this is not a watch, this field is ignored.", - "type": "boolean" - }, "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "continue": { - "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.", + "container": { + "description": "cointainer for which to stream logs. Defaults to only container if there is one container in the pod.", "type": "string" }, - "fieldSelector": { - "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.", - "type": "string" + "follow": { + "description": "follow if true indicates that the build log should be streamed until the build terminates.", + "type": "boolean" + }, + "insecureSkipTLSVerifyBackend": { + "description": "insecureSkipTLSVerifyBackend indicates that the apiserver should not confirm the validity of the serving certificate of the backend it is connecting to. This will make the HTTPS connection between the apiserver and the backend insecure. This means the apiserver cannot verify the log data it is receiving came from the real kubelet. If the kubelet is configured to verify the apiserver's TLS credentials, it does not mean the connection to the real kubelet is vulnerable to a man in the middle attack (e.g. an attacker could not intercept the actual log data coming from the real kubelet).", + "type": "boolean" }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "labelSelector": { - "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.", - "type": "string" - }, - "limit": { - "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.", + "limitBytes": { + "description": "limitBytes, If set, is the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.", "type": "integer", "format": "int64" }, - "resourceVersion": { - "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", - "type": "string" - }, - "resourceVersionMatch": { - "description": "resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset", - "type": "string" + "nowait": { + "description": "noWait if true causes the call to return immediately even if the build is not available yet. Otherwise the server will wait until the build has started.", + "type": "boolean" }, - "sendInitialEvents": { - "description": "`sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic \"Bookmark\" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `\"k8s.io/initial-events-end\": \"true\"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched.\n\nWhen `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan\n is interpreted as \"data at least as new as the provided `resourceVersion`\"\n and the bookmark event is send when the state is synced\n to a `resourceVersion` at least as fresh as the one provided by the ListOptions.\n If `resourceVersion` is unset, this is interpreted as \"consistent read\" and the\n bookmark event is send when the state is synced at least to the moment\n when request started being processed.\n- `resourceVersionMatch` set to any other value or unset\n Invalid error is returned.\n\nDefaults to true if `resourceVersion=\"\"` or `resourceVersion=\"0\"` (for backward compatibility reasons) and to false otherwise.", + "previous": { + "description": "previous returns previous build logs. Defaults to false.", "type": "boolean" }, - "timeoutSeconds": { - "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.", + "sinceSeconds": { + "description": "sinceSeconds is a relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", "type": "integer", "format": "int64" }, - "watch": { - "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.", + "sinceTime": { + "description": "sinceTime is an RFC3339 timestamp from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "tailLines": { + "description": "tailLines, If set, is the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime", + "type": "integer", + "format": "int64" + }, + "timestamps": { + "description": "timestamps, If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.", "type": "boolean" + }, + "version": { + "description": "version of the build for which to view logs.", + "type": "integer", + "format": "int64" } }, "x-fabric8-info": { "Type": "object", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "ListOptions", + "Kind": "BuildLogOptions", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.ManagedFieldsEntry": { - "description": "ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of the resource that the fieldset applies to.", + "io.openshift.build.v1.BuildOutput": { + "description": "BuildOutput is input to a build strategy and describes the container image that the strategy should produce.", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the version of this resource that this field set applies to. The format is \"group/version\" just like the top-level APIVersion field. It is necessary to track the version of a field set because it cannot be automatically converted.", - "type": "string" - }, - "fieldsType": { - "description": "FieldsType is the discriminator for the different fields format and version. There is currently only one possible value: \"FieldsV1\"", - "type": "string" - }, - "fieldsV1": { - "description": "FieldsV1 holds the first JSON version format as described in the \"FieldsV1\" type.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.FieldsV1" - }, - "manager": { - "description": "Manager is an identifier of the workflow managing these fields.", - "type": "string" - }, - "operation": { - "description": "Operation is the type of operation which lead to this ManagedFieldsEntry being created. The only valid values for this field are 'Apply' and 'Update'.", - "type": "string" + "imageLabels": { + "description": "imageLabels define a list of labels that are applied to the resulting image. If there are multiple labels with the same name then the last one in the list is used.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.ImageLabel" + } }, - "subresource": { - "description": "Subresource is the name of the subresource used to update that object, or empty string if the object was updated through the main resource. The value of this field is used to distinguish between managers, even if they share the same name. For example, a status update will be distinct from a regular update using the same manager name. Note that the APIVersion field is not related to the Subresource field and it always corresponds to the version of the main resource.", - "type": "string" + "pushSecret": { + "description": "PushSecret is the name of a Secret that would be used for setting up the authentication for executing the Docker push to authentication enabled Docker Registry (or Docker Hub).", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "time": { - "description": "Time is the timestamp of when the ManagedFields entry was added. The timestamp will also be updated if a field is added, the manager changes any of the owned fields value or removes a field. The timestamp does not update when a field is removed from the entry because another manager took it over.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "to": { + "description": "to defines an optional location to push the output of this build to. Kind must be one of 'ImageStreamTag' or 'DockerImage'. This value will be used to look up a container image repository to push to. In the case of an ImageStreamTag, the ImageStreamTag will be looked for in the namespace of the build unless Namespace is specified.", + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" } }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "ManagedFieldsEntry", + "Kind": "BuildOutput", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.MicroTime": { - "description": "MicroTime is version of Time with microsecond level precision.", - "type": "string", - "format": "date-time", + "io.openshift.build.v1.BuildPostCommitSpec": { + "description": "A BuildPostCommitSpec holds a build post commit hook specification. The hook executes a command in a temporary container running the build output image, immediately after the last layer of the image is committed and before the image is pushed to a registry. The command is executed with the current working directory ($PWD) set to the image's WORKDIR.\n\nThe build will be marked as failed if the hook execution fails. It will fail if the script or command return a non-zero exit code, or if there is any other error related to starting the temporary container.\n\nThere are five different ways to configure the hook. As an example, all forms below are equivalent and will execute `rake test --verbose`.\n\n1. Shell script:\n\n\t \"postCommit\": {\n\t \"script\": \"rake test --verbose\",\n\t }\n\n\tThe above is a convenient form which is equivalent to:\n\n\t \"postCommit\": {\n\t \"command\": [\"/bin/sh\", \"-ic\"],\n\t \"args\": [\"rake test --verbose\"]\n\t }\n\n2. A command as the image entrypoint:\n\n\t \"postCommit\": {\n\t \"commit\": [\"rake\", \"test\", \"--verbose\"]\n\t }\n\n\tCommand overrides the image entrypoint in the exec form, as documented in\n\tDocker: https://docs.docker.com/engine/reference/builder/#entrypoint.\n\n3. Pass arguments to the default entrypoint:\n\n\t \"postCommit\": {\n\t\t\t \"args\": [\"rake\", \"test\", \"--verbose\"]\n\t\t }\n\n\t This form is only useful if the image entrypoint can handle arguments.\n\n4. Shell script with arguments:\n\n\t \"postCommit\": {\n\t \"script\": \"rake test $1\",\n\t \"args\": [\"--verbose\"]\n\t }\n\n\tThis form is useful if you need to pass arguments that would otherwise be\n\thard to quote properly in the shell script. In the script, $0 will be\n\t\"/bin/sh\" and $1, $2, etc, are the positional arguments from Args.\n\n5. Command with arguments:\n\n\t \"postCommit\": {\n\t \"command\": [\"rake\", \"test\"],\n\t \"args\": [\"--verbose\"]\n\t }\n\n\tThis form is equivalent to appending the arguments to the Command slice.\n\nIt is invalid to provide both Script and Command simultaneously. If none of the fields are specified, the hook is not executed.", + "type": "object", + "properties": { + "args": { + "description": "args is a list of arguments that are provided to either Command, Script or the container image's default entrypoint. The arguments are placed immediately after the command to be run.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "command": { + "description": "command is the command to run. It may not be specified with Script. This might be needed if the image doesn't have `/bin/sh`, or if you do not want to use a shell. In all other cases, using Script might be more convenient.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "script": { + "description": "script is a shell script to be run with `/bin/sh -ic`. It may not be specified with Command. Use Script when a shell script is appropriate to execute the post build hook, for example for running unit tests with `rake test`. If you need control over the image entrypoint, or if the image does not have `/bin/sh`, use Command and/or Args. The `-i` flag is needed to support CentOS and RHEL images that use Software Collections (SCL), in order to have the appropriate collections enabled in the shell. E.g., in the Ruby image, this is necessary to make `ruby`, `bundle` and other binaries available in the PATH.", + "type": "string" + } + }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "MicroTime", + "Kind": "BuildPostCommitSpec", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta": { - "description": "ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create.", + "io.openshift.build.v1.BuildRequest": { + "description": "BuildRequest is the resource used to pass parameters to build generator\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "properties": { - "annotations": { - "description": "Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "creationTimestamp": { - "description": "CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC.\n\nPopulated by the system. Read-only. Null for lists. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "deletionGracePeriodSeconds": { - "description": "Number of seconds allowed for this object to gracefully terminate before it will be removed from the system. Only set when deletionTimestamp is also set. May only be shortened. Read-only.", - "type": "integer", - "format": "int64" + "binary": { + "description": "binary indicates a request to build from a binary provided to the builder", + "$ref": "#/definitions/io.openshift.build.v1.BinaryBuildSource" }, - "deletionTimestamp": { - "description": "DeletionTimestamp is RFC 3339 date and time at which this resource will be deleted. This field is set by the server when a graceful deletion is requested by the user, and is not directly settable by a client. The resource is expected to be deleted (no longer visible from resource lists, and not reachable by name) after the time in this field, once the finalizers list is empty. As long as the finalizers list contains items, deletion is blocked. Once the deletionTimestamp is set, this value may not be unset or be set further into the future, although it may be shortened or the resource may be deleted prior to this time. For example, a user may request that a pod is deleted in 30 seconds. The Kubelet will react by sending a graceful termination signal to the containers in the pod. After that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL) to the container and after cleanup, remove the pod from the API. In the presence of network partitions, this object may still exist after this timestamp, until an administrator or automated process can determine the resource is fully terminated. If not set, graceful deletion of the object has not been requested.\n\nPopulated by the system when a graceful deletion is requested. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "dockerStrategyOptions": { + "description": "DockerStrategyOptions contains additional docker-strategy specific options for the build", + "$ref": "#/definitions/io.openshift.build.v1.DockerStrategyOptions" }, - "finalizers": { - "description": "Must be empty before the object is deleted from the registry. Each entry is an identifier for the responsible component that will remove the entry from the list. If the deletionTimestamp of the object is non-nil, entries in this list can only be removed. Finalizers may be processed and removed in any order. Order is NOT enforced because it introduces significant risk of stuck finalizers. finalizers is a shared field, any actor with permission can reorder it. If the finalizer list is processed in order, then this can lead to a situation in which the component responsible for the first finalizer in the list is waiting for a signal (field value, external system, or other) produced by a component responsible for a finalizer later in the list, resulting in a deadlock. Without enforced ordering finalizers are free to order amongst themselves and are not vulnerable to ordering changes in the list.", + "env": { + "description": "env contains additional environment variables you want to pass into a builder container.", "type": "array", "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set", - "x-kubernetes-patch-strategy": "merge" + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" + } }, - "generateName": { - "description": "GenerateName is an optional prefix, used by the server, to generate a unique name ONLY IF the Name field has not been provided. If this field is used, the name returned to the client will be different than the name passed. This value will also be combined with a unique suffix. The provided value has the same validation rules as the Name field, and may be truncated by the length of the suffix required to make the value unique on the server.\n\nIf this field is specified and the generated name exists, the server will return a 409.\n\nApplied only if Name is not specified. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency", + "from": { + "description": "from is the reference to the ImageStreamTag that triggered the build.", + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "generation": { - "description": "A sequence number representing a specific generation of the desired state. Populated by the system. Read-only.", + "lastVersion": { + "description": "lastVersion (optional) is the LastVersion of the BuildConfig that was used to generate the build. If the BuildConfig in the generator doesn't match, a build will not be generated.", "type": "integer", "format": "int64" }, - "labels": { - "description": "Map of string keys and values that can be used to organize and categorize (scope and select) objects. May match selectors of replication controllers and services. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "revision": { + "description": "revision is the information from the source for a specific repo snapshot.", + "$ref": "#/definitions/io.openshift.build.v1.SourceRevision" + }, + "sourceStrategyOptions": { + "description": "SourceStrategyOptions contains additional source-strategy specific options for the build", + "$ref": "#/definitions/io.openshift.build.v1.SourceStrategyOptions" + }, + "triggeredBy": { + "description": "triggeredBy describes which triggers started the most recent update to the build configuration and contains information about those triggers.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildTriggerCause" } }, - "managedFields": { - "description": "ManagedFields maps workflow-id and version to the set of fields that are managed by that workflow. This is mostly for internal housekeeping, and users typically shouldn't need to set or understand this field. A workflow can be the user's name, a controller's name, or the name of a specific apply path like \"ci-cd\". The set of fields is always in the version that the workflow used when modifying the object.", + "triggeredByImage": { + "description": "triggeredByImage is the Image that triggered this build.", + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "build.openshift.io", + "Version": "v1", + "Kind": "BuildRequest", + "Scope": "Namespaced" + } + }, + "io.openshift.build.v1.BuildSource": { + "description": "BuildSource is the SCM used for the build.", + "type": "object", + "properties": { + "binary": { + "description": "binary builds accept a binary as their input. The binary is generally assumed to be a tar, gzipped tar, or zip file depending on the strategy. For container image builds, this is the build context and an optional Dockerfile may be specified to override any Dockerfile in the build context. For Source builds, this is assumed to be an archive as described above. For Source and container image builds, if binary.asFile is set the build will receive a directory with a single file. contextDir may be used when an archive is provided. Custom builds will receive this binary as input on STDIN.", + "$ref": "#/definitions/io.openshift.build.v1.BinaryBuildSource" + }, + "configMaps": { + "description": "configMaps represents a list of configMaps and their destinations that will be used for the build.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ManagedFieldsEntry" - }, - "x-kubernetes-list-type": "atomic" + "$ref": "#/definitions/io.openshift.build.v1.ConfigMapBuildSource" + } }, - "name": { - "description": "Name must be unique within a namespace. Is required when creating resources, although some resources may allow a client to request the generation of an appropriate name automatically. Name is primarily intended for creation idempotence and configuration definition. Cannot be updated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names", + "contextDir": { + "description": "contextDir specifies the sub-directory where the source code for the application exists. This allows to have buildable sources in directory other than root of repository.", "type": "string" }, - "namespace": { - "description": "Namespace defines the space within which each name must be unique. An empty namespace is equivalent to the \"default\" namespace, but \"default\" is the canonical representation. Not all objects are required to be scoped to a namespace - the value of this field for those objects will be empty.\n\nMust be a DNS_LABEL. Cannot be updated. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces", + "dockerfile": { + "description": "dockerfile is the raw contents of a Dockerfile which should be built. When this option is specified, the FROM may be modified based on your strategy base image and additional ENV stanzas from your strategy environment will be added after the FROM, but before the rest of your Dockerfile stanzas. The Dockerfile source type may be used with other options like git - in those cases the Git repo will have any innate Dockerfile replaced in the context dir.", "type": "string" }, - "ownerReferences": { - "description": "List of objects depended by this object. If ALL objects in the list have been deleted, this object will be garbage collected. If this object is managed by a controller, then an entry in this list will point to this controller, with the controller field set to true. There cannot be more than one managing controller.", + "git": { + "description": "git contains optional information about git build source", + "$ref": "#/definitions/io.openshift.build.v1.GitBuildSource" + }, + "images": { + "description": "images describes a set of images to be used to provide source for the build", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.OwnerReference" - }, - "x-kubernetes-list-map-keys": [ - "uid" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "uid", - "x-kubernetes-patch-strategy": "merge" + "$ref": "#/definitions/io.openshift.build.v1.ImageSource" + } }, - "resourceVersion": { - "description": "An opaque value that represents the internal version of this object that can be used by clients to determine when objects have changed. May be used for optimistic concurrency, change detection, and the watch operation on a resource or set of resources. Clients must treat these values as opaque and passed unmodified back to the server. They may only be valid for a particular resource or set of resources.\n\nPopulated by the system. Read-only. Value must be treated as opaque by clients and . More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency", - "type": "string" + "secrets": { + "description": "secrets represents a list of secrets and their destinations that will be used only for the build.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.SecretBuildSource" + } }, - "selfLink": { - "description": "Deprecated: selfLink is a legacy read-only field that is no longer populated by the system.", + "sourceSecret": { + "description": "sourceSecret is the name of a Secret that would be used for setting up the authentication for cloning private repository. The secret contains valid credentials for remote repository, where the data's key represent the authentication method to be used and value is the base64 encoded credentials. Supported auth methods are: ssh-privatekey.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "type": { + "description": "type of build input to accept", "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "build.openshift.io", + "Version": "v1", + "Kind": "BuildSource", + "Scope": "Namespaced" + } + }, + "io.openshift.build.v1.BuildSpec": { + "description": "BuildSpec has the information to represent a build and also additional information about a build", + "type": "object", + "required": [ + "strategy" + ], + "properties": { + "completionDeadlineSeconds": { + "description": "completionDeadlineSeconds is an optional duration in seconds, counted from the time when a build pod gets scheduled in the system, that the build may be active on a node before the system actively tries to terminate the build; value must be positive integer", + "type": "integer", + "format": "int64" }, - "uid": { - "description": "UID is the unique in time and space value for this object. It is typically generated by the server on successful creation of a resource and is not allowed to change on PUT operations.\n\nPopulated by the system. Read-only. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids", + "mountTrustedCA": { + "description": "mountTrustedCA bind mounts the cluster's trusted certificate authorities, as defined in the cluster's proxy configuration, into the build. This lets processes within a build trust components signed by custom PKI certificate authorities, such as private artifact repositories and HTTPS proxies.\n\nWhen this field is set to true, the contents of `/etc/pki/ca-trust` within the build are managed by the build container, and any changes to this directory or its subdirectories (for example - within a Dockerfile `RUN` instruction) are not persisted in the build's output image.", + "type": "boolean" + }, + "nodeSelector": { + "description": "nodeSelector is a selector which must be true for the build pod to fit on a node If nil, it can be overridden by default build nodeselector values for the cluster. If set to an empty map or a map with any values, default build nodeselector values are ignored.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "output": { + "description": "output describes the container image the Strategy should produce.", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildOutput" + }, + "postCommit": { + "description": "postCommit is a build hook executed after the build output image is committed, before it is pushed to a registry.", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildPostCommitSpec" + }, + "resources": { + "description": "resources computes resource requirements to execute the build.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" + }, + "revision": { + "description": "revision is the information from the source for a specific repo snapshot. This is optional.", + "$ref": "#/definitions/io.openshift.build.v1.SourceRevision" + }, + "serviceAccount": { + "description": "serviceAccount is the name of the ServiceAccount to use to run the pod created by this build. The pod will be allowed to use secrets referenced by the ServiceAccount", "type": "string" + }, + "source": { + "description": "source describes the SCM in use.", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildSource" + }, + "strategy": { + "description": "strategy defines how to perform a build.", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildStrategy" + }, + "triggeredBy": { + "description": "triggeredBy describes which triggers started the most recent update to the build configuration and contains information about those triggers.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildTriggerCause" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "ObjectMeta", + "Kind": "BuildSpec", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.OwnerReference": { - "description": "OwnerReference contains enough information to let you identify an owning object. An owning object must be in the same namespace as the dependent, or be cluster-scoped, so there is no namespace field.", + "io.openshift.build.v1.BuildStatus": { + "description": "BuildStatus contains the status of a build", "type": "object", "required": [ - "apiVersion", - "kind", - "name", - "uid" + "phase" ], "properties": { - "apiVersion": { - "description": "API version of the referent.", - "type": "string", - "default": "" - }, - "blockOwnerDeletion": { - "description": "If true, AND if the owner has the \"foregroundDeletion\" finalizer, then the owner cannot be deleted from the key-value store until this reference is removed. See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion for how the garbage collector interacts with this field and enforces the foreground deletion. Defaults to false. To set this field, a user needs \"delete\" permission of the owner, otherwise 422 (Unprocessable Entity) will be returned.", + "cancelled": { + "description": "cancelled describes if a cancel event was triggered for the build.", "type": "boolean" }, - "controller": { - "description": "If true, this reference points to the managing controller.", - "type": "boolean" + "completionTimestamp": { + "description": "completionTimestamp is a timestamp representing the server time when this Build was finished, whether that build failed or succeeded. It reflects the time at which the Pod running the Build terminated. It is represented in RFC3339 form and is in UTC.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "kind": { - "description": "Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string", - "default": "" + "conditions": { + "description": "Conditions represents the latest available observations of a build's current state.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildCondition" + }, + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" }, - "name": { - "description": "Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names", - "type": "string", - "default": "" + "config": { + "description": "config is an ObjectReference to the BuildConfig this Build is based on.", + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" }, - "uid": { - "description": "UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "meta.k8s.io", - "Version": "v1", - "Kind": "OwnerReference", - "Scope": "Namespaced" - }, - "x-kubernetes-map-type": "atomic" - }, - "io.k8s.apimachinery.pkg.apis.meta.v1.PartialObjectMetadata": { - "description": "PartialObjectMetadata is a generic representation of any object with ObjectMeta. It allows clients to get access to a particular ObjectMeta schema without knowing the details of the version.", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "duration": { + "description": "duration contains time.Duration object describing build time.", + "type": "integer", + "format": "int64" + }, + "logSnippet": { + "description": "logSnippet is the last few lines of the build log. This value is only set for builds that failed.", "type": "string" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "message": { + "description": "message is a human-readable message indicating details about why the build has this status.", "type": "string" }, - "metadata": { - "description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "output": { + "description": "output describes the container image the build has produced.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "meta.k8s.io", - "Version": "v1", - "Kind": "PartialObjectMetadata", - "Scope": "Namespaced" - } - }, - "io.k8s.apimachinery.pkg.apis.meta.v1.PartialObjectMetadataList": { - "description": "PartialObjectMetadataList contains a list of objects containing only their metadata", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "$ref": "#/definitions/io.openshift.build.v1.BuildStatusOutput" + }, + "outputDockerImageReference": { + "description": "outputDockerImageReference contains a reference to the container image that will be built by this build. Its value is computed from Build.Spec.Output.To, and should include the registry address, so that it can be used to push and pull the image.", "type": "string" }, - "items": { - "description": "items contains each of the included items.", + "phase": { + "description": "phase is the point in the build lifecycle. Possible values are \"New\", \"Pending\", \"Running\", \"Complete\", \"Failed\", \"Error\", and \"Cancelled\".", + "type": "string", + "default": "" + }, + "reason": { + "description": "reason is a brief CamelCase string that describes any failure and is meant for machine parsing and tidy display in the CLI.", + "type": "string" + }, + "stages": { + "description": "stages contains details about each stage that occurs during the build including start time, duration (in milliseconds), and the steps that occured within each stage.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PartialObjectMetadata" + "$ref": "#/definitions/io.openshift.build.v1.StageInfo" } }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "startTimestamp": { + "description": "startTimestamp is a timestamp representing the server time when this Build started running in a Pod. It is represented in RFC3339 form and is in UTC.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" } }, "x-fabric8-info": { - "Type": "list", - "Group": "meta.k8s.io", + "Type": "nested", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "PartialObjectMetadataList", + "Kind": "BuildStatus", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.Patch": { - "description": "Patch is provided to give a concrete name and type to the Kubernetes PATCH request body.", + "io.openshift.build.v1.BuildStatusOutput": { + "description": "BuildStatusOutput contains the status of the built image.", "type": "object", + "properties": { + "to": { + "description": "to describes the status of the built image being pushed to a registry.", + "$ref": "#/definitions/io.openshift.build.v1.BuildStatusOutputTo" + } + }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "Patch", + "Kind": "BuildStatusOutput", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.PatchOptions": { - "description": "PatchOptions may be provided when patching an API object. PatchOptions is meant to be a superset of UpdateOptions.", + "io.openshift.build.v1.BuildStatusOutputTo": { + "description": "BuildStatusOutputTo describes the status of the built image with regards to image registry to which it was supposed to be pushed.", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "dryRun": { - "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "fieldManager": { - "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).", - "type": "string" - }, - "fieldValidation": { - "description": "fieldValidation instructs the server on how to handle objects in the request (POST/PUT/PATCH) containing unknown or duplicate fields. Valid values are: - Ignore: This will ignore any unknown fields that are silently dropped from the object, and will ignore all but the last duplicate field that the decoder encounters. This is the default behavior prior to v1.23. - Warn: This will send a warning via the standard warning response header for each unknown field that is dropped from the object, and for each duplicate field that is encountered. The request will still succeed if there are no other errors, and will only persist the last of any duplicate fields. This is the default in v1.23+ - Strict: This will fail the request with a BadRequest error if any unknown fields would be dropped from the object, or if any duplicate fields are present. The error returned from the server will contain all unknown and duplicate fields encountered.", - "type": "string" - }, - "force": { - "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.", - "type": "boolean" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "imageDigest": { + "description": "imageDigest is the digest of the built container image. The digest uniquely identifies the image in the registry to which it was pushed.\n\nPlease note that this field may not always be set even if the push completes successfully - e.g. when the registry returns no digest or returns it in a format that the builder doesn't understand.", "type": "string" } }, "x-fabric8-info": { - "Type": "object", - "Group": "meta.k8s.io", + "Type": "nested", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "PatchOptions", + "Kind": "BuildStatusOutputTo", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.Preconditions": { - "description": "Preconditions must be fulfilled before an operation (update, delete, etc.) is carried out.", + "io.openshift.build.v1.BuildStrategy": { + "description": "BuildStrategy contains the details of how to perform a build.", "type": "object", "properties": { - "resourceVersion": { - "description": "Specifies the target ResourceVersion", - "type": "string" + "customStrategy": { + "description": "customStrategy holds the parameters to the Custom build strategy", + "$ref": "#/definitions/io.openshift.build.v1.CustomBuildStrategy" }, - "uid": { - "description": "Specifies the target UID.", + "dockerStrategy": { + "description": "dockerStrategy holds the parameters to the container image build strategy.", + "$ref": "#/definitions/io.openshift.build.v1.DockerBuildStrategy" + }, + "jenkinsPipelineStrategy": { + "description": "JenkinsPipelineStrategy holds the parameters to the Jenkins Pipeline build strategy. Deprecated: use OpenShift Pipelines", + "$ref": "#/definitions/io.openshift.build.v1.JenkinsPipelineBuildStrategy" + }, + "sourceStrategy": { + "description": "sourceStrategy holds the parameters to the Source build strategy.", + "$ref": "#/definitions/io.openshift.build.v1.SourceBuildStrategy" + }, + "type": { + "description": "type is the kind of build strategy.", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "Preconditions", + "Kind": "BuildStrategy", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.RootPaths": { - "description": "RootPaths lists the paths available at root. For example: \"/healthz\", \"/apis\".", + "io.openshift.build.v1.BuildTriggerCause": { + "description": "BuildTriggerCause holds information about a triggered build. It is used for displaying build trigger data for each build and build configuration in oc describe. It is also used to describe which triggers led to the most recent update in the build configuration.", "type": "object", - "required": [ - "paths" - ], "properties": { - "paths": { - "description": "paths are the paths available at root.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "bitbucketWebHook": { + "description": "BitbucketWebHook represents data for a Bitbucket webhook that fired a specific build.", + "$ref": "#/definitions/io.openshift.build.v1.BitbucketWebHookCause" + }, + "genericWebHook": { + "description": "genericWebHook holds data about a builds generic webhook trigger.", + "$ref": "#/definitions/io.openshift.build.v1.GenericWebHookCause" + }, + "githubWebHook": { + "description": "gitHubWebHook represents data for a GitHub webhook that fired a specific build.", + "$ref": "#/definitions/io.openshift.build.v1.GitHubWebHookCause" + }, + "gitlabWebHook": { + "description": "GitLabWebHook represents data for a GitLab webhook that fired a specific build.", + "$ref": "#/definitions/io.openshift.build.v1.GitLabWebHookCause" + }, + "imageChangeBuild": { + "description": "imageChangeBuild stores information about an imagechange event that triggered a new build.", + "$ref": "#/definitions/io.openshift.build.v1.ImageChangeCause" + }, + "message": { + "description": "message is used to store a human readable message for why the build was triggered. E.g.: \"Manually triggered by user\", \"Configuration change\",etc.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "RootPaths", + "Kind": "BuildTriggerCause", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.ServerAddressByClientCIDR": { - "description": "ServerAddressByClientCIDR helps the client to determine the server address that they should use, depending on the clientCIDR that they match.", + "io.openshift.build.v1.BuildTriggerPolicy": { + "description": "BuildTriggerPolicy describes a policy for a single trigger that results in a new Build.", "type": "object", "required": [ - "clientCIDR", - "serverAddress" + "type" ], "properties": { - "clientCIDR": { - "description": "The CIDR with which clients can match their IP to figure out the server address that they should use.", - "type": "string", - "default": "" + "bitbucket": { + "description": "BitbucketWebHook contains the parameters for a Bitbucket webhook type of trigger", + "$ref": "#/definitions/io.openshift.build.v1.WebHookTrigger" }, - "serverAddress": { - "description": "Address of this server, suitable for a client that matches the above CIDR. This can be a hostname, hostname:port, IP or IP:port.", + "generic": { + "description": "generic contains the parameters for a Generic webhook type of trigger", + "$ref": "#/definitions/io.openshift.build.v1.WebHookTrigger" + }, + "github": { + "description": "github contains the parameters for a GitHub webhook type of trigger", + "$ref": "#/definitions/io.openshift.build.v1.WebHookTrigger" + }, + "gitlab": { + "description": "GitLabWebHook contains the parameters for a GitLab webhook type of trigger", + "$ref": "#/definitions/io.openshift.build.v1.WebHookTrigger" + }, + "imageChange": { + "description": "imageChange contains parameters for an ImageChange type of trigger", + "$ref": "#/definitions/io.openshift.build.v1.ImageChangeTrigger" + }, + "type": { + "description": "type is the type of build trigger. Valid values:\n\n- GitHub GitHubWebHookBuildTriggerType represents a trigger that launches builds on GitHub webhook invocations\n\n- Generic GenericWebHookBuildTriggerType represents a trigger that launches builds on generic webhook invocations\n\n- GitLab GitLabWebHookBuildTriggerType represents a trigger that launches builds on GitLab webhook invocations\n\n- Bitbucket BitbucketWebHookBuildTriggerType represents a trigger that launches builds on Bitbucket webhook invocations\n\n- ImageChange ImageChangeBuildTriggerType represents a trigger that launches builds on availability of a new version of an image\n\n- ConfigChange ConfigChangeBuildTriggerType will trigger a build on an initial build config creation WARNING: In the future the behavior will change to trigger a build on any config change", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "ServerAddressByClientCIDR", + "Kind": "BuildTriggerPolicy", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.Status": { - "description": "Status is a return value for calls that don't return other objects.", + "io.openshift.build.v1.BuildVolume": { + "description": "BuildVolume describes a volume that is made available to build pods, such that it can be mounted into buildah's runtime environment. Only a subset of Kubernetes Volume sources are supported.", "type": "object", + "required": [ + "name", + "source", + "mounts" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "code": { - "description": "Suggested HTTP return code for this status, 0 if not set.", - "type": "integer", - "format": "int32" - }, - "details": { - "description": "Extended data associated with the reason. Each reason may define its own extended details. This field is optional and the data returned is not guaranteed to conform to any schema except that defined by the reason type.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusDetails", - "x-kubernetes-list-type": "atomic" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "mounts": { + "description": "mounts represents the location of the volume in the image build container", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildVolumeMount" + }, + "x-kubernetes-list-map-keys": [ + "destinationPath" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "destinationPath", + "x-kubernetes-patch-strategy": "merge" }, - "message": { - "description": "A human-readable description of the status of this operation.", - "type": "string" + "name": { + "description": "name is a unique identifier for this BuildVolume. It must conform to the Kubernetes DNS label standard and be unique within the pod. Names that collide with those added by the build controller will result in a failed build with an error message detailing which name caused the error. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "type": "string", + "default": "" }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "source": { + "description": "source represents the location and type of the mounted volume.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - }, - "reason": { - "description": "A machine-readable description of why this operation is in the \"Failure\" status. If this value is empty there is no information available. A Reason clarifies an HTTP status code but does not override it.", - "type": "string" - }, - "status": { - "description": "Status of the operation. One of: \"Success\" or \"Failure\". More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status", - "type": "string" + "$ref": "#/definitions/io.openshift.build.v1.BuildVolumeSource" } }, "x-fabric8-info": { - "Type": "list", - "Group": "meta.k8s.io", + "Type": "nested", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "Status", + "Kind": "BuildVolume", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.StatusCause": { - "description": "StatusCause provides more information about an api.Status failure, including cases when multiple errors are encountered.", + "io.openshift.build.v1.BuildVolumeMount": { + "description": "BuildVolumeMount describes the mounting of a Volume within buildah's runtime environment.", "type": "object", + "required": [ + "destinationPath" + ], "properties": { - "field": { - "description": "The field of the resource that has caused this error, as named by its JSON serialization. May include dot and postfix notation for nested attributes. Arrays are zero-indexed. Fields may appear more than once in an array of causes due to fields having multiple errors. Optional.\n\nExamples:\n \"name\" - the field \"name\" on the current resource\n \"items[0].name\" - the field \"name\" on the first array entry in \"items\"", - "type": "string" - }, - "message": { - "description": "A human-readable description of the cause of the error. This field may be presented as-is to a reader.", - "type": "string" - }, - "reason": { - "description": "A machine-readable description of the cause of the error. If this value is empty there is no information available.", - "type": "string" + "destinationPath": { + "description": "destinationPath is the path within the buildah runtime environment at which the volume should be mounted. The transient mount within the build image and the backing volume will both be mounted read only. Must be an absolute path, must not contain '..' or ':', and must not collide with a destination path generated by the builder process Paths that collide with those added by the build controller will result in a failed build with an error message detailing which path caused the error.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "StatusCause", + "Kind": "BuildVolumeMount", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.StatusDetails": { - "description": "StatusDetails is a set of additional properties that MAY be set by the server to provide additional information about a response. The Reason field of a Status object defines what attributes will be set. Clients must ignore fields that do not match the defined type of each attribute, and should assume that any attribute may be empty, invalid, or under defined.", + "io.openshift.build.v1.BuildVolumeSource": { + "description": "BuildVolumeSource represents the source of a volume to mount Only one of its supported types may be specified at any given time.", "type": "object", + "required": [ + "type" + ], "properties": { - "causes": { - "description": "The Causes array includes more details associated with the StatusReason failure. Not all StatusReasons may provide detailed causes.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.StatusCause" - }, - "x-kubernetes-list-type": "atomic" - }, - "group": { - "description": "The group attribute of the resource associated with the status StatusReason.", - "type": "string" - }, - "kind": { - "description": "The kind attribute of the resource associated with the status StatusReason. On some operations may differ from the requested resource Kind. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "configMap": { + "description": "configMap represents a ConfigMap that should populate this volume", + "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapVolumeSource" }, - "name": { - "description": "The name attribute of the resource associated with the status StatusReason (when there is a single name which can be described).", - "type": "string" + "csi": { + "description": "csi represents ephemeral storage provided by external CSI drivers which support this capability", + "$ref": "#/definitions/io.k8s.api.core.v1.CSIVolumeSource" }, - "retryAfterSeconds": { - "description": "If specified, the time in seconds before the operation should be retried. Some errors may indicate the client must take an alternate action - for those errors this field may indicate how long to wait before taking the alternate action.", - "type": "integer", - "format": "int32" + "secret": { + "description": "secret represents a Secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret", + "$ref": "#/definitions/io.k8s.api.core.v1.SecretVolumeSource" }, - "uid": { - "description": "UID of the resource. (when there is a single resource which can be described). More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids", - "type": "string" + "type": { + "description": "type is the BuildVolumeSourceType for the volume source. Type must match the populated volume source. Valid types are: Secret, ConfigMap", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "StatusDetails", + "Kind": "BuildVolumeSource", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.Table": { - "description": "Table is a tabular representation of a set of API resources. The server transforms the object into a set of preferred columns for quickly reviewing the objects.", + "io.openshift.build.v1.CommonSpec": { + "description": "CommonSpec encapsulates all the inputs necessary to represent a build.", "type": "object", "required": [ - "columnDefinitions", - "rows" + "strategy" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "completionDeadlineSeconds": { + "description": "completionDeadlineSeconds is an optional duration in seconds, counted from the time when a build pod gets scheduled in the system, that the build may be active on a node before the system actively tries to terminate the build; value must be positive integer", + "type": "integer", + "format": "int64" }, - "columnDefinitions": { - "description": "columnDefinitions describes each column in the returned items array. The number of cells per row will always match the number of column definitions.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.TableColumnDefinition" - }, - "x-kubernetes-list-type": "atomic" + "mountTrustedCA": { + "description": "mountTrustedCA bind mounts the cluster's trusted certificate authorities, as defined in the cluster's proxy configuration, into the build. This lets processes within a build trust components signed by custom PKI certificate authorities, such as private artifact repositories and HTTPS proxies.\n\nWhen this field is set to true, the contents of `/etc/pki/ca-trust` within the build are managed by the build container, and any changes to this directory or its subdirectories (for example - within a Dockerfile `RUN` instruction) are not persisted in the build's output image.", + "type": "boolean" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "nodeSelector": { + "description": "nodeSelector is a selector which must be true for the build pod to fit on a node If nil, it can be overridden by default build nodeselector values for the cluster. If set to an empty map or a map with any values, default build nodeselector values are ignored.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "output": { + "description": "output describes the container image the Strategy should produce.", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildOutput" + }, + "postCommit": { + "description": "postCommit is a build hook executed after the build output image is committed, before it is pushed to a registry.", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildPostCommitSpec" + }, + "resources": { + "description": "resources computes resource requirements to execute the build.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" + }, + "revision": { + "description": "revision is the information from the source for a specific repo snapshot. This is optional.", + "$ref": "#/definitions/io.openshift.build.v1.SourceRevision" + }, + "serviceAccount": { + "description": "serviceAccount is the name of the ServiceAccount to use to run the pod created by this build. The pod will be allowed to use secrets referenced by the ServiceAccount", + "type": "string" + }, + "source": { + "description": "source describes the SCM in use.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/io.openshift.build.v1.BuildSource" }, - "rows": { - "description": "rows is the list of items in the table.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.TableRow" - }, - "x-kubernetes-list-type": "atomic" + "strategy": { + "description": "strategy defines how to perform a build.", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildStrategy" } }, "x-fabric8-info": { - "Type": "list", - "Group": "meta.k8s.io", + "Type": "nested", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "Table", + "Kind": "CommonSpec", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.TableColumnDefinition": { - "description": "TableColumnDefinition contains information about a column returned in the Table.", + "io.openshift.build.v1.CommonWebHookCause": { + "description": "CommonWebHookCause factors out the identical format of these webhook causes into struct so we can share it in the specific causes; it is too late for GitHub and Generic but we can leverage this pattern with GitLab and Bitbucket.", "type": "object", - "required": [ - "name", - "type", - "format", - "description", - "priority" - ], "properties": { - "description": { - "description": "description is a human readable description of this column.", - "type": "string", - "default": "" - }, - "format": { - "description": "format is an optional OpenAPI type modifier for this column. A format modifies the type and imposes additional rules, like date or time formatting for a string. The 'name' format is applied to the primary identifier column which has type 'string' to assist in clients identifying column is the resource name. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for more.", - "type": "string", - "default": "" - }, - "name": { - "description": "name is a human readable name for the column.", - "type": "string", - "default": "" - }, - "priority": { - "description": "priority is an integer defining the relative importance of this column compared to others. Lower numbers are considered higher priority. Columns that may be omitted in limited space scenarios should be given a higher priority.", - "type": "integer", - "format": "int32", - "default": 0 + "revision": { + "description": "Revision is the git source revision information of the trigger.", + "$ref": "#/definitions/io.openshift.build.v1.SourceRevision" }, - "type": { - "description": "type is an OpenAPI type definition for this column, such as number, integer, string, or array. See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for more.", - "type": "string", - "default": "" + "secret": { + "description": "Secret is the obfuscated webhook secret that triggered a build.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "TableColumnDefinition", + "Kind": "CommonWebHookCause", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.TableOptions": { - "description": "TableOptions are used when a Table is requested by the caller.", + "io.openshift.build.v1.ConfigMapBuildSource": { + "description": "ConfigMapBuildSource describes a configmap and its destination directory that will be used only at the build time. The content of the configmap referenced here will be copied into the destination directory instead of mounting.", "type": "object", + "required": [ + "configMap" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "includeObject": { - "description": "includeObject decides whether to include each object along with its columnar information. Specifying \"None\" will return no object, specifying \"Object\" will return the full object contents, and specifying \"Metadata\" (the default) will return the object's metadata in the PartialObjectMetadata kind in version v1beta1 of the meta.k8s.io API group.", - "type": "string" + "configMap": { + "description": "configMap is a reference to an existing configmap that you want to use in your build.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "destinationDir": { + "description": "destinationDir is the directory where the files from the configmap should be available for the build time. For the Source build strategy, these will be injected into a container where the assemble script runs. For the container image build strategy, these will be copied into the build directory, where the Dockerfile is located, so users can ADD or COPY them during container image build.", "type": "string" } }, "x-fabric8-info": { - "Type": "object", - "Group": "meta.k8s.io", + "Type": "nested", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "TableOptions", + "Kind": "ConfigMapBuildSource", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.TableRow": { - "description": "TableRow is an individual row in a table.", + "io.openshift.build.v1.CustomBuildStrategy": { + "description": "CustomBuildStrategy defines input parameters specific to Custom build.", "type": "object", "required": [ - "cells" + "from" ], "properties": { - "cells": { - "description": "cells will be as wide as the column definitions array and may contain strings, numbers (float64 or int64), booleans, simple maps, lists, or null. See the type field of the column definition for a more detailed description.", + "buildAPIVersion": { + "description": "buildAPIVersion is the requested API version for the Build object serialized and passed to the custom builder", + "type": "string" + }, + "env": { + "description": "env contains additional environment variables you want to pass into a builder container.", "type": "array", "items": { - "type": "object" - }, - "x-kubernetes-list-type": "atomic" + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" + } }, - "conditions": { - "description": "conditions describe additional status of a row that are relevant for a human user. These conditions apply to the row, not to the object, and will be specific to table output. The only defined condition type is 'Completed', for a row that indicates a resource that has run to completion and can be given less visual priority.", + "exposeDockerSocket": { + "description": "exposeDockerSocket will allow running Docker commands (and build container images) from inside the container.", + "type": "boolean" + }, + "forcePull": { + "description": "forcePull describes if the controller should configure the build pod to always pull the images for the builder or only pull if it is not present locally", + "type": "boolean" + }, + "from": { + "description": "from is reference to an DockerImage, ImageStreamTag, or ImageStreamImage from which the container image should be pulled", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + }, + "pullSecret": { + "description": "pullSecret is the name of a Secret that would be used for setting up the authentication for pulling the container images from the private Docker registries", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "secrets": { + "description": "secrets is a list of additional secrets that will be included in the build pod", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.TableRowCondition" - }, - "x-kubernetes-list-type": "atomic" - }, - "object": { - "description": "This field contains the requested additional information about each object based on the includeObject policy when requesting the Table. If \"None\", this field is empty, if \"Object\" this will be the default serialization of the object for the current API version, and if \"Metadata\" (the default) will contain the object metadata. Check the returned kind and apiVersion of the object before parsing. The media type of the object will always match the enclosing list - if this as a JSON table, these will be JSON encoded objects.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "$ref": "#/definitions/io.openshift.build.v1.SecretSpec" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "TableRow", + "Kind": "CustomBuildStrategy", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.TableRowCondition": { - "description": "TableRowCondition allows a row to be marked with additional information.", + "io.openshift.build.v1.DockerBuildStrategy": { + "description": "DockerBuildStrategy defines input parameters specific to container image build.", "type": "object", - "required": [ - "type", - "status" - ], "properties": { - "message": { - "description": "Human readable message indicating details about last transition.", + "buildArgs": { + "description": "buildArgs contains build arguments that will be resolved in the Dockerfile. See https://docs.docker.com/engine/reference/builder/#/arg for more details. NOTE: Only the 'name' and 'value' fields are supported. Any settings on the 'valueFrom' field are ignored.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" + } + }, + "dockerfilePath": { + "description": "dockerfilePath is the path of the Dockerfile that will be used to build the container image, relative to the root of the context (contextDir). Defaults to `Dockerfile` if unset.", "type": "string" }, - "reason": { - "description": "(brief) machine readable reason for the condition's last transition.", + "env": { + "description": "env contains additional environment variables you want to pass into a builder container.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" + } + }, + "forcePull": { + "description": "forcePull describes if the builder should pull the images from registry prior to building.", + "type": "boolean" + }, + "from": { + "description": "from is a reference to an DockerImage, ImageStreamTag, or ImageStreamImage which overrides the FROM image in the Dockerfile for the build. If the Dockerfile uses multi-stage builds, this will replace the image in the last FROM directive of the file.", + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + }, + "imageOptimizationPolicy": { + "description": "imageOptimizationPolicy describes what optimizations the system can use when building images to reduce the final size or time spent building the image. The default policy is 'None' which means the final build image will be equivalent to an image created by the container image build API. The experimental policy 'SkipLayers' will avoid commiting new layers in between each image step, and will fail if the Dockerfile cannot provide compatibility with the 'None' policy. An additional experimental policy 'SkipLayersAndWarn' is the same as 'SkipLayers' but simply warns if compatibility cannot be preserved.", "type": "string" }, - "status": { - "description": "Status of the condition, one of True, False, Unknown.", - "type": "string", - "default": "" + "noCache": { + "description": "noCache if set to true indicates that the container image build must be executed with the --no-cache=true flag", + "type": "boolean" }, - "type": { - "description": "Type of row condition. The only defined value is 'Completed' indicating that the object this row represents has reached a completed state and may be given less visual priority than other rows. Clients are not required to honor any conditions but should be consistent where possible about handling the conditions.", - "type": "string", - "default": "" + "pullSecret": { + "description": "pullSecret is the name of a Secret that would be used for setting up the authentication for pulling the container images from the private Docker registries", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "volumes": { + "description": "volumes is a list of input volumes that can be mounted into the builds runtime environment. Only a subset of Kubernetes Volume sources are supported by builds. More info: https://kubernetes.io/docs/concepts/storage/volumes", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildVolume" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" } }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", - "Version": "v1", - "Kind": "TableRowCondition", - "Scope": "Namespaced" - } - }, - "io.k8s.apimachinery.pkg.apis.meta.v1.Time": { - "description": "Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers.", - "type": "string", - "format": "date-time", - "x-fabric8-info": { - "Type": "nested", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "Time", + "Kind": "DockerBuildStrategy", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.Timestamp": { - "description": "Timestamp is a struct that is equivalent to Time, but intended for protobuf marshalling/unmarshalling. It is generated into a serialization that matches Time. Do not use in Go structs.", + "io.openshift.build.v1.DockerStrategyOptions": { + "description": "DockerStrategyOptions contains extra strategy options for container image builds", "type": "object", - "required": [ - "seconds", - "nanos" - ], "properties": { - "nanos": { - "description": "Non-negative fractions of a second at nanosecond resolution. Negative second values with fractions must still have non-negative nanos values that count forward in time. Must be from 0 to 999,999,999 inclusive. This field may be limited in precision depending on context.", - "type": "integer", - "format": "int32", - "default": 0 + "buildArgs": { + "description": "Args contains any build arguments that are to be passed to Docker. See https://docs.docker.com/engine/reference/builder/#/arg for more details", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" + } }, - "seconds": { - "description": "Represents seconds of UTC time since Unix epoch 1970-01-01T00:00:00Z. Must be from 0001-01-01T00:00:00Z to 9999-12-31T23:59:59Z inclusive.", - "type": "integer", - "format": "int64", - "default": 0 + "noCache": { + "description": "noCache overrides the docker-strategy noCache option in the build config", + "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "Timestamp", + "Kind": "DockerStrategyOptions", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.TypeMeta": { - "description": "TypeMeta describes an individual object in an API response or request with strings representing the type of the object and its API schema version. Structures that are versioned or persisted should inline TypeMeta.", + "io.openshift.build.v1.GenericWebHookCause": { + "description": "GenericWebHookCause holds information about a generic WebHook that triggered a build.", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "revision": { + "description": "revision is an optional field that stores the git source revision information of the generic webhook trigger when it is available.", + "$ref": "#/definitions/io.openshift.build.v1.SourceRevision" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "secret": { + "description": "secret is the obfuscated webhook secret that triggered a build.", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "TypeMeta", + "Kind": "GenericWebHookCause", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.UpdateOptions": { - "description": "UpdateOptions may be provided when updating an API object. All fields in UpdateOptions should also be present in PatchOptions.", + "io.openshift.build.v1.GenericWebHookEvent": { + "description": "GenericWebHookEvent is the payload expected for a generic webhook post", "type": "object", "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "dockerStrategyOptions": { + "description": "DockerStrategyOptions contains additional docker-strategy specific options for the build", + "$ref": "#/definitions/io.openshift.build.v1.DockerStrategyOptions" }, - "dryRun": { - "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed", + "env": { + "description": "env contains additional environment variables you want to pass into a builder container. ValueFrom is not supported.", "type": "array", "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "fieldManager": { - "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.", - "type": "string" + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" + } }, - "fieldValidation": { - "description": "fieldValidation instructs the server on how to handle objects in the request (POST/PUT/PATCH) containing unknown or duplicate fields. Valid values are: - Ignore: This will ignore any unknown fields that are silently dropped from the object, and will ignore all but the last duplicate field that the decoder encounters. This is the default behavior prior to v1.23. - Warn: This will send a warning via the standard warning response header for each unknown field that is dropped from the object, and for each duplicate field that is encountered. The request will still succeed if there are no other errors, and will only persist the last of any duplicate fields. This is the default in v1.23+ - Strict: This will fail the request with a BadRequest error if any unknown fields would be dropped from the object, or if any duplicate fields are present. The error returned from the server will contain all unknown and duplicate fields encountered.", - "type": "string" + "git": { + "description": "git is the git information if the Type is BuildSourceGit", + "$ref": "#/definitions/io.openshift.build.v1.GitInfo" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": { + "description": "type is the type of source repository", "type": "string" } }, "x-fabric8-info": { - "Type": "object", - "Group": "meta.k8s.io", + "Type": "nested", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "UpdateOptions", + "Kind": "GenericWebHookEvent", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.WatchEvent": { - "description": "Event represents a single event to a watched resource.", + "io.openshift.build.v1.GitBuildSource": { + "description": "GitBuildSource defines the parameters of a Git SCM", "type": "object", "required": [ - "type", - "object" + "uri" ], "properties": { - "object": { - "description": "Object is:\n * If Type is Added or Modified: the new state of the object.\n * If Type is Deleted: the state of the object immediately before deletion.\n * If Type is Error: *Status is recommended; other types may make sense\n depending on context.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "httpProxy": { + "description": "httpProxy is a proxy used to reach the git repository over http", + "type": "string" }, - "type": { + "httpsProxy": { + "description": "httpsProxy is a proxy used to reach the git repository over https", + "type": "string" + }, + "noProxy": { + "description": "noProxy is the list of domains for which the proxy should not be used", + "type": "string" + }, + "ref": { + "description": "ref is the branch/tag/ref to build.", + "type": "string" + }, + "uri": { + "description": "uri points to the source that will be built. The structure of the source will depend on the type of build to run", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "meta.k8s.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "WatchEvent", + "Kind": "GitBuildSource", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.unstructured.Unstructured": { - "description": "Unstructured allows objects that do not have Golang structs registered to be manipulated generically. This can be used to deal with the API objects from a plug-in. Unstructured objects still have functioning TypeMeta features-- kind, version, etc.\n\nWARNING: This object has accessors for the v1 standard metadata. You *MUST NOT* use this type if you are dealing with objects that are not in the server meta v1 schema.", + "io.openshift.build.v1.GitHubWebHookCause": { + "description": "GitHubWebHookCause has information about a GitHub webhook that triggered a build.", "type": "object", - "required": [ - "Object" - ], "properties": { - "Object": { - "description": "Object is a JSON compatible map with string, float, int, bool, []interface{}, or map[string]interface{} children.", - "type": "object", - "additionalProperties": { - "type": "object" - } + "revision": { + "description": "revision is the git revision information of the trigger.", + "$ref": "#/definitions/io.openshift.build.v1.SourceRevision" + }, + "secret": { + "description": "secret is the obfuscated webhook secret that triggered a build.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "unstructured", - "Kind": "Unstructured", + "Group": "build.openshift.io", + "Version": "v1", + "Kind": "GitHubWebHookCause", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.unstructured.UnstructuredList": { - "description": "UnstructuredList allows lists that do not have Golang structs registered to be manipulated generically. This can be used to deal with the API lists from a plug-in.", + "io.openshift.build.v1.GitInfo": { + "description": "GitInfo is the aggregated git information for a generic webhook post", "type": "object", "required": [ - "Object", - "items" + "uri", + "refs" ], "properties": { - "Object": { - "type": "object", - "additionalProperties": { - "type": "object" - } + "author": { + "description": "author is the author of a specific commit", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser" }, - "items": { - "description": "Items is a list of unstructured objects.", + "commit": { + "description": "commit is the commit hash identifying a specific commit", + "type": "string" + }, + "committer": { + "description": "committer is the committer of a specific commit", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser" + }, + "httpProxy": { + "description": "httpProxy is a proxy used to reach the git repository over http", + "type": "string" + }, + "httpsProxy": { + "description": "httpsProxy is a proxy used to reach the git repository over https", + "type": "string" + }, + "message": { + "description": "message is the description of a specific commit", + "type": "string" + }, + "noProxy": { + "description": "noProxy is the list of domains for which the proxy should not be used", + "type": "string" + }, + "ref": { + "description": "ref is the branch/tag/ref to build.", + "type": "string" + }, + "refs": { + "description": "Refs is a list of GitRefs for the provided repo - generally sent when used from a post-receive hook. This field is optional and is used when sending multiple refs", "type": "array", "items": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.unstructured.Unstructured" + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.GitRefInfo" } + }, + "uri": { + "description": "uri points to the source that will be built. The structure of the source will depend on the type of build to run", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "unstructured", - "Kind": "UnstructuredList", + "Group": "build.openshift.io", + "Version": "v1", + "Kind": "GitInfo", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.unstructured.jsonFallbackEncoder": { + "io.openshift.build.v1.GitLabWebHookCause": { + "description": "GitLabWebHookCause has information about a GitLab webhook that triggered a build.", "type": "object", - "required": [ - "encoder", - "identifier" - ], "properties": { - "encoder": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.Encoder" + "revision": { + "description": "Revision is the git source revision information of the trigger.", + "$ref": "#/definitions/io.openshift.build.v1.SourceRevision" }, - "identifier": { - "type": "string", - "default": "" + "secret": { + "description": "Secret is the obfuscated webhook secret that triggered a build.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "unstructured", - "Kind": "jsonFallbackEncoder", + "Group": "build.openshift.io", + "Version": "v1", + "Kind": "GitLabWebHookCause", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.unstructured.unstructuredJSONScheme": { + "io.openshift.build.v1.GitRefInfo": { + "description": "GitRefInfo is a single ref", "type": "object", + "required": [ + "uri" + ], + "properties": { + "author": { + "description": "author is the author of a specific commit", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser" + }, + "commit": { + "description": "commit is the commit hash identifying a specific commit", + "type": "string" + }, + "committer": { + "description": "committer is the committer of a specific commit", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser" + }, + "httpProxy": { + "description": "httpProxy is a proxy used to reach the git repository over http", + "type": "string" + }, + "httpsProxy": { + "description": "httpsProxy is a proxy used to reach the git repository over https", + "type": "string" + }, + "message": { + "description": "message is the description of a specific commit", + "type": "string" + }, + "noProxy": { + "description": "noProxy is the list of domains for which the proxy should not be used", + "type": "string" + }, + "ref": { + "description": "ref is the branch/tag/ref to build.", + "type": "string" + }, + "uri": { + "description": "uri points to the source that will be built. The structure of the source will depend on the type of build to run", + "type": "string", + "default": "" + } + }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "unstructured", - "Kind": "unstructuredJSONScheme", + "Group": "build.openshift.io", + "Version": "v1", + "Kind": "GitRefInfo", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.unstructured.unstructuredscheme.unstructuredCreator": { + "io.openshift.build.v1.GitSourceRevision": { + "description": "GitSourceRevision is the commit information from a git source for a build", "type": "object", + "properties": { + "author": { + "description": "author is the author of a specific commit", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser" + }, + "commit": { + "description": "commit is the commit hash identifying a specific commit", + "type": "string" + }, + "committer": { + "description": "committer is the committer of a specific commit", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser" + }, + "message": { + "description": "message is the description of a specific commit", + "type": "string" + } + }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "unstructuredscheme", - "Kind": "unstructuredCreator", + "Group": "build.openshift.io", + "Version": "v1", + "Kind": "GitSourceRevision", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.unstructured.unstructuredscheme.unstructuredDefaulter": { + "io.openshift.build.v1.ImageChangeCause": { + "description": "ImageChangeCause contains information about the image that triggered a build", "type": "object", + "properties": { + "fromRef": { + "description": "fromRef contains detailed information about an image that triggered a build.", + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + }, + "imageID": { + "description": "imageID is the ID of the image that triggered a new build.", + "type": "string" + } + }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "unstructuredscheme", - "Kind": "unstructuredDefaulter", + "Group": "build.openshift.io", + "Version": "v1", + "Kind": "ImageChangeCause", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.unstructured.unstructuredscheme.unstructuredNegotiatedSerializer": { + "io.openshift.build.v1.ImageChangeTrigger": { + "description": "ImageChangeTrigger allows builds to be triggered when an ImageStream changes", "type": "object", - "required": [ - "scheme", - "typer", - "creator" - ], "properties": { - "creator": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.ObjectCreater" + "from": { + "description": "from is a reference to an ImageStreamTag that will trigger a build when updated It is optional. If no From is specified, the From image from the build strategy will be used. Only one ImageChangeTrigger with an empty From reference is allowed in a build configuration.", + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" }, - "scheme": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.Scheme" + "lastTriggeredImageID": { + "description": "lastTriggeredImageID is used internally by the ImageChangeController to save last used image ID for build This field is deprecated and will be removed in a future release. Deprecated", + "type": "string" }, - "typer": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.ObjectTyper" + "paused": { + "description": "paused is true if this trigger is temporarily disabled. Optional.", + "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "unstructuredscheme", - "Kind": "unstructuredNegotiatedSerializer", + "Group": "build.openshift.io", + "Version": "v1", + "Kind": "ImageChangeTrigger", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.unstructured.unstructuredscheme.unstructuredObjectTyper": { + "io.openshift.build.v1.ImageChangeTriggerStatus": { + "description": "ImageChangeTriggerStatus tracks the latest resolved status of the associated ImageChangeTrigger policy specified in the BuildConfigSpec.Triggers struct.", "type": "object", + "properties": { + "from": { + "description": "from is the ImageStreamTag that is the source of the trigger.", + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.ImageStreamTagReference" + }, + "lastTriggerTime": { + "description": "lastTriggerTime is the last time this particular ImageStreamTag triggered a Build to start. This field is only updated when this trigger specifically started a Build.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "lastTriggeredImageID": { + "description": "lastTriggeredImageID represents the sha/id of the ImageStreamTag when a Build for this BuildConfig was started. The lastTriggeredImageID is updated each time a Build for this BuildConfig is started, even if this ImageStreamTag is not the reason the Build is started.", + "type": "string" + } + }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "unstructuredscheme", - "Kind": "unstructuredObjectTyper", + "Group": "build.openshift.io", + "Version": "v1", + "Kind": "ImageChangeTriggerStatus", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.validation.FieldSelectorValidationOptions": { - "description": "FieldSelectorValidationOptions is a struct that can be passed to ValidateFieldSelectorRequirement to record the validate options", + "io.openshift.build.v1.ImageLabel": { + "description": "ImageLabel represents a label applied to the resulting image.", "type": "object", "required": [ - "AllowUnknownOperatorInRequirement" + "name" ], "properties": { - "AllowUnknownOperatorInRequirement": { - "description": "Allows an operator that is not interpretable to pass validation. This is useful for cases where a broader check can be performed, as in a *SubjectAccessReview", - "type": "boolean", - "default": false + "name": { + "description": "name defines the name of the label. It must have non-zero length.", + "type": "string", + "default": "" + }, + "value": { + "description": "value defines the literal value of the label.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "validation", - "Kind": "FieldSelectorValidationOptions", + "Group": "build.openshift.io", + "Version": "v1", + "Kind": "ImageLabel", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1.validation.LabelSelectorValidationOptions": { - "description": "LabelSelectorValidationOptions is a struct that can be passed to ValidateLabelSelector to record the validate options", + "io.openshift.build.v1.ImageSource": { + "description": "ImageSource is used to describe build source that will be extracted from an image or used during a multi stage build. A reference of type ImageStreamTag, ImageStreamImage or DockerImage may be used. A pull secret can be specified to pull the image from an external registry or override the default service account secret if pulling from the internal registry. Image sources can either be used to extract content from an image and place it into the build context along with the repository source, or used directly during a multi-stage container image build to allow content to be copied without overwriting the contents of the repository source (see the 'paths' and 'as' fields).", "type": "object", "required": [ - "AllowInvalidLabelValueInSelector", - "AllowUnknownOperatorInRequirement" + "from" ], "properties": { - "AllowInvalidLabelValueInSelector": { - "description": "Allow invalid label value in selector", - "type": "boolean", - "default": false + "as": { + "description": "A list of image names that this source will be used in place of during a multi-stage container image build. For instance, a Dockerfile that uses \"COPY --from=nginx:latest\" will first check for an image source that has \"nginx:latest\" in this field before attempting to pull directly. If the Dockerfile does not reference an image source it is ignored. This field and paths may both be set, in which case the contents will be used twice.", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "AllowUnknownOperatorInRequirement": { - "description": "Allows an operator that is not interpretable to pass validation. This is useful for cases where a broader check can be performed, as in a *SubjectAccessReview", - "type": "boolean", - "default": false + "from": { + "description": "from is a reference to an ImageStreamTag, ImageStreamImage, or DockerImage to copy source from.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + }, + "paths": { + "description": "paths is a list of source and destination paths to copy from the image. This content will be copied into the build context prior to starting the build. If no paths are set, the build context will not be altered.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.ImageSourcePath" + } + }, + "pullSecret": { + "description": "pullSecret is a reference to a secret to be used to pull the image from a registry If the image is pulled from the OpenShift registry, this field does not need to be set.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" } }, "x-fabric8-info": { "Type": "nested", - "Group": "", - "Version": "validation", - "Kind": "LabelSelectorValidationOptions", + "Group": "build.openshift.io", + "Version": "v1", + "Kind": "ImageSource", "Scope": "Namespaced" } }, - "io.k8s.apimachinery.pkg.apis.meta.v1beta1.PartialObjectMetadataList": { - "description": "PartialObjectMetadataList contains a list of objects containing only their metadata.", + "io.openshift.build.v1.ImageSourcePath": { + "description": "ImageSourcePath describes a path to be copied from a source image and its destination within the build directory.", "type": "object", "required": [ - "items" + "sourcePath", + "destinationDir" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items contains each of the included items.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.PartialObjectMetadata" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "destinationDir": { + "description": "destinationDir is the relative directory within the build directory where files copied from the image are placed.", + "type": "string", + "default": "" }, - "metadata": { - "description": "Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "sourcePath": { + "description": "sourcePath is the absolute path of the file or directory inside the image to copy to the build directory. If the source path ends in /. then the content of the directory will be copied, but the directory itself will not be created at the destination.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "list", - "Group": "meta.k8s.io", - "Version": "v1beta1", - "Kind": "PartialObjectMetadataList", + "Type": "nested", + "Group": "build.openshift.io", + "Version": "v1", + "Kind": "ImageSourcePath", "Scope": "Namespaced" } }, - "io.openshift.apiserver.v1.APIRequestCount": { - "description": "APIRequestCount tracks requests made to an API. The instance name must be of the form `resource.version.group`, matching the resource.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.build.v1.ImageStreamTagReference": { + "description": "ImageStreamTagReference references the ImageStreamTag in an image change trigger by namespace and name.", "type": "object", - "required": [ - "spec" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "name": { + "description": "name is the name of the ImageStreamTag for an ImageChangeTrigger", "type": "string" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "namespace": { + "description": "namespace is the namespace where the ImageStreamTag for an ImageChangeTrigger is located", "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec defines the characteristics of the resource.", - "default": {}, - "$ref": "#/definitions/io.openshift.apiserver.v1.APIRequestCountSpec" - }, - "status": { - "description": "status contains the observed state of the resource.", - "default": {}, - "$ref": "#/definitions/io.openshift.apiserver.v1.APIRequestCountStatus" } }, "x-fabric8-info": { - "Type": "object", - "Group": "apiserver.openshift.io", + "Type": "nested", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "APIRequestCount", - "Scope": "Clustered" + "Kind": "ImageStreamTagReference", + "Scope": "Namespaced" } }, - "io.openshift.apiserver.v1.APIRequestCountList": { - "description": "APIRequestCountList is a list of APIRequestCount resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.build.v1.JenkinsPipelineBuildStrategy": { + "description": "JenkinsPipelineBuildStrategy holds parameters specific to a Jenkins Pipeline build. Deprecated: use OpenShift Pipelines", "type": "object", - "required": [ - "metadata", - "items" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { + "env": { + "description": "env contains additional environment variables you want to pass into a build pipeline.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.apiserver.v1.APIRequestCount" + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" } }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "jenkinsfile": { + "description": "Jenkinsfile defines the optional raw contents of a Jenkinsfile which defines a Jenkins pipeline build.", "type": "string" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "jenkinsfilePath": { + "description": "JenkinsfilePath is the optional path of the Jenkinsfile that will be used to configure the pipeline relative to the root of the context (contextDir). If both JenkinsfilePath \u0026 Jenkinsfile are both not specified, this defaults to Jenkinsfile in the root of the specified contextDir.", + "type": "string" } }, "x-fabric8-info": { - "Type": "list", - "Group": "apiserver.openshift.io", + "Type": "nested", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "APIRequestCountList", + "Kind": "JenkinsPipelineBuildStrategy", "Scope": "Namespaced" } }, - "io.openshift.apiserver.v1.APIRequestCountSpec": { + "io.openshift.build.v1.ProxyConfig": { + "description": "ProxyConfig defines what proxies to use for an operation", "type": "object", "properties": { - "numberOfUsersToReport": { - "description": "numberOfUsersToReport is the number of users to include in the report. If unspecified or zero, the default is ten. This is default is subject to change.", - "type": "integer", - "format": "int64", - "default": 0 + "httpProxy": { + "description": "httpProxy is a proxy used to reach the git repository over http", + "type": "string" + }, + "httpsProxy": { + "description": "httpsProxy is a proxy used to reach the git repository over https", + "type": "string" + }, + "noProxy": { + "description": "noProxy is the list of domains for which the proxy should not be used", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "apiserver.openshift.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "APIRequestCountSpec", + "Kind": "ProxyConfig", "Scope": "Namespaced" } }, - "io.openshift.apiserver.v1.APIRequestCountStatus": { + "io.openshift.build.v1.SecretBuildSource": { + "description": "SecretBuildSource describes a secret and its destination directory that will be used only at the build time. The content of the secret referenced here will be copied into the destination directory instead of mounting.", "type": "object", "required": [ - "conditions", - "requestCount" + "secret" ], "properties": { - "conditions": { - "description": "conditions contains details of the current status of this API Resource.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "currentHour": { - "description": "currentHour contains request history for the current hour. This is porcelain to make the API easier to read by humans seeing if they addressed a problem. This field is reset on the hour.", - "default": {}, - "$ref": "#/definitions/io.openshift.apiserver.v1.PerResourceAPIRequestLog" - }, - "last24h": { - "description": "last24h contains request history for the last 24 hours, indexed by the hour, so 12:00AM-12:59 is in index 0, 6am-6:59am is index 6, etc. The index of the current hour is updated live and then duplicated into the requestsLastHour field.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.apiserver.v1.PerResourceAPIRequestLog" - } - }, - "removedInRelease": { - "description": "removedInRelease is when the API will be removed.", + "destinationDir": { + "description": "destinationDir is the directory where the files from the secret should be available for the build time. For the Source build strategy, these will be injected into a container where the assemble script runs. Later, when the script finishes, all files injected will be truncated to zero length. For the container image build strategy, these will be copied into the build directory, where the Dockerfile is located, so users can ADD or COPY them during container image build.", "type": "string" }, - "requestCount": { - "description": "requestCount is a sum of all requestCounts across all current hours, nodes, and users.", - "type": "integer", - "format": "int64", - "default": 0 + "secret": { + "description": "secret is a reference to an existing secret that you want to use in your build.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" } }, "x-fabric8-info": { "Type": "nested", - "Group": "apiserver.openshift.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "APIRequestCountStatus", + "Kind": "SecretBuildSource", "Scope": "Namespaced" } }, - "io.openshift.apiserver.v1.PerNodeAPIRequestLog": { - "description": "PerNodeAPIRequestLog contains logs of requests to a certain node.", + "io.openshift.build.v1.SecretLocalReference": { + "description": "SecretLocalReference contains information that points to the local secret being used", "type": "object", "required": [ - "nodeName", - "requestCount", - "byUser" + "name" ], "properties": { - "byUser": { - "description": "byUser contains request details by top .spec.numberOfUsersToReport users. Note that because in the case of an apiserver, restart the list of top users is determined on a best-effort basis, the list might be imprecise. In addition, some system users may be explicitly included in the list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.apiserver.v1.PerUserAPIRequestCount" - } - }, - "nodeName": { - "description": "nodeName where the request are being handled.", + "name": { + "description": "Name is the name of the resource in the same namespace being referenced", "type": "string", "default": "" - }, - "requestCount": { - "description": "requestCount is a sum of all requestCounts across all users, even those outside of the top 10 users.", - "type": "integer", - "format": "int64", - "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "apiserver.openshift.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "PerNodeAPIRequestLog", + "Kind": "SecretLocalReference", "Scope": "Namespaced" } }, - "io.openshift.apiserver.v1.PerResourceAPIRequestLog": { - "description": "PerResourceAPIRequestLog logs request for various nodes.", + "io.openshift.build.v1.SecretSpec": { + "description": "SecretSpec specifies a secret to be included in a build pod and its corresponding mount point", "type": "object", "required": [ - "requestCount" + "secretSource", + "mountPath" ], "properties": { - "byNode": { - "description": "byNode contains logs of requests per node.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.apiserver.v1.PerNodeAPIRequestLog" - } + "mountPath": { + "description": "mountPath is the path at which to mount the secret", + "type": "string", + "default": "" }, - "requestCount": { - "description": "requestCount is a sum of all requestCounts across nodes.", - "type": "integer", - "format": "int64", - "default": 0 + "secretSource": { + "description": "secretSource is a reference to the secret", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" } }, "x-fabric8-info": { "Type": "nested", - "Group": "apiserver.openshift.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "PerResourceAPIRequestLog", + "Kind": "SecretSpec", "Scope": "Namespaced" } }, - "io.openshift.apiserver.v1.PerUserAPIRequestCount": { - "description": "PerUserAPIRequestCount contains logs of a user's requests.", + "io.openshift.build.v1.SourceBuildStrategy": { + "description": "SourceBuildStrategy defines input parameters specific to an Source build.", "type": "object", "required": [ - "username", - "userAgent", - "requestCount", - "byVerb" + "from" ], "properties": { - "byVerb": { - "description": "byVerb details by verb.", + "env": { + "description": "env contains additional environment variables you want to pass into a builder container.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.apiserver.v1.PerVerbAPIRequestCount" + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" } }, - "requestCount": { - "description": "requestCount of requests by the user across all verbs.", - "type": "integer", - "format": "int64", - "default": 0 + "forcePull": { + "description": "forcePull describes if the builder should pull the images from registry prior to building.", + "type": "boolean" }, - "userAgent": { - "description": "userAgent that made the request. The same user often has multiple binaries which connect (pods with many containers). The different binaries will have different userAgents, but the same user. In addition, we have userAgents with version information embedded and the userName isn't likely to change.", - "type": "string", - "default": "" + "from": { + "description": "from is reference to an DockerImage, ImageStreamTag, or ImageStreamImage from which the container image should be pulled", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" }, - "username": { - "description": "userName that made the request.", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "apiserver.openshift.io", - "Version": "v1", - "Kind": "PerUserAPIRequestCount", - "Scope": "Namespaced" - } - }, - "io.openshift.apiserver.v1.PerVerbAPIRequestCount": { - "description": "PerVerbAPIRequestCount requestCounts requests by API request verb.", - "type": "object", - "required": [ - "verb", - "requestCount" - ], - "properties": { - "requestCount": { - "description": "requestCount of requests for verb.", - "type": "integer", - "format": "int64", - "default": 0 + "incremental": { + "description": "incremental flag forces the Source build to do incremental builds if true.", + "type": "boolean" }, - "verb": { - "description": "verb of API request (get, list, create, etc...)", - "type": "string", - "default": "" + "pullSecret": { + "description": "pullSecret is the name of a Secret that would be used for setting up the authentication for pulling the container images from the private Docker registries", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "scripts": { + "description": "scripts is the location of Source scripts", + "type": "string" + }, + "volumes": { + "description": "volumes is a list of input volumes that can be mounted into the builds runtime environment. Only a subset of Kubernetes Volume sources are supported by builds. More info: https://kubernetes.io/docs/concepts/storage/volumes", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.BuildVolume" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" } }, "x-fabric8-info": { "Type": "nested", - "Group": "apiserver.openshift.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "PerVerbAPIRequestCount", + "Kind": "SourceBuildStrategy", "Scope": "Namespaced" } }, - "io.openshift.apps.v1.CustomDeploymentStrategyParams": { - "description": "CustomDeploymentStrategyParams are the input to the Custom deployment strategy.", + "io.openshift.build.v1.SourceControlUser": { + "description": "SourceControlUser defines the identity of a user of source control", "type": "object", "properties": { - "command": { - "description": "Command is optional and overrides CMD in the container Image.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "environment": { - "description": "Environment holds the environment which will be given to the container for Image.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - } + "email": { + "description": "email of the source control user", + "type": "string" }, - "image": { - "description": "Image specifies a container image which can carry out a deployment.", + "name": { + "description": "name of the source control user", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "apps.openshift.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "CustomDeploymentStrategyParams", + "Kind": "SourceControlUser", "Scope": "Namespaced" } }, - "io.openshift.apps.v1.DeploymentCause": { - "description": "DeploymentCause captures information about a particular cause of a deployment.", + "io.openshift.build.v1.SourceRevision": { + "description": "SourceRevision is the revision or commit information from the source for the build", "type": "object", "required": [ "type" ], "properties": { - "imageTrigger": { - "description": "ImageTrigger contains the image trigger details, if this trigger was fired based on an image change", - "$ref": "#/definitions/io.openshift.apps.v1.DeploymentCauseImageTrigger" + "git": { + "description": "Git contains information about git-based build source", + "$ref": "#/definitions/io.openshift.build.v1.GitSourceRevision" }, "type": { - "description": "Type of the trigger that resulted in the creation of a new deployment", + "description": "type of the build source, may be one of 'Source', 'Dockerfile', 'Binary', or 'Images'", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "apps.openshift.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "DeploymentCause", + "Kind": "SourceRevision", "Scope": "Namespaced" } }, - "io.openshift.apps.v1.DeploymentCauseImageTrigger": { - "description": "DeploymentCauseImageTrigger represents details about the cause of a deployment originating from an image change trigger", + "io.openshift.build.v1.SourceStrategyOptions": { + "description": "SourceStrategyOptions contains extra strategy options for Source builds", "type": "object", - "required": [ - "from" - ], "properties": { - "from": { - "description": "From is a reference to the changed object which triggered a deployment. The field may have the kinds DockerImage, ImageStreamTag, or ImageStreamImage.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "incremental": { + "description": "incremental overrides the source-strategy incremental option in the build config", + "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", - "Group": "apps.openshift.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "DeploymentCauseImageTrigger", + "Kind": "SourceStrategyOptions", "Scope": "Namespaced" } }, - "io.openshift.apps.v1.DeploymentCondition": { - "description": "DeploymentCondition describes the state of a deployment config at a certain point.", + "io.openshift.build.v1.StageInfo": { + "description": "StageInfo contains details about a build stage.", "type": "object", - "required": [ - "type", - "status" - ], "properties": { - "lastTransitionTime": { - "description": "The last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "lastUpdateTime": { - "description": "The last time this condition was updated.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "A human readable message indicating details about the transition.", - "type": "string" + "durationMilliseconds": { + "description": "durationMilliseconds identifies how long the stage took to complete in milliseconds. Note: the duration of a stage can exceed the sum of the duration of the steps within the stage as not all actions are accounted for in explicit build steps.", + "type": "integer", + "format": "int64" }, - "reason": { - "description": "The reason for the condition's last transition.", + "name": { + "description": "name is a unique identifier for each build stage that occurs.", "type": "string" }, - "status": { - "description": "Status of the condition, one of True, False, Unknown.", - "type": "string", - "default": "" + "startTime": { + "description": "startTime is a timestamp representing the server time when this Stage started. It is represented in RFC3339 form and is in UTC.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "type": { - "description": "Type of deployment condition.", - "type": "string", - "default": "" + "steps": { + "description": "steps contains details about each step that occurs during a build stage including start time and duration in milliseconds.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.StepInfo" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "apps.openshift.io", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "DeploymentCondition", + "Kind": "StageInfo", "Scope": "Namespaced" } }, - "io.openshift.apps.v1.DeploymentConfig": { - "description": "Deployment Configs define the template for a pod and manages deploying new images or configuration changes. A single deployment configuration is usually analogous to a single micro-service. Can support many different deployment patterns, including full restart, customizable rolling updates, and fully custom behaviors, as well as pre- and post- deployment hooks. Each individual deployment is represented as a replication controller.\n\nA deployment is \"triggered\" when its configuration is changed or a tag in an Image Stream is changed. Triggers can be disabled to allow manual control over a deployment. The \"strategy\" determines how the deployment is carried out and may be changed at any time. The `latestVersion` field is updated when a new deployment is triggered by any means.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). Deprecated: Use deployments or other means for declarative updates for pods instead.", + "io.openshift.build.v1.StepInfo": { + "description": "StepInfo contains details about a build step.", "type": "object", - "required": [ - "spec" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "durationMilliseconds": { + "description": "durationMilliseconds identifies how long the step took to complete in milliseconds.", + "type": "integer", + "format": "int64" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "name": { + "description": "name is a unique identifier for each build step.", "type": "string" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "startTime": { + "description": "startTime is a timestamp representing the server time when this Step started. it is represented in RFC3339 form and is in UTC.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "build.openshift.io", + "Version": "v1", + "Kind": "StepInfo", + "Scope": "Namespaced" + } + }, + "io.openshift.build.v1.WebHookTrigger": { + "description": "WebHookTrigger is a trigger that gets invoked using a webhook type of post", + "type": "object", + "properties": { + "allowEnv": { + "description": "allowEnv determines whether the webhook can set environment variables; can only be set to true for GenericWebHook.", + "type": "boolean" }, - "spec": { - "description": "Spec represents a desired deployment state and how to deploy to it.", - "default": {}, - "$ref": "#/definitions/io.openshift.apps.v1.DeploymentConfigSpec" + "secret": { + "description": "secret used to validate requests. Deprecated: use SecretReference instead.", + "type": "string" }, - "status": { - "description": "Status represents the current deployment state.", - "default": {}, - "$ref": "#/definitions/io.openshift.apps.v1.DeploymentConfigStatus" + "secretReference": { + "description": "secretReference is a reference to a secret in the same namespace, containing the value to be validated when the webhook is invoked. The secret being referenced must contain a key named \"WebHookSecretKey\", the value of which will be checked against the value supplied in the webhook invocation.", + "$ref": "#/definitions/io.openshift.build.v1.SecretLocalReference" } }, "x-fabric8-info": { - "Type": "object", - "Group": "apps.openshift.io", + "Type": "nested", + "Group": "build.openshift.io", "Version": "v1", - "Kind": "DeploymentConfig", + "Kind": "WebHookTrigger", "Scope": "Namespaced" } }, - "io.openshift.apps.v1.DeploymentConfigList": { - "description": "DeploymentConfigList is a collection of deployment configs.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.cloudcredential.v1.AWSProviderSpec": { + "description": "AWSProviderSpec contains the required information to create a user policy in AWS.", "type": "object", "required": [ - "items" + "statementEntries" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "Items is a list of deployment configs", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "statementEntries": { + "description": "StatementEntries contains a list of policy statements that should be associated with this credentials access key.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.apps.v1.DeploymentConfig" + "$ref": "#/definitions/io.openshift.cloudcredential.v1.StatementEntry" } }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "stsIAMRoleARN": { + "description": "stsIAMRoleARN is the Amazon Resource Name (ARN) of an IAM Role which was created manually for the associated CredentialsRequest. The presence of an stsIAMRoleARN within the AWSProviderSpec initiates creation of a secret containing IAM Role details necessary for assuming the IAM Role via Amazon's Secure Token Service.", "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "list", - "Group": "apps.openshift.io", + "Type": "object", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "DeploymentConfigList", + "Kind": "AWSProviderSpec", "Scope": "Namespaced" } }, - "io.openshift.apps.v1.DeploymentConfigRollback": { - "description": "DeploymentConfigRollback provides the input to rollback generation.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.cloudcredential.v1.AWSProviderStatus": { + "description": "AWSProviderStatus containes the status of the credentials request in AWS.", "type": "object", "required": [ - "name", - "spec" + "user", + "policy" ], "properties": { "apiVersion": { @@ -53197,529 +59009,299 @@ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "name": { - "description": "Name of the deployment config that will be rolled back.", + "policy": { + "description": "Policy is the name of the policy attached to the user in AWS.", "type": "string", "default": "" }, - "spec": { - "description": "Spec defines the options to rollback generation.", - "default": {}, - "$ref": "#/definitions/io.openshift.apps.v1.DeploymentConfigRollbackSpec" - }, - "updatedAnnotations": { - "description": "UpdatedAnnotations is a set of new annotations that will be added in the deployment config.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } + "user": { + "description": "User is the name of the User created in AWS for these credentials.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "object", - "Group": "apps.openshift.io", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "DeploymentConfigRollback", + "Kind": "AWSProviderStatus", "Scope": "Namespaced" } }, - "io.openshift.apps.v1.DeploymentConfigRollbackSpec": { - "description": "DeploymentConfigRollbackSpec represents the options for rollback generation.", + "io.openshift.cloudcredential.v1.AccessPolicy": { + "description": "AccessPolicy is a definition of an IAM access policy", "type": "object", "required": [ - "from", - "includeTriggers", - "includeTemplate", - "includeReplicationMeta", - "includeStrategy" + "attributes", + "roles" ], "properties": { - "from": { - "description": "From points to a ReplicationController which is a deployment.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "includeReplicationMeta": { - "description": "IncludeReplicationMeta specifies whether to include the replica count and selector.", - "type": "boolean", - "default": false - }, - "includeStrategy": { - "description": "IncludeStrategy specifies whether to include the deployment Strategy.", - "type": "boolean", - "default": false - }, - "includeTemplate": { - "description": "IncludeTemplate specifies whether to include the PodTemplateSpec.", - "type": "boolean", - "default": false - }, - "includeTriggers": { - "description": "IncludeTriggers specifies whether to include config Triggers.", - "type": "boolean", - "default": false - }, - "revision": { - "description": "Revision to rollback to. If set to 0, rollback to the last revision.", - "type": "integer", - "format": "int64" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "apps.openshift.io", - "Version": "v1", - "Kind": "DeploymentConfigRollbackSpec", - "Scope": "Namespaced" - } - }, - "io.openshift.apps.v1.DeploymentConfigSpec": { - "description": "DeploymentConfigSpec represents the desired state of the deployment.", - "type": "object", - "properties": { - "minReadySeconds": { - "description": "MinReadySeconds is the minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)", - "type": "integer", - "format": "int32" - }, - "paused": { - "description": "Paused indicates that the deployment config is paused resulting in no new deployments on template changes or changes in the template caused by other triggers.", - "type": "boolean" - }, - "replicas": { - "description": "Replicas is the number of desired replicas.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "revisionHistoryLimit": { - "description": "RevisionHistoryLimit is the number of old ReplicationControllers to retain to allow for rollbacks. This field is a pointer to allow for differentiation between an explicit zero and not specified. Defaults to 10. (This only applies to DeploymentConfigs created via the new group API resource, not the legacy resource.)", - "type": "integer", - "format": "int32" - }, - "selector": { - "description": "Selector is a label query over pods that should match the Replicas count.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "strategy": { - "description": "Strategy describes how a deployment is executed.", - "default": {}, - "$ref": "#/definitions/io.openshift.apps.v1.DeploymentStrategy" - }, - "template": { - "description": "Template is the object that describes the pod that will be created if insufficient replicas are detected.", - "$ref": "#/definitions/io.k8s.api.core.v1.PodTemplateSpec" - }, - "test": { - "description": "Test ensures that this deployment config will have zero replicas except while a deployment is running. This allows the deployment config to be used as a continuous deployment test - triggering on images, running the deployment, and then succeeding or failing. Post strategy hooks and After actions can be used to integrate successful deployment with an action.", - "type": "boolean", - "default": false - }, - "triggers": { - "description": "Triggers determine how updates to a DeploymentConfig result in new deployments. If no triggers are defined, a new deployment can only occur as a result of an explicit client update to the DeploymentConfig with a new LatestVersion. If null, defaults to having a config change trigger.", + "attributes": { + "description": "Attributes identify the resources to which this policy applies", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.apps.v1.DeploymentTriggerPolicy" + "$ref": "#/definitions/io.openshift.cloudcredential.v1.ResourceAttribute" } - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "apps.openshift.io", - "Version": "v1", - "Kind": "DeploymentConfigSpec", - "Scope": "Namespaced" - } - }, - "io.openshift.apps.v1.DeploymentConfigStatus": { - "description": "DeploymentConfigStatus represents the current deployment state.", - "type": "object", - "required": [ - "latestVersion", - "observedGeneration", - "replicas", - "updatedReplicas", - "availableReplicas", - "unavailableReplicas" - ], - "properties": { - "availableReplicas": { - "description": "AvailableReplicas is the total number of available pods targeted by this deployment config.", - "type": "integer", - "format": "int32", - "default": 0 }, - "conditions": { - "description": "Conditions represents the latest available observations of a deployment config's current state.", + "roles": { + "description": "Roles are the IAM roles assigned to this policy", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.apps.v1.DeploymentCondition" - }, - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "details": { - "description": "Details are the reasons for the update to this deployment config. This could be based on a change made by the user or caused by an automatic trigger", - "$ref": "#/definitions/io.openshift.apps.v1.DeploymentDetails" - }, - "latestVersion": { - "description": "LatestVersion is used to determine whether the current deployment associated with a deployment config is out of sync.", - "type": "integer", - "format": "int64", - "default": 0 - }, - "observedGeneration": { - "description": "ObservedGeneration is the most recent generation observed by the deployment config controller.", - "type": "integer", - "format": "int64", - "default": 0 - }, - "readyReplicas": { - "description": "Total number of ready pods targeted by this deployment.", - "type": "integer", - "format": "int32" - }, - "replicas": { - "description": "Replicas is the total number of pods targeted by this deployment config.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "unavailableReplicas": { - "description": "UnavailableReplicas is the total number of unavailable pods targeted by this deployment config.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "updatedReplicas": { - "description": "UpdatedReplicas is the total number of non-terminated pods targeted by this deployment config that have the desired template spec.", - "type": "integer", - "format": "int32", - "default": 0 + "type": "string", + "default": "" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "apps.openshift.io", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "DeploymentConfigStatus", + "Kind": "AccessPolicy", "Scope": "Namespaced" } }, - "io.openshift.apps.v1.DeploymentDetails": { - "description": "DeploymentDetails captures information about the causes of a deployment.", + "io.openshift.cloudcredential.v1.AzureProviderSpec": { + "description": "AzureProviderSpec contains the required information to create RBAC role bindings for Azure.", "type": "object", "required": [ - "causes" + "roleBindings" ], - "properties": { - "causes": { - "description": "Causes are extended data associated with all the causes for creating a new deployment", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.apps.v1.DeploymentCause" - } - }, - "message": { - "description": "Message is the user specified change message, if this deployment was triggered manually by the user", - "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "apps.openshift.io", - "Version": "v1", - "Kind": "DeploymentDetails", - "Scope": "Namespaced" - } - }, - "io.openshift.apps.v1.DeploymentLog": { - "description": "DeploymentLog represents the logs for a deployment\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "apps.openshift.io", - "Version": "v1", - "Kind": "DeploymentLog", - "Scope": "Namespaced" - } - }, - "io.openshift.apps.v1.DeploymentLogOptions": { - "description": "DeploymentLogOptions is the REST options for a deployment log\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "azureClientID": { + "description": "The following fields are only required for Azure Workload Identity. AzureClientID is the ID of the specific application you created in Azure", "type": "string" }, - "container": { - "description": "The container for which to stream logs. Defaults to only container if there is one container in the pod.", + "azureRegion": { + "description": "AzureRegion is the geographic region of the Azure service.", "type": "string" }, - "follow": { - "description": "Follow if true indicates that the build log should be streamed until the build terminates.", - "type": "boolean" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "azureSubscriptionID": { + "description": "Each Azure subscription has an ID associated with it, as does the tenant to which a subscription belongs. AzureSubscriptionID is the ID of the subscription.", "type": "string" }, - "limitBytes": { - "description": "If set, the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.", - "type": "integer", - "format": "int64" - }, - "nowait": { - "description": "NoWait if true causes the call to return immediately even if the deployment is not available yet. Otherwise the server will wait until the deployment has started.", - "type": "boolean" - }, - "previous": { - "description": "Return previous deployment logs. Defaults to false.", - "type": "boolean" - }, - "sinceSeconds": { - "description": "A relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", - "type": "integer", - "format": "int64" - }, - "sinceTime": { - "description": "An RFC3339 timestamp from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "azureTenantID": { + "description": "AzureTenantID is the ID of the tenant to which the subscription belongs.", + "type": "string" }, - "tailLines": { - "description": "If set, the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime", - "type": "integer", - "format": "int64" + "dataPermissions": { + "description": "DataPermissions is the list of Azure data permissions required to create a more fine-grained custom role to satisfy the CredentialsRequest. The DataPermissions field may be provided in addition to RoleBindings. When both fields are specified, the user-assigned managed identity will have union of permissions defined from both DataPermissions and RoleBindings.", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "timestamps": { - "description": "If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.", - "type": "boolean" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "version": { - "description": "Version of the deployment for which to view logs.", - "type": "integer", - "format": "int64" + "permissions": { + "description": "Permissions is the list of Azure permissions required to create a more fine-grained custom role to satisfy the CredentialsRequest. The Permissions field may be provided in addition to RoleBindings. When both fields are specified, the user-assigned managed identity will have union of permissions defined from both Permissions and RoleBindings.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "roleBindings": { + "description": "RoleBindings contains a list of roles that should be associated with the minted credential.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.cloudcredential.v1.RoleBinding" + } } }, "x-fabric8-info": { "Type": "object", - "Group": "apps.openshift.io", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "DeploymentLogOptions", + "Kind": "AzureProviderSpec", "Scope": "Namespaced" } }, - "io.openshift.apps.v1.DeploymentRequest": { - "description": "DeploymentRequest is a request to a deployment config for a new deployment.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.cloudcredential.v1.AzureProviderStatus": { + "description": "AzureProviderStatus contains the status of the credentials request in Azure.", "type": "object", "required": [ "name", - "latest", - "force" + "appID", + "secretLastResourceVersion" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "excludeTriggers": { - "description": "ExcludeTriggers instructs the instantiator to avoid processing the specified triggers. This field overrides the triggers from latest and allows clients to control specific logic. This field is ignored if not specified.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "force": { - "description": "Force will try to force a new deployment to run. If the deployment config is paused, then setting this to true will return an Invalid error.", - "type": "boolean", - "default": false + "appID": { + "description": "AppID is the application id of the service principal created in Azure for these credentials.", + "type": "string", + "default": "" }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "latest": { - "description": "Latest will update the deployment config with the latest state from all triggers.", - "type": "boolean", - "default": false - }, "name": { - "description": "Name of the deployment config for requesting a new deployment.", + "description": "ServicePrincipalName is the name of the service principal created in Azure for these credentials.", + "type": "string", + "default": "" + }, + "secretLastResourceVersion": { + "description": "SecretLastResourceVersion is the resource version of the secret resource that was last synced. Used to determine if the object has changed and requires a sync.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "object", - "Group": "apps.openshift.io", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "DeploymentRequest", + "Kind": "AzureProviderStatus", "Scope": "Namespaced" } }, - "io.openshift.apps.v1.DeploymentStrategy": { - "description": "DeploymentStrategy describes how to perform a deployment.", + "io.openshift.cloudcredential.v1.CredentialsRequest": { + "description": "CredentialsRequest is the Schema for the credentialsrequests API", "type": "object", + "required": [ + "spec" + ], "properties": { - "activeDeadlineSeconds": { - "description": "ActiveDeadlineSeconds is the duration in seconds that the deployer pods for this deployment config may be active on a node before the system actively tries to terminate them.", - "type": "integer", - "format": "int64" - }, - "annotations": { - "description": "Annotations is a set of key, value pairs added to custom deployer and lifecycle pre/post hook pods.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "customParams": { - "description": "CustomParams are the input to the Custom deployment strategy, and may also be specified for the Recreate and Rolling strategies to customize the execution process that runs the deployment.", - "$ref": "#/definitions/io.openshift.apps.v1.CustomDeploymentStrategyParams" - }, - "labels": { - "description": "Labels is a set of key, value pairs added to custom deployer and lifecycle pre/post hook pods.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "recreateParams": { - "description": "RecreateParams are the input to the Recreate deployment strategy.", - "$ref": "#/definitions/io.openshift.apps.v1.RecreateDeploymentStrategyParams" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "resources": { - "description": "Resources contains resource requirements to execute the deployment and any hooks.", + "metadata": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "rollingParams": { - "description": "RollingParams are the input to the Rolling deployment strategy.", - "$ref": "#/definitions/io.openshift.apps.v1.RollingDeploymentStrategyParams" + "spec": { + "default": {}, + "$ref": "#/definitions/io.openshift.cloudcredential.v1.CredentialsRequestSpec" }, - "type": { - "description": "Type is the name of a deployment strategy.", - "type": "string" + "status": { + "default": {}, + "$ref": "#/definitions/io.openshift.cloudcredential.v1.CredentialsRequestStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "apps.openshift.io", + "Type": "object", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "DeploymentStrategy", + "Kind": "CredentialsRequest", "Scope": "Namespaced" } }, - "io.openshift.apps.v1.DeploymentTriggerImageChangeParams": { - "description": "DeploymentTriggerImageChangeParams represents the parameters to the ImageChange trigger.", + "io.openshift.cloudcredential.v1.CredentialsRequestCondition": { + "description": "CredentialsRequestCondition contains details for any of the conditions on a CredentialsRequest object", "type": "object", "required": [ - "from" + "type", + "status" ], "properties": { - "automatic": { - "description": "Automatic means that the detection of a new tag value should result in an image update inside the pod template.", - "type": "boolean" + "lastProbeTime": { + "description": "LastProbeTime is the last time we probed the condition", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "containerNames": { - "description": "ContainerNames is used to restrict tag updates to the specified set of container names in a pod. If multiple triggers point to the same containers, the resulting behavior is undefined. Future API versions will make this a validation error. If ContainerNames does not point to a valid container, the trigger will be ignored. Future API versions will make this a validation error.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "lastTransitionTime": { + "description": "LastTransitionTime is the last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "from": { - "description": "From is a reference to an image stream tag to watch for changes. From.Name is the only required subfield - if From.Namespace is blank, the namespace of the current deployment trigger will be used.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "message": { + "description": "Message is a human-readable message indicating details about the last transition", + "type": "string" }, - "lastTriggeredImage": { - "description": "LastTriggeredImage is the last image to be triggered.", + "reason": { + "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition", "type": "string" + }, + "status": { + "description": "Status is the status of the condition", + "type": "string", + "default": "" + }, + "type": { + "description": "Type is the specific type of the condition", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "apps.openshift.io", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "DeploymentTriggerImageChangeParams", + "Kind": "CredentialsRequestCondition", "Scope": "Namespaced" } }, - "io.openshift.apps.v1.DeploymentTriggerPolicy": { - "description": "DeploymentTriggerPolicy describes a policy for a single trigger that results in a new deployment.", + "io.openshift.cloudcredential.v1.CredentialsRequestList": { + "description": "CredentialsRequestList contains a list of CredentialsRequest", "type": "object", + "required": [ + "items" + ], "properties": { - "imageChangeParams": { - "description": "ImageChangeParams represents the parameters for the ImageChange trigger.", - "$ref": "#/definitions/io.openshift.apps.v1.DeploymentTriggerImageChangeParams" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "type": { - "description": "Type of the trigger", + "items": { + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.cloudcredential.v1.CredentialsRequest" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + }, + "metadata": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "apps.openshift.io", + "Type": "list", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "DeploymentTriggerPolicy", + "Kind": "CredentialsRequestList", "Scope": "Namespaced" } }, - "io.openshift.apps.v1.ExecNewPodHook": { - "description": "ExecNewPodHook is a hook implementation which runs a command in a new pod based on the specified container which is assumed to be part of the deployment template.", + "io.openshift.cloudcredential.v1.CredentialsRequestSpec": { + "description": "CredentialsRequestSpec defines the desired state of CredentialsRequest", "type": "object", "required": [ - "command", - "containerName" + "secretRef" ], "properties": { - "command": { - "description": "Command is the action command and its arguments.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "cloudTokenPath": { + "description": "cloudTokenPath is the path where the Kubernetes ServiceAccount token (JSON Web Token) is mounted on the deployment for the workload requesting a credentials secret. The presence of this field in combination with fields such as spec.providerSpec.stsIAMRoleARN indicate that CCO should broker creation of a credentials secret containing fields necessary for token based authentication methods such as with the AWS Secure Token Service (STS).\n\ncloudTokenPath may also be used to specify the azure_federated_token_file path used in Azure configuration secrets generated by ccoctl. Defaults to \"/var/run/secrets/openshift/serviceaccount/token\".", + "type": "string" }, - "containerName": { - "description": "ContainerName is the name of a container in the deployment pod template whose container image will be used for the hook pod's container.", - "type": "string", - "default": "" + "providerSpec": { + "description": "ProviderSpec contains the cloud provider specific credentials specification.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" }, - "env": { - "description": "Env is a set of environment variables to supply to the hook pod's container.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - } + "secretRef": { + "description": "SecretRef points to the secret where the credentials should be stored once generated.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" }, - "volumes": { - "description": "Volumes is a list of named volumes from the pod template which should be copied to the hook pod. Volumes names not found in pod spec are ignored. An empty list means no volumes will be copied.", + "serviceAccountNames": { + "description": "ServiceAccountNames contains a list of ServiceAccounts that will use permissions associated with this CredentialsRequest. This is not used by CCO, but the information is needed for being able to properly set up access control in the cloud provider when the ServiceAccounts are used as part of the cloud credentials flow.", "type": "array", "items": { "type": "string", @@ -53729,224 +59311,205 @@ }, "x-fabric8-info": { "Type": "nested", - "Group": "apps.openshift.io", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "ExecNewPodHook", + "Kind": "CredentialsRequestSpec", "Scope": "Namespaced" } }, - "io.openshift.apps.v1.LifecycleHook": { - "description": "LifecycleHook defines a specific deployment lifecycle action. Only one type of action may be specified at any time.", + "io.openshift.cloudcredential.v1.CredentialsRequestStatus": { + "description": "CredentialsRequestStatus defines the observed state of CredentialsRequest", "type": "object", "required": [ - "failurePolicy" + "provisioned", + "lastSyncGeneration" ], "properties": { - "execNewPod": { - "description": "ExecNewPod specifies the options for a lifecycle hook backed by a pod.", - "$ref": "#/definitions/io.openshift.apps.v1.ExecNewPodHook" - }, - "failurePolicy": { - "description": "FailurePolicy specifies what action to take if the hook fails.", - "type": "string", - "default": "" - }, - "tagImages": { - "description": "TagImages instructs the deployer to tag the current image referenced under a container onto an image stream tag.", + "conditions": { + "description": "Conditions includes detailed status for the CredentialsRequest", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.apps.v1.TagImageHook" + "$ref": "#/definitions/io.openshift.cloudcredential.v1.CredentialsRequestCondition" } - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "apps.openshift.io", - "Version": "v1", - "Kind": "LifecycleHook", - "Scope": "Namespaced" - } - }, - "io.openshift.apps.v1.RecreateDeploymentStrategyParams": { - "description": "RecreateDeploymentStrategyParams are the input to the Recreate deployment strategy.", - "type": "object", - "properties": { - "mid": { - "description": "Mid is a lifecycle hook which is executed while the deployment is scaled down to zero before the first new pod is created. All LifecycleHookFailurePolicy values are supported.", - "$ref": "#/definitions/io.openshift.apps.v1.LifecycleHook" - }, - "post": { - "description": "Post is a lifecycle hook which is executed after the strategy has finished all deployment logic. All LifecycleHookFailurePolicy values are supported.", - "$ref": "#/definitions/io.openshift.apps.v1.LifecycleHook" }, - "pre": { - "description": "Pre is a lifecycle hook which is executed before the strategy manipulates the deployment. All LifecycleHookFailurePolicy values are supported.", - "$ref": "#/definitions/io.openshift.apps.v1.LifecycleHook" + "lastSyncCloudCredsSecretResourceVersion": { + "description": "LastSyncCloudCredsSecretResourceVersion is the resource version of the cloud credentials secret resource when the credentials request resource was last synced. Used to determine if the cloud credentials have been updated since the last sync.", + "type": "string" }, - "timeoutSeconds": { - "description": "TimeoutSeconds is the time to wait for updates before giving up. If the value is nil, a default will be used.", + "lastSyncGeneration": { + "description": "LastSyncGeneration is the generation of the credentials request resource that was last synced. Used to determine if the object has changed and requires a sync.", "type": "integer", - "format": "int64" + "format": "int64", + "default": 0 + }, + "lastSyncTimestamp": { + "description": "LastSyncTimestamp is the time that the credentials were last synced.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "providerStatus": { + "description": "ProviderStatus contains cloud provider specific status.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + }, + "provisioned": { + "description": "Provisioned is true once the credentials have been initially provisioned.", + "type": "boolean", + "default": false } }, "x-fabric8-info": { "Type": "nested", - "Group": "apps.openshift.io", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "RecreateDeploymentStrategyParams", + "Kind": "CredentialsRequestStatus", "Scope": "Namespaced" } }, - "io.openshift.apps.v1.RollingDeploymentStrategyParams": { - "description": "RollingDeploymentStrategyParams are the input to the Rolling deployment strategy.", + "io.openshift.cloudcredential.v1.GCPProviderSpec": { + "description": "GCPProviderSpec contains the required information to create a service account with policy bindings in GCP.", "type": "object", + "required": [ + "predefinedRoles" + ], "properties": { - "intervalSeconds": { - "description": "IntervalSeconds is the time to wait between polling deployment status after update. If the value is nil, a default will be used.", - "type": "integer", - "format": "int64" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "maxSurge": { - "description": "MaxSurge is the maximum number of pods that can be scheduled above the original number of pods. Value can be an absolute number (ex: 5) or a percentage of total pods at the start of the update (ex: 10%). Absolute number is calculated from percentage by rounding up.\n\nThis cannot be 0 if MaxUnavailable is 0. By default, 25% is used.\n\nExample: when this is set to 30%, the new RC can be scaled up by 30% immediately when the rolling update starts. Once old pods have been killed, new RC can be scaled up further, ensuring that total number of pods running at any time during the update is atmost 130% of original pods.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + "audience": { + "description": "Audience that will be used with Workload Identity Federation. It should be formatted as follows: \"//iam.googleapis.com/projects/\u003cPROJECT_NUMBER\u003e/locations/global/workloadIdentityPools/\u003cPOOL_ID\u003e/providers/\u003cPROVIDER_ID\u003e\" For more information see https://cloud.google.com/iam/docs/workload-identity-federation-with-other-providers#create-credential-config", + "type": "string" }, - "maxUnavailable": { - "description": "MaxUnavailable is the maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of total pods at the start of update (ex: 10%). Absolute number is calculated from percentage by rounding down.\n\nThis cannot be 0 if MaxSurge is 0. By default, 25% is used.\n\nExample: when this is set to 30%, the old RC can be scaled down by 30% immediately when the rolling update starts. Once new pods are ready, old RC can be scaled down further, followed by scaling up the new RC, ensuring that at least 70% of original number of pods are available at all times during the update.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.util.intstr.IntOrString" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "post": { - "description": "Post is a lifecycle hook which is executed after the strategy has finished all deployment logic. All LifecycleHookFailurePolicy values are supported.", - "$ref": "#/definitions/io.openshift.apps.v1.LifecycleHook" + "permissions": { + "description": "Permissions is the list of GCP permissions required to create a more fine-grained custom role to satisfy the CredentialsRequest. The Permissions field may be provided in addition to PredefinedRoles. When both fields are specified, the service account will have union of permissions defined from both Permissions and PredefinedRoles.", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "pre": { - "description": "Pre is a lifecycle hook which is executed before the deployment process begins. All LifecycleHookFailurePolicy values are supported.", - "$ref": "#/definitions/io.openshift.apps.v1.LifecycleHook" + "predefinedRoles": { + "description": "PredefinedRoles is the list of GCP pre-defined roles that the CredentialsRequest requires.", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "timeoutSeconds": { - "description": "TimeoutSeconds is the time to wait for updates before giving up. If the value is nil, a default will be used.", - "type": "integer", - "format": "int64" + "serviceAccountEmail": { + "description": "ServiceAccountEmail that will be impersonated during Workload Identity Federation.", + "type": "string" }, - "updatePeriodSeconds": { - "description": "UpdatePeriodSeconds is the time to wait between individual pod updates. If the value is nil, a default will be used.", - "type": "integer", - "format": "int64" + "skipServiceCheck": { + "description": "SkipServiceCheck can be set to true to skip the check whether the requested roles or permissions have the necessary services enabled", + "type": "boolean" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "apps.openshift.io", + "Type": "object", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "RollingDeploymentStrategyParams", + "Kind": "GCPProviderSpec", "Scope": "Namespaced" } }, - "io.openshift.apps.v1.TagImageHook": { - "description": "TagImageHook is a request to tag the image in a particular container onto an ImageStreamTag.", + "io.openshift.cloudcredential.v1.GCPProviderStatus": { + "description": "GCPProviderStatus contains the status of the GCP credentials request.", "type": "object", "required": [ - "containerName", - "to" + "serviceAccountID" ], "properties": { - "containerName": { - "description": "ContainerName is the name of a container in the deployment config whose image value will be used as the source of the tag. If there is only a single container this value will be defaulted to the name of that container.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "roleID": { + "description": "RoleID is the ID of the custom role created in GCP for the requested permissions apart from permissions granted by the pre-defined roles. RoleID is set by the Cloud Credential Operator controllers and should not be set manually.", + "type": "string" + }, + "serviceAccountID": { + "description": "ServiceAccountID is the ID of the service account created in GCP for the requested credentials.", "type": "string", "default": "" - }, - "to": { - "description": "To is the target ImageStreamTag to set the container's image onto.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "apps.openshift.io", + "Type": "object", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "TagImageHook", + "Kind": "GCPProviderStatus", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.Action": { - "description": "Action describes a request to the API server", + "io.openshift.cloudcredential.v1.IBMCloudPowerVSProviderSpec": { + "description": "IBMCloudPowerVSProviderSpec is the specification of the credentials request in IBM Cloud Power VS.", "type": "object", "required": [ - "namespace", - "verb", - "resourceAPIGroup", - "resourceAPIVersion", - "resource", - "resourceName", - "path", - "isNonResourceURL" + "policies" ], "properties": { - "content": { - "description": "Content is the actual content of the request for create and update", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "isNonResourceURL": { - "description": "IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)", - "type": "boolean", - "default": false - }, - "namespace": { - "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces", - "type": "string", - "default": "" - }, - "path": { - "description": "Path is the path of a non resource URL", - "type": "string", - "default": "" - }, - "resource": { - "description": "Resource is one of the existing resource types", - "type": "string", - "default": "" - }, - "resourceAPIGroup": { - "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "resourceAPIVersion": { - "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "resourceName": { - "description": "ResourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"", - "type": "string", - "default": "" + "policies": { + "description": "Policies are a list of access policies to create for the generated credentials", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.cloudcredential.v1.AccessPolicy" + } + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "cloudcredential.openshift.io", + "Version": "v1", + "Kind": "IBMCloudPowerVSProviderSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.cloudcredential.v1.IBMCloudPowerVSProviderStatus": { + "description": "IBMCloudPowerVSProviderStatus contains the status of the IBM Cloud Power VS credentials request.", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "verb": { - "description": "Verb is one of: get, list, watch, create, update, delete", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "authorization.openshift.io", + "Type": "object", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "Action", + "Kind": "IBMCloudPowerVSProviderStatus", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.ClusterRole": { - "description": "ClusterRole is a logical grouping of PolicyRules that can be referenced as a unit by ClusterRoleBindings.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.cloudcredential.v1.IBMCloudProviderSpec": { + "description": "IBMCloudProviderSpec is the specification of the credentials request in IBM Cloud.", "type": "object", "required": [ - "rules" + "policies" ], "properties": { - "aggregationRule": { - "description": "AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.", - "$ref": "#/definitions/io.k8s.api.rbac.v1.AggregationRule" - }, "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" @@ -53955,196 +59518,109 @@ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "rules": { - "description": "Rules holds all the PolicyRules for this ClusterRole", + "policies": { + "description": "Policies are a list of access policies to create for the generated credentials", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.authorization.v1.PolicyRule" + "$ref": "#/definitions/io.openshift.cloudcredential.v1.AccessPolicy" } } }, "x-fabric8-info": { "Type": "object", - "Group": "authorization.openshift.io", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "ClusterRole", - "Scope": "Clustered" + "Kind": "IBMCloudProviderSpec", + "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.ClusterRoleBinding": { - "description": "ClusterRoleBinding references a ClusterRole, but not contain it. It can reference any ClusterRole in the same namespace or in the global namespace. It adds who information via (Users and Groups) OR Subjects and namespace information by which namespace it exists in. ClusterRoleBindings in a given namespace only have effect in that namespace (excepting the master namespace which has power in all namespaces).\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.cloudcredential.v1.IBMCloudProviderStatus": { + "description": "IBMCloudProviderStatus contains the status of the IBM Cloud credentials request.", "type": "object", - "required": [ - "subjects", - "roleRef" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "groupNames": { - "description": "GroupNames holds all the groups directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "roleRef": { - "description": "RoleRef can only reference the current namespace and the global namespace. If the ClusterRoleRef cannot be resolved, the Authorizer must return an error. Since Policy is a singleton, this is sufficient knowledge to locate a role.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "subjects": { - "description": "Subjects hold object references to authorize with this rule. This field is ignored if UserNames or GroupNames are specified to support legacy clients and servers. Thus newer clients that do not need to support backwards compatibility should send only fully qualified Subjects and should omit the UserNames and GroupNames fields. Clients that need to support backwards compatibility can use this field to build the UserNames and GroupNames.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - } - }, - "userNames": { - "description": "UserNames holds all the usernames directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.", - "type": "array", - "items": { - "type": "string", - "default": "" - } } }, "x-fabric8-info": { "Type": "object", - "Group": "authorization.openshift.io", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "ClusterRoleBinding", - "Scope": "Clustered" + "Kind": "IBMCloudProviderStatus", + "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.ClusterRoleBindingList": { - "description": "ClusterRoleBindingList is a collection of ClusterRoleBindings\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.cloudcredential.v1.KubevirtProviderSpec": { + "description": "KubevirtProviderSpec the specification of the credentials request in Kubevirt.", "type": "object", - "required": [ - "items" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "Items is a list of ClusterRoleBindings", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.authorization.v1.ClusterRoleBinding" - } - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "list", - "Group": "authorization.openshift.io", + "Type": "object", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "ClusterRoleBindingList", + "Kind": "KubevirtProviderSpec", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.ClusterRoleList": { - "description": "ClusterRoleList is a collection of ClusterRoles\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.cloudcredential.v1.KubevirtProviderStatus": { + "description": "KubevirtProviderSpec contains the status of the credentials request in Kubevirt.", "type": "object", - "required": [ - "items" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "items": { - "description": "Items is a list of ClusterRoles", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.authorization.v1.ClusterRole" - } - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "list", - "Group": "authorization.openshift.io", + "Type": "object", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "ClusterRoleList", + "Kind": "KubevirtProviderStatus", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.GroupRestriction": { - "description": "GroupRestriction matches a group either by a string match on the group name or a label selector applied to group labels.", + "io.openshift.cloudcredential.v1.NutanixProviderSpec": { + "description": "NutanixProviderSpec the specification of the credentials request in Nutanix.", "type": "object", - "required": [ - "groups", - "labels" - ], "properties": { - "groups": { - "description": "Groups is a list of groups used to match against an individual user's groups. If the user is a member of one of the whitelisted groups, the user is allowed to be bound to a role.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "labels": { - "description": "Selectors specifies a list of label selectors over group labels.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - } + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "authorization.openshift.io", + "Type": "object", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "GroupRestriction", + "Kind": "NutanixProviderSpec", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.IsPersonalSubjectAccessReview": { - "description": "IsPersonalSubjectAccessReview is a marker for PolicyRule.AttributeRestrictions that denotes that subjectaccessreviews on self should be allowed\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.cloudcredential.v1.NutanixProviderStatus": { + "description": "NutanixProviderStatus contains the status of the credentials request in Nutanix.", "type": "object", "properties": { "apiVersion": { @@ -54158,1594 +59634,1534 @@ }, "x-fabric8-info": { "Type": "object", - "Group": "authorization.openshift.io", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "IsPersonalSubjectAccessReview", + "Kind": "NutanixProviderStatus", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.LocalResourceAccessReview": { - "description": "LocalResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec in a particular namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.cloudcredential.v1.OpenStackProviderSpec": { + "description": "OpenStackProviderSpec the specification of the credentials request in OpenStack.", "type": "object", - "required": [ - "namespace", - "verb", - "resourceAPIGroup", - "resourceAPIVersion", - "resource", - "resourceName", - "path", - "isNonResourceURL" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "content": { - "description": "Content is the actual content of the request for create and update", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "isNonResourceURL": { - "description": "IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)", - "type": "boolean", - "default": false - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "namespace": { - "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces", - "type": "string", - "default": "" - }, - "path": { - "description": "Path is the path of a non resource URL", - "type": "string", - "default": "" - }, - "resource": { - "description": "Resource is one of the existing resource types", - "type": "string", - "default": "" - }, - "resourceAPIGroup": { - "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined", - "type": "string", - "default": "" - }, - "resourceAPIVersion": { - "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined", - "type": "string", - "default": "" - }, - "resourceName": { - "description": "ResourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"", - "type": "string", - "default": "" - }, - "verb": { - "description": "Verb is one of: get, list, watch, create, update, delete", - "type": "string", - "default": "" } }, "x-fabric8-info": { "Type": "object", - "Group": "authorization.openshift.io", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "LocalResourceAccessReview", + "Kind": "OpenStackProviderSpec", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.LocalSubjectAccessReview": { - "description": "LocalSubjectAccessReview is an object for requesting information about whether a user or group can perform an action in a particular namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.cloudcredential.v1.OpenStackProviderStatus": { + "description": "OpenStackProviderStatus contains the status of the credentials request in OpenStack.", "type": "object", - "required": [ - "namespace", - "verb", - "resourceAPIGroup", - "resourceAPIVersion", - "resource", - "resourceName", - "path", - "isNonResourceURL", - "user", - "groups", - "scopes" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "content": { - "description": "Content is the actual content of the request for create and update", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "groups": { - "description": "Groups is optional. Groups is the list of groups to which the User belongs.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "isNonResourceURL": { - "description": "IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)", - "type": "boolean", - "default": false - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "cloudcredential.openshift.io", + "Version": "v1", + "Kind": "OpenStackProviderStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.cloudcredential.v1.OvirtProviderSpec": { + "description": "OvirtProviderSpec the specification of the credentials request in Ovirt.", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "namespace": { - "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "cloudcredential.openshift.io", + "Version": "v1", + "Kind": "OvirtProviderSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.cloudcredential.v1.OvirtProviderStatus": { + "description": "OvirtProviderStatus contains the status of the credentials request in Ovirt.", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "path": { - "description": "Path is the path of a non resource URL", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "cloudcredential.openshift.io", + "Version": "v1", + "Kind": "OvirtProviderStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.cloudcredential.v1.ProviderCodec": { + "description": "ProviderCodec is a runtime codec for providers.", + "type": "object", + "required": [ + "encoder", + "decoder" + ], + "properties": { + "decoder": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.Decoder" }, - "resource": { - "description": "Resource is one of the existing resource types", + "encoder": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.Encoder" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "cloudcredential.openshift.io", + "Version": "v1", + "Kind": "ProviderCodec", + "Scope": "Namespaced" + } + }, + "io.openshift.cloudcredential.v1.ResourceAttribute": { + "description": "ResourceAttribute is an attribute associated with a resource.", + "type": "object", + "required": [ + "name", + "value" + ], + "properties": { + "name": { + "description": "Name is the name of an attribute.", "type": "string", "default": "" }, - "resourceAPIGroup": { - "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined", - "type": "string", - "default": "" + "operator": { + "description": "Operator is the operator of an attribute.", + "type": "string" }, - "resourceAPIVersion": { - "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined", + "value": { + "description": "Value is the value of an attribute.", "type": "string", "default": "" - }, - "resourceName": { - "description": "ResourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"", + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "cloudcredential.openshift.io", + "Version": "v1", + "Kind": "ResourceAttribute", + "Scope": "Namespaced" + } + }, + "io.openshift.cloudcredential.v1.RoleBinding": { + "description": "RoleBinding models part of the Azure RBAC Role Binding", + "type": "object", + "required": [ + "role" + ], + "properties": { + "role": { + "description": "Role defines a set of permissions that should be associated with the minted credential.", "type": "string", "default": "" - }, - "scopes": { - "description": "Scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\". Nil for a self-SAR, means \"use the scopes on this request\". Nil for a regular SAR, means the same as empty.", + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "cloudcredential.openshift.io", + "Version": "v1", + "Kind": "RoleBinding", + "Scope": "Namespaced" + } + }, + "io.openshift.cloudcredential.v1.StatementEntry": { + "description": "StatementEntry models an AWS policy statement entry.", + "type": "object", + "required": [ + "effect", + "action", + "resource" + ], + "properties": { + "action": { + "description": "Action describes the particular AWS service actions that should be allowed or denied. (i.e. ec2:StartInstances, iam:ChangePassword)", "type": "array", "items": { "type": "string", "default": "" } }, - "user": { - "description": "User is optional. If both User and Groups are empty, the current authenticated user is used.", + "effect": { + "description": "Effect indicates if this policy statement is to Allow or Deny.", "type": "string", "default": "" }, - "verb": { - "description": "Verb is one of: get, list, watch, create, update, delete", + "policyCondition": { + "description": "PolicyCondition specifies under which condition StatementEntry will apply", + "type": "object", + "additionalProperties": { + "type": "object", + "additionalProperties": { + "type": "object" + } + } + }, + "resource": { + "description": "Resource specifies the object(s) this statement should apply to. (or \"*\" for all)", "type": "string", "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "authorization.openshift.io", + "Type": "nested", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "LocalSubjectAccessReview", + "Kind": "StatementEntry", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.NamedClusterRole": { - "description": "NamedClusterRole relates a name with a cluster role", + "io.openshift.cloudcredential.v1.VSpherePermission": { + "description": "VSpherePermission captures the details of the privileges being requested for the list of entities.", "type": "object", "required": [ - "name", - "role" + "privileges" ], "properties": { - "name": { - "description": "Name is the name of the cluster role", - "type": "string", - "default": "" - }, - "role": { - "description": "Role is the cluster role being named", - "default": {}, - "$ref": "#/definitions/io.openshift.authorization.v1.ClusterRole" + "privileges": { + "description": "Privileges is the list of access being requested.", + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "authorization.openshift.io", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "NamedClusterRole", + "Kind": "VSpherePermission", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.NamedClusterRoleBinding": { - "description": "NamedClusterRoleBinding relates a name with a cluster role binding", + "io.openshift.cloudcredential.v1.VSphereProviderSpec": { + "description": "VSphereProviderSpec contains the required information to create RBAC role bindings for VSphere.", "type": "object", "required": [ - "name", - "roleBinding" + "permissions" ], "properties": { - "name": { - "description": "Name is the name of the cluster role binding", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "roleBinding": { - "description": "RoleBinding is the cluster role binding being named", - "default": {}, - "$ref": "#/definitions/io.openshift.authorization.v1.ClusterRoleBinding" + "permissions": { + "description": "Permissions contains a list of groups of privileges that are being requested.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.cloudcredential.v1.VSpherePermission" + } } }, "x-fabric8-info": { - "Type": "nested", - "Group": "authorization.openshift.io", + "Type": "object", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "NamedClusterRoleBinding", + "Kind": "VSphereProviderSpec", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.NamedRole": { - "description": "NamedRole relates a Role with a name", + "io.openshift.cloudcredential.v1.VSphereProviderStatus": { + "description": "VSphereProviderStatus contains the status of the credentials request in VSphere.", "type": "object", "required": [ - "name", - "role" + "secretLastResourceVersion" ], "properties": { - "name": { - "description": "Name is the name of the role", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "secretLastResourceVersion": { + "description": "SecretLastResourceVersion is the resource version of the secret resource that was last synced. Used to determine if the object has changed and requires a sync.", "type": "string", "default": "" - }, - "role": { - "description": "Role is the role being named", - "default": {}, - "$ref": "#/definitions/io.openshift.authorization.v1.Role" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "authorization.openshift.io", + "Type": "object", + "Group": "cloudcredential.openshift.io", "Version": "v1", - "Kind": "NamedRole", + "Kind": "VSphereProviderStatus", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.NamedRoleBinding": { - "description": "NamedRoleBinding relates a role binding with a name", + "io.openshift.config.kubecontrolplane.v1.AggregatorConfig": { + "description": "AggregatorConfig holds information required to make the aggregator function.", "type": "object", "required": [ - "name", - "roleBinding" + "proxyClientInfo" ], "properties": { - "name": { - "description": "Name is the name of the role binding", - "type": "string", - "default": "" - }, - "roleBinding": { - "description": "RoleBinding is the role binding being named", + "proxyClientInfo": { + "description": "proxyClientInfo specifies the client cert/key to use when proxying to aggregated API servers", "default": {}, - "$ref": "#/definitions/io.openshift.authorization.v1.RoleBinding" + "$ref": "#/definitions/io.openshift.config.v1.CertInfo" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authorization.openshift.io", + "Group": "kubecontrolplane.config.openshift.io", "Version": "v1", - "Kind": "NamedRoleBinding", + "Kind": "AggregatorConfig", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.PolicyRule": { - "description": "PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.", + "io.openshift.config.kubecontrolplane.v1.KubeAPIServerConfig": { + "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "verbs", - "resources" + "servingInfo", + "corsAllowedOrigins", + "auditConfig", + "storageConfig", + "admission", + "kubeClientConfig", + "authConfig", + "aggregatorConfig", + "kubeletClientInfo", + "servicesSubnet", + "servicesNodePortRange", + "consolePublicURL", + "userAgentMatchingConfig", + "imagePolicyConfig", + "projectConfig", + "serviceAccountPublicKeyFiles", + "oauthConfig", + "apiServerArguments" ], "properties": { - "apiGroups": { - "description": "APIGroups is the name of the APIGroup that contains the resources. If this field is empty, then both kubernetes and origin API groups are assumed. That means that if an action is requested against one of the enumerated resources in either the kubernetes or the origin API group, the request will be allowed", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "admission": { + "description": "admissionConfig holds information about how to configure admission.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.AdmissionConfig" }, - "attributeRestrictions": { - "description": "AttributeRestrictions will vary depending on what the Authorizer/AuthorizationAttributeBuilder pair supports. If the Authorizer does not recognize how to handle the AttributeRestrictions, the Authorizer should report an error.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "aggregatorConfig": { + "description": "aggregatorConfig has options for configuring the aggregator component of the API server.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.AggregatorConfig" }, - "nonResourceURLs": { - "description": "NonResourceURLsSlice is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path This name is intentionally different than the internal type so that the DefaultConvert works nicely and because the ordering may be different.", - "type": "array", - "items": { - "type": "string", - "default": "" + "apiServerArguments": { + "type": "object", + "additionalProperties": { + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, - "resourceNames": { - "description": "ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "resources": { - "description": "Resources is a list of resources this rule applies to. ResourceAll represents all resources.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "auditConfig": { + "description": "auditConfig describes how to configure audit information", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.AuditConfig" }, - "verbs": { - "description": "Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all kinds.", + "authConfig": { + "description": "authConfig configures authentication options in addition to the standard oauth token and client certificate authenticators", + "default": {}, + "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.MasterAuthConfig" + }, + "consolePublicURL": { + "description": "DEPRECATED: consolePublicURL has been deprecated and setting it has no effect.", + "type": "string", + "default": "" + }, + "corsAllowedOrigins": { + "description": "corsAllowedOrigins", "type": "array", "items": { "type": "string", "default": "" } - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "authorization.openshift.io", - "Version": "v1", - "Kind": "PolicyRule", - "Scope": "Namespaced" - } - }, - "io.openshift.authorization.v1.ResourceAccessReview": { - "description": "ResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "namespace", - "verb", - "resourceAPIGroup", - "resourceAPIVersion", - "resource", - "resourceName", - "path", - "isNonResourceURL" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "content": { - "description": "Content is the actual content of the request for create and update", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" }, - "isNonResourceURL": { - "description": "IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)", - "type": "boolean", - "default": false + "imagePolicyConfig": { + "description": "imagePolicyConfig feeds the image policy admission plugin", + "default": {}, + "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.KubeAPIServerImagePolicyConfig" }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "kubeClientConfig": { "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "$ref": "#/definitions/io.openshift.config.v1.KubeClientConfig" }, - "namespace": { - "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces", - "type": "string", - "default": "" + "kubeletClientInfo": { + "description": "kubeletClientInfo contains information about how to connect to kubelets", + "default": {}, + "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.KubeletConnectionInfo" }, - "path": { - "description": "Path is the path of a non resource URL", - "type": "string", - "default": "" + "oauthConfig": { + "description": "oauthConfig, if present start the /oauth endpoint in this process", + "$ref": "#/definitions/io.openshift.config.osin.v1.OAuthConfig" }, - "resource": { - "description": "Resource is one of the existing resource types", - "type": "string", - "default": "" + "projectConfig": { + "description": "projectConfig feeds an admission plugin", + "default": {}, + "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.KubeAPIServerProjectConfig" }, - "resourceAPIGroup": { - "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined", - "type": "string", - "default": "" + "serviceAccountPublicKeyFiles": { + "description": "serviceAccountPublicKeyFiles is a list of files, each containing a PEM-encoded public RSA key. (If any file contains a private key, the public portion of the key is used) The list of public keys is used to verify presented service account tokens. Each key is tried in order until the list is exhausted or verification succeeds. If no keys are specified, no service account authentication will be available.", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "resourceAPIVersion": { - "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined", + "servicesNodePortRange": { + "description": "servicesNodePortRange is the range to use for assigning service public ports on a host.", "type": "string", "default": "" }, - "resourceName": { - "description": "ResourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"", + "servicesSubnet": { + "description": "servicesSubnet is the subnet to use for assigning service IPs", "type": "string", "default": "" }, - "verb": { - "description": "Verb is one of: get, list, watch, create, update, delete", - "type": "string", - "default": "" + "servingInfo": { + "description": "servingInfo describes how to start serving", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo" + }, + "storageConfig": { + "description": "storageConfig contains information about how to use", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.EtcdStorageConfig" + }, + "userAgentMatchingConfig": { + "description": "UserAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!", + "default": {}, + "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.UserAgentMatchingConfig" } }, "x-fabric8-info": { "Type": "object", - "Group": "authorization.openshift.io", + "Group": "kubecontrolplane.config.openshift.io", "Version": "v1", - "Kind": "ResourceAccessReview", - "Scope": "Clustered" + "Kind": "KubeAPIServerConfig", + "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.ResourceAccessReviewResponse": { - "description": "ResourceAccessReviewResponse describes who can perform the action\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.kubecontrolplane.v1.KubeAPIServerImagePolicyConfig": { "type": "object", "required": [ - "users", - "groups", - "evalutionError" + "internalRegistryHostname", + "externalRegistryHostnames" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "evalutionError": { - "description": "EvaluationError is an indication that some error occurred during resolution, but partial results can still be returned. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. This is most common when a bound role is missing, but enough roles are still present and bound to reason about the request.", - "type": "string", - "default": "" - }, - "groups": { - "description": "GroupsSlice is the list of groups who can perform the action", + "externalRegistryHostnames": { + "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", "type": "array", "items": { "type": "string", "default": "" } }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "namespace": { - "description": "Namespace is the namespace used for the access review", - "type": "string" - }, - "users": { - "description": "UsersSlice is the list of users who can perform the action", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "internalRegistryHostname": { + "description": "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "authorization.openshift.io", + "Type": "nested", + "Group": "kubecontrolplane.config.openshift.io", "Version": "v1", - "Kind": "ResourceAccessReviewResponse", + "Kind": "KubeAPIServerImagePolicyConfig", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.Role": { - "description": "Role is a logical grouping of PolicyRules that can be referenced as a unit by RoleBindings.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.kubecontrolplane.v1.KubeAPIServerProjectConfig": { "type": "object", "required": [ - "rules" + "defaultNodeSelector" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "rules": { - "description": "Rules holds all the PolicyRules for this Role", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.authorization.v1.PolicyRule" - } + "defaultNodeSelector": { + "description": "defaultNodeSelector holds default project node label selector", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "authorization.openshift.io", + "Type": "nested", + "Group": "kubecontrolplane.config.openshift.io", "Version": "v1", - "Kind": "Role", + "Kind": "KubeAPIServerProjectConfig", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.RoleBinding": { - "description": "RoleBinding references a Role, but not contain it. It can reference any Role in the same namespace or in the global namespace. It adds who information via (Users and Groups) OR Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace (excepting the master namespace which has power in all namespaces).\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.kubecontrolplane.v1.KubeControllerManagerConfig": { + "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "subjects", - "roleRef" + "serviceServingCert", + "projectConfig", + "extendedArguments" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "groupNames": { - "description": "GroupNames holds all the groups directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.", - "type": "array", - "items": { - "type": "string", - "default": "" + "extendedArguments": { + "description": "extendedArguments is used to configure the kube-controller-manager", + "type": "object", + "additionalProperties": { + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "projectConfig": { + "description": "projectConfig is an optimization for the daemonset controller", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.KubeControllerManagerProjectConfig" }, - "roleRef": { - "description": "RoleRef can only reference the current namespace and the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. Since Policy is a singleton, this is sufficient knowledge to locate a role.", + "serviceServingCert": { + "description": "serviceServingCert provides support for the old alpha service serving cert signer CA bundle", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "subjects": { - "description": "Subjects hold object references to authorize with this rule. This field is ignored if UserNames or GroupNames are specified to support legacy clients and servers. Thus newer clients that do not need to support backwards compatibility should send only fully qualified Subjects and should omit the UserNames and GroupNames fields. Clients that need to support backwards compatibility can use this field to build the UserNames and GroupNames.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - } - }, - "userNames": { - "description": "UserNames holds all the usernames directly bound to the role. This field should only be specified when supporting legacy clients and servers. See Subjects for further details.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.ServiceServingCert" } }, "x-fabric8-info": { "Type": "object", - "Group": "authorization.openshift.io", + "Group": "kubecontrolplane.config.openshift.io", "Version": "v1", - "Kind": "RoleBinding", + "Kind": "KubeControllerManagerConfig", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.RoleBindingList": { - "description": "RoleBindingList is a collection of RoleBindings\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.kubecontrolplane.v1.KubeControllerManagerProjectConfig": { "type": "object", "required": [ - "items" + "defaultNodeSelector" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "defaultNodeSelector": { + "description": "defaultNodeSelector holds default project node label selector", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "kubecontrolplane.config.openshift.io", + "Version": "v1", + "Kind": "KubeControllerManagerProjectConfig", + "Scope": "Namespaced" + } + }, + "io.openshift.config.kubecontrolplane.v1.KubeletConnectionInfo": { + "description": "KubeletConnectionInfo holds information necessary for connecting to a kubelet", + "type": "object", + "required": [ + "port", + "ca", + "certFile", + "keyFile" + ], + "properties": { + "ca": { + "description": "ca is the CA for verifying TLS connections to kubelets", + "type": "string", + "default": "" }, - "items": { - "description": "Items is a list of RoleBindings", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.authorization.v1.RoleBinding" - } + "certFile": { + "description": "CertFile is a file containing a PEM-encoded certificate", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "keyFile": { + "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "type": "string", + "default": "" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "port": { + "description": "port is the port to connect to kubelets on", + "type": "integer", + "format": "int64", + "default": 0 } }, "x-fabric8-info": { - "Type": "list", - "Group": "authorization.openshift.io", + "Type": "nested", + "Group": "kubecontrolplane.config.openshift.io", "Version": "v1", - "Kind": "RoleBindingList", + "Kind": "KubeletConnectionInfo", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.RoleBindingRestriction": { - "description": "RoleBindingRestriction is an object that can be matched against a subject (user, group, or service account) to determine whether rolebindings on that subject are allowed in the namespace to which the RoleBindingRestriction belongs. If any one of those RoleBindingRestriction objects matches a subject, rolebindings on that subject in the namespace are allowed.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.kubecontrolplane.v1.MasterAuthConfig": { + "description": "MasterAuthConfig configures authentication options in addition to the standard oauth token and client certificate authenticators", "type": "object", "required": [ - "metadata", - "spec" + "requestHeader", + "webhookTokenAuthenticators", + "oauthMetadataFile" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "oauthMetadataFile": { + "description": "oauthMetadataFile is a path to a file containing the discovery endpoint for OAuth 2.0 Authorization Server Metadata for an external OAuth server. See IETF Draft: // https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 This option is mutually exclusive with OAuthConfig", + "type": "string", + "default": "" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "requestHeader": { + "description": "requestHeader holds options for setting up a front proxy against the API. It is optional.", + "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.RequestHeaderAuthenticationOptions" }, - "spec": { - "description": "Spec defines the matcher.", - "default": {}, - "$ref": "#/definitions/io.openshift.authorization.v1.RoleBindingRestrictionSpec" + "webhookTokenAuthenticators": { + "description": "webhookTokenAuthenticators, if present configures remote token reviewers", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.WebhookTokenAuthenticator" + } } }, "x-fabric8-info": { - "Type": "object", - "Group": "authorization.openshift.io", + "Type": "nested", + "Group": "kubecontrolplane.config.openshift.io", "Version": "v1", - "Kind": "RoleBindingRestriction", + "Kind": "MasterAuthConfig", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.RoleBindingRestrictionList": { - "description": "RoleBindingRestrictionList is a collection of RoleBindingRestriction objects.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.kubecontrolplane.v1.RequestHeaderAuthenticationOptions": { + "description": "RequestHeaderAuthenticationOptions provides options for setting up a front proxy against the entire API instead of against the /oauth endpoint.", "type": "object", "required": [ - "items" + "clientCA", + "clientCommonNames", + "usernameHeaders", + "groupHeaders", + "extraHeaderPrefixes" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "clientCA": { + "description": "clientCA is a file with the trusted signer certs. It is required.", + "type": "string", + "default": "" }, - "items": { - "description": "Items is a list of RoleBindingRestriction objects.", + "clientCommonNames": { + "description": "clientCommonNames is a required list of common names to require a match from.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.authorization.v1.RoleBindingRestriction" + "type": "string", + "default": "" } }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "extraHeaderPrefixes": { + "description": "extraHeaderPrefixes is the set of request header prefixes to inspect for user extra. X-Remote-Extra- is suggested.", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "groupHeaders": { + "description": "groupHeaders is the set of headers to check for group information. All are unioned.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "usernameHeaders": { + "description": "usernameHeaders is the list of headers to check for user information. First hit wins.", + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { - "Type": "list", - "Group": "authorization.openshift.io", + "Type": "nested", + "Group": "kubecontrolplane.config.openshift.io", "Version": "v1", - "Kind": "RoleBindingRestrictionList", + "Kind": "RequestHeaderAuthenticationOptions", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.RoleBindingRestrictionSpec": { - "description": "RoleBindingRestrictionSpec defines a rolebinding restriction. Exactly one field must be non-nil.", + "io.openshift.config.kubecontrolplane.v1.ServiceServingCert": { + "description": "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.", "type": "object", "required": [ - "userrestriction", - "grouprestriction", - "serviceaccountrestriction" + "certFile" ], "properties": { - "grouprestriction": { - "description": "GroupRestriction matches against group subjects.", - "$ref": "#/definitions/io.openshift.authorization.v1.GroupRestriction" - }, - "serviceaccountrestriction": { - "description": "ServiceAccountRestriction matches against service-account subjects.", - "$ref": "#/definitions/io.openshift.authorization.v1.ServiceAccountRestriction" - }, - "userrestriction": { - "description": "UserRestriction matches against user subjects.", - "$ref": "#/definitions/io.openshift.authorization.v1.UserRestriction" + "certFile": { + "description": "CertFile is a file containing a PEM-encoded certificate", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authorization.openshift.io", + "Group": "kubecontrolplane.config.openshift.io", "Version": "v1", - "Kind": "RoleBindingRestrictionSpec", + "Kind": "ServiceServingCert", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.RoleList": { - "description": "RoleList is a collection of Roles\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.kubecontrolplane.v1.UserAgentDenyRule": { + "description": "UserAgentDenyRule adds a rejection message that can be used to help a user figure out how to get an approved client", "type": "object", "required": [ - "items" + "regex", + "httpVerbs", + "rejectionMessage" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "Items is a list of Roles", + "httpVerbs": { + "description": "httpVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.authorization.v1.Role" + "type": "string", + "default": "" } }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "regex": { + "description": "regex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f", + "type": "string", + "default": "" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "rejectionMessage": { + "description": "RejectionMessage is the message shown when rejecting a client. If it is not a set, the default message is used.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "list", - "Group": "authorization.openshift.io", + "Type": "nested", + "Group": "kubecontrolplane.config.openshift.io", "Version": "v1", - "Kind": "RoleList", + "Kind": "UserAgentDenyRule", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.SelfSubjectRulesReview": { - "description": "SelfSubjectRulesReview is a resource you can create to determine which actions you can perform in a namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.kubecontrolplane.v1.UserAgentMatchRule": { + "description": "UserAgentMatchRule describes how to match a given request based on User-Agent and HTTPVerb", "type": "object", "required": [ - "spec" + "regex", + "httpVerbs" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "Spec adds information about how to conduct the check", - "default": {}, - "$ref": "#/definitions/io.openshift.authorization.v1.SelfSubjectRulesReviewSpec" + "httpVerbs": { + "description": "httpVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "status": { - "description": "Status is completed by the server to tell which permissions you have", - "default": {}, - "$ref": "#/definitions/io.openshift.authorization.v1.SubjectRulesReviewStatus" + "regex": { + "description": "regex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "authorization.openshift.io", + "Type": "nested", + "Group": "kubecontrolplane.config.openshift.io", "Version": "v1", - "Kind": "SelfSubjectRulesReview", + "Kind": "UserAgentMatchRule", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.SelfSubjectRulesReviewSpec": { - "description": "SelfSubjectRulesReviewSpec adds information about how to conduct the check", + "io.openshift.config.kubecontrolplane.v1.UserAgentMatchingConfig": { + "description": "UserAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!", "type": "object", "required": [ - "scopes" + "requiredClients", + "deniedClients", + "defaultRejectionMessage" ], "properties": { - "scopes": { - "description": "Scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\". Nil means \"use the scopes on this request\".", + "defaultRejectionMessage": { + "description": "defaultRejectionMessage is the message shown when rejecting a client. If it is not a set, a generic message is given.", + "type": "string", + "default": "" + }, + "deniedClients": { + "description": "deniedClients if this list is non-empty, then a User-Agent must not match any of the UserAgentRegexes", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.UserAgentDenyRule" + } + }, + "requiredClients": { + "description": "requiredClients if this list is non-empty, then a User-Agent must match one of the UserAgentRegexes to be allowed", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.UserAgentMatchRule" } } }, "x-fabric8-info": { "Type": "nested", - "Group": "authorization.openshift.io", + "Group": "kubecontrolplane.config.openshift.io", "Version": "v1", - "Kind": "SelfSubjectRulesReviewSpec", + "Kind": "UserAgentMatchingConfig", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.ServiceAccountReference": { - "description": "ServiceAccountReference specifies a service account and namespace by their names.", + "io.openshift.config.kubecontrolplane.v1.WebhookTokenAuthenticator": { + "description": "WebhookTokenAuthenticators holds the necessary configuation options for external token authenticators", "type": "object", "required": [ - "name", - "namespace" + "configFile", + "cacheTTL" ], "properties": { - "name": { - "description": "Name is the name of the service account.", + "cacheTTL": { + "description": "cacheTTL indicates how long an authentication result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get a default timeout of 2 minutes. If zero (e.g. \"0m\"), caching is disabled", "type": "string", "default": "" }, - "namespace": { - "description": "Namespace is the namespace of the service account. Service accounts from inside the whitelisted namespaces are allowed to be bound to roles. If Namespace is empty, then the namespace of the RoleBindingRestriction in which the ServiceAccountReference is embedded is used.", + "configFile": { + "description": "configFile is a path to a Kubeconfig file with the webhook configuration", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authorization.openshift.io", + "Group": "kubecontrolplane.config.openshift.io", "Version": "v1", - "Kind": "ServiceAccountReference", + "Kind": "WebhookTokenAuthenticator", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.ServiceAccountRestriction": { - "description": "ServiceAccountRestriction matches a service account by a string match on either the service-account name or the name of the service account's namespace.", + "io.openshift.config.legacy.v1.ActiveDirectoryConfig": { + "description": "ActiveDirectoryConfig holds the necessary configuration options to define how an LDAP group sync interacts with an LDAP server using the Active Directory schema", "type": "object", "required": [ - "serviceaccounts", - "namespaces" + "usersQuery", + "userNameAttributes", + "groupMembershipAttributes" ], "properties": { - "namespaces": { - "description": "Namespaces specifies a list of literal namespace names.", + "groupMembershipAttributes": { + "description": "GroupMembershipAttributes defines which attributes on an LDAP user entry will be interpreted as the groups it is a member of", "type": "array", "items": { "type": "string", "default": "" } }, - "serviceaccounts": { - "description": "ServiceAccounts specifies a list of literal service-account names.", + "userNameAttributes": { + "description": "UserNameAttributes defines which attributes on an LDAP user entry will be interpreted as its OpenShift user name.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.authorization.v1.ServiceAccountReference" + "type": "string", + "default": "" } + }, + "usersQuery": { + "description": "AllUsersQuery holds the template for an LDAP query that returns user entries.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPQuery" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authorization.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "ServiceAccountRestriction", + "Kind": "ActiveDirectoryConfig", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.SubjectAccessReview": { - "description": "SubjectAccessReview is an object for requesting information about whether a user or group can perform an action\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.legacy.v1.AdmissionConfig": { + "description": "AdmissionConfig holds the necessary configuration options for admission", "type": "object", "required": [ - "namespace", - "verb", - "resourceAPIGroup", - "resourceAPIVersion", - "resource", - "resourceName", - "path", - "isNonResourceURL", - "user", - "groups", - "scopes" + "pluginConfig" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "content": { - "description": "Content is the actual content of the request for create and update", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "groups": { - "description": "GroupsSlice is optional. Groups is the list of groups to which the User belongs.", - "type": "array", - "items": { - "type": "string", - "default": "" + "pluginConfig": { + "description": "PluginConfig allows specifying a configuration file per admission control plugin", + "type": "object", + "additionalProperties": { + "$ref": "#/definitions/io.openshift.config.legacy.v1.AdmissionPluginConfig" } }, - "isNonResourceURL": { - "description": "IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)", - "type": "boolean", - "default": false - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "namespace": { - "description": "Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces", - "type": "string", - "default": "" - }, - "path": { - "description": "Path is the path of a non resource URL", - "type": "string", - "default": "" - }, - "resource": { - "description": "Resource is one of the existing resource types", - "type": "string", - "default": "" - }, - "resourceAPIGroup": { - "description": "Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined", - "type": "string", - "default": "" - }, - "resourceAPIVersion": { - "description": "Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined", - "type": "string", - "default": "" - }, - "resourceName": { - "description": "ResourceName is the name of the resource being requested for a \"get\" or deleted for a \"delete\"", - "type": "string", - "default": "" - }, - "scopes": { - "description": "Scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\". Nil for a self-SAR, means \"use the scopes on this request\". Nil for a regular SAR, means the same as empty.", + "pluginOrderOverride": { + "description": "PluginOrderOverride is a list of admission control plugin names that will be installed on the master. Order is significant. If empty, a default list of plugins is used.", "type": "array", "items": { "type": "string", "default": "" } + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "legacy.config.openshift.io", + "Version": "v1", + "Kind": "AdmissionConfig", + "Scope": "Namespaced" + } + }, + "io.openshift.config.legacy.v1.AdmissionPluginConfig": { + "description": "AdmissionPluginConfig holds the necessary configuration options for admission plugins", + "type": "object", + "required": [ + "location", + "configuration" + ], + "properties": { + "configuration": { + "description": "Configuration is an embedded configuration object to be used as the plugin's configuration. If present, it will be used instead of the path to the configuration file.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" }, - "user": { - "description": "User is optional. If both User and Groups are empty, the current authenticated user is used.", - "type": "string", - "default": "" - }, - "verb": { - "description": "Verb is one of: get, list, watch, create, update, delete", + "location": { + "description": "Location is the path to a configuration file that contains the plugin's configuration", "type": "string", "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "authorization.openshift.io", + "Type": "nested", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "SubjectAccessReview", - "Scope": "Clustered" + "Kind": "AdmissionPluginConfig", + "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.SubjectAccessReviewResponse": { - "description": "SubjectAccessReviewResponse describes whether or not a user or group can perform an action\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.legacy.v1.AggregatorConfig": { + "description": "AggregatorConfig holds information required to make the aggregator function.", "type": "object", "required": [ - "allowed" + "proxyClientInfo" ], "properties": { - "allowed": { - "description": "Allowed is required. True if the action would be allowed, false otherwise.", - "type": "boolean", - "default": false - }, + "proxyClientInfo": { + "description": "ProxyClientInfo specifies the client cert/key to use when proxying to aggregated API servers", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.CertInfo" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "legacy.config.openshift.io", + "Version": "v1", + "Kind": "AggregatorConfig", + "Scope": "Namespaced" + } + }, + "io.openshift.config.legacy.v1.AllowAllPasswordIdentityProvider": { + "description": "AllowAllPasswordIdentityProvider provides identities for users authenticating using non-empty passwords\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "type": "object", + "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "evaluationError": { - "description": "EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. This is most common when a bound role is missing, but enough roles are still present and bound to reason about the request.", - "type": "string" - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" - }, - "namespace": { - "description": "Namespace is the namespace used for the access review", - "type": "string" - }, - "reason": { - "description": "Reason is optional. It indicates why a request was allowed or denied.", - "type": "string" } }, "x-fabric8-info": { "Type": "object", - "Group": "authorization.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "SubjectAccessReviewResponse", + "Kind": "AllowAllPasswordIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.SubjectRulesReview": { - "description": "SubjectRulesReview is a resource you can create to determine which actions another user can perform in a namespace\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.legacy.v1.AuditConfig": { + "description": "AuditConfig holds configuration for the audit capabilities", "type": "object", "required": [ - "spec" + "enabled", + "auditFilePath", + "maximumFileRetentionDays", + "maximumRetainedFiles", + "maximumFileSizeMegabytes", + "policyFile", + "policyConfiguration", + "logFormat", + "webHookKubeConfig", + "webHookMode" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "auditFilePath": { + "description": "All requests coming to the apiserver will be logged to this file.", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "enabled": { + "description": "If this flag is set, audit log will be printed in the logs. The logs contains, method, user and a requested URL.", + "type": "boolean", + "default": false }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "logFormat": { + "description": "Format of saved audits (legacy or json).", + "type": "string", + "default": "" }, - "spec": { - "description": "Spec adds information about how to conduct the check", - "default": {}, - "$ref": "#/definitions/io.openshift.authorization.v1.SubjectRulesReviewSpec" + "maximumFileRetentionDays": { + "description": "Maximum number of days to retain old log files based on the timestamp encoded in their filename.", + "type": "integer", + "format": "int32", + "default": 0 }, - "status": { - "description": "Status is completed by the server to tell which permissions you have", - "default": {}, - "$ref": "#/definitions/io.openshift.authorization.v1.SubjectRulesReviewStatus" + "maximumFileSizeMegabytes": { + "description": "Maximum size in megabytes of the log file before it gets rotated. Defaults to 100MB.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "maximumRetainedFiles": { + "description": "Maximum number of old log files to retain.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "policyConfiguration": { + "description": "PolicyConfiguration is an embedded policy configuration object to be used as the audit policy configuration. If present, it will be used instead of the path to the policy file.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + }, + "policyFile": { + "description": "PolicyFile is a path to the file that defines the audit policy configuration.", + "type": "string", + "default": "" + }, + "webHookKubeConfig": { + "description": "Path to a .kubeconfig formatted file that defines the audit webhook configuration.", + "type": "string", + "default": "" + }, + "webHookMode": { + "description": "Strategy for sending audit events (block or batch).", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "authorization.openshift.io", + "Type": "nested", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "SubjectRulesReview", + "Kind": "AuditConfig", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.SubjectRulesReviewSpec": { - "description": "SubjectRulesReviewSpec adds information about how to conduct the check", + "io.openshift.config.legacy.v1.AugmentedActiveDirectoryConfig": { + "description": "AugmentedActiveDirectoryConfig holds the necessary configuration options to define how an LDAP group sync interacts with an LDAP server using the augmented Active Directory schema", "type": "object", "required": [ - "user", - "groups", - "scopes" + "usersQuery", + "userNameAttributes", + "groupMembershipAttributes", + "groupsQuery", + "groupUIDAttribute", + "groupNameAttributes" ], "properties": { - "groups": { - "description": "Groups is optional. Groups is the list of groups to which the User belongs. At least one of User and Groups must be specified.", + "groupMembershipAttributes": { + "description": "GroupMembershipAttributes defines which attributes on an LDAP user entry will be interpreted as the groups it is a member of", "type": "array", "items": { "type": "string", "default": "" } }, - "scopes": { - "description": "Scopes to use for the evaluation. Empty means \"use the unscoped (full) permissions of the user/groups\".", + "groupNameAttributes": { + "description": "GroupNameAttributes defines which attributes on an LDAP group entry will be interpreted as its name to use for an OpenShift group", "type": "array", "items": { "type": "string", "default": "" } }, - "user": { - "description": "User is optional. At least one of User and Groups must be specified.", + "groupUIDAttribute": { + "description": "GroupUIDAttributes defines which attribute on an LDAP group entry will be interpreted as its unique identifier. (ldapGroupUID)", "type": "string", "default": "" + }, + "groupsQuery": { + "description": "AllGroupsQuery holds the template for an LDAP query that returns group entries.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPQuery" + }, + "userNameAttributes": { + "description": "UserNameAttributes defines which attributes on an LDAP user entry will be interpreted as its OpenShift user name.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "usersQuery": { + "description": "AllUsersQuery holds the template for an LDAP query that returns user entries.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPQuery" } }, "x-fabric8-info": { "Type": "nested", - "Group": "authorization.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "SubjectRulesReviewSpec", + "Kind": "AugmentedActiveDirectoryConfig", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.SubjectRulesReviewStatus": { - "description": "SubjectRulesReviewStatus is contains the result of a rules check", + "io.openshift.config.legacy.v1.BasicAuthPasswordIdentityProvider": { + "description": "BasicAuthPasswordIdentityProvider provides identities for users authenticating using HTTP basic auth credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "rules" + "url", + "ca", + "certFile", + "keyFile" ], "properties": { - "evaluationError": { - "description": "EvaluationError can appear in combination with Rules. It means some error happened during evaluation that may have prevented additional rules from being populated.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "rules": { - "description": "Rules is the list of rules (no particular sort) that are allowed for the subject", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.authorization.v1.PolicyRule" - } + "ca": { + "description": "CA is the CA for verifying TLS connections", + "type": "string", + "default": "" + }, + "certFile": { + "description": "CertFile is a file containing a PEM-encoded certificate", + "type": "string", + "default": "" + }, + "keyFile": { + "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "type": "string", + "default": "" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "url": { + "description": "URL is the remote URL to connect to", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "authorization.openshift.io", + "Type": "object", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "SubjectRulesReviewStatus", + "Kind": "BasicAuthPasswordIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.authorization.v1.UserRestriction": { - "description": "UserRestriction matches a user either by a string match on the user name, a string match on the name of a group to which the user belongs, or a label selector applied to the user labels.", + "io.openshift.config.legacy.v1.BuildDefaultsConfig": { + "description": "BuildDefaultsConfig controls the default information for Builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", - "required": [ - "users", - "groups", - "labels" - ], "properties": { - "groups": { - "description": "Groups specifies a list of literal group names.", - "type": "array", - "items": { + "annotations": { + "description": "annotations are annotations that will be added to the build pod", + "type": "object", + "additionalProperties": { "type": "string", "default": "" } }, - "labels": { - "description": "Selectors specifies a list of label selectors over user labels.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" - } + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "users": { - "description": "Users specifies a list of literal user names.", + "env": { + "description": "env is a set of default environment variables that will be applied to the build if the specified variables do not exist on the build", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" } - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "authorization.openshift.io", - "Version": "v1", - "Kind": "UserRestriction", - "Scope": "Namespaced" - } - }, - "io.openshift.build.v1.BinaryBuildRequestOptions": { - "description": "BinaryBuildRequestOptions are the options required to fully speficy a binary build request\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" }, - "asFile": { - "description": "asFile determines if the binary should be created as a file within the source rather than extracted as an archive", + "gitHTTPProxy": { + "description": "gitHTTPProxy is the location of the HTTPProxy for Git source", "type": "string" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "gitHTTPSProxy": { + "description": "gitHTTPSProxy is the location of the HTTPSProxy for Git source", "type": "string" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "revision.authorEmail": { - "description": "revision.authorEmail of the source control user", + "gitNoProxy": { + "description": "gitNoProxy is the list of domains for which the proxy should not be used", "type": "string" }, - "revision.authorName": { - "description": "revision.authorName of the source control user", - "type": "string" + "imageLabels": { + "description": "imageLabels is a list of labels that are applied to the resulting image. User can override a default label by providing a label with the same name in their Build/BuildConfig.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.ImageLabel" + } }, - "revision.commit": { - "description": "revision.commit is the value identifying a specific commit", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "revision.committerEmail": { - "description": "revision.committerEmail of the source control user", - "type": "string" + "nodeSelector": { + "description": "nodeSelector is a selector which must be true for the build pod to fit on a node", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } }, - "revision.committerName": { - "description": "revision.committerName of the source control user", - "type": "string" + "resources": { + "description": "resources defines resource requirements to execute the build.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" }, - "revision.message": { - "description": "revision.message is the description of a specific commit", - "type": "string" + "sourceStrategyDefaults": { + "description": "sourceStrategyDefaults are default values that apply to builds using the source strategy.", + "$ref": "#/definitions/io.openshift.config.legacy.v1.SourceStrategyDefaultsConfig" } }, "x-fabric8-info": { "Type": "object", - "Group": "build.openshift.io", - "Version": "v1", - "Kind": "BinaryBuildRequestOptions", - "Scope": "Namespaced" - } - }, - "io.openshift.build.v1.BinaryBuildSource": { - "description": "BinaryBuildSource describes a binary file to be used for the Docker and Source build strategies, where the file will be extracted and used as the build source.", - "type": "object", - "properties": { - "asFile": { - "description": "asFile indicates that the provided binary input should be considered a single file within the build input. For example, specifying \"webapp.war\" would place the provided binary as `/webapp.war` for the builder. If left empty, the Docker and Source build strategies assume this file is a zip, tar, or tar.gz file and extract it as the source. The custom strategy receives this binary as standard input. This filename may not contain slashes or be '..' or '.'.", - "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BinaryBuildSource", + "Kind": "BuildDefaultsConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BitbucketWebHookCause": { - "description": "BitbucketWebHookCause has information about a Bitbucket webhook that triggered a build.", + "io.openshift.config.legacy.v1.BuildOverridesConfig": { + "description": "BuildOverridesConfig controls override settings for builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", + "required": [ + "forcePull" + ], "properties": { - "revision": { - "description": "Revision is the git source revision information of the trigger.", - "$ref": "#/definitions/io.openshift.build.v1.SourceRevision" + "annotations": { + "description": "annotations are annotations that will be added to the build pod", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } }, - "secret": { - "description": "Secret is the obfuscated webhook secret that triggered a build.", - "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "build.openshift.io", - "Version": "v1", - "Kind": "BitbucketWebHookCause", - "Scope": "Namespaced" - } - }, - "io.openshift.build.v1.Build": { - "description": "Build encapsulates the inputs needed to produce a new deployable image, as well as the status of the execution and a reference to the Pod which executed the build.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "forcePull": { + "description": "forcePull indicates whether the build strategy should always be set to ForcePull=true", + "type": "boolean", + "default": false + }, + "imageLabels": { + "description": "imageLabels is a list of labels that are applied to the resulting image. If user provided a label in their Build/BuildConfig with the same name as one in this list, the user's label will be overwritten.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.ImageLabel" + } + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec is all the inputs used to execute the build.", - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildSpec" + "nodeSelector": { + "description": "nodeSelector is a selector which must be true for the build pod to fit on a node", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } }, - "status": { - "description": "status is the current status of the build.", - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildStatus" + "tolerations": { + "description": "tolerations is a list of Tolerations that will override any existing tolerations set on a build pod.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" + } } }, "x-fabric8-info": { "Type": "object", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "Build", + "Kind": "BuildOverridesConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildCondition": { - "description": "BuildCondition describes the state of a build at a certain point.", + "io.openshift.config.legacy.v1.CertInfo": { + "description": "CertInfo relates a certificate with a private key", "type": "object", "required": [ - "type", - "status" + "certFile", + "keyFile" ], "properties": { - "lastTransitionTime": { - "description": "The last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "lastUpdateTime": { - "description": "The last time this condition was updated.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "A human readable message indicating details about the transition.", - "type": "string" - }, - "reason": { - "description": "The reason for the condition's last transition.", - "type": "string" - }, - "status": { - "description": "Status of the condition, one of True, False, Unknown.", + "certFile": { + "description": "CertFile is a file containing a PEM-encoded certificate", "type": "string", "default": "" }, - "type": { - "description": "Type of build condition.", + "keyFile": { + "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildCondition", + "Kind": "CertInfo", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildConfig": { - "description": "Build configurations define a build process for new container images. There are three types of builds possible - a container image build using a Dockerfile, a Source-to-Image build that uses a specially prepared base image that accepts source code that it can make runnable, and a custom build that can run // arbitrary container images as a base and accept the build parameters. Builds run on the cluster and on completion are pushed to the container image registry specified in the \"output\" section. A build can be triggered via a webhook, when the base image changes, or when a user manually requests a new build be // created.\n\nEach build created by a build configuration is numbered and refers back to its parent configuration. Multiple builds can be triggered at once. Builds that do not have \"output\" set can be used to test code or run a verification build.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.legacy.v1.ClientConnectionOverrides": { + "description": "ClientConnectionOverrides are a set of overrides to the default client connection settings.", "type": "object", "required": [ - "spec" + "acceptContentTypes", + "contentType", + "qps", + "burst" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "acceptContentTypes": { + "description": "AcceptContentTypes defines the Accept header sent by clients when connecting to a server, overriding the default value of 'application/json'. This field will control all connections to the server used by a particular client.", + "type": "string", + "default": "" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "burst": { + "description": "Burst allows extra queries to accumulate when a client is exceeding its rate.", + "type": "integer", + "format": "int32", + "default": 0 }, - "spec": { - "description": "spec holds all the input necessary to produce a new build, and the conditions when to trigger them.", - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildConfigSpec" + "contentType": { + "description": "ContentType is the content type used when sending data to the server from this client.", + "type": "string", + "default": "" }, - "status": { - "description": "status holds any relevant information about a build config", - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildConfigStatus" + "qps": { + "description": "QPS controls the number of queries per second allowed for this connection.", + "type": "number", + "format": "float", + "default": 0 } }, "x-fabric8-info": { - "Type": "object", - "Group": "build.openshift.io", + "Type": "nested", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildConfig", + "Kind": "ClientConnectionOverrides", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildConfigList": { - "description": "BuildConfigList is a collection of BuildConfigs.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.legacy.v1.ClusterNetworkEntry": { + "description": "ClusterNetworkEntry defines an individual cluster network. The CIDRs cannot overlap with other cluster network CIDRs, CIDRs reserved for external ips, CIDRs reserved for service networks, and CIDRs reserved for ingress ips.", "type": "object", "required": [ - "items" + "cidr", + "hostSubnetLength" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a list of build configs", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildConfig" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "cidr": { + "description": "CIDR defines the total range of a cluster networks address space.", + "type": "string", + "default": "" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "hostSubnetLength": { + "description": "HostSubnetLength is the number of bits of the accompanying CIDR address to allocate to each node. eg, 8 would mean that each node would have a /24 slice of the overlay network for its pod.", + "type": "integer", + "format": "int64", + "default": 0 } }, "x-fabric8-info": { - "Type": "list", - "Group": "build.openshift.io", + "Type": "nested", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildConfigList", + "Kind": "ClusterNetworkEntry", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildConfigSpec": { - "description": "BuildConfigSpec describes when and how builds are created", - "type": "object", - "required": [ - "strategy" - ], - "properties": { - "completionDeadlineSeconds": { - "description": "completionDeadlineSeconds is an optional duration in seconds, counted from the time when a build pod gets scheduled in the system, that the build may be active on a node before the system actively tries to terminate the build; value must be positive integer", - "type": "integer", - "format": "int64" - }, - "failedBuildsHistoryLimit": { - "description": "failedBuildsHistoryLimit is the number of old failed builds to retain. When a BuildConfig is created, the 5 most recent failed builds are retained unless this value is set. If removed after the BuildConfig has been created, all failed builds are retained.", - "type": "integer", - "format": "int32" - }, - "mountTrustedCA": { - "description": "mountTrustedCA bind mounts the cluster's trusted certificate authorities, as defined in the cluster's proxy configuration, into the build. This lets processes within a build trust components signed by custom PKI certificate authorities, such as private artifact repositories and HTTPS proxies.\n\nWhen this field is set to true, the contents of `/etc/pki/ca-trust` within the build are managed by the build container, and any changes to this directory or its subdirectories (for example - within a Dockerfile `RUN` instruction) are not persisted in the build's output image.", - "type": "boolean" - }, - "nodeSelector": { - "description": "nodeSelector is a selector which must be true for the build pod to fit on a node If nil, it can be overridden by default build nodeselector values for the cluster. If set to an empty map or a map with any values, default build nodeselector values are ignored.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "output": { - "description": "output describes the container image the Strategy should produce.", - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildOutput" - }, - "postCommit": { - "description": "postCommit is a build hook executed after the build output image is committed, before it is pushed to a registry.", - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildPostCommitSpec" - }, - "resources": { - "description": "resources computes resource requirements to execute the build.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" - }, - "revision": { - "description": "revision is the information from the source for a specific repo snapshot. This is optional.", - "$ref": "#/definitions/io.openshift.build.v1.SourceRevision" - }, - "runPolicy": { - "description": "RunPolicy describes how the new build created from this build configuration will be scheduled for execution. This is optional, if not specified we default to \"Serial\".", - "type": "string" - }, - "serviceAccount": { - "description": "serviceAccount is the name of the ServiceAccount to use to run the pod created by this build. The pod will be allowed to use secrets referenced by the ServiceAccount", - "type": "string" - }, - "source": { - "description": "source describes the SCM in use.", - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildSource" - }, - "strategy": { - "description": "strategy defines how to perform a build.", - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildStrategy" - }, - "successfulBuildsHistoryLimit": { - "description": "successfulBuildsHistoryLimit is the number of old successful builds to retain. When a BuildConfig is created, the 5 most recent successful builds are retained unless this value is set. If removed after the BuildConfig has been created, all successful builds are retained.", - "type": "integer", - "format": "int32" - }, - "triggers": { - "description": "triggers determine how new Builds can be launched from a BuildConfig. If no triggers are defined, a new build can only occur as a result of an explicit client build creation.", + "io.openshift.config.legacy.v1.ControllerConfig": { + "description": "ControllerConfig holds configuration values for controllers", + "type": "object", + "required": [ + "controllers", + "election", + "serviceServingCert" + ], + "properties": { + "controllers": { + "description": "Controllers is a list of controllers to enable. '*' enables all on-by-default controllers, 'foo' enables the controller \"+ named 'foo', '-foo' disables the controller named 'foo'. Defaults to \"*\".", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildTriggerPolicy" + "type": "string", + "default": "" } + }, + "election": { + "description": "Election defines the configuration for electing a controller instance to make changes to the cluster. If unspecified, the ControllerTTL value is checked to determine whether the legacy direct etcd election code will be used.", + "$ref": "#/definitions/io.openshift.config.legacy.v1.ControllerElectionConfig" + }, + "serviceServingCert": { + "description": "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.ServiceServingCert" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildConfigSpec", + "Kind": "ControllerConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildConfigStatus": { - "description": "BuildConfigStatus contains current state of the build config object.", + "io.openshift.config.legacy.v1.ControllerElectionConfig": { + "description": "ControllerElectionConfig contains configuration values for deciding how a controller will be elected to act as leader.", "type": "object", "required": [ - "lastVersion" + "lockName", + "lockNamespace", + "lockResource" ], "properties": { - "imageChangeTriggers": { - "description": "ImageChangeTriggers captures the runtime state of any ImageChangeTrigger specified in the BuildConfigSpec, including the value reconciled by the OpenShift APIServer for the lastTriggeredImageID. There is a single entry in this array for each image change trigger in spec. Each trigger status references the ImageStreamTag that acts as the source of the trigger.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.ImageChangeTriggerStatus" - } + "lockName": { + "description": "LockName is the resource name used to act as the lock for determining which controller instance should lead.", + "type": "string", + "default": "" }, - "lastVersion": { - "description": "lastVersion is used to inform about number of last triggered build.", - "type": "integer", - "format": "int64", - "default": 0 + "lockNamespace": { + "description": "LockNamespace is the resource namespace used to act as the lock for determining which controller instance should lead. It defaults to \"kube-system\"", + "type": "string", + "default": "" + }, + "lockResource": { + "description": "LockResource is the group and resource name to use to coordinate for the controller lock. If unset, defaults to \"configmaps\".", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.GroupResource" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildConfigStatus", + "Kind": "ControllerElectionConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildList": { - "description": "BuildList is a collection of Builds.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.legacy.v1.DNSConfig": { + "description": "DNSConfig holds the necessary configuration options for DNS", "type": "object", "required": [ - "items" + "bindAddress", + "bindNetwork", + "allowRecursiveQueries" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "description": "items is a list of builds", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.Build" - } + "allowRecursiveQueries": { + "description": "AllowRecursiveQueries allows the DNS server on the master to answer queries recursively. Note that open resolvers can be used for DNS amplification attacks and the master DNS should not be made accessible to public networks.", + "type": "boolean", + "default": false }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "bindAddress": { + "description": "BindAddress is the ip:port to serve DNS on", + "type": "string", + "default": "" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "bindNetwork": { + "description": "BindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "list", - "Group": "build.openshift.io", + "Type": "nested", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildList", + "Kind": "DNSConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildLog": { - "description": "BuildLog is the (unused) resource associated with the build log redirector\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.legacy.v1.DefaultAdmissionConfig": { + "description": "DefaultAdmissionConfig can be used to enable or disable various admission plugins. When this type is present as the `configuration` object under `pluginConfig` and *if* the admission plugin supports it, this will cause an \"off by default\" admission plugin to be enabled\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", + "required": [ + "disable" + ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "disable": { + "description": "Disable turns off an admission plugin that is enabled by default.", + "type": "boolean", + "default": false + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" @@ -55753,1820 +61169,2320 @@ }, "x-fabric8-info": { "Type": "object", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildLog", + "Kind": "DefaultAdmissionConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildLogOptions": { - "description": "BuildLogOptions is the REST options for a build log\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.legacy.v1.DenyAllPasswordIdentityProvider": { + "description": "DenyAllPasswordIdentityProvider provides no identities for users\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "container": { - "description": "cointainer for which to stream logs. Defaults to only container if there is one container in the pod.", - "type": "string" - }, - "follow": { - "description": "follow if true indicates that the build log should be streamed until the build terminates.", - "type": "boolean" - }, - "insecureSkipTLSVerifyBackend": { - "description": "insecureSkipTLSVerifyBackend indicates that the apiserver should not confirm the validity of the serving certificate of the backend it is connecting to. This will make the HTTPS connection between the apiserver and the backend insecure. This means the apiserver cannot verify the log data it is receiving came from the real kubelet. If the kubelet is configured to verify the apiserver's TLS credentials, it does not mean the connection to the real kubelet is vulnerable to a man in the middle attack (e.g. an attacker could not intercept the actual log data coming from the real kubelet).", - "type": "boolean" - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" - }, - "limitBytes": { - "description": "limitBytes, If set, is the number of bytes to read from the server before terminating the log output. This may not display a complete final line of logging, and may return slightly more or slightly less than the specified limit.", - "type": "integer", - "format": "int64" - }, - "nowait": { - "description": "noWait if true causes the call to return immediately even if the build is not available yet. Otherwise the server will wait until the build has started.", - "type": "boolean" - }, - "previous": { - "description": "previous returns previous build logs. Defaults to false.", - "type": "boolean" - }, - "sinceSeconds": { - "description": "sinceSeconds is a relative time in seconds before the current time from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", - "type": "integer", - "format": "int64" - }, - "sinceTime": { - "description": "sinceTime is an RFC3339 timestamp from which to show logs. If this value precedes the time a pod was started, only logs since the pod start will be returned. If this value is in the future, no logs will be returned. Only one of sinceSeconds or sinceTime may be specified.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "tailLines": { - "description": "tailLines, If set, is the number of lines from the end of the logs to show. If not specified, logs are shown from the creation of the container or sinceSeconds or sinceTime", - "type": "integer", - "format": "int64" - }, - "timestamps": { - "description": "timestamps, If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line of log output. Defaults to false.", - "type": "boolean" - }, - "version": { - "description": "version of the build for which to view logs.", - "type": "integer", - "format": "int64" } }, "x-fabric8-info": { "Type": "object", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildLogOptions", + "Kind": "DenyAllPasswordIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildOutput": { - "description": "BuildOutput is input to a build strategy and describes the container image that the strategy should produce.", + "io.openshift.config.legacy.v1.DockerConfig": { + "description": "DockerConfig holds Docker related configuration options.", "type": "object", + "required": [ + "execHandlerName", + "dockerShimSocket", + "dockerShimRootDirectory" + ], "properties": { - "imageLabels": { - "description": "imageLabels define a list of labels that are applied to the resulting image. If there are multiple labels with the same name then the last one in the list is used.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.ImageLabel" - } + "dockerShimRootDirectory": { + "description": "DockershimRootDirectory is the dockershim root directory.", + "type": "string", + "default": "" }, - "pushSecret": { - "description": "PushSecret is the name of a Secret that would be used for setting up the authentication for executing the Docker push to authentication enabled Docker Registry (or Docker Hub).", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + "dockerShimSocket": { + "description": "DockerShimSocket is the location of the dockershim socket the kubelet uses. Currently unix socket is supported on Linux, and tcp is supported on windows. Examples:'unix:///var/run/dockershim.sock', 'tcp://localhost:3735'", + "type": "string", + "default": "" }, - "to": { - "description": "to defines an optional location to push the output of this build to. Kind must be one of 'ImageStreamTag' or 'DockerImage'. This value will be used to look up a container image repository to push to. In the case of an ImageStreamTag, the ImageStreamTag will be looked for in the namespace of the build unless Namespace is specified.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "execHandlerName": { + "description": "ExecHandlerName is the name of the handler to use for executing commands in containers.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildOutput", + "Kind": "DockerConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildPostCommitSpec": { - "description": "A BuildPostCommitSpec holds a build post commit hook specification. The hook executes a command in a temporary container running the build output image, immediately after the last layer of the image is committed and before the image is pushed to a registry. The command is executed with the current working directory ($PWD) set to the image's WORKDIR.\n\nThe build will be marked as failed if the hook execution fails. It will fail if the script or command return a non-zero exit code, or if there is any other error related to starting the temporary container.\n\nThere are five different ways to configure the hook. As an example, all forms below are equivalent and will execute `rake test --verbose`.\n\n1. Shell script:\n\n\t \"postCommit\": {\n\t \"script\": \"rake test --verbose\",\n\t }\n\n\tThe above is a convenient form which is equivalent to:\n\n\t \"postCommit\": {\n\t \"command\": [\"/bin/sh\", \"-ic\"],\n\t \"args\": [\"rake test --verbose\"]\n\t }\n\n2. A command as the image entrypoint:\n\n\t \"postCommit\": {\n\t \"commit\": [\"rake\", \"test\", \"--verbose\"]\n\t }\n\n\tCommand overrides the image entrypoint in the exec form, as documented in\n\tDocker: https://docs.docker.com/engine/reference/builder/#entrypoint.\n\n3. Pass arguments to the default entrypoint:\n\n\t \"postCommit\": {\n\t\t\t \"args\": [\"rake\", \"test\", \"--verbose\"]\n\t\t }\n\n\t This form is only useful if the image entrypoint can handle arguments.\n\n4. Shell script with arguments:\n\n\t \"postCommit\": {\n\t \"script\": \"rake test $1\",\n\t \"args\": [\"--verbose\"]\n\t }\n\n\tThis form is useful if you need to pass arguments that would otherwise be\n\thard to quote properly in the shell script. In the script, $0 will be\n\t\"/bin/sh\" and $1, $2, etc, are the positional arguments from Args.\n\n5. Command with arguments:\n\n\t \"postCommit\": {\n\t \"command\": [\"rake\", \"test\"],\n\t \"args\": [\"--verbose\"]\n\t }\n\n\tThis form is equivalent to appending the arguments to the Command slice.\n\nIt is invalid to provide both Script and Command simultaneously. If none of the fields are specified, the hook is not executed.", + "io.openshift.config.legacy.v1.EtcdConfig": { + "description": "EtcdConfig holds the necessary configuration options for connecting with an etcd database", "type": "object", + "required": [ + "servingInfo", + "address", + "peerServingInfo", + "peerAddress", + "storageDirectory" + ], "properties": { - "args": { - "description": "args is a list of arguments that are provided to either Command, Script or the container image's default entrypoint. The arguments are placed immediately after the command to be run.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "address": { + "description": "Address is the advertised host:port for client connections to etcd", + "type": "string", + "default": "" }, - "command": { - "description": "command is the command to run. It may not be specified with Script. This might be needed if the image doesn't have `/bin/sh`, or if you do not want to use a shell. In all other cases, using Script might be more convenient.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "peerAddress": { + "description": "PeerAddress is the advertised host:port for peer connections to etcd", + "type": "string", + "default": "" }, - "script": { - "description": "script is a shell script to be run with `/bin/sh -ic`. It may not be specified with Command. Use Script when a shell script is appropriate to execute the post build hook, for example for running unit tests with `rake test`. If you need control over the image entrypoint, or if the image does not have `/bin/sh`, use Command and/or Args. The `-i` flag is needed to support CentOS and RHEL images that use Software Collections (SCL), in order to have the appropriate collections enabled in the shell. E.g., in the Ruby image, this is necessary to make `ruby`, `bundle` and other binaries available in the PATH.", - "type": "string" + "peerServingInfo": { + "description": "PeerServingInfo describes how to start serving the etcd peer", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.ServingInfo" + }, + "servingInfo": { + "description": "ServingInfo describes how to start serving the etcd master", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.ServingInfo" + }, + "storageDirectory": { + "description": "StorageDir is the path to the etcd storage directory", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildPostCommitSpec", + "Kind": "EtcdConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildRequest": { - "description": "BuildRequest is the resource used to pass parameters to build generator\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.legacy.v1.EtcdConnectionInfo": { + "description": "EtcdConnectionInfo holds information necessary for connecting to an etcd server", "type": "object", + "required": [ + "urls", + "ca", + "certFile", + "keyFile" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "binary": { - "description": "binary indicates a request to build from a binary provided to the builder", - "$ref": "#/definitions/io.openshift.build.v1.BinaryBuildSource" - }, - "dockerStrategyOptions": { - "description": "DockerStrategyOptions contains additional docker-strategy specific options for the build", - "$ref": "#/definitions/io.openshift.build.v1.DockerStrategyOptions" - }, - "env": { - "description": "env contains additional environment variables you want to pass into a builder container.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - } - }, - "from": { - "description": "from is the reference to the ImageStreamTag that triggered the build.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "lastVersion": { - "description": "lastVersion (optional) is the LastVersion of the BuildConfig that was used to generate the build. If the BuildConfig in the generator doesn't match, a build will not be generated.", - "type": "integer", - "format": "int64" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "ca": { + "description": "CA is a file containing trusted roots for the etcd server certificates", + "type": "string", + "default": "" }, - "revision": { - "description": "revision is the information from the source for a specific repo snapshot.", - "$ref": "#/definitions/io.openshift.build.v1.SourceRevision" + "certFile": { + "description": "CertFile is a file containing a PEM-encoded certificate", + "type": "string", + "default": "" }, - "sourceStrategyOptions": { - "description": "SourceStrategyOptions contains additional source-strategy specific options for the build", - "$ref": "#/definitions/io.openshift.build.v1.SourceStrategyOptions" + "keyFile": { + "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "type": "string", + "default": "" }, - "triggeredBy": { - "description": "triggeredBy describes which triggers started the most recent update to the build configuration and contains information about those triggers.", + "urls": { + "description": "URLs are the URLs for etcd", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildTriggerCause" + "type": "string", + "default": "" } - }, - "triggeredByImage": { - "description": "triggeredByImage is the Image that triggered this build.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" } }, "x-fabric8-info": { - "Type": "object", - "Group": "build.openshift.io", + "Type": "nested", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildRequest", + "Kind": "EtcdConnectionInfo", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildSource": { - "description": "BuildSource is the SCM used for the build.", + "io.openshift.config.legacy.v1.EtcdStorageConfig": { + "description": "EtcdStorageConfig holds the necessary configuration options for the etcd storage underlying OpenShift and Kubernetes", "type": "object", + "required": [ + "kubernetesStorageVersion", + "kubernetesStoragePrefix", + "openShiftStorageVersion", + "openShiftStoragePrefix" + ], "properties": { - "binary": { - "description": "binary builds accept a binary as their input. The binary is generally assumed to be a tar, gzipped tar, or zip file depending on the strategy. For container image builds, this is the build context and an optional Dockerfile may be specified to override any Dockerfile in the build context. For Source builds, this is assumed to be an archive as described above. For Source and container image builds, if binary.asFile is set the build will receive a directory with a single file. contextDir may be used when an archive is provided. Custom builds will receive this binary as input on STDIN.", - "$ref": "#/definitions/io.openshift.build.v1.BinaryBuildSource" - }, - "configMaps": { - "description": "configMaps represents a list of configMaps and their destinations that will be used for the build.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.ConfigMapBuildSource" - } - }, - "contextDir": { - "description": "contextDir specifies the sub-directory where the source code for the application exists. This allows to have buildable sources in directory other than root of repository.", - "type": "string" - }, - "dockerfile": { - "description": "dockerfile is the raw contents of a Dockerfile which should be built. When this option is specified, the FROM may be modified based on your strategy base image and additional ENV stanzas from your strategy environment will be added after the FROM, but before the rest of your Dockerfile stanzas. The Dockerfile source type may be used with other options like git - in those cases the Git repo will have any innate Dockerfile replaced in the context dir.", - "type": "string" - }, - "git": { - "description": "git contains optional information about git build source", - "$ref": "#/definitions/io.openshift.build.v1.GitBuildSource" - }, - "images": { - "description": "images describes a set of images to be used to provide source for the build", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.ImageSource" - } + "kubernetesStoragePrefix": { + "description": "KubernetesStoragePrefix is the path within etcd that the Kubernetes resources will be rooted under. This value, if changed, will mean existing objects in etcd will no longer be located. The default value is 'kubernetes.io'.", + "type": "string", + "default": "" }, - "secrets": { - "description": "secrets represents a list of secrets and their destinations that will be used only for the build.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.SecretBuildSource" - } + "kubernetesStorageVersion": { + "description": "KubernetesStorageVersion is the API version that Kube resources in etcd should be serialized to. This value should *not* be advanced until all clients in the cluster that read from etcd have code that allows them to read the new version.", + "type": "string", + "default": "" }, - "sourceSecret": { - "description": "sourceSecret is the name of a Secret that would be used for setting up the authentication for cloning private repository. The secret contains valid credentials for remote repository, where the data's key represent the authentication method to be used and value is the base64 encoded credentials. Supported auth methods are: ssh-privatekey.", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + "openShiftStoragePrefix": { + "description": "OpenShiftStoragePrefix is the path within etcd that the OpenShift resources will be rooted under. This value, if changed, will mean existing objects in etcd will no longer be located. The default value is 'openshift.io'.", + "type": "string", + "default": "" }, - "type": { - "description": "type of build input to accept", - "type": "string" + "openShiftStorageVersion": { + "description": "OpenShiftStorageVersion is the API version that OS resources in etcd should be serialized to. This value should *not* be advanced until all clients in the cluster that read from etcd have code that allows them to read the new version.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildSource", + "Kind": "EtcdStorageConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildSpec": { - "description": "BuildSpec has the information to represent a build and also additional information about a build", + "io.openshift.config.legacy.v1.GitHubIdentityProvider": { + "description": "GitHubIdentityProvider provides identities for users authenticating using GitHub credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "strategy" + "clientID", + "clientSecret", + "organizations", + "teams", + "hostname", + "ca" ], "properties": { - "completionDeadlineSeconds": { - "description": "completionDeadlineSeconds is an optional duration in seconds, counted from the time when a build pod gets scheduled in the system, that the build may be active on a node before the system actively tries to terminate the build; value must be positive integer", - "type": "integer", - "format": "int64" - }, - "mountTrustedCA": { - "description": "mountTrustedCA bind mounts the cluster's trusted certificate authorities, as defined in the cluster's proxy configuration, into the build. This lets processes within a build trust components signed by custom PKI certificate authorities, such as private artifact repositories and HTTPS proxies.\n\nWhen this field is set to true, the contents of `/etc/pki/ca-trust` within the build are managed by the build container, and any changes to this directory or its subdirectories (for example - within a Dockerfile `RUN` instruction) are not persisted in the build's output image.", - "type": "boolean" - }, - "nodeSelector": { - "description": "nodeSelector is a selector which must be true for the build pod to fit on a node If nil, it can be overridden by default build nodeselector values for the cluster. If set to an empty map or a map with any values, default build nodeselector values are ignored.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "output": { - "description": "output describes the container image the Strategy should produce.", - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildOutput" + "ca": { + "description": "CA is the optional trusted certificate authority bundle to use when making requests to the server. If empty, the default system roots are used. This can only be configured when hostname is set to a non-empty value.", + "type": "string", + "default": "" }, - "postCommit": { - "description": "postCommit is a build hook executed after the build output image is committed, before it is pushed to a registry.", - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildPostCommitSpec" + "clientID": { + "description": "ClientID is the oauth client ID", + "type": "string", + "default": "" }, - "resources": { - "description": "resources computes resource requirements to execute the build.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" + "clientSecret": { + "description": "ClientSecret is the oauth client secret", + "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource" }, - "revision": { - "description": "revision is the information from the source for a specific repo snapshot. This is optional.", - "$ref": "#/definitions/io.openshift.build.v1.SourceRevision" + "hostname": { + "description": "Hostname is the optional domain (e.g. \"mycompany.com\") for use with a hosted instance of GitHub Enterprise. It must match the GitHub Enterprise settings value that is configured at /setup/settings#hostname.", + "type": "string", + "default": "" }, - "serviceAccount": { - "description": "serviceAccount is the name of the ServiceAccount to use to run the pod created by this build. The pod will be allowed to use secrets referenced by the ServiceAccount", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "source": { - "description": "source describes the SCM in use.", - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildSource" - }, - "strategy": { - "description": "strategy defines how to perform a build.", - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildStrategy" + "organizations": { + "description": "Organizations optionally restricts which organizations are allowed to log in", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "triggeredBy": { - "description": "triggeredBy describes which triggers started the most recent update to the build configuration and contains information about those triggers.", + "teams": { + "description": "Teams optionally restricts which teams are allowed to log in. Format is \u003corg\u003e/\u003cteam\u003e.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildTriggerCause" + "type": "string", + "default": "" } } }, "x-fabric8-info": { - "Type": "nested", - "Group": "build.openshift.io", + "Type": "object", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildSpec", + "Kind": "GitHubIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildStatus": { - "description": "BuildStatus contains the status of a build", + "io.openshift.config.legacy.v1.GitLabIdentityProvider": { + "description": "GitLabIdentityProvider provides identities for users authenticating using GitLab credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "phase" + "ca", + "url", + "clientID", + "clientSecret" ], "properties": { - "cancelled": { - "description": "cancelled describes if a cancel event was triggered for the build.", - "type": "boolean" - }, - "completionTimestamp": { - "description": "completionTimestamp is a timestamp representing the server time when this Build was finished, whether that build failed or succeeded. It reflects the time at which the Pod running the Build terminated. It is represented in RFC3339 form and is in UTC.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "conditions": { - "description": "Conditions represents the latest available observations of a build's current state.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildCondition" - }, - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "config": { - "description": "config is an ObjectReference to the BuildConfig this Build is based on.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "duration": { - "description": "duration contains time.Duration object describing build time.", - "type": "integer", - "format": "int64" - }, - "logSnippet": { - "description": "logSnippet is the last few lines of the build log. This value is only set for builds that failed.", - "type": "string" - }, - "message": { - "description": "message is a human-readable message indicating details about why the build has this status.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "output": { - "description": "output describes the container image the build has produced.", - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildStatusOutput" - }, - "outputDockerImageReference": { - "description": "outputDockerImageReference contains a reference to the container image that will be built by this build. Its value is computed from Build.Spec.Output.To, and should include the registry address, so that it can be used to push and pull the image.", - "type": "string" + "ca": { + "description": "CA is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", + "type": "string", + "default": "" }, - "phase": { - "description": "phase is the point in the build lifecycle. Possible values are \"New\", \"Pending\", \"Running\", \"Complete\", \"Failed\", \"Error\", and \"Cancelled\".", + "clientID": { + "description": "ClientID is the oauth client ID", "type": "string", "default": "" }, - "reason": { - "description": "reason is a brief CamelCase string that describes any failure and is meant for machine parsing and tidy display in the CLI.", + "clientSecret": { + "description": "ClientSecret is the oauth client secret", + "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "stages": { - "description": "stages contains details about each stage that occurs during the build including start time, duration (in milliseconds), and the steps that occured within each stage.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.StageInfo" - } + "legacy": { + "description": "Legacy determines if OAuth2 or OIDC should be used If true, OAuth2 is used If false, OIDC is used If nil and the URL's host is gitlab.com, OIDC is used Otherwise, OAuth2 is used In a future release, nil will default to using OIDC Eventually this flag will be removed and only OIDC will be used", + "type": "boolean" }, - "startTimestamp": { - "description": "startTimestamp is a timestamp representing the server time when this Build started running in a Pod. It is represented in RFC3339 form and is in UTC.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "url": { + "description": "URL is the oauth server base URL", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "build.openshift.io", + "Type": "object", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildStatus", + "Kind": "GitLabIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildStatusOutput": { - "description": "BuildStatusOutput contains the status of the built image.", + "io.openshift.config.legacy.v1.GoogleIdentityProvider": { + "description": "GoogleIdentityProvider provides identities for users authenticating using Google credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", + "required": [ + "clientID", + "clientSecret", + "hostedDomain" + ], "properties": { - "to": { - "description": "to describes the status of the built image being pushed to a registry.", - "$ref": "#/definitions/io.openshift.build.v1.BuildStatusOutputTo" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "clientID": { + "description": "ClientID is the oauth client ID", + "type": "string", + "default": "" + }, + "clientSecret": { + "description": "ClientSecret is the oauth client secret", + "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource" + }, + "hostedDomain": { + "description": "HostedDomain is the optional Google App domain (e.g. \"mycompany.com\") to restrict logins to", + "type": "string", + "default": "" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "build.openshift.io", + "Type": "object", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildStatusOutput", + "Kind": "GoogleIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildStatusOutputTo": { - "description": "BuildStatusOutputTo describes the status of the built image with regards to image registry to which it was supposed to be pushed.", + "io.openshift.config.legacy.v1.GrantConfig": { + "description": "GrantConfig holds the necessary configuration options for grant handlers", "type": "object", + "required": [ + "method", + "serviceAccountMethod" + ], "properties": { - "imageDigest": { - "description": "imageDigest is the digest of the built container image. The digest uniquely identifies the image in the registry to which it was pushed.\n\nPlease note that this field may not always be set even if the push completes successfully - e.g. when the registry returns no digest or returns it in a format that the builder doesn't understand.", - "type": "string" + "method": { + "description": "Method determines the default strategy to use when an OAuth client requests a grant. This method will be used only if the specific OAuth client doesn't provide a strategy of their own. Valid grant handling methods are:\n - auto: always approves grant requests, useful for trusted clients\n - prompt: prompts the end user for approval of grant requests, useful for third-party clients\n - deny: always denies grant requests, useful for black-listed clients", + "type": "string", + "default": "" + }, + "serviceAccountMethod": { + "description": "ServiceAccountMethod is used for determining client authorization for service account oauth client. It must be either: deny, prompt", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildStatusOutputTo", + "Kind": "GrantConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildStrategy": { - "description": "BuildStrategy contains the details of how to perform a build.", + "io.openshift.config.legacy.v1.GroupResource": { + "description": "GroupResource points to a resource by its name and API group.", "type": "object", + "required": [ + "group", + "resource" + ], "properties": { - "customStrategy": { - "description": "customStrategy holds the parameters to the Custom build strategy", - "$ref": "#/definitions/io.openshift.build.v1.CustomBuildStrategy" - }, - "dockerStrategy": { - "description": "dockerStrategy holds the parameters to the container image build strategy.", - "$ref": "#/definitions/io.openshift.build.v1.DockerBuildStrategy" - }, - "jenkinsPipelineStrategy": { - "description": "JenkinsPipelineStrategy holds the parameters to the Jenkins Pipeline build strategy. Deprecated: use OpenShift Pipelines", - "$ref": "#/definitions/io.openshift.build.v1.JenkinsPipelineBuildStrategy" - }, - "sourceStrategy": { - "description": "sourceStrategy holds the parameters to the Source build strategy.", - "$ref": "#/definitions/io.openshift.build.v1.SourceBuildStrategy" + "group": { + "description": "Group is the name of an API group", + "type": "string", + "default": "" }, - "type": { - "description": "type is the kind of build strategy.", - "type": "string" + "resource": { + "description": "Resource is the name of a resource.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildStrategy", + "Kind": "GroupResource", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildTriggerCause": { - "description": "BuildTriggerCause holds information about a triggered build. It is used for displaying build trigger data for each build and build configuration in oc describe. It is also used to describe which triggers led to the most recent update in the build configuration.", + "io.openshift.config.legacy.v1.HTPasswdPasswordIdentityProvider": { + "description": "HTPasswdPasswordIdentityProvider provides identities for users authenticating using htpasswd credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", + "required": [ + "file" + ], "properties": { - "bitbucketWebHook": { - "description": "BitbucketWebHook represents data for a Bitbucket webhook that fired a specific build.", - "$ref": "#/definitions/io.openshift.build.v1.BitbucketWebHookCause" - }, - "genericWebHook": { - "description": "genericWebHook holds data about a builds generic webhook trigger.", - "$ref": "#/definitions/io.openshift.build.v1.GenericWebHookCause" - }, - "githubWebHook": { - "description": "gitHubWebHook represents data for a GitHub webhook that fired a specific build.", - "$ref": "#/definitions/io.openshift.build.v1.GitHubWebHookCause" - }, - "gitlabWebHook": { - "description": "GitLabWebHook represents data for a GitLab webhook that fired a specific build.", - "$ref": "#/definitions/io.openshift.build.v1.GitLabWebHookCause" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "imageChangeBuild": { - "description": "imageChangeBuild stores information about an imagechange event that triggered a new build.", - "$ref": "#/definitions/io.openshift.build.v1.ImageChangeCause" + "file": { + "description": "File is a reference to your htpasswd file", + "type": "string", + "default": "" }, - "message": { - "description": "message is used to store a human readable message for why the build was triggered. E.g.: \"Manually triggered by user\", \"Configuration change\",etc.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "build.openshift.io", + "Type": "object", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildTriggerCause", + "Kind": "HTPasswdPasswordIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildTriggerPolicy": { - "description": "BuildTriggerPolicy describes a policy for a single trigger that results in a new Build.", + "io.openshift.config.legacy.v1.HTTPServingInfo": { + "description": "HTTPServingInfo holds configuration for serving HTTP", "type": "object", "required": [ - "type" + "bindAddress", + "bindNetwork", + "certFile", + "keyFile", + "clientCA", + "namedCertificates", + "maxRequestsInFlight", + "requestTimeoutSeconds" ], "properties": { - "bitbucket": { - "description": "BitbucketWebHook contains the parameters for a Bitbucket webhook type of trigger", - "$ref": "#/definitions/io.openshift.build.v1.WebHookTrigger" + "bindAddress": { + "description": "BindAddress is the ip:port to serve on", + "type": "string", + "default": "" }, - "generic": { - "description": "generic contains the parameters for a Generic webhook type of trigger", - "$ref": "#/definitions/io.openshift.build.v1.WebHookTrigger" + "bindNetwork": { + "description": "BindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", + "type": "string", + "default": "" }, - "github": { - "description": "github contains the parameters for a GitHub webhook type of trigger", - "$ref": "#/definitions/io.openshift.build.v1.WebHookTrigger" + "certFile": { + "description": "CertFile is a file containing a PEM-encoded certificate", + "type": "string", + "default": "" }, - "gitlab": { - "description": "GitLabWebHook contains the parameters for a GitLab webhook type of trigger", - "$ref": "#/definitions/io.openshift.build.v1.WebHookTrigger" + "cipherSuites": { + "description": "CipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "imageChange": { - "description": "imageChange contains parameters for an ImageChange type of trigger", - "$ref": "#/definitions/io.openshift.build.v1.ImageChangeTrigger" + "clientCA": { + "description": "ClientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates", + "type": "string", + "default": "" }, - "type": { - "description": "type is the type of build trigger. Valid values:\n\n- GitHub GitHubWebHookBuildTriggerType represents a trigger that launches builds on GitHub webhook invocations\n\n- Generic GenericWebHookBuildTriggerType represents a trigger that launches builds on generic webhook invocations\n\n- GitLab GitLabWebHookBuildTriggerType represents a trigger that launches builds on GitLab webhook invocations\n\n- Bitbucket BitbucketWebHookBuildTriggerType represents a trigger that launches builds on Bitbucket webhook invocations\n\n- ImageChange ImageChangeBuildTriggerType represents a trigger that launches builds on availability of a new version of an image\n\n- ConfigChange ConfigChangeBuildTriggerType will trigger a build on an initial build config creation WARNING: In the future the behavior will change to trigger a build on any config change", + "keyFile": { + "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", "type": "string", "default": "" + }, + "maxRequestsInFlight": { + "description": "MaxRequestsInFlight is the number of concurrent requests allowed to the server. If zero, no limit.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "minTLSVersion": { + "description": "MinTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants", + "type": "string" + }, + "namedCertificates": { + "description": "NamedCertificates is a list of certificates to use to secure requests to specific hostnames", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.NamedCertificate" + } + }, + "requestTimeoutSeconds": { + "description": "RequestTimeoutSeconds is the number of seconds before requests are timed out. The default is 60 minutes, if -1 there is no limit on requests.", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildTriggerPolicy", + "Kind": "HTTPServingInfo", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildVolume": { - "description": "BuildVolume describes a volume that is made available to build pods, such that it can be mounted into buildah's runtime environment. Only a subset of Kubernetes Volume sources are supported.", + "io.openshift.config.legacy.v1.IdentityProvider": { + "description": "IdentityProvider provides identities for users authenticating using credentials", "type": "object", "required": [ "name", - "source", - "mounts" + "challenge", + "login", + "mappingMethod", + "provider" ], "properties": { - "mounts": { - "description": "mounts represents the location of the volume in the image build container", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildVolumeMount" - }, - "x-kubernetes-list-map-keys": [ - "destinationPath" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "destinationPath", - "x-kubernetes-patch-strategy": "merge" + "challenge": { + "description": "UseAsChallenger indicates whether to issue WWW-Authenticate challenges for this provider", + "type": "boolean", + "default": false }, - "name": { - "description": "name is a unique identifier for this BuildVolume. It must conform to the Kubernetes DNS label standard and be unique within the pod. Names that collide with those added by the build controller will result in a failed build with an error message detailing which name caused the error. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names", + "login": { + "description": "UseAsLogin indicates whether to use this identity provider for unauthenticated browsers to login against", + "type": "boolean", + "default": false + }, + "mappingMethod": { + "description": "MappingMethod determines how identities from this provider are mapped to users", "type": "string", "default": "" }, - "source": { - "description": "source represents the location and type of the mounted volume.", - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildVolumeSource" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "build.openshift.io", - "Version": "v1", - "Kind": "BuildVolume", - "Scope": "Namespaced" - } - }, - "io.openshift.build.v1.BuildVolumeMount": { - "description": "BuildVolumeMount describes the mounting of a Volume within buildah's runtime environment.", - "type": "object", - "required": [ - "destinationPath" - ], - "properties": { - "destinationPath": { - "description": "destinationPath is the path within the buildah runtime environment at which the volume should be mounted. The transient mount within the build image and the backing volume will both be mounted read only. Must be an absolute path, must not contain '..' or ':', and must not collide with a destination path generated by the builder process Paths that collide with those added by the build controller will result in a failed build with an error message detailing which path caused the error.", + "name": { + "description": "Name is used to qualify the identities returned by this provider", "type": "string", "default": "" + }, + "provider": { + "description": "Provider contains the information about how to set up a specific identity provider", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildVolumeMount", + "Kind": "IdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.build.v1.BuildVolumeSource": { - "description": "BuildVolumeSource represents the source of a volume to mount Only one of its supported types may be specified at any given time.", + "io.openshift.config.legacy.v1.ImageConfig": { + "description": "ImageConfig holds the necessary configuration options for building image names for system components", "type": "object", "required": [ - "type" + "format", + "latest" ], "properties": { - "configMap": { - "description": "configMap represents a ConfigMap that should populate this volume", - "$ref": "#/definitions/io.k8s.api.core.v1.ConfigMapVolumeSource" - }, - "csi": { - "description": "csi represents ephemeral storage provided by external CSI drivers which support this capability", - "$ref": "#/definitions/io.k8s.api.core.v1.CSIVolumeSource" - }, - "secret": { - "description": "secret represents a Secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret", - "$ref": "#/definitions/io.k8s.api.core.v1.SecretVolumeSource" - }, - "type": { - "description": "type is the BuildVolumeSourceType for the volume source. Type must match the populated volume source. Valid types are: Secret, ConfigMap", + "format": { + "description": "Format is the format of the name to be built for the system component", "type": "string", "default": "" + }, + "latest": { + "description": "Latest determines if the latest tag will be pulled from the registry", + "type": "boolean", + "default": false } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "BuildVolumeSource", + "Kind": "ImageConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.CommonSpec": { - "description": "CommonSpec encapsulates all the inputs necessary to represent a build.", + "io.openshift.config.legacy.v1.ImagePolicyConfig": { + "description": "ImagePolicyConfig holds the necessary configuration options for limits and behavior for importing images", "type": "object", "required": [ - "strategy" + "maxImagesBulkImportedPerRepository", + "disableScheduledImport", + "scheduledImageImportMinimumIntervalSeconds", + "maxScheduledImageImportsPerMinute" ], "properties": { - "completionDeadlineSeconds": { - "description": "completionDeadlineSeconds is an optional duration in seconds, counted from the time when a build pod gets scheduled in the system, that the build may be active on a node before the system actively tries to terminate the build; value must be positive integer", - "type": "integer", - "format": "int64" - }, - "mountTrustedCA": { - "description": "mountTrustedCA bind mounts the cluster's trusted certificate authorities, as defined in the cluster's proxy configuration, into the build. This lets processes within a build trust components signed by custom PKI certificate authorities, such as private artifact repositories and HTTPS proxies.\n\nWhen this field is set to true, the contents of `/etc/pki/ca-trust` within the build are managed by the build container, and any changes to this directory or its subdirectories (for example - within a Dockerfile `RUN` instruction) are not persisted in the build's output image.", - "type": "boolean" + "additionalTrustedCA": { + "description": "AdditionalTrustedCA is a path to a pem bundle file containing additional CAs that should be trusted during imagestream import.", + "type": "string" }, - "nodeSelector": { - "description": "nodeSelector is a selector which must be true for the build pod to fit on a node If nil, it can be overridden by default build nodeselector values for the cluster. If set to an empty map or a map with any values, default build nodeselector values are ignored.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" + "allowedRegistriesForImport": { + "description": "AllowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.RegistryLocation" } }, - "output": { - "description": "output describes the container image the Strategy should produce.", - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildOutput" - }, - "postCommit": { - "description": "postCommit is a build hook executed after the build output image is committed, before it is pushed to a registry.", - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildPostCommitSpec" - }, - "resources": { - "description": "resources computes resource requirements to execute the build.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" + "disableScheduledImport": { + "description": "DisableScheduledImport allows scheduled background import of images to be disabled.", + "type": "boolean", + "default": false }, - "revision": { - "description": "revision is the information from the source for a specific repo snapshot. This is optional.", - "$ref": "#/definitions/io.openshift.build.v1.SourceRevision" + "externalRegistryHostname": { + "description": "ExternalRegistryHostname sets the hostname for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", + "type": "string" }, - "serviceAccount": { - "description": "serviceAccount is the name of the ServiceAccount to use to run the pod created by this build. The pod will be allowed to use secrets referenced by the ServiceAccount", + "internalRegistryHostname": { + "description": "InternalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format.", "type": "string" }, - "source": { - "description": "source describes the SCM in use.", - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildSource" + "maxImagesBulkImportedPerRepository": { + "description": "MaxImagesBulkImportedPerRepository controls the number of images that are imported when a user does a bulk import of a container repository. This number defaults to 50 to prevent users from importing large numbers of images accidentally. Set -1 for no limit.", + "type": "integer", + "format": "int32", + "default": 0 }, - "strategy": { - "description": "strategy defines how to perform a build.", - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildStrategy" + "maxScheduledImageImportsPerMinute": { + "description": "MaxScheduledImageImportsPerMinute is the maximum number of scheduled image streams that will be imported in the background per minute. The default value is 60. Set to -1 for unlimited.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "scheduledImageImportMinimumIntervalSeconds": { + "description": "ScheduledImageImportMinimumIntervalSeconds is the minimum number of seconds that can elapse between when image streams scheduled for background import are checked against the upstream repository. The default value is 15 minutes.", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "CommonSpec", + "Kind": "ImagePolicyConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.CommonWebHookCause": { - "description": "CommonWebHookCause factors out the identical format of these webhook causes into struct so we can share it in the specific causes; it is too late for GitHub and Generic but we can leverage this pattern with GitLab and Bitbucket.", + "io.openshift.config.legacy.v1.JenkinsPipelineConfig": { + "description": "JenkinsPipelineConfig holds configuration for the Jenkins pipeline strategy", "type": "object", + "required": [ + "autoProvisionEnabled", + "templateNamespace", + "templateName", + "serviceName", + "parameters" + ], "properties": { - "revision": { - "description": "Revision is the git source revision information of the trigger.", - "$ref": "#/definitions/io.openshift.build.v1.SourceRevision" + "autoProvisionEnabled": { + "description": "AutoProvisionEnabled determines whether a Jenkins server will be spawned from the provided template when the first build config in the project with type JenkinsPipeline is created. When not specified this option defaults to true.", + "type": "boolean" }, - "secret": { - "description": "Secret is the obfuscated webhook secret that triggered a build.", - "type": "string" + "parameters": { + "description": "Parameters specifies a set of optional parameters to the Jenkins template.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "serviceName": { + "description": "ServiceName is the name of the Jenkins service OpenShift uses to detect whether a Jenkins pipeline handler has already been installed in a project. This value *must* match a service name in the provided template.", + "type": "string", + "default": "" + }, + "templateName": { + "description": "TemplateName is the name of the default Jenkins template", + "type": "string", + "default": "" + }, + "templateNamespace": { + "description": "TemplateNamespace contains the namespace name where the Jenkins template is stored", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "CommonWebHookCause", + "Kind": "JenkinsPipelineConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.ConfigMapBuildSource": { - "description": "ConfigMapBuildSource describes a configmap and its destination directory that will be used only at the build time. The content of the configmap referenced here will be copied into the destination directory instead of mounting.", + "io.openshift.config.legacy.v1.KeystonePasswordIdentityProvider": { + "description": "KeystonePasswordIdentityProvider provides identities for users authenticating using keystone password credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "configMap" + "url", + "ca", + "certFile", + "keyFile", + "domainName", + "useKeystoneIdentity" ], "properties": { - "configMap": { - "description": "configMap is a reference to an existing configmap that you want to use in your build.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "destinationDir": { - "description": "destinationDir is the directory where the files from the configmap should be available for the build time. For the Source build strategy, these will be injected into a container where the assemble script runs. For the container image build strategy, these will be copied into the build directory, where the Dockerfile is located, so users can ADD or COPY them during container image build.", + "ca": { + "description": "CA is the CA for verifying TLS connections", + "type": "string", + "default": "" + }, + "certFile": { + "description": "CertFile is a file containing a PEM-encoded certificate", + "type": "string", + "default": "" + }, + "domainName": { + "description": "Domain Name is required for keystone v3", + "type": "string", + "default": "" + }, + "keyFile": { + "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "type": "string", + "default": "" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + }, + "url": { + "description": "URL is the remote URL to connect to", + "type": "string", + "default": "" + }, + "useKeystoneIdentity": { + "description": "UseKeystoneIdentity flag indicates that user should be authenticated by keystone ID, not by username", + "type": "boolean", + "default": false } }, "x-fabric8-info": { - "Type": "nested", - "Group": "build.openshift.io", + "Type": "object", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "ConfigMapBuildSource", + "Kind": "KeystonePasswordIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.build.v1.CustomBuildStrategy": { - "description": "CustomBuildStrategy defines input parameters specific to Custom build.", + "io.openshift.config.legacy.v1.KubeletConnectionInfo": { + "description": "KubeletConnectionInfo holds information necessary for connecting to a kubelet", "type": "object", "required": [ - "from" + "port", + "ca", + "certFile", + "keyFile" ], "properties": { - "buildAPIVersion": { - "description": "buildAPIVersion is the requested API version for the Build object serialized and passed to the custom builder", - "type": "string" - }, - "env": { - "description": "env contains additional environment variables you want to pass into a builder container.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - } - }, - "exposeDockerSocket": { - "description": "exposeDockerSocket will allow running Docker commands (and build container images) from inside the container.", - "type": "boolean" - }, - "forcePull": { - "description": "forcePull describes if the controller should configure the build pod to always pull the images for the builder or only pull if it is not present locally", - "type": "boolean" + "ca": { + "description": "CA is the CA for verifying TLS connections to kubelets", + "type": "string", + "default": "" }, - "from": { - "description": "from is reference to an DockerImage, ImageStreamTag, or ImageStreamImage from which the container image should be pulled", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "certFile": { + "description": "CertFile is a file containing a PEM-encoded certificate", + "type": "string", + "default": "" }, - "pullSecret": { - "description": "pullSecret is the name of a Secret that would be used for setting up the authentication for pulling the container images from the private Docker registries", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + "keyFile": { + "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "type": "string", + "default": "" }, - "secrets": { - "description": "secrets is a list of additional secrets that will be included in the build pod", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.SecretSpec" - } + "port": { + "description": "Port is the port to connect to kubelets on", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "CustomBuildStrategy", + "Kind": "KubeletConnectionInfo", "Scope": "Namespaced" } }, - "io.openshift.build.v1.DockerBuildStrategy": { - "description": "DockerBuildStrategy defines input parameters specific to container image build.", + "io.openshift.config.legacy.v1.KubernetesMasterConfig": { + "description": "KubernetesMasterConfig holds the necessary configuration options for the Kubernetes master", "type": "object", + "required": [ + "apiLevels", + "disabledAPIGroupVersions", + "masterIP", + "masterEndpointReconcileTTL", + "servicesSubnet", + "servicesNodePortRange", + "schedulerConfigFile", + "podEvictionTimeout", + "proxyClientInfo", + "apiServerArguments", + "controllerArguments", + "schedulerArguments" + ], "properties": { - "buildArgs": { - "description": "buildArgs contains build arguments that will be resolved in the Dockerfile. See https://docs.docker.com/engine/reference/builder/#/arg for more details. NOTE: Only the 'name' and 'value' fields are supported. Any settings on the 'valueFrom' field are ignored.", + "apiLevels": { + "description": "APILevels is a list of API levels that should be enabled on startup: v1 as examples", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" + "type": "string", + "default": "" } }, - "dockerfilePath": { - "description": "dockerfilePath is the path of the Dockerfile that will be used to build the container image, relative to the root of the context (contextDir). Defaults to `Dockerfile` if unset.", - "type": "string" + "apiServerArguments": { + "description": "APIServerArguments are key value pairs that will be passed directly to the Kube apiserver that match the apiservers's command line arguments. These are not migrated, but if you reference a value that does not exist the server will not start. These values may override other settings in KubernetesMasterConfig which may cause invalid configurations.", + "type": "object", + "additionalProperties": { + "type": "array", + "items": { + "type": "string", + "default": "" + } + } }, - "env": { - "description": "env contains additional environment variables you want to pass into a builder container.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" + "controllerArguments": { + "description": "ControllerArguments are key value pairs that will be passed directly to the Kube controller manager that match the controller manager's command line arguments. These are not migrated, but if you reference a value that does not exist the server will not start. These values may override other settings in KubernetesMasterConfig which may cause invalid configurations.", + "type": "object", + "additionalProperties": { + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, - "forcePull": { - "description": "forcePull describes if the builder should pull the images from registry prior to building.", - "type": "boolean" + "disabledAPIGroupVersions": { + "description": "DisabledAPIGroupVersions is a map of groups to the versions (or *) that should be disabled.", + "type": "object", + "additionalProperties": { + "type": "array", + "items": { + "type": "string", + "default": "" + } + } }, - "from": { - "description": "from is a reference to an DockerImage, ImageStreamTag, or ImageStreamImage which overrides the FROM image in the Dockerfile for the build. If the Dockerfile uses multi-stage builds, this will replace the image in the last FROM directive of the file.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "masterEndpointReconcileTTL": { + "description": "MasterEndpointReconcileTTL sets the time to live in seconds of an endpoint record recorded by each master. The endpoints are checked at an interval that is 2/3 of this value and this value defaults to 15s if unset. In very large clusters, this value may be increased to reduce the possibility that the master endpoint record expires (due to other load on the etcd server) and causes masters to drop in and out of the kubernetes service record. It is not recommended to set this value below 15s.", + "type": "integer", + "format": "int32", + "default": 0 }, - "imageOptimizationPolicy": { - "description": "imageOptimizationPolicy describes what optimizations the system can use when building images to reduce the final size or time spent building the image. The default policy is 'None' which means the final build image will be equivalent to an image created by the container image build API. The experimental policy 'SkipLayers' will avoid commiting new layers in between each image step, and will fail if the Dockerfile cannot provide compatibility with the 'None' policy. An additional experimental policy 'SkipLayersAndWarn' is the same as 'SkipLayers' but simply warns if compatibility cannot be preserved.", - "type": "string" + "masterIP": { + "description": "MasterIP is the public IP address of kubernetes stuff. If empty, the first result from net.InterfaceAddrs will be used.", + "type": "string", + "default": "" }, - "noCache": { - "description": "noCache if set to true indicates that the container image build must be executed with the --no-cache=true flag", - "type": "boolean" + "podEvictionTimeout": { + "description": "PodEvictionTimeout controls grace period for deleting pods on failed nodes. It takes valid time duration string. If empty, you get the default pod eviction timeout.", + "type": "string", + "default": "" }, - "pullSecret": { - "description": "pullSecret is the name of a Secret that would be used for setting up the authentication for pulling the container images from the private Docker registries", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + "proxyClientInfo": { + "description": "ProxyClientInfo specifies the client cert/key to use when proxying to pods", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.CertInfo" }, - "volumes": { - "description": "volumes is a list of input volumes that can be mounted into the builds runtime environment. Only a subset of Kubernetes Volume sources are supported by builds. More info: https://kubernetes.io/docs/concepts/storage/volumes", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildVolume" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" + "schedulerArguments": { + "description": "SchedulerArguments are key value pairs that will be passed directly to the Kube scheduler that match the scheduler's command line arguments. These are not migrated, but if you reference a value that does not exist the server will not start. These values may override other settings in KubernetesMasterConfig which may cause invalid configurations.", + "type": "object", + "additionalProperties": { + "type": "array", + "items": { + "type": "string", + "default": "" + } + } + }, + "schedulerConfigFile": { + "description": "SchedulerConfigFile points to a file that describes how to set up the scheduler. If empty, you get the default scheduling rules.", + "type": "string", + "default": "" + }, + "servicesNodePortRange": { + "description": "ServicesNodePortRange is the range to use for assigning service public ports on a host.", + "type": "string", + "default": "" + }, + "servicesSubnet": { + "description": "ServicesSubnet is the subnet to use for assigning service IPs", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "DockerBuildStrategy", + "Kind": "KubernetesMasterConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.DockerStrategyOptions": { - "description": "DockerStrategyOptions contains extra strategy options for container image builds", + "io.openshift.config.legacy.v1.LDAPAttributeMapping": { + "description": "LDAPAttributeMapping maps LDAP attributes to OpenShift identity fields", "type": "object", + "required": [ + "id", + "preferredUsername", + "name", + "email" + ], "properties": { - "buildArgs": { - "description": "Args contains any build arguments that are to be passed to Docker. See https://docs.docker.com/engine/reference/builder/#/arg for more details", + "email": { + "description": "Email is the list of attributes whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" + "type": "string", + "default": "" } }, - "noCache": { - "description": "noCache overrides the docker-strategy noCache option in the build config", - "type": "boolean" + "id": { + "description": "ID is the list of attributes whose values should be used as the user ID. Required. LDAP standard identity attribute is \"dn\"", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "name": { + "description": "Name is the list of attributes whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity LDAP standard display name attribute is \"cn\"", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "preferredUsername": { + "description": "PreferredUsername is the list of attributes whose values should be used as the preferred username. LDAP standard login attribute is \"uid\"", + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "DockerStrategyOptions", + "Kind": "LDAPAttributeMapping", "Scope": "Namespaced" } }, - "io.openshift.build.v1.GenericWebHookCause": { - "description": "GenericWebHookCause holds information about a generic WebHook that triggered a build.", + "io.openshift.config.legacy.v1.LDAPPasswordIdentityProvider": { + "description": "LDAPPasswordIdentityProvider provides identities for users authenticating using LDAP credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", + "required": [ + "url", + "bindDN", + "bindPassword", + "insecure", + "ca", + "attributes" + ], "properties": { - "revision": { - "description": "revision is an optional field that stores the git source revision information of the generic webhook trigger when it is available.", - "$ref": "#/definitions/io.openshift.build.v1.SourceRevision" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "secret": { - "description": "secret is the obfuscated webhook secret that triggered a build.", + "attributes": { + "description": "Attributes maps LDAP attributes to identities", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPAttributeMapping" + }, + "bindDN": { + "description": "BindDN is an optional DN to bind with during the search phase.", + "type": "string", + "default": "" + }, + "bindPassword": { + "description": "BindPassword is an optional password to bind with during the search phase.", + "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource" + }, + "ca": { + "description": "CA is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", + "type": "string", + "default": "" + }, + "insecure": { + "description": "Insecure, if true, indicates the connection should not use TLS. Cannot be set to true with a URL scheme of \"ldaps://\" If false, \"ldaps://\" URLs connect using TLS, and \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830", + "type": "boolean", + "default": false + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + }, + "url": { + "description": "URL is an RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is\n ldap://host:port/basedn?attribute?scope?filter", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "build.openshift.io", + "Type": "object", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "GenericWebHookCause", + "Kind": "LDAPPasswordIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.build.v1.GenericWebHookEvent": { - "description": "GenericWebHookEvent is the payload expected for a generic webhook post", + "io.openshift.config.legacy.v1.LDAPQuery": { + "description": "LDAPQuery holds the options necessary to build an LDAP query", "type": "object", + "required": [ + "baseDN", + "scope", + "derefAliases", + "timeout", + "filter", + "pageSize" + ], "properties": { - "dockerStrategyOptions": { - "description": "DockerStrategyOptions contains additional docker-strategy specific options for the build", - "$ref": "#/definitions/io.openshift.build.v1.DockerStrategyOptions" + "baseDN": { + "description": "The DN of the branch of the directory where all searches should start from", + "type": "string", + "default": "" }, - "env": { - "description": "env contains additional environment variables you want to pass into a builder container. ValueFrom is not supported.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - } + "derefAliases": { + "description": "The (optional) behavior of the search with regards to alisases. Can be: never: never dereference aliases, search: only dereference in searching, base: only dereference in finding the base object, always: always dereference Defaults to always dereferencing if not set", + "type": "string", + "default": "" }, - "git": { - "description": "git is the git information if the Type is BuildSourceGit", - "$ref": "#/definitions/io.openshift.build.v1.GitInfo" + "filter": { + "description": "Filter is a valid LDAP search filter that retrieves all relevant entries from the LDAP server with the base DN", + "type": "string", + "default": "" }, - "type": { - "description": "type is the type of source repository", - "type": "string" + "pageSize": { + "description": "PageSize is the maximum preferred page size, measured in LDAP entries. A page size of 0 means no paging will be done.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "scope": { + "description": "The (optional) scope of the search. Can be: base: only the base object, one: all object on the base level, sub: the entire subtree Defaults to the entire subtree if not set", + "type": "string", + "default": "" + }, + "timeout": { + "description": "TimeLimit holds the limit of time in seconds that any request to the server can remain outstanding before the wait for a response is given up. If this is 0, no client-side limit is imposed", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "GenericWebHookEvent", + "Kind": "LDAPQuery", "Scope": "Namespaced" } }, - "io.openshift.build.v1.GitBuildSource": { - "description": "GitBuildSource defines the parameters of a Git SCM", + "io.openshift.config.legacy.v1.LDAPSyncConfig": { + "description": "LDAPSyncConfig holds the necessary configuration options to define an LDAP group sync\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "uri" + "url", + "bindDN", + "bindPassword", + "insecure", + "ca", + "groupUIDNameMapping" ], "properties": { - "httpProxy": { - "description": "httpProxy is a proxy used to reach the git repository over http", + "activeDirectory": { + "description": "ActiveDirectoryConfig holds the configuration for extracting data from an LDAP server set up in a fashion similar to that used in Active Directory: first-class user entries, with group membership determined by a multi-valued attribute on members listing groups they are a member of", + "$ref": "#/definitions/io.openshift.config.legacy.v1.ActiveDirectoryConfig" + }, + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "httpsProxy": { - "description": "httpsProxy is a proxy used to reach the git repository over https", - "type": "string" + "augmentedActiveDirectory": { + "description": "AugmentedActiveDirectoryConfig holds the configuration for extracting data from an LDAP server set up in a fashion similar to that used in Active Directory as described above, with one addition: first-class group entries exist and are used to hold metadata but not group membership", + "$ref": "#/definitions/io.openshift.config.legacy.v1.AugmentedActiveDirectoryConfig" + }, + "bindDN": { + "description": "BindDN is an optional DN to bind to the LDAP server with", + "type": "string", + "default": "" + }, + "bindPassword": { + "description": "BindPassword is an optional password to bind with during the search phase.", + "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource" + }, + "ca": { + "description": "CA is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", + "type": "string", + "default": "" + }, + "groupUIDNameMapping": { + "description": "LDAPGroupUIDToOpenShiftGroupNameMapping is an optional direct mapping of LDAP group UIDs to OpenShift Group names", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "insecure": { + "description": "Insecure, if true, indicates the connection should not use TLS. Cannot be set to true with a URL scheme of \"ldaps://\" If false, \"ldaps://\" URLs connect using TLS, and \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830", + "type": "boolean", + "default": false }, - "noProxy": { - "description": "noProxy is the list of domains for which the proxy should not be used", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "ref": { - "description": "ref is the branch/tag/ref to build.", - "type": "string" + "rfc2307": { + "description": "RFC2307Config holds the configuration for extracting data from an LDAP server set up in a fashion similar to RFC2307: first-class group and user entries, with group membership determined by a multi-valued attribute on the group entry listing its members", + "$ref": "#/definitions/io.openshift.config.legacy.v1.RFC2307Config" }, - "uri": { - "description": "uri points to the source that will be built. The structure of the source will depend on the type of build to run", + "url": { + "description": "Host is the scheme, host and port of the LDAP server to connect to: scheme://host:port", "type": "string", "default": "" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "build.openshift.io", + "Type": "object", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "GitBuildSource", + "Kind": "LDAPSyncConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.GitHubWebHookCause": { - "description": "GitHubWebHookCause has information about a GitHub webhook that triggered a build.", + "io.openshift.config.legacy.v1.LocalQuota": { + "description": "LocalQuota contains options for controlling local volume quota on the node.", "type": "object", + "required": [ + "perFSGroup" + ], "properties": { - "revision": { - "description": "revision is the git revision information of the trigger.", - "$ref": "#/definitions/io.openshift.build.v1.SourceRevision" - }, - "secret": { - "description": "secret is the obfuscated webhook secret that triggered a build.", - "type": "string" + "perFSGroup": { + "description": "FSGroup can be specified to enable a quota on local storage use per unique FSGroup ID. At present this is only implemented for emptyDir volumes, and if the underlying volumeDirectory is on an XFS filesystem.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "GitHubWebHookCause", + "Kind": "LocalQuota", "Scope": "Namespaced" } }, - "io.openshift.build.v1.GitInfo": { - "description": "GitInfo is the aggregated git information for a generic webhook post", + "io.openshift.config.legacy.v1.MasterAuthConfig": { + "description": "MasterAuthConfig configures authentication options in addition to the standard oauth token and client certificate authenticators", "type": "object", "required": [ - "uri", - "refs" + "requestHeader", + "webhookTokenAuthenticators", + "oauthMetadataFile" ], "properties": { - "author": { - "description": "author is the author of a specific commit", - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser" - }, - "commit": { - "description": "commit is the commit hash identifying a specific commit", - "type": "string" - }, - "committer": { - "description": "committer is the committer of a specific commit", - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser" - }, - "httpProxy": { - "description": "httpProxy is a proxy used to reach the git repository over http", - "type": "string" - }, - "httpsProxy": { - "description": "httpsProxy is a proxy used to reach the git repository over https", - "type": "string" - }, - "message": { - "description": "message is the description of a specific commit", - "type": "string" - }, - "noProxy": { - "description": "noProxy is the list of domains for which the proxy should not be used", - "type": "string" + "oauthMetadataFile": { + "description": "OAuthMetadataFile is a path to a file containing the discovery endpoint for OAuth 2.0 Authorization Server Metadata for an external OAuth server. See IETF Draft: // https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 This option is mutually exclusive with OAuthConfig", + "type": "string", + "default": "" }, - "ref": { - "description": "ref is the branch/tag/ref to build.", - "type": "string" + "requestHeader": { + "description": "RequestHeader holds options for setting up a front proxy against the API. It is optional.", + "$ref": "#/definitions/io.openshift.config.legacy.v1.RequestHeaderAuthenticationOptions" }, - "refs": { - "description": "Refs is a list of GitRefs for the provided repo - generally sent when used from a post-receive hook. This field is optional and is used when sending multiple refs", + "webhookTokenAuthenticators": { + "description": "WebhookTokenAuthnConfig, if present configures remote token reviewers", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.GitRefInfo" + "$ref": "#/definitions/io.openshift.config.legacy.v1.WebhookTokenAuthenticator" } - }, - "uri": { - "description": "uri points to the source that will be built. The structure of the source will depend on the type of build to run", - "type": "string", - "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "GitInfo", + "Kind": "MasterAuthConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.GitLabWebHookCause": { - "description": "GitLabWebHookCause has information about a GitLab webhook that triggered a build.", + "io.openshift.config.legacy.v1.MasterClients": { + "description": "MasterClients holds references to `.kubeconfig` files that qualify master clients for OpenShift and Kubernetes", "type": "object", + "required": [ + "openshiftLoopbackKubeConfig", + "openshiftLoopbackClientConnectionOverrides" + ], "properties": { - "revision": { - "description": "Revision is the git source revision information of the trigger.", - "$ref": "#/definitions/io.openshift.build.v1.SourceRevision" + "openshiftLoopbackClientConnectionOverrides": { + "description": "OpenShiftLoopbackClientConnectionOverrides specifies client overrides for system components to loop back to this master.", + "$ref": "#/definitions/io.openshift.config.legacy.v1.ClientConnectionOverrides" }, - "secret": { - "description": "Secret is the obfuscated webhook secret that triggered a build.", - "type": "string" + "openshiftLoopbackKubeConfig": { + "description": "OpenShiftLoopbackKubeConfig is a .kubeconfig filename for system components to loopback to this master", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "GitLabWebHookCause", + "Kind": "MasterClients", "Scope": "Namespaced" } }, - "io.openshift.build.v1.GitRefInfo": { - "description": "GitRefInfo is a single ref", + "io.openshift.config.legacy.v1.MasterConfig": { + "description": "MasterConfig holds the necessary configuration options for the OpenShift master\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "uri" + "servingInfo", + "authConfig", + "aggregatorConfig", + "corsAllowedOrigins", + "apiLevels", + "masterPublicURL", + "controllers", + "admissionConfig", + "controllerConfig", + "etcdStorageConfig", + "etcdClientInfo", + "kubeletClientInfo", + "kubernetesMasterConfig", + "etcdConfig", + "oauthConfig", + "dnsConfig", + "serviceAccountConfig", + "masterClients", + "imageConfig", + "imagePolicyConfig", + "policyConfig", + "projectConfig", + "routingConfig", + "networkConfig", + "volumeConfig", + "jenkinsPipelineConfig", + "auditConfig" ], "properties": { - "author": { - "description": "author is the author of a specific commit", + "admissionConfig": { + "description": "AdmissionConfig contains admission control plugin configuration.", "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser" - }, - "commit": { - "description": "commit is the commit hash identifying a specific commit", - "type": "string" + "$ref": "#/definitions/io.openshift.config.legacy.v1.AdmissionConfig" }, - "committer": { - "description": "committer is the committer of a specific commit", + "aggregatorConfig": { + "description": "AggregatorConfig has options for configuring the aggregator component of the API server.", "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser" + "$ref": "#/definitions/io.openshift.config.legacy.v1.AggregatorConfig" }, - "httpProxy": { - "description": "httpProxy is a proxy used to reach the git repository over http", - "type": "string" + "apiLevels": { + "description": "APILevels is a list of API levels that should be enabled on startup: v1 as examples", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "httpsProxy": { - "description": "httpsProxy is a proxy used to reach the git repository over https", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "message": { - "description": "message is the description of a specific commit", - "type": "string" + "auditConfig": { + "description": "AuditConfig holds information related to auditing capabilities.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.AuditConfig" }, - "noProxy": { - "description": "noProxy is the list of domains for which the proxy should not be used", - "type": "string" + "authConfig": { + "description": "AuthConfig configures authentication options in addition to the standard oauth token and client certificate authenticators", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.MasterAuthConfig" }, - "ref": { - "description": "ref is the branch/tag/ref to build.", - "type": "string" + "controllerConfig": { + "description": "ControllerConfig holds configuration values for controllers", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.ControllerConfig" }, - "uri": { - "description": "uri points to the source that will be built. The structure of the source will depend on the type of build to run", + "controllers": { + "description": "Controllers is a list of the controllers that should be started. If set to \"none\", no controllers will start automatically. The default value is \"*\" which will start all controllers. When using \"*\", you may exclude controllers by prepending a \"-\" in front of their name. No other values are recognized at this time.", "type": "string", "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "build.openshift.io", - "Version": "v1", - "Kind": "GitRefInfo", - "Scope": "Namespaced" - } - }, - "io.openshift.build.v1.GitSourceRevision": { - "description": "GitSourceRevision is the commit information from a git source for a build", - "type": "object", - "properties": { - "author": { - "description": "author is the author of a specific commit", + }, + "corsAllowedOrigins": { + "description": "CORSAllowedOrigins", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "dnsConfig": { + "description": "DNSConfig, if present start the DNS server in this process", + "$ref": "#/definitions/io.openshift.config.legacy.v1.DNSConfig" + }, + "etcdClientInfo": { + "description": "EtcdClientInfo contains information about how to connect to etcd", "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser" + "$ref": "#/definitions/io.openshift.config.legacy.v1.EtcdConnectionInfo" }, - "commit": { - "description": "commit is the commit hash identifying a specific commit", - "type": "string" + "etcdConfig": { + "description": "EtcdConfig, if present start etcd in this process", + "$ref": "#/definitions/io.openshift.config.legacy.v1.EtcdConfig" }, - "committer": { - "description": "committer is the committer of a specific commit", + "etcdStorageConfig": { + "description": "EtcdStorageConfig contains information about how API resources are stored in Etcd. These values are only relevant when etcd is the backing store for the cluster.", "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.SourceControlUser" + "$ref": "#/definitions/io.openshift.config.legacy.v1.EtcdStorageConfig" }, - "message": { - "description": "message is the description of a specific commit", - "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "build.openshift.io", - "Version": "v1", - "Kind": "GitSourceRevision", - "Scope": "Namespaced" - } - }, - "io.openshift.build.v1.ImageChangeCause": { - "description": "ImageChangeCause contains information about the image that triggered a build", - "type": "object", - "properties": { - "fromRef": { - "description": "fromRef contains detailed information about an image that triggered a build.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "imageConfig": { + "description": "ImageConfig holds options that describe how to build image names for system components", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.ImageConfig" }, - "imageID": { - "description": "imageID is the ID of the image that triggered a new build.", - "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "build.openshift.io", - "Version": "v1", - "Kind": "ImageChangeCause", - "Scope": "Namespaced" - } - }, - "io.openshift.build.v1.ImageChangeTrigger": { - "description": "ImageChangeTrigger allows builds to be triggered when an ImageStream changes", - "type": "object", - "properties": { - "from": { - "description": "from is a reference to an ImageStreamTag that will trigger a build when updated It is optional. If no From is specified, the From image from the build strategy will be used. Only one ImageChangeTrigger with an empty From reference is allowed in a build configuration.", - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "imagePolicyConfig": { + "description": "ImagePolicyConfig controls limits and behavior for importing images", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.ImagePolicyConfig" }, - "lastTriggeredImageID": { - "description": "lastTriggeredImageID is used internally by the ImageChangeController to save last used image ID for build This field is deprecated and will be removed in a future release. Deprecated", + "jenkinsPipelineConfig": { + "description": "JenkinsPipelineConfig holds information about the default Jenkins template used for JenkinsPipeline build strategy.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.JenkinsPipelineConfig" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "paused": { - "description": "paused is true if this trigger is temporarily disabled. Optional.", - "type": "boolean" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "build.openshift.io", - "Version": "v1", - "Kind": "ImageChangeTrigger", - "Scope": "Namespaced" - } - }, - "io.openshift.build.v1.ImageChangeTriggerStatus": { - "description": "ImageChangeTriggerStatus tracks the latest resolved status of the associated ImageChangeTrigger policy specified in the BuildConfigSpec.Triggers struct.", - "type": "object", - "properties": { - "from": { - "description": "from is the ImageStreamTag that is the source of the trigger.", + "kubeletClientInfo": { + "description": "KubeletClientInfo contains information about how to connect to kubelets", "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.ImageStreamTagReference" + "$ref": "#/definitions/io.openshift.config.legacy.v1.KubeletConnectionInfo" }, - "lastTriggerTime": { - "description": "lastTriggerTime is the last time this particular ImageStreamTag triggered a Build to start. This field is only updated when this trigger specifically started a Build.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "kubernetesMasterConfig": { + "description": "KubernetesMasterConfig, if present start the kubernetes master in this process", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.KubernetesMasterConfig" }, - "lastTriggeredImageID": { - "description": "lastTriggeredImageID represents the sha/id of the ImageStreamTag when a Build for this BuildConfig was started. The lastTriggeredImageID is updated each time a Build for this BuildConfig is started, even if this ImageStreamTag is not the reason the Build is started.", - "type": "string" + "masterClients": { + "description": "MasterClients holds all the client connection information for controllers and other system components", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.MasterClients" + }, + "masterPublicURL": { + "description": "MasterPublicURL is how clients can access the OpenShift API server", + "type": "string", + "default": "" + }, + "networkConfig": { + "description": "NetworkConfig to be passed to the compiled in network plugin", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.MasterNetworkConfig" + }, + "oauthConfig": { + "description": "OAuthConfig, if present start the /oauth endpoint in this process", + "$ref": "#/definitions/io.openshift.config.legacy.v1.OAuthConfig" + }, + "policyConfig": { + "description": "PolicyConfig holds information about where to locate critical pieces of bootstrapping policy", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.PolicyConfig" + }, + "projectConfig": { + "description": "ProjectConfig holds information about project creation and defaults", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.ProjectConfig" + }, + "routingConfig": { + "description": "RoutingConfig holds information about routing and route generation", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.RoutingConfig" + }, + "serviceAccountConfig": { + "description": "ServiceAccountConfig holds options related to service accounts", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.ServiceAccountConfig" + }, + "servingInfo": { + "description": "ServingInfo describes how to start serving", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.HTTPServingInfo" + }, + "volumeConfig": { + "description": "MasterVolumeConfig contains options for configuring volume plugins in the master node.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.MasterVolumeConfig" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "build.openshift.io", + "Type": "object", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "ImageChangeTriggerStatus", + "Kind": "MasterConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.ImageLabel": { - "description": "ImageLabel represents a label applied to the resulting image.", + "io.openshift.config.legacy.v1.MasterNetworkConfig": { + "description": "MasterNetworkConfig to be passed to the compiled in network plugin", "type": "object", "required": [ - "name" + "networkPluginName", + "clusterNetworks", + "serviceNetworkCIDR", + "externalIPNetworkCIDRs", + "ingressIPNetworkCIDR" ], "properties": { - "name": { - "description": "name defines the name of the label. It must have non-zero length.", + "clusterNetworkCIDR": { + "description": "ClusterNetworkCIDR is the CIDR string to specify the global overlay network's L3 space. Deprecated, but maintained for backwards compatibility, use ClusterNetworks instead.", + "type": "string" + }, + "clusterNetworks": { + "description": "ClusterNetworks is a list of ClusterNetwork objects that defines the global overlay network's L3 space by specifying a set of CIDR and netmasks that the SDN can allocate addressed from. If this is specified, then ClusterNetworkCIDR and HostSubnetLength may not be set.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.ClusterNetworkEntry" + } + }, + "externalIPNetworkCIDRs": { + "description": "ExternalIPNetworkCIDRs controls what values are acceptable for the service external IP field. If empty, no externalIP may be set. It may contain a list of CIDRs which are checked for access. If a CIDR is prefixed with !, IPs in that CIDR will be rejected. Rejections will be applied first, then the IP checked against one of the allowed CIDRs. You should ensure this range does not overlap with your nodes, pods, or service CIDRs for security reasons.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "hostSubnetLength": { + "description": "HostSubnetLength is the number of bits to allocate to each host's subnet e.g. 8 would mean a /24 network on the host. Deprecated, but maintained for backwards compatibility, use ClusterNetworks instead.", + "type": "integer", + "format": "int64" + }, + "ingressIPNetworkCIDR": { + "description": "IngressIPNetworkCIDR controls the range to assign ingress ips from for services of type LoadBalancer on bare metal. If empty, ingress ips will not be assigned. It may contain a single CIDR that will be allocated from. For security reasons, you should ensure that this range does not overlap with the CIDRs reserved for external ips, nodes, pods, or services.", "type": "string", "default": "" }, - "value": { - "description": "value defines the literal value of the label.", - "type": "string" + "networkPluginName": { + "description": "NetworkPluginName is the name of the network plugin to use", + "type": "string", + "default": "" + }, + "serviceNetworkCIDR": { + "description": "ServiceNetwork is the CIDR string to specify the service networks", + "type": "string", + "default": "" + }, + "vxlanPort": { + "description": "VXLANPort is the VXLAN port used by the cluster defaults. If it is not set, 4789 is the default value", + "type": "integer", + "format": "int64" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "ImageLabel", + "Kind": "MasterNetworkConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.ImageSource": { - "description": "ImageSource is used to describe build source that will be extracted from an image or used during a multi stage build. A reference of type ImageStreamTag, ImageStreamImage or DockerImage may be used. A pull secret can be specified to pull the image from an external registry or override the default service account secret if pulling from the internal registry. Image sources can either be used to extract content from an image and place it into the build context along with the repository source, or used directly during a multi-stage container image build to allow content to be copied without overwriting the contents of the repository source (see the 'paths' and 'as' fields).", + "io.openshift.config.legacy.v1.MasterVolumeConfig": { + "description": "MasterVolumeConfig contains options for configuring volume plugins in the master node.", "type": "object", "required": [ - "from" + "dynamicProvisioningEnabled" ], "properties": { - "as": { - "description": "A list of image names that this source will be used in place of during a multi-stage container image build. For instance, a Dockerfile that uses \"COPY --from=nginx:latest\" will first check for an image source that has \"nginx:latest\" in this field before attempting to pull directly. If the Dockerfile does not reference an image source it is ignored. This field and paths may both be set, in which case the contents will be used twice.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "from": { - "description": "from is a reference to an ImageStreamTag, ImageStreamImage, or DockerImage to copy source from.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" - }, - "paths": { - "description": "paths is a list of source and destination paths to copy from the image. This content will be copied into the build context prior to starting the build. If no paths are set, the build context will not be altered.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.ImageSourcePath" - } - }, - "pullSecret": { - "description": "pullSecret is a reference to a secret to be used to pull the image from a registry If the image is pulled from the OpenShift registry, this field does not need to be set.", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + "dynamicProvisioningEnabled": { + "description": "DynamicProvisioningEnabled is a boolean that toggles dynamic provisioning off when false, defaults to true", + "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "ImageSource", + "Kind": "MasterVolumeConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.ImageSourcePath": { - "description": "ImageSourcePath describes a path to be copied from a source image and its destination within the build directory.", + "io.openshift.config.legacy.v1.NamedCertificate": { + "description": "NamedCertificate specifies a certificate/key, and the names it should be served for", "type": "object", "required": [ - "sourcePath", - "destinationDir" + "names", + "certFile", + "keyFile" ], "properties": { - "destinationDir": { - "description": "destinationDir is the relative directory within the build directory where files copied from the image are placed.", + "certFile": { + "description": "CertFile is a file containing a PEM-encoded certificate", "type": "string", "default": "" }, - "sourcePath": { - "description": "sourcePath is the absolute path of the file or directory inside the image to copy to the build directory. If the source path ends in /. then the content of the directory will be copied, but the directory itself will not be created at the destination.", + "keyFile": { + "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", "type": "string", "default": "" + }, + "names": { + "description": "Names is a list of DNS names this certificate should be used to secure A name can be a normal DNS name, or can contain leading wildcard segments.", + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "ImageSourcePath", + "Kind": "NamedCertificate", "Scope": "Namespaced" } }, - "io.openshift.build.v1.ImageStreamTagReference": { - "description": "ImageStreamTagReference references the ImageStreamTag in an image change trigger by namespace and name.", + "io.openshift.config.legacy.v1.NodeAuthConfig": { + "description": "NodeAuthConfig holds authn/authz configuration options", "type": "object", + "required": [ + "authenticationCacheTTL", + "authenticationCacheSize", + "authorizationCacheTTL", + "authorizationCacheSize" + ], "properties": { - "name": { - "description": "name is the name of the ImageStreamTag for an ImageChangeTrigger", - "type": "string" + "authenticationCacheSize": { + "description": "AuthenticationCacheSize indicates how many authentication results should be cached. If 0, the default cache size is used.", + "type": "integer", + "format": "int32", + "default": 0 }, - "namespace": { - "description": "namespace is the namespace where the ImageStreamTag for an ImageChangeTrigger is located", - "type": "string" + "authenticationCacheTTL": { + "description": "AuthenticationCacheTTL indicates how long an authentication result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get the default timeout. If zero (e.g. \"0m\"), caching is disabled", + "type": "string", + "default": "" + }, + "authorizationCacheSize": { + "description": "AuthorizationCacheSize indicates how many authorization results should be cached. If 0, the default cache size is used.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "authorizationCacheTTL": { + "description": "AuthorizationCacheTTL indicates how long an authorization result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get the default timeout. If zero (e.g. \"0m\"), caching is disabled", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "ImageStreamTagReference", + "Kind": "NodeAuthConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.JenkinsPipelineBuildStrategy": { - "description": "JenkinsPipelineBuildStrategy holds parameters specific to a Jenkins Pipeline build. Deprecated: use OpenShift Pipelines", + "io.openshift.config.legacy.v1.NodeConfig": { + "description": "NodeConfig is the fully specified config starting an OpenShift node\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", + "required": [ + "nodeName", + "nodeIP", + "servingInfo", + "masterKubeConfig", + "masterClientConnectionOverrides", + "dnsDomain", + "dnsIP", + "dnsBindAddress", + "dnsNameservers", + "dnsRecursiveResolvConf", + "networkConfig", + "volumeDirectory", + "imageConfig", + "allowDisabledDocker", + "podManifestConfig", + "authConfig", + "dockerConfig", + "iptablesSyncPeriod", + "enableUnidling", + "volumeConfig" + ], "properties": { - "env": { - "description": "env contains additional environment variables you want to pass into a build pipeline.", + "allowDisabledDocker": { + "description": "AllowDisabledDocker if true, the Kubelet will ignore errors from Docker. This means that a node can start on a machine that doesn't have docker started.", + "type": "boolean", + "default": false + }, + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "authConfig": { + "description": "AuthConfig holds authn/authz configuration options", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.NodeAuthConfig" + }, + "dnsBindAddress": { + "description": "DNSBindAddress is the ip:port to serve DNS on. If this is not set, the DNS server will not be started. Because most DNS resolvers will only listen on port 53, if you select an alternative port you will need a DNS proxy like dnsmasq to answer queries for containers. A common configuration is dnsmasq configured on a node IP listening on 53 and delegating queries for dnsDomain to this process, while sending other queries to the host environments nameservers.", + "type": "string", + "default": "" + }, + "dnsDomain": { + "description": "DNSDomain holds the domain suffix that will be used for the DNS search path inside each container. Defaults to 'cluster.local'.", + "type": "string", + "default": "" + }, + "dnsIP": { + "description": "DNSIP is the IP address that pods will use to access cluster DNS. Defaults to the service IP of the Kubernetes master. This IP must be listening on port 53 for compatibility with libc resolvers (which cannot be configured to resolve names from any other port). When running more complex local DNS configurations, this is often set to the local address of a DNS proxy like dnsmasq, which then will consult either the local DNS (see dnsBindAddress) or the master DNS.", + "type": "string", + "default": "" + }, + "dnsNameservers": { + "description": "DNSNameservers is a list of ip:port values of recursive nameservers to forward queries to when running a local DNS server if dnsBindAddress is set. If this value is empty, the DNS server will default to the nameservers listed in /etc/resolv.conf. If you have configured dnsmasq or another DNS proxy on the system, this value should be set to the upstream nameservers dnsmasq resolves with.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" + "type": "string", + "default": "" } }, - "jenkinsfile": { - "description": "Jenkinsfile defines the optional raw contents of a Jenkinsfile which defines a Jenkins pipeline build.", + "dnsRecursiveResolvConf": { + "description": "DNSRecursiveResolvConf is a path to a resolv.conf file that contains settings for an upstream server. Only the nameservers and port fields are used. The file must exist and parse correctly. It adds extra nameservers to DNSNameservers if set.", + "type": "string", + "default": "" + }, + "dockerConfig": { + "description": "DockerConfig holds Docker related configuration options.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.DockerConfig" + }, + "enableUnidling": { + "description": "EnableUnidling controls whether or not the hybrid unidling proxy will be set up", + "type": "boolean" + }, + "imageConfig": { + "description": "ImageConfig holds options that describe how to build image names for system components", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.ImageConfig" + }, + "iptablesSyncPeriod": { + "description": "IPTablesSyncPeriod is how often iptable rules are refreshed", + "type": "string", + "default": "" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "jenkinsfilePath": { - "description": "JenkinsfilePath is the optional path of the Jenkinsfile that will be used to configure the pipeline relative to the root of the context (contextDir). If both JenkinsfilePath \u0026 Jenkinsfile are both not specified, this defaults to Jenkinsfile in the root of the specified contextDir.", + "kubeletArguments": { + "description": "KubeletArguments are key value pairs that will be passed directly to the Kubelet that match the Kubelet's command line arguments. These are not migrated or validated, so if you use them they may become invalid. These values override other settings in NodeConfig which may cause invalid configurations.", + "type": "object", + "additionalProperties": { + "type": "array", + "items": { + "type": "string", + "default": "" + } + } + }, + "masterClientConnectionOverrides": { + "description": "MasterClientConnectionOverrides provides overrides to the client connection used to connect to the master.", + "$ref": "#/definitions/io.openshift.config.legacy.v1.ClientConnectionOverrides" + }, + "masterKubeConfig": { + "description": "MasterKubeConfig is a filename for the .kubeconfig file that describes how to connect this node to the master", + "type": "string", + "default": "" + }, + "networkConfig": { + "description": "NetworkConfig provides network options for the node", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.NodeNetworkConfig" + }, + "networkPluginName": { + "description": "Deprecated and maintained for backward compatibility, use NetworkConfig.NetworkPluginName instead", "type": "string" + }, + "nodeIP": { + "description": "Node may have multiple IPs, specify the IP to use for pod traffic routing If not specified, network parse/lookup on the nodeName is performed and the first non-loopback address is used", + "type": "string", + "default": "" + }, + "nodeName": { + "description": "NodeName is the value used to identify this particular node in the cluster. If possible, this should be your fully qualified hostname. If you're describing a set of static nodes to the master, this value must match one of the values in the list", + "type": "string", + "default": "" + }, + "podManifestConfig": { + "description": "PodManifestConfig holds the configuration for enabling the Kubelet to create pods based from a manifest file(s) placed locally on the node", + "$ref": "#/definitions/io.openshift.config.legacy.v1.PodManifestConfig" + }, + "proxyArguments": { + "description": "ProxyArguments are key value pairs that will be passed directly to the Proxy that match the Proxy's command line arguments. These are not migrated or validated, so if you use them they may become invalid. These values override other settings in NodeConfig which may cause invalid configurations.", + "type": "object", + "additionalProperties": { + "type": "array", + "items": { + "type": "string", + "default": "" + } + } + }, + "servingInfo": { + "description": "ServingInfo describes how to start serving", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.ServingInfo" + }, + "volumeConfig": { + "description": "VolumeConfig contains options for configuring volumes on the node.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.NodeVolumeConfig" + }, + "volumeDirectory": { + "description": "VolumeDirectory is the directory that volumes will be stored under", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "build.openshift.io", + "Type": "object", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "JenkinsPipelineBuildStrategy", + "Kind": "NodeConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.ProxyConfig": { - "description": "ProxyConfig defines what proxies to use for an operation", + "io.openshift.config.legacy.v1.NodeNetworkConfig": { + "description": "NodeNetworkConfig provides network options for the node", "type": "object", + "required": [ + "networkPluginName", + "mtu" + ], "properties": { - "httpProxy": { - "description": "httpProxy is a proxy used to reach the git repository over http", - "type": "string" - }, - "httpsProxy": { - "description": "httpsProxy is a proxy used to reach the git repository over https", - "type": "string" + "mtu": { + "description": "Maximum transmission unit for the network packets", + "type": "integer", + "format": "int64", + "default": 0 }, - "noProxy": { - "description": "noProxy is the list of domains for which the proxy should not be used", - "type": "string" + "networkPluginName": { + "description": "NetworkPluginName is a string specifying the networking plugin", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "ProxyConfig", + "Kind": "NodeNetworkConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.SecretBuildSource": { - "description": "SecretBuildSource describes a secret and its destination directory that will be used only at the build time. The content of the secret referenced here will be copied into the destination directory instead of mounting.", + "io.openshift.config.legacy.v1.NodeVolumeConfig": { + "description": "NodeVolumeConfig contains options for configuring volumes on the node.", "type": "object", "required": [ - "secret" + "localQuota" ], "properties": { - "destinationDir": { - "description": "destinationDir is the directory where the files from the secret should be available for the build time. For the Source build strategy, these will be injected into a container where the assemble script runs. Later, when the script finishes, all files injected will be truncated to zero length. For the container image build strategy, these will be copied into the build directory, where the Dockerfile is located, so users can ADD or COPY them during container image build.", - "type": "string" - }, - "secret": { - "description": "secret is a reference to an existing secret that you want to use in your build.", + "localQuota": { + "description": "LocalQuota contains options for controlling local volume quota on the node.", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + "$ref": "#/definitions/io.openshift.config.legacy.v1.LocalQuota" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "SecretBuildSource", + "Kind": "NodeVolumeConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.SecretLocalReference": { - "description": "SecretLocalReference contains information that points to the local secret being used", + "io.openshift.config.legacy.v1.OAuthConfig": { + "description": "OAuthConfig holds the necessary configuration options for OAuth authentication", "type": "object", "required": [ - "name" + "masterCA", + "masterURL", + "masterPublicURL", + "assetPublicURL", + "alwaysShowProviderSelection", + "identityProviders", + "grantConfig", + "sessionConfig", + "tokenConfig", + "templates" ], "properties": { - "name": { - "description": "Name is the name of the resource in the same namespace being referenced", + "alwaysShowProviderSelection": { + "description": "AlwaysShowProviderSelection will force the provider selection page to render even when there is only a single provider.", + "type": "boolean", + "default": false + }, + "assetPublicURL": { + "description": "AssetPublicURL is used for building valid client redirect URLs for external access", + "type": "string", + "default": "" + }, + "grantConfig": { + "description": "GrantConfig describes how to handle grants", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.GrantConfig" + }, + "identityProviders": { + "description": "IdentityProviders is an ordered list of ways for a user to identify themselves", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.IdentityProvider" + } + }, + "masterCA": { + "description": "MasterCA is the CA for verifying the TLS connection back to the MasterURL.", + "type": "string" + }, + "masterPublicURL": { + "description": "MasterPublicURL is used for building valid client redirect URLs for internal and external access", "type": "string", "default": "" + }, + "masterURL": { + "description": "MasterURL is used for making server-to-server calls to exchange authorization codes for access tokens", + "type": "string", + "default": "" + }, + "sessionConfig": { + "description": "SessionConfig hold information about configuring sessions.", + "$ref": "#/definitions/io.openshift.config.legacy.v1.SessionConfig" + }, + "templates": { + "description": "Templates allow you to customize pages like the login page.", + "$ref": "#/definitions/io.openshift.config.legacy.v1.OAuthTemplates" + }, + "tokenConfig": { + "description": "TokenConfig contains options for authorization and access tokens", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.TokenConfig" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "SecretLocalReference", + "Kind": "OAuthConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.SecretSpec": { - "description": "SecretSpec specifies a secret to be included in a build pod and its corresponding mount point", + "io.openshift.config.legacy.v1.OAuthTemplates": { + "description": "OAuthTemplates allow for customization of pages like the login page", "type": "object", "required": [ - "secretSource", - "mountPath" + "login", + "providerSelection", + "error" ], "properties": { - "mountPath": { - "description": "mountPath is the path at which to mount the secret", + "error": { + "description": "Error is a path to a file containing a go template used to render error pages during the authentication or grant flow If unspecified, the default error page is used.", "type": "string", "default": "" }, - "secretSource": { - "description": "secretSource is a reference to the secret", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + "login": { + "description": "Login is a path to a file containing a go template used to render the login page. If unspecified, the default login page is used.", + "type": "string", + "default": "" + }, + "providerSelection": { + "description": "ProviderSelection is a path to a file containing a go template used to render the provider selection page. If unspecified, the default provider selection page is used.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "SecretSpec", + "Kind": "OAuthTemplates", "Scope": "Namespaced" } }, - "io.openshift.build.v1.SourceBuildStrategy": { - "description": "SourceBuildStrategy defines input parameters specific to an Source build.", + "io.openshift.config.legacy.v1.OpenIDClaims": { + "description": "OpenIDClaims contains a list of OpenID claims to use when authenticating with an OpenID identity provider", "type": "object", "required": [ - "from" + "id", + "preferredUsername", + "name", + "email" ], "properties": { - "env": { - "description": "env contains additional environment variables you want to pass into a builder container.", + "email": { + "description": "Email is the list of claims whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" + "type": "string", + "default": "" } }, - "forcePull": { - "description": "forcePull describes if the builder should pull the images from registry prior to building.", - "type": "boolean" + "id": { + "description": "ID is the list of claims whose values should be used as the user ID. Required. OpenID standard identity claim is \"sub\"", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "from": { - "description": "from is reference to an DockerImage, ImageStreamTag, or ImageStreamImage from which the container image should be pulled", + "name": { + "description": "Name is the list of claims whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "preferredUsername": { + "description": "PreferredUsername is the list of claims whose values should be used as the preferred username. If unspecified, the preferred username is determined from the value of the id claim", + "type": "array", + "items": { + "type": "string", + "default": "" + } + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "legacy.config.openshift.io", + "Version": "v1", + "Kind": "OpenIDClaims", + "Scope": "Namespaced" + } + }, + "io.openshift.config.legacy.v1.OpenIDIdentityProvider": { + "description": "OpenIDIdentityProvider provides identities for users authenticating using OpenID credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "type": "object", + "required": [ + "ca", + "clientID", + "clientSecret", + "extraScopes", + "extraAuthorizeParameters", + "urls", + "claims" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "ca": { + "description": "CA is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", + "type": "string", + "default": "" + }, + "claims": { + "description": "Claims mappings", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "$ref": "#/definitions/io.openshift.config.legacy.v1.OpenIDClaims" }, - "incremental": { - "description": "incremental flag forces the Source build to do incremental builds if true.", - "type": "boolean" + "clientID": { + "description": "ClientID is the oauth client ID", + "type": "string", + "default": "" }, - "pullSecret": { - "description": "pullSecret is the name of a Secret that would be used for setting up the authentication for pulling the container images from the private Docker registries", - "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + "clientSecret": { + "description": "ClientSecret is the oauth client secret", + "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource" }, - "scripts": { - "description": "scripts is the location of Source scripts", - "type": "string" + "extraAuthorizeParameters": { + "description": "ExtraAuthorizeParameters are any custom parameters to add to the authorize request.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } }, - "volumes": { - "description": "volumes is a list of input volumes that can be mounted into the builds runtime environment. Only a subset of Kubernetes Volume sources are supported by builds. More info: https://kubernetes.io/docs/concepts/storage/volumes", + "extraScopes": { + "description": "ExtraScopes are any scopes to request in addition to the standard \"openid\" scope.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.BuildVolume" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" + "type": "string", + "default": "" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "urls": { + "description": "URLs to use to authenticate", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.OpenIDURLs" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "build.openshift.io", + "Type": "object", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "SourceBuildStrategy", + "Kind": "OpenIDIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.build.v1.SourceControlUser": { - "description": "SourceControlUser defines the identity of a user of source control", + "io.openshift.config.legacy.v1.OpenIDURLs": { + "description": "OpenIDURLs are URLs to use when authenticating with an OpenID identity provider", "type": "object", + "required": [ + "authorize", + "token", + "userInfo" + ], "properties": { - "email": { - "description": "email of the source control user", - "type": "string" + "authorize": { + "description": "Authorize is the oauth authorization URL", + "type": "string", + "default": "" }, - "name": { - "description": "name of the source control user", - "type": "string" + "token": { + "description": "Token is the oauth token granting URL", + "type": "string", + "default": "" + }, + "userInfo": { + "description": "UserInfo is the optional userinfo URL. If present, a granted access_token is used to request claims If empty, a granted id_token is parsed for claims", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "SourceControlUser", + "Kind": "OpenIDURLs", "Scope": "Namespaced" } }, - "io.openshift.build.v1.SourceRevision": { - "description": "SourceRevision is the revision or commit information from the source for the build", + "io.openshift.config.legacy.v1.PodManifestConfig": { + "description": "PodManifestConfig holds the necessary configuration options for using pod manifests", "type": "object", "required": [ - "type" + "path", + "fileCheckIntervalSeconds" ], "properties": { - "git": { - "description": "Git contains information about git-based build source", - "$ref": "#/definitions/io.openshift.build.v1.GitSourceRevision" + "fileCheckIntervalSeconds": { + "description": "FileCheckIntervalSeconds is the interval in seconds for checking the manifest file(s) for new data The interval needs to be a positive value", + "type": "integer", + "format": "int64", + "default": 0 }, - "type": { - "description": "type of the build source, may be one of 'Source', 'Dockerfile', 'Binary', or 'Images'", + "path": { + "description": "Path specifies the path for the pod manifest file or directory If its a directory, its expected to contain on or more manifest files This is used by the Kubelet to create pods on the node", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "SourceRevision", + "Kind": "PodManifestConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.SourceStrategyOptions": { - "description": "SourceStrategyOptions contains extra strategy options for Source builds", + "io.openshift.config.legacy.v1.PolicyConfig": { + "description": "holds the necessary configuration options for", "type": "object", + "required": [ + "userAgentMatchingConfig" + ], "properties": { - "incremental": { - "description": "incremental overrides the source-strategy incremental option in the build config", - "type": "boolean" + "userAgentMatchingConfig": { + "description": "UserAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.UserAgentMatchingConfig" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "SourceStrategyOptions", + "Kind": "PolicyConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.StageInfo": { - "description": "StageInfo contains details about a build stage.", + "io.openshift.config.legacy.v1.ProjectConfig": { + "description": "holds the necessary configuration options for", "type": "object", + "required": [ + "defaultNodeSelector", + "projectRequestMessage", + "projectRequestTemplate", + "securityAllocator" + ], "properties": { - "durationMilliseconds": { - "description": "durationMilliseconds identifies how long the stage took to complete in milliseconds. Note: the duration of a stage can exceed the sum of the duration of the steps within the stage as not all actions are accounted for in explicit build steps.", - "type": "integer", - "format": "int64" + "defaultNodeSelector": { + "description": "DefaultNodeSelector holds default project node label selector", + "type": "string", + "default": "" }, - "name": { - "description": "name is a unique identifier for each build stage that occurs.", - "type": "string" + "projectRequestMessage": { + "description": "ProjectRequestMessage is the string presented to a user if they are unable to request a project via the projectrequest api endpoint", + "type": "string", + "default": "" }, - "startTime": { - "description": "startTime is a timestamp representing the server time when this Stage started. It is represented in RFC3339 form and is in UTC.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "projectRequestTemplate": { + "description": "ProjectRequestTemplate is the template to use for creating projects in response to projectrequest. It is in the format namespace/template and it is optional. If it is not specified, a default template is used.", + "type": "string", + "default": "" }, - "steps": { - "description": "steps contains details about each step that occurs during a build stage including start time and duration in milliseconds.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.StepInfo" - } + "securityAllocator": { + "description": "SecurityAllocator controls the automatic allocation of UIDs and MCS labels to a project. If nil, allocation is disabled.", + "$ref": "#/definitions/io.openshift.config.legacy.v1.SecurityAllocator" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "StageInfo", + "Kind": "ProjectConfig", "Scope": "Namespaced" } }, - "io.openshift.build.v1.StepInfo": { - "description": "StepInfo contains details about a build step.", + "io.openshift.config.legacy.v1.RFC2307Config": { + "description": "RFC2307Config holds the necessary configuration options to define how an LDAP group sync interacts with an LDAP server using the RFC2307 schema", "type": "object", + "required": [ + "groupsQuery", + "groupUIDAttribute", + "groupNameAttributes", + "groupMembershipAttributes", + "usersQuery", + "userUIDAttribute", + "userNameAttributes", + "tolerateMemberNotFoundErrors", + "tolerateMemberOutOfScopeErrors" + ], "properties": { - "durationMilliseconds": { - "description": "durationMilliseconds identifies how long the step took to complete in milliseconds.", - "type": "integer", - "format": "int64" + "groupMembershipAttributes": { + "description": "GroupMembershipAttributes defines which attributes on an LDAP group entry will be interpreted as its members. The values contained in those attributes must be queryable by your UserUIDAttribute", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "name": { - "description": "name is a unique identifier for each build step.", - "type": "string" + "groupNameAttributes": { + "description": "GroupNameAttributes defines which attributes on an LDAP group entry will be interpreted as its name to use for an OpenShift group", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "startTime": { - "description": "startTime is a timestamp representing the server time when this Step started. it is represented in RFC3339 form and is in UTC.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "build.openshift.io", - "Version": "v1", - "Kind": "StepInfo", - "Scope": "Namespaced" - } - }, - "io.openshift.build.v1.WebHookTrigger": { - "description": "WebHookTrigger is a trigger that gets invoked using a webhook type of post", - "type": "object", - "properties": { - "allowEnv": { - "description": "allowEnv determines whether the webhook can set environment variables; can only be set to true for GenericWebHook.", - "type": "boolean" + "groupUIDAttribute": { + "description": "GroupUIDAttributes defines which attribute on an LDAP group entry will be interpreted as its unique identifier. (ldapGroupUID)", + "type": "string", + "default": "" }, - "secret": { - "description": "secret used to validate requests. Deprecated: use SecretReference instead.", - "type": "string" + "groupsQuery": { + "description": "AllGroupsQuery holds the template for an LDAP query that returns group entries.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPQuery" }, - "secretReference": { - "description": "secretReference is a reference to a secret in the same namespace, containing the value to be validated when the webhook is invoked. The secret being referenced must contain a key named \"WebHookSecretKey\", the value of which will be checked against the value supplied in the webhook invocation.", - "$ref": "#/definitions/io.openshift.build.v1.SecretLocalReference" + "tolerateMemberNotFoundErrors": { + "description": "TolerateMemberNotFoundErrors determines the behavior of the LDAP sync job when missing user entries are encountered. If 'true', an LDAP query for users that doesn't find any will be tolerated and an only and error will be logged. If 'false', the LDAP sync job will fail if a query for users doesn't find any. The default value is 'false'. Misconfigured LDAP sync jobs with this flag set to 'true' can cause group membership to be removed, so it is recommended to use this flag with caution.", + "type": "boolean", + "default": false + }, + "tolerateMemberOutOfScopeErrors": { + "description": "TolerateMemberOutOfScopeErrors determines the behavior of the LDAP sync job when out-of-scope user entries are encountered. If 'true', an LDAP query for a user that falls outside of the base DN given for the all user query will be tolerated and only an error will be logged. If 'false', the LDAP sync job will fail if a user query would search outside of the base DN specified by the all user query. Misconfigured LDAP sync jobs with this flag set to 'true' can result in groups missing users, so it is recommended to use this flag with caution.", + "type": "boolean", + "default": false + }, + "userNameAttributes": { + "description": "UserNameAttributes defines which attributes on an LDAP user entry will be used, in order, as its OpenShift user name. The first attribute with a non-empty value is used. This should match your PreferredUsername setting for your LDAPPasswordIdentityProvider", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "userUIDAttribute": { + "description": "UserUIDAttribute defines which attribute on an LDAP user entry will be interpreted as its unique identifier. It must correspond to values that will be found from the GroupMembershipAttributes", + "type": "string", + "default": "" + }, + "usersQuery": { + "description": "AllUsersQuery holds the template for an LDAP query that returns user entries.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPQuery" } }, "x-fabric8-info": { "Type": "nested", - "Group": "build.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "WebHookTrigger", + "Kind": "RFC2307Config", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.AWSProviderSpec": { - "description": "AWSProviderSpec contains the required information to create a user policy in AWS.", + "io.openshift.config.legacy.v1.RegistryLocation": { + "description": "RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.", "type": "object", "required": [ - "statementEntries" + "domainName" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "statementEntries": { - "description": "StatementEntries contains a list of policy statements that should be associated with this credentials access key.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.cloudcredential.v1.StatementEntry" - } + "domainName": { + "description": "DomainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.", + "type": "string", + "default": "" }, - "stsIAMRoleARN": { - "description": "stsIAMRoleARN is the Amazon Resource Name (ARN) of an IAM Role which was created manually for the associated CredentialsRequest. The presence of an stsIAMRoleARN within the AWSProviderSpec initiates creation of a secret containing IAM Role details necessary for assuming the IAM Role via Amazon's Secure Token Service.", - "type": "string" + "insecure": { + "description": "Insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.", + "type": "boolean" } }, "x-fabric8-info": { - "Type": "object", - "Group": "cloudcredential.openshift.io", + "Type": "nested", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "AWSProviderSpec", + "Kind": "RegistryLocation", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.AWSProviderStatus": { - "description": "AWSProviderStatus containes the status of the credentials request in AWS.", + "io.openshift.config.legacy.v1.RemoteConnectionInfo": { + "description": "RemoteConnectionInfo holds information necessary for establishing a remote connection", "type": "object", "required": [ - "user", - "policy" + "url", + "ca", + "certFile", + "keyFile" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "ca": { + "description": "CA is the CA for verifying TLS connections", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "certFile": { + "description": "CertFile is a file containing a PEM-encoded certificate", + "type": "string", + "default": "" }, - "policy": { - "description": "Policy is the name of the policy attached to the user in AWS.", + "keyFile": { + "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", "type": "string", "default": "" }, - "user": { - "description": "User is the name of the User created in AWS for these credentials.", + "url": { + "description": "URL is the remote URL to connect to", "type": "string", "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "cloudcredential.openshift.io", + "Type": "nested", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "AWSProviderStatus", + "Kind": "RemoteConnectionInfo", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.AccessPolicy": { - "description": "AccessPolicy is a definition of an IAM access policy", + "io.openshift.config.legacy.v1.RequestHeaderAuthenticationOptions": { + "description": "RequestHeaderAuthenticationOptions provides options for setting up a front proxy against the entire API instead of against the /oauth endpoint.", "type": "object", "required": [ - "attributes", - "roles" + "clientCA", + "clientCommonNames", + "usernameHeaders", + "groupHeaders", + "extraHeaderPrefixes" ], "properties": { - "attributes": { - "description": "Attributes identify the resources to which this policy applies", + "clientCA": { + "description": "ClientCA is a file with the trusted signer certs. It is required.", + "type": "string", + "default": "" + }, + "clientCommonNames": { + "description": "ClientCommonNames is a required list of common names to require a match from.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.cloudcredential.v1.ResourceAttribute" + "type": "string", + "default": "" } }, - "roles": { - "description": "Roles are the IAM roles assigned to this policy", + "extraHeaderPrefixes": { + "description": "ExtraHeaderPrefixes is the set of request header prefixes to inspect for user extra. X-Remote-Extra- is suggested.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "groupHeaders": { + "description": "GroupNameHeader is the set of headers to check for group information. All are unioned.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "usernameHeaders": { + "description": "UsernameHeaders is the list of headers to check for user information. First hit wins.", "type": "array", "items": { "type": "string", @@ -57576,41 +63492,58 @@ }, "x-fabric8-info": { "Type": "nested", - "Group": "cloudcredential.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "AccessPolicy", + "Kind": "RequestHeaderAuthenticationOptions", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.AzureProviderSpec": { - "description": "AzureProviderSpec contains the required information to create RBAC role bindings for Azure.", + "io.openshift.config.legacy.v1.RequestHeaderIdentityProvider": { + "description": "RequestHeaderIdentityProvider provides identities for users authenticating using request header credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "roleBindings" + "loginURL", + "challengeURL", + "clientCA", + "clientCommonNames", + "headers", + "preferredUsernameHeaders", + "nameHeaders", + "emailHeaders" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "azureClientID": { - "description": "The following fields are only required for Azure Workload Identity. AzureClientID is the ID of the specific application you created in Azure", - "type": "string" + "challengeURL": { + "description": "ChallengeURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}", + "type": "string", + "default": "" }, - "azureRegion": { - "description": "AzureRegion is the geographic region of the Azure service.", - "type": "string" + "clientCA": { + "description": "ClientCA is a file with the trusted signer certs. If empty, no request verification is done, and any direct request to the OAuth server can impersonate any identity from this provider, merely by setting a request header.", + "type": "string", + "default": "" }, - "azureSubscriptionID": { - "description": "Each Azure subscription has an ID associated with it, as does the tenant to which a subscription belongs. AzureSubscriptionID is the ID of the subscription.", - "type": "string" + "clientCommonNames": { + "description": "ClientCommonNames is an optional list of common names to require a match from. If empty, any client certificate validated against the clientCA bundle is considered authoritative.", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "azureTenantID": { - "description": "AzureTenantID is the ID of the tenant to which the subscription belongs.", - "type": "string" + "emailHeaders": { + "description": "EmailHeaders is the set of headers to check for the email address", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "dataPermissions": { - "description": "DataPermissions is the list of Azure data permissions required to create a more fine-grained custom role to satisfy the CredentialsRequest. The DataPermissions field may be provided in addition to RoleBindings. When both fields are specified, the user-assigned managed identity will have union of permissions defined from both DataPermissions and RoleBindings.", + "headers": { + "description": "Headers is the set of headers to check for identity information", "type": "array", "items": { "type": "string", @@ -57621,858 +63554,1130 @@ "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "permissions": { - "description": "Permissions is the list of Azure permissions required to create a more fine-grained custom role to satisfy the CredentialsRequest. The Permissions field may be provided in addition to RoleBindings. When both fields are specified, the user-assigned managed identity will have union of permissions defined from both Permissions and RoleBindings.", + "loginURL": { + "description": "LoginURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}", + "type": "string", + "default": "" + }, + "nameHeaders": { + "description": "NameHeaders is the set of headers to check for the display name", "type": "array", "items": { "type": "string", "default": "" } }, - "roleBindings": { - "description": "RoleBindings contains a list of roles that should be associated with the minted credential.", + "preferredUsernameHeaders": { + "description": "PreferredUsernameHeaders is the set of headers to check for the preferred username", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.cloudcredential.v1.RoleBinding" + "type": "string", + "default": "" } } }, "x-fabric8-info": { "Type": "object", - "Group": "cloudcredential.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "AzureProviderSpec", + "Kind": "RequestHeaderIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.AzureProviderStatus": { - "description": "AzureProviderStatus contains the status of the credentials request in Azure.", + "io.openshift.config.legacy.v1.RoutingConfig": { + "description": "RoutingConfig holds the necessary configuration options for routing to subdomains", "type": "object", "required": [ - "name", - "appID", - "secretLastResourceVersion" + "subdomain" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "subdomain": { + "description": "Subdomain is the suffix appended to $service.$namespace. to form the default route hostname DEPRECATED: This field is being replaced by routers setting their own defaults. This is the \"default\" route.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "legacy.config.openshift.io", + "Version": "v1", + "Kind": "RoutingConfig", + "Scope": "Namespaced" + } + }, + "io.openshift.config.legacy.v1.SecurityAllocator": { + "description": "SecurityAllocator controls the automatic allocation of UIDs and MCS labels to a project. If nil, allocation is disabled.", + "type": "object", + "required": [ + "uidAllocatorRange", + "mcsAllocatorRange", + "mcsLabelsPerProject" + ], + "properties": { + "mcsAllocatorRange": { + "description": "MCSAllocatorRange defines the range of MCS categories that will be assigned to namespaces. The format is \"\u003cprefix\u003e/\u003cnumberOfLabels\u003e[,\u003cmaxCategory\u003e]\". The default is \"s0/2\" and will allocate from c0 -\u003e c1023, which means a total of 535k labels are available (1024 choose 2 ~ 535k). If this value is changed after startup, new projects may receive labels that are already allocated to other projects. Prefix may be any valid SELinux set of terms (including user, role, and type), although leaving them as the default will allow the server to set them automatically.\n\nExamples: * s0:/2 - Allocate labels from s0:c0,c0 to s0:c511,c511 * s0:/2,512 - Allocate labels from s0:c0,c0,c0 to s0:c511,c511,511", + "type": "string", + "default": "" }, - "appID": { - "description": "AppID is the application id of the service principal created in Azure for these credentials.", + "mcsLabelsPerProject": { + "description": "MCSLabelsPerProject defines the number of labels that should be reserved per project. The default is 5 to match the default UID and MCS ranges (100k namespaces, 535k/5 labels).", + "type": "integer", + "format": "int32", + "default": 0 + }, + "uidAllocatorRange": { + "description": "UIDAllocatorRange defines the total set of Unix user IDs (UIDs) that will be allocated to projects automatically, and the size of the block each namespace gets. For example, 1000-1999/10 will allocate ten UIDs per namespace, and will be able to allocate up to 100 blocks before running out of space. The default is to allocate from 1 billion to 2 billion in 10k blocks (which is the expected size of the ranges container images will use once user namespaces are started).", "type": "string", "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "legacy.config.openshift.io", + "Version": "v1", + "Kind": "SecurityAllocator", + "Scope": "Namespaced" + } + }, + "io.openshift.config.legacy.v1.ServiceAccountConfig": { + "description": "ServiceAccountConfig holds the necessary configuration options for a service account", + "type": "object", + "required": [ + "managedNames", + "limitSecretReferences", + "privateKeyFile", + "publicKeyFiles", + "masterCA" + ], + "properties": { + "limitSecretReferences": { + "description": "LimitSecretReferences controls whether or not to allow a service account to reference any secret in a namespace without explicitly referencing them", + "type": "boolean", + "default": false }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "managedNames": { + "description": "ManagedNames is a list of service account names that will be auto-created in every namespace. If no names are specified, the ServiceAccountsController will not be started.", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "name": { - "description": "ServicePrincipalName is the name of the service principal created in Azure for these credentials.", + "masterCA": { + "description": "MasterCA is the CA for verifying the TLS connection back to the master. The service account controller will automatically inject the contents of this file into pods so they can verify connections to the master.", "type": "string", "default": "" }, - "secretLastResourceVersion": { - "description": "SecretLastResourceVersion is the resource version of the secret resource that was last synced. Used to determine if the object has changed and requires a sync.", + "privateKeyFile": { + "description": "PrivateKeyFile is a file containing a PEM-encoded private RSA key, used to sign service account tokens. If no private key is specified, the service account TokensController will not be started.", "type": "string", "default": "" + }, + "publicKeyFiles": { + "description": "PublicKeyFiles is a list of files, each containing a PEM-encoded public RSA key. (If any file contains a private key, the public portion of the key is used) The list of public keys is used to verify presented service account tokens. Each key is tried in order until the list is exhausted or verification succeeds. If no keys are specified, no service account authentication will be available.", + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { - "Type": "object", - "Group": "cloudcredential.openshift.io", + "Type": "nested", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "AzureProviderStatus", + "Kind": "ServiceAccountConfig", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.CredentialsRequest": { - "description": "CredentialsRequest is the Schema for the credentialsrequests API", + "io.openshift.config.legacy.v1.ServiceServingCert": { + "description": "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.", "type": "object", "required": [ - "spec" + "signer" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/io.openshift.cloudcredential.v1.CredentialsRequestSpec" - }, - "status": { - "default": {}, - "$ref": "#/definitions/io.openshift.cloudcredential.v1.CredentialsRequestStatus" + "signer": { + "description": "Signer holds the signing information used to automatically sign serving certificates. If this value is nil, then certs are not signed automatically.", + "$ref": "#/definitions/io.openshift.config.legacy.v1.CertInfo" } }, "x-fabric8-info": { - "Type": "object", - "Group": "cloudcredential.openshift.io", + "Type": "nested", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "CredentialsRequest", + "Kind": "ServiceServingCert", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.CredentialsRequestCondition": { - "description": "CredentialsRequestCondition contains details for any of the conditions on a CredentialsRequest object", + "io.openshift.config.legacy.v1.ServingInfo": { + "description": "ServingInfo holds information about serving web pages", "type": "object", "required": [ - "type", - "status" + "bindAddress", + "bindNetwork", + "certFile", + "keyFile", + "clientCA", + "namedCertificates" ], "properties": { - "lastProbeTime": { - "description": "LastProbeTime is the last time we probed the condition", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "bindAddress": { + "description": "BindAddress is the ip:port to serve on", + "type": "string", + "default": "" }, - "lastTransitionTime": { - "description": "LastTransitionTime is the last time the condition transitioned from one status to another.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "bindNetwork": { + "description": "BindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", + "type": "string", + "default": "" }, - "message": { - "description": "Message is a human-readable message indicating details about the last transition", - "type": "string" + "certFile": { + "description": "CertFile is a file containing a PEM-encoded certificate", + "type": "string", + "default": "" }, - "reason": { - "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition", - "type": "string" + "cipherSuites": { + "description": "CipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "status": { - "description": "Status is the status of the condition", + "clientCA": { + "description": "ClientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates", "type": "string", "default": "" }, - "type": { - "description": "Type is the specific type of the condition", + "keyFile": { + "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", "type": "string", "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "cloudcredential.openshift.io", - "Version": "v1", - "Kind": "CredentialsRequestCondition", - "Scope": "Namespaced" - } - }, - "io.openshift.cloudcredential.v1.CredentialsRequestList": { - "description": "CredentialsRequestList contains a list of CredentialsRequest", - "type": "object", - "required": [ - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + }, + "minTLSVersion": { + "description": "MinTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants", "type": "string" }, - "items": { + "namedCertificates": { + "description": "NamedCertificates is a list of certificates to use to secure requests to specific hostnames", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.cloudcredential.v1.CredentialsRequest" + "$ref": "#/definitions/io.openshift.config.legacy.v1.NamedCertificate" } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "list", - "Group": "cloudcredential.openshift.io", + "Type": "nested", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "CredentialsRequestList", + "Kind": "ServingInfo", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.CredentialsRequestSpec": { - "description": "CredentialsRequestSpec defines the desired state of CredentialsRequest", + "io.openshift.config.legacy.v1.SessionConfig": { + "description": "SessionConfig specifies options for cookie-based sessions. Used by AuthRequestHandlerSession", "type": "object", "required": [ - "secretRef" + "sessionSecretsFile", + "sessionMaxAgeSeconds", + "sessionName" ], "properties": { - "cloudTokenPath": { - "description": "cloudTokenPath is the path where the Kubernetes ServiceAccount token (JSON Web Token) is mounted on the deployment for the workload requesting a credentials secret. The presence of this field in combination with fields such as spec.providerSpec.stsIAMRoleARN indicate that CCO should broker creation of a credentials secret containing fields necessary for token based authentication methods such as with the AWS Secure Token Service (STS).\n\ncloudTokenPath may also be used to specify the azure_federated_token_file path used in Azure configuration secrets generated by ccoctl. Defaults to \"/var/run/secrets/openshift/serviceaccount/token\".", - "type": "string" - }, - "providerSpec": { - "description": "ProviderSpec contains the cloud provider specific credentials specification.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "sessionMaxAgeSeconds": { + "description": "SessionMaxAgeSeconds specifies how long created sessions last. Used by AuthRequestHandlerSession", + "type": "integer", + "format": "int32", + "default": 0 }, - "secretRef": { - "description": "SecretRef points to the secret where the credentials should be stored once generated.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ObjectReference" + "sessionName": { + "description": "SessionName is the cookie name used to store the session", + "type": "string", + "default": "" }, - "serviceAccountNames": { - "description": "ServiceAccountNames contains a list of ServiceAccounts that will use permissions associated with this CredentialsRequest. This is not used by CCO, but the information is needed for being able to properly set up access control in the cloud provider when the ServiceAccounts are used as part of the cloud credentials flow.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "sessionSecretsFile": { + "description": "SessionSecretsFile is a reference to a file containing a serialized SessionSecrets object If no file is specified, a random signing and encryption key are generated at each server start", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "cloudcredential.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "CredentialsRequestSpec", + "Kind": "SessionConfig", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.CredentialsRequestStatus": { - "description": "CredentialsRequestStatus defines the observed state of CredentialsRequest", + "io.openshift.config.legacy.v1.SessionSecret": { + "description": "SessionSecret is a secret used to authenticate/decrypt cookie-based sessions", "type": "object", "required": [ - "provisioned", - "lastSyncGeneration" + "authentication", + "encryption" ], "properties": { - "conditions": { - "description": "Conditions includes detailed status for the CredentialsRequest", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.cloudcredential.v1.CredentialsRequestCondition" - } - }, - "lastSyncCloudCredsSecretResourceVersion": { - "description": "LastSyncCloudCredsSecretResourceVersion is the resource version of the cloud credentials secret resource when the credentials request resource was last synced. Used to determine if the cloud credentials have been updated since the last sync.", - "type": "string" - }, - "lastSyncGeneration": { - "description": "LastSyncGeneration is the generation of the credentials request resource that was last synced. Used to determine if the object has changed and requires a sync.", - "type": "integer", - "format": "int64", - "default": 0 - }, - "lastSyncTimestamp": { - "description": "LastSyncTimestamp is the time that the credentials were last synced.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "providerStatus": { - "description": "ProviderStatus contains cloud provider specific status.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "authentication": { + "description": "Authentication is used to authenticate sessions using HMAC. Recommended to use a secret with 32 or 64 bytes.", + "type": "string", + "default": "" }, - "provisioned": { - "description": "Provisioned is true once the credentials have been initially provisioned.", - "type": "boolean", - "default": false + "encryption": { + "description": "Encryption is used to encrypt sessions. Must be 16, 24, or 32 characters long, to select AES-128, AES-", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "cloudcredential.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "CredentialsRequestStatus", + "Kind": "SessionSecret", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.GCPProviderSpec": { - "description": "GCPProviderSpec contains the required information to create a service account with policy bindings in GCP.", + "io.openshift.config.legacy.v1.SessionSecrets": { + "description": "SessionSecrets list the secrets to use to sign/encrypt and authenticate/decrypt created sessions.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "predefinedRoles" + "secrets" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "audience": { - "description": "Audience that will be used with Workload Identity Federation. It should be formatted as follows: \"//iam.googleapis.com/projects/\u003cPROJECT_NUMBER\u003e/locations/global/workloadIdentityPools/\u003cPOOL_ID\u003e/providers/\u003cPROVIDER_ID\u003e\" For more information see https://cloud.google.com/iam/docs/workload-identity-federation-with-other-providers#create-credential-config", - "type": "string" - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "permissions": { - "description": "Permissions is the list of GCP permissions required to create a more fine-grained custom role to satisfy the CredentialsRequest. The Permissions field may be provided in addition to PredefinedRoles. When both fields are specified, the service account will have union of permissions defined from both Permissions and PredefinedRoles.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "predefinedRoles": { - "description": "PredefinedRoles is the list of GCP pre-defined roles that the CredentialsRequest requires.", + "secrets": { + "description": "Secrets is a list of secrets New sessions are signed and encrypted using the first secret. Existing sessions are decrypted/authenticated by each secret until one succeeds. This allows rotating secrets.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.SessionSecret" } - }, - "serviceAccountEmail": { - "description": "ServiceAccountEmail that will be impersonated during Workload Identity Federation.", - "type": "string" - }, - "skipServiceCheck": { - "description": "SkipServiceCheck can be set to true to skip the check whether the requested roles or permissions have the necessary services enabled", - "type": "boolean" } }, "x-fabric8-info": { "Type": "object", - "Group": "cloudcredential.openshift.io", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "GCPProviderSpec", + "Kind": "SessionSecrets", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.GCPProviderStatus": { - "description": "GCPProviderStatus contains the status of the GCP credentials request.", + "io.openshift.config.legacy.v1.SourceStrategyDefaultsConfig": { + "description": "SourceStrategyDefaultsConfig contains values that apply to builds using the source strategy.", + "type": "object", + "properties": { + "incremental": { + "description": "incremental indicates if s2i build strategies should perform an incremental build or not", + "type": "boolean" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "legacy.config.openshift.io", + "Version": "v1", + "Kind": "SourceStrategyDefaultsConfig", + "Scope": "Namespaced" + } + }, + "io.openshift.config.legacy.v1.StringSource": { + "description": "StringSource allows specifying a string inline, or externally via env var or file. When it contains only a string value, it marshals to a simple JSON string.", "type": "object", "required": [ - "serviceAccountID" + "value", + "env", + "file", + "keyFile" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "env": { + "description": "Env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "file": { + "description": "File references a file containing the cleartext value, or an encrypted value if a keyFile is specified.", + "type": "string", + "default": "" }, - "roleID": { - "description": "RoleID is the ID of the custom role created in GCP for the requested permissions apart from permissions granted by the pre-defined roles. RoleID is set by the Cloud Credential Operator controllers and should not be set manually.", - "type": "string" + "keyFile": { + "description": "KeyFile references a file containing the key to use to decrypt the value.", + "type": "string", + "default": "" }, - "serviceAccountID": { - "description": "ServiceAccountID is the ID of the service account created in GCP for the requested credentials.", + "value": { + "description": "Value specifies the cleartext value, or an encrypted value if keyFile is specified.", "type": "string", "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "cloudcredential.openshift.io", + "Type": "nested", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "GCPProviderStatus", + "Kind": "StringSource", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.IBMCloudPowerVSProviderSpec": { - "description": "IBMCloudPowerVSProviderSpec is the specification of the credentials request in IBM Cloud Power VS.", + "io.openshift.config.legacy.v1.StringSourceSpec": { + "description": "StringSourceSpec specifies a string value, or external location", "type": "object", "required": [ - "policies" + "value", + "env", + "file", + "keyFile" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "env": { + "description": "Env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "file": { + "description": "File references a file containing the cleartext value, or an encrypted value if a keyFile is specified.", + "type": "string", + "default": "" }, - "policies": { - "description": "Policies are a list of access policies to create for the generated credentials", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.cloudcredential.v1.AccessPolicy" - } + "keyFile": { + "description": "KeyFile references a file containing the key to use to decrypt the value.", + "type": "string", + "default": "" + }, + "value": { + "description": "Value specifies the cleartext value, or an encrypted value if keyFile is specified.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "cloudcredential.openshift.io", + "Type": "nested", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "IBMCloudPowerVSProviderSpec", + "Kind": "StringSourceSpec", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.IBMCloudPowerVSProviderStatus": { - "description": "IBMCloudPowerVSProviderStatus contains the status of the IBM Cloud Power VS credentials request.", + "io.openshift.config.legacy.v1.TokenConfig": { + "description": "TokenConfig holds the necessary configuration options for authorization and access tokens", "type": "object", + "required": [ + "authorizeTokenMaxAgeSeconds", + "accessTokenMaxAgeSeconds" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "accessTokenInactivityTimeoutSeconds": { + "description": "AccessTokenInactivityTimeoutSeconds defined the default token inactivity timeout for tokens granted by any client. Setting it to nil means the feature is completely disabled (default) The default setting can be overriden on OAuthClient basis. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. Valid values are: - 0: Tokens never time out - X: Tokens time out if there is no activity for X seconds The current minimum allowed value for X is 300 (5 minutes)", + "type": "integer", + "format": "int32" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "accessTokenMaxAgeSeconds": { + "description": "AccessTokenMaxAgeSeconds defines the maximum age of access tokens", + "type": "integer", + "format": "int32", + "default": 0 + }, + "authorizeTokenMaxAgeSeconds": { + "description": "AuthorizeTokenMaxAgeSeconds defines the maximum age of authorize tokens", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { - "Type": "object", - "Group": "cloudcredential.openshift.io", + "Type": "nested", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "IBMCloudPowerVSProviderStatus", + "Kind": "TokenConfig", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.IBMCloudProviderSpec": { - "description": "IBMCloudProviderSpec is the specification of the credentials request in IBM Cloud.", + "io.openshift.config.legacy.v1.UserAgentDenyRule": { + "description": "UserAgentDenyRule adds a rejection message that can be used to help a user figure out how to get an approved client", "type": "object", "required": [ - "policies" + "regex", + "httpVerbs", + "rejectionMessage" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "policies": { - "description": "Policies are a list of access policies to create for the generated credentials", + "httpVerbs": { + "description": "HTTPVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.cloudcredential.v1.AccessPolicy" + "type": "string", + "default": "" } + }, + "regex": { + "description": "UserAgentRegex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f", + "type": "string", + "default": "" + }, + "rejectionMessage": { + "description": "RejectionMessage is the message shown when rejecting a client. If it is not a set, the default message is used.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "cloudcredential.openshift.io", + "Type": "nested", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "IBMCloudProviderSpec", + "Kind": "UserAgentDenyRule", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.IBMCloudProviderStatus": { - "description": "IBMCloudProviderStatus contains the status of the IBM Cloud credentials request.", + "io.openshift.config.legacy.v1.UserAgentMatchRule": { + "description": "UserAgentMatchRule describes how to match a given request based on User-Agent and HTTPVerb", "type": "object", + "required": [ + "regex", + "httpVerbs" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "httpVerbs": { + "description": "HTTPVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "regex": { + "description": "UserAgentRegex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "cloudcredential.openshift.io", + "Type": "nested", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "IBMCloudProviderStatus", + "Kind": "UserAgentMatchRule", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.KubevirtProviderSpec": { - "description": "KubevirtProviderSpec the specification of the credentials request in Kubevirt.", + "io.openshift.config.legacy.v1.UserAgentMatchingConfig": { + "description": "UserAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!", "type": "object", + "required": [ + "requiredClients", + "deniedClients", + "defaultRejectionMessage" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "defaultRejectionMessage": { + "description": "DefaultRejectionMessage is the message shown when rejecting a client. If it is not a set, a generic message is given.", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "deniedClients": { + "description": "If this list is non-empty, then a User-Agent must not match any of the UserAgentRegexes", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.UserAgentDenyRule" + } + }, + "requiredClients": { + "description": "If this list is non-empty, then a User-Agent must match one of the UserAgentRegexes to be allowed", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.legacy.v1.UserAgentMatchRule" + } } }, "x-fabric8-info": { - "Type": "object", - "Group": "cloudcredential.openshift.io", + "Type": "nested", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "KubevirtProviderSpec", + "Kind": "UserAgentMatchingConfig", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.KubevirtProviderStatus": { - "description": "KubevirtProviderSpec contains the status of the credentials request in Kubevirt.", + "io.openshift.config.legacy.v1.WebhookTokenAuthenticator": { + "description": "WebhookTokenAuthenticators holds the necessary configuation options for external token authenticators", "type": "object", + "required": [ + "configFile", + "cacheTTL" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "cacheTTL": { + "description": "CacheTTL indicates how long an authentication result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get a default timeout of 2 minutes. If zero (e.g. \"0m\"), caching is disabled", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "configFile": { + "description": "ConfigFile is a path to a Kubeconfig file with the webhook configuration", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "cloudcredential.openshift.io", + "Type": "nested", + "Group": "legacy.config.openshift.io", "Version": "v1", - "Kind": "KubevirtProviderStatus", + "Kind": "WebhookTokenAuthenticator", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.NutanixProviderSpec": { - "description": "NutanixProviderSpec the specification of the credentials request in Nutanix.", + "io.openshift.config.openshiftcontrolplane.v1.APIServers": { "type": "object", + "required": [ + "perGroupOptions" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "perGroupOptions": { + "description": "perGroupOptions is a list of enabled/disabled API servers in addition to the defaults", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.PerGroupOptions" + } } }, "x-fabric8-info": { - "Type": "object", - "Group": "cloudcredential.openshift.io", + "Type": "nested", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "NutanixProviderSpec", + "Kind": "APIServers", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.NutanixProviderStatus": { - "description": "NutanixProviderStatus contains the status of the credentials request in Nutanix.", + "io.openshift.config.openshiftcontrolplane.v1.BuildControllerConfig": { "type": "object", + "required": [ + "imageTemplateFormat", + "buildDefaults", + "buildOverrides", + "additionalTrustedCA" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "additionalTrustedCA": { + "description": "additionalTrustedCA is a path to a pem bundle file containing additional CAs that should be trusted for image pushes and pulls during builds.", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "buildDefaults": { + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.BuildDefaultsConfig" + }, + "buildOverrides": { + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.BuildOverridesConfig" + }, + "imageTemplateFormat": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ImageConfig" } }, "x-fabric8-info": { - "Type": "object", - "Group": "cloudcredential.openshift.io", + "Type": "nested", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "NutanixProviderStatus", + "Kind": "BuildControllerConfig", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.OpenStackProviderSpec": { - "description": "OpenStackProviderSpec the specification of the credentials request in OpenStack.", + "io.openshift.config.openshiftcontrolplane.v1.BuildDefaultsConfig": { + "description": "BuildDefaultsConfig controls the default information for Builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "properties": { + "annotations": { + "description": "annotations are annotations that will be added to the build pod", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "env": { + "description": "env is a set of default environment variables that will be applied to the build if the specified variables do not exist on the build", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" + } + }, + "gitHTTPProxy": { + "description": "gitHTTPProxy is the location of the HTTPProxy for Git source", + "type": "string" + }, + "gitHTTPSProxy": { + "description": "gitHTTPSProxy is the location of the HTTPSProxy for Git source", + "type": "string" + }, + "gitNoProxy": { + "description": "gitNoProxy is the list of domains for which the proxy should not be used", + "type": "string" + }, + "imageLabels": { + "description": "imageLabels is a list of labels that are applied to the resulting image. User can override a default label by providing a label with the same name in their Build/BuildConfig.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.ImageLabel" + } + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + }, + "nodeSelector": { + "description": "nodeSelector is a selector which must be true for the build pod to fit on a node", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "resources": { + "description": "resources defines resource requirements to execute the build.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" + }, + "sourceStrategyDefaults": { + "description": "sourceStrategyDefaults are default values that apply to builds using the source strategy.", + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.SourceStrategyDefaultsConfig" } }, "x-fabric8-info": { "Type": "object", - "Group": "cloudcredential.openshift.io", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "OpenStackProviderSpec", + "Kind": "BuildDefaultsConfig", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.OpenStackProviderStatus": { - "description": "OpenStackProviderStatus contains the status of the credentials request in OpenStack.", + "io.openshift.config.openshiftcontrolplane.v1.BuildOverridesConfig": { + "description": "BuildOverridesConfig controls override settings for builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "properties": { + "annotations": { + "description": "annotations are annotations that will be added to the build pod", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "forcePull": { + "description": "forcePull overrides, if set, the equivalent value in the builds, i.e. false disables force pull for all builds, true enables force pull for all builds, independently of what each build specifies itself", + "type": "boolean" + }, + "imageLabels": { + "description": "imageLabels is a list of labels that are applied to the resulting image. If user provided a label in their Build/BuildConfig with the same name as one in this list, the user's label will be overwritten.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.build.v1.ImageLabel" + } + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + }, + "nodeSelector": { + "description": "nodeSelector is a selector which must be true for the build pod to fit on a node", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "tolerations": { + "description": "tolerations is a list of Tolerations that will override any existing tolerations set on a build pod.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" + } } }, "x-fabric8-info": { "Type": "object", - "Group": "cloudcredential.openshift.io", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "OpenStackProviderStatus", + "Kind": "BuildOverridesConfig", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.OvirtProviderSpec": { - "description": "OvirtProviderSpec the specification of the credentials request in Ovirt.", + "io.openshift.config.openshiftcontrolplane.v1.ClusterNetworkEntry": { + "description": "ClusterNetworkEntry defines an individual cluster network. The CIDRs cannot overlap with other cluster network CIDRs, CIDRs reserved for external ips, CIDRs reserved for service networks, and CIDRs reserved for ingress ips.", "type": "object", + "required": [ + "cidr", + "hostSubnetLength" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "cidr": { + "description": "CIDR defines the total range of a cluster networks address space.", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "hostSubnetLength": { + "description": "HostSubnetLength is the number of bits of the accompanying CIDR address to allocate to each node. eg, 8 would mean that each node would have a /24 slice of the overlay network for its pod.", + "type": "integer", + "format": "int64", + "default": 0 } }, "x-fabric8-info": { - "Type": "object", - "Group": "cloudcredential.openshift.io", + "Type": "nested", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "OvirtProviderSpec", + "Kind": "ClusterNetworkEntry", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.OvirtProviderStatus": { - "description": "OvirtProviderStatus contains the status of the credentials request in Ovirt.", + "io.openshift.config.openshiftcontrolplane.v1.DeployerControllerConfig": { "type": "object", + "required": [ + "imageTemplateFormat" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "imageTemplateFormat": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ImageConfig" } }, "x-fabric8-info": { - "Type": "object", - "Group": "cloudcredential.openshift.io", + "Type": "nested", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "OvirtProviderStatus", + "Kind": "DeployerControllerConfig", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.ProviderCodec": { - "description": "ProviderCodec is a runtime codec for providers.", + "io.openshift.config.openshiftcontrolplane.v1.DockerPullSecretControllerConfig": { "type": "object", "required": [ - "encoder", - "decoder" + "registryURLs", + "internalRegistryHostname" ], "properties": { - "decoder": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.Decoder" + "internalRegistryHostname": { + "description": "internalRegistryHostname is the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format. Docker pull secrets will be generated for this registry.", + "type": "string", + "default": "" }, - "encoder": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.Encoder" + "registryURLs": { + "description": "registryURLs is a list of urls that the docker pull secrets should be valid for.", + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "cloudcredential.openshift.io", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "ProviderCodec", + "Kind": "DockerPullSecretControllerConfig", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.ResourceAttribute": { - "description": "ResourceAttribute is an attribute associated with a resource.", + "io.openshift.config.openshiftcontrolplane.v1.FrontProxyConfig": { "type": "object", "required": [ - "name", - "value" + "clientCA", + "allowedNames", + "usernameHeaders", + "groupHeaders", + "extraHeaderPrefixes" ], "properties": { - "name": { - "description": "Name is the name of an attribute.", + "allowedNames": { + "description": "allowedNames is an optional list of common names to require a match from.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "clientCA": { + "description": "clientCA is a path to the CA bundle to use to verify the common name of the front proxy's client cert", "type": "string", "default": "" }, - "operator": { - "description": "Operator is the operator of an attribute.", - "type": "string" + "extraHeaderPrefixes": { + "description": "extraHeaderPrefixes is the set of header prefixes to check for user extra", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "value": { - "description": "Value is the value of an attribute.", - "type": "string", - "default": "" + "groupHeaders": { + "description": "groupHeaders is the set of headers to check for groups", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "usernameHeaders": { + "description": "usernameHeaders is the set of headers to check for the username", + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "cloudcredential.openshift.io", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "ResourceAttribute", + "Kind": "FrontProxyConfig", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.RoleBinding": { - "description": "RoleBinding models part of the Azure RBAC Role Binding", + "io.openshift.config.openshiftcontrolplane.v1.ImageConfig": { + "description": "ImageConfig holds the necessary configuration options for building image names for system components", "type": "object", "required": [ - "role" + "format", + "latest" ], "properties": { - "role": { - "description": "Role defines a set of permissions that should be associated with the minted credential.", + "format": { + "description": "Format is the format of the name to be built for the system component", "type": "string", "default": "" + }, + "latest": { + "description": "Latest determines if the latest tag will be pulled from the registry", + "type": "boolean", + "default": false } }, "x-fabric8-info": { "Type": "nested", - "Group": "cloudcredential.openshift.io", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "RoleBinding", + "Kind": "ImageConfig", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.StatementEntry": { - "description": "StatementEntry models an AWS policy statement entry.", + "io.openshift.config.openshiftcontrolplane.v1.ImageImportControllerConfig": { "type": "object", "required": [ - "effect", - "action", - "resource" + "maxScheduledImageImportsPerMinute", + "disableScheduledImport", + "scheduledImageImportMinimumIntervalSeconds" ], "properties": { - "action": { - "description": "Action describes the particular AWS service actions that should be allowed or denied. (i.e. ec2:StartInstances, iam:ChangePassword)", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "effect": { - "description": "Effect indicates if this policy statement is to Allow or Deny.", - "type": "string", - "default": "" + "disableScheduledImport": { + "description": "disableScheduledImport allows scheduled background import of images to be disabled.", + "type": "boolean", + "default": false }, - "policyCondition": { - "description": "PolicyCondition specifies under which condition StatementEntry will apply", - "type": "object", - "additionalProperties": { - "type": "object", - "additionalProperties": { - "type": "object" - } - } + "maxScheduledImageImportsPerMinute": { + "description": "maxScheduledImageImportsPerMinute is the maximum number of image streams that will be imported in the background per minute. The default value is 60. Set to -1 for unlimited.", + "type": "integer", + "format": "int32", + "default": 0 }, - "resource": { - "description": "Resource specifies the object(s) this statement should apply to. (or \"*\" for all)", - "type": "string", - "default": "" + "scheduledImageImportMinimumIntervalSeconds": { + "description": "scheduledImageImportMinimumIntervalSeconds is the minimum number of seconds that can elapse between when image streams scheduled for background import are checked against the upstream repository. The default value is 15 minutes.", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "cloudcredential.openshift.io", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "StatementEntry", + "Kind": "ImageImportControllerConfig", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.VSpherePermission": { - "description": "VSpherePermission captures the details of the privileges being requested for the list of entities.", + "io.openshift.config.openshiftcontrolplane.v1.ImagePolicyConfig": { "type": "object", "required": [ - "privileges" + "maxImagesBulkImportedPerRepository", + "allowedRegistriesForImport", + "internalRegistryHostname", + "externalRegistryHostnames", + "additionalTrustedCA" ], "properties": { - "privileges": { - "description": "Privileges is the list of access being requested.", + "additionalTrustedCA": { + "description": "additionalTrustedCA is a path to a pem bundle file containing additional CAs that should be trusted during imagestream import.", + "type": "string", + "default": "" + }, + "allowedRegistriesForImport": { + "description": "allowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.RegistryLocation" + } + }, + "externalRegistryHostnames": { + "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", "type": "array", "items": { "type": "string", "default": "" } + }, + "imageStreamImportMode": { + "description": "imageStreamImportMode provides the import mode value for imagestreams. It can be `Legacy` or `PreserveOriginal`. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.If this value is specified, this setting is applied to all newly created imagestreams which do not have the value set.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.", + "type": "string", + "default": "", + "enum": [ + "Legacy", + "PreserveOriginal" + ] + }, + "internalRegistryHostname": { + "description": "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format.", + "type": "string", + "default": "" + }, + "maxImagesBulkImportedPerRepository": { + "description": "maxImagesBulkImportedPerRepository controls the number of images that are imported when a user does a bulk import of a container repository. This number is set low to prevent users from importing large numbers of images accidentally. Set -1 for no limit.", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "cloudcredential.openshift.io", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "VSpherePermission", + "Kind": "ImagePolicyConfig", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.VSphereProviderSpec": { - "description": "VSphereProviderSpec contains the required information to create RBAC role bindings for VSphere.", + "io.openshift.config.openshiftcontrolplane.v1.IngressControllerConfig": { "type": "object", "required": [ - "permissions" + "ingressIPNetworkCIDR" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "permissions": { - "description": "Permissions contains a list of groups of privileges that are being requested.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.cloudcredential.v1.VSpherePermission" - } + "ingressIPNetworkCIDR": { + "description": "ingressIPNetworkCIDR controls the range to assign ingress ips from for services of type LoadBalancer on bare metal. If empty, ingress ips will not be assigned. It may contain a single CIDR that will be allocated from. For security reasons, you should ensure that this range does not overlap with the CIDRs reserved for external ips, nodes, pods, or services.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "cloudcredential.openshift.io", + "Type": "nested", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "VSphereProviderSpec", + "Kind": "IngressControllerConfig", "Scope": "Namespaced" } }, - "io.openshift.cloudcredential.v1.VSphereProviderStatus": { - "description": "VSphereProviderStatus contains the status of the credentials request in VSphere.", + "io.openshift.config.openshiftcontrolplane.v1.JenkinsPipelineConfig": { + "description": "JenkinsPipelineConfig holds configuration for the Jenkins pipeline strategy", "type": "object", "required": [ - "secretLastResourceVersion" + "autoProvisionEnabled", + "templateNamespace", + "templateName", + "serviceName", + "parameters" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "autoProvisionEnabled": { + "description": "autoProvisionEnabled determines whether a Jenkins server will be spawned from the provided template when the first build config in the project with type JenkinsPipeline is created. When not specified this option defaults to true.", + "type": "boolean" + }, + "parameters": { + "description": "parameters specifies a set of optional parameters to the Jenkins template.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "serviceName": { + "description": "serviceName is the name of the Jenkins service OpenShift uses to detect whether a Jenkins pipeline handler has already been installed in a project. This value *must* match a service name in the provided template.", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "templateName": { + "description": "templateName is the name of the default Jenkins template", + "type": "string", + "default": "" }, - "secretLastResourceVersion": { - "description": "SecretLastResourceVersion is the resource version of the secret resource that was last synced. Used to determine if the object has changed and requires a sync.", + "templateNamespace": { + "description": "templateNamespace contains the namespace name where the Jenkins template is stored", "type": "string", "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "cloudcredential.openshift.io", + "Type": "nested", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "VSphereProviderStatus", + "Kind": "JenkinsPipelineConfig", "Scope": "Namespaced" } }, - "io.openshift.config.kubecontrolplane.v1.AggregatorConfig": { - "description": "AggregatorConfig holds information required to make the aggregator function.", + "io.openshift.config.openshiftcontrolplane.v1.NetworkControllerConfig": { + "description": "MasterNetworkConfig to be passed to the compiled in network plugin", "type": "object", "required": [ - "proxyClientInfo" + "networkPluginName", + "clusterNetworks", + "serviceNetworkCIDR", + "vxlanPort" ], "properties": { - "proxyClientInfo": { - "description": "proxyClientInfo specifies the client cert/key to use when proxying to aggregated API servers", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.CertInfo" + "clusterNetworks": { + "description": "clusterNetworks contains a list of cluster networks that defines the global overlay networks L3 space.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ClusterNetworkEntry" + } + }, + "networkPluginName": { + "type": "string", + "default": "" + }, + "serviceNetworkCIDR": { + "type": "string", + "default": "" + }, + "vxlanPort": { + "type": "integer", + "format": "int64", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "kubecontrolplane.config.openshift.io", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "AggregatorConfig", + "Kind": "NetworkControllerConfig", "Scope": "Namespaced" } }, - "io.openshift.config.kubecontrolplane.v1.KubeAPIServerConfig": { + "io.openshift.config.openshiftcontrolplane.v1.OpenShiftAPIServerConfig": { "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ @@ -58482,18 +64687,15 @@ "storageConfig", "admission", "kubeClientConfig", - "authConfig", "aggregatorConfig", - "kubeletClientInfo", - "servicesSubnet", - "servicesNodePortRange", - "consolePublicURL", - "userAgentMatchingConfig", "imagePolicyConfig", "projectConfig", - "serviceAccountPublicKeyFiles", - "oauthConfig", - "apiServerArguments" + "routingConfig", + "serviceAccountOAuthGrantMethod", + "jenkinsPipelineConfig", + "cloudProviderFile", + "apiServerArguments", + "apiServers" ], "properties": { "admission": { @@ -58502,9 +64704,9 @@ "$ref": "#/definitions/io.openshift.config.v1.AdmissionConfig" }, "aggregatorConfig": { - "description": "aggregatorConfig has options for configuring the aggregator component of the API server.", + "description": "aggregatorConfig contains information about how to verify the aggregator front proxy", "default": {}, - "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.AggregatorConfig" + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.FrontProxyConfig" }, "apiServerArguments": { "type": "object", @@ -58516,6 +64718,11 @@ } } }, + "apiServers": { + "description": "apiServers holds information about enabled/disabled API servers", + "default": {}, + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.APIServers" + }, "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" @@ -58525,13 +64732,8 @@ "default": {}, "$ref": "#/definitions/io.openshift.config.v1.AuditConfig" }, - "authConfig": { - "description": "authConfig configures authentication options in addition to the standard oauth token and client certificate authenticators", - "default": {}, - "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.MasterAuthConfig" - }, - "consolePublicURL": { - "description": "DEPRECATED: consolePublicURL has been deprecated and setting it has no effect.", + "cloudProviderFile": { + "description": "cloudProviderFile points to the cloud config file", "type": "string", "default": "" }, @@ -58546,7 +64748,12 @@ "imagePolicyConfig": { "description": "imagePolicyConfig feeds the image policy admission plugin", "default": {}, - "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.KubeAPIServerImagePolicyConfig" + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ImagePolicyConfig" + }, + "jenkinsPipelineConfig": { + "description": "jenkinsPipelineConfig holds information about the default Jenkins template used for JenkinsPipeline build strategy.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.JenkinsPipelineConfig" }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", @@ -58556,35 +64763,18 @@ "default": {}, "$ref": "#/definitions/io.openshift.config.v1.KubeClientConfig" }, - "kubeletClientInfo": { - "description": "kubeletClientInfo contains information about how to connect to kubelets", - "default": {}, - "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.KubeletConnectionInfo" - }, - "oauthConfig": { - "description": "oauthConfig, if present start the /oauth endpoint in this process", - "$ref": "#/definitions/io.openshift.config.osin.v1.OAuthConfig" - }, "projectConfig": { "description": "projectConfig feeds an admission plugin", "default": {}, - "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.KubeAPIServerProjectConfig" - }, - "serviceAccountPublicKeyFiles": { - "description": "serviceAccountPublicKeyFiles is a list of files, each containing a PEM-encoded public RSA key. (If any file contains a private key, the public portion of the key is used) The list of public keys is used to verify presented service account tokens. Each key is tried in order until the list is exhausted or verification succeeds. If no keys are specified, no service account authentication will be available.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ProjectConfig" }, - "servicesNodePortRange": { - "description": "servicesNodePortRange is the range to use for assigning service public ports on a host.", - "type": "string", - "default": "" + "routingConfig": { + "description": "routingConfig holds information about routing and route generation", + "default": {}, + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.RoutingConfig" }, - "servicesSubnet": { - "description": "servicesSubnet is the subnet to use for assigning service IPs", + "serviceAccountOAuthGrantMethod": { + "description": "serviceAccountOAuthGrantMethod is used for determining client authorization for service account oauth client. It must be either: deny, prompt, or \"\"", "type": "string", "default": "" }, @@ -58597,477 +64787,309 @@ "description": "storageConfig contains information about how to use", "default": {}, "$ref": "#/definitions/io.openshift.config.v1.EtcdStorageConfig" - }, - "userAgentMatchingConfig": { - "description": "UserAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!", - "default": {}, - "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.UserAgentMatchingConfig" } }, "x-fabric8-info": { "Type": "object", - "Group": "kubecontrolplane.config.openshift.io", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "KubeAPIServerConfig", + "Kind": "OpenShiftAPIServerConfig", "Scope": "Namespaced" } }, - "io.openshift.config.kubecontrolplane.v1.KubeAPIServerImagePolicyConfig": { + "io.openshift.config.openshiftcontrolplane.v1.OpenShiftControllerManagerConfig": { + "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "internalRegistryHostname", - "externalRegistryHostnames" + "kubeClientConfig", + "servingInfo", + "leaderElection", + "controllers", + "resourceQuota", + "serviceServingCert", + "deployer", + "build", + "serviceAccount", + "dockerPullSecret", + "network", + "ingress", + "imageImport", + "securityAllocator", + "featureGates" ], "properties": { - "externalRegistryHostnames": { - "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "build": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.BuildControllerConfig" + }, + "controllers": { + "description": "controllers is a list of controllers to enable. '*' enables all on-by-default controllers, 'foo' enables the controller \"+ named 'foo', '-foo' disables the controller named 'foo'. Defaults to \"*\".", "type": "array", "items": { "type": "string", "default": "" } }, - "internalRegistryHostname": { - "description": "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format.", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "kubecontrolplane.config.openshift.io", - "Version": "v1", - "Kind": "KubeAPIServerImagePolicyConfig", - "Scope": "Namespaced" - } - }, - "io.openshift.config.kubecontrolplane.v1.KubeAPIServerProjectConfig": { - "type": "object", - "required": [ - "defaultNodeSelector" - ], - "properties": { - "defaultNodeSelector": { - "description": "defaultNodeSelector holds default project node label selector", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "kubecontrolplane.config.openshift.io", - "Version": "v1", - "Kind": "KubeAPIServerProjectConfig", - "Scope": "Namespaced" - } - }, - "io.openshift.config.kubecontrolplane.v1.KubeControllerManagerConfig": { - "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "serviceServingCert", - "projectConfig", - "extendedArguments" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "deployer": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.DeployerControllerConfig" }, - "extendedArguments": { - "description": "extendedArguments is used to configure the kube-controller-manager", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } + "dockerPullSecret": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.DockerPullSecretControllerConfig" + }, + "featureGates": { + "description": "featureGates are the set of extra OpenShift feature gates for openshift-controller-manager. These feature gates can be used to enable features that are tech preview or otherwise not available on OpenShift by default.", + "type": "array", + "items": { + "type": "string", + "default": "" } }, + "imageImport": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ImageImportControllerConfig" + }, + "ingress": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.IngressControllerConfig" + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "projectConfig": { - "description": "projectConfig is an optimization for the daemonset controller", + "kubeClientConfig": { "default": {}, - "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.KubeControllerManagerProjectConfig" + "$ref": "#/definitions/io.openshift.config.v1.KubeClientConfig" }, - "serviceServingCert": { - "description": "serviceServingCert provides support for the old alpha service serving cert signer CA bundle", + "leaderElection": { + "description": "leaderElection defines the configuration for electing a controller instance to make changes to the cluster. If unspecified, the ControllerTTL value is checked to determine whether the legacy direct etcd election code will be used.", "default": {}, - "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.ServiceServingCert" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "kubecontrolplane.config.openshift.io", - "Version": "v1", - "Kind": "KubeControllerManagerConfig", - "Scope": "Namespaced" - } - }, - "io.openshift.config.kubecontrolplane.v1.KubeControllerManagerProjectConfig": { - "type": "object", - "required": [ - "defaultNodeSelector" - ], - "properties": { - "defaultNodeSelector": { - "description": "defaultNodeSelector holds default project node label selector", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "kubecontrolplane.config.openshift.io", - "Version": "v1", - "Kind": "KubeControllerManagerProjectConfig", - "Scope": "Namespaced" - } - }, - "io.openshift.config.kubecontrolplane.v1.KubeletConnectionInfo": { - "description": "KubeletConnectionInfo holds information necessary for connecting to a kubelet", - "type": "object", - "required": [ - "port", - "ca", - "certFile", - "keyFile" - ], - "properties": { - "ca": { - "description": "ca is the CA for verifying TLS connections to kubelets", - "type": "string", - "default": "" + "$ref": "#/definitions/io.openshift.config.v1.LeaderElection" }, - "certFile": { - "description": "CertFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" + "network": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.NetworkControllerConfig" }, - "keyFile": { - "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" + "resourceQuota": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ResourceQuotaControllerConfig" }, - "port": { - "description": "port is the port to connect to kubelets on", - "type": "integer", - "format": "int64", - "default": 0 - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "kubecontrolplane.config.openshift.io", - "Version": "v1", - "Kind": "KubeletConnectionInfo", - "Scope": "Namespaced" - } - }, - "io.openshift.config.kubecontrolplane.v1.MasterAuthConfig": { - "description": "MasterAuthConfig configures authentication options in addition to the standard oauth token and client certificate authenticators", - "type": "object", - "required": [ - "requestHeader", - "webhookTokenAuthenticators", - "oauthMetadataFile" - ], - "properties": { - "oauthMetadataFile": { - "description": "oauthMetadataFile is a path to a file containing the discovery endpoint for OAuth 2.0 Authorization Server Metadata for an external OAuth server. See IETF Draft: // https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 This option is mutually exclusive with OAuthConfig", - "type": "string", - "default": "" + "securityAllocator": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.SecurityAllocator" }, - "requestHeader": { - "description": "requestHeader holds options for setting up a front proxy against the API. It is optional.", - "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.RequestHeaderAuthenticationOptions" + "serviceAccount": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ServiceAccountControllerConfig" }, - "webhookTokenAuthenticators": { - "description": "webhookTokenAuthenticators, if present configures remote token reviewers", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.WebhookTokenAuthenticator" - } + "serviceServingCert": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ServiceServingCert" + }, + "servingInfo": { + "description": "servingInfo describes how to start serving", + "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "kubecontrolplane.config.openshift.io", + "Type": "object", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "MasterAuthConfig", + "Kind": "OpenShiftControllerManagerConfig", "Scope": "Namespaced" } }, - "io.openshift.config.kubecontrolplane.v1.RequestHeaderAuthenticationOptions": { - "description": "RequestHeaderAuthenticationOptions provides options for setting up a front proxy against the entire API instead of against the /oauth endpoint.", + "io.openshift.config.openshiftcontrolplane.v1.PerGroupOptions": { "type": "object", "required": [ - "clientCA", - "clientCommonNames", - "usernameHeaders", - "groupHeaders", - "extraHeaderPrefixes" + "name", + "enabledVersions", + "disabledVersions" ], "properties": { - "clientCA": { - "description": "clientCA is a file with the trusted signer certs. It is required.", - "type": "string", - "default": "" - }, - "clientCommonNames": { - "description": "clientCommonNames is a required list of common names to require a match from.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "extraHeaderPrefixes": { - "description": "extraHeaderPrefixes is the set of request header prefixes to inspect for user extra. X-Remote-Extra- is suggested.", + "disabledVersions": { + "description": "disabledVersions is a list of versions that must be disabled in addition to the defaults. Must not collide with the list of enabled versions", "type": "array", "items": { "type": "string", "default": "" } }, - "groupHeaders": { - "description": "groupHeaders is the set of headers to check for group information. All are unioned.", + "enabledVersions": { + "description": "enabledVersions is a list of versions that must be enabled in addition to the defaults. Must not collide with the list of disabled versions", "type": "array", "items": { "type": "string", "default": "" } }, - "usernameHeaders": { - "description": "usernameHeaders is the list of headers to check for user information. First hit wins.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "kubecontrolplane.config.openshift.io", - "Version": "v1", - "Kind": "RequestHeaderAuthenticationOptions", - "Scope": "Namespaced" - } - }, - "io.openshift.config.kubecontrolplane.v1.ServiceServingCert": { - "description": "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.", - "type": "object", - "required": [ - "certFile" - ], - "properties": { - "certFile": { - "description": "CertFile is a file containing a PEM-encoded certificate", + "name": { + "description": "name is an API server name (see OpenShiftAPIserverName typed constants for a complete list of available API servers).", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "kubecontrolplane.config.openshift.io", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "ServiceServingCert", + "Kind": "PerGroupOptions", "Scope": "Namespaced" } }, - "io.openshift.config.kubecontrolplane.v1.UserAgentDenyRule": { - "description": "UserAgentDenyRule adds a rejection message that can be used to help a user figure out how to get an approved client", + "io.openshift.config.openshiftcontrolplane.v1.ProjectConfig": { "type": "object", "required": [ - "regex", - "httpVerbs", - "rejectionMessage" + "defaultNodeSelector", + "projectRequestMessage", + "projectRequestTemplate" ], "properties": { - "httpVerbs": { - "description": "httpVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "defaultNodeSelector": { + "description": "defaultNodeSelector holds default project node label selector", + "type": "string", + "default": "" }, - "regex": { - "description": "regex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f", + "projectRequestMessage": { + "description": "projectRequestMessage is the string presented to a user if they are unable to request a project via the projectrequest api endpoint", "type": "string", "default": "" }, - "rejectionMessage": { - "description": "RejectionMessage is the message shown when rejecting a client. If it is not a set, the default message is used.", + "projectRequestTemplate": { + "description": "projectRequestTemplate is the template to use for creating projects in response to projectrequest. It is in the format namespace/template and it is optional. If it is not specified, a default template is used.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "kubecontrolplane.config.openshift.io", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "UserAgentDenyRule", + "Kind": "ProjectConfig", "Scope": "Namespaced" } }, - "io.openshift.config.kubecontrolplane.v1.UserAgentMatchRule": { - "description": "UserAgentMatchRule describes how to match a given request based on User-Agent and HTTPVerb", + "io.openshift.config.openshiftcontrolplane.v1.RegistryLocation": { + "description": "RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.", "type": "object", "required": [ - "regex", - "httpVerbs" + "domainName" ], "properties": { - "httpVerbs": { - "description": "httpVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "regex": { - "description": "regex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f", + "domainName": { + "description": "DomainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.", "type": "string", "default": "" + }, + "insecure": { + "description": "Insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.", + "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", - "Group": "kubecontrolplane.config.openshift.io", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "UserAgentMatchRule", + "Kind": "RegistryLocation", "Scope": "Namespaced" } }, - "io.openshift.config.kubecontrolplane.v1.UserAgentMatchingConfig": { - "description": "UserAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!", + "io.openshift.config.openshiftcontrolplane.v1.ResourceQuotaControllerConfig": { "type": "object", "required": [ - "requiredClients", - "deniedClients", - "defaultRejectionMessage" + "concurrentSyncs", + "syncPeriod", + "minResyncPeriod" ], "properties": { - "defaultRejectionMessage": { - "description": "defaultRejectionMessage is the message shown when rejecting a client. If it is not a set, a generic message is given.", - "type": "string", - "default": "" + "concurrentSyncs": { + "type": "integer", + "format": "int32", + "default": 0 }, - "deniedClients": { - "description": "deniedClients if this list is non-empty, then a User-Agent must not match any of the UserAgentRegexes", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.UserAgentDenyRule" - } + "minResyncPeriod": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" }, - "requiredClients": { - "description": "requiredClients if this list is non-empty, then a User-Agent must match one of the UserAgentRegexes to be allowed", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.kubecontrolplane.v1.UserAgentMatchRule" - } + "syncPeriod": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" } }, "x-fabric8-info": { "Type": "nested", - "Group": "kubecontrolplane.config.openshift.io", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "UserAgentMatchingConfig", + "Kind": "ResourceQuotaControllerConfig", "Scope": "Namespaced" } }, - "io.openshift.config.kubecontrolplane.v1.WebhookTokenAuthenticator": { - "description": "WebhookTokenAuthenticators holds the necessary configuation options for external token authenticators", + "io.openshift.config.openshiftcontrolplane.v1.RoutingConfig": { + "description": "RoutingConfig holds the necessary configuration options for routing to subdomains", "type": "object", "required": [ - "configFile", - "cacheTTL" + "subdomain" ], "properties": { - "cacheTTL": { - "description": "cacheTTL indicates how long an authentication result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get a default timeout of 2 minutes. If zero (e.g. \"0m\"), caching is disabled", - "type": "string", - "default": "" - }, - "configFile": { - "description": "configFile is a path to a Kubeconfig file with the webhook configuration", + "subdomain": { + "description": "subdomain is the suffix appended to $service.$namespace. to form the default route hostname DEPRECATED: This field is being replaced by routers setting their own defaults. This is the \"default\" route.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "kubecontrolplane.config.openshift.io", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "WebhookTokenAuthenticator", + "Kind": "RoutingConfig", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.ActiveDirectoryConfig": { - "description": "ActiveDirectoryConfig holds the necessary configuration options to define how an LDAP group sync interacts with an LDAP server using the Active Directory schema", + "io.openshift.config.openshiftcontrolplane.v1.SecurityAllocator": { + "description": "SecurityAllocator controls the automatic allocation of UIDs and MCS labels to a project. If nil, allocation is disabled.", "type": "object", "required": [ - "usersQuery", - "userNameAttributes", - "groupMembershipAttributes" + "uidAllocatorRange", + "mcsAllocatorRange", + "mcsLabelsPerProject" ], "properties": { - "groupMembershipAttributes": { - "description": "GroupMembershipAttributes defines which attributes on an LDAP user entry will be interpreted as the groups it is a member of", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "mcsAllocatorRange": { + "description": "MCSAllocatorRange defines the range of MCS categories that will be assigned to namespaces. The format is \"\u003cprefix\u003e/\u003cnumberOfLabels\u003e[,\u003cmaxCategory\u003e]\". The default is \"s0/2\" and will allocate from c0 -\u003e c1023, which means a total of 535k labels are available (1024 choose 2 ~ 535k). If this value is changed after startup, new projects may receive labels that are already allocated to other projects. Prefix may be any valid SELinux set of terms (including user, role, and type), although leaving them as the default will allow the server to set them automatically.\n\nExamples: * s0:/2 - Allocate labels from s0:c0,c0 to s0:c511,c511 * s0:/2,512 - Allocate labels from s0:c0,c0,c0 to s0:c511,c511,511", + "type": "string", + "default": "" }, - "userNameAttributes": { - "description": "UserNameAttributes defines which attributes on an LDAP user entry will be interpreted as its OpenShift user name.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "mcsLabelsPerProject": { + "description": "MCSLabelsPerProject defines the number of labels that should be reserved per project. The default is 5 to match the default UID and MCS ranges (100k namespaces, 535k/5 labels).", + "type": "integer", + "format": "int32", + "default": 0 }, - "usersQuery": { - "description": "AllUsersQuery holds the template for an LDAP query that returns user entries.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPQuery" + "uidAllocatorRange": { + "description": "UIDAllocatorRange defines the total set of Unix user IDs (UIDs) that will be allocated to projects automatically, and the size of the block each namespace gets. For example, 1000-1999/10 will allocate ten UIDs per namespace, and will be able to allocate up to 100 blocks before running out of space. The default is to allocate from 1 billion to 2 billion in 10k blocks (which is the expected size of the ranges container images will use once user namespaces are started).", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "ActiveDirectoryConfig", + "Kind": "SecurityAllocator", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.AdmissionConfig": { - "description": "AdmissionConfig holds the necessary configuration options for admission", + "io.openshift.config.openshiftcontrolplane.v1.ServiceAccountControllerConfig": { "type": "object", "required": [ - "pluginConfig" + "managedNames" ], "properties": { - "pluginConfig": { - "description": "PluginConfig allows specifying a configuration file per admission control plugin", - "type": "object", - "additionalProperties": { - "$ref": "#/definitions/io.openshift.config.legacy.v1.AdmissionPluginConfig" - } - }, - "pluginOrderOverride": { - "description": "PluginOrderOverride is a list of admission control plugin names that will be installed on the master. Order is significant. If empty, a default list of plugins is used.", + "managedNames": { + "description": "managedNames is a list of service account names that will be auto-created in every namespace. If no names are specified, the ServiceAccountsController will not be started.", "type": "array", "items": { "type": "string", @@ -59077,60 +65099,50 @@ }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "AdmissionConfig", + "Kind": "ServiceAccountControllerConfig", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.AdmissionPluginConfig": { - "description": "AdmissionPluginConfig holds the necessary configuration options for admission plugins", + "io.openshift.config.openshiftcontrolplane.v1.ServiceServingCert": { + "description": "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.", "type": "object", "required": [ - "location", - "configuration" + "signer" ], "properties": { - "configuration": { - "description": "Configuration is an embedded configuration object to be used as the plugin's configuration. If present, it will be used instead of the path to the configuration file.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "location": { - "description": "Location is the path to a configuration file that contains the plugin's configuration", - "type": "string", - "default": "" + "signer": { + "description": "Signer holds the signing information used to automatically sign serving certificates. If this value is nil, then certs are not signed automatically.", + "$ref": "#/definitions/io.openshift.config.v1.CertInfo" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "AdmissionPluginConfig", + "Kind": "ServiceServingCert", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.AggregatorConfig": { - "description": "AggregatorConfig holds information required to make the aggregator function.", + "io.openshift.config.openshiftcontrolplane.v1.SourceStrategyDefaultsConfig": { + "description": "SourceStrategyDefaultsConfig contains values that apply to builds using the source strategy.", "type": "object", - "required": [ - "proxyClientInfo" - ], "properties": { - "proxyClientInfo": { - "description": "ProxyClientInfo specifies the client cert/key to use when proxying to aggregated API servers", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.CertInfo" + "incremental": { + "description": "incremental indicates if s2i build strategies should perform an incremental build or not", + "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "openshiftcontrolplane.config.openshift.io", "Version": "v1", - "Kind": "AggregatorConfig", + "Kind": "SourceStrategyDefaultsConfig", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.AllowAllPasswordIdentityProvider": { + "io.openshift.config.osin.v1.AllowAllPasswordIdentityProvider": { "description": "AllowAllPasswordIdentityProvider provides identities for users authenticating using non-empty passwords\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "properties": { @@ -59145,150 +65157,13 @@ }, "x-fabric8-info": { "Type": "object", - "Group": "legacy.config.openshift.io", + "Group": "osin.config.openshift.io", "Version": "v1", "Kind": "AllowAllPasswordIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.AuditConfig": { - "description": "AuditConfig holds configuration for the audit capabilities", - "type": "object", - "required": [ - "enabled", - "auditFilePath", - "maximumFileRetentionDays", - "maximumRetainedFiles", - "maximumFileSizeMegabytes", - "policyFile", - "policyConfiguration", - "logFormat", - "webHookKubeConfig", - "webHookMode" - ], - "properties": { - "auditFilePath": { - "description": "All requests coming to the apiserver will be logged to this file.", - "type": "string", - "default": "" - }, - "enabled": { - "description": "If this flag is set, audit log will be printed in the logs. The logs contains, method, user and a requested URL.", - "type": "boolean", - "default": false - }, - "logFormat": { - "description": "Format of saved audits (legacy or json).", - "type": "string", - "default": "" - }, - "maximumFileRetentionDays": { - "description": "Maximum number of days to retain old log files based on the timestamp encoded in their filename.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "maximumFileSizeMegabytes": { - "description": "Maximum size in megabytes of the log file before it gets rotated. Defaults to 100MB.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "maximumRetainedFiles": { - "description": "Maximum number of old log files to retain.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "policyConfiguration": { - "description": "PolicyConfiguration is an embedded policy configuration object to be used as the audit policy configuration. If present, it will be used instead of the path to the policy file.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "policyFile": { - "description": "PolicyFile is a path to the file that defines the audit policy configuration.", - "type": "string", - "default": "" - }, - "webHookKubeConfig": { - "description": "Path to a .kubeconfig formatted file that defines the audit webhook configuration.", - "type": "string", - "default": "" - }, - "webHookMode": { - "description": "Strategy for sending audit events (block or batch).", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "legacy.config.openshift.io", - "Version": "v1", - "Kind": "AuditConfig", - "Scope": "Namespaced" - } - }, - "io.openshift.config.legacy.v1.AugmentedActiveDirectoryConfig": { - "description": "AugmentedActiveDirectoryConfig holds the necessary configuration options to define how an LDAP group sync interacts with an LDAP server using the augmented Active Directory schema", - "type": "object", - "required": [ - "usersQuery", - "userNameAttributes", - "groupMembershipAttributes", - "groupsQuery", - "groupUIDAttribute", - "groupNameAttributes" - ], - "properties": { - "groupMembershipAttributes": { - "description": "GroupMembershipAttributes defines which attributes on an LDAP user entry will be interpreted as the groups it is a member of", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "groupNameAttributes": { - "description": "GroupNameAttributes defines which attributes on an LDAP group entry will be interpreted as its name to use for an OpenShift group", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "groupUIDAttribute": { - "description": "GroupUIDAttributes defines which attribute on an LDAP group entry will be interpreted as its unique identifier. (ldapGroupUID)", - "type": "string", - "default": "" - }, - "groupsQuery": { - "description": "AllGroupsQuery holds the template for an LDAP query that returns group entries.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPQuery" - }, - "userNameAttributes": { - "description": "UserNameAttributes defines which attributes on an LDAP user entry will be interpreted as its OpenShift user name.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "usersQuery": { - "description": "AllUsersQuery holds the template for an LDAP query that returns user entries.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPQuery" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "legacy.config.openshift.io", - "Version": "v1", - "Kind": "AugmentedActiveDirectoryConfig", - "Scope": "Namespaced" - } - }, - "io.openshift.config.legacy.v1.BasicAuthPasswordIdentityProvider": { + "io.openshift.config.osin.v1.BasicAuthPasswordIdentityProvider": { "description": "BasicAuthPasswordIdentityProvider provides identities for users authenticating using HTTP basic auth credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ @@ -59329,602 +65204,870 @@ }, "x-fabric8-info": { "Type": "object", - "Group": "legacy.config.openshift.io", + "Group": "osin.config.openshift.io", "Version": "v1", "Kind": "BasicAuthPasswordIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.BuildDefaultsConfig": { - "description": "BuildDefaultsConfig controls the default information for Builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.osin.v1.DenyAllPasswordIdentityProvider": { + "description": "DenyAllPasswordIdentityProvider provides no identities for users\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "properties": { - "annotations": { - "description": "annotations are annotations that will be added to the build pod", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "env": { - "description": "env is a set of default environment variables that will be applied to the build if the specified variables do not exist on the build", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - } - }, - "gitHTTPProxy": { - "description": "gitHTTPProxy is the location of the HTTPProxy for Git source", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" - }, - "gitHTTPSProxy": { - "description": "gitHTTPSProxy is the location of the HTTPSProxy for Git source", + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "osin.config.openshift.io", + "Version": "v1", + "Kind": "DenyAllPasswordIdentityProvider", + "Scope": "Namespaced" + } + }, + "io.openshift.config.osin.v1.GitHubIdentityProvider": { + "description": "GitHubIdentityProvider provides identities for users authenticating using GitHub credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "type": "object", + "required": [ + "clientID", + "clientSecret", + "organizations", + "teams", + "hostname", + "ca" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "gitNoProxy": { - "description": "gitNoProxy is the list of domains for which the proxy should not be used", - "type": "string" + "ca": { + "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server. If empty, the default system roots are used. This can only be configured when hostname is set to a non-empty value.", + "type": "string", + "default": "" }, - "imageLabels": { - "description": "imageLabels is a list of labels that are applied to the resulting image. User can override a default label by providing a label with the same name in their Build/BuildConfig.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.ImageLabel" - } + "clientID": { + "description": "clientID is the oauth client ID", + "type": "string", + "default": "" + }, + "clientSecret": { + "description": "clientSecret is the oauth client secret", + "$ref": "#/definitions/io.openshift.config.v1.StringSource" + }, + "hostname": { + "description": "hostname is the optional domain (e.g. \"mycompany.com\") for use with a hosted instance of GitHub Enterprise. It must match the GitHub Enterprise settings value that is configured at /setup/settings#hostname.", + "type": "string", + "default": "" }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "nodeSelector": { - "description": "nodeSelector is a selector which must be true for the build pod to fit on a node", - "type": "object", - "additionalProperties": { + "organizations": { + "description": "organizations optionally restricts which organizations are allowed to log in", + "type": "array", + "items": { "type": "string", "default": "" } }, - "resources": { - "description": "resources defines resource requirements to execute the build.", - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" - }, - "sourceStrategyDefaults": { - "description": "sourceStrategyDefaults are default values that apply to builds using the source strategy.", - "$ref": "#/definitions/io.openshift.config.legacy.v1.SourceStrategyDefaultsConfig" + "teams": { + "description": "teams optionally restricts which teams are allowed to log in. Format is \u003corg\u003e/\u003cteam\u003e.", + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { "Type": "object", - "Group": "legacy.config.openshift.io", + "Group": "osin.config.openshift.io", "Version": "v1", - "Kind": "BuildDefaultsConfig", + "Kind": "GitHubIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.BuildOverridesConfig": { - "description": "BuildOverridesConfig controls override settings for builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.osin.v1.GitLabIdentityProvider": { + "description": "GitLabIdentityProvider provides identities for users authenticating using GitLab credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "forcePull" + "ca", + "url", + "clientID", + "clientSecret" ], "properties": { - "annotations": { - "description": "annotations are annotations that will be added to the build pod", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "forcePull": { - "description": "forcePull indicates whether the build strategy should always be set to ForcePull=true", - "type": "boolean", - "default": false + "ca": { + "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", + "type": "string", + "default": "" }, - "imageLabels": { - "description": "imageLabels is a list of labels that are applied to the resulting image. If user provided a label in their Build/BuildConfig with the same name as one in this list, the user's label will be overwritten.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.ImageLabel" - } + "clientID": { + "description": "clientID is the oauth client ID", + "type": "string", + "default": "" + }, + "clientSecret": { + "description": "clientSecret is the oauth client secret", + "$ref": "#/definitions/io.openshift.config.v1.StringSource" }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "nodeSelector": { - "description": "nodeSelector is a selector which must be true for the build pod to fit on a node", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } + "legacy": { + "description": "legacy determines if OAuth2 or OIDC should be used If true, OAuth2 is used If false, OIDC is used If nil and the URL's host is gitlab.com, OIDC is used Otherwise, OAuth2 is used In a future release, nil will default to using OIDC Eventually this flag will be removed and only OIDC will be used", + "type": "boolean" }, - "tolerations": { - "description": "tolerations is a list of Tolerations that will override any existing tolerations set on a build pod.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - } + "url": { + "description": "url is the oauth server base URL", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "object", - "Group": "legacy.config.openshift.io", + "Group": "osin.config.openshift.io", "Version": "v1", - "Kind": "BuildOverridesConfig", + "Kind": "GitLabIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.CertInfo": { - "description": "CertInfo relates a certificate with a private key", + "io.openshift.config.osin.v1.GoogleIdentityProvider": { + "description": "GoogleIdentityProvider provides identities for users authenticating using Google credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "certFile", - "keyFile" + "clientID", + "clientSecret", + "hostedDomain" ], "properties": { - "certFile": { - "description": "CertFile is a file containing a PEM-encoded certificate", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "clientID": { + "description": "clientID is the oauth client ID", "type": "string", "default": "" }, - "keyFile": { - "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "clientSecret": { + "description": "clientSecret is the oauth client secret", + "$ref": "#/definitions/io.openshift.config.v1.StringSource" + }, + "hostedDomain": { + "description": "hostedDomain is the optional Google App domain (e.g. \"mycompany.com\") to restrict logins to", "type": "string", "default": "" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "legacy.config.openshift.io", + "Type": "object", + "Group": "osin.config.openshift.io", "Version": "v1", - "Kind": "CertInfo", + "Kind": "GoogleIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.ClientConnectionOverrides": { - "description": "ClientConnectionOverrides are a set of overrides to the default client connection settings.", + "io.openshift.config.osin.v1.GrantConfig": { + "description": "GrantConfig holds the necessary configuration options for grant handlers", "type": "object", "required": [ - "acceptContentTypes", - "contentType", - "qps", - "burst" + "method", + "serviceAccountMethod" ], - "properties": { - "acceptContentTypes": { - "description": "AcceptContentTypes defines the Accept header sent by clients when connecting to a server, overriding the default value of 'application/json'. This field will control all connections to the server used by a particular client.", + "properties": { + "method": { + "description": "method determines the default strategy to use when an OAuth client requests a grant. This method will be used only if the specific OAuth client doesn't provide a strategy of their own. Valid grant handling methods are:\n - auto: always approves grant requests, useful for trusted clients\n - prompt: prompts the end user for approval of grant requests, useful for third-party clients\n - deny: always denies grant requests, useful for black-listed clients", "type": "string", "default": "" }, - "burst": { - "description": "Burst allows extra queries to accumulate when a client is exceeding its rate.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "contentType": { - "description": "ContentType is the content type used when sending data to the server from this client.", + "serviceAccountMethod": { + "description": "serviceAccountMethod is used for determining client authorization for service account oauth client. It must be either: deny, prompt", "type": "string", "default": "" - }, - "qps": { - "description": "QPS controls the number of queries per second allowed for this connection.", - "type": "number", - "format": "float", - "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "osin.config.openshift.io", "Version": "v1", - "Kind": "ClientConnectionOverrides", + "Kind": "GrantConfig", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.ClusterNetworkEntry": { - "description": "ClusterNetworkEntry defines an individual cluster network. The CIDRs cannot overlap with other cluster network CIDRs, CIDRs reserved for external ips, CIDRs reserved for service networks, and CIDRs reserved for ingress ips.", + "io.openshift.config.osin.v1.HTPasswdPasswordIdentityProvider": { + "description": "HTPasswdPasswordIdentityProvider provides identities for users authenticating using htpasswd credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "cidr", - "hostSubnetLength" + "file" ], "properties": { - "cidr": { - "description": "CIDR defines the total range of a cluster networks address space.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "file": { + "description": "file is a reference to your htpasswd file", "type": "string", "default": "" }, - "hostSubnetLength": { - "description": "HostSubnetLength is the number of bits of the accompanying CIDR address to allocate to each node. eg, 8 would mean that each node would have a /24 slice of the overlay network for its pod.", - "type": "integer", - "format": "int64", - "default": 0 + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "legacy.config.openshift.io", + "Type": "object", + "Group": "osin.config.openshift.io", "Version": "v1", - "Kind": "ClusterNetworkEntry", + "Kind": "HTPasswdPasswordIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.ControllerConfig": { - "description": "ControllerConfig holds configuration values for controllers", + "io.openshift.config.osin.v1.IdentityProvider": { + "description": "IdentityProvider provides identities for users authenticating using credentials", "type": "object", "required": [ - "controllers", - "election", - "serviceServingCert" + "name", + "challenge", + "login", + "mappingMethod", + "provider" ], "properties": { - "controllers": { - "description": "Controllers is a list of controllers to enable. '*' enables all on-by-default controllers, 'foo' enables the controller \"+ named 'foo', '-foo' disables the controller named 'foo'. Defaults to \"*\".", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "challenge": { + "description": "challenge indicates whether to issue WWW-Authenticate challenges for this provider", + "type": "boolean", + "default": false }, - "election": { - "description": "Election defines the configuration for electing a controller instance to make changes to the cluster. If unspecified, the ControllerTTL value is checked to determine whether the legacy direct etcd election code will be used.", - "$ref": "#/definitions/io.openshift.config.legacy.v1.ControllerElectionConfig" + "login": { + "description": "login indicates whether to use this identity provider for unauthenticated browsers to login against", + "type": "boolean", + "default": false }, - "serviceServingCert": { - "description": "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.ServiceServingCert" + "mappingMethod": { + "description": "mappingMethod determines how identities from this provider are mapped to users", + "type": "string", + "default": "" + }, + "name": { + "description": "name is used to qualify the identities returned by this provider", + "type": "string", + "default": "" + }, + "provider": { + "description": "provider contains the information about how to set up a specific identity provider", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "osin.config.openshift.io", "Version": "v1", - "Kind": "ControllerConfig", + "Kind": "IdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.ControllerElectionConfig": { - "description": "ControllerElectionConfig contains configuration values for deciding how a controller will be elected to act as leader.", + "io.openshift.config.osin.v1.KeystonePasswordIdentityProvider": { + "description": "KeystonePasswordIdentityProvider provides identities for users authenticating using keystone password credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "lockName", - "lockNamespace", - "lockResource" + "url", + "ca", + "certFile", + "keyFile", + "domainName", + "useKeystoneIdentity" ], "properties": { - "lockName": { - "description": "LockName is the resource name used to act as the lock for determining which controller instance should lead.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "ca": { + "description": "CA is the CA for verifying TLS connections", "type": "string", "default": "" }, - "lockNamespace": { - "description": "LockNamespace is the resource namespace used to act as the lock for determining which controller instance should lead. It defaults to \"kube-system\"", + "certFile": { + "description": "CertFile is a file containing a PEM-encoded certificate", "type": "string", "default": "" }, - "lockResource": { - "description": "LockResource is the group and resource name to use to coordinate for the controller lock. If unset, defaults to \"configmaps\".", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.GroupResource" + "domainName": { + "description": "domainName is required for keystone v3", + "type": "string", + "default": "" + }, + "keyFile": { + "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "type": "string", + "default": "" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "url": { + "description": "URL is the remote URL to connect to", + "type": "string", + "default": "" + }, + "useKeystoneIdentity": { + "description": "useKeystoneIdentity flag indicates that user should be authenticated by keystone ID, not by username", + "type": "boolean", + "default": false } }, "x-fabric8-info": { - "Type": "nested", - "Group": "legacy.config.openshift.io", + "Type": "object", + "Group": "osin.config.openshift.io", "Version": "v1", - "Kind": "ControllerElectionConfig", + "Kind": "KeystonePasswordIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.DNSConfig": { - "description": "DNSConfig holds the necessary configuration options for DNS", + "io.openshift.config.osin.v1.LDAPAttributeMapping": { + "description": "LDAPAttributeMapping maps LDAP attributes to OpenShift identity fields", "type": "object", "required": [ - "bindAddress", - "bindNetwork", - "allowRecursiveQueries" + "id", + "preferredUsername", + "name", + "email" ], "properties": { - "allowRecursiveQueries": { - "description": "AllowRecursiveQueries allows the DNS server on the master to answer queries recursively. Note that open resolvers can be used for DNS amplification attacks and the master DNS should not be made accessible to public networks.", - "type": "boolean", - "default": false + "email": { + "description": "email is the list of attributes whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "bindAddress": { - "description": "BindAddress is the ip:port to serve DNS on", - "type": "string", - "default": "" + "id": { + "description": "id is the list of attributes whose values should be used as the user ID. Required. LDAP standard identity attribute is \"dn\"", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "bindNetwork": { - "description": "BindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", - "type": "string", - "default": "" + "name": { + "description": "name is the list of attributes whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity LDAP standard display name attribute is \"cn\"", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "preferredUsername": { + "description": "preferredUsername is the list of attributes whose values should be used as the preferred username. LDAP standard login attribute is \"uid\"", + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "osin.config.openshift.io", "Version": "v1", - "Kind": "DNSConfig", + "Kind": "LDAPAttributeMapping", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.DefaultAdmissionConfig": { - "description": "DefaultAdmissionConfig can be used to enable or disable various admission plugins. When this type is present as the `configuration` object under `pluginConfig` and *if* the admission plugin supports it, this will cause an \"off by default\" admission plugin to be enabled\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.osin.v1.LDAPPasswordIdentityProvider": { + "description": "LDAPPasswordIdentityProvider provides identities for users authenticating using LDAP credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "disable" + "url", + "bindDN", + "bindPassword", + "insecure", + "ca", + "attributes" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "disable": { - "description": "Disable turns off an admission plugin that is enabled by default.", + "attributes": { + "description": "attributes maps LDAP attributes to identities", + "default": {}, + "$ref": "#/definitions/io.openshift.config.osin.v1.LDAPAttributeMapping" + }, + "bindDN": { + "description": "bindDN is an optional DN to bind with during the search phase.", + "type": "string", + "default": "" + }, + "bindPassword": { + "description": "bindPassword is an optional password to bind with during the search phase.", + "$ref": "#/definitions/io.openshift.config.v1.StringSource" + }, + "ca": { + "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", + "type": "string", + "default": "" + }, + "insecure": { + "description": "insecure, if true, indicates the connection should not use TLS. Cannot be set to true with a URL scheme of \"ldaps://\" If false, \"ldaps://\" URLs connect using TLS, and \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830", "type": "boolean", "default": false }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + }, + "url": { + "description": "url is an RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is\n ldap://host:port/basedn?attribute?scope?filter", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "object", - "Group": "legacy.config.openshift.io", + "Group": "osin.config.openshift.io", "Version": "v1", - "Kind": "DefaultAdmissionConfig", + "Kind": "LDAPPasswordIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.DenyAllPasswordIdentityProvider": { - "description": "DenyAllPasswordIdentityProvider provides no identities for users\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.osin.v1.OAuthConfig": { + "description": "OAuthConfig holds the necessary configuration options for OAuth authentication", "type": "object", + "required": [ + "masterCA", + "masterURL", + "masterPublicURL", + "loginURL", + "assetPublicURL", + "alwaysShowProviderSelection", + "identityProviders", + "grantConfig", + "sessionConfig", + "tokenConfig", + "templates" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "alwaysShowProviderSelection": { + "description": "alwaysShowProviderSelection will force the provider selection page to render even when there is only a single provider.", + "type": "boolean", + "default": false }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "assetPublicURL": { + "description": "assetPublicURL is used for building valid client redirect URLs for external access", + "type": "string", + "default": "" + }, + "grantConfig": { + "description": "grantConfig describes how to handle grants", + "default": {}, + "$ref": "#/definitions/io.openshift.config.osin.v1.GrantConfig" + }, + "identityProviders": { + "description": "identityProviders is an ordered list of ways for a user to identify themselves", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.osin.v1.IdentityProvider" + } + }, + "loginURL": { + "description": "loginURL, along with masterCA, masterURL and masterPublicURL have distinct meanings depending on how the OAuth server is run. The two states are: 1. embedded in the kube api server (all 3.x releases) 2. as a standalone external process (all 4.x releases) in the embedded configuration, loginURL is equivalent to masterPublicURL and the other fields have functionality that matches their docs. in the standalone configuration, the fields are used as: loginURL is the URL required to login to the cluster: oc login --server=\u003cloginURL\u003e masterPublicURL is the issuer URL it is accessible from inside (service network) and outside (ingress) of the cluster masterURL is the loopback variation of the token_endpoint URL with no path component it is only accessible from inside (service network) of the cluster masterCA is used to perform TLS verification for connections made to masterURL For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2", + "type": "string", + "default": "" + }, + "masterCA": { + "description": "masterCA is the CA for verifying the TLS connection back to the MasterURL. This field is deprecated and will be removed in a future release. See loginURL for details. Deprecated", "type": "string" + }, + "masterPublicURL": { + "description": "masterPublicURL is used for building valid client redirect URLs for internal and external access This field is deprecated and will be removed in a future release. See loginURL for details. Deprecated", + "type": "string", + "default": "" + }, + "masterURL": { + "description": "masterURL is used for making server-to-server calls to exchange authorization codes for access tokens This field is deprecated and will be removed in a future release. See loginURL for details. Deprecated", + "type": "string", + "default": "" + }, + "sessionConfig": { + "description": "sessionConfig hold information about configuring sessions.", + "$ref": "#/definitions/io.openshift.config.osin.v1.SessionConfig" + }, + "templates": { + "description": "templates allow you to customize pages like the login page.", + "$ref": "#/definitions/io.openshift.config.osin.v1.OAuthTemplates" + }, + "tokenConfig": { + "description": "tokenConfig contains options for authorization and access tokens", + "default": {}, + "$ref": "#/definitions/io.openshift.config.osin.v1.TokenConfig" } }, "x-fabric8-info": { - "Type": "object", - "Group": "legacy.config.openshift.io", + "Type": "nested", + "Group": "osin.config.openshift.io", "Version": "v1", - "Kind": "DenyAllPasswordIdentityProvider", + "Kind": "OAuthConfig", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.DockerConfig": { - "description": "DockerConfig holds Docker related configuration options.", + "io.openshift.config.osin.v1.OAuthTemplates": { + "description": "OAuthTemplates allow for customization of pages like the login page", "type": "object", "required": [ - "execHandlerName", - "dockerShimSocket", - "dockerShimRootDirectory" + "login", + "providerSelection", + "error" ], "properties": { - "dockerShimRootDirectory": { - "description": "DockershimRootDirectory is the dockershim root directory.", + "error": { + "description": "error is a path to a file containing a go template used to render error pages during the authentication or grant flow If unspecified, the default error page is used.", "type": "string", "default": "" }, - "dockerShimSocket": { - "description": "DockerShimSocket is the location of the dockershim socket the kubelet uses. Currently unix socket is supported on Linux, and tcp is supported on windows. Examples:'unix:///var/run/dockershim.sock', 'tcp://localhost:3735'", + "login": { + "description": "login is a path to a file containing a go template used to render the login page. If unspecified, the default login page is used.", "type": "string", "default": "" }, - "execHandlerName": { - "description": "ExecHandlerName is the name of the handler to use for executing commands in containers.", + "providerSelection": { + "description": "providerSelection is a path to a file containing a go template used to render the provider selection page. If unspecified, the default provider selection page is used.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "osin.config.openshift.io", "Version": "v1", - "Kind": "DockerConfig", + "Kind": "OAuthTemplates", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.EtcdConfig": { - "description": "EtcdConfig holds the necessary configuration options for connecting with an etcd database", + "io.openshift.config.osin.v1.OpenIDClaims": { + "description": "OpenIDClaims contains a list of OpenID claims to use when authenticating with an OpenID identity provider", "type": "object", "required": [ - "servingInfo", - "address", - "peerServingInfo", - "peerAddress", - "storageDirectory" + "id", + "preferredUsername", + "name", + "email", + "groups" ], "properties": { - "address": { - "description": "Address is the advertised host:port for client connections to etcd", - "type": "string", - "default": "" + "email": { + "description": "email is the list of claims whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "peerAddress": { - "description": "PeerAddress is the advertised host:port for peer connections to etcd", + "groups": { + "description": "groups is the list of claims value of which should be used to synchronize groups from the OIDC provider to OpenShift for the user", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "id": { + "description": "id is the list of claims whose values should be used as the user ID. Required. OpenID standard identity claim is \"sub\"", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "name": { + "description": "name is the list of claims whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "preferredUsername": { + "description": "preferredUsername is the list of claims whose values should be used as the preferred username. If unspecified, the preferred username is determined from the value of the id claim", + "type": "array", + "items": { + "type": "string", + "default": "" + } + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "osin.config.openshift.io", + "Version": "v1", + "Kind": "OpenIDClaims", + "Scope": "Namespaced" + } + }, + "io.openshift.config.osin.v1.OpenIDIdentityProvider": { + "description": "OpenIDIdentityProvider provides identities for users authenticating using OpenID credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "type": "object", + "required": [ + "ca", + "clientID", + "clientSecret", + "extraScopes", + "extraAuthorizeParameters", + "urls", + "claims" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "ca": { + "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", "type": "string", "default": "" }, - "peerServingInfo": { - "description": "PeerServingInfo describes how to start serving the etcd peer", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.ServingInfo" - }, - "servingInfo": { - "description": "ServingInfo describes how to start serving the etcd master", + "claims": { + "description": "claims mappings", "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.ServingInfo" + "$ref": "#/definitions/io.openshift.config.osin.v1.OpenIDClaims" }, - "storageDirectory": { - "description": "StorageDir is the path to the etcd storage directory", + "clientID": { + "description": "clientID is the oauth client ID", "type": "string", "default": "" + }, + "clientSecret": { + "description": "clientSecret is the oauth client secret", + "$ref": "#/definitions/io.openshift.config.v1.StringSource" + }, + "extraAuthorizeParameters": { + "description": "extraAuthorizeParameters are any custom parameters to add to the authorize request.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "extraScopes": { + "description": "extraScopes are any scopes to request in addition to the standard \"openid\" scope.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "urls": { + "description": "urls to use to authenticate", + "default": {}, + "$ref": "#/definitions/io.openshift.config.osin.v1.OpenIDURLs" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "legacy.config.openshift.io", + "Type": "object", + "Group": "osin.config.openshift.io", "Version": "v1", - "Kind": "EtcdConfig", + "Kind": "OpenIDIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.EtcdConnectionInfo": { - "description": "EtcdConnectionInfo holds information necessary for connecting to an etcd server", + "io.openshift.config.osin.v1.OpenIDURLs": { + "description": "OpenIDURLs are URLs to use when authenticating with an OpenID identity provider", "type": "object", "required": [ - "urls", - "ca", - "certFile", - "keyFile" + "authorize", + "token", + "userInfo" ], "properties": { - "ca": { - "description": "CA is a file containing trusted roots for the etcd server certificates", + "authorize": { + "description": "authorize is the oauth authorization URL", "type": "string", "default": "" }, - "certFile": { - "description": "CertFile is a file containing a PEM-encoded certificate", + "token": { + "description": "token is the oauth token granting URL", "type": "string", "default": "" }, - "keyFile": { - "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "userInfo": { + "description": "userInfo is the optional userinfo URL. If present, a granted access_token is used to request claims If empty, a granted id_token is parsed for claims", "type": "string", "default": "" - }, - "urls": { - "description": "URLs are the URLs for etcd", - "type": "array", - "items": { - "type": "string", - "default": "" - } } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "osin.config.openshift.io", "Version": "v1", - "Kind": "EtcdConnectionInfo", + "Kind": "OpenIDURLs", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.EtcdStorageConfig": { - "description": "EtcdStorageConfig holds the necessary configuration options for the etcd storage underlying OpenShift and Kubernetes", + "io.openshift.config.osin.v1.OsinServerConfig": { + "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "kubernetesStorageVersion", - "kubernetesStoragePrefix", - "openShiftStorageVersion", - "openShiftStoragePrefix" + "servingInfo", + "corsAllowedOrigins", + "auditConfig", + "storageConfig", + "admission", + "kubeClientConfig", + "oauthConfig" ], "properties": { - "kubernetesStoragePrefix": { - "description": "KubernetesStoragePrefix is the path within etcd that the Kubernetes resources will be rooted under. This value, if changed, will mean existing objects in etcd will no longer be located. The default value is 'kubernetes.io'.", - "type": "string", - "default": "" + "admission": { + "description": "admissionConfig holds information about how to configure admission.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.AdmissionConfig" }, - "kubernetesStorageVersion": { - "description": "KubernetesStorageVersion is the API version that Kube resources in etcd should be serialized to. This value should *not* be advanced until all clients in the cluster that read from etcd have code that allows them to read the new version.", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "openShiftStoragePrefix": { - "description": "OpenShiftStoragePrefix is the path within etcd that the OpenShift resources will be rooted under. This value, if changed, will mean existing objects in etcd will no longer be located. The default value is 'openshift.io'.", - "type": "string", - "default": "" + "auditConfig": { + "description": "auditConfig describes how to configure audit information", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.AuditConfig" }, - "openShiftStorageVersion": { - "description": "OpenShiftStorageVersion is the API version that OS resources in etcd should be serialized to. This value should *not* be advanced until all clients in the cluster that read from etcd have code that allows them to read the new version.", - "type": "string", - "default": "" + "corsAllowedOrigins": { + "description": "corsAllowedOrigins", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "kubeClientConfig": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.KubeClientConfig" + }, + "oauthConfig": { + "description": "oauthConfig holds the necessary configuration options for OAuth authentication", + "default": {}, + "$ref": "#/definitions/io.openshift.config.osin.v1.OAuthConfig" + }, + "servingInfo": { + "description": "servingInfo describes how to start serving", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo" + }, + "storageConfig": { + "description": "storageConfig contains information about how to use", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.EtcdStorageConfig" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "legacy.config.openshift.io", + "Type": "object", + "Group": "osin.config.openshift.io", "Version": "v1", - "Kind": "EtcdStorageConfig", + "Kind": "OsinServerConfig", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.GitHubIdentityProvider": { - "description": "GitHubIdentityProvider provides identities for users authenticating using GitHub credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.osin.v1.RequestHeaderIdentityProvider": { + "description": "RequestHeaderIdentityProvider provides identities for users authenticating using request header credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "clientID", - "clientSecret", - "organizations", - "teams", - "hostname", - "ca" + "loginURL", + "challengeURL", + "clientCA", + "clientCommonNames", + "headers", + "preferredUsernameHeaders", + "nameHeaders", + "emailHeaders" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "ca": { - "description": "CA is the optional trusted certificate authority bundle to use when making requests to the server. If empty, the default system roots are used. This can only be configured when hostname is set to a non-empty value.", + "challengeURL": { + "description": "challengeURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}", "type": "string", "default": "" }, - "clientID": { - "description": "ClientID is the oauth client ID", + "clientCA": { + "description": "clientCA is a file with the trusted signer certs. If empty, no request verification is done, and any direct request to the OAuth server can impersonate any identity from this provider, merely by setting a request header.", "type": "string", "default": "" }, - "clientSecret": { - "description": "ClientSecret is the oauth client secret", - "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource" + "clientCommonNames": { + "description": "clientCommonNames is an optional list of common names to require a match from. If empty, any client certificate validated against the clientCA bundle is considered authoritative.", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "hostname": { - "description": "Hostname is the optional domain (e.g. \"mycompany.com\") for use with a hosted instance of GitHub Enterprise. It must match the GitHub Enterprise settings value that is configured at /setup/settings#hostname.", - "type": "string", - "default": "" + "emailHeaders": { + "description": "emailHeaders is the set of headers to check for the email address", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "headers": { + "description": "headers is the set of headers to check for identity information", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "organizations": { - "description": "Organizations optionally restricts which organizations are allowed to log in", + "loginURL": { + "description": "loginURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}", + "type": "string", + "default": "" + }, + "nameHeaders": { + "description": "nameHeaders is the set of headers to check for the display name", "type": "array", "items": { "type": "string", "default": "" } }, - "teams": { - "description": "Teams optionally restricts which teams are allowed to log in. Format is \u003corg\u003e/\u003cteam\u003e.", + "preferredUsernameHeaders": { + "description": "preferredUsernameHeaders is the set of headers to check for the preferred username", "type": "array", "items": { "type": "string", @@ -59934,2973 +66077,2814 @@ }, "x-fabric8-info": { "Type": "object", - "Group": "legacy.config.openshift.io", + "Group": "osin.config.openshift.io", "Version": "v1", - "Kind": "GitHubIdentityProvider", + "Kind": "RequestHeaderIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.GitLabIdentityProvider": { - "description": "GitLabIdentityProvider provides identities for users authenticating using GitLab credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.osin.v1.SessionConfig": { + "description": "SessionConfig specifies options for cookie-based sessions. Used by AuthRequestHandlerSession", "type": "object", "required": [ - "ca", - "url", - "clientID", - "clientSecret" + "sessionSecretsFile", + "sessionMaxAgeSeconds", + "sessionName" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "sessionMaxAgeSeconds": { + "description": "sessionMaxAgeSeconds specifies how long created sessions last. Used by AuthRequestHandlerSession", + "type": "integer", + "format": "int32", + "default": 0 }, - "ca": { - "description": "CA is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", + "sessionName": { + "description": "sessionName is the cookie name used to store the session", "type": "string", "default": "" }, - "clientID": { - "description": "ClientID is the oauth client ID", + "sessionSecretsFile": { + "description": "sessionSecretsFile is a reference to a file containing a serialized SessionSecrets object If no file is specified, a random signing and encryption key are generated at each server start", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "osin.config.openshift.io", + "Version": "v1", + "Kind": "SessionConfig", + "Scope": "Namespaced" + } + }, + "io.openshift.config.osin.v1.SessionSecret": { + "description": "SessionSecret is a secret used to authenticate/decrypt cookie-based sessions", + "type": "object", + "required": [ + "authentication", + "encryption" + ], + "properties": { + "authentication": { + "description": "Authentication is used to authenticate sessions using HMAC. Recommended to use a secret with 32 or 64 bytes.", "type": "string", "default": "" }, - "clientSecret": { - "description": "ClientSecret is the oauth client secret", - "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "legacy": { - "description": "Legacy determines if OAuth2 or OIDC should be used If true, OAuth2 is used If false, OIDC is used If nil and the URL's host is gitlab.com, OIDC is used Otherwise, OAuth2 is used In a future release, nil will default to using OIDC Eventually this flag will be removed and only OIDC will be used", - "type": "boolean" - }, - "url": { - "description": "URL is the oauth server base URL", + "encryption": { + "description": "Encryption is used to encrypt sessions. Must be 16, 24, or 32 characters long, to select AES-128, AES-", "type": "string", "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "legacy.config.openshift.io", + "Type": "nested", + "Group": "osin.config.openshift.io", "Version": "v1", - "Kind": "GitLabIdentityProvider", + "Kind": "SessionSecret", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.GoogleIdentityProvider": { - "description": "GoogleIdentityProvider provides identities for users authenticating using Google credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.osin.v1.SessionSecrets": { + "description": "SessionSecrets list the secrets to use to sign/encrypt and authenticate/decrypt created sessions.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "clientID", - "clientSecret", - "hostedDomain" + "secrets" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "clientID": { - "description": "ClientID is the oauth client ID", - "type": "string", - "default": "" - }, - "clientSecret": { - "description": "ClientSecret is the oauth client secret", - "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource" - }, - "hostedDomain": { - "description": "HostedDomain is the optional Google App domain (e.g. \"mycompany.com\") to restrict logins to", - "type": "string", - "default": "" - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + }, + "secrets": { + "description": "Secrets is a list of secrets New sessions are signed and encrypted using the first secret. Existing sessions are decrypted/authenticated by each secret until one succeeds. This allows rotating secrets.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.osin.v1.SessionSecret" + } } }, "x-fabric8-info": { "Type": "object", - "Group": "legacy.config.openshift.io", + "Group": "osin.config.openshift.io", "Version": "v1", - "Kind": "GoogleIdentityProvider", + "Kind": "SessionSecrets", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.GrantConfig": { - "description": "GrantConfig holds the necessary configuration options for grant handlers", + "io.openshift.config.osin.v1.TokenConfig": { + "description": "TokenConfig holds the necessary configuration options for authorization and access tokens", "type": "object", - "required": [ - "method", - "serviceAccountMethod" - ], "properties": { - "method": { - "description": "Method determines the default strategy to use when an OAuth client requests a grant. This method will be used only if the specific OAuth client doesn't provide a strategy of their own. Valid grant handling methods are:\n - auto: always approves grant requests, useful for trusted clients\n - prompt: prompts the end user for approval of grant requests, useful for third-party clients\n - deny: always denies grant requests, useful for black-listed clients", - "type": "string", - "default": "" + "accessTokenInactivityTimeout": { + "description": "accessTokenInactivityTimeout defines the token inactivity timeout for tokens granted by any client. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. Takes valid time duration string such as \"5m\", \"1.5h\" or \"2h45m\". The minimum allowed value for duration is 300s (5 minutes). If the timeout is configured per client, then that value takes precedence. If the timeout value is not specified and the client does not override the value, then tokens are valid until their lifetime.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" }, - "serviceAccountMethod": { - "description": "ServiceAccountMethod is used for determining client authorization for service account oauth client. It must be either: deny, prompt", - "type": "string", - "default": "" + "accessTokenInactivityTimeoutSeconds": { + "description": "accessTokenInactivityTimeoutSeconds - DEPRECATED: setting this field has no effect.", + "type": "integer", + "format": "int32" + }, + "accessTokenMaxAgeSeconds": { + "description": "accessTokenMaxAgeSeconds defines the maximum age of access tokens", + "type": "integer", + "format": "int32" + }, + "authorizeTokenMaxAgeSeconds": { + "description": "authorizeTokenMaxAgeSeconds defines the maximum age of authorize tokens", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "osin.config.openshift.io", "Version": "v1", - "Kind": "GrantConfig", + "Kind": "TokenConfig", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.GroupResource": { - "description": "GroupResource points to a resource by its name and API group.", + "io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfig": { + "description": "ServiceCertSignerOperatorConfig provides information to configure an operator to manage the service cert signing controllers\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "group", - "resource" + "metadata", + "spec", + "status" ], "properties": { - "group": { - "description": "Group is the name of an API group", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "resource": { - "description": "Resource is the name of a resource.", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigSpec" + }, + "status": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "legacy.config.openshift.io", - "Version": "v1", - "Kind": "GroupResource", - "Scope": "Namespaced" + "Type": "object", + "Group": "servicecertsigner.config.openshift.io", + "Version": "v1alpha1", + "Kind": "ServiceCertSignerOperatorConfig", + "Scope": "Clustered" } }, - "io.openshift.config.legacy.v1.HTPasswdPasswordIdentityProvider": { - "description": "HTPasswdPasswordIdentityProvider provides identities for users authenticating using htpasswd credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigList": { + "description": "ServiceCertSignerOperatorConfigList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "file" + "items" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "file": { - "description": "File is a reference to your htpasswd file", - "type": "string", - "default": "" + "items": { + "description": "Items contains the items", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfig" + } }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + }, + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "object", - "Group": "legacy.config.openshift.io", - "Version": "v1", - "Kind": "HTPasswdPasswordIdentityProvider", + "Type": "list", + "Group": "servicecertsigner.config.openshift.io", + "Version": "v1alpha1", + "Kind": "ServiceCertSignerOperatorConfigList", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.HTTPServingInfo": { - "description": "HTTPServingInfo holds configuration for serving HTTP", + "io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigSpec": { "type": "object", "required": [ - "bindAddress", - "bindNetwork", - "certFile", - "keyFile", - "clientCA", - "namedCertificates", - "maxRequestsInFlight", - "requestTimeoutSeconds" + "managementState" ], "properties": { - "bindAddress": { - "description": "BindAddress is the ip:port to serve on", - "type": "string", - "default": "" + "logLevel": { + "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", + "type": "string" }, - "bindNetwork": { - "description": "BindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", + "managementState": { + "description": "managementState indicates whether and how the operator should manage the component", "type": "string", "default": "" }, - "certFile": { - "description": "CertFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" + "observedConfig": { + "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" }, - "cipherSuites": { - "description": "CipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants", + "operatorLogLevel": { + "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", + "type": "string" + }, + "unsupportedConfigOverrides": { + "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "servicecertsigner.config.openshift.io", + "Version": "v1alpha1", + "Kind": "ServiceCertSignerOperatorConfigSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigStatus": { + "type": "object", + "required": [ + "readyReplicas" + ], + "properties": { + "conditions": { + "description": "conditions is a list of conditions and their status", "type": "array", "items": { - "type": "string", - "default": "" - } - }, - "clientCA": { - "description": "ClientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" - }, - "maxRequestsInFlight": { - "description": "MaxRequestsInFlight is the number of concurrent requests allowed to the server. If zero, no limit.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "minTLSVersion": { - "description": "MinTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants", - "type": "string" + "default": {}, + "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" }, - "namedCertificates": { - "description": "NamedCertificates is a list of certificates to use to secure requests to specific hostnames", + "generations": { + "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.NamedCertificate" - } + "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus" + }, + "x-kubernetes-list-map-keys": [ + "group", + "resource", + "namespace", + "name" + ], + "x-kubernetes-list-type": "map" }, - "requestTimeoutSeconds": { - "description": "RequestTimeoutSeconds is the number of seconds before requests are timed out. The default is 60 minutes, if -1 there is no limit on requests.", + "latestAvailableRevision": { + "description": "latestAvailableRevision is the deploymentID of the most recent deployment", + "type": "integer", + "format": "int32" + }, + "observedGeneration": { + "description": "observedGeneration is the last generation change you've dealt with", + "type": "integer", + "format": "int64" + }, + "readyReplicas": { + "description": "readyReplicas indicates how many replicas are ready and at the desired state", "type": "integer", "format": "int32", "default": 0 + }, + "version": { + "description": "version is the level this availability applies to", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", - "Version": "v1", - "Kind": "HTTPServingInfo", + "Group": "servicecertsigner.config.openshift.io", + "Version": "v1alpha1", + "Kind": "ServiceCertSignerOperatorConfigStatus", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.IdentityProvider": { - "description": "IdentityProvider provides identities for users authenticating using credentials", + "io.openshift.config.v1.APIServer": { + "description": "APIServer holds configuration (like serving certificates, client CA and CORS domains) shared by all API servers in the system, among them especially kube-apiserver and openshift-apiserver. The canonical name of an instance is 'cluster'.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "name", - "challenge", - "login", - "mappingMethod", - "provider" + "spec" ], "properties": { - "challenge": { - "description": "UseAsChallenger indicates whether to issue WWW-Authenticate challenges for this provider", - "type": "boolean", - "default": false + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "login": { - "description": "UseAsLogin indicates whether to use this identity provider for unauthenticated browsers to login against", - "type": "boolean", - "default": false + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "mappingMethod": { - "description": "MappingMethod determines how identities from this provider are mapped to users", - "type": "string", - "default": "" + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "name": { - "description": "Name is used to qualify the identities returned by this provider", - "type": "string", - "default": "" + "spec": { + "description": "spec holds user settable values for configuration", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.APIServerSpec" }, - "provider": { - "description": "Provider contains the information about how to set up a specific identity provider", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "status": { + "description": "status holds observed values from the cluster. They may not be overridden.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.APIServerStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "legacy.config.openshift.io", + "Type": "object", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "IdentityProvider", - "Scope": "Namespaced" + "Kind": "APIServer", + "Scope": "Clustered" } }, - "io.openshift.config.legacy.v1.ImageConfig": { - "description": "ImageConfig holds the necessary configuration options for building image names for system components", + "io.openshift.config.v1.APIServerEncryption": { "type": "object", - "required": [ - "format", - "latest" - ], "properties": { - "format": { - "description": "Format is the format of the name to be built for the system component", - "type": "string", - "default": "" - }, - "latest": { - "description": "Latest determines if the latest tag will be pulled from the registry", - "type": "boolean", - "default": false + "type": { + "description": "type defines what encryption type should be used to encrypt resources at the datastore layer. When this field is unset (i.e. when it is set to the empty string), identity is implied. The behavior of unset can and will change over time. Even if encryption is enabled by default, the meaning of unset may change to a different encryption type based on changes in best practices.\n\nWhen encryption is enabled, all sensitive resources shipped with the platform are encrypted. This list of sensitive resources can and will change over time. The current authoritative list is:\n\n 1. secrets\n 2. configmaps\n 3. routes.route.openshift.io\n 4. oauthaccesstokens.oauth.openshift.io\n 5. oauthauthorizetokens.oauth.openshift.io", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "ImageConfig", + "Kind": "APIServerEncryption", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.ImagePolicyConfig": { - "description": "ImagePolicyConfig holds the necessary configuration options for limits and behavior for importing images", + "io.openshift.config.v1.APIServerList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "maxImagesBulkImportedPerRepository", - "disableScheduledImport", - "scheduledImageImportMinimumIntervalSeconds", - "maxScheduledImageImportsPerMinute" + "metadata", + "items" ], "properties": { - "additionalTrustedCA": { - "description": "AdditionalTrustedCA is a path to a pem bundle file containing additional CAs that should be trusted during imagestream import.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "allowedRegistriesForImport": { - "description": "AllowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.", + "items": { "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.RegistryLocation" + "$ref": "#/definitions/io.openshift.config.v1.APIServer" } }, - "disableScheduledImport": { - "description": "DisableScheduledImport allows scheduled background import of images to be disabled.", - "type": "boolean", - "default": false - }, - "externalRegistryHostname": { - "description": "ExternalRegistryHostname sets the hostname for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", - "type": "string" - }, - "internalRegistryHostname": { - "description": "InternalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "maxImagesBulkImportedPerRepository": { - "description": "MaxImagesBulkImportedPerRepository controls the number of images that are imported when a user does a bulk import of a container repository. This number defaults to 50 to prevent users from importing large numbers of images accidentally. Set -1 for no limit.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "maxScheduledImageImportsPerMinute": { - "description": "MaxScheduledImageImportsPerMinute is the maximum number of scheduled image streams that will be imported in the background per minute. The default value is 60. Set to -1 for unlimited.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "scheduledImageImportMinimumIntervalSeconds": { - "description": "ScheduledImageImportMinimumIntervalSeconds is the minimum number of seconds that can elapse between when image streams scheduled for background import are checked against the upstream repository. The default value is 15 minutes.", - "type": "integer", - "format": "int32", - "default": 0 + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "legacy.config.openshift.io", + "Type": "list", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "ImagePolicyConfig", + "Kind": "APIServerList", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.JenkinsPipelineConfig": { - "description": "JenkinsPipelineConfig holds configuration for the Jenkins pipeline strategy", + "io.openshift.config.v1.APIServerNamedServingCert": { + "description": "APIServerNamedServingCert maps a server DNS name, as understood by a client, to a certificate.", "type": "object", "required": [ - "autoProvisionEnabled", - "templateNamespace", - "templateName", - "serviceName", - "parameters" + "servingCertificate" ], "properties": { - "autoProvisionEnabled": { - "description": "AutoProvisionEnabled determines whether a Jenkins server will be spawned from the provided template when the first build config in the project with type JenkinsPipeline is created. When not specified this option defaults to true.", - "type": "boolean" - }, - "parameters": { - "description": "Parameters specifies a set of optional parameters to the Jenkins template.", - "type": "object", - "additionalProperties": { + "names": { + "description": "names is a optional list of explicit DNS names (leading wildcards allowed) that should use this certificate to serve secure traffic. If no names are provided, the implicit names will be extracted from the certificates. Exact names trump over wildcard names. Explicit names defined here trump over extracted implicit names.", + "type": "array", + "items": { "type": "string", "default": "" } }, - "serviceName": { - "description": "ServiceName is the name of the Jenkins service OpenShift uses to detect whether a Jenkins pipeline handler has already been installed in a project. This value *must* match a service name in the provided template.", - "type": "string", - "default": "" - }, - "templateName": { - "description": "TemplateName is the name of the default Jenkins template", - "type": "string", - "default": "" - }, - "templateNamespace": { - "description": "TemplateNamespace contains the namespace name where the Jenkins template is stored", - "type": "string", - "default": "" + "servingCertificate": { + "description": "servingCertificate references a kubernetes.io/tls type secret containing the TLS cert info for serving secure traffic. The secret must exist in the openshift-config namespace and contain the following required fields: - Secret.Data[\"tls.key\"] - TLS private key. - Secret.Data[\"tls.crt\"] - TLS certificate.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "JenkinsPipelineConfig", + "Kind": "APIServerNamedServingCert", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.KeystonePasswordIdentityProvider": { - "description": "KeystonePasswordIdentityProvider provides identities for users authenticating using keystone password credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.APIServerServingCerts": { "type": "object", - "required": [ - "url", - "ca", - "certFile", - "keyFile", - "domainName", - "useKeystoneIdentity" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "ca": { - "description": "CA is the CA for verifying TLS connections", - "type": "string", - "default": "" - }, - "certFile": { - "description": "CertFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" + "namedCertificates": { + "description": "namedCertificates references secrets containing the TLS cert info for serving secure traffic to specific hostnames. If no named certificates are provided, or no named certificates match the server name as understood by a client, the defaultServingCertificate will be used.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.APIServerNamedServingCert" + } + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "APIServerServingCerts", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.APIServerSpec": { + "type": "object", + "properties": { + "additionalCORSAllowedOrigins": { + "description": "additionalCORSAllowedOrigins lists additional, user-defined regular expressions describing hosts for which the API server allows access using the CORS headers. This may be needed to access the API and the integrated OAuth server from JavaScript applications. The values are regular expressions that correspond to the Golang regular expression language.", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "domainName": { - "description": "Domain Name is required for keystone v3", - "type": "string", - "default": "" + "audit": { + "description": "audit specifies the settings for audit configuration to be applied to all OpenShift-provided API servers in the cluster.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.Audit" }, - "keyFile": { - "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" + "clientCA": { + "description": "clientCA references a ConfigMap containing a certificate bundle for the signers that will be recognized for incoming client certificates in addition to the operator managed signers. If this is empty, then only operator managed signers are valid. You usually only have to set this if you have your own PKI you wish to honor client certificates from. The ConfigMap must exist in the openshift-config namespace and contain the following required fields: - ConfigMap.Data[\"ca-bundle.crt\"] - CA bundle.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "encryption": { + "description": "encryption allows the configuration of encryption of resources at the datastore layer.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.APIServerEncryption" }, - "url": { - "description": "URL is the remote URL to connect to", - "type": "string", - "default": "" + "servingCerts": { + "description": "servingCert is the TLS cert info for serving secure traffic. If not specified, operator managed certificates will be used for serving secure traffic.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.APIServerServingCerts" }, - "useKeystoneIdentity": { - "description": "UseKeystoneIdentity flag indicates that user should be authenticated by keystone ID, not by username", - "type": "boolean", - "default": false + "tlsSecurityProfile": { + "description": "tlsSecurityProfile specifies settings for TLS connections for externally exposed servers.\n\nIf unset, a default (which may change between releases) is chosen. Note that only Old, Intermediate and Custom profiles are currently supported, and the maximum available minTLSVersion is VersionTLS12.", + "$ref": "#/definitions/io.openshift.config.v1.TLSSecurityProfile" } }, "x-fabric8-info": { - "Type": "object", - "Group": "legacy.config.openshift.io", + "Type": "nested", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "KeystonePasswordIdentityProvider", + "Kind": "APIServerSpec", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.KubeletConnectionInfo": { - "description": "KubeletConnectionInfo holds information necessary for connecting to a kubelet", + "io.openshift.config.v1.APIServerStatus": { + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "APIServerStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.AWSDNSSpec": { + "description": "AWSDNSSpec contains DNS configuration specific to the Amazon Web Services cloud provider.", "type": "object", - "required": [ - "port", - "ca", - "certFile", - "keyFile" - ], "properties": { - "ca": { - "description": "CA is the CA for verifying TLS connections to kubelets", - "type": "string", - "default": "" - }, - "certFile": { - "description": "CertFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "privateZoneIAMRole": { + "description": "privateZoneIAMRole contains the ARN of an IAM role that should be assumed when performing operations on the cluster's private hosted zone specified in the cluster DNS config. When left empty, no role should be assumed.", "type": "string", "default": "" - }, - "port": { - "description": "Port is the port to connect to kubelets on", - "type": "integer", - "format": "int32", - "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "KubeletConnectionInfo", + "Kind": "AWSDNSSpec", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.KubernetesMasterConfig": { - "description": "KubernetesMasterConfig holds the necessary configuration options for the Kubernetes master", + "io.openshift.config.v1.AWSIngressSpec": { + "description": "AWSIngressSpec holds the desired state of the Ingress for Amazon Web Services infrastructure provider. This only includes fields that can be modified in the cluster.", "type": "object", - "required": [ - "apiLevels", - "disabledAPIGroupVersions", - "masterIP", - "masterEndpointReconcileTTL", - "servicesSubnet", - "servicesNodePortRange", - "schedulerConfigFile", - "podEvictionTimeout", - "proxyClientInfo", - "apiServerArguments", - "controllerArguments", - "schedulerArguments" - ], "properties": { - "apiLevels": { - "description": "APILevels is a list of API levels that should be enabled on startup: v1 as examples", + "type": { + "description": "type allows user to set a load balancer type. When this field is set the default ingresscontroller will get created using the specified LBType. If this field is not set then the default ingress controller of LBType Classic will be created. Valid values are:\n\n* \"Classic\": A Classic Load Balancer that makes routing decisions at either\n the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See\n the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb\n\n* \"NLB\": A Network Load Balancer that makes routing decisions at the\n transport layer (TCP/SSL). See the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "AWSIngressSpec", + "Scope": "Namespaced" + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": {} + } + ] + }, + "io.openshift.config.v1.AWSPlatformSpec": { + "description": "AWSPlatformSpec holds the desired state of the Amazon Web Services infrastructure provider. This only includes fields that can be modified in the cluster.", + "type": "object", + "properties": { + "serviceEndpoints": { + "description": "serviceEndpoints list contains custom endpoints which will override default service endpoint of AWS Services. There must be only one ServiceEndpoint for a service.", "type": "array", "items": { - "type": "string", - "default": "" - } - }, - "apiServerArguments": { - "description": "APIServerArguments are key value pairs that will be passed directly to the Kube apiserver that match the apiservers's command line arguments. These are not migrated, but if you reference a value that does not exist the server will not start. These values may override other settings in KubernetesMasterConfig which may cause invalid configurations.", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, - "controllerArguments": { - "description": "ControllerArguments are key value pairs that will be passed directly to the Kube controller manager that match the controller manager's command line arguments. These are not migrated, but if you reference a value that does not exist the server will not start. These values may override other settings in KubernetesMasterConfig which may cause invalid configurations.", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, - "disabledAPIGroupVersions": { - "description": "DisabledAPIGroupVersions is a map of groups to the versions (or *) that should be disabled.", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, - "masterEndpointReconcileTTL": { - "description": "MasterEndpointReconcileTTL sets the time to live in seconds of an endpoint record recorded by each master. The endpoints are checked at an interval that is 2/3 of this value and this value defaults to 15s if unset. In very large clusters, this value may be increased to reduce the possibility that the master endpoint record expires (due to other load on the etcd server) and causes masters to drop in and out of the kubernetes service record. It is not recommended to set this value below 15s.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "masterIP": { - "description": "MasterIP is the public IP address of kubernetes stuff. If empty, the first result from net.InterfaceAddrs will be used.", - "type": "string", - "default": "" - }, - "podEvictionTimeout": { - "description": "PodEvictionTimeout controls grace period for deleting pods on failed nodes. It takes valid time duration string. If empty, you get the default pod eviction timeout.", - "type": "string", - "default": "" - }, - "proxyClientInfo": { - "description": "ProxyClientInfo specifies the client cert/key to use when proxying to pods", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.CertInfo" - }, - "schedulerArguments": { - "description": "SchedulerArguments are key value pairs that will be passed directly to the Kube scheduler that match the scheduler's command line arguments. These are not migrated, but if you reference a value that does not exist the server will not start. These values may override other settings in KubernetesMasterConfig which may cause invalid configurations.", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, - "schedulerConfigFile": { - "description": "SchedulerConfigFile points to a file that describes how to set up the scheduler. If empty, you get the default scheduling rules.", - "type": "string", - "default": "" - }, - "servicesNodePortRange": { - "description": "ServicesNodePortRange is the range to use for assigning service public ports on a host.", - "type": "string", - "default": "" - }, - "servicesSubnet": { - "description": "ServicesSubnet is the subnet to use for assigning service IPs", - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.AWSServiceEndpoint" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "KubernetesMasterConfig", + "Kind": "AWSPlatformSpec", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.LDAPAttributeMapping": { - "description": "LDAPAttributeMapping maps LDAP attributes to OpenShift identity fields", + "io.openshift.config.v1.AWSPlatformStatus": { + "description": "AWSPlatformStatus holds the current status of the Amazon Web Services infrastructure provider.", "type": "object", "required": [ - "id", - "preferredUsername", - "name", - "email" + "region" ], "properties": { - "email": { - "description": "Email is the list of attributes whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "id": { - "description": "ID is the list of attributes whose values should be used as the user ID. Required. LDAP standard identity attribute is \"dn\"", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "region": { + "description": "region holds the default AWS region for new AWS resources created by the cluster.", + "type": "string", + "default": "" }, - "name": { - "description": "Name is the list of attributes whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity LDAP standard display name attribute is \"cn\"", + "resourceTags": { + "description": "resourceTags is a list of additional tags to apply to AWS resources created for the cluster. See https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html for information on tagging AWS resources. AWS supports a maximum of 50 tags per resource. OpenShift reserves 25 tags for its use, leaving 25 tags available for the user.", "type": "array", "items": { - "type": "string", - "default": "" - } + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.AWSResourceTag" + }, + "x-kubernetes-list-type": "atomic" }, - "preferredUsername": { - "description": "PreferredUsername is the list of attributes whose values should be used as the preferred username. LDAP standard login attribute is \"uid\"", + "serviceEndpoints": { + "description": "ServiceEndpoints list contains custom endpoints which will override default service endpoint of AWS Services. There must be only one ServiceEndpoint for a service.", "type": "array", "items": { - "type": "string", - "default": "" - } + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.AWSServiceEndpoint" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "LDAPAttributeMapping", + "Kind": "AWSPlatformStatus", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.LDAPPasswordIdentityProvider": { - "description": "LDAPPasswordIdentityProvider provides identities for users authenticating using LDAP credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.AWSResourceTag": { + "description": "AWSResourceTag is a tag to apply to AWS resources created for the cluster.", "type": "object", "required": [ - "url", - "bindDN", - "bindPassword", - "insecure", - "ca", - "attributes" + "key", + "value" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "attributes": { - "description": "Attributes maps LDAP attributes to identities", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPAttributeMapping" - }, - "bindDN": { - "description": "BindDN is an optional DN to bind with during the search phase.", - "type": "string", - "default": "" - }, - "bindPassword": { - "description": "BindPassword is an optional password to bind with during the search phase.", - "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource" - }, - "ca": { - "description": "CA is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", + "key": { + "description": "key is the key of the tag", "type": "string", "default": "" }, - "insecure": { - "description": "Insecure, if true, indicates the connection should not use TLS. Cannot be set to true with a URL scheme of \"ldaps://\" If false, \"ldaps://\" URLs connect using TLS, and \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830", - "type": "boolean", - "default": false - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "url": { - "description": "URL is an RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is\n ldap://host:port/basedn?attribute?scope?filter", + "value": { + "description": "value is the value of the tag. Some AWS service do not support empty values. Since tags are added to resources in many services, the length of the tag value must meet the requirements of all services.", "type": "string", "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "legacy.config.openshift.io", + "Type": "nested", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "LDAPPasswordIdentityProvider", + "Kind": "AWSResourceTag", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.LDAPQuery": { - "description": "LDAPQuery holds the options necessary to build an LDAP query", + "io.openshift.config.v1.AWSServiceEndpoint": { + "description": "AWSServiceEndpoint store the configuration of a custom url to override existing defaults of AWS Services.", "type": "object", "required": [ - "baseDN", - "scope", - "derefAliases", - "timeout", - "filter", - "pageSize" + "name", + "url" ], "properties": { - "baseDN": { - "description": "The DN of the branch of the directory where all searches should start from", - "type": "string", - "default": "" - }, - "derefAliases": { - "description": "The (optional) behavior of the search with regards to alisases. Can be: never: never dereference aliases, search: only dereference in searching, base: only dereference in finding the base object, always: always dereference Defaults to always dereferencing if not set", - "type": "string", - "default": "" - }, - "filter": { - "description": "Filter is a valid LDAP search filter that retrieves all relevant entries from the LDAP server with the base DN", + "name": { + "description": "name is the name of the AWS service. The list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html This must be provided and cannot be empty.", "type": "string", "default": "" }, - "pageSize": { - "description": "PageSize is the maximum preferred page size, measured in LDAP entries. A page size of 0 means no paging will be done.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "scope": { - "description": "The (optional) scope of the search. Can be: base: only the base object, one: all object on the base level, sub: the entire subtree Defaults to the entire subtree if not set", + "url": { + "description": "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty.", "type": "string", "default": "" - }, - "timeout": { - "description": "TimeLimit holds the limit of time in seconds that any request to the server can remain outstanding before the wait for a response is given up. If this is 0, no client-side limit is imposed", - "type": "integer", - "format": "int32", - "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "LDAPQuery", + "Kind": "AWSServiceEndpoint", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.LDAPSyncConfig": { - "description": "LDAPSyncConfig holds the necessary configuration options to define an LDAP group sync\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.AdmissionConfig": { "type": "object", - "required": [ - "url", - "bindDN", - "bindPassword", - "insecure", - "ca", - "groupUIDNameMapping" - ], "properties": { - "activeDirectory": { - "description": "ActiveDirectoryConfig holds the configuration for extracting data from an LDAP server set up in a fashion similar to that used in Active Directory: first-class user entries, with group membership determined by a multi-valued attribute on members listing groups they are a member of", - "$ref": "#/definitions/io.openshift.config.legacy.v1.ActiveDirectoryConfig" - }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "augmentedActiveDirectory": { - "description": "AugmentedActiveDirectoryConfig holds the configuration for extracting data from an LDAP server set up in a fashion similar to that used in Active Directory as described above, with one addition: first-class group entries exist and are used to hold metadata but not group membership", - "$ref": "#/definitions/io.openshift.config.legacy.v1.AugmentedActiveDirectoryConfig" - }, - "bindDN": { - "description": "BindDN is an optional DN to bind to the LDAP server with", - "type": "string", - "default": "" - }, - "bindPassword": { - "description": "BindPassword is an optional password to bind with during the search phase.", - "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource" - }, - "ca": { - "description": "CA is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", - "type": "string", - "default": "" - }, - "groupUIDNameMapping": { - "description": "LDAPGroupUIDToOpenShiftGroupNameMapping is an optional direct mapping of LDAP group UIDs to OpenShift Group names", - "type": "object", - "additionalProperties": { + "disabledPlugins": { + "description": "disabledPlugins is a list of admission plugins that must be off. Putting something in this list is almost always a mistake and likely to result in cluster instability.", + "type": "array", + "items": { "type": "string", "default": "" } }, - "insecure": { - "description": "Insecure, if true, indicates the connection should not use TLS. Cannot be set to true with a URL scheme of \"ldaps://\" If false, \"ldaps://\" URLs connect using TLS, and \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830", - "type": "boolean", - "default": false - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "rfc2307": { - "description": "RFC2307Config holds the configuration for extracting data from an LDAP server set up in a fashion similar to RFC2307: first-class group and user entries, with group membership determined by a multi-valued attribute on the group entry listing its members", - "$ref": "#/definitions/io.openshift.config.legacy.v1.RFC2307Config" + "enabledPlugins": { + "description": "enabledPlugins is a list of admission plugins that must be on in addition to the default list. Some admission plugins are disabled by default, but certain configurations require them. This is fairly uncommon and can result in performance penalties and unexpected behavior.", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "url": { - "description": "Host is the scheme, host and port of the LDAP server to connect to: scheme://host:port", - "type": "string", - "default": "" + "pluginConfig": { + "type": "object", + "additionalProperties": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.AdmissionPluginConfig" + } } }, "x-fabric8-info": { - "Type": "object", - "Group": "legacy.config.openshift.io", + "Type": "nested", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "LDAPSyncConfig", + "Kind": "AdmissionConfig", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.LocalQuota": { - "description": "LocalQuota contains options for controlling local volume quota on the node.", + "io.openshift.config.v1.AdmissionPluginConfig": { + "description": "AdmissionPluginConfig holds the necessary configuration options for admission plugins", "type": "object", "required": [ - "perFSGroup" + "location", + "configuration" ], "properties": { - "perFSGroup": { - "description": "FSGroup can be specified to enable a quota on local storage use per unique FSGroup ID. At present this is only implemented for emptyDir volumes, and if the underlying volumeDirectory is on an XFS filesystem.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.api.resource.Quantity" + "configuration": { + "description": "Configuration is an embedded configuration object to be used as the plugin's configuration. If present, it will be used instead of the path to the configuration file.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + }, + "location": { + "description": "Location is the path to a configuration file that contains the plugin's configuration", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "LocalQuota", + "Kind": "AdmissionPluginConfig", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.MasterAuthConfig": { - "description": "MasterAuthConfig configures authentication options in addition to the standard oauth token and client certificate authenticators", + "io.openshift.config.v1.AlibabaCloudPlatformSpec": { + "description": "AlibabaCloudPlatformSpec holds the desired state of the Alibaba Cloud infrastructure provider. This only includes fields that can be modified in the cluster.", + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "AlibabaCloudPlatformSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.AlibabaCloudPlatformStatus": { + "description": "AlibabaCloudPlatformStatus holds the current status of the Alibaba Cloud infrastructure provider.", "type": "object", "required": [ - "requestHeader", - "webhookTokenAuthenticators", - "oauthMetadataFile" + "region" ], "properties": { - "oauthMetadataFile": { - "description": "OAuthMetadataFile is a path to a file containing the discovery endpoint for OAuth 2.0 Authorization Server Metadata for an external OAuth server. See IETF Draft: // https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 This option is mutually exclusive with OAuthConfig", + "region": { + "description": "region specifies the region for Alibaba Cloud resources created for the cluster.", "type": "string", "default": "" }, - "requestHeader": { - "description": "RequestHeader holds options for setting up a front proxy against the API. It is optional.", - "$ref": "#/definitions/io.openshift.config.legacy.v1.RequestHeaderAuthenticationOptions" + "resourceGroupID": { + "description": "resourceGroupID is the ID of the resource group for the cluster.", + "type": "string" }, - "webhookTokenAuthenticators": { - "description": "WebhookTokenAuthnConfig, if present configures remote token reviewers", + "resourceTags": { + "description": "resourceTags is a list of additional tags to apply to Alibaba Cloud resources created for the cluster.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.WebhookTokenAuthenticator" - } + "$ref": "#/definitions/io.openshift.config.v1.AlibabaCloudResourceTag" + }, + "x-kubernetes-list-map-keys": [ + "key" + ], + "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "MasterAuthConfig", + "Kind": "AlibabaCloudPlatformStatus", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.MasterClients": { - "description": "MasterClients holds references to `.kubeconfig` files that qualify master clients for OpenShift and Kubernetes", + "io.openshift.config.v1.AlibabaCloudResourceTag": { + "description": "AlibabaCloudResourceTag is the set of tags to add to apply to resources.", "type": "object", "required": [ - "openshiftLoopbackKubeConfig", - "openshiftLoopbackClientConnectionOverrides" + "key", + "value" ], "properties": { - "openshiftLoopbackClientConnectionOverrides": { - "description": "OpenShiftLoopbackClientConnectionOverrides specifies client overrides for system components to loop back to this master.", - "$ref": "#/definitions/io.openshift.config.legacy.v1.ClientConnectionOverrides" + "key": { + "description": "key is the key of the tag.", + "type": "string", + "default": "" }, - "openshiftLoopbackKubeConfig": { - "description": "OpenShiftLoopbackKubeConfig is a .kubeconfig filename for system components to loopback to this master", + "value": { + "description": "value is the value of the tag.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "MasterClients", + "Kind": "AlibabaCloudResourceTag", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.MasterConfig": { - "description": "MasterConfig holds the necessary configuration options for the OpenShift master\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.Audit": { "type": "object", - "required": [ - "servingInfo", - "authConfig", - "aggregatorConfig", - "corsAllowedOrigins", - "apiLevels", - "masterPublicURL", - "controllers", - "admissionConfig", - "controllerConfig", - "etcdStorageConfig", - "etcdClientInfo", - "kubeletClientInfo", - "kubernetesMasterConfig", - "etcdConfig", - "oauthConfig", - "dnsConfig", - "serviceAccountConfig", - "masterClients", - "imageConfig", - "imagePolicyConfig", - "policyConfig", - "projectConfig", - "routingConfig", - "networkConfig", - "volumeConfig", - "jenkinsPipelineConfig", - "auditConfig" - ], "properties": { - "admissionConfig": { - "description": "AdmissionConfig contains admission control plugin configuration.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.AdmissionConfig" - }, - "aggregatorConfig": { - "description": "AggregatorConfig has options for configuring the aggregator component of the API server.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.AggregatorConfig" - }, - "apiLevels": { - "description": "APILevels is a list of API levels that should be enabled on startup: v1 as examples", + "customRules": { + "description": "customRules specify profiles per group. These profile take precedence over the top-level profile field if they apply. They are evaluation from top to bottom and the first one that matches, applies.", "type": "array", "items": { - "type": "string", - "default": "" - } + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.AuditCustomRule" + }, + "x-kubernetes-list-map-keys": [ + "group" + ], + "x-kubernetes-list-type": "map" }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "profile": { + "description": "profile specifies the name of the desired top-level audit profile to be applied to all requests sent to any of the OpenShift-provided API servers in the cluster (kube-apiserver, openshift-apiserver and oauth-apiserver), with the exception of those requests that match one or more of the customRules.\n\nThe following profiles are provided: - Default: default policy which means MetaData level logging with the exception of events\n (not logged at all), oauthaccesstokens and oauthauthorizetokens (both logged at RequestBody\n level).\n- WriteRequestBodies: like 'Default', but logs request and response HTTP payloads for write requests (create, update, patch). - AllRequestBodies: like 'WriteRequestBodies', but also logs request and response HTTP payloads for read requests (get, list). - None: no requests are logged at all, not even oauthaccesstokens and oauthauthorizetokens.\n\nWarning: It is not recommended to disable audit logging by using the `None` profile unless you are fully aware of the risks of not logging data that can be beneficial when troubleshooting issues. If you disable audit logging and a support situation arises, you might need to enable audit logging and reproduce the issue in order to troubleshoot properly.\n\nIf unset, the 'Default' profile is used as the default.", "type": "string" - }, - "auditConfig": { - "description": "AuditConfig holds information related to auditing capabilities.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.AuditConfig" - }, - "authConfig": { - "description": "AuthConfig configures authentication options in addition to the standard oauth token and client certificate authenticators", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.MasterAuthConfig" - }, - "controllerConfig": { - "description": "ControllerConfig holds configuration values for controllers", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.ControllerConfig" - }, - "controllers": { - "description": "Controllers is a list of the controllers that should be started. If set to \"none\", no controllers will start automatically. The default value is \"*\" which will start all controllers. When using \"*\", you may exclude controllers by prepending a \"-\" in front of their name. No other values are recognized at this time.", + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "Audit", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.AuditConfig": { + "description": "AuditConfig holds configuration for the audit capabilities", + "type": "object", + "required": [ + "enabled", + "auditFilePath", + "maximumFileRetentionDays", + "maximumRetainedFiles", + "maximumFileSizeMegabytes", + "policyFile", + "policyConfiguration", + "logFormat", + "webHookKubeConfig", + "webHookMode" + ], + "properties": { + "auditFilePath": { + "description": "All requests coming to the apiserver will be logged to this file.", "type": "string", "default": "" }, - "corsAllowedOrigins": { - "description": "CORSAllowedOrigins", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "dnsConfig": { - "description": "DNSConfig, if present start the DNS server in this process", - "$ref": "#/definitions/io.openshift.config.legacy.v1.DNSConfig" - }, - "etcdClientInfo": { - "description": "EtcdClientInfo contains information about how to connect to etcd", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.EtcdConnectionInfo" - }, - "etcdConfig": { - "description": "EtcdConfig, if present start etcd in this process", - "$ref": "#/definitions/io.openshift.config.legacy.v1.EtcdConfig" - }, - "etcdStorageConfig": { - "description": "EtcdStorageConfig contains information about how API resources are stored in Etcd. These values are only relevant when etcd is the backing store for the cluster.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.EtcdStorageConfig" - }, - "imageConfig": { - "description": "ImageConfig holds options that describe how to build image names for system components", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.ImageConfig" - }, - "imagePolicyConfig": { - "description": "ImagePolicyConfig controls limits and behavior for importing images", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.ImagePolicyConfig" + "enabled": { + "description": "If this flag is set, audit log will be printed in the logs. The logs contains, method, user and a requested URL.", + "type": "boolean", + "default": false }, - "jenkinsPipelineConfig": { - "description": "JenkinsPipelineConfig holds information about the default Jenkins template used for JenkinsPipeline build strategy.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.JenkinsPipelineConfig" + "logFormat": { + "description": "Format of saved audits (legacy or json).", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "maximumFileRetentionDays": { + "description": "Maximum number of days to retain old log files based on the timestamp encoded in their filename.", + "type": "integer", + "format": "int32", + "default": 0 }, - "kubeletClientInfo": { - "description": "KubeletClientInfo contains information about how to connect to kubelets", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.KubeletConnectionInfo" + "maximumFileSizeMegabytes": { + "description": "Maximum size in megabytes of the log file before it gets rotated. Defaults to 100MB.", + "type": "integer", + "format": "int32", + "default": 0 }, - "kubernetesMasterConfig": { - "description": "KubernetesMasterConfig, if present start the kubernetes master in this process", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.KubernetesMasterConfig" + "maximumRetainedFiles": { + "description": "Maximum number of old log files to retain.", + "type": "integer", + "format": "int32", + "default": 0 }, - "masterClients": { - "description": "MasterClients holds all the client connection information for controllers and other system components", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.MasterClients" + "policyConfiguration": { + "description": "PolicyConfiguration is an embedded policy configuration object to be used as the audit policy configuration. If present, it will be used instead of the path to the policy file.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" }, - "masterPublicURL": { - "description": "MasterPublicURL is how clients can access the OpenShift API server", + "policyFile": { + "description": "PolicyFile is a path to the file that defines the audit policy configuration.", "type": "string", "default": "" }, - "networkConfig": { - "description": "NetworkConfig to be passed to the compiled in network plugin", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.MasterNetworkConfig" - }, - "oauthConfig": { - "description": "OAuthConfig, if present start the /oauth endpoint in this process", - "$ref": "#/definitions/io.openshift.config.legacy.v1.OAuthConfig" + "webHookKubeConfig": { + "description": "Path to a .kubeconfig formatted file that defines the audit webhook configuration.", + "type": "string", + "default": "" }, - "policyConfig": { - "description": "PolicyConfig holds information about where to locate critical pieces of bootstrapping policy", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.PolicyConfig" + "webHookMode": { + "description": "Strategy for sending audit events (block or batch).", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "AuditConfig", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.AuditCustomRule": { + "description": "AuditCustomRule describes a custom rule for an audit profile that takes precedence over the top-level profile.", + "type": "object", + "required": [ + "group", + "profile" + ], + "properties": { + "group": { + "description": "group is a name of group a request user must be member of in order to this profile to apply.", + "type": "string", + "default": "" }, - "projectConfig": { - "description": "ProjectConfig holds information about project creation and defaults", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.ProjectConfig" + "profile": { + "description": "profile specifies the name of the desired audit policy configuration to be deployed to all OpenShift-provided API servers in the cluster.\n\nThe following profiles are provided: - Default: the existing default policy. - WriteRequestBodies: like 'Default', but logs request and response HTTP payloads for write requests (create, update, patch). - AllRequestBodies: like 'WriteRequestBodies', but also logs request and response HTTP payloads for read requests (get, list). - None: no requests are logged at all, not even oauthaccesstokens and oauthauthorizetokens.\n\nIf unset, the 'Default' profile is used as the default.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "AuditCustomRule", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.Authentication": { + "description": "Authentication specifies cluster-wide settings for authentication (like OAuth and webhook token authenticators). The canonical name of an instance is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "type": "object", + "required": [ + "spec" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "routingConfig": { - "description": "RoutingConfig holds information about routing and route generation", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.RoutingConfig" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "serviceAccountConfig": { - "description": "ServiceAccountConfig holds options related to service accounts", + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.ServiceAccountConfig" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "servingInfo": { - "description": "ServingInfo describes how to start serving", + "spec": { + "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.HTTPServingInfo" + "$ref": "#/definitions/io.openshift.config.v1.AuthenticationSpec" }, - "volumeConfig": { - "description": "MasterVolumeConfig contains options for configuring volume plugins in the master node.", + "status": { + "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.MasterVolumeConfig" + "$ref": "#/definitions/io.openshift.config.v1.AuthenticationStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "MasterConfig", - "Scope": "Namespaced" + "Kind": "Authentication", + "Scope": "Clustered" } }, - "io.openshift.config.legacy.v1.MasterNetworkConfig": { - "description": "MasterNetworkConfig to be passed to the compiled in network plugin", + "io.openshift.config.v1.AuthenticationList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "networkPluginName", - "clusterNetworks", - "serviceNetworkCIDR", - "externalIPNetworkCIDRs", - "ingressIPNetworkCIDR" + "metadata", + "items" ], "properties": { - "clusterNetworkCIDR": { - "description": "ClusterNetworkCIDR is the CIDR string to specify the global overlay network's L3 space. Deprecated, but maintained for backwards compatibility, use ClusterNetworks instead.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "clusterNetworks": { - "description": "ClusterNetworks is a list of ClusterNetwork objects that defines the global overlay network's L3 space by specifying a set of CIDR and netmasks that the SDN can allocate addressed from. If this is specified, then ClusterNetworkCIDR and HostSubnetLength may not be set.", + "items": { "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.ClusterNetworkEntry" + "$ref": "#/definitions/io.openshift.config.v1.Authentication" } }, - "externalIPNetworkCIDRs": { - "description": "ExternalIPNetworkCIDRs controls what values are acceptable for the service external IP field. If empty, no externalIP may be set. It may contain a list of CIDRs which are checked for access. If a CIDR is prefixed with !, IPs in that CIDR will be rejected. Rejections will be applied first, then the IP checked against one of the allowed CIDRs. You should ensure this range does not overlap with your nodes, pods, or service CIDRs for security reasons.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "AuthenticationList", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.AuthenticationSpec": { + "type": "object", + "properties": { + "oauthMetadata": { + "description": "oauthMetadata contains the discovery endpoint data for OAuth 2.0 Authorization Server Metadata for an external OAuth server. This discovery document can be viewed from its served location: oc get --raw '/.well-known/oauth-authorization-server' For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 If oauthMetadata.name is non-empty, this value has precedence over any metadata reference stored in status. The key \"oauthMetadata\" is used to locate the data. If specified and the config map or expected key is not found, no metadata is served. If the specified metadata is not valid, no metadata is served. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" + }, + "oidcProviders": { + "description": "OIDCProviders are OIDC identity providers that can issue tokens for this cluster Can only be set if \"Type\" is set to \"OIDC\".\n\nAt most one provider can be configured.", "type": "array", "items": { - "type": "string", - "default": "" - } - }, - "hostSubnetLength": { - "description": "HostSubnetLength is the number of bits to allocate to each host's subnet e.g. 8 would mean a /24 network on the host. Deprecated, but maintained for backwards compatibility, use ClusterNetworks instead.", - "type": "integer", - "format": "int64" + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.OIDCProvider" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map" }, - "ingressIPNetworkCIDR": { - "description": "IngressIPNetworkCIDR controls the range to assign ingress ips from for services of type LoadBalancer on bare metal. If empty, ingress ips will not be assigned. It may contain a single CIDR that will be allocated from. For security reasons, you should ensure that this range does not overlap with the CIDRs reserved for external ips, nodes, pods, or services.", + "serviceAccountIssuer": { + "description": "serviceAccountIssuer is the identifier of the bound service account token issuer. The default is https://kubernetes.default.svc WARNING: Updating this field will not result in immediate invalidation of all bound tokens with the previous issuer value. Instead, the tokens issued by previous service account issuer will continue to be trusted for a time period chosen by the platform (currently set to 24h). This time period is subject to change over time. This allows internal components to transition to use new service account issuer without service distruption.", "type": "string", "default": "" }, - "networkPluginName": { - "description": "NetworkPluginName is the name of the network plugin to use", + "type": { + "description": "type identifies the cluster managed, user facing authentication mode in use. Specifically, it manages the component that responds to login attempts. The default is IntegratedOAuth.", "type": "string", "default": "" }, - "serviceNetworkCIDR": { - "description": "ServiceNetwork is the CIDR string to specify the service networks", - "type": "string", - "default": "" + "webhookTokenAuthenticator": { + "description": "webhookTokenAuthenticator configures a remote token reviewer. These remote authentication webhooks can be used to verify bearer tokens via the tokenreviews.authentication.k8s.io REST API. This is required to honor bearer tokens that are provisioned by an external authentication service.\n\nCan only be set if \"Type\" is set to \"None\".", + "$ref": "#/definitions/io.openshift.config.v1.WebhookTokenAuthenticator" }, - "vxlanPort": { - "description": "VXLANPort is the VXLAN port used by the cluster defaults. If it is not set, 4789 is the default value", - "type": "integer", - "format": "int64" + "webhookTokenAuthenticators": { + "description": "webhookTokenAuthenticators is DEPRECATED, setting it has no effect.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.DeprecatedWebhookTokenAuthenticator" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "MasterNetworkConfig", + "Kind": "AuthenticationSpec", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.MasterVolumeConfig": { - "description": "MasterVolumeConfig contains options for configuring volume plugins in the master node.", + "io.openshift.config.v1.AuthenticationStatus": { "type": "object", "required": [ - "dynamicProvisioningEnabled" + "integratedOAuthMetadata", + "oidcClients" ], "properties": { - "dynamicProvisioningEnabled": { - "description": "DynamicProvisioningEnabled is a boolean that toggles dynamic provisioning off when false, defaults to true", - "type": "boolean" + "integratedOAuthMetadata": { + "description": "integratedOAuthMetadata contains the discovery endpoint data for OAuth 2.0 Authorization Server Metadata for the in-cluster integrated OAuth server. This discovery document can be viewed from its served location: oc get --raw '/.well-known/oauth-authorization-server' For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 This contains the observed value based on cluster state. An explicitly set value in spec.oauthMetadata has precedence over this field. This field has no meaning if authentication spec.type is not set to IntegratedOAuth. The key \"oauthMetadata\" is used to locate the data. If the config map or expected key is not found, no metadata is served. If the specified metadata is not valid, no metadata is served. The namespace for this config map is openshift-config-managed.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" + }, + "oidcClients": { + "description": "OIDCClients is where participating operators place the current OIDC client status for OIDC clients that can be customized by the cluster-admin.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.OIDCClientStatus" + }, + "x-kubernetes-list-map-keys": [ + "componentNamespace", + "componentName" + ], + "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "MasterVolumeConfig", + "Kind": "AuthenticationStatus", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.NamedCertificate": { - "description": "NamedCertificate specifies a certificate/key, and the names it should be served for", + "io.openshift.config.v1.AzurePlatformSpec": { + "description": "AzurePlatformSpec holds the desired state of the Azure infrastructure provider. This only includes fields that can be modified in the cluster.", + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "AzurePlatformSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.AzurePlatformStatus": { + "description": "AzurePlatformStatus holds the current status of the Azure infrastructure provider.", "type": "object", "required": [ - "names", - "certFile", - "keyFile" + "resourceGroupName" ], "properties": { - "certFile": { - "description": "CertFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" + "armEndpoint": { + "description": "armEndpoint specifies a URL to use for resource management in non-soverign clouds such as Azure Stack.", + "type": "string" }, - "keyFile": { - "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "cloudName": { + "description": "cloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK with the appropriate Azure API endpoints. If empty, the value is equal to `AzurePublicCloud`.", + "type": "string" + }, + "networkResourceGroupName": { + "description": "networkResourceGroupName is the Resource Group for network resources like the Virtual Network and Subnets used by the cluster. If empty, the value is same as ResourceGroupName.", + "type": "string" + }, + "resourceGroupName": { + "description": "resourceGroupName is the Resource Group for new Azure resources created for the cluster.", "type": "string", "default": "" }, - "names": { - "description": "Names is a list of DNS names this certificate should be used to secure A name can be a normal DNS name, or can contain leading wildcard segments.", + "resourceTags": { + "description": "resourceTags is a list of additional tags to apply to Azure resources created for the cluster. See https://docs.microsoft.com/en-us/rest/api/resources/tags for information on tagging Azure resources. Due to limitations on Automation, Content Delivery Network, DNS Azure resources, a maximum of 15 tags may be applied. OpenShift reserves 5 tags for internal use, allowing 10 tags for user configuration.", "type": "array", "items": { - "type": "string", - "default": "" - } + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.AzureResourceTag" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "NamedCertificate", + "Kind": "AzurePlatformStatus", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.NodeAuthConfig": { - "description": "NodeAuthConfig holds authn/authz configuration options", + "io.openshift.config.v1.AzureResourceTag": { + "description": "AzureResourceTag is a tag to apply to Azure resources created for the cluster.", "type": "object", "required": [ - "authenticationCacheTTL", - "authenticationCacheSize", - "authorizationCacheTTL", - "authorizationCacheSize" + "key", + "value" ], "properties": { - "authenticationCacheSize": { - "description": "AuthenticationCacheSize indicates how many authentication results should be cached. If 0, the default cache size is used.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "authenticationCacheTTL": { - "description": "AuthenticationCacheTTL indicates how long an authentication result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get the default timeout. If zero (e.g. \"0m\"), caching is disabled", + "key": { + "description": "key is the key part of the tag. A tag key can have a maximum of 128 characters and cannot be empty. Key must begin with a letter, end with a letter, number or underscore, and must contain only alphanumeric characters and the following special characters `_ . -`.", "type": "string", "default": "" }, - "authorizationCacheSize": { - "description": "AuthorizationCacheSize indicates how many authorization results should be cached. If 0, the default cache size is used.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "authorizationCacheTTL": { - "description": "AuthorizationCacheTTL indicates how long an authorization result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get the default timeout. If zero (e.g. \"0m\"), caching is disabled", + "value": { + "description": "value is the value part of the tag. A tag value can have a maximum of 256 characters and cannot be empty. Value must contain only alphanumeric characters and the following special characters `_ + , - . / : ; \u003c = \u003e ? @`.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "NodeAuthConfig", + "Kind": "AzureResourceTag", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.NodeConfig": { - "description": "NodeConfig is the fully specified config starting an OpenShift node\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.BareMetalPlatformLoadBalancer": { + "description": "BareMetalPlatformLoadBalancer defines the load balancer used by the cluster on BareMetal platform.", "type": "object", - "required": [ - "nodeName", - "nodeIP", - "servingInfo", - "masterKubeConfig", - "masterClientConnectionOverrides", - "dnsDomain", - "dnsIP", - "dnsBindAddress", - "dnsNameservers", - "dnsRecursiveResolvConf", - "networkConfig", - "volumeDirectory", - "imageConfig", - "allowDisabledDocker", - "podManifestConfig", - "authConfig", - "dockerConfig", - "iptablesSyncPeriod", - "enableUnidling", - "volumeConfig" - ], "properties": { - "allowDisabledDocker": { - "description": "AllowDisabledDocker if true, the Kubelet will ignore errors from Docker. This means that a node can start on a machine that doesn't have docker started.", - "type": "boolean", - "default": false - }, - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "authConfig": { - "description": "AuthConfig holds authn/authz configuration options", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.NodeAuthConfig" - }, - "dnsBindAddress": { - "description": "DNSBindAddress is the ip:port to serve DNS on. If this is not set, the DNS server will not be started. Because most DNS resolvers will only listen on port 53, if you select an alternative port you will need a DNS proxy like dnsmasq to answer queries for containers. A common configuration is dnsmasq configured on a node IP listening on 53 and delegating queries for dnsDomain to this process, while sending other queries to the host environments nameservers.", - "type": "string", - "default": "" - }, - "dnsDomain": { - "description": "DNSDomain holds the domain suffix that will be used for the DNS search path inside each container. Defaults to 'cluster.local'.", - "type": "string", - "default": "" - }, - "dnsIP": { - "description": "DNSIP is the IP address that pods will use to access cluster DNS. Defaults to the service IP of the Kubernetes master. This IP must be listening on port 53 for compatibility with libc resolvers (which cannot be configured to resolve names from any other port). When running more complex local DNS configurations, this is often set to the local address of a DNS proxy like dnsmasq, which then will consult either the local DNS (see dnsBindAddress) or the master DNS.", + "type": { + "description": "type defines the type of load balancer used by the cluster on BareMetal platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", "type": "string", - "default": "" - }, - "dnsNameservers": { - "description": "DNSNameservers is a list of ip:port values of recursive nameservers to forward queries to when running a local DNS server if dnsBindAddress is set. If this value is empty, the DNS server will default to the nameservers listed in /etc/resolv.conf. If you have configured dnsmasq or another DNS proxy on the system, this value should be set to the upstream nameservers dnsmasq resolves with.", + "default": "OpenShiftManagedDefault" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "BareMetalPlatformLoadBalancer", + "Scope": "Namespaced" + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": {} + } + ] + }, + "io.openshift.config.v1.BareMetalPlatformSpec": { + "description": "BareMetalPlatformSpec holds the desired state of the BareMetal infrastructure provider. This only includes fields that can be modified in the cluster.", + "type": "object", + "properties": { + "apiServerInternalIPs": { + "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", "type": "array", "items": { "type": "string", "default": "" - } - }, - "dnsRecursiveResolvConf": { - "description": "DNSRecursiveResolvConf is a path to a resolv.conf file that contains settings for an upstream server. Only the nameservers and port fields are used. The file must exist and parse correctly. It adds extra nameservers to DNSNameservers if set.", - "type": "string", - "default": "" - }, - "dockerConfig": { - "description": "DockerConfig holds Docker related configuration options.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.DockerConfig" - }, - "enableUnidling": { - "description": "EnableUnidling controls whether or not the hybrid unidling proxy will be set up", - "type": "boolean" - }, - "imageConfig": { - "description": "ImageConfig holds options that describe how to build image names for system components", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.ImageConfig" + }, + "x-kubernetes-list-type": "atomic" }, - "iptablesSyncPeriod": { - "description": "IPTablesSyncPeriod is how often iptable rules are refreshed", - "type": "string", - "default": "" + "ingressIPs": { + "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "machineNetworks": { + "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "BareMetalPlatformSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.BareMetalPlatformStatus": { + "description": "BareMetalPlatformStatus holds the current status of the BareMetal infrastructure provider. For more information about the network architecture used with the BareMetal platform type, see: https://github.com/openshift/installer/blob/master/docs/design/baremetal/networking-infrastructure.md", + "type": "object", + "required": [ + "apiServerInternalIPs", + "ingressIPs" + ], + "properties": { + "apiServerInternalIP": { + "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", "type": "string" }, - "kubeletArguments": { - "description": "KubeletArguments are key value pairs that will be passed directly to the Kubelet that match the Kubelet's command line arguments. These are not migrated or validated, so if you use them they may become invalid. These values override other settings in NodeConfig which may cause invalid configurations.", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, - "masterClientConnectionOverrides": { - "description": "MasterClientConnectionOverrides provides overrides to the client connection used to connect to the master.", - "$ref": "#/definitions/io.openshift.config.legacy.v1.ClientConnectionOverrides" - }, - "masterKubeConfig": { - "description": "MasterKubeConfig is a filename for the .kubeconfig file that describes how to connect this node to the master", - "type": "string", - "default": "" - }, - "networkConfig": { - "description": "NetworkConfig provides network options for the node", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.NodeNetworkConfig" + "apiServerInternalIPs": { + "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "networkPluginName": { - "description": "Deprecated and maintained for backward compatibility, use NetworkConfig.NetworkPluginName instead", + "ingressIP": { + "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", "type": "string" }, - "nodeIP": { - "description": "Node may have multiple IPs, specify the IP to use for pod traffic routing If not specified, network parse/lookup on the nodeName is performed and the first non-loopback address is used", - "type": "string", - "default": "" - }, - "nodeName": { - "description": "NodeName is the value used to identify this particular node in the cluster. If possible, this should be your fully qualified hostname. If you're describing a set of static nodes to the master, this value must match one of the values in the list", - "type": "string", - "default": "" - }, - "podManifestConfig": { - "description": "PodManifestConfig holds the configuration for enabling the Kubelet to create pods based from a manifest file(s) placed locally on the node", - "$ref": "#/definitions/io.openshift.config.legacy.v1.PodManifestConfig" - }, - "proxyArguments": { - "description": "ProxyArguments are key value pairs that will be passed directly to the Proxy that match the Proxy's command line arguments. These are not migrated or validated, so if you use them they may become invalid. These values override other settings in NodeConfig which may cause invalid configurations.", - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } + "ingressIPs": { + "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "servingInfo": { - "description": "ServingInfo describes how to start serving", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.ServingInfo" + "loadBalancer": { + "description": "loadBalancer defines how the load balancer used by the cluster is configured.", + "default": { + "type": "OpenShiftManagedDefault" + }, + "$ref": "#/definitions/io.openshift.config.v1.BareMetalPlatformLoadBalancer" }, - "volumeConfig": { - "description": "VolumeConfig contains options for configuring volumes on the node.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.NodeVolumeConfig" + "machineNetworks": { + "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "volumeDirectory": { - "description": "VolumeDirectory is the directory that volumes will be stored under", - "type": "string", - "default": "" + "nodeDNSIP": { + "description": "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for BareMetal deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.", + "type": "string" } }, "x-fabric8-info": { - "Type": "object", - "Group": "legacy.config.openshift.io", + "Type": "nested", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "NodeConfig", + "Kind": "BareMetalPlatformStatus", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.NodeNetworkConfig": { - "description": "NodeNetworkConfig provides network options for the node", + "io.openshift.config.v1.BasicAuthIdentityProvider": { + "description": "BasicAuthPasswordIdentityProvider provides identities for users authenticating using HTTP basic auth credentials", "type": "object", "required": [ - "networkPluginName", - "mtu" + "url" ], "properties": { - "mtu": { - "description": "Maximum transmission unit for the network packets", - "type": "integer", - "format": "int64", - "default": 0 + "ca": { + "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" }, - "networkPluginName": { - "description": "NetworkPluginName is a string specifying the networking plugin", + "tlsClientCert": { + "description": "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + }, + "tlsClientKey": { + "description": "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + }, + "url": { + "description": "url is the remote URL to connect to", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "NodeNetworkConfig", + "Kind": "BasicAuthIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.NodeVolumeConfig": { - "description": "NodeVolumeConfig contains options for configuring volumes on the node.", + "io.openshift.config.v1.Build": { + "description": "Build configures the behavior of OpenShift builds for the entire cluster. This includes default settings that can be overridden in BuildConfig objects, and overrides which are applied to all builds.\n\nThe canonical name is \"cluster\"\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "localQuota" + "spec" ], "properties": { - "localQuota": { - "description": "LocalQuota contains options for controlling local volume quota on the node.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.LocalQuota" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "Spec holds user-settable values for the build controller configuration", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.BuildSpec" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "legacy.config.openshift.io", + "Type": "object", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "NodeVolumeConfig", - "Scope": "Namespaced" + "Kind": "Build", + "Scope": "Clustered" } }, - "io.openshift.config.legacy.v1.OAuthConfig": { - "description": "OAuthConfig holds the necessary configuration options for OAuth authentication", + "io.openshift.config.v1.BuildDefaults": { "type": "object", - "required": [ - "masterCA", - "masterURL", - "masterPublicURL", - "assetPublicURL", - "alwaysShowProviderSelection", - "identityProviders", - "grantConfig", - "sessionConfig", - "tokenConfig", - "templates" - ], "properties": { - "alwaysShowProviderSelection": { - "description": "AlwaysShowProviderSelection will force the provider selection page to render even when there is only a single provider.", - "type": "boolean", - "default": false - }, - "assetPublicURL": { - "description": "AssetPublicURL is used for building valid client redirect URLs for external access", - "type": "string", - "default": "" - }, - "grantConfig": { - "description": "GrantConfig describes how to handle grants", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.GrantConfig" + "defaultProxy": { + "description": "DefaultProxy contains the default proxy settings for all build operations, including image pull/push and source download.\n\nValues can be overrode by setting the `HTTP_PROXY`, `HTTPS_PROXY`, and `NO_PROXY` environment variables in the build config's strategy.", + "$ref": "#/definitions/io.openshift.config.v1.ProxySpec" }, - "identityProviders": { - "description": "IdentityProviders is an ordered list of ways for a user to identify themselves", + "env": { + "description": "Env is a set of default environment variables that will be applied to the build if the specified variables do not exist on the build", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.IdentityProvider" + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" } }, - "masterCA": { - "description": "MasterCA is the CA for verifying the TLS connection back to the MasterURL.", - "type": "string" - }, - "masterPublicURL": { - "description": "MasterPublicURL is used for building valid client redirect URLs for internal and external access", - "type": "string", - "default": "" - }, - "masterURL": { - "description": "MasterURL is used for making server-to-server calls to exchange authorization codes for access tokens", - "type": "string", - "default": "" - }, - "sessionConfig": { - "description": "SessionConfig hold information about configuring sessions.", - "$ref": "#/definitions/io.openshift.config.legacy.v1.SessionConfig" + "gitProxy": { + "description": "GitProxy contains the proxy settings for git operations only. If set, this will override any Proxy settings for all git commands, such as git clone.\n\nValues that are not set here will be inherited from DefaultProxy.", + "$ref": "#/definitions/io.openshift.config.v1.ProxySpec" }, - "templates": { - "description": "Templates allow you to customize pages like the login page.", - "$ref": "#/definitions/io.openshift.config.legacy.v1.OAuthTemplates" + "imageLabels": { + "description": "ImageLabels is a list of docker labels that are applied to the resulting image. User can override a default label by providing a label with the same name in their Build/BuildConfig.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ImageLabel" + } }, - "tokenConfig": { - "description": "TokenConfig contains options for authorization and access tokens", + "resources": { + "description": "Resources defines resource requirements to execute the build.", "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.TokenConfig" + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "OAuthConfig", + "Kind": "BuildDefaults", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.OAuthTemplates": { - "description": "OAuthTemplates allow for customization of pages like the login page", + "io.openshift.config.v1.BuildList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "login", - "providerSelection", - "error" + "metadata", + "items" ], "properties": { - "error": { - "description": "Error is a path to a file containing a go template used to render error pages during the authentication or grant flow If unspecified, the default error page is used.", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "login": { - "description": "Login is a path to a file containing a go template used to render the login page. If unspecified, the default login page is used.", - "type": "string", - "default": "" + "items": { + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.Build" + } }, - "providerSelection": { - "description": "ProviderSelection is a path to a file containing a go template used to render the provider selection page. If unspecified, the default provider selection page is used.", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "legacy.config.openshift.io", + "Type": "list", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "OAuthTemplates", + "Kind": "BuildList", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.OpenIDClaims": { - "description": "OpenIDClaims contains a list of OpenID claims to use when authenticating with an OpenID identity provider", + "io.openshift.config.v1.BuildOverrides": { "type": "object", - "required": [ - "id", - "preferredUsername", - "name", - "email" - ], "properties": { - "email": { - "description": "Email is the list of claims whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "forcePull": { + "description": "ForcePull overrides, if set, the equivalent value in the builds, i.e. false disables force pull for all builds, true enables force pull for all builds, independently of what each build specifies itself", + "type": "boolean" }, - "id": { - "description": "ID is the list of claims whose values should be used as the user ID. Required. OpenID standard identity claim is \"sub\"", + "imageLabels": { + "description": "ImageLabels is a list of docker labels that are applied to the resulting image. If user provided a label in their Build/BuildConfig with the same name as one in this list, the user's label will be overwritten.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ImageLabel" } }, - "name": { - "description": "Name is the list of claims whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity", - "type": "array", - "items": { + "nodeSelector": { + "description": "NodeSelector is a selector which must be true for the build pod to fit on a node", + "type": "object", + "additionalProperties": { "type": "string", "default": "" } }, - "preferredUsername": { - "description": "PreferredUsername is the list of claims whose values should be used as the preferred username. If unspecified, the preferred username is determined from the value of the id claim", + "tolerations": { + "description": "Tolerations is a list of Tolerations that will override any existing tolerations set on a build pod.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" } } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "OpenIDClaims", + "Kind": "BuildOverrides", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.OpenIDIdentityProvider": { - "description": "OpenIDIdentityProvider provides identities for users authenticating using OpenID credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.BuildSpec": { "type": "object", - "required": [ - "ca", - "clientID", - "clientSecret", - "extraScopes", - "extraAuthorizeParameters", - "urls", - "claims" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "ca": { - "description": "CA is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", - "type": "string", - "default": "" - }, - "claims": { - "description": "Claims mappings", + "additionalTrustedCA": { + "description": "AdditionalTrustedCA is a reference to a ConfigMap containing additional CAs that should be trusted for image pushes and pulls during builds. The namespace for this config map is openshift-config.\n\nDEPRECATED: Additional CAs for image pull and push should be set on image.config.openshift.io/cluster instead.", "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.OpenIDClaims" - }, - "clientID": { - "description": "ClientID is the oauth client ID", - "type": "string", - "default": "" - }, - "clientSecret": { - "description": "ClientSecret is the oauth client secret", - "$ref": "#/definitions/io.openshift.config.legacy.v1.StringSource" - }, - "extraAuthorizeParameters": { - "description": "ExtraAuthorizeParameters are any custom parameters to add to the authorize request.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "extraScopes": { - "description": "ExtraScopes are any scopes to request in addition to the standard \"openid\" scope.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "buildDefaults": { + "description": "BuildDefaults controls the default information for Builds", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.BuildDefaults" }, - "urls": { - "description": "URLs to use to authenticate", + "buildOverrides": { + "description": "BuildOverrides controls override settings for builds", "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.OpenIDURLs" + "$ref": "#/definitions/io.openshift.config.v1.BuildOverrides" } }, "x-fabric8-info": { - "Type": "object", - "Group": "legacy.config.openshift.io", + "Type": "nested", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "OpenIDIdentityProvider", + "Kind": "BuildSpec", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.OpenIDURLs": { - "description": "OpenIDURLs are URLs to use when authenticating with an OpenID identity provider", + "io.openshift.config.v1.CertInfo": { + "description": "CertInfo relates a certificate with a private key", "type": "object", "required": [ - "authorize", - "token", - "userInfo" + "certFile", + "keyFile" ], "properties": { - "authorize": { - "description": "Authorize is the oauth authorization URL", - "type": "string", - "default": "" - }, - "token": { - "description": "Token is the oauth token granting URL", + "certFile": { + "description": "CertFile is a file containing a PEM-encoded certificate", "type": "string", "default": "" }, - "userInfo": { - "description": "UserInfo is the optional userinfo URL. If present, a granted access_token is used to request claims If empty, a granted id_token is parsed for claims", + "keyFile": { + "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "OpenIDURLs", + "Kind": "CertInfo", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.PodManifestConfig": { - "description": "PodManifestConfig holds the necessary configuration options for using pod manifests", + "io.openshift.config.v1.ClientConnectionOverrides": { "type": "object", "required": [ - "path", - "fileCheckIntervalSeconds" + "acceptContentTypes", + "contentType", + "qps", + "burst" ], "properties": { - "fileCheckIntervalSeconds": { - "description": "FileCheckIntervalSeconds is the interval in seconds for checking the manifest file(s) for new data The interval needs to be a positive value", + "acceptContentTypes": { + "description": "acceptContentTypes defines the Accept header sent by clients when connecting to a server, overriding the default value of 'application/json'. This field will control all connections to the server used by a particular client.", + "type": "string", + "default": "" + }, + "burst": { + "description": "burst allows extra queries to accumulate when a client is exceeding its rate.", "type": "integer", - "format": "int64", + "format": "int32", "default": 0 }, - "path": { - "description": "Path specifies the path for the pod manifest file or directory If its a directory, its expected to contain on or more manifest files This is used by the Kubelet to create pods on the node", + "contentType": { + "description": "contentType is the content type used when sending data to the server from this client.", "type": "string", "default": "" + }, + "qps": { + "description": "qps controls the number of queries per second allowed for this connection.", + "type": "number", + "format": "float", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "PodManifestConfig", + "Kind": "ClientConnectionOverrides", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.PolicyConfig": { - "description": "holds the necessary configuration options for", + "io.openshift.config.v1.CloudControllerManagerStatus": { + "description": "CloudControllerManagerStatus holds the state of Cloud Controller Manager (a.k.a. CCM or CPI) related settings", "type": "object", - "required": [ - "userAgentMatchingConfig" - ], "properties": { - "userAgentMatchingConfig": { - "description": "UserAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.UserAgentMatchingConfig" + "state": { + "description": "state determines whether or not an external Cloud Controller Manager is expected to be installed within the cluster. https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/#running-cloud-controller-manager\n\nValid values are \"External\", \"None\" and omitted. When set to \"External\", new nodes will be tainted as uninitialized when created, preventing them from running workloads until they are initialized by the cloud controller manager. When omitted or set to \"None\", new nodes will be not tainted and no extra initialization from the cloud controller manager is expected.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "PolicyConfig", + "Kind": "CloudControllerManagerStatus", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.ProjectConfig": { - "description": "holds the necessary configuration options for", + "io.openshift.config.v1.CloudLoadBalancerConfig": { + "description": "CloudLoadBalancerConfig contains an union discriminator indicating the type of DNS solution in use within the cluster. When the DNSType is `ClusterHosted`, the cloud's Load Balancer configuration needs to be provided so that the DNS solution hosted within the cluster can be configured with those values.", "type": "object", - "required": [ - "defaultNodeSelector", - "projectRequestMessage", - "projectRequestTemplate", - "securityAllocator" - ], "properties": { - "defaultNodeSelector": { - "description": "DefaultNodeSelector holds default project node label selector", - "type": "string", - "default": "" - }, - "projectRequestMessage": { - "description": "ProjectRequestMessage is the string presented to a user if they are unable to request a project via the projectrequest api endpoint", - "type": "string", - "default": "" + "clusterHosted": { + "description": "clusterHosted holds the IP addresses of API, API-Int and Ingress Load Balancers on Cloud Platforms. The DNS solution hosted within the cluster use these IP addresses to provide resolution for API, API-Int and Ingress services.", + "$ref": "#/definitions/io.openshift.config.v1.CloudLoadBalancerIPs" }, - "projectRequestTemplate": { - "description": "ProjectRequestTemplate is the template to use for creating projects in response to projectrequest. It is in the format namespace/template and it is optional. If it is not specified, a default template is used.", + "dnsType": { + "description": "dnsType indicates the type of DNS solution in use within the cluster. Its default value of `PlatformDefault` indicates that the cluster's DNS is the default provided by the cloud platform. It can be set to `ClusterHosted` to bypass the configuration of the cloud default DNS. In this mode, the cluster needs to provide a self-hosted DNS solution for the cluster's installation to succeed. The cluster's use of the cloud's Load Balancers is unaffected by this setting. The value is immutable after it has been set at install time. Currently, there is no way for the customer to add additional DNS entries into the cluster hosted DNS. Enabling this functionality allows the user to start their own DNS solution outside the cluster after installation is complete. The customer would be responsible for configuring this custom DNS solution, and it can be run in addition to the in-cluster DNS solution.", "type": "string", - "default": "" - }, - "securityAllocator": { - "description": "SecurityAllocator controls the automatic allocation of UIDs and MCS labels to a project. If nil, allocation is disabled.", - "$ref": "#/definitions/io.openshift.config.legacy.v1.SecurityAllocator" + "default": "PlatformDefault" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "ProjectConfig", + "Kind": "CloudLoadBalancerConfig", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "dnsType", + "fields-to-discriminateBy": { + "clusterHosted": "ClusterHosted" + } + } + ] }, - "io.openshift.config.legacy.v1.RFC2307Config": { - "description": "RFC2307Config holds the necessary configuration options to define how an LDAP group sync interacts with an LDAP server using the RFC2307 schema", + "io.openshift.config.v1.CloudLoadBalancerIPs": { + "description": "CloudLoadBalancerIPs contains the Load Balancer IPs for the cloud's API, API-Int and Ingress Load balancers. They will be populated as soon as the respective Load Balancers have been configured. These values are utilized to configure the DNS solution hosted within the cluster.", "type": "object", - "required": [ - "groupsQuery", - "groupUIDAttribute", - "groupNameAttributes", - "groupMembershipAttributes", - "usersQuery", - "userUIDAttribute", - "userNameAttributes", - "tolerateMemberNotFoundErrors", - "tolerateMemberOutOfScopeErrors" - ], "properties": { - "groupMembershipAttributes": { - "description": "GroupMembershipAttributes defines which attributes on an LDAP group entry will be interpreted as its members. The values contained in those attributes must be queryable by your UserUIDAttribute", + "apiIntLoadBalancerIPs": { + "description": "apiIntLoadBalancerIPs holds Load Balancer IPs for the internal API service. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Entries in the apiIntLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.", "type": "array", "items": { "type": "string", "default": "" - } + }, + "x-kubernetes-list-type": "set" }, - "groupNameAttributes": { - "description": "GroupNameAttributes defines which attributes on an LDAP group entry will be interpreted as its name to use for an OpenShift group", + "apiLoadBalancerIPs": { + "description": "apiLoadBalancerIPs holds Load Balancer IPs for the API service. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Could be empty for private clusters. Entries in the apiLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.", "type": "array", "items": { "type": "string", "default": "" - } - }, - "groupUIDAttribute": { - "description": "GroupUIDAttributes defines which attribute on an LDAP group entry will be interpreted as its unique identifier. (ldapGroupUID)", - "type": "string", - "default": "" - }, - "groupsQuery": { - "description": "AllGroupsQuery holds the template for an LDAP query that returns group entries.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPQuery" - }, - "tolerateMemberNotFoundErrors": { - "description": "TolerateMemberNotFoundErrors determines the behavior of the LDAP sync job when missing user entries are encountered. If 'true', an LDAP query for users that doesn't find any will be tolerated and an only and error will be logged. If 'false', the LDAP sync job will fail if a query for users doesn't find any. The default value is 'false'. Misconfigured LDAP sync jobs with this flag set to 'true' can cause group membership to be removed, so it is recommended to use this flag with caution.", - "type": "boolean", - "default": false - }, - "tolerateMemberOutOfScopeErrors": { - "description": "TolerateMemberOutOfScopeErrors determines the behavior of the LDAP sync job when out-of-scope user entries are encountered. If 'true', an LDAP query for a user that falls outside of the base DN given for the all user query will be tolerated and only an error will be logged. If 'false', the LDAP sync job will fail if a user query would search outside of the base DN specified by the all user query. Misconfigured LDAP sync jobs with this flag set to 'true' can result in groups missing users, so it is recommended to use this flag with caution.", - "type": "boolean", - "default": false + }, + "x-kubernetes-list-type": "set" }, - "userNameAttributes": { - "description": "UserNameAttributes defines which attributes on an LDAP user entry will be used, in order, as its OpenShift user name. The first attribute with a non-empty value is used. This should match your PreferredUsername setting for your LDAPPasswordIdentityProvider", + "ingressLoadBalancerIPs": { + "description": "ingressLoadBalancerIPs holds IPs for Ingress Load Balancers. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Entries in the ingressLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.", "type": "array", "items": { "type": "string", "default": "" - } + }, + "x-kubernetes-list-type": "set" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "CloudLoadBalancerIPs", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.ClusterCondition": { + "description": "ClusterCondition is a union of typed cluster conditions. The 'type' property determines which of the type-specific properties are relevant. When evaluated on a cluster, the condition may match, not match, or fail to evaluate.", + "type": "object", + "required": [ + "type" + ], + "properties": { + "promql": { + "description": "promQL represents a cluster condition based on PromQL.", + "$ref": "#/definitions/io.openshift.config.v1.PromQLClusterCondition" }, - "userUIDAttribute": { - "description": "UserUIDAttribute defines which attribute on an LDAP user entry will be interpreted as its unique identifier. It must correspond to values that will be found from the GroupMembershipAttributes", + "type": { + "description": "type represents the cluster-condition type. This defines the members and semantics of any additional properties.", "type": "string", "default": "" - }, - "usersQuery": { - "description": "AllUsersQuery holds the template for an LDAP query that returns user entries.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.LDAPQuery" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "RFC2307Config", + "Kind": "ClusterCondition", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.RegistryLocation": { - "description": "RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.", + "io.openshift.config.v1.ClusterNetworkEntry": { + "description": "ClusterNetworkEntry is a contiguous block of IP addresses from which pod IPs are allocated.", "type": "object", "required": [ - "domainName" + "cidr" ], "properties": { - "domainName": { - "description": "DomainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.", + "cidr": { + "description": "The complete block for pod IPs.", "type": "string", "default": "" }, - "insecure": { - "description": "Insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.", - "type": "boolean" + "hostPrefix": { + "description": "The size (prefix) of block to allocate to each node. If this field is not used by the plugin, it can be left unset.", + "type": "integer", + "format": "int64" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "RegistryLocation", + "Kind": "ClusterNetworkEntry", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.RemoteConnectionInfo": { - "description": "RemoteConnectionInfo holds information necessary for establishing a remote connection", + "io.openshift.config.v1.ClusterOperator": { + "description": "ClusterOperator is the Custom Resource object which holds the current state of an operator. This object is used by operators to convey their state to the rest of the cluster.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "url", - "ca", - "certFile", - "keyFile" + "metadata", + "spec" ], "properties": { - "ca": { - "description": "CA is the CA for verifying TLS connections", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "certFile": { - "description": "CertFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "keyFile": { - "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "url": { - "description": "URL is the remote URL to connect to", - "type": "string", - "default": "" + "spec": { + "description": "spec holds configuration that could apply to any operator.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ClusterOperatorSpec" + }, + "status": { + "description": "status holds the information about the state of an operator. It is consistent with status information across the Kubernetes ecosystem.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ClusterOperatorStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "legacy.config.openshift.io", + "Type": "object", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "RemoteConnectionInfo", - "Scope": "Namespaced" + "Kind": "ClusterOperator", + "Scope": "Clustered" } }, - "io.openshift.config.legacy.v1.RequestHeaderAuthenticationOptions": { - "description": "RequestHeaderAuthenticationOptions provides options for setting up a front proxy against the entire API instead of against the /oauth endpoint.", + "io.openshift.config.v1.ClusterOperatorList": { + "description": "ClusterOperatorList is a list of OperatorStatus resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "clientCA", - "clientCommonNames", - "usernameHeaders", - "groupHeaders", - "extraHeaderPrefixes" + "metadata", + "items" ], "properties": { - "clientCA": { - "description": "ClientCA is a file with the trusted signer certs. It is required.", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "clientCommonNames": { - "description": "ClientCommonNames is a required list of common names to require a match from.", + "items": { "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ClusterOperator" } }, - "extraHeaderPrefixes": { - "description": "ExtraHeaderPrefixes is the set of request header prefixes to inspect for user extra. X-Remote-Extra- is suggested.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "ClusterOperatorList", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.ClusterOperatorSpec": { + "description": "ClusterOperatorSpec is empty for now, but you could imagine holding information like \"pause\".", + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "ClusterOperatorSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.ClusterOperatorStatus": { + "description": "ClusterOperatorStatus provides information about the status of the operator.", + "type": "object", + "properties": { + "conditions": { + "description": "conditions describes the state of the operator's managed and monitored components.", "type": "array", "items": { - "type": "string", - "default": "" - } + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ClusterOperatorStatusCondition" + }, + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" }, - "groupHeaders": { - "description": "GroupNameHeader is the set of headers to check for group information. All are unioned.", + "extension": { + "description": "extension contains any additional status information specific to the operator which owns this status object.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + }, + "relatedObjects": { + "description": "relatedObjects is a list of objects that are \"interesting\" or related to this operator. Common uses are: 1. the detailed resource driving the operator 2. operator namespaces 3. operand namespaces", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ObjectReference" } }, - "usernameHeaders": { - "description": "UsernameHeaders is the list of headers to check for user information. First hit wins.", + "versions": { + "description": "versions is a slice of operator and operand version tuples. Operators which manage multiple operands will have multiple operand entries in the array. Available operators must report the version of the operator itself with the name \"operator\". An operator reports a new \"operator\" version when it has rolled out the new version to all of its operands.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.OperandVersion" } } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "RequestHeaderAuthenticationOptions", + "Kind": "ClusterOperatorStatus", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.RequestHeaderIdentityProvider": { - "description": "RequestHeaderIdentityProvider provides identities for users authenticating using request header credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.ClusterOperatorStatusCondition": { + "description": "ClusterOperatorStatusCondition represents the state of the operator's managed and monitored components.", "type": "object", "required": [ - "loginURL", - "challengeURL", - "clientCA", - "clientCommonNames", - "headers", - "preferredUsernameHeaders", - "nameHeaders", - "emailHeaders" + "type", + "status", + "lastTransitionTime" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "lastTransitionTime": { + "description": "lastTransitionTime is the time of the last update to the current status property.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "message provides additional information about the current condition. This is only to be consumed by humans. It may contain Line Feed characters (U+000A), which should be rendered as new lines.", "type": "string" }, - "challengeURL": { - "description": "ChallengeURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}", + "reason": { + "description": "reason is the CamelCase reason for the condition's current status.", + "type": "string" + }, + "status": { + "description": "status of the condition, one of True, False, Unknown.", "type": "string", "default": "" }, - "clientCA": { - "description": "ClientCA is a file with the trusted signer certs. If empty, no request verification is done, and any direct request to the OAuth server can impersonate any identity from this provider, merely by setting a request header.", + "type": { + "description": "type specifies the aspect reported by this condition.", "type": "string", "default": "" - }, - "clientCommonNames": { - "description": "ClientCommonNames is an optional list of common names to require a match from. If empty, any client certificate validated against the clientCA bundle is considered authoritative.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "emailHeaders": { - "description": "EmailHeaders is the set of headers to check for the email address", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "headers": { - "description": "Headers is the set of headers to check for identity information", - "type": "array", - "items": { - "type": "string", - "default": "" - } + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "ClusterOperatorStatusCondition", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.ClusterVersion": { + "description": "ClusterVersion is the configuration for the ClusterVersionOperator. This is where parameters related to automatic updates can be set.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "type": "object", + "required": [ + "spec" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "loginURL": { - "description": "LoginURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}", - "type": "string", - "default": "" + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "nameHeaders": { - "description": "NameHeaders is the set of headers to check for the display name", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "spec": { + "description": "spec is the desired state of the cluster version - the operator will work to ensure that the desired version is applied to the cluster.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ClusterVersionSpec" }, - "preferredUsernameHeaders": { - "description": "PreferredUsernameHeaders is the set of headers to check for the preferred username", + "status": { + "description": "status contains information about the available updates and any in-progress updates.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ClusterVersionStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "ClusterVersion", + "Scope": "Clustered" + } + }, + "io.openshift.config.v1.ClusterVersionCapabilitiesSpec": { + "description": "ClusterVersionCapabilitiesSpec selects the managed set of optional, core cluster components.", + "type": "object", + "properties": { + "additionalEnabledCapabilities": { + "description": "additionalEnabledCapabilities extends the set of managed capabilities beyond the baseline defined in baselineCapabilitySet. The default is an empty set.", "type": "array", "items": { "type": "string", "default": "" - } + }, + "x-kubernetes-list-type": "atomic" + }, + "baselineCapabilitySet": { + "description": "baselineCapabilitySet selects an initial set of optional capabilities to enable, which can be extended via additionalEnabledCapabilities. If unset, the cluster will choose a default, and the default may change over time. The current default is vCurrent.", + "type": "string" } }, "x-fabric8-info": { - "Type": "object", - "Group": "legacy.config.openshift.io", + "Type": "nested", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "RequestHeaderIdentityProvider", + "Kind": "ClusterVersionCapabilitiesSpec", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.RoutingConfig": { - "description": "RoutingConfig holds the necessary configuration options for routing to subdomains", + "io.openshift.config.v1.ClusterVersionCapabilitiesStatus": { + "description": "ClusterVersionCapabilitiesStatus describes the state of optional, core cluster components.", "type": "object", - "required": [ - "subdomain" - ], "properties": { - "subdomain": { - "description": "Subdomain is the suffix appended to $service.$namespace. to form the default route hostname DEPRECATED: This field is being replaced by routers setting their own defaults. This is the \"default\" route.", - "type": "string", - "default": "" + "enabledCapabilities": { + "description": "enabledCapabilities lists all the capabilities that are currently managed.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "knownCapabilities": { + "description": "knownCapabilities lists all the capabilities known to the current cluster.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "RoutingConfig", + "Kind": "ClusterVersionCapabilitiesStatus", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.SecurityAllocator": { - "description": "SecurityAllocator controls the automatic allocation of UIDs and MCS labels to a project. If nil, allocation is disabled.", + "io.openshift.config.v1.ClusterVersionList": { + "description": "ClusterVersionList is a list of ClusterVersion resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "uidAllocatorRange", - "mcsAllocatorRange", - "mcsLabelsPerProject" + "metadata", + "items" ], "properties": { - "mcsAllocatorRange": { - "description": "MCSAllocatorRange defines the range of MCS categories that will be assigned to namespaces. The format is \"\u003cprefix\u003e/\u003cnumberOfLabels\u003e[,\u003cmaxCategory\u003e]\". The default is \"s0/2\" and will allocate from c0 -\u003e c1023, which means a total of 535k labels are available (1024 choose 2 ~ 535k). If this value is changed after startup, new projects may receive labels that are already allocated to other projects. Prefix may be any valid SELinux set of terms (including user, role, and type), although leaving them as the default will allow the server to set them automatically.\n\nExamples: * s0:/2 - Allocate labels from s0:c0,c0 to s0:c511,c511 * s0:/2,512 - Allocate labels from s0:c0,c0,c0 to s0:c511,c511,511", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "mcsLabelsPerProject": { - "description": "MCSLabelsPerProject defines the number of labels that should be reserved per project. The default is 5 to match the default UID and MCS ranges (100k namespaces, 535k/5 labels).", - "type": "integer", - "format": "int32", - "default": 0 + "items": { + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ClusterVersion" + } }, - "uidAllocatorRange": { - "description": "UIDAllocatorRange defines the total set of Unix user IDs (UIDs) that will be allocated to projects automatically, and the size of the block each namespace gets. For example, 1000-1999/10 will allocate ten UIDs per namespace, and will be able to allocate up to 100 blocks before running out of space. The default is to allocate from 1 billion to 2 billion in 10k blocks (which is the expected size of the ranges container images will use once user namespaces are started).", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "legacy.config.openshift.io", + "Type": "list", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "SecurityAllocator", + "Kind": "ClusterVersionList", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.ServiceAccountConfig": { - "description": "ServiceAccountConfig holds the necessary configuration options for a service account", + "io.openshift.config.v1.ClusterVersionSpec": { + "description": "ClusterVersionSpec is the desired version state of the cluster. It includes the version the cluster should be at, how the cluster is identified, and where the cluster should look for version updates.", "type": "object", "required": [ - "managedNames", - "limitSecretReferences", - "privateKeyFile", - "publicKeyFiles", - "masterCA" + "clusterID" ], "properties": { - "limitSecretReferences": { - "description": "LimitSecretReferences controls whether or not to allow a service account to reference any secret in a namespace without explicitly referencing them", - "type": "boolean", - "default": false + "capabilities": { + "description": "capabilities configures the installation of optional, core cluster components. A null value here is identical to an empty object; see the child properties for default semantics.", + "$ref": "#/definitions/io.openshift.config.v1.ClusterVersionCapabilitiesSpec" }, - "managedNames": { - "description": "ManagedNames is a list of service account names that will be auto-created in every namespace. If no names are specified, the ServiceAccountsController will not be started.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "channel": { + "description": "channel is an identifier for explicitly requesting that a non-default set of updates be applied to this cluster. The default channel will be contain stable updates that are appropriate for production clusters.", + "type": "string" }, - "masterCA": { - "description": "MasterCA is the CA for verifying the TLS connection back to the master. The service account controller will automatically inject the contents of this file into pods so they can verify connections to the master.", + "clusterID": { + "description": "clusterID uniquely identifies this cluster. This is expected to be an RFC4122 UUID value (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx in hexadecimal values). This is a required field.", "type": "string", "default": "" }, - "privateKeyFile": { - "description": "PrivateKeyFile is a file containing a PEM-encoded private RSA key, used to sign service account tokens. If no private key is specified, the service account TokensController will not be started.", - "type": "string", - "default": "" + "desiredUpdate": { + "description": "desiredUpdate is an optional field that indicates the desired value of the cluster version. Setting this value will trigger an upgrade (if the current version does not match the desired version). The set of recommended update values is listed as part of available updates in status, and setting values outside that range may cause the upgrade to fail.\n\nSome of the fields are inter-related with restrictions and meanings described here. 1. image is specified, version is specified, architecture is specified. API validation error. 2. image is specified, version is specified, architecture is not specified. You should not do this. version is silently ignored and image is used. 3. image is specified, version is not specified, architecture is specified. API validation error. 4. image is specified, version is not specified, architecture is not specified. image is used. 5. image is not specified, version is specified, architecture is specified. version and desired architecture are used to select an image. 6. image is not specified, version is specified, architecture is not specified. version and current architecture are used to select an image. 7. image is not specified, version is not specified, architecture is specified. API validation error. 8. image is not specified, version is not specified, architecture is not specified. API validation error.\n\nIf an upgrade fails the operator will halt and report status about the failing component. Setting the desired update value back to the previous version will cause a rollback to be attempted. Not all rollbacks will succeed.", + "$ref": "#/definitions/io.openshift.config.v1.Update" }, - "publicKeyFiles": { - "description": "PublicKeyFiles is a list of files, each containing a PEM-encoded public RSA key. (If any file contains a private key, the public portion of the key is used) The list of public keys is used to verify presented service account tokens. Each key is tried in order until the list is exhausted or verification succeeds. If no keys are specified, no service account authentication will be available.", + "overrides": { + "description": "overrides is list of overides for components that are managed by cluster version operator. Marking a component unmanaged will prevent the operator from creating or updating the object.", "type": "array", "items": { - "type": "string", - "default": "" - } + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ComponentOverride" + }, + "x-kubernetes-list-map-keys": [ + "kind", + "group", + "namespace", + "name" + ], + "x-kubernetes-list-type": "map" + }, + "signatureStores": { + "description": "signatureStores contains the upstream URIs to verify release signatures and optional reference to a config map by name containing the PEM-encoded CA bundle.\n\nBy default, CVO will use existing signature stores if this property is empty. The CVO will check the release signatures in the local ConfigMaps first. It will search for a valid signature in these stores in parallel only when local ConfigMaps did not include a valid signature. Validation will fail if none of the signature stores reply with valid signature before timeout. Setting signatureStores will replace the default signature stores with custom signature stores. Default stores can be used with custom signature stores by adding them manually.\n\nA maximum of 32 signature stores may be configured.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SignatureStore" + }, + "x-kubernetes-list-map-keys": [ + "url" + ], + "x-kubernetes-list-type": "map" + }, + "upstream": { + "description": "upstream may be used to specify the preferred update server. By default it will use the appropriate update server for the cluster and region.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "ServiceAccountConfig", + "Kind": "ClusterVersionSpec", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.ServiceServingCert": { - "description": "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.", + "io.openshift.config.v1.ClusterVersionStatus": { + "description": "ClusterVersionStatus reports the status of the cluster versioning, including any upgrades that are in progress. The current field will be set to whichever version the cluster is reconciling to, and the conditions array will report whether the update succeeded, is in progress, or is failing.", "type": "object", "required": [ - "signer" + "desired", + "observedGeneration", + "versionHash", + "capabilities", + "availableUpdates" ], "properties": { - "signer": { - "description": "Signer holds the signing information used to automatically sign serving certificates. If this value is nil, then certs are not signed automatically.", - "$ref": "#/definitions/io.openshift.config.legacy.v1.CertInfo" + "availableUpdates": { + "description": "availableUpdates contains updates recommended for this cluster. Updates which appear in conditionalUpdates but not in availableUpdates may expose this cluster to known issues. This list may be empty if no updates are recommended, if the update service is unavailable, or if an invalid channel has been specified.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.Release" + }, + "x-kubernetes-list-type": "atomic" + }, + "capabilities": { + "description": "capabilities describes the state of optional, core cluster components.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ClusterVersionCapabilitiesStatus" + }, + "conditionalUpdates": { + "description": "conditionalUpdates contains the list of updates that may be recommended for this cluster if it meets specific required conditions. Consumers interested in the set of updates that are actually recommended for this cluster should use availableUpdates. This list may be empty if no updates are recommended, if the update service is unavailable, or if an empty or invalid channel has been specified.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConditionalUpdate" + }, + "x-kubernetes-list-type": "atomic" + }, + "conditions": { + "description": "conditions provides information about the cluster version. The condition \"Available\" is set to true if the desiredUpdate has been reached. The condition \"Progressing\" is set to true if an update is being applied. The condition \"Degraded\" is set to true if an update is currently blocked by a temporary or permanent error. Conditions are only valid for the current desiredUpdate when metadata.generation is equal to status.generation.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ClusterOperatorStatusCondition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "desired": { + "description": "desired is the version that the cluster is reconciling towards. If the cluster is not yet fully initialized desired will be set with the information available, which may be an image or a tag.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.Release" + }, + "history": { + "description": "history contains a list of the most recent versions applied to the cluster. This value may be empty during cluster startup, and then will be updated when a new update is being applied. The newest update is first in the list and it is ordered by recency. Updates in the history have state Completed if the rollout completed - if an update was failing or halfway applied the state will be Partial. Only a limited amount of update history is preserved.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.UpdateHistory" + }, + "x-kubernetes-list-type": "atomic" + }, + "observedGeneration": { + "description": "observedGeneration reports which version of the spec is being synced. If this value is not equal to metadata.generation, then the desired and conditions fields may represent a previous version.", + "type": "integer", + "format": "int64", + "default": 0 + }, + "versionHash": { + "description": "versionHash is a fingerprint of the content that the cluster will be updated with. It is used by the operator to avoid unnecessary work and is for internal use only.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "ServiceServingCert", + "Kind": "ClusterVersionStatus", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.ServingInfo": { - "description": "ServingInfo holds information about serving web pages", + "io.openshift.config.v1.ComponentOverride": { + "description": "ComponentOverride allows overriding cluster version operator's behavior for a component.", "type": "object", "required": [ - "bindAddress", - "bindNetwork", - "certFile", - "keyFile", - "clientCA", - "namedCertificates" + "kind", + "group", + "namespace", + "name", + "unmanaged" ], "properties": { - "bindAddress": { - "description": "BindAddress is the ip:port to serve on", - "type": "string", - "default": "" - }, - "bindNetwork": { - "description": "BindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", + "group": { + "description": "group identifies the API group that the kind is in.", "type": "string", "default": "" }, - "certFile": { - "description": "CertFile is a file containing a PEM-encoded certificate", + "kind": { + "description": "kind indentifies which object to override.", "type": "string", "default": "" }, - "cipherSuites": { - "description": "CipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "clientCA": { - "description": "ClientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates", + "name": { + "description": "name is the component's name.", "type": "string", "default": "" }, - "keyFile": { - "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "namespace": { + "description": "namespace is the component's namespace. If the resource is cluster scoped, the namespace should be empty.", "type": "string", "default": "" }, - "minTLSVersion": { - "description": "MinTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants", - "type": "string" - }, - "namedCertificates": { - "description": "NamedCertificates is a list of certificates to use to secure requests to specific hostnames", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.NamedCertificate" - } + "unmanaged": { + "description": "unmanaged controls if cluster version operator should stop managing the resources in this cluster. Default: false", + "type": "boolean", + "default": false } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "ServingInfo", + "Kind": "ComponentOverride", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.SessionConfig": { - "description": "SessionConfig specifies options for cookie-based sessions. Used by AuthRequestHandlerSession", + "io.openshift.config.v1.ComponentRouteSpec": { + "description": "ComponentRouteSpec allows for configuration of a route's hostname and serving certificate.", "type": "object", "required": [ - "sessionSecretsFile", - "sessionMaxAgeSeconds", - "sessionName" + "namespace", + "name", + "hostname" ], "properties": { - "sessionMaxAgeSeconds": { - "description": "SessionMaxAgeSeconds specifies how long created sessions last. Used by AuthRequestHandlerSession", - "type": "integer", - "format": "int32", - "default": 0 + "hostname": { + "description": "hostname is the hostname that should be used by the route.", + "type": "string", + "default": "" }, - "sessionName": { - "description": "SessionName is the cookie name used to store the session", + "name": { + "description": "name is the logical name of the route to customize.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of status.componentRoutes if the route is to be customized.", "type": "string", "default": "" }, - "sessionSecretsFile": { - "description": "SessionSecretsFile is a reference to a file containing a serialized SessionSecrets object If no file is specified, a random signing and encryption key are generated at each server start", + "namespace": { + "description": "namespace is the namespace of the route to customize.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of status.componentRoutes if the route is to be customized.", "type": "string", "default": "" + }, + "servingCertKeyPairSecret": { + "description": "servingCertKeyPairSecret is a reference to a secret of type `kubernetes.io/tls` in the openshift-config namespace. The serving cert/key pair must match and will be used by the operator to fulfill the intent of serving with this name. If the custom hostname uses the default routing suffix of the cluster, the Secret specification for a serving certificate will not be needed.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "SessionConfig", + "Kind": "ComponentRouteSpec", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.SessionSecret": { - "description": "SessionSecret is a secret used to authenticate/decrypt cookie-based sessions", + "io.openshift.config.v1.ComponentRouteStatus": { + "description": "ComponentRouteStatus contains information allowing configuration of a route's hostname and serving certificate.", "type": "object", "required": [ - "authentication", - "encryption" + "namespace", + "name", + "defaultHostname", + "relatedObjects" ], "properties": { - "authentication": { - "description": "Authentication is used to authenticate sessions using HMAC. Recommended to use a secret with 32 or 64 bytes.", + "conditions": { + "description": "conditions are used to communicate the state of the componentRoutes entry.\n\nSupported conditions include Available, Degraded and Progressing.\n\nIf available is true, the content served by the route can be accessed by users. This includes cases where a default may continue to serve content while the customized route specified by the cluster-admin is being configured.\n\nIf Degraded is true, that means something has gone wrong trying to handle the componentRoutes entry. The currentHostnames field may or may not be in effect.\n\nIf Progressing is true, that means the component is taking some action related to the componentRoutes entry.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" + }, + "consumingUsers": { + "description": "consumingUsers is a slice of ServiceAccounts that need to have read permission on the servingCertKeyPairSecret secret.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "currentHostnames": { + "description": "currentHostnames is the list of current names used by the route. Typically, this list should consist of a single hostname, but if multiple hostnames are supported by the route the operator may write multiple entries to this list.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "defaultHostname": { + "description": "defaultHostname is the hostname of this route prior to customization.", "type": "string", "default": "" }, - "encryption": { - "description": "Encryption is used to encrypt sessions. Must be 16, 24, or 32 characters long, to select AES-128, AES-", + "name": { + "description": "name is the logical name of the route to customize. It does not have to be the actual name of a route resource but it cannot be renamed.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of spec.componentRoutes if the route is to be customized.", + "type": "string", + "default": "" + }, + "namespace": { + "description": "namespace is the namespace of the route to customize. It must be a real namespace. Using an actual namespace ensures that no two components will conflict and the same component can be installed multiple times.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of spec.componentRoutes if the route is to be customized.", "type": "string", "default": "" + }, + "relatedObjects": { + "description": "relatedObjects is a list of resources which are useful when debugging or inspecting how spec.componentRoutes is applied.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ObjectReference" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "SessionSecret", + "Kind": "ComponentRouteStatus", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.SessionSecrets": { - "description": "SessionSecrets list the secrets to use to sign/encrypt and authenticate/decrypt created sessions.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.ConditionalUpdate": { + "description": "ConditionalUpdate represents an update which is recommended to some clusters on the version the current cluster is reconciling, but which may not be recommended for the current cluster.", "type": "object", "required": [ - "secrets" + "release", + "risks" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "conditions": { + "description": "conditions represents the observations of the conditional update's current status. Known types are: * Recommended, for whether the update is recommended for the current cluster.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "release": { + "description": "release is the target of the update.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.Release" }, - "secrets": { - "description": "Secrets is a list of secrets New sessions are signed and encrypted using the first secret. Existing sessions are decrypted/authenticated by each secret until one succeeds. This allows rotating secrets.", + "risks": { + "description": "risks represents the range of issues associated with updating to the target release. The cluster-version operator will evaluate all entries, and only recommend the update if there is at least one entry and all entries recommend the update.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.SessionSecret" - } - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "legacy.config.openshift.io", - "Version": "v1", - "Kind": "SessionSecrets", - "Scope": "Namespaced" - } - }, - "io.openshift.config.legacy.v1.SourceStrategyDefaultsConfig": { - "description": "SourceStrategyDefaultsConfig contains values that apply to builds using the source strategy.", - "type": "object", - "properties": { - "incremental": { - "description": "incremental indicates if s2i build strategies should perform an incremental build or not", - "type": "boolean" + "$ref": "#/definitions/io.openshift.config.v1.ConditionalUpdateRisk" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "name", + "x-kubernetes-patch-strategy": "merge" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "SourceStrategyDefaultsConfig", + "Kind": "ConditionalUpdate", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.StringSource": { - "description": "StringSource allows specifying a string inline, or externally via env var or file. When it contains only a string value, it marshals to a simple JSON string.", + "io.openshift.config.v1.ConditionalUpdateRisk": { + "description": "ConditionalUpdateRisk represents a reason and cluster-state for not recommending a conditional update.", "type": "object", "required": [ - "value", - "env", - "file", - "keyFile" + "url", + "name", + "message", + "matchingRules" ], "properties": { - "env": { - "description": "Env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.", - "type": "string", - "default": "" + "matchingRules": { + "description": "matchingRules is a slice of conditions for deciding which clusters match the risk and which do not. The slice is ordered by decreasing precedence. The cluster-version operator will walk the slice in order, and stop after the first it can successfully evaluate. If no condition can be successfully evaluated, the update will not be recommended.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ClusterCondition" + }, + "x-kubernetes-list-type": "atomic" }, - "file": { - "description": "File references a file containing the cleartext value, or an encrypted value if a keyFile is specified.", + "message": { + "description": "message provides additional information about the risk of updating, in the event that matchingRules match the cluster state. This is only to be consumed by humans. It may contain Line Feed characters (U+000A), which should be rendered as new lines.", "type": "string", "default": "" }, - "keyFile": { - "description": "KeyFile references a file containing the key to use to decrypt the value.", + "name": { + "description": "name is the CamelCase reason for not recommending a conditional update, in the event that matchingRules match the cluster state.", "type": "string", "default": "" }, - "value": { - "description": "Value specifies the cleartext value, or an encrypted value if keyFile is specified.", + "url": { + "description": "url contains information about this risk.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "StringSource", + "Kind": "ConditionalUpdateRisk", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.StringSourceSpec": { - "description": "StringSourceSpec specifies a string value, or external location", + "io.openshift.config.v1.ConfigMapFileReference": { + "description": "ConfigMapFileReference references a config map in a specific namespace. The namespace must be specified at the point of use.", "type": "object", "required": [ - "value", - "env", - "file", - "keyFile" + "name" ], "properties": { - "env": { - "description": "Env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.", - "type": "string", - "default": "" - }, - "file": { - "description": "File references a file containing the cleartext value, or an encrypted value if a keyFile is specified.", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "KeyFile references a file containing the key to use to decrypt the value.", - "type": "string", - "default": "" + "key": { + "description": "Key allows pointing to a specific key/value inside of the configmap. This is useful for logical file references.", + "type": "string" }, - "value": { - "description": "Value specifies the cleartext value, or an encrypted value if keyFile is specified.", + "name": { "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "StringSourceSpec", + "Kind": "ConfigMapFileReference", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.TokenConfig": { - "description": "TokenConfig holds the necessary configuration options for authorization and access tokens", + "io.openshift.config.v1.ConfigMapNameReference": { + "description": "ConfigMapNameReference references a config map in a specific namespace. The namespace must be specified at the point of use.", "type": "object", "required": [ - "authorizeTokenMaxAgeSeconds", - "accessTokenMaxAgeSeconds" + "name" ], "properties": { - "accessTokenInactivityTimeoutSeconds": { - "description": "AccessTokenInactivityTimeoutSeconds defined the default token inactivity timeout for tokens granted by any client. Setting it to nil means the feature is completely disabled (default) The default setting can be overriden on OAuthClient basis. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. Valid values are: - 0: Tokens never time out - X: Tokens time out if there is no activity for X seconds The current minimum allowed value for X is 300 (5 minutes)", - "type": "integer", - "format": "int32" - }, - "accessTokenMaxAgeSeconds": { - "description": "AccessTokenMaxAgeSeconds defines the maximum age of access tokens", - "type": "integer", - "format": "int32", - "default": 0 - }, - "authorizeTokenMaxAgeSeconds": { - "description": "AuthorizeTokenMaxAgeSeconds defines the maximum age of authorize tokens", - "type": "integer", - "format": "int32", - "default": 0 + "name": { + "description": "name is the metadata.name of the referenced config map", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "TokenConfig", + "Kind": "ConfigMapNameReference", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.UserAgentDenyRule": { - "description": "UserAgentDenyRule adds a rejection message that can be used to help a user figure out how to get an approved client", + "io.openshift.config.v1.Console": { + "description": "Console holds cluster-wide configuration for the web console, including the logout URL, and reports the public URL of the console. The canonical name is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "regex", - "httpVerbs", - "rejectionMessage" + "spec" ], "properties": { - "httpVerbs": { - "description": "HTTPVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "regex": { - "description": "UserAgentRegex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "rejectionMessage": { - "description": "RejectionMessage is the message shown when rejecting a client. If it is not a set, the default message is used.", - "type": "string", - "default": "" + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "spec holds user settable values for configuration", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConsoleSpec" + }, + "status": { + "description": "status holds observed values from the cluster. They may not be overridden.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConsoleStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "legacy.config.openshift.io", + "Type": "object", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "UserAgentDenyRule", - "Scope": "Namespaced" + "Kind": "Console", + "Scope": "Clustered" } }, - "io.openshift.config.legacy.v1.UserAgentMatchRule": { - "description": "UserAgentMatchRule describes how to match a given request based on User-Agent and HTTPVerb", + "io.openshift.config.v1.ConsoleAuthentication": { + "description": "ConsoleAuthentication defines a list of optional configuration for console authentication.", "type": "object", - "required": [ - "regex", - "httpVerbs" - ], "properties": { - "httpVerbs": { - "description": "HTTPVerbs specifies which HTTP verbs should be matched. An empty list means \"match all verbs\".", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "regex": { - "description": "UserAgentRegex is a regex that is checked against the User-Agent. Known variants of oc clients 1. oc accessing kube resources: oc/v1.2.0 (linux/amd64) kubernetes/bc4550d 2. oc accessing openshift resources: oc/v1.1.3 (linux/amd64) openshift/b348c2f 3. openshift kubectl accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 4. openshift kubectl accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f 5. oadm accessing kube resources: oadm/v1.2.0 (linux/amd64) kubernetes/bc4550d 6. oadm accessing openshift resources: oadm/v1.1.3 (linux/amd64) openshift/b348c2f 7. openshift cli accessing kube resources: openshift/v1.2.0 (linux/amd64) kubernetes/bc4550d 8. openshift cli accessing openshift resources: openshift/v1.1.3 (linux/amd64) openshift/b348c2f", - "type": "string", - "default": "" + "logoutRedirect": { + "description": "An optional, absolute URL to redirect web browsers to after logging out of the console. If not specified, it will redirect to the default login page. This is required when using an identity provider that supports single sign-on (SSO) such as: - OpenID (Keycloak, Azure) - RequestHeader (GSSAPI, SSPI, SAML) - OAuth (GitHub, GitLab, Google) Logging out of the console will destroy the user's token. The logoutRedirect provides the user the option to perform single logout (SLO) through the identity provider to destroy their single sign-on session.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "UserAgentMatchRule", + "Kind": "ConsoleAuthentication", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.UserAgentMatchingConfig": { - "description": "UserAgentMatchingConfig controls how API calls from *voluntarily* identifying clients will be handled. THIS DOES NOT DEFEND AGAINST MALICIOUS CLIENTS!", + "io.openshift.config.v1.ConsoleList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "requiredClients", - "deniedClients", - "defaultRejectionMessage" + "metadata", + "items" ], "properties": { - "defaultRejectionMessage": { - "description": "DefaultRejectionMessage is the message shown when rejecting a client. If it is not a set, a generic message is given.", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "deniedClients": { - "description": "If this list is non-empty, then a User-Agent must not match any of the UserAgentRegexes", + "items": { "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.UserAgentDenyRule" + "$ref": "#/definitions/io.openshift.config.v1.Console" } }, - "requiredClients": { - "description": "If this list is non-empty, then a User-Agent must match one of the UserAgentRegexes to be allowed", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.legacy.v1.UserAgentMatchRule" - } + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "ConsoleList", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.ConsoleSpec": { + "description": "ConsoleSpec is the specification of the desired behavior of the Console.", + "type": "object", + "properties": { + "authentication": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConsoleAuthentication" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "UserAgentMatchingConfig", + "Kind": "ConsoleSpec", "Scope": "Namespaced" } }, - "io.openshift.config.legacy.v1.WebhookTokenAuthenticator": { - "description": "WebhookTokenAuthenticators holds the necessary configuation options for external token authenticators", + "io.openshift.config.v1.ConsoleStatus": { + "description": "ConsoleStatus defines the observed status of the Console.", "type": "object", "required": [ - "configFile", - "cacheTTL" - ], - "properties": { - "cacheTTL": { - "description": "CacheTTL indicates how long an authentication result should be cached. It takes a valid time duration string (e.g. \"5m\"). If empty, you get a default timeout of 2 minutes. If zero (e.g. \"0m\"), caching is disabled", - "type": "string", - "default": "" - }, - "configFile": { - "description": "ConfigFile is a path to a Kubeconfig file with the webhook configuration", + "consoleURL" + ], + "properties": { + "consoleURL": { + "description": "The URL for the console. This will be derived from the host for the route that is created for the console.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "legacy.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "WebhookTokenAuthenticator", + "Kind": "ConsoleStatus", "Scope": "Namespaced" } }, - "io.openshift.config.openshiftcontrolplane.v1.APIServers": { + "io.openshift.config.v1.CustomFeatureGates": { "type": "object", - "required": [ - "perGroupOptions" - ], "properties": { - "perGroupOptions": { - "description": "perGroupOptions is a list of enabled/disabled API servers in addition to the defaults", + "disabled": { + "description": "disabled is a list of all feature gates that you want to force off", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.PerGroupOptions" + "type": "string", + "default": "" + } + }, + "enabled": { + "description": "enabled is a list of all feature gates that you want to force on", + "type": "array", + "items": { + "type": "string", + "default": "" } } }, "x-fabric8-info": { "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "APIServers", + "Kind": "CustomFeatureGates", "Scope": "Namespaced" } }, - "io.openshift.config.openshiftcontrolplane.v1.BuildControllerConfig": { + "io.openshift.config.v1.CustomTLSProfile": { + "description": "CustomTLSProfile is a user-defined TLS security profile. Be extremely careful using a custom TLS profile as invalid configurations can be catastrophic.", "type": "object", "required": [ - "imageTemplateFormat", - "buildDefaults", - "buildOverrides", - "additionalTrustedCA" + "ciphers", + "minTLSVersion" ], "properties": { - "additionalTrustedCA": { - "description": "additionalTrustedCA is a path to a pem bundle file containing additional CAs that should be trusted for image pushes and pulls during builds.", + "ciphers": { + "description": "ciphers is used to specify the cipher algorithms that are negotiated during the TLS handshake. Operators may remove entries their operands do not support. For example, to use DES-CBC3-SHA (yaml):\n\n ciphers:\n - DES-CBC3-SHA", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "minTLSVersion": { + "description": "minTLSVersion is used to specify the minimal version of the TLS protocol that is negotiated during the TLS handshake. For example, to use TLS versions 1.1, 1.2 and 1.3 (yaml):\n\n minTLSVersion: VersionTLS11\n\nNOTE: currently the highest minTLSVersion allowed is VersionTLS12", "type": "string", "default": "" - }, - "buildDefaults": { - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.BuildDefaultsConfig" - }, - "buildOverrides": { - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.BuildOverridesConfig" - }, - "imageTemplateFormat": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ImageConfig" } }, "x-fabric8-info": { "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "BuildControllerConfig", + "Kind": "CustomTLSProfile", "Scope": "Namespaced" } }, - "io.openshift.config.openshiftcontrolplane.v1.BuildDefaultsConfig": { - "description": "BuildDefaultsConfig controls the default information for Builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.DNS": { + "description": "DNS holds cluster-wide information about DNS. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", + "required": [ + "spec" + ], "properties": { - "annotations": { - "description": "annotations are annotations that will be added to the build pod", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "env": { - "description": "env is a set of default environment variables that will be applied to the build if the specified variables do not exist on the build", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" - } - }, - "gitHTTPProxy": { - "description": "gitHTTPProxy is the location of the HTTPProxy for Git source", - "type": "string" - }, - "gitHTTPSProxy": { - "description": "gitHTTPSProxy is the location of the HTTPSProxy for Git source", - "type": "string" - }, - "gitNoProxy": { - "description": "gitNoProxy is the list of domains for which the proxy should not be used", - "type": "string" - }, - "imageLabels": { - "description": "imageLabels is a list of labels that are applied to the resulting image. User can override a default label by providing a label with the same name in their Build/BuildConfig.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.ImageLabel" - } - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "nodeSelector": { - "description": "nodeSelector is a selector which must be true for the build pod to fit on a node", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "resources": { - "description": "resources defines resource requirements to execute the build.", + "spec": { + "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" + "$ref": "#/definitions/io.openshift.config.v1.DNSSpec" }, - "sourceStrategyDefaults": { - "description": "sourceStrategyDefaults are default values that apply to builds using the source strategy.", - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.SourceStrategyDefaultsConfig" + "status": { + "description": "status holds observed values from the cluster. They may not be overridden.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.DNSStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "openshiftcontrolplane.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "BuildDefaultsConfig", - "Scope": "Namespaced" + "Kind": "DNS", + "Scope": "Clustered" } }, - "io.openshift.config.openshiftcontrolplane.v1.BuildOverridesConfig": { - "description": "BuildOverridesConfig controls override settings for builds\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.DNSList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", + "required": [ + "metadata", + "items" + ], "properties": { - "annotations": { - "description": "annotations are annotations that will be added to the build pod", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "forcePull": { - "description": "forcePull overrides, if set, the equivalent value in the builds, i.e. false disables force pull for all builds, true enables force pull for all builds, independently of what each build specifies itself", - "type": "boolean" - }, - "imageLabels": { - "description": "imageLabels is a list of labels that are applied to the resulting image. If user provided a label in their Build/BuildConfig with the same name as one in this list, the user's label will be overwritten.", + "items": { "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.build.v1.ImageLabel" + "$ref": "#/definitions/io.openshift.config.v1.DNS" } }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "nodeSelector": { - "description": "nodeSelector is a selector which must be true for the build pod to fit on a node", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } - }, - "tolerations": { - "description": "tolerations is a list of Tolerations that will override any existing tolerations set on a build pod.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - } + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "object", - "Group": "openshiftcontrolplane.config.openshift.io", + "Type": "list", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "BuildOverridesConfig", + "Kind": "DNSList", "Scope": "Namespaced" } }, - "io.openshift.config.openshiftcontrolplane.v1.ClusterNetworkEntry": { - "description": "ClusterNetworkEntry defines an individual cluster network. The CIDRs cannot overlap with other cluster network CIDRs, CIDRs reserved for external ips, CIDRs reserved for service networks, and CIDRs reserved for ingress ips.", + "io.openshift.config.v1.DNSPlatformSpec": { + "description": "DNSPlatformSpec holds cloud-provider-specific configuration for DNS administration.", "type": "object", "required": [ - "cidr", - "hostSubnetLength" + "type" ], "properties": { - "cidr": { - "description": "CIDR defines the total range of a cluster networks address space.", + "aws": { + "description": "aws contains DNS configuration specific to the Amazon Web Services cloud provider.", + "$ref": "#/definitions/io.openshift.config.v1.AWSDNSSpec" + }, + "type": { + "description": "type is the underlying infrastructure provider for the cluster. Allowed values: \"\", \"AWS\".\n\nIndividual components may not support all platforms, and must handle unrecognized platforms with best-effort defaults.", "type": "string", "default": "" - }, - "hostSubnetLength": { - "description": "HostSubnetLength is the number of bits of the accompanying CIDR address to allocate to each node. eg, 8 would mean that each node would have a /24 slice of the overlay network for its pod.", - "type": "integer", - "format": "int64", - "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "ClusterNetworkEntry", + "Kind": "DNSPlatformSpec", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "aws": "AWS" + } + } + ] }, - "io.openshift.config.openshiftcontrolplane.v1.DeployerControllerConfig": { + "io.openshift.config.v1.DNSSpec": { "type": "object", "required": [ - "imageTemplateFormat" + "baseDomain" ], "properties": { - "imageTemplateFormat": { + "baseDomain": { + "description": "baseDomain is the base domain of the cluster. All managed DNS records will be sub-domains of this base.\n\nFor example, given the base domain `openshift.example.com`, an API server DNS record may be created for `cluster-api.openshift.example.com`.\n\nOnce set, this field cannot be changed.", + "type": "string", + "default": "" + }, + "platform": { + "description": "platform holds configuration specific to the underlying infrastructure provider for DNS. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time.", "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ImageConfig" + "$ref": "#/definitions/io.openshift.config.v1.DNSPlatformSpec" + }, + "privateZone": { + "description": "privateZone is the location where all the DNS records that are only available internally to the cluster exist.\n\nIf this field is nil, no private records should be created.\n\nOnce set, this field cannot be changed.", + "$ref": "#/definitions/io.openshift.config.v1.DNSZone" + }, + "publicZone": { + "description": "publicZone is the location where all the DNS records that are publicly accessible to the internet exist.\n\nIf this field is nil, no public records should be created.\n\nOnce set, this field cannot be changed.", + "$ref": "#/definitions/io.openshift.config.v1.DNSZone" } }, "x-fabric8-info": { "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "DeployerControllerConfig", + "Kind": "DNSSpec", "Scope": "Namespaced" } }, - "io.openshift.config.openshiftcontrolplane.v1.DockerPullSecretControllerConfig": { + "io.openshift.config.v1.DNSStatus": { + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "DNSStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.DNSZone": { + "description": "DNSZone is used to define a DNS hosted zone. A zone can be identified by an ID or tags.", "type": "object", - "required": [ - "registryURLs", - "internalRegistryHostname" - ], "properties": { - "internalRegistryHostname": { - "description": "internalRegistryHostname is the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format. Docker pull secrets will be generated for this registry.", - "type": "string", - "default": "" + "id": { + "description": "id is the identifier that can be used to find the DNS hosted zone.\n\non AWS zone can be fetched using `ID` as id in [1] on Azure zone can be fetched using `ID` as a pre-determined name in [2], on GCP zone can be fetched using `ID` as a pre-determined name in [3].\n\n[1]: https://docs.aws.amazon.com/cli/latest/reference/route53/get-hosted-zone.html#options [2]: https://docs.microsoft.com/en-us/cli/azure/network/dns/zone?view=azure-cli-latest#az-network-dns-zone-show [3]: https://cloud.google.com/dns/docs/reference/v1/managedZones/get", + "type": "string" }, - "registryURLs": { - "description": "registryURLs is a list of urls that the docker pull secrets should be valid for.", - "type": "array", - "items": { + "tags": { + "description": "tags can be used to query the DNS hosted zone.\n\non AWS, resourcegroupstaggingapi [1] can be used to fetch a zone using `Tags` as tag-filters,\n\n[1]: https://docs.aws.amazon.com/cli/latest/reference/resourcegroupstaggingapi/get-resources.html#options", + "type": "object", + "additionalProperties": { "type": "string", "default": "" } @@ -62908,870 +68892,768 @@ }, "x-fabric8-info": { "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "DockerPullSecretControllerConfig", + "Kind": "DNSZone", "Scope": "Namespaced" } }, - "io.openshift.config.openshiftcontrolplane.v1.FrontProxyConfig": { + "io.openshift.config.v1.DelegatedAuthentication": { + "description": "DelegatedAuthentication allows authentication to be disabled.", "type": "object", - "required": [ - "clientCA", - "allowedNames", - "usernameHeaders", - "groupHeaders", - "extraHeaderPrefixes" - ], "properties": { - "allowedNames": { - "description": "allowedNames is an optional list of common names to require a match from.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "clientCA": { - "description": "clientCA is a path to the CA bundle to use to verify the common name of the front proxy's client cert", - "type": "string", - "default": "" - }, - "extraHeaderPrefixes": { - "description": "extraHeaderPrefixes is the set of header prefixes to check for user extra", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "groupHeaders": { - "description": "groupHeaders is the set of headers to check for groups", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "usernameHeaders": { - "description": "usernameHeaders is the set of headers to check for the username", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "disabled": { + "description": "disabled indicates that authentication should be disabled. By default it will use delegated authentication.", + "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "FrontProxyConfig", + "Kind": "DelegatedAuthentication", "Scope": "Namespaced" } }, - "io.openshift.config.openshiftcontrolplane.v1.ImageConfig": { - "description": "ImageConfig holds the necessary configuration options for building image names for system components", + "io.openshift.config.v1.DelegatedAuthorization": { + "description": "DelegatedAuthorization allows authorization to be disabled.", "type": "object", - "required": [ - "format", - "latest" - ], "properties": { - "format": { - "description": "Format is the format of the name to be built for the system component", - "type": "string", - "default": "" - }, - "latest": { - "description": "Latest determines if the latest tag will be pulled from the registry", - "type": "boolean", - "default": false + "disabled": { + "description": "disabled indicates that authorization should be disabled. By default it will use delegated authorization.", + "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "ImageConfig", + "Kind": "DelegatedAuthorization", "Scope": "Namespaced" } }, - "io.openshift.config.openshiftcontrolplane.v1.ImageImportControllerConfig": { + "io.openshift.config.v1.DeprecatedWebhookTokenAuthenticator": { + "description": "deprecatedWebhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator. It's the same as WebhookTokenAuthenticator but it's missing the 'required' validation on KubeConfig field.", "type": "object", "required": [ - "maxScheduledImageImportsPerMinute", - "disableScheduledImport", - "scheduledImageImportMinimumIntervalSeconds" + "kubeConfig" ], "properties": { - "disableScheduledImport": { - "description": "disableScheduledImport allows scheduled background import of images to be disabled.", - "type": "boolean", - "default": false - }, - "maxScheduledImageImportsPerMinute": { - "description": "maxScheduledImageImportsPerMinute is the maximum number of image streams that will be imported in the background per minute. The default value is 60. Set to -1 for unlimited.", - "type": "integer", - "format": "int32", - "default": 0 + "kubeConfig": { + "description": "kubeConfig contains kube config file data which describes how to access the remote webhook service. For further details, see: https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication The key \"kubeConfig\" is used to locate the data. If the secret or expected key is not found, the webhook is not honored. If the specified kube config data is not valid, the webhook is not honored. The namespace for this secret is determined by the point of use.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "DeprecatedWebhookTokenAuthenticator", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.EquinixMetalPlatformSpec": { + "description": "EquinixMetalPlatformSpec holds the desired state of the Equinix Metal infrastructure provider. This only includes fields that can be modified in the cluster.", + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "EquinixMetalPlatformSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.EquinixMetalPlatformStatus": { + "description": "EquinixMetalPlatformStatus holds the current status of the Equinix Metal infrastructure provider.", + "type": "object", + "properties": { + "apiServerInternalIP": { + "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.", + "type": "string" }, - "scheduledImageImportMinimumIntervalSeconds": { - "description": "scheduledImageImportMinimumIntervalSeconds is the minimum number of seconds that can elapse between when image streams scheduled for background import are checked against the upstream repository. The default value is 15 minutes.", - "type": "integer", - "format": "int32", - "default": 0 + "ingressIP": { + "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "ImageImportControllerConfig", + "Kind": "EquinixMetalPlatformStatus", "Scope": "Namespaced" } }, - "io.openshift.config.openshiftcontrolplane.v1.ImagePolicyConfig": { + "io.openshift.config.v1.EtcdConnectionInfo": { + "description": "EtcdConnectionInfo holds information necessary for connecting to an etcd server", "type": "object", "required": [ - "maxImagesBulkImportedPerRepository", - "allowedRegistriesForImport", - "internalRegistryHostname", - "externalRegistryHostnames", - "additionalTrustedCA" + "ca", + "certFile", + "keyFile" ], "properties": { - "additionalTrustedCA": { - "description": "additionalTrustedCA is a path to a pem bundle file containing additional CAs that should be trusted during imagestream import.", + "ca": { + "description": "CA is a file containing trusted roots for the etcd server certificates", "type": "string", "default": "" }, - "allowedRegistriesForImport": { - "description": "allowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.RegistryLocation" - } + "certFile": { + "description": "CertFile is a file containing a PEM-encoded certificate", + "type": "string", + "default": "" }, - "externalRegistryHostnames": { - "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", + "keyFile": { + "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "type": "string", + "default": "" + }, + "urls": { + "description": "URLs are the URLs for etcd", "type": "array", "items": { "type": "string", "default": "" } + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "EtcdConnectionInfo", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.EtcdStorageConfig": { + "type": "object", + "required": [ + "ca", + "certFile", + "keyFile", + "storagePrefix" + ], + "properties": { + "ca": { + "description": "CA is a file containing trusted roots for the etcd server certificates", + "type": "string", + "default": "" }, - "imageStreamImportMode": { - "description": "imageStreamImportMode provides the import mode value for imagestreams. It can be `Legacy` or `PreserveOriginal`. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.If this value is specified, this setting is applied to all newly created imagestreams which do not have the value set.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.", + "certFile": { + "description": "CertFile is a file containing a PEM-encoded certificate", "type": "string", - "default": "", - "enum": [ - "Legacy", - "PreserveOriginal" - ] + "default": "" }, - "internalRegistryHostname": { - "description": "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format.", + "keyFile": { + "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", "type": "string", "default": "" }, - "maxImagesBulkImportedPerRepository": { - "description": "maxImagesBulkImportedPerRepository controls the number of images that are imported when a user does a bulk import of a container repository. This number is set low to prevent users from importing large numbers of images accidentally. Set -1 for no limit.", - "type": "integer", - "format": "int32", - "default": 0 + "storagePrefix": { + "description": "StoragePrefix is the path within etcd that the OpenShift resources will be rooted under. This value, if changed, will mean existing objects in etcd will no longer be located.", + "type": "string", + "default": "" + }, + "urls": { + "description": "URLs are the URLs for etcd", + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "ImagePolicyConfig", + "Kind": "EtcdStorageConfig", "Scope": "Namespaced" } }, - "io.openshift.config.openshiftcontrolplane.v1.IngressControllerConfig": { + "io.openshift.config.v1.ExternalIPConfig": { + "description": "ExternalIPConfig specifies some IP blocks relevant for the ExternalIP field of a Service resource.", "type": "object", - "required": [ - "ingressIPNetworkCIDR" - ], "properties": { - "ingressIPNetworkCIDR": { - "description": "ingressIPNetworkCIDR controls the range to assign ingress ips from for services of type LoadBalancer on bare metal. If empty, ingress ips will not be assigned. It may contain a single CIDR that will be allocated from. For security reasons, you should ensure that this range does not overlap with the CIDRs reserved for external ips, nodes, pods, or services.", - "type": "string", - "default": "" + "autoAssignCIDRs": { + "description": "autoAssignCIDRs is a list of CIDRs from which to automatically assign Service.ExternalIP. These are assigned when the service is of type LoadBalancer. In general, this is only useful for bare-metal clusters. In Openshift 3.x, this was misleadingly called \"IngressIPs\". Automatically assigned External IPs are not affected by any ExternalIPPolicy rules. Currently, only one entry may be provided.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "policy": { + "description": "policy is a set of restrictions applied to the ExternalIP field. If nil or empty, then ExternalIP is not allowed to be set.", + "$ref": "#/definitions/io.openshift.config.v1.ExternalIPPolicy" } }, "x-fabric8-info": { "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "IngressControllerConfig", + "Kind": "ExternalIPConfig", "Scope": "Namespaced" } }, - "io.openshift.config.openshiftcontrolplane.v1.JenkinsPipelineConfig": { - "description": "JenkinsPipelineConfig holds configuration for the Jenkins pipeline strategy", + "io.openshift.config.v1.ExternalIPPolicy": { + "description": "ExternalIPPolicy configures exactly which IPs are allowed for the ExternalIP field in a Service. If the zero struct is supplied, then none are permitted. The policy controller always allows automatically assigned external IPs.", "type": "object", - "required": [ - "autoProvisionEnabled", - "templateNamespace", - "templateName", - "serviceName", - "parameters" - ], "properties": { - "autoProvisionEnabled": { - "description": "autoProvisionEnabled determines whether a Jenkins server will be spawned from the provided template when the first build config in the project with type JenkinsPipeline is created. When not specified this option defaults to true.", - "type": "boolean" - }, - "parameters": { - "description": "parameters specifies a set of optional parameters to the Jenkins template.", - "type": "object", - "additionalProperties": { + "allowedCIDRs": { + "description": "allowedCIDRs is the list of allowed CIDRs.", + "type": "array", + "items": { "type": "string", "default": "" - } - }, - "serviceName": { - "description": "serviceName is the name of the Jenkins service OpenShift uses to detect whether a Jenkins pipeline handler has already been installed in a project. This value *must* match a service name in the provided template.", - "type": "string", - "default": "" - }, - "templateName": { - "description": "templateName is the name of the default Jenkins template", - "type": "string", - "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "templateNamespace": { - "description": "templateNamespace contains the namespace name where the Jenkins template is stored", - "type": "string", - "default": "" + "rejectedCIDRs": { + "description": "rejectedCIDRs is the list of disallowed CIDRs. These take precedence over allowedCIDRs.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "JenkinsPipelineConfig", + "Kind": "ExternalIPPolicy", "Scope": "Namespaced" } }, - "io.openshift.config.openshiftcontrolplane.v1.NetworkControllerConfig": { - "description": "MasterNetworkConfig to be passed to the compiled in network plugin", + "io.openshift.config.v1.ExternalPlatformSpec": { + "description": "ExternalPlatformSpec holds the desired state for the generic External infrastructure provider.", "type": "object", - "required": [ - "networkPluginName", - "clusterNetworks", - "serviceNetworkCIDR", - "vxlanPort" - ], "properties": { - "clusterNetworks": { - "description": "clusterNetworks contains a list of cluster networks that defines the global overlay networks L3 space.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ClusterNetworkEntry" - } - }, - "networkPluginName": { - "type": "string", - "default": "" - }, - "serviceNetworkCIDR": { + "platformName": { + "description": "PlatformName holds the arbitrary string representing the infrastructure provider name, expected to be set at the installation time. This field is solely for informational and reporting purposes and is not expected to be used for decision-making.", "type": "string", - "default": "" - }, - "vxlanPort": { - "type": "integer", - "format": "int64", - "default": 0 + "default": "Unknown" } }, "x-fabric8-info": { "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "NetworkControllerConfig", + "Kind": "ExternalPlatformSpec", "Scope": "Namespaced" } }, - "io.openshift.config.openshiftcontrolplane.v1.OpenShiftAPIServerConfig": { - "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.ExternalPlatformStatus": { + "description": "ExternalPlatformStatus holds the current status of the generic External infrastructure provider.", + "type": "object", + "properties": { + "cloudControllerManager": { + "description": "cloudControllerManager contains settings specific to the external Cloud Controller Manager (a.k.a. CCM or CPI). When omitted, new nodes will be not tainted and no extra initialization from the cloud controller manager is expected.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.CloudControllerManagerStatus" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "ExternalPlatformStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.FeatureGate": { + "description": "Feature holds cluster-wide information about feature gates. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "servingInfo", - "corsAllowedOrigins", - "auditConfig", - "storageConfig", - "admission", - "kubeClientConfig", - "aggregatorConfig", - "imagePolicyConfig", - "projectConfig", - "routingConfig", - "serviceAccountOAuthGrantMethod", - "jenkinsPipelineConfig", - "cloudProviderFile", - "apiServerArguments", - "apiServers" + "spec" ], "properties": { - "admission": { - "description": "admissionConfig holds information about how to configure admission.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.AdmissionConfig" - }, - "aggregatorConfig": { - "description": "aggregatorConfig contains information about how to verify the aggregator front proxy", - "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.FrontProxyConfig" - }, - "apiServerArguments": { - "type": "object", - "additionalProperties": { - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, - "apiServers": { - "description": "apiServers holds information about enabled/disabled API servers", - "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.APIServers" - }, "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "auditConfig": { - "description": "auditConfig describes how to configure audit information", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.AuditConfig" - }, - "cloudProviderFile": { - "description": "cloudProviderFile points to the cloud config file", - "type": "string", - "default": "" - }, - "corsAllowedOrigins": { - "description": "corsAllowedOrigins", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "imagePolicyConfig": { - "description": "imagePolicyConfig feeds the image policy admission plugin", - "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ImagePolicyConfig" - }, - "jenkinsPipelineConfig": { - "description": "jenkinsPipelineConfig holds information about the default Jenkins template used for JenkinsPipeline build strategy.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.JenkinsPipelineConfig" - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "kubeClientConfig": { + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.KubeClientConfig" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "projectConfig": { - "description": "projectConfig feeds an admission plugin", + "spec": { + "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ProjectConfig" + "$ref": "#/definitions/io.openshift.config.v1.FeatureGateSpec" }, - "routingConfig": { - "description": "routingConfig holds information about routing and route generation", + "status": { + "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.RoutingConfig" - }, - "serviceAccountOAuthGrantMethod": { - "description": "serviceAccountOAuthGrantMethod is used for determining client authorization for service account oauth client. It must be either: deny, prompt, or \"\"", + "$ref": "#/definitions/io.openshift.config.v1.FeatureGateStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "FeatureGate", + "Scope": "Clustered" + } + }, + "io.openshift.config.v1.FeatureGateAttributes": { + "type": "object", + "required": [ + "name" + ], + "properties": { + "name": { + "description": "name is the name of the FeatureGate.", "type": "string", "default": "" - }, - "servingInfo": { - "description": "servingInfo describes how to start serving", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo" - }, - "storageConfig": { - "description": "storageConfig contains information about how to use", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.EtcdStorageConfig" } }, "x-fabric8-info": { - "Type": "object", - "Group": "openshiftcontrolplane.config.openshift.io", + "Type": "nested", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "OpenShiftAPIServerConfig", + "Kind": "FeatureGateAttributes", "Scope": "Namespaced" } }, - "io.openshift.config.openshiftcontrolplane.v1.OpenShiftControllerManagerConfig": { - "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.FeatureGateDetails": { "type": "object", "required": [ - "kubeClientConfig", - "servingInfo", - "leaderElection", - "controllers", - "resourceQuota", - "serviceServingCert", - "deployer", - "build", - "serviceAccount", - "dockerPullSecret", - "network", - "ingress", - "imageImport", - "securityAllocator", - "featureGates" + "version" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "build": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.BuildControllerConfig" - }, - "controllers": { - "description": "controllers is a list of controllers to enable. '*' enables all on-by-default controllers, 'foo' enables the controller \"+ named 'foo', '-foo' disables the controller named 'foo'. Defaults to \"*\".", + "disabled": { + "description": "disabled is a list of all feature gates that are disabled in the cluster for the named version.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.FeatureGateAttributes" } }, - "deployer": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.DeployerControllerConfig" - }, - "dockerPullSecret": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.DockerPullSecretControllerConfig" - }, - "featureGates": { - "description": "featureGates are the set of extra OpenShift feature gates for openshift-controller-manager. These feature gates can be used to enable features that are tech preview or otherwise not available on OpenShift by default.", + "enabled": { + "description": "enabled is a list of all feature gates that are enabled in the cluster for the named version.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.FeatureGateAttributes" } }, - "imageImport": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ImageImportControllerConfig" - }, - "ingress": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.IngressControllerConfig" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "kubeClientConfig": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.KubeClientConfig" - }, - "leaderElection": { - "description": "leaderElection defines the configuration for electing a controller instance to make changes to the cluster. If unspecified, the ControllerTTL value is checked to determine whether the legacy direct etcd election code will be used.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.LeaderElection" - }, - "network": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.NetworkControllerConfig" - }, - "resourceQuota": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ResourceQuotaControllerConfig" - }, - "securityAllocator": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.SecurityAllocator" - }, - "serviceAccount": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ServiceAccountControllerConfig" - }, - "serviceServingCert": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.openshiftcontrolplane.v1.ServiceServingCert" - }, - "servingInfo": { - "description": "servingInfo describes how to start serving", - "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo" + "version": { + "description": "version matches the version provided by the ClusterVersion and in the ClusterOperator.Status.Versions field.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "openshiftcontrolplane.config.openshift.io", + "Type": "nested", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "OpenShiftControllerManagerConfig", + "Kind": "FeatureGateDetails", "Scope": "Namespaced" } }, - "io.openshift.config.openshiftcontrolplane.v1.PerGroupOptions": { + "io.openshift.config.v1.FeatureGateList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "name", - "enabledVersions", - "disabledVersions" + "metadata", + "items" ], "properties": { - "disabledVersions": { - "description": "disabledVersions is a list of versions that must be disabled in addition to the defaults. Must not collide with the list of enabled versions", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "enabledVersions": { - "description": "enabledVersions is a list of versions that must be enabled in addition to the defaults. Must not collide with the list of disabled versions", + "items": { "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.FeatureGate" } }, - "name": { - "description": "name is an API server name (see OpenShiftAPIserverName typed constants for a complete list of available API servers).", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", + "Type": "list", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "PerGroupOptions", + "Kind": "FeatureGateList", "Scope": "Namespaced" } }, - "io.openshift.config.openshiftcontrolplane.v1.ProjectConfig": { + "io.openshift.config.v1.FeatureGateSelection": { "type": "object", - "required": [ - "defaultNodeSelector", - "projectRequestMessage", - "projectRequestTemplate" - ], "properties": { - "defaultNodeSelector": { - "description": "defaultNodeSelector holds default project node label selector", - "type": "string", - "default": "" - }, - "projectRequestMessage": { - "description": "projectRequestMessage is the string presented to a user if they are unable to request a project via the projectrequest api endpoint", - "type": "string", - "default": "" + "customNoUpgrade": { + "description": "customNoUpgrade allows the enabling or disabling of any feature. Turning this feature set on IS NOT SUPPORTED, CANNOT BE UNDONE, and PREVENTS UPGRADES. Because of its nature, this setting cannot be validated. If you have any typos or accidentally apply invalid combinations your cluster may fail in an unrecoverable way. featureSet must equal \"CustomNoUpgrade\" must be set to use this field.", + "$ref": "#/definitions/io.openshift.config.v1.CustomFeatureGates" }, - "projectRequestTemplate": { - "description": "projectRequestTemplate is the template to use for creating projects in response to projectrequest. It is in the format namespace/template and it is optional. If it is not specified, a default template is used.", - "type": "string", - "default": "" + "featureSet": { + "description": "featureSet changes the list of features in the cluster. The default is empty. Be very careful adjusting this setting. Turning on or off features may cause irreversible changes in your cluster which cannot be undone.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "ProjectConfig", + "Kind": "FeatureGateSelection", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "featureSet", + "fields-to-discriminateBy": { + "customNoUpgrade": "CustomNoUpgrade" + } + } + ] }, - "io.openshift.config.openshiftcontrolplane.v1.RegistryLocation": { - "description": "RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.", + "io.openshift.config.v1.FeatureGateSpec": { "type": "object", - "required": [ - "domainName" - ], "properties": { - "domainName": { - "description": "DomainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.", - "type": "string", - "default": "" + "customNoUpgrade": { + "description": "customNoUpgrade allows the enabling or disabling of any feature. Turning this feature set on IS NOT SUPPORTED, CANNOT BE UNDONE, and PREVENTS UPGRADES. Because of its nature, this setting cannot be validated. If you have any typos or accidentally apply invalid combinations your cluster may fail in an unrecoverable way. featureSet must equal \"CustomNoUpgrade\" must be set to use this field.", + "$ref": "#/definitions/io.openshift.config.v1.CustomFeatureGates" }, - "insecure": { - "description": "Insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.", - "type": "boolean" + "featureSet": { + "description": "featureSet changes the list of features in the cluster. The default is empty. Be very careful adjusting this setting. Turning on or off features may cause irreversible changes in your cluster which cannot be undone.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "RegistryLocation", + "Kind": "FeatureGateSpec", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "featureSet", + "fields-to-discriminateBy": { + "customNoUpgrade": "CustomNoUpgrade" + } + } + ] }, - "io.openshift.config.openshiftcontrolplane.v1.ResourceQuotaControllerConfig": { + "io.openshift.config.v1.FeatureGateStatus": { "type": "object", "required": [ - "concurrentSyncs", - "syncPeriod", - "minResyncPeriod" + "featureGates" ], "properties": { - "concurrentSyncs": { - "type": "integer", - "format": "int32", - "default": 0 - }, - "minResyncPeriod": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" + "conditions": { + "description": "conditions represent the observations of the current state. Known .status.conditions.type are: \"DeterminationDegraded\"", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" }, - "syncPeriod": { - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" + "featureGates": { + "description": "featureGates contains a list of enabled and disabled featureGates that are keyed by payloadVersion. Operators other than the CVO and cluster-config-operator, must read the .status.featureGates, locate the version they are managing, find the enabled/disabled featuregates and make the operand and operator match. The enabled/disabled values for a particular version may change during the life of the cluster as various .spec.featureSet values are selected. Operators may choose to restart their processes to pick up these changes, but remembering past enable/disable lists is beyond the scope of this API and is the responsibility of individual operators. Only featureGates with .version in the ClusterVersion.status will be present in this list.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.FeatureGateDetails" + }, + "x-kubernetes-list-map-keys": [ + "version" + ], + "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "ResourceQuotaControllerConfig", + "Kind": "FeatureGateStatus", "Scope": "Namespaced" } }, - "io.openshift.config.openshiftcontrolplane.v1.RoutingConfig": { - "description": "RoutingConfig holds the necessary configuration options for routing to subdomains", + "io.openshift.config.v1.FeatureGateTests": { "type": "object", "required": [ - "subdomain" + "featureGate", + "tests" ], "properties": { - "subdomain": { - "description": "subdomain is the suffix appended to $service.$namespace. to form the default route hostname DEPRECATED: This field is being replaced by routers setting their own defaults. This is the \"default\" route.", + "featureGate": { + "description": "FeatureGate is the name of the FeatureGate as it appears in The FeatureGate CR instance.", "type": "string", "default": "" + }, + "tests": { + "description": "Tests contains an item for every TestName", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.TestDetails" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "RoutingConfig", + "Kind": "FeatureGateTests", "Scope": "Namespaced" } }, - "io.openshift.config.openshiftcontrolplane.v1.SecurityAllocator": { - "description": "SecurityAllocator controls the automatic allocation of UIDs and MCS labels to a project. If nil, allocation is disabled.", + "io.openshift.config.v1.GCPPlatformSpec": { + "description": "GCPPlatformSpec holds the desired state of the Google Cloud Platform infrastructure provider. This only includes fields that can be modified in the cluster.", "type": "object", - "required": [ - "uidAllocatorRange", - "mcsAllocatorRange", - "mcsLabelsPerProject" - ], - "properties": { - "mcsAllocatorRange": { - "description": "MCSAllocatorRange defines the range of MCS categories that will be assigned to namespaces. The format is \"\u003cprefix\u003e/\u003cnumberOfLabels\u003e[,\u003cmaxCategory\u003e]\". The default is \"s0/2\" and will allocate from c0 -\u003e c1023, which means a total of 535k labels are available (1024 choose 2 ~ 535k). If this value is changed after startup, new projects may receive labels that are already allocated to other projects. Prefix may be any valid SELinux set of terms (including user, role, and type), although leaving them as the default will allow the server to set them automatically.\n\nExamples: * s0:/2 - Allocate labels from s0:c0,c0 to s0:c511,c511 * s0:/2,512 - Allocate labels from s0:c0,c0,c0 to s0:c511,c511,511", - "type": "string", - "default": "" - }, - "mcsLabelsPerProject": { - "description": "MCSLabelsPerProject defines the number of labels that should be reserved per project. The default is 5 to match the default UID and MCS ranges (100k namespaces, 535k/5 labels).", - "type": "integer", - "format": "int32", - "default": 0 - }, - "uidAllocatorRange": { - "description": "UIDAllocatorRange defines the total set of Unix user IDs (UIDs) that will be allocated to projects automatically, and the size of the block each namespace gets. For example, 1000-1999/10 will allocate ten UIDs per namespace, and will be able to allocate up to 100 blocks before running out of space. The default is to allocate from 1 billion to 2 billion in 10k blocks (which is the expected size of the ranges container images will use once user namespaces are started).", - "type": "string", - "default": "" - } - }, "x-fabric8-info": { "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "SecurityAllocator", + "Kind": "GCPPlatformSpec", "Scope": "Namespaced" } }, - "io.openshift.config.openshiftcontrolplane.v1.ServiceAccountControllerConfig": { + "io.openshift.config.v1.GCPPlatformStatus": { + "description": "GCPPlatformStatus holds the current status of the Google Cloud Platform infrastructure provider.", "type": "object", "required": [ - "managedNames" + "projectID", + "region" ], "properties": { - "managedNames": { - "description": "managedNames is a list of service account names that will be auto-created in every namespace. If no names are specified, the ServiceAccountsController will not be started.", + "cloudLoadBalancerConfig": { + "description": "cloudLoadBalancerConfig is a union that contains the IP addresses of API, API-Int and Ingress Load Balancers created on the cloud platform. These values would not be populated on on-prem platforms. These Load Balancer IPs are used to configure the in-cluster DNS instances for API, API-Int and Ingress services. `dnsType` is expected to be set to `ClusterHosted` when these Load Balancer IP addresses are populated and used.", + "default": { + "dnsType": "PlatformDefault" + }, + "$ref": "#/definitions/io.openshift.config.v1.CloudLoadBalancerConfig" + }, + "projectID": { + "description": "resourceGroupName is the Project ID for new GCP resources created for the cluster.", + "type": "string", + "default": "" + }, + "region": { + "description": "region holds the region for new GCP resources created for the cluster.", + "type": "string", + "default": "" + }, + "resourceLabels": { + "description": "resourceLabels is a list of additional labels to apply to GCP resources created for the cluster. See https://cloud.google.com/compute/docs/labeling-resources for information on labeling GCP resources. GCP supports a maximum of 64 labels per resource. OpenShift reserves 32 labels for internal use, allowing 32 labels for user configuration.", "type": "array", "items": { - "type": "string", - "default": "" - } + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.GCPResourceLabel" + }, + "x-kubernetes-list-map-keys": [ + "key" + ], + "x-kubernetes-list-type": "map" + }, + "resourceTags": { + "description": "resourceTags is a list of additional tags to apply to GCP resources created for the cluster. See https://cloud.google.com/resource-manager/docs/tags/tags-overview for information on tagging GCP resources. GCP supports a maximum of 50 tags per resource.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.GCPResourceTag" + }, + "x-kubernetes-list-map-keys": [ + "key" + ], + "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "ServiceAccountControllerConfig", + "Kind": "GCPPlatformStatus", "Scope": "Namespaced" } }, - "io.openshift.config.openshiftcontrolplane.v1.ServiceServingCert": { - "description": "ServiceServingCert holds configuration for service serving cert signer which creates cert/key pairs for pods fulfilling a service to serve with.", + "io.openshift.config.v1.GCPResourceLabel": { + "description": "GCPResourceLabel is a label to apply to GCP resources created for the cluster.", "type": "object", "required": [ - "signer" + "key", + "value" ], "properties": { - "signer": { - "description": "Signer holds the signing information used to automatically sign serving certificates. If this value is nil, then certs are not signed automatically.", - "$ref": "#/definitions/io.openshift.config.v1.CertInfo" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", - "Version": "v1", - "Kind": "ServiceServingCert", - "Scope": "Namespaced" - } - }, - "io.openshift.config.openshiftcontrolplane.v1.SourceStrategyDefaultsConfig": { - "description": "SourceStrategyDefaultsConfig contains values that apply to builds using the source strategy.", - "type": "object", - "properties": { - "incremental": { - "description": "incremental indicates if s2i build strategies should perform an incremental build or not", - "type": "boolean" + "key": { + "description": "key is the key part of the label. A label key can have a maximum of 63 characters and cannot be empty. Label key must begin with a lowercase letter, and must contain only lowercase letters, numeric characters, and the following special characters `_-`. Label key must not have the reserved prefixes `kubernetes-io` and `openshift-io`.", + "type": "string", + "default": "" + }, + "value": { + "description": "value is the value part of the label. A label value can have a maximum of 63 characters and cannot be empty. Value must contain only lowercase letters, numeric characters, and the following special characters `_-`.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "openshiftcontrolplane.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "SourceStrategyDefaultsConfig", + "Kind": "GCPResourceLabel", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.AllowAllPasswordIdentityProvider": { - "description": "AllowAllPasswordIdentityProvider provides identities for users authenticating using non-empty passwords\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.GCPResourceTag": { + "description": "GCPResourceTag is a tag to apply to GCP resources created for the cluster.", "type": "object", + "required": [ + "parentID", + "key", + "value" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "key": { + "description": "key is the key part of the tag. A tag key can have a maximum of 63 characters and cannot be empty. Tag key must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `._-`.", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "parentID": { + "description": "parentID is the ID of the hierarchical resource where the tags are defined, e.g. at the Organization or the Project level. To find the Organization or Project ID refer to the following pages: https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id, https://cloud.google.com/resource-manager/docs/creating-managing-projects#identifying_projects. An OrganizationID must consist of decimal numbers, and cannot have leading zeroes. A ProjectID must be 6 to 30 characters in length, can only contain lowercase letters, numbers, and hyphens, and must start with a letter, and cannot end with a hyphen.", + "type": "string", + "default": "" + }, + "value": { + "description": "value is the value part of the tag. A tag value can have a maximum of 63 characters and cannot be empty. Tag value must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `_-.@%=+:,*#\u0026(){}[]` and spaces.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "osin.config.openshift.io", + "Type": "nested", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "AllowAllPasswordIdentityProvider", + "Kind": "GCPResourceTag", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.BasicAuthPasswordIdentityProvider": { - "description": "BasicAuthPasswordIdentityProvider provides identities for users authenticating using HTTP basic auth credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.GenericAPIServerConfig": { + "description": "GenericAPIServerConfig is an inline-able struct for aggregated apiservers that need to store data in etcd", "type": "object", "required": [ - "url", - "ca", - "certFile", - "keyFile" + "servingInfo", + "corsAllowedOrigins", + "auditConfig", + "storageConfig", + "admission", + "kubeClientConfig" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "admission": { + "description": "admissionConfig holds information about how to configure admission.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.AdmissionConfig" }, - "ca": { - "description": "CA is the CA for verifying TLS connections", - "type": "string", - "default": "" + "auditConfig": { + "description": "auditConfig describes how to configure audit information", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.AuditConfig" }, - "certFile": { - "description": "CertFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" + "corsAllowedOrigins": { + "description": "corsAllowedOrigins", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "keyFile": { - "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" + "kubeClientConfig": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.KubeClientConfig" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "servingInfo": { + "description": "servingInfo describes how to start serving", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo" }, - "url": { - "description": "URL is the remote URL to connect to", - "type": "string", - "default": "" + "storageConfig": { + "description": "storageConfig contains information about how to use", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.EtcdStorageConfig" } }, "x-fabric8-info": { - "Type": "object", - "Group": "osin.config.openshift.io", + "Type": "nested", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "BasicAuthPasswordIdentityProvider", + "Kind": "GenericAPIServerConfig", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.DenyAllPasswordIdentityProvider": { - "description": "DenyAllPasswordIdentityProvider provides no identities for users\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.GenericControllerConfig": { + "description": "GenericControllerConfig provides information to configure a controller", "type": "object", + "required": [ + "servingInfo", + "leaderElection", + "authentication", + "authorization" + ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "authentication": { + "description": "authentication allows configuration of authentication for the endpoints", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.DelegatedAuthentication" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "authorization": { + "description": "authorization allows configuration of authentication for the endpoints", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.DelegatedAuthorization" + }, + "leaderElection": { + "description": "leaderElection provides information to elect a leader. Only override this if you have a specific need", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.LeaderElection" + }, + "servingInfo": { + "description": "ServingInfo is the HTTP serving information for the controller's endpoints", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo" } }, "x-fabric8-info": { - "Type": "object", - "Group": "osin.config.openshift.io", + "Type": "nested", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "DenyAllPasswordIdentityProvider", + "Kind": "GenericControllerConfig", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.GitHubIdentityProvider": { - "description": "GitHubIdentityProvider provides identities for users authenticating using GitHub credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.GitHubIdentityProvider": { + "description": "GitHubIdentityProvider provides identities for users authenticating using GitHub credentials", "type": "object", "required": [ "clientID", - "clientSecret", - "organizations", - "teams", - "hostname", - "ca" + "clientSecret" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, "ca": { - "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server. If empty, the default system roots are used. This can only be configured when hostname is set to a non-empty value.", - "type": "string", - "default": "" + "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. This can only be configured when hostname is set to a non-empty value. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" }, "clientID": { "description": "clientID is the oauth client ID", @@ -63779,18 +69661,15 @@ "default": "" }, "clientSecret": { - "description": "clientSecret is the oauth client secret", - "$ref": "#/definitions/io.openshift.config.v1.StringSource" + "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" }, "hostname": { - "description": "hostname is the optional domain (e.g. \"mycompany.com\") for use with a hosted instance of GitHub Enterprise. It must match the GitHub Enterprise settings value that is configured at /setup/settings#hostname.", + "description": "hostname is the optional domain (e.g. \"mycompany.com\") for use with a hosted instance of GitHub Enterprise. It must match the GitHub Enterprise settings value configured at /setup/settings#hostname.", "type": "string", "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, "organizations": { "description": "organizations optionally restricts which organizations are allowed to log in", "type": "array", @@ -63809,31 +69688,26 @@ } }, "x-fabric8-info": { - "Type": "object", - "Group": "osin.config.openshift.io", + "Type": "nested", + "Group": "config.openshift.io", "Version": "v1", "Kind": "GitHubIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.GitLabIdentityProvider": { - "description": "GitLabIdentityProvider provides identities for users authenticating using GitLab credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.GitLabIdentityProvider": { + "description": "GitLabIdentityProvider provides identities for users authenticating using GitLab credentials", "type": "object", "required": [ - "ca", - "url", "clientID", - "clientSecret" + "clientSecret", + "url" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, "ca": { - "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", - "type": "string", - "default": "" + "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" }, "clientID": { "description": "clientID is the oauth client ID", @@ -63841,16 +69715,9 @@ "default": "" }, "clientSecret": { - "description": "clientSecret is the oauth client secret", - "$ref": "#/definitions/io.openshift.config.v1.StringSource" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "legacy": { - "description": "legacy determines if OAuth2 or OIDC should be used If true, OAuth2 is used If false, OIDC is used If nil and the URL's host is gitlab.com, OIDC is used Otherwise, OAuth2 is used In a future release, nil will default to using OIDC Eventually this flag will be removed and only OIDC will be used", - "type": "boolean" + "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" }, "url": { "description": "url is the oauth server base URL", @@ -63859,883 +69726,823 @@ } }, "x-fabric8-info": { - "Type": "object", - "Group": "osin.config.openshift.io", + "Type": "nested", + "Group": "config.openshift.io", "Version": "v1", "Kind": "GitLabIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.GoogleIdentityProvider": { - "description": "GoogleIdentityProvider provides identities for users authenticating using Google credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.GoogleIdentityProvider": { + "description": "GoogleIdentityProvider provides identities for users authenticating using Google credentials", "type": "object", "required": [ "clientID", - "clientSecret", - "hostedDomain" + "clientSecret" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, "clientID": { "description": "clientID is the oauth client ID", "type": "string", "default": "" }, "clientSecret": { - "description": "clientSecret is the oauth client secret", - "$ref": "#/definitions/io.openshift.config.v1.StringSource" + "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" }, "hostedDomain": { "description": "hostedDomain is the optional Google App domain (e.g. \"mycompany.com\") to restrict logins to", "type": "string", "default": "" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" } }, "x-fabric8-info": { - "Type": "object", - "Group": "osin.config.openshift.io", + "Type": "nested", + "Group": "config.openshift.io", "Version": "v1", "Kind": "GoogleIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.GrantConfig": { - "description": "GrantConfig holds the necessary configuration options for grant handlers", + "io.openshift.config.v1.HTPasswdIdentityProvider": { + "description": "HTPasswdPasswordIdentityProvider provides identities for users authenticating using htpasswd credentials", "type": "object", "required": [ - "method", - "serviceAccountMethod" + "fileData" ], "properties": { - "method": { - "description": "method determines the default strategy to use when an OAuth client requests a grant. This method will be used only if the specific OAuth client doesn't provide a strategy of their own. Valid grant handling methods are:\n - auto: always approves grant requests, useful for trusted clients\n - prompt: prompts the end user for approval of grant requests, useful for third-party clients\n - deny: always denies grant requests, useful for black-listed clients", - "type": "string", - "default": "" - }, - "serviceAccountMethod": { - "description": "serviceAccountMethod is used for determining client authorization for service account oauth client. It must be either: deny, prompt", - "type": "string", - "default": "" + "fileData": { + "description": "fileData is a required reference to a secret by name containing the data to use as the htpasswd file. The key \"htpasswd\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. If the specified htpasswd data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" } }, "x-fabric8-info": { "Type": "nested", - "Group": "osin.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "GrantConfig", + "Kind": "HTPasswdIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.HTPasswdPasswordIdentityProvider": { - "description": "HTPasswdPasswordIdentityProvider provides identities for users authenticating using htpasswd credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.HTTPServingInfo": { + "description": "HTTPServingInfo holds configuration for serving HTTP", "type": "object", "required": [ - "file" + "bindAddress", + "bindNetwork", + "certFile", + "keyFile", + "maxRequestsInFlight", + "requestTimeoutSeconds" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "bindAddress": { + "description": "BindAddress is the ip:port to serve on", + "type": "string", + "default": "" + }, + "bindNetwork": { + "description": "BindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", + "type": "string", + "default": "" + }, + "certFile": { + "description": "CertFile is a file containing a PEM-encoded certificate", + "type": "string", + "default": "" + }, + "cipherSuites": { + "description": "CipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "clientCA": { + "description": "ClientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates", "type": "string" }, - "file": { - "description": "file is a reference to your htpasswd file", + "keyFile": { + "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", "type": "string", "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "maxRequestsInFlight": { + "description": "MaxRequestsInFlight is the number of concurrent requests allowed to the server. If zero, no limit.", + "type": "integer", + "format": "int64", + "default": 0 + }, + "minTLSVersion": { + "description": "MinTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants", "type": "string" + }, + "namedCertificates": { + "description": "NamedCertificates is a list of certificates to use to secure requests to specific hostnames", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.NamedCertificate" + } + }, + "requestTimeoutSeconds": { + "description": "RequestTimeoutSeconds is the number of seconds before requests are timed out. The default is 60 minutes, if -1 there is no limit on requests.", + "type": "integer", + "format": "int64", + "default": 0 } }, "x-fabric8-info": { - "Type": "object", - "Group": "osin.config.openshift.io", + "Type": "nested", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "HTPasswdPasswordIdentityProvider", + "Kind": "HTTPServingInfo", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.IdentityProvider": { - "description": "IdentityProvider provides identities for users authenticating using credentials", + "io.openshift.config.v1.HubSource": { + "description": "HubSource is used to specify the hub source and its configuration", "type": "object", "required": [ "name", - "challenge", - "login", - "mappingMethod", - "provider" + "disabled" ], "properties": { - "challenge": { - "description": "challenge indicates whether to issue WWW-Authenticate challenges for this provider", - "type": "boolean", - "default": false - }, - "login": { - "description": "login indicates whether to use this identity provider for unauthenticated browsers to login against", + "disabled": { + "description": "disabled is used to disable a default hub source on cluster", "type": "boolean", "default": false }, - "mappingMethod": { - "description": "mappingMethod determines how identities from this provider are mapped to users", - "type": "string", - "default": "" - }, "name": { - "description": "name is used to qualify the identities returned by this provider", + "description": "name is the name of one of the default hub sources", "type": "string", "default": "" - }, - "provider": { - "description": "provider contains the information about how to set up a specific identity provider", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" } }, "x-fabric8-info": { "Type": "nested", - "Group": "osin.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "IdentityProvider", + "Kind": "HubSource", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.KeystonePasswordIdentityProvider": { - "description": "KeystonePasswordIdentityProvider provides identities for users authenticating using keystone password credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.HubSourceStatus": { + "description": "HubSourceStatus is used to reflect the current state of applying the configuration to a default source", "type": "object", - "required": [ - "url", - "ca", - "certFile", - "keyFile", - "domainName", - "useKeystoneIdentity" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "message": { + "description": "message provides more information regarding failures", "type": "string" }, - "ca": { - "description": "CA is the CA for verifying TLS connections", - "type": "string", - "default": "" - }, - "certFile": { - "description": "CertFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "domainName": { - "description": "domainName is required for keystone v3", - "type": "string", - "default": "" - }, - "keyFile": { - "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", - "type": "string", - "default": "" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "status": { + "description": "status indicates success or failure in applying the configuration", "type": "string" - }, - "url": { - "description": "URL is the remote URL to connect to", - "type": "string", - "default": "" - }, - "useKeystoneIdentity": { - "description": "useKeystoneIdentity flag indicates that user should be authenticated by keystone ID, not by username", - "type": "boolean", - "default": false } }, "x-fabric8-info": { - "Type": "object", - "Group": "osin.config.openshift.io", + "Type": "nested", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "KeystonePasswordIdentityProvider", + "Kind": "HubSourceStatus", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.LDAPAttributeMapping": { - "description": "LDAPAttributeMapping maps LDAP attributes to OpenShift identity fields", + "io.openshift.config.v1.IBMCloudPlatformSpec": { + "description": "IBMCloudPlatformSpec holds the desired state of the IBMCloud infrastructure provider. This only includes fields that can be modified in the cluster.", + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "IBMCloudPlatformSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.IBMCloudPlatformStatus": { + "description": "IBMCloudPlatformStatus holds the current status of the IBMCloud infrastructure provider.", "type": "object", - "required": [ - "id", - "preferredUsername", - "name", - "email" - ], "properties": { - "email": { - "description": "email is the list of attributes whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "cisInstanceCRN": { + "description": "CISInstanceCRN is the CRN of the Cloud Internet Services instance managing the DNS zone for the cluster's base domain", + "type": "string" }, - "id": { - "description": "id is the list of attributes whose values should be used as the user ID. Required. LDAP standard identity attribute is \"dn\"", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "dnsInstanceCRN": { + "description": "DNSInstanceCRN is the CRN of the DNS Services instance managing the DNS zone for the cluster's base domain", + "type": "string" }, - "name": { - "description": "name is the list of attributes whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity LDAP standard display name attribute is \"cn\"", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "location": { + "description": "Location is where the cluster has been deployed", + "type": "string" }, - "preferredUsername": { - "description": "preferredUsername is the list of attributes whose values should be used as the preferred username. LDAP standard login attribute is \"uid\"", + "providerType": { + "description": "ProviderType indicates the type of cluster that was created", + "type": "string" + }, + "resourceGroupName": { + "description": "ResourceGroupName is the Resource Group for new IBMCloud resources created for the cluster.", + "type": "string" + }, + "serviceEndpoints": { + "description": "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of an IBM Cloud service. These endpoints are consumed by components within the cluster to reach the respective IBM Cloud Services.", "type": "array", "items": { - "type": "string", - "default": "" - } + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.IBMCloudServiceEndpoint" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", - "Group": "osin.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "LDAPAttributeMapping", + "Kind": "IBMCloudPlatformStatus", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.LDAPPasswordIdentityProvider": { - "description": "LDAPPasswordIdentityProvider provides identities for users authenticating using LDAP credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.IBMCloudServiceEndpoint": { + "description": "IBMCloudServiceEndpoint stores the configuration of a custom url to override existing defaults of IBM Cloud Services.", "type": "object", "required": [ - "url", - "bindDN", - "bindPassword", - "insecure", - "ca", - "attributes" + "name", + "url" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "attributes": { - "description": "attributes maps LDAP attributes to identities", - "default": {}, - "$ref": "#/definitions/io.openshift.config.osin.v1.LDAPAttributeMapping" - }, - "bindDN": { - "description": "bindDN is an optional DN to bind with during the search phase.", - "type": "string", - "default": "" - }, - "bindPassword": { - "description": "bindPassword is an optional password to bind with during the search phase.", - "$ref": "#/definitions/io.openshift.config.v1.StringSource" - }, - "ca": { - "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", + "name": { + "description": "name is the name of the IBM Cloud service. Possible values are: CIS, COS, COSConfig, DNSServices, GlobalCatalog, GlobalSearch, GlobalTagging, HyperProtect, IAM, KeyProtect, ResourceController, ResourceManager, or VPC. For example, the IBM Cloud Private IAM service could be configured with the service `name` of `IAM` and `url` of `https://private.iam.cloud.ibm.com` Whereas the IBM Cloud Private VPC service for US South (Dallas) could be configured with the service `name` of `VPC` and `url` of `https://us.south.private.iaas.cloud.ibm.com`", "type": "string", "default": "" }, - "insecure": { - "description": "insecure, if true, indicates the connection should not use TLS. Cannot be set to true with a URL scheme of \"ldaps://\" If false, \"ldaps://\" URLs connect using TLS, and \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830", - "type": "boolean", - "default": false - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, "url": { - "description": "url is an RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is\n ldap://host:port/basedn?attribute?scope?filter", + "description": "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty.", "type": "string", "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "osin.config.openshift.io", + "Type": "nested", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "LDAPPasswordIdentityProvider", + "Kind": "IBMCloudServiceEndpoint", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.OAuthConfig": { - "description": "OAuthConfig holds the necessary configuration options for OAuth authentication", + "io.openshift.config.v1.IdentityProvider": { + "description": "IdentityProvider provides identities for users authenticating using credentials", "type": "object", "required": [ - "masterCA", - "masterURL", - "masterPublicURL", - "loginURL", - "assetPublicURL", - "alwaysShowProviderSelection", - "identityProviders", - "grantConfig", - "sessionConfig", - "tokenConfig", - "templates" + "name", + "type" ], "properties": { - "alwaysShowProviderSelection": { - "description": "alwaysShowProviderSelection will force the provider selection page to render even when there is only a single provider.", - "type": "boolean", - "default": false + "basicAuth": { + "description": "basicAuth contains configuration options for the BasicAuth IdP", + "$ref": "#/definitions/io.openshift.config.v1.BasicAuthIdentityProvider" }, - "assetPublicURL": { - "description": "assetPublicURL is used for building valid client redirect URLs for external access", - "type": "string", - "default": "" + "github": { + "description": "github enables user authentication using GitHub credentials", + "$ref": "#/definitions/io.openshift.config.v1.GitHubIdentityProvider" }, - "grantConfig": { - "description": "grantConfig describes how to handle grants", - "default": {}, - "$ref": "#/definitions/io.openshift.config.osin.v1.GrantConfig" + "gitlab": { + "description": "gitlab enables user authentication using GitLab credentials", + "$ref": "#/definitions/io.openshift.config.v1.GitLabIdentityProvider" }, - "identityProviders": { - "description": "identityProviders is an ordered list of ways for a user to identify themselves", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.osin.v1.IdentityProvider" - } + "google": { + "description": "google enables user authentication using Google credentials", + "$ref": "#/definitions/io.openshift.config.v1.GoogleIdentityProvider" }, - "loginURL": { - "description": "loginURL, along with masterCA, masterURL and masterPublicURL have distinct meanings depending on how the OAuth server is run. The two states are: 1. embedded in the kube api server (all 3.x releases) 2. as a standalone external process (all 4.x releases) in the embedded configuration, loginURL is equivalent to masterPublicURL and the other fields have functionality that matches their docs. in the standalone configuration, the fields are used as: loginURL is the URL required to login to the cluster: oc login --server=\u003cloginURL\u003e masterPublicURL is the issuer URL it is accessible from inside (service network) and outside (ingress) of the cluster masterURL is the loopback variation of the token_endpoint URL with no path component it is only accessible from inside (service network) of the cluster masterCA is used to perform TLS verification for connections made to masterURL For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2", - "type": "string", - "default": "" + "htpasswd": { + "description": "htpasswd enables user authentication using an HTPasswd file to validate credentials", + "$ref": "#/definitions/io.openshift.config.v1.HTPasswdIdentityProvider" }, - "masterCA": { - "description": "masterCA is the CA for verifying the TLS connection back to the MasterURL. This field is deprecated and will be removed in a future release. See loginURL for details. Deprecated", - "type": "string" + "keystone": { + "description": "keystone enables user authentication using keystone password credentials", + "$ref": "#/definitions/io.openshift.config.v1.KeystoneIdentityProvider" }, - "masterPublicURL": { - "description": "masterPublicURL is used for building valid client redirect URLs for internal and external access This field is deprecated and will be removed in a future release. See loginURL for details. Deprecated", - "type": "string", - "default": "" + "ldap": { + "description": "ldap enables user authentication using LDAP credentials", + "$ref": "#/definitions/io.openshift.config.v1.LDAPIdentityProvider" }, - "masterURL": { - "description": "masterURL is used for making server-to-server calls to exchange authorization codes for access tokens This field is deprecated and will be removed in a future release. See loginURL for details. Deprecated", + "mappingMethod": { + "description": "mappingMethod determines how identities from this provider are mapped to users Defaults to \"claim\"", + "type": "string" + }, + "name": { + "description": "name is used to qualify the identities returned by this provider. - It MUST be unique and not shared by any other identity provider used - It MUST be a valid path segment: name cannot equal \".\" or \"..\" or contain \"/\" or \"%\" or \":\"\n Ref: https://godoc.org/github.com/openshift/origin/pkg/user/apis/user/validation#ValidateIdentityProviderName", "type": "string", "default": "" }, - "sessionConfig": { - "description": "sessionConfig hold information about configuring sessions.", - "$ref": "#/definitions/io.openshift.config.osin.v1.SessionConfig" + "openID": { + "description": "openID enables user authentication using OpenID credentials", + "$ref": "#/definitions/io.openshift.config.v1.OpenIDIdentityProvider" }, - "templates": { - "description": "templates allow you to customize pages like the login page.", - "$ref": "#/definitions/io.openshift.config.osin.v1.OAuthTemplates" + "requestHeader": { + "description": "requestHeader enables user authentication using request header credentials", + "$ref": "#/definitions/io.openshift.config.v1.RequestHeaderIdentityProvider" }, - "tokenConfig": { - "description": "tokenConfig contains options for authorization and access tokens", - "default": {}, - "$ref": "#/definitions/io.openshift.config.osin.v1.TokenConfig" + "type": { + "description": "type identifies the identity provider type for this entry.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "osin.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "OAuthConfig", + "Kind": "IdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.OAuthTemplates": { - "description": "OAuthTemplates allow for customization of pages like the login page", + "io.openshift.config.v1.IdentityProviderConfig": { + "description": "IdentityProviderConfig contains configuration for using a specific identity provider", "type": "object", "required": [ - "login", - "providerSelection", - "error" + "type" ], "properties": { - "error": { - "description": "error is a path to a file containing a go template used to render error pages during the authentication or grant flow If unspecified, the default error page is used.", - "type": "string", - "default": "" + "basicAuth": { + "description": "basicAuth contains configuration options for the BasicAuth IdP", + "$ref": "#/definitions/io.openshift.config.v1.BasicAuthIdentityProvider" }, - "login": { - "description": "login is a path to a file containing a go template used to render the login page. If unspecified, the default login page is used.", - "type": "string", - "default": "" + "github": { + "description": "github enables user authentication using GitHub credentials", + "$ref": "#/definitions/io.openshift.config.v1.GitHubIdentityProvider" }, - "providerSelection": { - "description": "providerSelection is a path to a file containing a go template used to render the provider selection page. If unspecified, the default provider selection page is used.", + "gitlab": { + "description": "gitlab enables user authentication using GitLab credentials", + "$ref": "#/definitions/io.openshift.config.v1.GitLabIdentityProvider" + }, + "google": { + "description": "google enables user authentication using Google credentials", + "$ref": "#/definitions/io.openshift.config.v1.GoogleIdentityProvider" + }, + "htpasswd": { + "description": "htpasswd enables user authentication using an HTPasswd file to validate credentials", + "$ref": "#/definitions/io.openshift.config.v1.HTPasswdIdentityProvider" + }, + "keystone": { + "description": "keystone enables user authentication using keystone password credentials", + "$ref": "#/definitions/io.openshift.config.v1.KeystoneIdentityProvider" + }, + "ldap": { + "description": "ldap enables user authentication using LDAP credentials", + "$ref": "#/definitions/io.openshift.config.v1.LDAPIdentityProvider" + }, + "openID": { + "description": "openID enables user authentication using OpenID credentials", + "$ref": "#/definitions/io.openshift.config.v1.OpenIDIdentityProvider" + }, + "requestHeader": { + "description": "requestHeader enables user authentication using request header credentials", + "$ref": "#/definitions/io.openshift.config.v1.RequestHeaderIdentityProvider" + }, + "type": { + "description": "type identifies the identity provider type for this entry.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "osin.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "OAuthTemplates", + "Kind": "IdentityProviderConfig", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.OpenIDClaims": { - "description": "OpenIDClaims contains a list of OpenID claims to use when authenticating with an OpenID identity provider", + "io.openshift.config.v1.Image": { + "description": "Image governs policies related to imagestream imports and runtime configuration for external registries. It allows cluster admins to configure which registries OpenShift is allowed to import images from, extra CA trust bundles for external registries, and policies to block or allow registry hostnames. When exposing OpenShift's image registry to the public, this also lets cluster admins specify the external hostname.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "id", - "preferredUsername", - "name", - "email", - "groups" + "spec" ], "properties": { - "email": { - "description": "email is the list of claims whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "groups": { - "description": "groups is the list of claims value of which should be used to synchronize groups from the OIDC provider to OpenShift for the user", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "id": { - "description": "id is the list of claims whose values should be used as the user ID. Required. OpenID standard identity claim is \"sub\"", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "name": { - "description": "name is the list of claims whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "spec": { + "description": "spec holds user settable values for configuration", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ImageSpec" }, - "preferredUsername": { - "description": "preferredUsername is the list of claims whose values should be used as the preferred username. If unspecified, the preferred username is determined from the value of the id claim", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "status": { + "description": "status holds observed values from the cluster. They may not be overridden.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ImageStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "osin.config.openshift.io", + "Type": "object", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "OpenIDClaims", - "Scope": "Namespaced" + "Kind": "Image", + "Scope": "Clustered" } }, - "io.openshift.config.osin.v1.OpenIDIdentityProvider": { - "description": "OpenIDIdentityProvider provides identities for users authenticating using OpenID credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.ImageContentPolicy": { + "description": "ImageContentPolicy holds cluster-wide information about how to handle registry mirror rules. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "ca", - "clientID", - "clientSecret", - "extraScopes", - "extraAuthorizeParameters", - "urls", - "claims" + "spec" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "ca": { - "description": "ca is the optional trusted certificate authority bundle to use when making requests to the server If empty, the default system roots are used", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "claims": { - "description": "claims mappings", + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.openshift.config.osin.v1.OpenIDClaims" - }, - "clientID": { - "description": "clientID is the oauth client ID", - "type": "string", - "default": "" - }, - "clientSecret": { - "description": "clientSecret is the oauth client secret", - "$ref": "#/definitions/io.openshift.config.v1.StringSource" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "extraAuthorizeParameters": { - "description": "extraAuthorizeParameters are any custom parameters to add to the authorize request.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } + "spec": { + "description": "spec holds user settable values for configuration", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ImageContentPolicySpec" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "ImageContentPolicy", + "Scope": "Clustered" + } + }, + "io.openshift.config.v1.ImageContentPolicyList": { + "description": "ImageContentPolicyList lists the items in the ImageContentPolicy CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "type": "object", + "required": [ + "metadata", + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "extraScopes": { - "description": "extraScopes are any scopes to request in addition to the standard \"openid\" scope.", + "items": { "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ImageContentPolicy" } }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "urls": { - "description": "urls to use to authenticate", + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.openshift.config.osin.v1.OpenIDURLs" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "object", - "Group": "osin.config.openshift.io", + "Type": "list", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "OpenIDIdentityProvider", + "Kind": "ImageContentPolicyList", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.OpenIDURLs": { - "description": "OpenIDURLs are URLs to use when authenticating with an OpenID identity provider", + "io.openshift.config.v1.ImageContentPolicySpec": { + "description": "ImageContentPolicySpec is the specification of the ImageContentPolicy CRD.", "type": "object", - "required": [ - "authorize", - "token", - "userInfo" - ], "properties": { - "authorize": { - "description": "authorize is the oauth authorization URL", - "type": "string", - "default": "" - }, - "token": { - "description": "token is the oauth token granting URL", - "type": "string", - "default": "" - }, - "userInfo": { - "description": "userInfo is the optional userinfo URL. If present, a granted access_token is used to request claims If empty, a granted id_token is parsed for claims", - "type": "string", - "default": "" + "repositoryDigestMirrors": { + "description": "repositoryDigestMirrors allows images referenced by image digests in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in RepositoryDigestMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To pull image from mirrors by tags, should set the \"allowMirrorByTags\".\n\nEach “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.RepositoryDigestMirrors" + }, + "x-kubernetes-list-map-keys": [ + "source" + ], + "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", - "Group": "osin.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "OpenIDURLs", + "Kind": "ImageContentPolicySpec", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.OsinServerConfig": { - "description": "Compatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.ImageDigestMirrorSet": { + "description": "ImageDigestMirrorSet holds cluster-wide information about how to handle registry mirror rules on using digest pull specification. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "servingInfo", - "corsAllowedOrigins", - "auditConfig", - "storageConfig", - "admission", - "kubeClientConfig", - "oauthConfig" + "spec" ], "properties": { - "admission": { - "description": "admissionConfig holds information about how to configure admission.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.AdmissionConfig" - }, "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "auditConfig": { - "description": "auditConfig describes how to configure audit information", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.AuditConfig" - }, - "corsAllowedOrigins": { - "description": "corsAllowedOrigins", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "kubeClientConfig": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.KubeClientConfig" - }, - "oauthConfig": { - "description": "oauthConfig holds the necessary configuration options for OAuth authentication", + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.openshift.config.osin.v1.OAuthConfig" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "servingInfo": { - "description": "servingInfo describes how to start serving", + "spec": { + "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo" + "$ref": "#/definitions/io.openshift.config.v1.ImageDigestMirrorSetSpec" }, - "storageConfig": { - "description": "storageConfig contains information about how to use", + "status": { + "description": "status contains the observed state of the resource.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.EtcdStorageConfig" + "$ref": "#/definitions/io.openshift.config.v1.ImageDigestMirrorSetStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "osin.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "OsinServerConfig", - "Scope": "Namespaced" + "Kind": "ImageDigestMirrorSet", + "Scope": "Clustered" } }, - "io.openshift.config.osin.v1.RequestHeaderIdentityProvider": { - "description": "RequestHeaderIdentityProvider provides identities for users authenticating using request header credentials\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.ImageDigestMirrorSetList": { + "description": "ImageDigestMirrorSetList lists the items in the ImageDigestMirrorSet CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "loginURL", - "challengeURL", - "clientCA", - "clientCommonNames", - "headers", - "preferredUsernameHeaders", - "nameHeaders", - "emailHeaders" + "metadata", + "items" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "challengeURL": { - "description": "challengeURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}", - "type": "string", - "default": "" - }, - "clientCA": { - "description": "clientCA is a file with the trusted signer certs. If empty, no request verification is done, and any direct request to the OAuth server can impersonate any identity from this provider, merely by setting a request header.", - "type": "string", - "default": "" - }, - "clientCommonNames": { - "description": "clientCommonNames is an optional list of common names to require a match from. If empty, any client certificate validated against the clientCA bundle is considered authoritative.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "emailHeaders": { - "description": "emailHeaders is the set of headers to check for the email address", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "headers": { - "description": "headers is the set of headers to check for identity information", + "items": { "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ImageDigestMirrorSet" } }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "loginURL": { - "description": "loginURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}", - "type": "string", - "default": "" - }, - "nameHeaders": { - "description": "nameHeaders is the set of headers to check for the display name", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "preferredUsernameHeaders": { - "description": "preferredUsernameHeaders is the set of headers to check for the preferred username", + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "ImageDigestMirrorSetList", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.ImageDigestMirrorSetSpec": { + "description": "ImageDigestMirrorSetSpec is the specification of the ImageDigestMirrorSet CRD.", + "type": "object", + "properties": { + "imageDigestMirrors": { + "description": "imageDigestMirrors allows images referenced by image digests in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in imageDigestMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To use mirrors to pull images using tag specification, users should configure a list of mirrors using \"ImageTagMirrorSet\" CRD.\n\nIf the image pull specification matches the repository of \"source\" in multiple imagedigestmirrorset objects, only the objects which define the most specific namespace match will be used. For example, if there are objects using quay.io/libpod and quay.io/libpod/busybox as the \"source\", only the objects using quay.io/libpod/busybox are going to apply for pull specification quay.io/libpod/busybox. Each “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified. Users who want to use a specific order of mirrors, should configure them into one list of mirrors using the expected order.", "type": "array", "items": { - "type": "string", - "default": "" - } + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ImageDigestMirrors" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { - "Type": "object", - "Group": "osin.config.openshift.io", + "Type": "nested", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "RequestHeaderIdentityProvider", + "Kind": "ImageDigestMirrorSetSpec", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.SessionConfig": { - "description": "SessionConfig specifies options for cookie-based sessions. Used by AuthRequestHandlerSession", + "io.openshift.config.v1.ImageDigestMirrorSetStatus": { + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "ImageDigestMirrorSetStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.ImageDigestMirrors": { + "description": "ImageDigestMirrors holds cluster-wide information about how to handle mirrors in the registries config.", "type": "object", "required": [ - "sessionSecretsFile", - "sessionMaxAgeSeconds", - "sessionName" + "source" ], "properties": { - "sessionMaxAgeSeconds": { - "description": "sessionMaxAgeSeconds specifies how long created sessions last. Used by AuthRequestHandlerSession", - "type": "integer", - "format": "int32", - "default": 0 + "mirrorSourcePolicy": { + "description": "mirrorSourcePolicy defines the fallback policy if fails to pull image from the mirrors. If unset, the image will continue to be pulled from the the repository in the pull spec. sourcePolicy is valid configuration only when one or more mirrors are in the mirror list.", + "type": "string" }, - "sessionName": { - "description": "sessionName is the cookie name used to store the session", - "type": "string", - "default": "" + "mirrors": { + "description": "mirrors is zero or more locations that may also contain the same images. No mirror will be configured if not specified. Images can be pulled from these mirrors only if they are referenced by their digests. The mirrored location is obtained by replacing the part of the input reference that matches source by the mirrors entry, e.g. for registry.redhat.io/product/repo reference, a (source, mirror) pair *.redhat.io, mirror.local/redhat causes a mirror.local/redhat/product/repo repository to be used. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. If no mirror is specified or all image pulls from the mirror list fail, the image will continue to be pulled from the repository in the pull spec unless explicitly prohibited by \"mirrorSourcePolicy\" Other cluster configuration, including (but not limited to) other imageDigestMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering. \"mirrors\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" }, - "sessionSecretsFile": { - "description": "sessionSecretsFile is a reference to a file containing a serialized SessionSecrets object If no file is specified, a random signing and encryption key are generated at each server start", + "source": { + "description": "source matches the repository that users refer to, e.g. in image pull specifications. Setting source to a registry hostname e.g. docker.io. quay.io, or registry.redhat.io, will match the image pull specification of corressponding registry. \"source\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo [*.]host for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "osin.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "SessionConfig", + "Kind": "ImageDigestMirrors", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.SessionSecret": { - "description": "SessionSecret is a secret used to authenticate/decrypt cookie-based sessions", + "io.openshift.config.v1.ImageLabel": { "type": "object", "required": [ - "authentication", - "encryption" + "name" ], "properties": { - "authentication": { - "description": "Authentication is used to authenticate sessions using HMAC. Recommended to use a secret with 32 or 64 bytes.", + "name": { + "description": "Name defines the name of the label. It must have non-zero length.", "type": "string", "default": "" }, - "encryption": { - "description": "Encryption is used to encrypt sessions. Must be 16, 24, or 32 characters long, to select AES-128, AES-", - "type": "string", - "default": "" + "value": { + "description": "Value defines the literal value of the label.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "osin.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "SessionSecret", + "Kind": "ImageLabel", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.SessionSecrets": { - "description": "SessionSecrets list the secrets to use to sign/encrypt and authenticate/decrypt created sessions.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.ImageList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "secrets" + "metadata", + "items" ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, + "items": { + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.Image" + } + }, "kind": { "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "secrets": { - "description": "Secrets is a list of secrets New sessions are signed and encrypted using the first secret. Existing sessions are decrypted/authenticated by each secret until one succeeds. This allows rotating secrets.", + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "ImageList", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.ImageSpec": { + "type": "object", + "properties": { + "additionalTrustedCA": { + "description": "additionalTrustedCA is a reference to a ConfigMap containing additional CAs that should be trusted during imagestream import, pod image pull, build image pull, and imageregistry pullthrough. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" + }, + "allowedRegistriesForImport": { + "description": "allowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.osin.v1.SessionSecret" - } + "$ref": "#/definitions/io.openshift.config.v1.RegistryLocation" + }, + "x-kubernetes-list-type": "atomic" + }, + "externalRegistryHostnames": { + "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "imageStreamImportMode": { + "description": "imageStreamImportMode controls the import mode behaviour of imagestreams. It can be set to `Legacy` or `PreserveOriginal` or the empty string. If this value is specified, this setting is applied to all newly created imagestreams which do not have the value set. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported. When empty, the behaviour will be decided based on the payload type advertised by the ClusterVersion status, i.e single arch payload implies the import mode is Legacy and multi payload implies PreserveOriginal.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.", + "type": "string", + "default": "", + "enum": [ + "Legacy", + "PreserveOriginal" + ] + }, + "registrySources": { + "description": "registrySources contains configuration that determines how the container runtime should treat individual registries when accessing images for builds+pods. (e.g. whether or not to allow insecure access). It does not contain configuration for the internal cluster registry.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.RegistrySources" } }, "x-fabric8-info": { - "Type": "object", - "Group": "osin.config.openshift.io", + "Type": "nested", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "SessionSecrets", + "Kind": "ImageSpec", "Scope": "Namespaced" } }, - "io.openshift.config.osin.v1.TokenConfig": { - "description": "TokenConfig holds the necessary configuration options for authorization and access tokens", + "io.openshift.config.v1.ImageStatus": { "type": "object", "properties": { - "accessTokenInactivityTimeout": { - "description": "accessTokenInactivityTimeout defines the token inactivity timeout for tokens granted by any client. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. Takes valid time duration string such as \"5m\", \"1.5h\" or \"2h45m\". The minimum allowed value for duration is 300s (5 minutes). If the timeout is configured per client, then that value takes precedence. If the timeout value is not specified and the client does not override the value, then tokens are valid until their lifetime.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "accessTokenInactivityTimeoutSeconds": { - "description": "accessTokenInactivityTimeoutSeconds - DEPRECATED: setting this field has no effect.", - "type": "integer", - "format": "int32" + "externalRegistryHostnames": { + "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "accessTokenMaxAgeSeconds": { - "description": "accessTokenMaxAgeSeconds defines the maximum age of access tokens", - "type": "integer", - "format": "int32" + "imageStreamImportMode": { + "description": "imageStreamImportMode controls the import mode behaviour of imagestreams. It can be `Legacy` or `PreserveOriginal`. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported. This value will be reconciled based on either the spec value or if no spec value is specified, the image registry operator would look at the ClusterVersion status to determine the payload type and set the import mode accordingly, i.e single arch payload implies the import mode is Legacy and multi payload implies PreserveOriginal.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.", + "type": "string", + "enum": [ + "Legacy", + "PreserveOriginal" + ] }, - "authorizeTokenMaxAgeSeconds": { - "description": "authorizeTokenMaxAgeSeconds defines the maximum age of authorize tokens", - "type": "integer", - "format": "int32" + "internalRegistryHostname": { + "description": "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format. This value is set by the image registry operator which controls the internal registry hostname.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "osin.config.openshift.io", + "Group": "config.openshift.io", "Version": "v1", - "Kind": "TokenConfig", + "Kind": "ImageStatus", "Scope": "Namespaced" } }, - "io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfig": { - "description": "ServiceCertSignerOperatorConfig provides information to configure an operator to manage the service cert signing controllers\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.ImageTagMirrorSet": { + "description": "ImageTagMirrorSet holds cluster-wide information about how to handle registry mirror rules on using tag pull specification. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "metadata", - "spec", - "status" + "spec" ], "properties": { "apiVersion": { @@ -64752,26 +70559,29 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { + "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigSpec" + "$ref": "#/definitions/io.openshift.config.v1.ImageTagMirrorSetSpec" }, "status": { + "description": "status contains the observed state of the resource.", "default": {}, - "$ref": "#/definitions/io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigStatus" + "$ref": "#/definitions/io.openshift.config.v1.ImageTagMirrorSetStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "servicecertsigner.config.openshift.io", - "Version": "v1alpha1", - "Kind": "ServiceCertSignerOperatorConfig", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "ImageTagMirrorSet", "Scope": "Clustered" } }, - "io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigList": { - "description": "ServiceCertSignerOperatorConfigList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.config.v1.ImageTagMirrorSetList": { + "description": "ImageTagMirrorSetList lists the items in the ImageTagMirrorSet CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ + "metadata", "items" ], "properties": { @@ -64780,11 +70590,10 @@ "type": "string" }, "items": { - "description": "Items contains the items", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfig" + "$ref": "#/definitions/io.openshift.config.v1.ImageTagMirrorSet" } }, "kind": { @@ -64799,112 +70608,80 @@ }, "x-fabric8-info": { "Type": "list", - "Group": "servicecertsigner.config.openshift.io", - "Version": "v1alpha1", - "Kind": "ServiceCertSignerOperatorConfigList", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "ImageTagMirrorSetList", "Scope": "Namespaced" } }, - "io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigSpec": { + "io.openshift.config.v1.ImageTagMirrorSetSpec": { + "description": "ImageTagMirrorSetSpec is the specification of the ImageTagMirrorSet CRD.", "type": "object", - "required": [ - "managementState" - ], "properties": { - "logLevel": { - "description": "logLevel is an intent based logging for an overall component. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for their operands.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "managementState": { - "description": "managementState indicates whether and how the operator should manage the component", - "type": "string", - "default": "" - }, - "observedConfig": { - "description": "observedConfig holds a sparse config that controller has observed from the cluster state. It exists in spec because it is an input to the level for the operator", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "operatorLogLevel": { - "description": "operatorLogLevel is an intent based logging for the operator itself. It does not give fine grained control, but it is a simple way to manage coarse grained logging choices that operators have to interpret for themselves.\n\nValid values are: \"Normal\", \"Debug\", \"Trace\", \"TraceAll\". Defaults to \"Normal\".", - "type": "string" - }, - "unsupportedConfigOverrides": { - "description": "unsupportedConfigOverrides overrides the final configuration that was computed by the operator. Red Hat does not support the use of this field. Misuse of this field could lead to unexpected behavior or conflict with other configuration options. Seek guidance from the Red Hat support before using this field. Use of this property blocks cluster upgrades, it must be removed before upgrading your cluster.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "imageTagMirrors": { + "description": "imageTagMirrors allows images referenced by image tags in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in imageTagMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To use mirrors to pull images using digest specification only, users should configure a list of mirrors using \"ImageDigestMirrorSet\" CRD.\n\nIf the image pull specification matches the repository of \"source\" in multiple imagetagmirrorset objects, only the objects which define the most specific namespace match will be used. For example, if there are objects using quay.io/libpod and quay.io/libpod/busybox as the \"source\", only the objects using quay.io/libpod/busybox are going to apply for pull specification quay.io/libpod/busybox. Each “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified. Users who want to use a deterministic order of mirrors, should configure them into one list of mirrors using the expected order.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ImageTagMirrors" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", - "Group": "servicecertsigner.config.openshift.io", - "Version": "v1alpha1", - "Kind": "ServiceCertSignerOperatorConfigSpec", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "ImageTagMirrorSetSpec", "Scope": "Namespaced" } }, - "io.openshift.config.servicecertsigner.v1alpha1.ServiceCertSignerOperatorConfigStatus": { + "io.openshift.config.v1.ImageTagMirrorSetStatus": { + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "ImageTagMirrorSetStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.ImageTagMirrors": { + "description": "ImageTagMirrors holds cluster-wide information about how to handle mirrors in the registries config.", "type": "object", "required": [ - "readyReplicas" + "source" ], "properties": { - "conditions": { - "description": "conditions is a list of conditions and their status", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.operator.v1.OperatorCondition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "generations": { - "description": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.operator.v1.GenerationStatus" - }, - "x-kubernetes-list-map-keys": [ - "group", - "resource", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "latestAvailableRevision": { - "description": "latestAvailableRevision is the deploymentID of the most recent deployment", - "type": "integer", - "format": "int32" - }, - "observedGeneration": { - "description": "observedGeneration is the last generation change you've dealt with", - "type": "integer", - "format": "int64" - }, - "readyReplicas": { - "description": "readyReplicas indicates how many replicas are ready and at the desired state", - "type": "integer", - "format": "int32", - "default": 0 - }, - "version": { - "description": "version is the level this availability applies to", + "mirrorSourcePolicy": { + "description": "mirrorSourcePolicy defines the fallback policy if fails to pull image from the mirrors. If unset, the image will continue to be pulled from the repository in the pull spec. sourcePolicy is valid configuration only when one or more mirrors are in the mirror list.", "type": "string" + }, + "mirrors": { + "description": "mirrors is zero or more locations that may also contain the same images. No mirror will be configured if not specified. Images can be pulled from these mirrors only if they are referenced by their tags. The mirrored location is obtained by replacing the part of the input reference that matches source by the mirrors entry, e.g. for registry.redhat.io/product/repo reference, a (source, mirror) pair *.redhat.io, mirror.local/redhat causes a mirror.local/redhat/product/repo repository to be used. Pulling images by tag can potentially yield different images, depending on which endpoint we pull from. Configuring a list of mirrors using \"ImageDigestMirrorSet\" CRD and forcing digest-pulls for mirrors avoids that issue. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. If no mirror is specified or all image pulls from the mirror list fail, the image will continue to be pulled from the repository in the pull spec unless explicitly prohibited by \"mirrorSourcePolicy\". Other cluster configuration, including (but not limited to) other imageTagMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering. \"mirrors\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" + }, + "source": { + "description": "source matches the repository that users refer to, e.g. in image pull specifications. Setting source to a registry hostname e.g. docker.io. quay.io, or registry.redhat.io, will match the image pull specification of corressponding registry. \"source\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo [*.]host for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "servicecertsigner.config.openshift.io", - "Version": "v1alpha1", - "Kind": "ServiceCertSignerOperatorConfigStatus", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "ImageTagMirrors", "Scope": "Namespaced" } }, - "io.openshift.config.v1.APIServer": { - "description": "APIServer holds configuration (like serving certificates, client CA and CORS domains) shared by all API servers in the system, among them especially kube-apiserver and openshift-apiserver. The canonical name of an instance is 'cluster'.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1.Infrastructure": { + "description": "Infrastructure holds cluster-wide information about Infrastructure. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "spec" @@ -64926,40 +70703,24 @@ "spec": { "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.APIServerSpec" + "$ref": "#/definitions/io.openshift.config.v1.InfrastructureSpec" }, "status": { "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.APIServerStatus" + "$ref": "#/definitions/io.openshift.config.v1.InfrastructureStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "config.openshift.io", "Version": "v1", - "Kind": "APIServer", + "Kind": "Infrastructure", "Scope": "Clustered" } }, - "io.openshift.config.v1.APIServerEncryption": { - "type": "object", - "properties": { - "type": { - "description": "type defines what encryption type should be used to encrypt resources at the datastore layer. When this field is unset (i.e. when it is set to the empty string), identity is implied. The behavior of unset can and will change over time. Even if encryption is enabled by default, the meaning of unset may change to a different encryption type based on changes in best practices.\n\nWhen encryption is enabled, all sensitive resources shipped with the platform are encrypted. This list of sensitive resources can and will change over time. The current authoritative list is:\n\n 1. secrets\n 2. configmaps\n 3. routes.route.openshift.io\n 4. oauthaccesstokens.oauth.openshift.io\n 5. oauthauthorizetokens.oauth.openshift.io", - "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "APIServerEncryption", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.APIServerList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1.InfrastructureList": { + "description": "InfrastructureList is\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "metadata", @@ -64974,7 +70735,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.APIServer" + "$ref": "#/definitions/io.openshift.config.v1.Infrastructure" } }, "kind": { @@ -64991,230 +70752,327 @@ "Type": "list", "Group": "config.openshift.io", "Version": "v1", - "Kind": "APIServerList", + "Kind": "InfrastructureList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.APIServerNamedServingCert": { - "description": "APIServerNamedServingCert maps a server DNS name, as understood by a client, to a certificate.", + "io.openshift.config.v1.InfrastructureSpec": { + "description": "InfrastructureSpec contains settings that apply to the cluster infrastructure.", "type": "object", - "required": [ - "servingCertificate" - ], "properties": { - "names": { - "description": "names is a optional list of explicit DNS names (leading wildcards allowed) that should use this certificate to serve secure traffic. If no names are provided, the implicit names will be extracted from the certificates. Exact names trump over wildcard names. Explicit names defined here trump over extracted implicit names.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "cloudConfig": { + "description": "cloudConfig is a reference to a ConfigMap containing the cloud provider configuration file. This configuration file is used to configure the Kubernetes cloud provider integration when using the built-in cloud provider integration or the external cloud controller manager. The namespace for this config map is openshift-config.\n\ncloudConfig should only be consumed by the kube_cloud_config controller. The controller is responsible for using the user configuration in the spec for various platforms and combining that with the user provided ConfigMap in this field to create a stitched kube cloud config. The controller generates a ConfigMap `kube-cloud-config` in `openshift-config-managed` namespace with the kube cloud config is stored in `cloud.conf` key. All the clients are expected to use the generated ConfigMap only.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapFileReference" }, - "servingCertificate": { - "description": "servingCertificate references a kubernetes.io/tls type secret containing the TLS cert info for serving secure traffic. The secret must exist in the openshift-config namespace and contain the following required fields: - Secret.Data[\"tls.key\"] - TLS private key. - Secret.Data[\"tls.crt\"] - TLS certificate.", + "platformSpec": { + "description": "platformSpec holds desired information specific to the underlying infrastructure provider.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + "$ref": "#/definitions/io.openshift.config.v1.PlatformSpec" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "APIServerNamedServingCert", + "Kind": "InfrastructureSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.APIServerServingCerts": { + "io.openshift.config.v1.InfrastructureStatus": { + "description": "InfrastructureStatus describes the infrastructure the cluster is leveraging.", "type": "object", + "required": [ + "infrastructureName", + "etcdDiscoveryDomain", + "apiServerURL", + "apiServerInternalURI", + "controlPlaneTopology", + "infrastructureTopology" + ], "properties": { - "namedCertificates": { - "description": "namedCertificates references secrets containing the TLS cert info for serving secure traffic to specific hostnames. If no named certificates are provided, or no named certificates match the server name as understood by a client, the defaultServingCertificate will be used.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.APIServerNamedServingCert" - } + "apiServerInternalURI": { + "description": "apiServerInternalURL is a valid URI with scheme 'https', address and optionally a port (defaulting to 443). apiServerInternalURL can be used by components like kubelets, to contact the Kubernetes API server using the infrastructure provider rather than Kubernetes networking.", + "type": "string", + "default": "" + }, + "apiServerURL": { + "description": "apiServerURL is a valid URI with scheme 'https', address and optionally a port (defaulting to 443). apiServerURL can be used by components like the web console to tell users where to find the Kubernetes API.", + "type": "string", + "default": "" + }, + "controlPlaneTopology": { + "description": "controlPlaneTopology expresses the expectations for operands that normally run on control nodes. The default is 'HighlyAvailable', which represents the behavior operators have in a \"normal\" cluster. The 'SingleReplica' mode will be used in single-node deployments and the operators should not configure the operand for highly-available operation The 'External' mode indicates that the control plane is hosted externally to the cluster and that its components are not visible within the cluster.", + "type": "string", + "default": "" + }, + "cpuPartitioning": { + "description": "cpuPartitioning expresses if CPU partitioning is a currently enabled feature in the cluster. CPU Partitioning means that this cluster can support partitioning workloads to specific CPU Sets. Valid values are \"None\" and \"AllNodes\". When omitted, the default value is \"None\". The default value of \"None\" indicates that no nodes will be setup with CPU partitioning. The \"AllNodes\" value indicates that all nodes have been setup with CPU partitioning, and can then be further configured via the PerformanceProfile API.", + "type": "string", + "default": "None" + }, + "etcdDiscoveryDomain": { + "description": "etcdDiscoveryDomain is the domain used to fetch the SRV records for discovering etcd servers and clients. For more info: https://github.com/etcd-io/etcd/blob/329be66e8b3f9e2e6af83c123ff89297e49ebd15/Documentation/op-guide/clustering.md#dns-discovery deprecated: as of 4.7, this field is no longer set or honored. It will be removed in a future release.", + "type": "string", + "default": "" + }, + "infrastructureName": { + "description": "infrastructureName uniquely identifies a cluster with a human friendly name. Once set it should not be changed. Must be of max length 27 and must have only alphanumeric or hyphen characters.", + "type": "string", + "default": "" + }, + "infrastructureTopology": { + "description": "infrastructureTopology expresses the expectations for infrastructure services that do not run on control plane nodes, usually indicated by a node selector for a `role` value other than `master`. The default is 'HighlyAvailable', which represents the behavior operators have in a \"normal\" cluster. The 'SingleReplica' mode will be used in single-node deployments and the operators should not configure the operand for highly-available operation NOTE: External topology mode is not applicable for this field.", + "type": "string", + "default": "" + }, + "platform": { + "description": "platform is the underlying infrastructure provider for the cluster.\n\nDeprecated: Use platformStatus.type instead.", + "type": "string" + }, + "platformStatus": { + "description": "platformStatus holds status information specific to the underlying infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.PlatformStatus" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "APIServerServingCerts", + "Kind": "InfrastructureStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.APIServerSpec": { + "io.openshift.config.v1.Ingress": { + "description": "Ingress holds cluster-wide information about ingress, including the default ingress domain used for routes. The canonical name is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", + "required": [ + "spec" + ], "properties": { - "additionalCORSAllowedOrigins": { - "description": "additionalCORSAllowedOrigins lists additional, user-defined regular expressions describing hosts for which the API server allows access using the CORS headers. This may be needed to access the API and the integrated OAuth server from JavaScript applications. The values are regular expressions that correspond to the Golang regular expression language.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "audit": { - "description": "audit specifies the settings for audit configuration to be applied to all OpenShift-provided API servers in the cluster.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.Audit" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "clientCA": { - "description": "clientCA references a ConfigMap containing a certificate bundle for the signers that will be recognized for incoming client certificates in addition to the operator managed signers. If this is empty, then only operator managed signers are valid. You usually only have to set this if you have your own PKI you wish to honor client certificates from. The ConfigMap must exist in the openshift-config namespace and contain the following required fields: - ConfigMap.Data[\"ca-bundle.crt\"] - CA bundle.", + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "encryption": { - "description": "encryption allows the configuration of encryption of resources at the datastore layer.", + "spec": { + "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.APIServerEncryption" + "$ref": "#/definitions/io.openshift.config.v1.IngressSpec" }, - "servingCerts": { - "description": "servingCert is the TLS cert info for serving secure traffic. If not specified, operator managed certificates will be used for serving secure traffic.", + "status": { + "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.APIServerServingCerts" - }, - "tlsSecurityProfile": { - "description": "tlsSecurityProfile specifies settings for TLS connections for externally exposed servers.\n\nIf unset, a default (which may change between releases) is chosen. Note that only Old, Intermediate and Custom profiles are currently supported, and the maximum available minTLSVersion is VersionTLS12.", - "$ref": "#/definitions/io.openshift.config.v1.TLSSecurityProfile" + "$ref": "#/definitions/io.openshift.config.v1.IngressStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "APIServerSpec", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.APIServerStatus": { - "type": "object", - "x-fabric8-info": { - "Type": "nested", + "Type": "object", "Group": "config.openshift.io", "Version": "v1", - "Kind": "APIServerStatus", - "Scope": "Namespaced" + "Kind": "Ingress", + "Scope": "Clustered" } }, - "io.openshift.config.v1.AWSDNSSpec": { - "description": "AWSDNSSpec contains DNS configuration specific to the Amazon Web Services cloud provider.", + "io.openshift.config.v1.IngressList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", + "required": [ + "metadata", + "items" + ], "properties": { - "privateZoneIAMRole": { - "description": "privateZoneIAMRole contains the ARN of an IAM role that should be assumed when performing operations on the cluster's private hosted zone specified in the cluster DNS config. When left empty, no role should be assumed.", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.Ingress" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", + "Type": "list", "Group": "config.openshift.io", "Version": "v1", - "Kind": "AWSDNSSpec", + "Kind": "IngressList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.AWSIngressSpec": { - "description": "AWSIngressSpec holds the desired state of the Ingress for Amazon Web Services infrastructure provider. This only includes fields that can be modified in the cluster.", + "io.openshift.config.v1.IngressPlatformSpec": { + "description": "IngressPlatformSpec holds the desired state of Ingress specific to the underlying infrastructure provider of the current cluster. Since these are used at spec-level for the underlying cluster, it is supposed that only one of the spec structs is set.", "type": "object", + "required": [ + "type" + ], "properties": { + "aws": { + "description": "aws contains settings specific to the Amazon Web Services infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.AWSIngressSpec" + }, "type": { - "description": "type allows user to set a load balancer type. When this field is set the default ingresscontroller will get created using the specified LBType. If this field is not set then the default ingress controller of LBType Classic will be created. Valid values are:\n\n* \"Classic\": A Classic Load Balancer that makes routing decisions at either\n the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See\n the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb\n\n* \"NLB\": A Network Load Balancer that makes routing decisions at the\n transport layer (TCP/SSL). See the following for additional details:\n\n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb", - "type": "string" + "description": "type is the underlying infrastructure provider for the cluster. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"KubeVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "AWSIngressSpec", + "Kind": "IngressPlatformSpec", "Scope": "Namespaced" }, "x-kubernetes-unions": [ { "discriminator": "type", - "fields-to-discriminateBy": {} + "fields-to-discriminateBy": { + "aws": "AWS" + } } ] }, - "io.openshift.config.v1.AWSPlatformSpec": { - "description": "AWSPlatformSpec holds the desired state of the Amazon Web Services infrastructure provider. This only includes fields that can be modified in the cluster.", + "io.openshift.config.v1.IngressSpec": { "type": "object", + "required": [ + "domain" + ], "properties": { - "serviceEndpoints": { - "description": "serviceEndpoints list contains custom endpoints which will override default service endpoint of AWS Services. There must be only one ServiceEndpoint for a service.", + "appsDomain": { + "description": "appsDomain is an optional domain to use instead of the one specified in the domain field when a Route is created without specifying an explicit host. If appsDomain is nonempty, this value is used to generate default host values for Route. Unlike domain, appsDomain may be modified after installation. This assumes a new ingresscontroller has been setup with a wildcard certificate.", + "type": "string" + }, + "componentRoutes": { + "description": "componentRoutes is an optional list of routes that are managed by OpenShift components that a cluster-admin is able to configure the hostname and serving certificate for. The namespace and name of each route in this list should match an existing entry in the status.componentRoutes list.\n\nTo determine the set of configurable Routes, look at namespace and name of entries in the .status.componentRoutes list, where participating operators write the status of configurable routes.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.AWSServiceEndpoint" + "$ref": "#/definitions/io.openshift.config.v1.ComponentRouteSpec" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-map-keys": [ + "namespace", + "name" + ], + "x-kubernetes-list-type": "map" + }, + "domain": { + "description": "domain is used to generate a default host name for a route when the route's host name is empty. The generated host name will follow this pattern: \"\u003croute-name\u003e.\u003croute-namespace\u003e.\u003cdomain\u003e\".\n\nIt is also used as the default wildcard domain suffix for ingress. The default ingresscontroller domain will follow this pattern: \"*.\u003cdomain\u003e\".\n\nOnce set, changing domain is not currently supported.", + "type": "string", + "default": "" + }, + "loadBalancer": { + "description": "loadBalancer contains the load balancer details in general which are not only specific to the underlying infrastructure provider of the current cluster and are required for Ingress Controller to work on OpenShift.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.LoadBalancer" + }, + "requiredHSTSPolicies": { + "description": "requiredHSTSPolicies specifies HSTS policies that are required to be set on newly created or updated routes matching the domainPattern/s and namespaceSelector/s that are specified in the policy. Each requiredHSTSPolicy must have at least a domainPattern and a maxAge to validate a route HSTS Policy route annotation, and affect route admission.\n\nA candidate route is checked for HSTS Policies if it has the HSTS Policy route annotation: \"haproxy.router.openshift.io/hsts_header\" E.g. haproxy.router.openshift.io/hsts_header: max-age=31536000;preload;includeSubDomains\n\n- For each candidate route, if it matches a requiredHSTSPolicy domainPattern and optional namespaceSelector, then the maxAge, preloadPolicy, and includeSubdomainsPolicy must be valid to be admitted. Otherwise, the route is rejected. - The first match, by domainPattern and optional namespaceSelector, in the ordering of the RequiredHSTSPolicies determines the route's admission status. - If the candidate route doesn't match any requiredHSTSPolicy domainPattern and optional namespaceSelector, then it may use any HSTS Policy annotation.\n\nThe HSTS policy configuration may be changed after routes have already been created. An update to a previously admitted route may then fail if the updated route does not conform to the updated HSTS policy configuration. However, changing the HSTS policy configuration will not cause a route that is already admitted to stop working.\n\nNote that if there are no RequiredHSTSPolicies, any HSTS Policy annotation on the route is valid.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.RequiredHSTSPolicy" + } } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "AWSPlatformSpec", + "Kind": "IngressSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.AWSPlatformStatus": { - "description": "AWSPlatformStatus holds the current status of the Amazon Web Services infrastructure provider.", + "io.openshift.config.v1.IngressStatus": { "type": "object", - "required": [ - "region" - ], "properties": { - "region": { - "description": "region holds the default AWS region for new AWS resources created by the cluster.", - "type": "string", - "default": "" - }, - "resourceTags": { - "description": "resourceTags is a list of additional tags to apply to AWS resources created for the cluster. See https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html for information on tagging AWS resources. AWS supports a maximum of 50 tags per resource. OpenShift reserves 25 tags for its use, leaving 25 tags available for the user.", + "componentRoutes": { + "description": "componentRoutes is where participating operators place the current route status for routes whose hostnames and serving certificates can be customized by the cluster-admin.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.AWSResourceTag" + "$ref": "#/definitions/io.openshift.config.v1.ComponentRouteStatus" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-map-keys": [ + "namespace", + "name" + ], + "x-kubernetes-list-type": "map" }, - "serviceEndpoints": { - "description": "ServiceEndpoints list contains custom endpoints which will override default service endpoint of AWS Services. There must be only one ServiceEndpoint for a service.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.AWSServiceEndpoint" - }, - "x-kubernetes-list-type": "atomic" + "defaultPlacement": { + "description": "defaultPlacement is set at installation time to control which nodes will host the ingress router pods by default. The options are control-plane nodes or worker nodes.\n\nThis field works by dictating how the Cluster Ingress Operator will consider unset replicas and nodePlacement fields in IngressController resources when creating the corresponding Deployments.\n\nSee the documentation for the IngressController replicas and nodePlacement fields for more information.\n\nWhen omitted, the default value is Workers", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "AWSPlatformStatus", + "Kind": "IngressStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.AWSResourceTag": { - "description": "AWSResourceTag is a tag to apply to AWS resources created for the cluster.", + "io.openshift.config.v1.IntermediateTLSProfile": { + "description": "IntermediateTLSProfile is a TLS security profile based on: https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29", + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "IntermediateTLSProfile", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.KeystoneIdentityProvider": { + "description": "KeystonePasswordIdentityProvider provides identities for users authenticating using keystone password credentials", "type": "object", "required": [ - "key", - "value" + "url", + "domainName" ], "properties": { - "key": { - "description": "key is the key of the tag", + "ca": { + "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" + }, + "domainName": { + "description": "domainName is required for keystone v3", "type": "string", "default": "" }, - "value": { - "description": "value is the value of the tag. Some AWS service do not support empty values. Since tags are added to resources in many services, the length of the tag value must meet the requirements of all services.", + "tlsClientCert": { + "description": "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + }, + "tlsClientKey": { + "description": "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + }, + "url": { + "description": "url is the remote URL to connect to", "type": "string", "default": "" } @@ -65223,25 +71081,24 @@ "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "AWSResourceTag", + "Kind": "KeystoneIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.v1.AWSServiceEndpoint": { - "description": "AWSServiceEndpoint store the configuration of a custom url to override existing defaults of AWS Services.", + "io.openshift.config.v1.KubeClientConfig": { "type": "object", "required": [ - "name", - "url" + "kubeConfig", + "connectionOverrides" ], "properties": { - "name": { - "description": "name is the name of the AWS service. The list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html This must be provided and cannot be empty.", - "type": "string", - "default": "" + "connectionOverrides": { + "description": "connectionOverrides specifies client overrides for system components to loop back to this master.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ClientConnectionOverrides" }, - "url": { - "description": "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty.", + "kubeConfig": { + "description": "kubeConfig is a .kubeconfig filename for going to the owning kube-apiserver. Empty uses an in-cluster-config", "type": "string", "default": "" } @@ -65250,34 +71107,79 @@ "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "AWSServiceEndpoint", + "Kind": "KubeClientConfig", "Scope": "Namespaced" } }, - "io.openshift.config.v1.AdmissionConfig": { + "io.openshift.config.v1.KubevirtPlatformSpec": { + "description": "KubevirtPlatformSpec holds the desired state of the kubevirt infrastructure provider. This only includes fields that can be modified in the cluster.", + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "KubevirtPlatformSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.KubevirtPlatformStatus": { + "description": "KubevirtPlatformStatus holds the current status of the kubevirt infrastructure provider.", "type": "object", "properties": { - "disabledPlugins": { - "description": "disabledPlugins is a list of admission plugins that must be off. Putting something in this list is almost always a mistake and likely to result in cluster instability.", + "apiServerInternalIP": { + "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.", + "type": "string" + }, + "ingressIP": { + "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "KubevirtPlatformStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.LDAPAttributeMapping": { + "description": "LDAPAttributeMapping maps LDAP attributes to OpenShift identity fields", + "type": "object", + "required": [ + "id" + ], + "properties": { + "email": { + "description": "email is the list of attributes whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", "type": "array", "items": { "type": "string", "default": "" } }, - "enabledPlugins": { - "description": "enabledPlugins is a list of admission plugins that must be on in addition to the default list. Some admission plugins are disabled by default, but certain configurations require them. This is fairly uncommon and can result in performance penalties and unexpected behavior.", + "id": { + "description": "id is the list of attributes whose values should be used as the user ID. Required. First non-empty attribute is used. At least one attribute is required. If none of the listed attribute have a value, authentication fails. LDAP standard identity attribute is \"dn\"", "type": "array", "items": { "type": "string", "default": "" } }, - "pluginConfig": { - "type": "object", - "additionalProperties": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.AdmissionPluginConfig" + "name": { + "description": "name is the list of attributes whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity LDAP standard display name attribute is \"cn\"", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "preferredUsername": { + "description": "preferredUsername is the list of attributes whose values should be used as the preferred username. LDAP standard login attribute is \"uid\"", + "type": "array", + "items": { + "type": "string", + "default": "" } } }, @@ -65285,244 +71187,235 @@ "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "AdmissionConfig", + "Kind": "LDAPAttributeMapping", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.LDAPIdentityProvider": { + "description": "LDAPPasswordIdentityProvider provides identities for users authenticating using LDAP credentials", + "type": "object", + "required": [ + "url", + "insecure", + "attributes" + ], + "properties": { + "attributes": { + "description": "attributes maps LDAP attributes to identities", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.LDAPAttributeMapping" + }, + "bindDN": { + "description": "bindDN is an optional DN to bind with during the search phase.", + "type": "string", + "default": "" + }, + "bindPassword": { + "description": "bindPassword is an optional reference to a secret by name containing a password to bind with during the search phase. The key \"bindPassword\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + }, + "ca": { + "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" + }, + "insecure": { + "description": "insecure, if true, indicates the connection should not use TLS WARNING: Should not be set to `true` with the URL scheme \"ldaps://\" as \"ldaps://\" URLs always\n attempt to connect using TLS, even when `insecure` is set to `true`\nWhen `true`, \"ldap://\" URLS connect insecurely. When `false`, \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830.", + "type": "boolean", + "default": false + }, + "url": { + "description": "url is an RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is: ldap://host:port/basedn?attribute?scope?filter", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "LDAPIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.v1.AdmissionPluginConfig": { - "description": "AdmissionPluginConfig holds the necessary configuration options for admission plugins", + "io.openshift.config.v1.LeaderElection": { + "description": "LeaderElection provides information to elect a leader", "type": "object", "required": [ - "location", - "configuration" + "leaseDuration", + "renewDeadline", + "retryPeriod" ], "properties": { - "configuration": { - "description": "Configuration is an embedded configuration object to be used as the plugin's configuration. If present, it will be used instead of the path to the configuration file.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "disable": { + "description": "disable allows leader election to be suspended while allowing a fully defaulted \"normal\" startup case.", + "type": "boolean" }, - "location": { - "description": "Location is the path to a configuration file that contains the plugin's configuration", - "type": "string", - "default": "" + "leaseDuration": { + "description": "leaseDuration is the duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" + }, + "name": { + "description": "name indicates what name to use for the resource", + "type": "string" + }, + "namespace": { + "description": "namespace indicates which namespace the resource is in", + "type": "string" + }, + "renewDeadline": { + "description": "renewDeadline is the interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration. This is only applicable if leader election is enabled.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" + }, + "retryPeriod": { + "description": "retryPeriod is the duration the clients should wait between attempting acquisition and renewal of a leadership. This is only applicable if leader election is enabled.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "AdmissionPluginConfig", + "Kind": "LeaderElection", "Scope": "Namespaced" } }, - "io.openshift.config.v1.AlibabaCloudPlatformSpec": { - "description": "AlibabaCloudPlatformSpec holds the desired state of the Alibaba Cloud infrastructure provider. This only includes fields that can be modified in the cluster.", + "io.openshift.config.v1.LoadBalancer": { "type": "object", + "properties": { + "platform": { + "description": "platform holds configuration specific to the underlying infrastructure provider for the ingress load balancers. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.IngressPlatformSpec" + } + }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "AlibabaCloudPlatformSpec", + "Kind": "LoadBalancer", "Scope": "Namespaced" } }, - "io.openshift.config.v1.AlibabaCloudPlatformStatus": { - "description": "AlibabaCloudPlatformStatus holds the current status of the Alibaba Cloud infrastructure provider.", + "io.openshift.config.v1.MTUMigration": { + "description": "MTUMigration contains infomation about MTU migration.", "type": "object", - "required": [ - "region" - ], "properties": { - "region": { - "description": "region specifies the region for Alibaba Cloud resources created for the cluster.", - "type": "string", - "default": "" - }, - "resourceGroupID": { - "description": "resourceGroupID is the ID of the resource group for the cluster.", - "type": "string" + "machine": { + "description": "Machine contains MTU migration configuration for the machine's uplink.", + "$ref": "#/definitions/io.openshift.config.v1.MTUMigrationValues" }, - "resourceTags": { - "description": "resourceTags is a list of additional tags to apply to Alibaba Cloud resources created for the cluster.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.AlibabaCloudResourceTag" - }, - "x-kubernetes-list-map-keys": [ - "key" - ], - "x-kubernetes-list-type": "map" + "network": { + "description": "Network contains MTU migration configuration for the default network.", + "$ref": "#/definitions/io.openshift.config.v1.MTUMigrationValues" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "AlibabaCloudPlatformStatus", + "Kind": "MTUMigration", "Scope": "Namespaced" } }, - "io.openshift.config.v1.AlibabaCloudResourceTag": { - "description": "AlibabaCloudResourceTag is the set of tags to add to apply to resources.", + "io.openshift.config.v1.MTUMigrationValues": { + "description": "MTUMigrationValues contains the values for a MTU migration.", "type": "object", "required": [ - "key", - "value" + "to" ], "properties": { - "key": { - "description": "key is the key of the tag.", - "type": "string", - "default": "" + "from": { + "description": "From is the MTU to migrate from.", + "type": "integer", + "format": "int64" }, - "value": { - "description": "value is the value of the tag.", - "type": "string", - "default": "" + "to": { + "description": "To is the MTU to migrate to.", + "type": "integer", + "format": "int64" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "AlibabaCloudResourceTag", + "Kind": "MTUMigrationValues", "Scope": "Namespaced" } }, - "io.openshift.config.v1.Audit": { + "io.openshift.config.v1.MaxAgePolicy": { + "description": "MaxAgePolicy contains a numeric range for specifying a compliant HSTS max-age for the enclosing RequiredHSTSPolicy", "type": "object", "properties": { - "customRules": { - "description": "customRules specify profiles per group. These profile take precedence over the top-level profile field if they apply. They are evaluation from top to bottom and the first one that matches, applies.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.AuditCustomRule" - }, - "x-kubernetes-list-map-keys": [ - "group" - ], - "x-kubernetes-list-type": "map" + "largestMaxAge": { + "description": "The largest allowed value (in seconds) of the RequiredHSTSPolicy max-age This value can be left unspecified, in which case no upper limit is enforced.", + "type": "integer", + "format": "int32" }, - "profile": { - "description": "profile specifies the name of the desired top-level audit profile to be applied to all requests sent to any of the OpenShift-provided API servers in the cluster (kube-apiserver, openshift-apiserver and oauth-apiserver), with the exception of those requests that match one or more of the customRules.\n\nThe following profiles are provided: - Default: default policy which means MetaData level logging with the exception of events\n (not logged at all), oauthaccesstokens and oauthauthorizetokens (both logged at RequestBody\n level).\n- WriteRequestBodies: like 'Default', but logs request and response HTTP payloads for write requests (create, update, patch). - AllRequestBodies: like 'WriteRequestBodies', but also logs request and response HTTP payloads for read requests (get, list). - None: no requests are logged at all, not even oauthaccesstokens and oauthauthorizetokens.\n\nWarning: It is not recommended to disable audit logging by using the `None` profile unless you are fully aware of the risks of not logging data that can be beneficial when troubleshooting issues. If you disable audit logging and a support situation arises, you might need to enable audit logging and reproduce the issue in order to troubleshoot properly.\n\nIf unset, the 'Default' profile is used as the default.", - "type": "string" + "smallestMaxAge": { + "description": "The smallest allowed value (in seconds) of the RequiredHSTSPolicy max-age Setting max-age=0 allows the deletion of an existing HSTS header from a host. This is a necessary tool for administrators to quickly correct mistakes. This value can be left unspecified, in which case no lower limit is enforced.", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "Audit", + "Kind": "MaxAgePolicy", "Scope": "Namespaced" } }, - "io.openshift.config.v1.AuditConfig": { - "description": "AuditConfig holds configuration for the audit capabilities", + "io.openshift.config.v1.ModernTLSProfile": { + "description": "ModernTLSProfile is a TLS security profile based on: https://wiki.mozilla.org/Security/Server_Side_TLS#Modern_compatibility", "type": "object", - "required": [ - "enabled", - "auditFilePath", - "maximumFileRetentionDays", - "maximumRetainedFiles", - "maximumFileSizeMegabytes", - "policyFile", - "policyConfiguration", - "logFormat", - "webHookKubeConfig", - "webHookMode" - ], - "properties": { - "auditFilePath": { - "description": "All requests coming to the apiserver will be logged to this file.", - "type": "string", - "default": "" - }, - "enabled": { - "description": "If this flag is set, audit log will be printed in the logs. The logs contains, method, user and a requested URL.", - "type": "boolean", - "default": false - }, - "logFormat": { - "description": "Format of saved audits (legacy or json).", - "type": "string", - "default": "" - }, - "maximumFileRetentionDays": { - "description": "Maximum number of days to retain old log files based on the timestamp encoded in their filename.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "maximumFileSizeMegabytes": { - "description": "Maximum size in megabytes of the log file before it gets rotated. Defaults to 100MB.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "maximumRetainedFiles": { - "description": "Maximum number of old log files to retain.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "policyConfiguration": { - "description": "PolicyConfiguration is an embedded policy configuration object to be used as the audit policy configuration. If present, it will be used instead of the path to the policy file.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" - }, - "policyFile": { - "description": "PolicyFile is a path to the file that defines the audit policy configuration.", - "type": "string", - "default": "" - }, - "webHookKubeConfig": { - "description": "Path to a .kubeconfig formatted file that defines the audit webhook configuration.", - "type": "string", - "default": "" - }, - "webHookMode": { - "description": "Strategy for sending audit events (block or batch).", - "type": "string", - "default": "" - } - }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "AuditConfig", + "Kind": "ModernTLSProfile", "Scope": "Namespaced" } }, - "io.openshift.config.v1.AuditCustomRule": { - "description": "AuditCustomRule describes a custom rule for an audit profile that takes precedence over the top-level profile.", + "io.openshift.config.v1.NamedCertificate": { + "description": "NamedCertificate specifies a certificate/key, and the names it should be served for", "type": "object", "required": [ - "group", - "profile" + "certFile", + "keyFile" ], "properties": { - "group": { - "description": "group is a name of group a request user must be member of in order to this profile to apply.", + "certFile": { + "description": "CertFile is a file containing a PEM-encoded certificate", "type": "string", "default": "" }, - "profile": { - "description": "profile specifies the name of the desired audit policy configuration to be deployed to all OpenShift-provided API servers in the cluster.\n\nThe following profiles are provided: - Default: the existing default policy. - WriteRequestBodies: like 'Default', but logs request and response HTTP payloads for write requests (create, update, patch). - AllRequestBodies: like 'WriteRequestBodies', but also logs request and response HTTP payloads for read requests (get, list). - None: no requests are logged at all, not even oauthaccesstokens and oauthauthorizetokens.\n\nIf unset, the 'Default' profile is used as the default.", - "type": "string" + "keyFile": { + "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "type": "string", + "default": "" + }, + "names": { + "description": "Names is a list of DNS names this certificate should be used to secure A name can be a normal DNS name, or can contain leading wildcard segments.", + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "AuditCustomRule", + "Kind": "NamedCertificate", "Scope": "Namespaced" } }, - "io.openshift.config.v1.Authentication": { - "description": "Authentication specifies cluster-wide settings for authentication (like OAuth and webhook token authenticators). The canonical name of an instance is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1.Network": { + "description": "Network holds cluster-wide information about Network. The canonical name is `cluster`. It is used to configure the desired network configuration, such as: IP address pools for services/pod IPs, network plugin, etc. Please view network.spec for an explanation on what applies when configuring this resource.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "spec" @@ -65542,25 +71435,112 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec holds user settable values for configuration", + "description": "spec holds user settable values for configuration. As a general rule, this SHOULD NOT be read directly. Instead, you should consume the NetworkStatus, as it indicates the currently deployed configuration. Currently, most spec fields are immutable after installation. Please view the individual ones for further details on each.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.AuthenticationSpec" + "$ref": "#/definitions/io.openshift.config.v1.NetworkSpec" }, "status": { "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.AuthenticationStatus" + "$ref": "#/definitions/io.openshift.config.v1.NetworkStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "config.openshift.io", "Version": "v1", - "Kind": "Authentication", + "Kind": "Network", "Scope": "Clustered" } }, - "io.openshift.config.v1.AuthenticationList": { + "io.openshift.config.v1.NetworkDiagnostics": { + "type": "object", + "properties": { + "mode": { + "description": "mode controls the network diagnostics mode\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is All.", + "type": "string", + "default": "" + }, + "sourcePlacement": { + "description": "sourcePlacement controls the scheduling of network diagnostics source deployment\n\nSee NetworkDiagnosticsSourcePlacement for more details about default values.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.NetworkDiagnosticsSourcePlacement" + }, + "targetPlacement": { + "description": "targetPlacement controls the scheduling of network diagnostics target daemonset\n\nSee NetworkDiagnosticsTargetPlacement for more details about default values.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.NetworkDiagnosticsTargetPlacement" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "NetworkDiagnostics", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.NetworkDiagnosticsSourcePlacement": { + "description": "NetworkDiagnosticsSourcePlacement defines node scheduling configuration network diagnostics source components", + "type": "object", + "properties": { + "nodeSelector": { + "description": "nodeSelector is the node selector applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `kubernetes.io/os: linux`.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "tolerations": { + "description": "tolerations is a list of tolerations applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is an empty list.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "NetworkDiagnosticsSourcePlacement", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.NetworkDiagnosticsTargetPlacement": { + "description": "NetworkDiagnosticsTargetPlacement defines node scheduling configuration network diagnostics target components", + "type": "object", + "properties": { + "nodeSelector": { + "description": "nodeSelector is the node selector applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `kubernetes.io/os: linux`.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "tolerations": { + "description": "tolerations is a list of tolerations applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `- operator: \"Exists\"` which means that all taints are tolerated.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "NetworkDiagnosticsTargetPlacement", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.NetworkList": { "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ @@ -65576,7 +71556,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.Authentication" + "$ref": "#/definitions/io.openshift.config.v1.Network" } }, "kind": { @@ -65593,182 +71573,311 @@ "Type": "list", "Group": "config.openshift.io", "Version": "v1", - "Kind": "AuthenticationList", + "Kind": "NetworkList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.AuthenticationSpec": { + "io.openshift.config.v1.NetworkMigration": { + "description": "NetworkMigration represents the network migration status.", "type": "object", "properties": { - "oauthMetadata": { - "description": "oauthMetadata contains the discovery endpoint data for OAuth 2.0 Authorization Server Metadata for an external OAuth server. This discovery document can be viewed from its served location: oc get --raw '/.well-known/oauth-authorization-server' For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 If oauthMetadata.name is non-empty, this value has precedence over any metadata reference stored in status. The key \"oauthMetadata\" is used to locate the data. If specified and the config map or expected key is not found, no metadata is served. If the specified metadata is not valid, no metadata is served. The namespace for this config map is openshift-config.", + "mtu": { + "description": "MTU is the MTU configuration that is being deployed.", + "$ref": "#/definitions/io.openshift.config.v1.MTUMigration" + }, + "networkType": { + "description": "NetworkType is the target plugin that is being deployed. DEPRECATED: network type migration is no longer supported, so this should always be unset.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "NetworkMigration", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.NetworkSpec": { + "description": "NetworkSpec is the desired network configuration. As a general rule, this SHOULD NOT be read directly. Instead, you should consume the NetworkStatus, as it indicates the currently deployed configuration. Currently, most spec fields are immutable after installation. Please view the individual ones for further details on each.", + "type": "object", + "required": [ + "clusterNetwork", + "serviceNetwork", + "networkType" + ], + "properties": { + "clusterNetwork": { + "description": "IP address pool to use for pod IPs. This field is immutable after installation.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ClusterNetworkEntry" + }, + "x-kubernetes-list-type": "atomic" + }, + "externalIP": { + "description": "externalIP defines configuration for controllers that affect Service.ExternalIP. If nil, then ExternalIP is not allowed to be set.", + "$ref": "#/definitions/io.openshift.config.v1.ExternalIPConfig" + }, + "networkDiagnostics": { + "description": "networkDiagnostics defines network diagnostics configuration.\n\nTakes precedence over spec.disableNetworkDiagnostics in network.operator.openshift.io. If networkDiagnostics is not specified or is empty, and the spec.disableNetworkDiagnostics flag in network.operator.openshift.io is set to true, the network diagnostics feature will be disabled.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" + "$ref": "#/definitions/io.openshift.config.v1.NetworkDiagnostics" }, - "oidcProviders": { - "description": "OIDCProviders are OIDC identity providers that can issue tokens for this cluster Can only be set if \"Type\" is set to \"OIDC\".\n\nAt most one provider can be configured.", + "networkType": { + "description": "NetworkType is the plugin that is to be deployed (e.g. OVNKubernetes). This should match a value that the cluster-network-operator understands, or else no networking will be installed. Currently supported values are: - OVNKubernetes This field is immutable after installation.", + "type": "string", + "default": "" + }, + "serviceNetwork": { + "description": "IP address pool for services. Currently, we only support a single entry here. This field is immutable after installation.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "serviceNodePortRange": { + "description": "The port range allowed for Services of type NodePort. If not specified, the default of 30000-32767 will be used. Such Services without a NodePort specified will have one automatically allocated from this range. This parameter can be updated after the cluster is installed.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "NetworkSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.NetworkStatus": { + "description": "NetworkStatus is the current network configuration.", + "type": "object", + "properties": { + "clusterNetwork": { + "description": "IP address pool to use for pod IPs.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.OIDCProvider" + "$ref": "#/definitions/io.openshift.config.v1.ClusterNetworkEntry" + }, + "x-kubernetes-list-type": "atomic" + }, + "clusterNetworkMTU": { + "description": "ClusterNetworkMTU is the MTU for inter-pod networking.", + "type": "integer", + "format": "int32" + }, + "conditions": { + "description": "conditions represents the observations of a network.config current state. Known .status.conditions.type are: \"NetworkDiagnosticsAvailable\"", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" }, "x-kubernetes-list-map-keys": [ - "name" + "type" ], - "x-kubernetes-list-type": "map" + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" }, - "serviceAccountIssuer": { - "description": "serviceAccountIssuer is the identifier of the bound service account token issuer. The default is https://kubernetes.default.svc WARNING: Updating this field will not result in immediate invalidation of all bound tokens with the previous issuer value. Instead, the tokens issued by previous service account issuer will continue to be trusted for a time period chosen by the platform (currently set to 24h). This time period is subject to change over time. This allows internal components to transition to use new service account issuer without service distruption.", - "type": "string", - "default": "" + "migration": { + "description": "Migration contains the cluster network migration configuration.", + "$ref": "#/definitions/io.openshift.config.v1.NetworkMigration" }, - "type": { - "description": "type identifies the cluster managed, user facing authentication mode in use. Specifically, it manages the component that responds to login attempts. The default is IntegratedOAuth.", - "type": "string", - "default": "" + "networkType": { + "description": "NetworkType is the plugin that is deployed (e.g. OVNKubernetes).", + "type": "string" }, - "webhookTokenAuthenticator": { - "description": "webhookTokenAuthenticator configures a remote token reviewer. These remote authentication webhooks can be used to verify bearer tokens via the tokenreviews.authentication.k8s.io REST API. This is required to honor bearer tokens that are provisioned by an external authentication service.\n\nCan only be set if \"Type\" is set to \"None\".", - "$ref": "#/definitions/io.openshift.config.v1.WebhookTokenAuthenticator" + "serviceNetwork": { + "description": "IP address pool for services. Currently, we only support a single entry here.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "NetworkStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.Node": { + "description": "Node holds cluster-wide information about node specific features.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "type": "object", + "required": [ + "spec" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "description": "spec holds user settable values for configuration", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.NodeSpec" }, - "webhookTokenAuthenticators": { - "description": "webhookTokenAuthenticators is DEPRECATED, setting it has no effect.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.DeprecatedWebhookTokenAuthenticator" - }, - "x-kubernetes-list-type": "atomic" + "status": { + "description": "status holds observed values.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.NodeStatus" } }, "x-fabric8-info": { - "Type": "nested", + "Type": "object", "Group": "config.openshift.io", "Version": "v1", - "Kind": "AuthenticationSpec", - "Scope": "Namespaced" + "Kind": "Node", + "Scope": "Clustered" } }, - "io.openshift.config.v1.AuthenticationStatus": { + "io.openshift.config.v1.NodeList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "integratedOAuthMetadata", - "oidcClients" + "metadata", + "items" ], "properties": { - "integratedOAuthMetadata": { - "description": "integratedOAuthMetadata contains the discovery endpoint data for OAuth 2.0 Authorization Server Metadata for the in-cluster integrated OAuth server. This discovery document can be viewed from its served location: oc get --raw '/.well-known/oauth-authorization-server' For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2 This contains the observed value based on cluster state. An explicitly set value in spec.oauthMetadata has precedence over this field. This field has no meaning if authentication spec.type is not set to IntegratedOAuth. The key \"oauthMetadata\" is used to locate the data. If the config map or expected key is not found, no metadata is served. If the specified metadata is not valid, no metadata is served. The namespace for this config map is openshift-config-managed.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "oidcClients": { - "description": "OIDCClients is where participating operators place the current OIDC client status for OIDC clients that can be customized by the cluster-admin.", + "items": { "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.OIDCClientStatus" - }, - "x-kubernetes-list-map-keys": [ - "componentNamespace", - "componentName" - ], - "x-kubernetes-list-type": "map" + "$ref": "#/definitions/io.openshift.config.v1.Node" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", + "Type": "list", "Group": "config.openshift.io", "Version": "v1", - "Kind": "AuthenticationStatus", + "Kind": "NodeList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.AzurePlatformSpec": { - "description": "AzurePlatformSpec holds the desired state of the Azure infrastructure provider. This only includes fields that can be modified in the cluster.", + "io.openshift.config.v1.NodeSpec": { "type": "object", + "properties": { + "cgroupMode": { + "description": "CgroupMode determines the cgroups version on the node", + "type": "string" + }, + "workerLatencyProfile": { + "description": "WorkerLatencyProfile determins the how fast the kubelet is updating the status and corresponding reaction of the cluster", + "type": "string" + } + }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "AzurePlatformSpec", + "Kind": "NodeSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.AzurePlatformStatus": { - "description": "AzurePlatformStatus holds the current status of the Azure infrastructure provider.", + "io.openshift.config.v1.NodeStatus": { "type": "object", - "required": [ - "resourceGroupName" - ], "properties": { - "armEndpoint": { - "description": "armEndpoint specifies a URL to use for resource management in non-soverign clouds such as Azure Stack.", - "type": "string" - }, - "cloudName": { - "description": "cloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK with the appropriate Azure API endpoints. If empty, the value is equal to `AzurePublicCloud`.", - "type": "string" - }, - "networkResourceGroupName": { - "description": "networkResourceGroupName is the Resource Group for network resources like the Virtual Network and Subnets used by the cluster. If empty, the value is same as ResourceGroupName.", - "type": "string" - }, - "resourceGroupName": { - "description": "resourceGroupName is the Resource Group for new Azure resources created for the cluster.", - "type": "string", - "default": "" - }, - "resourceTags": { - "description": "resourceTags is a list of additional tags to apply to Azure resources created for the cluster. See https://docs.microsoft.com/en-us/rest/api/resources/tags for information on tagging Azure resources. Due to limitations on Automation, Content Delivery Network, DNS Azure resources, a maximum of 15 tags may be applied. OpenShift reserves 5 tags for internal use, allowing 10 tags for user configuration.", + "conditions": { + "description": "conditions contain the details and the current state of the nodes.config object", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.AzureResourceTag" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "AzurePlatformStatus", + "Kind": "NodeStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.AzureResourceTag": { - "description": "AzureResourceTag is a tag to apply to Azure resources created for the cluster.", + "io.openshift.config.v1.NutanixFailureDomain": { + "description": "NutanixFailureDomain configures failure domain information for the Nutanix platform.", "type": "object", "required": [ - "key", - "value" + "name", + "cluster", + "subnets" ], "properties": { - "key": { - "description": "key is the key part of the tag. A tag key can have a maximum of 128 characters and cannot be empty. Key must begin with a letter, end with a letter, number or underscore, and must contain only alphanumeric characters and the following special characters `_ . -`.", - "type": "string", - "default": "" + "cluster": { + "description": "cluster is to identify the cluster (the Prism Element under management of the Prism Central), in which the Machine's VM will be created. The cluster identifier (uuid or name) can be obtained from the Prism Central console or using the prism_central API.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.NutanixResourceIdentifier" }, - "value": { - "description": "value is the value part of the tag. A tag value can have a maximum of 256 characters and cannot be empty. Value must contain only alphanumeric characters and the following special characters `_ + , - . / : ; \u003c = \u003e ? @`.", + "name": { + "description": "name defines the unique name of a failure domain. Name is required and must be at most 64 characters in length. It must consist of only lower case alphanumeric characters and hyphens (-). It must start and end with an alphanumeric character. This value is arbitrary and is used to identify the failure domain within the platform.", "type": "string", "default": "" + }, + "subnets": { + "description": "subnets holds a list of identifiers (one or more) of the cluster's network subnets for the Machine's VM to connect to. The subnet identifiers (uuid or name) can be obtained from the Prism Central console or using the prism_central API.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.NutanixResourceIdentifier" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "AzureResourceTag", + "Kind": "NutanixFailureDomain", "Scope": "Namespaced" } }, - "io.openshift.config.v1.BareMetalPlatformLoadBalancer": { - "description": "BareMetalPlatformLoadBalancer defines the load balancer used by the cluster on BareMetal platform.", + "io.openshift.config.v1.NutanixPlatformLoadBalancer": { + "description": "NutanixPlatformLoadBalancer defines the load balancer used by the cluster on Nutanix platform.", "type": "object", "properties": { "type": { - "description": "type defines the type of load balancer used by the cluster on BareMetal platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", + "description": "type defines the type of load balancer used by the cluster on Nutanix platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", "type": "string", "default": "OpenShiftManagedDefault" } @@ -65777,7 +71886,7 @@ "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "BareMetalPlatformLoadBalancer", + "Kind": "NutanixPlatformLoadBalancer", "Scope": "Namespaced" }, "x-kubernetes-unions": [ @@ -65787,48 +71896,54 @@ } ] }, - "io.openshift.config.v1.BareMetalPlatformSpec": { - "description": "BareMetalPlatformSpec holds the desired state of the BareMetal infrastructure provider. This only includes fields that can be modified in the cluster.", + "io.openshift.config.v1.NutanixPlatformSpec": { + "description": "NutanixPlatformSpec holds the desired state of the Nutanix infrastructure provider. This only includes fields that can be modified in the cluster.", "type": "object", + "required": [ + "prismCentral", + "prismElements" + ], "properties": { - "apiServerInternalIPs": { - "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", + "failureDomains": { + "description": "failureDomains configures failure domains information for the Nutanix platform. When set, the failure domains defined here may be used to spread Machines across prism element clusters to improve fault tolerance of the cluster.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.NutanixFailureDomain" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map" }, - "ingressIPs": { - "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "prismCentral": { + "description": "prismCentral holds the endpoint address and port to access the Nutanix Prism Central. When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy. Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the proxy spec.noProxy list.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.NutanixPrismEndpoint" }, - "machineNetworks": { - "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".", + "prismElements": { + "description": "prismElements holds one or more endpoint address and port data to access the Nutanix Prism Elements (clusters) of the Nutanix Prism Central. Currently we only support one Prism Element (cluster) for an OpenShift cluster, where all the Nutanix resources (VMs, subnets, volumes, etc.) used in the OpenShift cluster are located. In the future, we may support Nutanix resources (VMs, etc.) spread over multiple Prism Elements (clusters) of the Prism Central.", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.NutanixPrismElementEndpoint" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "BareMetalPlatformSpec", + "Kind": "NutanixPlatformSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.BareMetalPlatformStatus": { - "description": "BareMetalPlatformStatus holds the current status of the BareMetal infrastructure provider. For more information about the network architecture used with the BareMetal platform type, see: https://github.com/openshift/installer/blob/master/docs/design/baremetal/networking-infrastructure.md", + "io.openshift.config.v1.NutanixPlatformStatus": { + "description": "NutanixPlatformStatus holds the current status of the Nutanix infrastructure provider.", "type": "object", "required": [ "apiServerInternalIPs", @@ -65846,7 +71961,7 @@ "type": "string", "default": "" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-type": "set" }, "ingressIP": { "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", @@ -65859,77 +71974,122 @@ "type": "string", "default": "" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-type": "set" }, "loadBalancer": { "description": "loadBalancer defines how the load balancer used by the cluster is configured.", "default": { "type": "OpenShiftManagedDefault" }, - "$ref": "#/definitions/io.openshift.config.v1.BareMetalPlatformLoadBalancer" - }, - "machineNetworks": { - "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "nodeDNSIP": { - "description": "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for BareMetal deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.", - "type": "string" + "$ref": "#/definitions/io.openshift.config.v1.NutanixPlatformLoadBalancer" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "BareMetalPlatformStatus", + "Kind": "NutanixPlatformStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.BasicAuthIdentityProvider": { - "description": "BasicAuthPasswordIdentityProvider provides identities for users authenticating using HTTP basic auth credentials", + "io.openshift.config.v1.NutanixPrismElementEndpoint": { + "description": "NutanixPrismElementEndpoint holds the name and endpoint data for a Prism Element (cluster)", "type": "object", "required": [ - "url" + "name", + "endpoint" ], "properties": { - "ca": { - "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", + "endpoint": { + "description": "endpoint holds the endpoint address and port data of the Prism Element (cluster). When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy. Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the proxy spec.noProxy list.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" + "$ref": "#/definitions/io.openshift.config.v1.NutanixPrismEndpoint" }, - "tlsClientCert": { - "description": "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + "name": { + "description": "name is the name of the Prism Element (cluster). This value will correspond with the cluster field configured on other resources (eg Machines, PVCs, etc).", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "NutanixPrismElementEndpoint", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.NutanixPrismEndpoint": { + "description": "NutanixPrismEndpoint holds the endpoint address and port to access the Nutanix Prism Central or Element (cluster)", + "type": "object", + "required": [ + "address", + "port" + ], + "properties": { + "address": { + "description": "address is the endpoint address (DNS name or IP address) of the Nutanix Prism Central or Element (cluster)", + "type": "string", + "default": "" }, - "tlsClientKey": { - "description": "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + "port": { + "description": "port is the port number to access the Nutanix Prism Central or Element (cluster)", + "type": "integer", + "format": "int32", + "default": 0 + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "NutanixPrismEndpoint", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.NutanixResourceIdentifier": { + "description": "NutanixResourceIdentifier holds the identity of a Nutanix PC resource (cluster, image, subnet, etc.)", + "type": "object", + "required": [ + "type" + ], + "properties": { + "name": { + "description": "name is the resource name in the PC. It cannot be empty if the type is Name.", + "type": "string" }, - "url": { - "description": "url is the remote URL to connect to", + "type": { + "description": "type is the identifier type to use for this resource.", "type": "string", "default": "" + }, + "uuid": { + "description": "uuid is the UUID of the resource in the PC. It cannot be empty if the type is UUID.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "BasicAuthIdentityProvider", + "Kind": "NutanixResourceIdentifier", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "name": "Name", + "uuid": "UUID" + } + } + ] }, - "io.openshift.config.v1.Build": { - "description": "Build configures the behavior of OpenShift builds for the entire cluster. This includes default settings that can be overridden in BuildConfig objects, and overrides which are applied to all builds.\n\nThe canonical name is \"cluster\"\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1.OAuth": { + "description": "OAuth holds cluster-wide information about OAuth. The canonical name is `cluster`. It is used to configure the integrated OAuth server. This configuration is only honored when the top level Authentication config has type set to IntegratedOAuth.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ + "metadata", "spec" ], "properties": { @@ -65947,237 +72107,393 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "Spec holds user-settable values for the build controller configuration", + "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.BuildSpec" + "$ref": "#/definitions/io.openshift.config.v1.OAuthSpec" + }, + "status": { + "description": "status holds observed values from the cluster. They may not be overridden.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.OAuthStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "config.openshift.io", "Version": "v1", - "Kind": "Build", + "Kind": "OAuth", "Scope": "Clustered" } }, - "io.openshift.config.v1.BuildDefaults": { + "io.openshift.config.v1.OAuthList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", + "required": [ + "metadata", + "items" + ], "properties": { - "defaultProxy": { - "description": "DefaultProxy contains the default proxy settings for all build operations, including image pull/push and source download.\n\nValues can be overrode by setting the `HTTP_PROXY`, `HTTPS_PROXY`, and `NO_PROXY` environment variables in the build config's strategy.", - "$ref": "#/definitions/io.openshift.config.v1.ProxySpec" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "env": { - "description": "Env is a set of default environment variables that will be applied to the build if the specified variables do not exist on the build", + "items": { "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" + "$ref": "#/definitions/io.openshift.config.v1.OAuth" } }, - "gitProxy": { - "description": "GitProxy contains the proxy settings for git operations only. If set, this will override any Proxy settings for all git commands, such as git clone.\n\nValues that are not set here will be inherited from DefaultProxy.", - "$ref": "#/definitions/io.openshift.config.v1.ProxySpec" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "imageLabels": { - "description": "ImageLabels is a list of docker labels that are applied to the resulting image. User can override a default label by providing a label with the same name in their Build/BuildConfig.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ImageLabel" - } + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "OAuthList", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.OAuthRemoteConnectionInfo": { + "description": "OAuthRemoteConnectionInfo holds information necessary for establishing a remote connection", + "type": "object", + "required": [ + "url" + ], + "properties": { + "ca": { + "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" }, - "resources": { - "description": "Resources defines resource requirements to execute the build.", + "tlsClientCert": { + "description": "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + }, + "tlsClientKey": { + "description": "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + }, + "url": { + "description": "url is the remote URL to connect to", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "BuildDefaults", + "Kind": "OAuthRemoteConnectionInfo", "Scope": "Namespaced" } }, - "io.openshift.config.v1.BuildList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1.OAuthSpec": { + "description": "OAuthSpec contains desired cluster auth configuration", "type": "object", "required": [ - "metadata", - "items" + "tokenConfig" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { + "identityProviders": { + "description": "identityProviders is an ordered list of ways for a user to identify themselves. When this list is empty, no identities are provisioned for users.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.Build" - } + "$ref": "#/definitions/io.openshift.config.v1.IdentityProvider" + }, + "x-kubernetes-list-type": "atomic" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "templates": { + "description": "templates allow you to customize pages like the login page.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.OAuthTemplates" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "tokenConfig": { + "description": "tokenConfig contains options for authorization and access tokens", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/io.openshift.config.v1.TokenConfig" } }, "x-fabric8-info": { - "Type": "list", + "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "BuildList", + "Kind": "OAuthSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.BuildOverrides": { + "io.openshift.config.v1.OAuthStatus": { + "description": "OAuthStatus shows current known state of OAuth server in the cluster", + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "OAuthStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.OAuthTemplates": { + "description": "OAuthTemplates allow for customization of pages like the login page", "type": "object", "properties": { - "forcePull": { - "description": "ForcePull overrides, if set, the equivalent value in the builds, i.e. false disables force pull for all builds, true enables force pull for all builds, independently of what each build specifies itself", - "type": "boolean" + "error": { + "description": "error is the name of a secret that specifies a go template to use to render error pages during the authentication or grant flow. The key \"errors.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default error page is used. If the specified template is not valid, the default error page is used. If unspecified, the default error page is used. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + }, + "login": { + "description": "login is the name of a secret that specifies a go template to use to render the login page. The key \"login.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default login page is used. If the specified template is not valid, the default login page is used. If unspecified, the default login page is used. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + }, + "providerSelection": { + "description": "providerSelection is the name of a secret that specifies a go template to use to render the provider selection page. The key \"providers.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default provider selection page is used. If the specified template is not valid, the default provider selection page is used. If unspecified, the default provider selection page is used. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "OAuthTemplates", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.OIDCClientConfig": { + "type": "object", + "required": [ + "componentName", + "componentNamespace", + "clientID", + "clientSecret", + "extraScopes" + ], + "properties": { + "clientID": { + "description": "ClientID is the identifier of the OIDC client from the OIDC provider", + "type": "string", + "default": "" + }, + "clientSecret": { + "description": "ClientSecret refers to a secret in the `openshift-config` namespace that contains the client secret in the `clientSecret` key of the `.data` field", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + }, + "componentName": { + "description": "ComponentName is the name of the component that is supposed to consume this client configuration", + "type": "string", + "default": "" }, - "imageLabels": { - "description": "ImageLabels is a list of docker labels that are applied to the resulting image. If user provided a label in their Build/BuildConfig with the same name as one in this list, the user's label will be overwritten.", + "componentNamespace": { + "description": "ComponentNamespace is the namespace of the component that is supposed to consume this client configuration", + "type": "string", + "default": "" + }, + "extraScopes": { + "description": "ExtraScopes is an optional set of scopes to request tokens with.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ImageLabel" - } - }, - "nodeSelector": { - "description": "NodeSelector is a selector which must be true for the build pod to fit on a node", - "type": "object", - "additionalProperties": { "type": "string", "default": "" - } - }, - "tolerations": { - "description": "Tolerations is a list of Tolerations that will override any existing tolerations set on a build pod.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - } + }, + "x-kubernetes-list-type": "set" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "BuildOverrides", + "Kind": "OIDCClientConfig", "Scope": "Namespaced" } }, - "io.openshift.config.v1.BuildSpec": { + "io.openshift.config.v1.OIDCClientReference": { "type": "object", + "required": [ + "oidcProviderName", + "issuerURL", + "clientID" + ], "properties": { - "additionalTrustedCA": { - "description": "AdditionalTrustedCA is a reference to a ConfigMap containing additional CAs that should be trusted for image pushes and pulls during builds. The namespace for this config map is openshift-config.\n\nDEPRECATED: Additional CAs for image pull and push should be set on image.config.openshift.io/cluster instead.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" + "clientID": { + "description": "ClientID is the identifier of the OIDC client from the OIDC provider", + "type": "string", + "default": "" }, - "buildDefaults": { - "description": "BuildDefaults controls the default information for Builds", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.BuildDefaults" + "issuerURL": { + "description": "URL is the serving URL of the token issuer. Must use the https:// scheme.", + "type": "string", + "default": "" }, - "buildOverrides": { - "description": "BuildOverrides controls override settings for builds", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.BuildOverrides" + "oidcProviderName": { + "description": "OIDCName refers to the `name` of the provider from `oidcProviders`", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "BuildSpec", + "Kind": "OIDCClientReference", "Scope": "Namespaced" } }, - "io.openshift.config.v1.CertInfo": { - "description": "CertInfo relates a certificate with a private key", + "io.openshift.config.v1.OIDCClientStatus": { "type": "object", "required": [ - "certFile", - "keyFile" + "componentName", + "componentNamespace", + "currentOIDCClients", + "consumingUsers" ], "properties": { - "certFile": { - "description": "CertFile is a file containing a PEM-encoded certificate", + "componentName": { + "description": "ComponentName is the name of the component that will consume a client configuration.", "type": "string", "default": "" }, - "keyFile": { - "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "componentNamespace": { + "description": "ComponentNamespace is the namespace of the component that will consume a client configuration.", "type": "string", "default": "" + }, + "conditions": { + "description": "Conditions are used to communicate the state of the `oidcClients` entry.\n\nSupported conditions include Available, Degraded and Progressing.\n\nIf Available is true, the component is successfully using the configured client. If Degraded is true, that means something has gone wrong trying to handle the client configuration. If Progressing is true, that means the component is taking some action related to the `oidcClients` entry.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" + }, + "consumingUsers": { + "description": "ConsumingUsers is a slice of ServiceAccounts that need to have read permission on the `clientSecret` secret.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" + }, + "currentOIDCClients": { + "description": "CurrentOIDCClients is a list of clients that the component is currently using.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.OIDCClientReference" + }, + "x-kubernetes-list-map-keys": [ + "issuerURL", + "clientID" + ], + "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "CertInfo", + "Kind": "OIDCClientStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ClientConnectionOverrides": { + "io.openshift.config.v1.OIDCProvider": { "type": "object", "required": [ - "acceptContentTypes", - "contentType", - "qps", - "burst" + "name", + "issuer", + "oidcClients", + "claimMappings" ], "properties": { - "acceptContentTypes": { - "description": "acceptContentTypes defines the Accept header sent by clients when connecting to a server, overriding the default value of 'application/json'. This field will control all connections to the server used by a particular client.", - "type": "string", - "default": "" + "claimMappings": { + "description": "ClaimMappings describes rules on how to transform information from an ID token into a cluster identity", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.TokenClaimMappings" }, - "burst": { - "description": "burst allows extra queries to accumulate when a client is exceeding its rate.", - "type": "integer", - "format": "int32", - "default": 0 + "claimValidationRules": { + "description": "ClaimValidationRules are rules that are applied to validate token claims to authenticate users.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.TokenClaimValidationRule" + }, + "x-kubernetes-list-type": "atomic" }, - "contentType": { - "description": "contentType is the content type used when sending data to the server from this client.", + "issuer": { + "description": "Issuer describes atributes of the OIDC token issuer", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.TokenIssuer" + }, + "name": { + "description": "Name of the OIDC provider", "type": "string", "default": "" }, - "qps": { - "description": "qps controls the number of queries per second allowed for this connection.", - "type": "number", - "format": "float", - "default": 0 + "oidcClients": { + "description": "OIDCClients contains configuration for the platform's clients that need to request tokens from the issuer", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.OIDCClientConfig" + }, + "x-kubernetes-list-map-keys": [ + "componentNamespace", + "componentName" + ], + "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ClientConnectionOverrides", + "Kind": "OIDCProvider", "Scope": "Namespaced" } }, - "io.openshift.config.v1.CloudControllerManagerStatus": { - "description": "CloudControllerManagerStatus holds the state of Cloud Controller Manager (a.k.a. CCM or CPI) related settings", + "io.openshift.config.v1.ObjectReference": { + "description": "ObjectReference contains enough information to let you inspect or modify the referred object.", "type": "object", + "required": [ + "group", + "resource", + "name" + ], "properties": { - "state": { - "description": "state determines whether or not an external Cloud Controller Manager is expected to be installed within the cluster. https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/#running-cloud-controller-manager\n\nValid values are \"External\", \"None\" and omitted. When set to \"External\", new nodes will be tainted as uninitialized when created, preventing them from running workloads until they are initialized by the cloud controller manager. When omitted or set to \"None\", new nodes will be not tainted and no extra initialization from the cloud controller manager is expected.", + "group": { + "description": "group of the referent.", + "type": "string", + "default": "" + }, + "name": { + "description": "name of the referent.", + "type": "string", + "default": "" + }, + "namespace": { + "description": "namespace of the referent.", + "type": "string" + }, + "resource": { + "description": "resource of the referent.", "type": "string", "default": "" } @@ -66186,93 +72502,118 @@ "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "CloudControllerManagerStatus", + "Kind": "ObjectReference", "Scope": "Namespaced" } }, - "io.openshift.config.v1.CloudLoadBalancerConfig": { - "description": "CloudLoadBalancerConfig contains an union discriminator indicating the type of DNS solution in use within the cluster. When the DNSType is `ClusterHosted`, the cloud's Load Balancer configuration needs to be provided so that the DNS solution hosted within the cluster can be configured with those values.", + "io.openshift.config.v1.OldTLSProfile": { + "description": "OldTLSProfile is a TLS security profile based on: https://wiki.mozilla.org/Security/Server_Side_TLS#Old_backward_compatibility", "type": "object", - "properties": { - "clusterHosted": { - "description": "clusterHosted holds the IP addresses of API, API-Int and Ingress Load Balancers on Cloud Platforms. The DNS solution hosted within the cluster use these IP addresses to provide resolution for API, API-Int and Ingress services.", - "$ref": "#/definitions/io.openshift.config.v1.CloudLoadBalancerIPs" - }, - "dnsType": { - "description": "dnsType indicates the type of DNS solution in use within the cluster. Its default value of `PlatformDefault` indicates that the cluster's DNS is the default provided by the cloud platform. It can be set to `ClusterHosted` to bypass the configuration of the cloud default DNS. In this mode, the cluster needs to provide a self-hosted DNS solution for the cluster's installation to succeed. The cluster's use of the cloud's Load Balancers is unaffected by this setting. The value is immutable after it has been set at install time. Currently, there is no way for the customer to add additional DNS entries into the cluster hosted DNS. Enabling this functionality allows the user to start their own DNS solution outside the cluster after installation is complete. The customer would be responsible for configuring this custom DNS solution, and it can be run in addition to the in-cluster DNS solution.", - "type": "string", - "default": "PlatformDefault" - } - }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "CloudLoadBalancerConfig", + "Kind": "OldTLSProfile", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "dnsType", - "fields-to-discriminateBy": { - "clusterHosted": "ClusterHosted" - } - } - ] + } }, - "io.openshift.config.v1.CloudLoadBalancerIPs": { - "description": "CloudLoadBalancerIPs contains the Load Balancer IPs for the cloud's API, API-Int and Ingress Load balancers. They will be populated as soon as the respective Load Balancers have been configured. These values are utilized to configure the DNS solution hosted within the cluster.", + "io.openshift.config.v1.OpenIDClaims": { + "description": "OpenIDClaims contains a list of OpenID claims to use when authenticating with an OpenID identity provider", "type": "object", "properties": { - "apiIntLoadBalancerIPs": { - "description": "apiIntLoadBalancerIPs holds Load Balancer IPs for the internal API service. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Entries in the apiIntLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.", + "email": { + "description": "email is the list of claims whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-list-type": "set" + "x-kubernetes-list-type": "atomic" }, - "apiLoadBalancerIPs": { - "description": "apiLoadBalancerIPs holds Load Balancer IPs for the API service. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Could be empty for private clusters. Entries in the apiLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.", + "groups": { + "description": "groups is the list of claims value of which should be used to synchronize groups from the OIDC provider to OpenShift for the user. If multiple claims are specified, the first one with a non-empty value is used.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-list-type": "set" + "x-kubernetes-list-type": "atomic" }, - "ingressLoadBalancerIPs": { - "description": "ingressLoadBalancerIPs holds IPs for Ingress Load Balancers. These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses. Entries in the ingressLoadBalancerIPs must be unique. A maximum of 16 IP addresses are permitted.", + "name": { + "description": "name is the list of claims whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-list-type": "set" + "x-kubernetes-list-type": "atomic" + }, + "preferredUsername": { + "description": "preferredUsername is the list of claims whose values should be used as the preferred username. If unspecified, the preferred username is determined from the value of the sub claim", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "CloudLoadBalancerIPs", + "Kind": "OpenIDClaims", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ClusterCondition": { - "description": "ClusterCondition is a union of typed cluster conditions. The 'type' property determines which of the type-specific properties are relevant. When evaluated on a cluster, the condition may match, not match, or fail to evaluate.", + "io.openshift.config.v1.OpenIDIdentityProvider": { + "description": "OpenIDIdentityProvider provides identities for users authenticating using OpenID credentials", "type": "object", "required": [ - "type" + "clientID", + "clientSecret", + "issuer", + "claims" ], "properties": { - "promql": { - "description": "promQL represents a cluster condition based on PromQL.", - "$ref": "#/definitions/io.openshift.config.v1.PromQLClusterCondition" + "ca": { + "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" }, - "type": { - "description": "type represents the cluster-condition type. This defines the members and semantics of any additional properties.", + "claims": { + "description": "claims mappings", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.OpenIDClaims" + }, + "clientID": { + "description": "clientID is the oauth client ID", + "type": "string", + "default": "" + }, + "clientSecret": { + "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + }, + "extraAuthorizeParameters": { + "description": "extraAuthorizeParameters are any custom parameters to add to the authorize request.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "extraScopes": { + "description": "extraScopes are any scopes to request in addition to the standard \"openid\" scope.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "issuer": { + "description": "issuer is the URL that the OpenID Provider asserts as its Issuer Identifier. It must use the https scheme with no query or fragment component.", "type": "string", "default": "" } @@ -66281,195 +72622,155 @@ "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ClusterCondition", + "Kind": "OpenIDIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ClusterNetworkEntry": { - "description": "ClusterNetworkEntry is a contiguous block of IP addresses from which pod IPs are allocated.", + "io.openshift.config.v1.OpenStackPlatformLoadBalancer": { + "description": "OpenStackPlatformLoadBalancer defines the load balancer used by the cluster on OpenStack platform.", "type": "object", - "required": [ - "cidr" - ], "properties": { - "cidr": { - "description": "The complete block for pod IPs.", + "type": { + "description": "type defines the type of load balancer used by the cluster on OpenStack platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", "type": "string", - "default": "" - }, - "hostPrefix": { - "description": "The size (prefix) of block to allocate to each node. If this field is not used by the plugin, it can be left unset.", - "type": "integer", - "format": "int64" + "default": "OpenShiftManagedDefault" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ClusterNetworkEntry", + "Kind": "OpenStackPlatformLoadBalancer", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": {} + } + ] }, - "io.openshift.config.v1.ClusterOperator": { - "description": "ClusterOperator is the Custom Resource object which holds the current state of an operator. This object is used by operators to convey their state to the rest of the cluster.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1.OpenStackPlatformSpec": { + "description": "OpenStackPlatformSpec holds the desired state of the OpenStack infrastructure provider. This only includes fields that can be modified in the cluster.", "type": "object", - "required": [ - "metadata", - "spec" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "apiServerInternalIPs": { + "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "spec": { - "description": "spec holds configuration that could apply to any operator.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ClusterOperatorSpec" + "ingressIPs": { + "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "status": { - "description": "status holds the information about the state of an operator. It is consistent with status information across the Kubernetes ecosystem.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ClusterOperatorStatus" + "machineNetworks": { + "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { - "Type": "object", + "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ClusterOperator", - "Scope": "Clustered" + "Kind": "OpenStackPlatformSpec", + "Scope": "Namespaced" } }, - "io.openshift.config.v1.ClusterOperatorList": { - "description": "ClusterOperatorList is a list of OperatorStatus resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1.OpenStackPlatformStatus": { + "description": "OpenStackPlatformStatus holds the current status of the OpenStack infrastructure provider.", "type": "object", "required": [ - "metadata", - "items" + "apiServerInternalIPs", + "ingressIPs" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "apiServerInternalIP": { + "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", "type": "string" }, - "items": { + "apiServerInternalIPs": { + "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ClusterOperator" - } + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "cloudName": { + "description": "cloudName is the name of the desired OpenStack cloud in the client configuration file (`clouds.yaml`).", "type": "string" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - }, - "x-fabric8-info": { - "Type": "list", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "ClusterOperatorList", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.ClusterOperatorSpec": { - "description": "ClusterOperatorSpec is empty for now, but you could imagine holding information like \"pause\".", - "type": "object", - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "ClusterOperatorSpec", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.ClusterOperatorStatus": { - "description": "ClusterOperatorStatus provides information about the status of the operator.", - "type": "object", - "properties": { - "conditions": { - "description": "conditions describes the state of the operator's managed and monitored components.", + "ingressIP": { + "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", + "type": "string" + }, + "ingressIPs": { + "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ClusterOperatorStatusCondition" + "type": "string", + "default": "" }, - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "x-kubernetes-list-type": "atomic" }, - "extension": { - "description": "extension contains any additional status information specific to the operator which owns this status object.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + "loadBalancer": { + "description": "loadBalancer defines how the load balancer used by the cluster is configured.", + "default": { + "type": "OpenShiftManagedDefault" + }, + "$ref": "#/definitions/io.openshift.config.v1.OpenStackPlatformLoadBalancer" }, - "relatedObjects": { - "description": "relatedObjects is a list of objects that are \"interesting\" or related to this operator. Common uses are: 1. the detailed resource driving the operator 2. operator namespaces 3. operand namespaces", + "machineNetworks": { + "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ObjectReference" - } + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "versions": { - "description": "versions is a slice of operator and operand version tuples. Operators which manage multiple operands will have multiple operand entries in the array. Available operators must report the version of the operator itself with the name \"operator\". An operator reports a new \"operator\" version when it has rolled out the new version to all of its operands.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.OperandVersion" - } + "nodeDNSIP": { + "description": "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for OpenStack deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ClusterOperatorStatus", + "Kind": "OpenStackPlatformStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ClusterOperatorStatusCondition": { - "description": "ClusterOperatorStatusCondition represents the state of the operator's managed and monitored components.", + "io.openshift.config.v1.OperandVersion": { "type": "object", "required": [ - "type", - "status", - "lastTransitionTime" + "name", + "version" ], "properties": { - "lastTransitionTime": { - "description": "lastTransitionTime is the time of the last update to the current status property.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" - }, - "message": { - "description": "message provides additional information about the current condition. This is only to be consumed by humans. It may contain Line Feed characters (U+000A), which should be rendered as new lines.", - "type": "string" - }, - "reason": { - "description": "reason is the CamelCase reason for the condition's current status.", - "type": "string" - }, - "status": { - "description": "status of the condition, one of True, False, Unknown.", + "name": { + "description": "name is the name of the particular operand this version is for. It usually matches container images, not operators.", "type": "string", "default": "" }, - "type": { - "description": "type specifies the aspect reported by this condition.", + "version": { + "description": "version indicates which version of a particular operand is currently being managed. It must always match the Available operand. If 1.0.0 is Available, then this must indicate 1.0.0 even if the operator is trying to rollout 1.1.0", "type": "string", "default": "" } @@ -66478,15 +72779,17 @@ "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ClusterOperatorStatusCondition", + "Kind": "OperandVersion", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ClusterVersion": { - "description": "ClusterVersion is the configuration for the ClusterVersionOperator. This is where parameters related to automatic updates can be set.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1.OperatorHub": { + "description": "OperatorHub is the Schema for the operatorhubs API. It can be used to change the state of the default hub sources for OperatorHub on the cluster from enabled to disabled and vice versa.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "spec" + "metadata", + "spec", + "status" ], "properties": { "apiVersion": { @@ -66503,498 +72806,440 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec is the desired state of the cluster version - the operator will work to ensure that the desired version is applied to the cluster.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ClusterVersionSpec" + "$ref": "#/definitions/io.openshift.config.v1.OperatorHubSpec" }, "status": { - "description": "status contains information about the available updates and any in-progress updates.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ClusterVersionStatus" + "$ref": "#/definitions/io.openshift.config.v1.OperatorHubStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ClusterVersion", + "Kind": "OperatorHub", "Scope": "Clustered" } }, - "io.openshift.config.v1.ClusterVersionCapabilitiesSpec": { - "description": "ClusterVersionCapabilitiesSpec selects the managed set of optional, core cluster components.", + "io.openshift.config.v1.OperatorHubList": { + "description": "OperatorHubList contains a list of OperatorHub\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", + "required": [ + "metadata", + "items" + ], "properties": { - "additionalEnabledCapabilities": { - "description": "additionalEnabledCapabilities extends the set of managed capabilities beyond the baseline defined in baselineCapabilitySet. The default is an empty set.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { "type": "array", "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.OperatorHub" + } }, - "baselineCapabilitySet": { - "description": "baselineCapabilitySet selects an initial set of optional capabilities to enable, which can be extended via additionalEnabledCapabilities. If unset, the cluster will choose a default, and the default may change over time. The current default is vCurrent.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + }, + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", + "Type": "list", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ClusterVersionCapabilitiesSpec", + "Kind": "OperatorHubList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ClusterVersionCapabilitiesStatus": { - "description": "ClusterVersionCapabilitiesStatus describes the state of optional, core cluster components.", + "io.openshift.config.v1.OperatorHubSpec": { + "description": "OperatorHubSpec defines the desired state of OperatorHub", "type": "object", "properties": { - "enabledCapabilities": { - "description": "enabledCapabilities lists all the capabilities that are currently managed.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "disableAllDefaultSources": { + "description": "disableAllDefaultSources allows you to disable all the default hub sources. If this is true, a specific entry in sources can be used to enable a default source. If this is false, a specific entry in sources can be used to disable or enable a default source.", + "type": "boolean" }, - "knownCapabilities": { - "description": "knownCapabilities lists all the capabilities known to the current cluster.", + "sources": { + "description": "sources is the list of default hub sources and their configuration. If the list is empty, it implies that the default hub sources are enabled on the cluster unless disableAllDefaultSources is true. If disableAllDefaultSources is true and sources is not empty, the configuration present in sources will take precedence. The list of default hub sources and their current state will always be reflected in the status block.", "type": "array", "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.HubSource" + } } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ClusterVersionCapabilitiesStatus", + "Kind": "OperatorHubSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ClusterVersionList": { - "description": "ClusterVersionList is a list of ClusterVersion resources.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1.OperatorHubStatus": { + "description": "OperatorHubStatus defines the observed state of OperatorHub. The current state of the default hub sources will always be reflected here.", "type": "object", - "required": [ - "metadata", - "items" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { + "sources": { + "description": "sources encapsulates the result of applying the configuration for each hub source", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ClusterVersion" + "$ref": "#/definitions/io.openshift.config.v1.HubSourceStatus" } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "list", + "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ClusterVersionList", + "Kind": "OperatorHubStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ClusterVersionSpec": { - "description": "ClusterVersionSpec is the desired version state of the cluster. It includes the version the cluster should be at, how the cluster is identified, and where the cluster should look for version updates.", + "io.openshift.config.v1.OvirtPlatformLoadBalancer": { + "description": "OvirtPlatformLoadBalancer defines the load balancer used by the cluster on Ovirt platform.", "type": "object", - "required": [ - "clusterID" - ], "properties": { - "capabilities": { - "description": "capabilities configures the installation of optional, core cluster components. A null value here is identical to an empty object; see the child properties for default semantics.", - "$ref": "#/definitions/io.openshift.config.v1.ClusterVersionCapabilitiesSpec" - }, - "channel": { - "description": "channel is an identifier for explicitly requesting that a non-default set of updates be applied to this cluster. The default channel will be contain stable updates that are appropriate for production clusters.", - "type": "string" - }, - "clusterID": { - "description": "clusterID uniquely identifies this cluster. This is expected to be an RFC4122 UUID value (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx in hexadecimal values). This is a required field.", + "type": { + "description": "type defines the type of load balancer used by the cluster on Ovirt platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", "type": "string", - "default": "" - }, - "desiredUpdate": { - "description": "desiredUpdate is an optional field that indicates the desired value of the cluster version. Setting this value will trigger an upgrade (if the current version does not match the desired version). The set of recommended update values is listed as part of available updates in status, and setting values outside that range may cause the upgrade to fail.\n\nSome of the fields are inter-related with restrictions and meanings described here. 1. image is specified, version is specified, architecture is specified. API validation error. 2. image is specified, version is specified, architecture is not specified. You should not do this. version is silently ignored and image is used. 3. image is specified, version is not specified, architecture is specified. API validation error. 4. image is specified, version is not specified, architecture is not specified. image is used. 5. image is not specified, version is specified, architecture is specified. version and desired architecture are used to select an image. 6. image is not specified, version is specified, architecture is not specified. version and current architecture are used to select an image. 7. image is not specified, version is not specified, architecture is specified. API validation error. 8. image is not specified, version is not specified, architecture is not specified. API validation error.\n\nIf an upgrade fails the operator will halt and report status about the failing component. Setting the desired update value back to the previous version will cause a rollback to be attempted. Not all rollbacks will succeed.", - "$ref": "#/definitions/io.openshift.config.v1.Update" - }, - "overrides": { - "description": "overrides is list of overides for components that are managed by cluster version operator. Marking a component unmanaged will prevent the operator from creating or updating the object.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ComponentOverride" - }, - "x-kubernetes-list-map-keys": [ - "kind", - "group", - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "signatureStores": { - "description": "signatureStores contains the upstream URIs to verify release signatures and optional reference to a config map by name containing the PEM-encoded CA bundle.\n\nBy default, CVO will use existing signature stores if this property is empty. The CVO will check the release signatures in the local ConfigMaps first. It will search for a valid signature in these stores in parallel only when local ConfigMaps did not include a valid signature. Validation will fail if none of the signature stores reply with valid signature before timeout. Setting signatureStores will replace the default signature stores with custom signature stores. Default stores can be used with custom signature stores by adding them manually.\n\nA maximum of 32 signature stores may be configured.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SignatureStore" - }, - "x-kubernetes-list-map-keys": [ - "url" - ], - "x-kubernetes-list-type": "map" - }, - "upstream": { - "description": "upstream may be used to specify the preferred update server. By default it will use the appropriate update server for the cluster and region.", - "type": "string" + "default": "OpenShiftManagedDefault" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ClusterVersionSpec", + "Kind": "OvirtPlatformLoadBalancer", + "Scope": "Namespaced" + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": {} + } + ] + }, + "io.openshift.config.v1.OvirtPlatformSpec": { + "description": "OvirtPlatformSpec holds the desired state of the oVirt infrastructure provider. This only includes fields that can be modified in the cluster.", + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "OvirtPlatformSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ClusterVersionStatus": { - "description": "ClusterVersionStatus reports the status of the cluster versioning, including any upgrades that are in progress. The current field will be set to whichever version the cluster is reconciling to, and the conditions array will report whether the update succeeded, is in progress, or is failing.", + "io.openshift.config.v1.OvirtPlatformStatus": { + "description": "OvirtPlatformStatus holds the current status of the oVirt infrastructure provider.", "type": "object", "required": [ - "desired", - "observedGeneration", - "versionHash", - "capabilities", - "availableUpdates" + "apiServerInternalIPs", + "ingressIPs" ], "properties": { - "availableUpdates": { - "description": "availableUpdates contains updates recommended for this cluster. Updates which appear in conditionalUpdates but not in availableUpdates may expose this cluster to known issues. This list may be empty if no updates are recommended, if the update service is unavailable, or if an invalid channel has been specified.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.Release" - }, - "x-kubernetes-list-type": "atomic" - }, - "capabilities": { - "description": "capabilities describes the state of optional, core cluster components.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ClusterVersionCapabilitiesStatus" - }, - "conditionalUpdates": { - "description": "conditionalUpdates contains the list of updates that may be recommended for this cluster if it meets specific required conditions. Consumers interested in the set of updates that are actually recommended for this cluster should use availableUpdates. This list may be empty if no updates are recommended, if the update service is unavailable, or if an empty or invalid channel has been specified.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConditionalUpdate" - }, - "x-kubernetes-list-type": "atomic" + "apiServerInternalIP": { + "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", + "type": "string" }, - "conditions": { - "description": "conditions provides information about the cluster version. The condition \"Available\" is set to true if the desiredUpdate has been reached. The condition \"Progressing\" is set to true if an update is being applied. The condition \"Degraded\" is set to true if an update is currently blocked by a temporary or permanent error. Conditions are only valid for the current desiredUpdate when metadata.generation is equal to status.generation.", + "apiServerInternalIPs": { + "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ClusterOperatorStatusCondition" + "type": "string", + "default": "" }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "x-kubernetes-list-type": "set" }, - "desired": { - "description": "desired is the version that the cluster is reconciling towards. If the cluster is not yet fully initialized desired will be set with the information available, which may be an image or a tag.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.Release" + "ingressIP": { + "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", + "type": "string" }, - "history": { - "description": "history contains a list of the most recent versions applied to the cluster. This value may be empty during cluster startup, and then will be updated when a new update is being applied. The newest update is first in the list and it is ordered by recency. Updates in the history have state Completed if the rollout completed - if an update was failing or halfway applied the state will be Partial. Only a limited amount of update history is preserved.", + "ingressIPs": { + "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.UpdateHistory" + "type": "string", + "default": "" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-type": "set" }, - "observedGeneration": { - "description": "observedGeneration reports which version of the spec is being synced. If this value is not equal to metadata.generation, then the desired and conditions fields may represent a previous version.", - "type": "integer", - "format": "int64", - "default": 0 + "loadBalancer": { + "description": "loadBalancer defines how the load balancer used by the cluster is configured.", + "default": { + "type": "OpenShiftManagedDefault" + }, + "$ref": "#/definitions/io.openshift.config.v1.OvirtPlatformLoadBalancer" }, - "versionHash": { - "description": "versionHash is a fingerprint of the content that the cluster will be updated with. It is used by the operator to avoid unnecessary work and is for internal use only.", - "type": "string", - "default": "" + "nodeDNSIP": { + "description": "deprecated: as of 4.6, this field is no longer set or honored. It will be removed in a future release.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ClusterVersionStatus", + "Kind": "OvirtPlatformStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ComponentOverride": { - "description": "ComponentOverride allows overriding cluster version operator's behavior for a component.", + "io.openshift.config.v1.PlatformSpec": { + "description": "PlatformSpec holds the desired state specific to the underlying infrastructure provider of the current cluster. Since these are used at spec-level for the underlying cluster, it is supposed that only one of the spec structs is set.", "type": "object", "required": [ - "kind", - "group", - "namespace", - "name", - "unmanaged" + "type" ], "properties": { - "group": { - "description": "group identifies the API group that the kind is in.", - "type": "string", - "default": "" + "alibabaCloud": { + "description": "AlibabaCloud contains settings specific to the Alibaba Cloud infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.AlibabaCloudPlatformSpec" }, - "kind": { - "description": "kind indentifies which object to override.", - "type": "string", - "default": "" + "aws": { + "description": "AWS contains settings specific to the Amazon Web Services infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.AWSPlatformSpec" }, - "name": { - "description": "name is the component's name.", - "type": "string", - "default": "" + "azure": { + "description": "Azure contains settings specific to the Azure infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.AzurePlatformSpec" }, - "namespace": { - "description": "namespace is the component's namespace. If the resource is cluster scoped, the namespace should be empty.", - "type": "string", - "default": "" + "baremetal": { + "description": "BareMetal contains settings specific to the BareMetal platform.", + "$ref": "#/definitions/io.openshift.config.v1.BareMetalPlatformSpec" }, - "unmanaged": { - "description": "unmanaged controls if cluster version operator should stop managing the resources in this cluster. Default: false", - "type": "boolean", - "default": false - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "ComponentOverride", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.ComponentRouteSpec": { - "description": "ComponentRouteSpec allows for configuration of a route's hostname and serving certificate.", - "type": "object", - "required": [ - "namespace", - "name", - "hostname" - ], - "properties": { - "hostname": { - "description": "hostname is the hostname that should be used by the route.", - "type": "string", - "default": "" + "equinixMetal": { + "description": "EquinixMetal contains settings specific to the Equinix Metal infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.EquinixMetalPlatformSpec" }, - "name": { - "description": "name is the logical name of the route to customize.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of status.componentRoutes if the route is to be customized.", - "type": "string", - "default": "" + "external": { + "description": "ExternalPlatformType represents generic infrastructure provider. Platform-specific components should be supplemented separately.", + "$ref": "#/definitions/io.openshift.config.v1.ExternalPlatformSpec" }, - "namespace": { - "description": "namespace is the namespace of the route to customize.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of status.componentRoutes if the route is to be customized.", + "gcp": { + "description": "GCP contains settings specific to the Google Cloud Platform infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.GCPPlatformSpec" + }, + "ibmcloud": { + "description": "IBMCloud contains settings specific to the IBMCloud infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.IBMCloudPlatformSpec" + }, + "kubevirt": { + "description": "Kubevirt contains settings specific to the kubevirt infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.KubevirtPlatformSpec" + }, + "nutanix": { + "description": "Nutanix contains settings specific to the Nutanix infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.NutanixPlatformSpec" + }, + "openstack": { + "description": "OpenStack contains settings specific to the OpenStack infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.OpenStackPlatformSpec" + }, + "ovirt": { + "description": "Ovirt contains settings specific to the oVirt infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.OvirtPlatformSpec" + }, + "powervs": { + "description": "PowerVS contains settings specific to the IBM Power Systems Virtual Servers infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.PowerVSPlatformSpec" + }, + "type": { + "description": "type is the underlying infrastructure provider for the cluster. This value controls whether infrastructure automation such as service load balancers, dynamic volume provisioning, machine creation and deletion, and other integrations are enabled. If None, no infrastructure automation is enabled. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"KubeVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.", "type": "string", "default": "" }, - "servingCertKeyPairSecret": { - "description": "servingCertKeyPairSecret is a reference to a secret of type `kubernetes.io/tls` in the openshift-config namespace. The serving cert/key pair must match and will be used by the operator to fulfill the intent of serving with this name. If the custom hostname uses the default routing suffix of the cluster, the Secret specification for a serving certificate will not be needed.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + "vsphere": { + "description": "VSphere contains settings specific to the VSphere infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformSpec" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ComponentRouteSpec", + "Kind": "PlatformSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ComponentRouteStatus": { - "description": "ComponentRouteStatus contains information allowing configuration of a route's hostname and serving certificate.", + "io.openshift.config.v1.PlatformStatus": { + "description": "PlatformStatus holds the current status specific to the underlying infrastructure provider of the current cluster. Since these are used at status-level for the underlying cluster, it is supposed that only one of the status structs is set.", "type": "object", "required": [ - "namespace", - "name", - "defaultHostname", - "relatedObjects" + "type" ], "properties": { - "conditions": { - "description": "conditions are used to communicate the state of the componentRoutes entry.\n\nSupported conditions include Available, Degraded and Progressing.\n\nIf available is true, the content served by the route can be accessed by users. This includes cases where a default may continue to serve content while the customized route specified by the cluster-admin is being configured.\n\nIf Degraded is true, that means something has gone wrong trying to handle the componentRoutes entry. The currentHostnames field may or may not be in effect.\n\nIf Progressing is true, that means the component is taking some action related to the componentRoutes entry.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" + "alibabaCloud": { + "description": "AlibabaCloud contains settings specific to the Alibaba Cloud infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.AlibabaCloudPlatformStatus" }, - "consumingUsers": { - "description": "consumingUsers is a slice of ServiceAccounts that need to have read permission on the servingCertKeyPairSecret secret.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "aws": { + "description": "AWS contains settings specific to the Amazon Web Services infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.AWSPlatformStatus" }, - "currentHostnames": { - "description": "currentHostnames is the list of current names used by the route. Typically, this list should consist of a single hostname, but if multiple hostnames are supported by the route the operator may write multiple entries to this list.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "azure": { + "description": "Azure contains settings specific to the Azure infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.AzurePlatformStatus" }, - "defaultHostname": { - "description": "defaultHostname is the hostname of this route prior to customization.", - "type": "string", - "default": "" + "baremetal": { + "description": "BareMetal contains settings specific to the BareMetal platform.", + "$ref": "#/definitions/io.openshift.config.v1.BareMetalPlatformStatus" }, - "name": { - "description": "name is the logical name of the route to customize. It does not have to be the actual name of a route resource but it cannot be renamed.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of spec.componentRoutes if the route is to be customized.", - "type": "string", - "default": "" + "equinixMetal": { + "description": "EquinixMetal contains settings specific to the Equinix Metal infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.EquinixMetalPlatformStatus" }, - "namespace": { - "description": "namespace is the namespace of the route to customize. It must be a real namespace. Using an actual namespace ensures that no two components will conflict and the same component can be installed multiple times.\n\nThe namespace and name of this componentRoute must match a corresponding entry in the list of spec.componentRoutes if the route is to be customized.", - "type": "string", - "default": "" + "external": { + "description": "External contains settings specific to the generic External infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.ExternalPlatformStatus" }, - "relatedObjects": { - "description": "relatedObjects is a list of resources which are useful when debugging or inspecting how spec.componentRoutes is applied.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ObjectReference" - } + "gcp": { + "description": "GCP contains settings specific to the Google Cloud Platform infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.GCPPlatformStatus" + }, + "ibmcloud": { + "description": "IBMCloud contains settings specific to the IBMCloud infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.IBMCloudPlatformStatus" + }, + "kubevirt": { + "description": "Kubevirt contains settings specific to the kubevirt infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.KubevirtPlatformStatus" + }, + "nutanix": { + "description": "Nutanix contains settings specific to the Nutanix infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.NutanixPlatformStatus" + }, + "openstack": { + "description": "OpenStack contains settings specific to the OpenStack infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.OpenStackPlatformStatus" + }, + "ovirt": { + "description": "Ovirt contains settings specific to the oVirt infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.OvirtPlatformStatus" + }, + "powervs": { + "description": "PowerVS contains settings specific to the Power Systems Virtual Servers infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.PowerVSPlatformStatus" + }, + "type": { + "description": "type is the underlying infrastructure provider for the cluster. This value controls whether infrastructure automation such as service load balancers, dynamic volume provisioning, machine creation and deletion, and other integrations are enabled. If None, no infrastructure automation is enabled. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.\n\nThis value will be synced with to the `status.platform` and `status.platformStatus.type`. Currently this value cannot be changed once set.", + "type": "string", + "default": "" + }, + "vsphere": { + "description": "VSphere contains settings specific to the VSphere infrastructure provider.", + "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformStatus" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ComponentRouteStatus", + "Kind": "PlatformStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ConditionalUpdate": { - "description": "ConditionalUpdate represents an update which is recommended to some clusters on the version the current cluster is reconciling, but which may not be recommended for the current cluster.", + "io.openshift.config.v1.PowerVSPlatformSpec": { + "description": "PowerVSPlatformSpec holds the desired state of the IBM Power Systems Virtual Servers infrastructure provider. This only includes fields that can be modified in the cluster.", "type": "object", - "required": [ - "release", - "risks" - ], "properties": { - "conditions": { - "description": "conditions represents the observations of the conditional update's current status. Known types are: * Recommended, for whether the update is recommended for the current cluster.", + "serviceEndpoints": { + "description": "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of a Power VS service.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + "$ref": "#/definitions/io.openshift.config.v1.PowerVSServiceEndpoint" }, "x-kubernetes-list-map-keys": [ - "type" + "name" ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "x-kubernetes-list-type": "map" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "PowerVSPlatformSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.PowerVSPlatformStatus": { + "description": "PowerVSPlatformStatus holds the current status of the IBM Power Systems Virtual Servers infrastrucutre provider.", + "type": "object", + "required": [ + "region", + "zone" + ], + "properties": { + "cisInstanceCRN": { + "description": "CISInstanceCRN is the CRN of the Cloud Internet Services instance managing the DNS zone for the cluster's base domain", + "type": "string" }, - "release": { - "description": "release is the target of the update.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.Release" + "dnsInstanceCRN": { + "description": "DNSInstanceCRN is the CRN of the DNS Services instance managing the DNS zone for the cluster's base domain", + "type": "string" }, - "risks": { - "description": "risks represents the range of issues associated with updating to the target release. The cluster-version operator will evaluate all entries, and only recommend the update if there is at least one entry and all entries recommend the update.", + "region": { + "description": "region holds the default Power VS region for new Power VS resources created by the cluster.", + "type": "string", + "default": "" + }, + "resourceGroup": { + "description": "resourceGroup is the resource group name for new IBMCloud resources created for a cluster. The resource group specified here will be used by cluster-image-registry-operator to set up a COS Instance in IBMCloud for the cluster registry. More about resource groups can be found here: https://cloud.ibm.com/docs/account?topic=account-rgs. When omitted, the image registry operator won't be able to configure storage, which results in the image registry cluster operator not being in an available state.", + "type": "string", + "default": "" + }, + "serviceEndpoints": { + "description": "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of a Power VS service.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConditionalUpdateRisk" + "$ref": "#/definitions/io.openshift.config.v1.PowerVSServiceEndpoint" }, "x-kubernetes-list-map-keys": [ "name" ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "name", - "x-kubernetes-patch-strategy": "merge" + "x-kubernetes-list-type": "map" + }, + "zone": { + "description": "zone holds the default zone for the new Power VS resources created by the cluster. Note: Currently only single-zone OCP clusters are supported", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ConditionalUpdate", + "Kind": "PowerVSPlatformStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ConditionalUpdateRisk": { - "description": "ConditionalUpdateRisk represents a reason and cluster-state for not recommending a conditional update.", + "io.openshift.config.v1.PowerVSServiceEndpoint": { + "description": "PowervsServiceEndpoint stores the configuration of a custom url to override existing defaults of PowerVS Services.", "type": "object", "required": [ - "url", "name", - "message", - "matchingRules" + "url" ], "properties": { - "matchingRules": { - "description": "matchingRules is a slice of conditions for deciding which clusters match the risk and which do not. The slice is ordered by decreasing precedence. The cluster-version operator will walk the slice in order, and stop after the first it can successfully evaluate. If no condition can be successfully evaluated, the update will not be recommended.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ClusterCondition" - }, - "x-kubernetes-list-type": "atomic" - }, - "message": { - "description": "message provides additional information about the risk of updating, in the event that matchingRules match the cluster state. This is only to be consumed by humans. It may contain Line Feed characters (U+000A), which should be rendered as new lines.", - "type": "string", - "default": "" - }, "name": { - "description": "name is the CamelCase reason for not recommending a conditional update, in the event that matchingRules match the cluster state.", + "description": "name is the name of the Power VS service. Few of the services are IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api ResourceController - https://cloud.ibm.com/apidocs/resource-controller/resource-controller Power Cloud - https://cloud.ibm.com/apidocs/power-cloud", "type": "string", "default": "" }, "url": { - "description": "url contains information about this risk.", + "description": "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty.", "type": "string", "default": "" } @@ -67003,22 +73248,24 @@ "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ConditionalUpdateRisk", + "Kind": "PowerVSServiceEndpoint", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ConfigMapFileReference": { - "description": "ConfigMapFileReference references a config map in a specific namespace. The namespace must be specified at the point of use.", + "io.openshift.config.v1.PrefixedClaimMapping": { "type": "object", "required": [ - "name" + "claim", + "prefix" ], "properties": { - "key": { - "description": "Key allows pointing to a specific key/value inside of the configmap. This is useful for logical file references.", - "type": "string" + "claim": { + "description": "Claim is a JWT token claim to be used in the mapping", + "type": "string", + "default": "" }, - "name": { + "prefix": { + "description": "Prefix is a string to prefix the value from the token in the result of the claim mapping.\n\nBy default, no prefixing occurs.\n\nExample: if `prefix` is set to \"myoidc:\"\" and the `claim` in JWT contains an array of strings \"a\", \"b\" and \"c\", the mapping will result in an array of string \"myoidc:a\", \"myoidc:b\" and \"myoidc:c\".", "type": "string", "default": "" } @@ -67027,19 +73274,16 @@ "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ConfigMapFileReference", + "Kind": "PrefixedClaimMapping", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ConfigMapNameReference": { - "description": "ConfigMapNameReference references a config map in a specific namespace. The namespace must be specified at the point of use.", + "io.openshift.config.v1.ProfileCustomizations": { + "description": "ProfileCustomizations contains various parameters for modifying the default behavior of certain profiles", "type": "object", - "required": [ - "name" - ], "properties": { - "name": { - "description": "name is the metadata.name of the referenced config map", + "dynamicResourceAllocation": { + "description": "dynamicResourceAllocation allows to enable or disable dynamic resource allocation within the scheduler. Dynamic resource allocation is an API for requesting and sharing resources between pods and containers inside a pod. Third-party resource drivers are responsible for tracking and allocating resources. Different kinds of resources support arbitrary parameters for defining requirements and initialization. Valid values are Enabled, Disabled and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is Disabled.", "type": "string", "default": "" } @@ -67048,12 +73292,12 @@ "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ConfigMapNameReference", + "Kind": "ProfileCustomizations", "Scope": "Namespaced" } }, - "io.openshift.config.v1.Console": { - "description": "Console holds cluster-wide configuration for the web console, including the logout URL, and reports the public URL of the console. The canonical name is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1.Project": { + "description": "Project holds cluster-wide information about Project. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "spec" @@ -67075,40 +73319,23 @@ "spec": { "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConsoleSpec" + "$ref": "#/definitions/io.openshift.config.v1.ProjectSpec" }, "status": { "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConsoleStatus" + "$ref": "#/definitions/io.openshift.config.v1.ProjectStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "config.openshift.io", "Version": "v1", - "Kind": "Console", + "Kind": "Project", "Scope": "Clustered" } }, - "io.openshift.config.v1.ConsoleAuthentication": { - "description": "ConsoleAuthentication defines a list of optional configuration for console authentication.", - "type": "object", - "properties": { - "logoutRedirect": { - "description": "An optional, absolute URL to redirect web browsers to after logging out of the console. If not specified, it will redirect to the default login page. This is required when using an identity provider that supports single sign-on (SSO) such as: - OpenID (Keycloak, Azure) - RequestHeader (GSSAPI, SSPI, SAML) - OAuth (GitHub, GitLab, Google) Logging out of the console will destroy the user's token. The logoutRedirect provides the user the option to perform single logout (SLO) through the identity provider to destroy their single sign-on session.", - "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "ConsoleAuthentication", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.ConsoleList": { + "io.openshift.config.v1.ProjectList": { "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ @@ -67124,7 +73351,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.Console" + "$ref": "#/definitions/io.openshift.config.v1.Project" } }, "kind": { @@ -67141,95 +73368,52 @@ "Type": "list", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ConsoleList", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.ConsoleSpec": { - "description": "ConsoleSpec is the specification of the desired behavior of the Console.", - "type": "object", - "properties": { - "authentication": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConsoleAuthentication" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "ConsoleSpec", + "Kind": "ProjectList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ConsoleStatus": { - "description": "ConsoleStatus defines the observed status of the Console.", + "io.openshift.config.v1.ProjectSpec": { + "description": "ProjectSpec holds the project creation configuration.", "type": "object", - "required": [ - "consoleURL" - ], "properties": { - "consoleURL": { - "description": "The URL for the console. This will be derived from the host for the route that is created for the console.", + "projectRequestMessage": { + "description": "projectRequestMessage is the string presented to a user if they are unable to request a project via the projectrequest api endpoint", "type": "string", "default": "" + }, + "projectRequestTemplate": { + "description": "projectRequestTemplate is the template to use for creating projects in response to projectrequest. This must point to a template in 'openshift-config' namespace. It is optional. If it is not specified, a default template is used.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.TemplateReference" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ConsoleStatus", + "Kind": "ProjectSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.CustomFeatureGates": { + "io.openshift.config.v1.ProjectStatus": { "type": "object", - "properties": { - "disabled": { - "description": "disabled is a list of all feature gates that you want to force off", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "enabled": { - "description": "enabled is a list of all feature gates that you want to force on", - "type": "array", - "items": { - "type": "string", - "default": "" - } - } - }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "CustomFeatureGates", + "Kind": "ProjectStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.CustomTLSProfile": { - "description": "CustomTLSProfile is a user-defined TLS security profile. Be extremely careful using a custom TLS profile as invalid configurations can be catastrophic.", + "io.openshift.config.v1.PromQLClusterCondition": { + "description": "PromQLClusterCondition represents a cluster condition based on PromQL.", "type": "object", "required": [ - "ciphers", - "minTLSVersion" + "promql" ], "properties": { - "ciphers": { - "description": "ciphers is used to specify the cipher algorithms that are negotiated during the TLS handshake. Operators may remove entries their operands do not support. For example, to use DES-CBC3-SHA (yaml):\n\n ciphers:\n - DES-CBC3-SHA", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "minTLSVersion": { - "description": "minTLSVersion is used to specify the minimal version of the TLS protocol that is negotiated during the TLS handshake. For example, to use TLS versions 1.1, 1.2 and 1.3 (yaml):\n\n minTLSVersion: VersionTLS11\n\nNOTE: currently the highest minTLSVersion allowed is VersionTLS12", + "promql": { + "description": "PromQL is a PromQL query classifying clusters. This query query should return a 1 in the match case and a 0 in the does-not-match case. Queries which return no time series, or which return values besides 0 or 1, are evaluation failures.", "type": "string", "default": "" } @@ -67238,12 +73422,12 @@ "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "CustomTLSProfile", + "Kind": "PromQLClusterCondition", "Scope": "Namespaced" } }, - "io.openshift.config.v1.DNS": { - "description": "DNS holds cluster-wide information about DNS. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1.Proxy": { + "description": "Proxy holds cluster-wide information on how to configure default proxies for the cluster. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "spec" @@ -67263,25 +73447,25 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec holds user settable values for configuration", + "description": "Spec holds user-settable values for the proxy configuration", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.DNSSpec" + "$ref": "#/definitions/io.openshift.config.v1.ProxySpec" }, "status": { "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.DNSStatus" + "$ref": "#/definitions/io.openshift.config.v1.ProxyStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "config.openshift.io", "Version": "v1", - "Kind": "DNS", + "Kind": "Proxy", "Scope": "Clustered" } }, - "io.openshift.config.v1.DNSList": { + "io.openshift.config.v1.ProxyList": { "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ @@ -67297,7 +73481,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.DNS" + "$ref": "#/definitions/io.openshift.config.v1.Proxy" } }, "kind": { @@ -67314,250 +73498,199 @@ "Type": "list", "Group": "config.openshift.io", "Version": "v1", - "Kind": "DNSList", + "Kind": "ProxyList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.DNSPlatformSpec": { - "description": "DNSPlatformSpec holds cloud-provider-specific configuration for DNS administration.", - "type": "object", - "required": [ - "type" - ], - "properties": { - "aws": { - "description": "aws contains DNS configuration specific to the Amazon Web Services cloud provider.", - "$ref": "#/definitions/io.openshift.config.v1.AWSDNSSpec" - }, - "type": { - "description": "type is the underlying infrastructure provider for the cluster. Allowed values: \"\", \"AWS\".\n\nIndividual components may not support all platforms, and must handle unrecognized platforms with best-effort defaults.", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "DNSPlatformSpec", - "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "aws": "AWS" - } - } - ] - }, - "io.openshift.config.v1.DNSSpec": { + "io.openshift.config.v1.ProxySpec": { + "description": "ProxySpec contains cluster proxy creation configuration.", "type": "object", - "required": [ - "baseDomain" - ], "properties": { - "baseDomain": { - "description": "baseDomain is the base domain of the cluster. All managed DNS records will be sub-domains of this base.\n\nFor example, given the base domain `openshift.example.com`, an API server DNS record may be created for `cluster-api.openshift.example.com`.\n\nOnce set, this field cannot be changed.", - "type": "string", - "default": "" - }, - "platform": { - "description": "platform holds configuration specific to the underlying infrastructure provider for DNS. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.DNSPlatformSpec" + "httpProxy": { + "description": "httpProxy is the URL of the proxy for HTTP requests. Empty means unset and will not result in an env var.", + "type": "string" }, - "privateZone": { - "description": "privateZone is the location where all the DNS records that are only available internally to the cluster exist.\n\nIf this field is nil, no private records should be created.\n\nOnce set, this field cannot be changed.", - "$ref": "#/definitions/io.openshift.config.v1.DNSZone" + "httpsProxy": { + "description": "httpsProxy is the URL of the proxy for HTTPS requests. Empty means unset and will not result in an env var.", + "type": "string" }, - "publicZone": { - "description": "publicZone is the location where all the DNS records that are publicly accessible to the internet exist.\n\nIf this field is nil, no public records should be created.\n\nOnce set, this field cannot be changed.", - "$ref": "#/definitions/io.openshift.config.v1.DNSZone" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "DNSSpec", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.DNSStatus": { - "type": "object", - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "DNSStatus", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.DNSZone": { - "description": "DNSZone is used to define a DNS hosted zone. A zone can be identified by an ID or tags.", - "type": "object", - "properties": { - "id": { - "description": "id is the identifier that can be used to find the DNS hosted zone.\n\non AWS zone can be fetched using `ID` as id in [1] on Azure zone can be fetched using `ID` as a pre-determined name in [2], on GCP zone can be fetched using `ID` as a pre-determined name in [3].\n\n[1]: https://docs.aws.amazon.com/cli/latest/reference/route53/get-hosted-zone.html#options [2]: https://docs.microsoft.com/en-us/cli/azure/network/dns/zone?view=azure-cli-latest#az-network-dns-zone-show [3]: https://cloud.google.com/dns/docs/reference/v1/managedZones/get", + "noProxy": { + "description": "noProxy is a comma-separated list of hostnames and/or CIDRs and/or IPs for which the proxy should not be used. Empty means unset and will not result in an env var.", "type": "string" }, - "tags": { - "description": "tags can be used to query the DNS hosted zone.\n\non AWS, resourcegroupstaggingapi [1] can be used to fetch a zone using `Tags` as tag-filters,\n\n[1]: https://docs.aws.amazon.com/cli/latest/reference/resourcegroupstaggingapi/get-resources.html#options", - "type": "object", - "additionalProperties": { + "readinessEndpoints": { + "description": "readinessEndpoints is a list of endpoints used to verify readiness of the proxy.", + "type": "array", + "items": { "type": "string", "default": "" } + }, + "trustedCA": { + "description": "trustedCA is a reference to a ConfigMap containing a CA certificate bundle. The trustedCA field should only be consumed by a proxy validator. The validator is responsible for reading the certificate bundle from the required key \"ca-bundle.crt\", merging it with the system default trust bundle, and writing the merged trust bundle to a ConfigMap named \"trusted-ca-bundle\" in the \"openshift-config-managed\" namespace. Clients that expect to make proxy connections must use the trusted-ca-bundle for all HTTPS requests to the proxy, and may use the trusted-ca-bundle for non-proxy HTTPS requests as well.\n\nThe namespace for the ConfigMap referenced by trustedCA is \"openshift-config\". Here is an example ConfigMap (in yaml):\n\napiVersion: v1 kind: ConfigMap metadata:\n name: user-ca-bundle\n namespace: openshift-config\n data:\n ca-bundle.crt: |\n -----BEGIN CERTIFICATE-----\n Custom CA certificate bundle.\n -----END CERTIFICATE-----", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "DNSZone", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.DelegatedAuthentication": { - "description": "DelegatedAuthentication allows authentication to be disabled.", - "type": "object", - "properties": { - "disabled": { - "description": "disabled indicates that authentication should be disabled. By default it will use delegated authentication.", - "type": "boolean" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "DelegatedAuthentication", + "Kind": "ProxySpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.DelegatedAuthorization": { - "description": "DelegatedAuthorization allows authorization to be disabled.", + "io.openshift.config.v1.ProxyStatus": { + "description": "ProxyStatus shows current known state of the cluster proxy.", "type": "object", "properties": { - "disabled": { - "description": "disabled indicates that authorization should be disabled. By default it will use delegated authorization.", - "type": "boolean" + "httpProxy": { + "description": "httpProxy is the URL of the proxy for HTTP requests.", + "type": "string" + }, + "httpsProxy": { + "description": "httpsProxy is the URL of the proxy for HTTPS requests.", + "type": "string" + }, + "noProxy": { + "description": "noProxy is a comma-separated list of hostnames and/or CIDRs for which the proxy should not be used.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "DelegatedAuthorization", + "Kind": "ProxyStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.DeprecatedWebhookTokenAuthenticator": { - "description": "deprecatedWebhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator. It's the same as WebhookTokenAuthenticator but it's missing the 'required' validation on KubeConfig field.", + "io.openshift.config.v1.RegistryLocation": { + "description": "RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.", "type": "object", "required": [ - "kubeConfig" + "domainName" ], "properties": { - "kubeConfig": { - "description": "kubeConfig contains kube config file data which describes how to access the remote webhook service. For further details, see: https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication The key \"kubeConfig\" is used to locate the data. If the secret or expected key is not found, the webhook is not honored. If the specified kube config data is not valid, the webhook is not honored. The namespace for this secret is determined by the point of use.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + "domainName": { + "description": "domainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.", + "type": "string", + "default": "" + }, + "insecure": { + "description": "insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.", + "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "DeprecatedWebhookTokenAuthenticator", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.EquinixMetalPlatformSpec": { - "description": "EquinixMetalPlatformSpec holds the desired state of the Equinix Metal infrastructure provider. This only includes fields that can be modified in the cluster.", - "type": "object", - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "EquinixMetalPlatformSpec", + "Kind": "RegistryLocation", "Scope": "Namespaced" } }, - "io.openshift.config.v1.EquinixMetalPlatformStatus": { - "description": "EquinixMetalPlatformStatus holds the current status of the Equinix Metal infrastructure provider.", + "io.openshift.config.v1.RegistrySources": { + "description": "RegistrySources holds cluster-wide information about how to handle the registries config.", "type": "object", "properties": { - "apiServerInternalIP": { - "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.", - "type": "string" + "allowedRegistries": { + "description": "allowedRegistries are the only registries permitted for image pull and push actions. All other registries are denied.\n\nOnly one of BlockedRegistries or AllowedRegistries may be set.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "ingressIP": { - "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.", - "type": "string" + "blockedRegistries": { + "description": "blockedRegistries cannot be used for image pull and push actions. All other registries are permitted.\n\nOnly one of BlockedRegistries or AllowedRegistries may be set.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "containerRuntimeSearchRegistries": { + "description": "containerRuntimeSearchRegistries are registries that will be searched when pulling images that do not have fully qualified domains in their pull specs. Registries will be searched in the order provided in the list. Note: this search list only works with the container runtime, i.e CRI-O. Will NOT work with builds or imagestream imports.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" + }, + "insecureRegistries": { + "description": "insecureRegistries are registries which do not have a valid TLS certificates or only support HTTP connections.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "EquinixMetalPlatformStatus", + "Kind": "RegistrySources", "Scope": "Namespaced" } }, - "io.openshift.config.v1.EtcdConnectionInfo": { - "description": "EtcdConnectionInfo holds information necessary for connecting to an etcd server", + "io.openshift.config.v1.Release": { + "description": "Release represents an OpenShift release image and associated metadata.", "type": "object", "required": [ - "ca", - "certFile", - "keyFile" + "version", + "image" ], "properties": { - "ca": { - "description": "CA is a file containing trusted roots for the etcd server certificates", + "channels": { + "description": "channels is the set of Cincinnati channels to which the release currently belongs.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" + }, + "image": { + "description": "image is a container image location that contains the update. When this field is part of spec, image is optional if version is specified and the availableUpdates field contains a matching version.", "type": "string", "default": "" }, - "certFile": { - "description": "CertFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" + "url": { + "description": "url contains information about this release. This URL is set by the 'url' metadata property on a release or the metadata returned by the update API and should be displayed as a link in user interfaces. The URL field may not be set for test or nightly releases.", + "type": "string" }, - "keyFile": { - "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "version": { + "description": "version is a semantic version identifying the update version. When this field is part of spec, version is optional if image is specified.", "type": "string", "default": "" - }, - "urls": { - "description": "URLs are the URLs for etcd", - "type": "array", - "items": { - "type": "string", - "default": "" - } } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "EtcdConnectionInfo", + "Kind": "Release", "Scope": "Namespaced" } }, - "io.openshift.config.v1.EtcdStorageConfig": { + "io.openshift.config.v1.RemoteConnectionInfo": { + "description": "RemoteConnectionInfo holds information necessary for establishing a remote connection", "type": "object", "required": [ + "url", "ca", "certFile", - "keyFile", - "storagePrefix" + "keyFile" ], "properties": { "ca": { - "description": "CA is a file containing trusted roots for the etcd server certificates", + "description": "CA is the CA for verifying TLS connections", "type": "string", "default": "" }, @@ -67571,123 +73704,174 @@ "type": "string", "default": "" }, - "storagePrefix": { - "description": "StoragePrefix is the path within etcd that the OpenShift resources will be rooted under. This value, if changed, will mean existing objects in etcd will no longer be located.", + "url": { + "description": "URL is the remote URL to connect to", "type": "string", "default": "" - }, - "urls": { - "description": "URLs are the URLs for etcd", - "type": "array", - "items": { - "type": "string", - "default": "" - } } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "EtcdStorageConfig", + "Kind": "RemoteConnectionInfo", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ExternalIPConfig": { - "description": "ExternalIPConfig specifies some IP blocks relevant for the ExternalIP field of a Service resource.", + "io.openshift.config.v1.RepositoryDigestMirrors": { + "description": "RepositoryDigestMirrors holds cluster-wide information about how to handle mirrors in the registries config.", "type": "object", + "required": [ + "source" + ], "properties": { - "autoAssignCIDRs": { - "description": "autoAssignCIDRs is a list of CIDRs from which to automatically assign Service.ExternalIP. These are assigned when the service is of type LoadBalancer. In general, this is only useful for bare-metal clusters. In Openshift 3.x, this was misleadingly called \"IngressIPs\". Automatically assigned External IPs are not affected by any ExternalIPPolicy rules. Currently, only one entry may be provided.", + "allowMirrorByTags": { + "description": "allowMirrorByTags if true, the mirrors can be used to pull the images that are referenced by their tags. Default is false, the mirrors only work when pulling the images that are referenced by their digests. Pulling images by tag can potentially yield different images, depending on which endpoint we pull from. Forcing digest-pulls for mirrors avoids that issue.", + "type": "boolean" + }, + "mirrors": { + "description": "mirrors is zero or more repositories that may also contain the same images. If the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec. No mirror will be configured. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. Other cluster configuration, including (but not limited to) other repositoryDigestMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-type": "set" }, - "policy": { - "description": "policy is a set of restrictions applied to the ExternalIP field. If nil or empty, then ExternalIP is not allowed to be set.", - "$ref": "#/definitions/io.openshift.config.v1.ExternalIPPolicy" + "source": { + "description": "source is the repository that users refer to, e.g. in image pull specifications.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ExternalIPConfig", + "Kind": "RepositoryDigestMirrors", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ExternalIPPolicy": { - "description": "ExternalIPPolicy configures exactly which IPs are allowed for the ExternalIP field in a Service. If the zero struct is supplied, then none are permitted. The policy controller always allows automatically assigned external IPs.", + "io.openshift.config.v1.RequestHeaderIdentityProvider": { + "description": "RequestHeaderIdentityProvider provides identities for users authenticating using request header credentials", "type": "object", + "required": [ + "loginURL", + "challengeURL", + "ca", + "headers", + "preferredUsernameHeaders", + "nameHeaders", + "emailHeaders" + ], "properties": { - "allowedCIDRs": { - "description": "allowedCIDRs is the list of allowed CIDRs.", + "ca": { + "description": "ca is a required reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. Specifically, it allows verification of incoming requests to prevent header spoofing. The key \"ca.crt\" is used to locate the data. If the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" + }, + "challengeURL": { + "description": "challengeURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be redirected here. ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}\nRequired when challenge is set to true.", + "type": "string", + "default": "" + }, + "clientCommonNames": { + "description": "clientCommonNames is an optional list of common names to require a match from. If empty, any client certificate validated against the clientCA bundle is considered authoritative.", "type": "array", "items": { "type": "string", "default": "" - }, - "x-kubernetes-list-type": "atomic" + } }, - "rejectedCIDRs": { - "description": "rejectedCIDRs is the list of disallowed CIDRs. These take precedence over allowedCIDRs.", + "emailHeaders": { + "description": "emailHeaders is the set of headers to check for the email address", "type": "array", "items": { "type": "string", "default": "" - }, - "x-kubernetes-list-type": "atomic" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "ExternalIPPolicy", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.ExternalPlatformSpec": { - "description": "ExternalPlatformSpec holds the desired state for the generic External infrastructure provider.", - "type": "object", - "properties": { - "platformName": { - "description": "PlatformName holds the arbitrary string representing the infrastructure provider name, expected to be set at the installation time. This field is solely for informational and reporting purposes and is not expected to be used for decision-making.", + } + }, + "headers": { + "description": "headers is the set of headers to check for identity information", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "loginURL": { + "description": "loginURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}\nRequired when login is set to true.", "type": "string", - "default": "Unknown" + "default": "" + }, + "nameHeaders": { + "description": "nameHeaders is the set of headers to check for the display name", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "preferredUsernameHeaders": { + "description": "preferredUsernameHeaders is the set of headers to check for the preferred username", + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ExternalPlatformSpec", + "Kind": "RequestHeaderIdentityProvider", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ExternalPlatformStatus": { - "description": "ExternalPlatformStatus holds the current status of the generic External infrastructure provider.", + "io.openshift.config.v1.RequiredHSTSPolicy": { "type": "object", + "required": [ + "domainPatterns", + "maxAge" + ], "properties": { - "cloudControllerManager": { - "description": "cloudControllerManager contains settings specific to the external Cloud Controller Manager (a.k.a. CCM or CPI). When omitted, new nodes will be not tainted and no extra initialization from the cloud controller manager is expected.", + "domainPatterns": { + "description": "domainPatterns is a list of domains for which the desired HSTS annotations are required. If domainPatterns is specified and a route is created with a spec.host matching one of the domains, the route must specify the HSTS Policy components described in the matching RequiredHSTSPolicy.\n\nThe use of wildcards is allowed like this: *.foo.com matches everything under foo.com. foo.com only matches foo.com, so to cover foo.com and everything under it, you must specify *both*.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "includeSubDomainsPolicy": { + "description": "includeSubDomainsPolicy means the HSTS Policy should apply to any subdomains of the host's domain name. Thus, for the host bar.foo.com, if includeSubDomainsPolicy was set to RequireIncludeSubDomains: - the host app.bar.foo.com would inherit the HSTS Policy of bar.foo.com - the host bar.foo.com would inherit the HSTS Policy of bar.foo.com - the host foo.com would NOT inherit the HSTS Policy of bar.foo.com - the host def.foo.com would NOT inherit the HSTS Policy of bar.foo.com", + "type": "string" + }, + "maxAge": { + "description": "maxAge is the delta time range in seconds during which hosts are regarded as HSTS hosts. If set to 0, it negates the effect, and hosts are removed as HSTS hosts. If set to 0 and includeSubdomains is specified, all subdomains of the host are also removed as HSTS hosts. maxAge is a time-to-live value, and if this policy is not refreshed on a client, the HSTS policy will eventually expire on that client.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.CloudControllerManagerStatus" + "$ref": "#/definitions/io.openshift.config.v1.MaxAgePolicy" + }, + "namespaceSelector": { + "description": "namespaceSelector specifies a label selector such that the policy applies only to those routes that are in namespaces with labels that match the selector, and are in one of the DomainPatterns. Defaults to the empty LabelSelector, which matches everything.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "preloadPolicy": { + "description": "preloadPolicy directs the client to include hosts in its host preload list so that it never needs to do an initial load to get the HSTS header (note that this is not defined in RFC 6797 and is therefore client implementation-dependent).", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ExternalPlatformStatus", + "Kind": "RequiredHSTSPolicy", "Scope": "Namespaced" } }, - "io.openshift.config.v1.FeatureGate": { - "description": "Feature holds cluster-wide information about feature gates. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1.Scheduler": { + "description": "Scheduler holds cluster-wide config information to run the Kubernetes Scheduler and influence its placement decisions. The canonical name for this config is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "spec" @@ -67709,79 +73893,23 @@ "spec": { "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.FeatureGateSpec" + "$ref": "#/definitions/io.openshift.config.v1.SchedulerSpec" }, "status": { "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.FeatureGateStatus" + "$ref": "#/definitions/io.openshift.config.v1.SchedulerStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "config.openshift.io", "Version": "v1", - "Kind": "FeatureGate", + "Kind": "Scheduler", "Scope": "Clustered" } }, - "io.openshift.config.v1.FeatureGateAttributes": { - "type": "object", - "required": [ - "name" - ], - "properties": { - "name": { - "description": "name is the name of the FeatureGate.", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "FeatureGateAttributes", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.FeatureGateDetails": { - "type": "object", - "required": [ - "version" - ], - "properties": { - "disabled": { - "description": "disabled is a list of all feature gates that are disabled in the cluster for the named version.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.FeatureGateAttributes" - } - }, - "enabled": { - "description": "enabled is a list of all feature gates that are enabled in the cluster for the named version.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.FeatureGateAttributes" - } - }, - "version": { - "description": "version matches the version provided by the ClusterVersion and in the ClusterOperator.Status.Versions field.", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "FeatureGateDetails", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.FeatureGateList": { + "io.openshift.config.v1.SchedulerList": { "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ @@ -67797,7 +73925,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.FeatureGate" + "$ref": "#/definitions/io.openshift.config.v1.Scheduler" } }, "kind": { @@ -67814,123 +73942,128 @@ "Type": "list", "Group": "config.openshift.io", "Version": "v1", - "Kind": "FeatureGateList", + "Kind": "SchedulerList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.FeatureGateSelection": { + "io.openshift.config.v1.SchedulerSpec": { "type": "object", "properties": { - "customNoUpgrade": { - "description": "customNoUpgrade allows the enabling or disabling of any feature. Turning this feature set on IS NOT SUPPORTED, CANNOT BE UNDONE, and PREVENTS UPGRADES. Because of its nature, this setting cannot be validated. If you have any typos or accidentally apply invalid combinations your cluster may fail in an unrecoverable way. featureSet must equal \"CustomNoUpgrade\" must be set to use this field.", - "$ref": "#/definitions/io.openshift.config.v1.CustomFeatureGates" + "defaultNodeSelector": { + "description": "defaultNodeSelector helps set the cluster-wide default node selector to restrict pod placement to specific nodes. This is applied to the pods created in all namespaces and creates an intersection with any existing nodeSelectors already set on a pod, additionally constraining that pod's selector. For example, defaultNodeSelector: \"type=user-node,region=east\" would set nodeSelector field in pod spec to \"type=user-node,region=east\" to all pods created in all namespaces. Namespaces having project-wide node selectors won't be impacted even if this field is set. This adds an annotation section to the namespace. For example, if a new namespace is created with node-selector='type=user-node,region=east', the annotation openshift.io/node-selector: type=user-node,region=east gets added to the project. When the openshift.io/node-selector annotation is set on the project the value is used in preference to the value we are setting for defaultNodeSelector field. For instance, openshift.io/node-selector: \"type=user-node,region=west\" means that the default of \"type=user-node,region=east\" set in defaultNodeSelector would not be applied.", + "type": "string" }, - "featureSet": { - "description": "featureSet changes the list of features in the cluster. The default is empty. Be very careful adjusting this setting. Turning on or off features may cause irreversible changes in your cluster which cannot be undone.", + "mastersSchedulable": { + "description": "MastersSchedulable allows masters nodes to be schedulable. When this flag is turned on, all the master nodes in the cluster will be made schedulable, so that workload pods can run on them. The default value for this field is false, meaning none of the master nodes are schedulable. Important Note: Once the workload pods start running on the master nodes, extreme care must be taken to ensure that cluster-critical control plane components are not impacted. Please turn on this field after doing due diligence.", + "type": "boolean", + "default": false + }, + "policy": { + "description": "DEPRECATED: the scheduler Policy API has been deprecated and will be removed in a future release. policy is a reference to a ConfigMap containing scheduler policy which has user specified predicates and priorities. If this ConfigMap is not available scheduler will default to use DefaultAlgorithmProvider. The namespace for this configmap is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" + }, + "profile": { + "description": "profile sets which scheduling profile should be set in order to configure scheduling decisions for new pods.\n\nValid values are \"LowNodeUtilization\", \"HighNodeUtilization\", \"NoScoring\" Defaults to \"LowNodeUtilization\"", "type": "string" + }, + "profileCustomizations": { + "description": "profileCustomizations contains configuration for modifying the default behavior of existing scheduler profiles.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ProfileCustomizations" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "FeatureGateSelection", + "Kind": "SchedulerSpec", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "featureSet", - "fields-to-discriminateBy": { - "customNoUpgrade": "CustomNoUpgrade" - } - } - ] + } }, - "io.openshift.config.v1.FeatureGateSpec": { + "io.openshift.config.v1.SchedulerStatus": { "type": "object", - "properties": { - "customNoUpgrade": { - "description": "customNoUpgrade allows the enabling or disabling of any feature. Turning this feature set on IS NOT SUPPORTED, CANNOT BE UNDONE, and PREVENTS UPGRADES. Because of its nature, this setting cannot be validated. If you have any typos or accidentally apply invalid combinations your cluster may fail in an unrecoverable way. featureSet must equal \"CustomNoUpgrade\" must be set to use this field.", - "$ref": "#/definitions/io.openshift.config.v1.CustomFeatureGates" - }, - "featureSet": { - "description": "featureSet changes the list of features in the cluster. The default is empty. Be very careful adjusting this setting. Turning on or off features may cause irreversible changes in your cluster which cannot be undone.", - "type": "string" - } - }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "FeatureGateSpec", + "Kind": "SchedulerStatus", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "featureSet", - "fields-to-discriminateBy": { - "customNoUpgrade": "CustomNoUpgrade" - } - } - ] + } }, - "io.openshift.config.v1.FeatureGateStatus": { + "io.openshift.config.v1.SecretNameReference": { + "description": "SecretNameReference references a secret in a specific namespace. The namespace must be specified at the point of use.", "type": "object", "required": [ - "featureGates" + "name" ], "properties": { - "conditions": { - "description": "conditions represent the observations of the current state. Known .status.conditions.type are: \"DeterminationDegraded\"", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - }, - "featureGates": { - "description": "featureGates contains a list of enabled and disabled featureGates that are keyed by payloadVersion. Operators other than the CVO and cluster-config-operator, must read the .status.featureGates, locate the version they are managing, find the enabled/disabled featuregates and make the operand and operator match. The enabled/disabled values for a particular version may change during the life of the cluster as various .spec.featureSet values are selected. Operators may choose to restart their processes to pick up these changes, but remembering past enable/disable lists is beyond the scope of this API and is the responsibility of individual operators. Only featureGates with .version in the ClusterVersion.status will be present in this list.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.FeatureGateDetails" - }, - "x-kubernetes-list-map-keys": [ - "version" - ], - "x-kubernetes-list-type": "map" + "name": { + "description": "name is the metadata.name of the referenced secret", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "FeatureGateStatus", + "Kind": "SecretNameReference", "Scope": "Namespaced" } }, - "io.openshift.config.v1.FeatureGateTests": { + "io.openshift.config.v1.ServingInfo": { + "description": "ServingInfo holds information about serving web pages", "type": "object", "required": [ - "featureGate", - "tests" + "bindAddress", + "bindNetwork", + "certFile", + "keyFile" ], "properties": { - "featureGate": { - "description": "FeatureGate is the name of the FeatureGate as it appears in The FeatureGate CR instance.", + "bindAddress": { + "description": "BindAddress is the ip:port to serve on", "type": "string", "default": "" }, - "tests": { - "description": "Tests contains an item for every TestName", + "bindNetwork": { + "description": "BindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", + "type": "string", + "default": "" + }, + "certFile": { + "description": "CertFile is a file containing a PEM-encoded certificate", + "type": "string", + "default": "" + }, + "cipherSuites": { + "description": "CipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "clientCA": { + "description": "ClientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates", + "type": "string" + }, + "keyFile": { + "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "type": "string", + "default": "" + }, + "minTLSVersion": { + "description": "MinTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants", + "type": "string" + }, + "namedCertificates": { + "description": "NamedCertificates is a list of certificates to use to secure requests to specific hostnames", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.TestDetails" + "$ref": "#/definitions/io.openshift.config.v1.NamedCertificate" } } }, @@ -67938,94 +74071,63 @@ "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "FeatureGateTests", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.GCPPlatformSpec": { - "description": "GCPPlatformSpec holds the desired state of the Google Cloud Platform infrastructure provider. This only includes fields that can be modified in the cluster.", - "type": "object", - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "GCPPlatformSpec", + "Kind": "ServingInfo", "Scope": "Namespaced" } }, - "io.openshift.config.v1.GCPPlatformStatus": { - "description": "GCPPlatformStatus holds the current status of the Google Cloud Platform infrastructure provider.", + "io.openshift.config.v1.SignatureStore": { + "description": "SignatureStore represents the URL of custom Signature Store", "type": "object", "required": [ - "projectID", - "region" + "url" ], "properties": { - "cloudLoadBalancerConfig": { - "description": "cloudLoadBalancerConfig is a union that contains the IP addresses of API, API-Int and Ingress Load Balancers created on the cloud platform. These values would not be populated on on-prem platforms. These Load Balancer IPs are used to configure the in-cluster DNS instances for API, API-Int and Ingress services. `dnsType` is expected to be set to `ClusterHosted` when these Load Balancer IP addresses are populated and used.", - "default": { - "dnsType": "PlatformDefault" - }, - "$ref": "#/definitions/io.openshift.config.v1.CloudLoadBalancerConfig" - }, - "projectID": { - "description": "resourceGroupName is the Project ID for new GCP resources created for the cluster.", - "type": "string", - "default": "" + "ca": { + "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the signature store is not honored. If the specified ca data is not valid, the signature store is not honored. If empty, we fall back to the CA configured via Proxy, which is appended to the default system roots. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" }, - "region": { - "description": "region holds the region for new GCP resources created for the cluster.", + "url": { + "description": "url contains the upstream custom signature store URL. url should be a valid absolute http/https URI of an upstream signature store as per rfc1738. This must be provided and cannot be empty.", "type": "string", "default": "" - }, - "resourceLabels": { - "description": "resourceLabels is a list of additional labels to apply to GCP resources created for the cluster. See https://cloud.google.com/compute/docs/labeling-resources for information on labeling GCP resources. GCP supports a maximum of 64 labels per resource. OpenShift reserves 32 labels for internal use, allowing 32 labels for user configuration.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.GCPResourceLabel" - }, - "x-kubernetes-list-map-keys": [ - "key" - ], - "x-kubernetes-list-type": "map" - }, - "resourceTags": { - "description": "resourceTags is a list of additional tags to apply to GCP resources created for the cluster. See https://cloud.google.com/resource-manager/docs/tags/tags-overview for information on tagging GCP resources. GCP supports a maximum of 50 tags per resource.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.GCPResourceTag" - }, - "x-kubernetes-list-map-keys": [ - "key" - ], - "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "GCPPlatformStatus", + "Kind": "SignatureStore", "Scope": "Namespaced" } }, - "io.openshift.config.v1.GCPResourceLabel": { - "description": "GCPResourceLabel is a label to apply to GCP resources created for the cluster.", + "io.openshift.config.v1.StringSource": { + "description": "StringSource allows specifying a string inline, or externally via env var or file. When it contains only a string value, it marshals to a simple JSON string.", "type": "object", "required": [ - "key", - "value" + "value", + "env", + "file", + "keyFile" ], "properties": { - "key": { - "description": "key is the key part of the label. A label key can have a maximum of 63 characters and cannot be empty. Label key must begin with a lowercase letter, and must contain only lowercase letters, numeric characters, and the following special characters `_-`. Label key must not have the reserved prefixes `kubernetes-io` and `openshift-io`.", + "env": { + "description": "Env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.", + "type": "string", + "default": "" + }, + "file": { + "description": "File references a file containing the cleartext value, or an encrypted value if a keyFile is specified.", + "type": "string", + "default": "" + }, + "keyFile": { + "description": "KeyFile references a file containing the key to use to decrypt the value.", "type": "string", "default": "" }, "value": { - "description": "value is the value part of the label. A label value can have a maximum of 63 characters and cannot be empty. Value must contain only lowercase letters, numeric characters, and the following special characters `_-`.", + "description": "Value specifies the cleartext value, or an encrypted value if keyFile is specified.", "type": "string", "default": "" } @@ -68034,31 +74136,37 @@ "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "GCPResourceLabel", + "Kind": "StringSource", "Scope": "Namespaced" } }, - "io.openshift.config.v1.GCPResourceTag": { - "description": "GCPResourceTag is a tag to apply to GCP resources created for the cluster.", + "io.openshift.config.v1.StringSourceSpec": { + "description": "StringSourceSpec specifies a string value, or external location", "type": "object", "required": [ - "parentID", - "key", - "value" + "value", + "env", + "file", + "keyFile" ], "properties": { - "key": { - "description": "key is the key part of the tag. A tag key can have a maximum of 63 characters and cannot be empty. Tag key must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `._-`.", + "env": { + "description": "Env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.", "type": "string", "default": "" }, - "parentID": { - "description": "parentID is the ID of the hierarchical resource where the tags are defined, e.g. at the Organization or the Project level. To find the Organization or Project ID refer to the following pages: https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id, https://cloud.google.com/resource-manager/docs/creating-managing-projects#identifying_projects. An OrganizationID must consist of decimal numbers, and cannot have leading zeroes. A ProjectID must be 6 to 30 characters in length, can only contain lowercase letters, numbers, and hyphens, and must start with a letter, and cannot end with a hyphen.", + "file": { + "description": "File references a file containing the cleartext value, or an encrypted value if a keyFile is specified.", + "type": "string", + "default": "" + }, + "keyFile": { + "description": "KeyFile references a file containing the key to use to decrypt the value.", "type": "string", "default": "" }, "value": { - "description": "value is the value part of the tag. A tag value can have a maximum of 63 characters and cannot be empty. Tag value must begin and end with an alphanumeric character, and must contain only uppercase, lowercase alphanumeric characters, and the following special characters `_-.@%=+:,*#\u0026(){}[]` and spaces.", + "description": "Value specifies the cleartext value, or an encrypted value if keyFile is specified.", "type": "string", "default": "" } @@ -68067,181 +74175,115 @@ "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "GCPResourceTag", + "Kind": "StringSourceSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.GenericAPIServerConfig": { - "description": "GenericAPIServerConfig is an inline-able struct for aggregated apiservers that need to store data in etcd", + "io.openshift.config.v1.TLSProfileSpec": { + "description": "TLSProfileSpec is the desired behavior of a TLSSecurityProfile.", "type": "object", "required": [ - "servingInfo", - "corsAllowedOrigins", - "auditConfig", - "storageConfig", - "admission", - "kubeClientConfig" + "ciphers", + "minTLSVersion" ], "properties": { - "admission": { - "description": "admissionConfig holds information about how to configure admission.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.AdmissionConfig" - }, - "auditConfig": { - "description": "auditConfig describes how to configure audit information", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.AuditConfig" - }, - "corsAllowedOrigins": { - "description": "corsAllowedOrigins", + "ciphers": { + "description": "ciphers is used to specify the cipher algorithms that are negotiated during the TLS handshake. Operators may remove entries their operands do not support. For example, to use DES-CBC3-SHA (yaml):\n\n ciphers:\n - DES-CBC3-SHA", "type": "array", "items": { "type": "string", "default": "" - } - }, - "kubeClientConfig": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.KubeClientConfig" - }, - "servingInfo": { - "description": "servingInfo describes how to start serving", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo" + }, + "x-kubernetes-list-type": "atomic" }, - "storageConfig": { - "description": "storageConfig contains information about how to use", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.EtcdStorageConfig" + "minTLSVersion": { + "description": "minTLSVersion is used to specify the minimal version of the TLS protocol that is negotiated during the TLS handshake. For example, to use TLS versions 1.1, 1.2 and 1.3 (yaml):\n\n minTLSVersion: VersionTLS11\n\nNOTE: currently the highest minTLSVersion allowed is VersionTLS12", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "GenericAPIServerConfig", + "Kind": "TLSProfileSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.GenericControllerConfig": { - "description": "GenericControllerConfig provides information to configure a controller", + "io.openshift.config.v1.TLSSecurityProfile": { + "description": "TLSSecurityProfile defines the schema for a TLS security profile. This object is used by operators to apply TLS security settings to operands.", "type": "object", - "required": [ - "servingInfo", - "leaderElection", - "authentication", - "authorization" - ], "properties": { - "authentication": { - "description": "authentication allows configuration of authentication for the endpoints", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.DelegatedAuthentication" + "custom": { + "description": "custom is a user-defined TLS security profile. Be extremely careful using a custom profile as invalid configurations can be catastrophic. An example custom profile looks like this:\n\n ciphers:\n\n - ECDHE-ECDSA-CHACHA20-POLY1305\n\n - ECDHE-RSA-CHACHA20-POLY1305\n\n - ECDHE-RSA-AES128-GCM-SHA256\n\n - ECDHE-ECDSA-AES128-GCM-SHA256\n\n minTLSVersion: VersionTLS11", + "$ref": "#/definitions/io.openshift.config.v1.CustomTLSProfile" }, - "authorization": { - "description": "authorization allows configuration of authentication for the endpoints", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.DelegatedAuthorization" + "intermediate": { + "description": "intermediate is a TLS security profile based on:\n\nhttps://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28recommended.29\n\nand looks like this (yaml):\n\n ciphers:\n\n - TLS_AES_128_GCM_SHA256\n\n - TLS_AES_256_GCM_SHA384\n\n - TLS_CHACHA20_POLY1305_SHA256\n\n - ECDHE-ECDSA-AES128-GCM-SHA256\n\n - ECDHE-RSA-AES128-GCM-SHA256\n\n - ECDHE-ECDSA-AES256-GCM-SHA384\n\n - ECDHE-RSA-AES256-GCM-SHA384\n\n - ECDHE-ECDSA-CHACHA20-POLY1305\n\n - ECDHE-RSA-CHACHA20-POLY1305\n\n - DHE-RSA-AES128-GCM-SHA256\n\n - DHE-RSA-AES256-GCM-SHA384\n\n minTLSVersion: VersionTLS12", + "$ref": "#/definitions/io.openshift.config.v1.IntermediateTLSProfile" }, - "leaderElection": { - "description": "leaderElection provides information to elect a leader. Only override this if you have a specific need", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.LeaderElection" + "modern": { + "description": "modern is a TLS security profile based on:\n\nhttps://wiki.mozilla.org/Security/Server_Side_TLS#Modern_compatibility\n\nand looks like this (yaml):\n\n ciphers:\n\n - TLS_AES_128_GCM_SHA256\n\n - TLS_AES_256_GCM_SHA384\n\n - TLS_CHACHA20_POLY1305_SHA256\n\n minTLSVersion: VersionTLS13", + "$ref": "#/definitions/io.openshift.config.v1.ModernTLSProfile" }, - "servingInfo": { - "description": "ServingInfo is the HTTP serving information for the controller's endpoints", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.HTTPServingInfo" + "old": { + "description": "old is a TLS security profile based on:\n\nhttps://wiki.mozilla.org/Security/Server_Side_TLS#Old_backward_compatibility\n\nand looks like this (yaml):\n\n ciphers:\n\n - TLS_AES_128_GCM_SHA256\n\n - TLS_AES_256_GCM_SHA384\n\n - TLS_CHACHA20_POLY1305_SHA256\n\n - ECDHE-ECDSA-AES128-GCM-SHA256\n\n - ECDHE-RSA-AES128-GCM-SHA256\n\n - ECDHE-ECDSA-AES256-GCM-SHA384\n\n - ECDHE-RSA-AES256-GCM-SHA384\n\n - ECDHE-ECDSA-CHACHA20-POLY1305\n\n - ECDHE-RSA-CHACHA20-POLY1305\n\n - DHE-RSA-AES128-GCM-SHA256\n\n - DHE-RSA-AES256-GCM-SHA384\n\n - DHE-RSA-CHACHA20-POLY1305\n\n - ECDHE-ECDSA-AES128-SHA256\n\n - ECDHE-RSA-AES128-SHA256\n\n - ECDHE-ECDSA-AES128-SHA\n\n - ECDHE-RSA-AES128-SHA\n\n - ECDHE-ECDSA-AES256-SHA384\n\n - ECDHE-RSA-AES256-SHA384\n\n - ECDHE-ECDSA-AES256-SHA\n\n - ECDHE-RSA-AES256-SHA\n\n - DHE-RSA-AES128-SHA256\n\n - DHE-RSA-AES256-SHA256\n\n - AES128-GCM-SHA256\n\n - AES256-GCM-SHA384\n\n - AES128-SHA256\n\n - AES256-SHA256\n\n - AES128-SHA\n\n - AES256-SHA\n\n - DES-CBC3-SHA\n\n minTLSVersion: VersionTLS10", + "$ref": "#/definitions/io.openshift.config.v1.OldTLSProfile" + }, + "type": { + "description": "type is one of Old, Intermediate, Modern or Custom. Custom provides the ability to specify individual TLS security profile parameters. Old, Intermediate and Modern are TLS security profiles based on:\n\nhttps://wiki.mozilla.org/Security/Server_Side_TLS#Recommended_configurations\n\nThe profiles are intent based, so they may change over time as new ciphers are developed and existing ciphers are found to be insecure. Depending on precisely which ciphers are available to a process, the list may be reduced.\n\nNote that the Modern profile is currently not supported because it is not yet well adopted by common software libraries.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "GenericControllerConfig", + "Kind": "TLSSecurityProfile", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "custom": "Custom", + "intermediate": "Intermediate", + "modern": "Modern", + "old": "Old" + } + } + ] }, - "io.openshift.config.v1.GitHubIdentityProvider": { - "description": "GitHubIdentityProvider provides identities for users authenticating using GitHub credentials", + "io.openshift.config.v1.TemplateReference": { + "description": "TemplateReference references a template in a specific namespace. The namespace must be specified at the point of use.", "type": "object", "required": [ - "clientID", - "clientSecret" + "name" ], "properties": { - "ca": { - "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. This can only be configured when hostname is set to a non-empty value. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" - }, - "clientID": { - "description": "clientID is the oauth client ID", - "type": "string", - "default": "" - }, - "clientSecret": { - "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" - }, - "hostname": { - "description": "hostname is the optional domain (e.g. \"mycompany.com\") for use with a hosted instance of GitHub Enterprise. It must match the GitHub Enterprise settings value configured at /setup/settings#hostname.", + "name": { + "description": "name is the metadata.name of the referenced project request template", "type": "string", "default": "" - }, - "organizations": { - "description": "organizations optionally restricts which organizations are allowed to log in", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "teams": { - "description": "teams optionally restricts which teams are allowed to log in. Format is \u003corg\u003e/\u003cteam\u003e.", - "type": "array", - "items": { - "type": "string", - "default": "" - } } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "GitHubIdentityProvider", + "Kind": "TemplateReference", "Scope": "Namespaced" } }, - "io.openshift.config.v1.GitLabIdentityProvider": { - "description": "GitLabIdentityProvider provides identities for users authenticating using GitLab credentials", + "io.openshift.config.v1.TestDetails": { "type": "object", "required": [ - "clientID", - "clientSecret", - "url" + "testName" ], "properties": { - "ca": { - "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" - }, - "clientID": { - "description": "clientID is the oauth client ID", - "type": "string", - "default": "" - }, - "clientSecret": { - "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" - }, - "url": { - "description": "url is the oauth server base URL", + "testName": { + "description": "TestName is the name of the test as it appears in junit XMLs. It does not include the suite name since the same test can be executed in many suites.", "type": "string", "default": "" } @@ -68250,259 +74292,225 @@ "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "GitLabIdentityProvider", + "Kind": "TestDetails", "Scope": "Namespaced" } }, - "io.openshift.config.v1.GoogleIdentityProvider": { - "description": "GoogleIdentityProvider provides identities for users authenticating using Google credentials", + "io.openshift.config.v1.TestReporting": { + "description": "TestReporting is used for origin (and potentially others) to report the test names for a given FeatureGate into the payload for later analysis on a per-payload basis. This doesn't need any CRD because it's never stored in the cluster.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "clientID", - "clientSecret" + "spec" ], "properties": { - "clientID": { - "description": "clientID is the oauth client ID", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "clientSecret": { - "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "hostedDomain": { - "description": "hostedDomain is the optional Google App domain (e.g. \"mycompany.com\") to restrict logins to", - "type": "string", - "default": "" + "spec": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.TestReportingSpec" + }, + "status": { + "description": "status holds observed values from the cluster. They may not be overridden.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.TestReportingStatus" } }, "x-fabric8-info": { - "Type": "nested", + "Type": "object", "Group": "config.openshift.io", "Version": "v1", - "Kind": "GoogleIdentityProvider", + "Kind": "TestReporting", "Scope": "Namespaced" } }, - "io.openshift.config.v1.HTPasswdIdentityProvider": { - "description": "HTPasswdPasswordIdentityProvider provides identities for users authenticating using htpasswd credentials", + "io.openshift.config.v1.TestReportingSpec": { "type": "object", "required": [ - "fileData" + "testsForFeatureGates" ], "properties": { - "fileData": { - "description": "fileData is a required reference to a secret by name containing the data to use as the htpasswd file. The key \"htpasswd\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. If the specified htpasswd data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + "testsForFeatureGates": { + "description": "TestsForFeatureGates is a list, indexed by FeatureGate and includes information about testing.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.FeatureGateTests" + } } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "HTPasswdIdentityProvider", + "Kind": "TestReportingSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.HTTPServingInfo": { - "description": "HTTPServingInfo holds configuration for serving HTTP", + "io.openshift.config.v1.TestReportingStatus": { + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1", + "Kind": "TestReportingStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1.TokenClaimMapping": { "type": "object", "required": [ - "bindAddress", - "bindNetwork", - "certFile", - "keyFile", - "maxRequestsInFlight", - "requestTimeoutSeconds" + "claim" ], "properties": { - "bindAddress": { - "description": "BindAddress is the ip:port to serve on", - "type": "string", - "default": "" - }, - "bindNetwork": { - "description": "BindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", - "type": "string", - "default": "" - }, - "certFile": { - "description": "CertFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" - }, - "cipherSuites": { - "description": "CipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "clientCA": { - "description": "ClientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates", - "type": "string" - }, - "keyFile": { - "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "claim": { + "description": "Claim is a JWT token claim to be used in the mapping", "type": "string", "default": "" - }, - "maxRequestsInFlight": { - "description": "MaxRequestsInFlight is the number of concurrent requests allowed to the server. If zero, no limit.", - "type": "integer", - "format": "int64", - "default": 0 - }, - "minTLSVersion": { - "description": "MinTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants", - "type": "string" - }, - "namedCertificates": { - "description": "NamedCertificates is a list of certificates to use to secure requests to specific hostnames", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.NamedCertificate" - } - }, - "requestTimeoutSeconds": { - "description": "RequestTimeoutSeconds is the number of seconds before requests are timed out. The default is 60 minutes, if -1 there is no limit on requests.", - "type": "integer", - "format": "int64", - "default": 0 } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "HTTPServingInfo", + "Kind": "TokenClaimMapping", "Scope": "Namespaced" } }, - "io.openshift.config.v1.HubSource": { - "description": "HubSource is used to specify the hub source and its configuration", + "io.openshift.config.v1.TokenClaimMappings": { "type": "object", - "required": [ - "name", - "disabled" - ], "properties": { - "disabled": { - "description": "disabled is used to disable a default hub source on cluster", - "type": "boolean", - "default": false + "groups": { + "description": "Groups is a name of the claim that should be used to construct groups for the cluster identity. The referenced claim must use array of strings values.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.PrefixedClaimMapping" }, - "name": { - "description": "name is the name of one of the default hub sources", - "type": "string", - "default": "" + "username": { + "description": "Username is a name of the claim that should be used to construct usernames for the cluster identity.\n\nDefault value: \"sub\"", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.UsernameClaimMapping" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "HubSource", + "Kind": "TokenClaimMappings", "Scope": "Namespaced" } }, - "io.openshift.config.v1.HubSourceStatus": { - "description": "HubSourceStatus is used to reflect the current state of applying the configuration to a default source", + "io.openshift.config.v1.TokenClaimValidationRule": { "type": "object", + "required": [ + "type", + "requiredClaim" + ], "properties": { - "message": { - "description": "message provides more information regarding failures", - "type": "string" + "requiredClaim": { + "description": "RequiredClaim allows configuring a required claim name and its expected value", + "$ref": "#/definitions/io.openshift.config.v1.TokenRequiredClaim" }, - "status": { - "description": "status indicates success or failure in applying the configuration", - "type": "string" + "type": { + "description": "Type sets the type of the validation rule", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "HubSourceStatus", + "Kind": "TokenClaimValidationRule", "Scope": "Namespaced" } }, - "io.openshift.config.v1.IBMCloudPlatformSpec": { - "description": "IBMCloudPlatformSpec holds the desired state of the IBMCloud infrastructure provider. This only includes fields that can be modified in the cluster.", + "io.openshift.config.v1.TokenConfig": { + "description": "TokenConfig holds the necessary configuration options for authorization and access tokens", "type": "object", + "properties": { + "accessTokenInactivityTimeout": { + "description": "accessTokenInactivityTimeout defines the token inactivity timeout for tokens granted by any client. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. Takes valid time duration string such as \"5m\", \"1.5h\" or \"2h45m\". The minimum allowed value for duration is 300s (5 minutes). If the timeout is configured per client, then that value takes precedence. If the timeout value is not specified and the client does not override the value, then tokens are valid until their lifetime.\n\nWARNING: existing tokens' timeout will not be affected (lowered) by changing this value", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" + }, + "accessTokenInactivityTimeoutSeconds": { + "description": "accessTokenInactivityTimeoutSeconds - DEPRECATED: setting this field has no effect.", + "type": "integer", + "format": "int32" + }, + "accessTokenMaxAgeSeconds": { + "description": "accessTokenMaxAgeSeconds defines the maximum age of access tokens", + "type": "integer", + "format": "int32" + } + }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "IBMCloudPlatformSpec", + "Kind": "TokenConfig", "Scope": "Namespaced" } }, - "io.openshift.config.v1.IBMCloudPlatformStatus": { - "description": "IBMCloudPlatformStatus holds the current status of the IBMCloud infrastructure provider.", + "io.openshift.config.v1.TokenIssuer": { "type": "object", + "required": [ + "issuerURL", + "audiences", + "issuerCertificateAuthority" + ], "properties": { - "cisInstanceCRN": { - "description": "CISInstanceCRN is the CRN of the Cloud Internet Services instance managing the DNS zone for the cluster's base domain", - "type": "string" - }, - "dnsInstanceCRN": { - "description": "DNSInstanceCRN is the CRN of the DNS Services instance managing the DNS zone for the cluster's base domain", - "type": "string" - }, - "location": { - "description": "Location is where the cluster has been deployed", - "type": "string" - }, - "providerType": { - "description": "ProviderType indicates the type of cluster that was created", - "type": "string" - }, - "resourceGroupName": { - "description": "ResourceGroupName is the Resource Group for new IBMCloud resources created for the cluster.", - "type": "string" - }, - "serviceEndpoints": { - "description": "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of an IBM Cloud service. These endpoints are consumed by components within the cluster to reach the respective IBM Cloud Services.", + "audiences": { + "description": "Audiences is an array of audiences that the token was issued for. Valid tokens must include at least one of these values in their \"aud\" claim. Must be set to exactly one value.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.IBMCloudServiceEndpoint" + "type": "string", + "default": "" }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" + "x-kubernetes-list-type": "set" + }, + "issuerCertificateAuthority": { + "description": "CertificateAuthority is a reference to a config map in the configuration namespace. The .data of the configMap must contain the \"ca-bundle.crt\" key. If unset, system trust is used instead.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" + }, + "issuerURL": { + "description": "URL is the serving URL of the token issuer. Must use the https:// scheme.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "IBMCloudPlatformStatus", + "Kind": "TokenIssuer", "Scope": "Namespaced" } }, - "io.openshift.config.v1.IBMCloudServiceEndpoint": { - "description": "IBMCloudServiceEndpoint stores the configuration of a custom url to override existing defaults of IBM Cloud Services.", + "io.openshift.config.v1.TokenRequiredClaim": { "type": "object", "required": [ - "name", - "url" + "claim", + "requiredValue" ], "properties": { - "name": { - "description": "name is the name of the IBM Cloud service. Possible values are: CIS, COS, COSConfig, DNSServices, GlobalCatalog, GlobalSearch, GlobalTagging, HyperProtect, IAM, KeyProtect, ResourceController, ResourceManager, or VPC. For example, the IBM Cloud Private IAM service could be configured with the service `name` of `IAM` and `url` of `https://private.iam.cloud.ibm.com` Whereas the IBM Cloud Private VPC service for US South (Dallas) could be configured with the service `name` of `VPC` and `url` of `https://us.south.private.iaas.cloud.ibm.com`", + "claim": { + "description": "Claim is a name of a required claim. Only claims with string values are supported.", "type": "string", "default": "" }, - "url": { - "description": "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty.", + "requiredValue": { + "description": "RequiredValue is the required value for the claim.", "type": "string", "default": "" } @@ -68511,65 +74519,31 @@ "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "IBMCloudServiceEndpoint", + "Kind": "TokenRequiredClaim", "Scope": "Namespaced" } - }, - "io.openshift.config.v1.IdentityProvider": { - "description": "IdentityProvider provides identities for users authenticating using credentials", - "type": "object", - "required": [ - "name", - "type" - ], - "properties": { - "basicAuth": { - "description": "basicAuth contains configuration options for the BasicAuth IdP", - "$ref": "#/definitions/io.openshift.config.v1.BasicAuthIdentityProvider" - }, - "github": { - "description": "github enables user authentication using GitHub credentials", - "$ref": "#/definitions/io.openshift.config.v1.GitHubIdentityProvider" - }, - "gitlab": { - "description": "gitlab enables user authentication using GitLab credentials", - "$ref": "#/definitions/io.openshift.config.v1.GitLabIdentityProvider" - }, - "google": { - "description": "google enables user authentication using Google credentials", - "$ref": "#/definitions/io.openshift.config.v1.GoogleIdentityProvider" - }, - "htpasswd": { - "description": "htpasswd enables user authentication using an HTPasswd file to validate credentials", - "$ref": "#/definitions/io.openshift.config.v1.HTPasswdIdentityProvider" - }, - "keystone": { - "description": "keystone enables user authentication using keystone password credentials", - "$ref": "#/definitions/io.openshift.config.v1.KeystoneIdentityProvider" - }, - "ldap": { - "description": "ldap enables user authentication using LDAP credentials", - "$ref": "#/definitions/io.openshift.config.v1.LDAPIdentityProvider" - }, - "mappingMethod": { - "description": "mappingMethod determines how identities from this provider are mapped to users Defaults to \"claim\"", - "type": "string" - }, - "name": { - "description": "name is used to qualify the identities returned by this provider. - It MUST be unique and not shared by any other identity provider used - It MUST be a valid path segment: name cannot equal \".\" or \"..\" or contain \"/\" or \"%\" or \":\"\n Ref: https://godoc.org/github.com/openshift/origin/pkg/user/apis/user/validation#ValidateIdentityProviderName", + }, + "io.openshift.config.v1.Update": { + "description": "Update represents an administrator update request.", + "type": "object", + "properties": { + "architecture": { + "description": "architecture is an optional field that indicates the desired value of the cluster architecture. In this context cluster architecture means either a single architecture or a multi architecture. architecture can only be set to Multi thereby only allowing updates from single to multi architecture. If architecture is set, image cannot be set and version must be set. Valid values are 'Multi' and empty.", "type": "string", "default": "" }, - "openID": { - "description": "openID enables user authentication using OpenID credentials", - "$ref": "#/definitions/io.openshift.config.v1.OpenIDIdentityProvider" + "force": { + "description": "force allows an administrator to update to an image that has failed verification or upgradeable checks. This option should only be used when the authenticity of the provided image has been verified out of band because the provided image will run with full administrative access to the cluster. Do not use this flag with images that comes from unknown or potentially malicious sources.", + "type": "boolean", + "default": false }, - "requestHeader": { - "description": "requestHeader enables user authentication using request header credentials", - "$ref": "#/definitions/io.openshift.config.v1.RequestHeaderIdentityProvider" + "image": { + "description": "image is a container image location that contains the update. image should be used when the desired version does not exist in availableUpdates or history. When image is set, version is ignored. When image is set, version should be empty. When image is set, architecture cannot be specified.", + "type": "string", + "default": "" }, - "type": { - "description": "type identifies the identity provider type for this entry.", + "version": { + "description": "version is a semantic version identifying the update version. version is ignored if image is specified and required if architecture is specified.", "type": "string", "default": "" } @@ -68578,55 +74552,50 @@ "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "IdentityProvider", + "Kind": "Update", "Scope": "Namespaced" } }, - "io.openshift.config.v1.IdentityProviderConfig": { - "description": "IdentityProviderConfig contains configuration for using a specific identity provider", + "io.openshift.config.v1.UpdateHistory": { + "description": "UpdateHistory is a single attempted update to the cluster.", "type": "object", "required": [ - "type" + "state", + "startedTime", + "completionTime", + "image", + "verified" ], "properties": { - "basicAuth": { - "description": "basicAuth contains configuration options for the BasicAuth IdP", - "$ref": "#/definitions/io.openshift.config.v1.BasicAuthIdentityProvider" - }, - "github": { - "description": "github enables user authentication using GitHub credentials", - "$ref": "#/definitions/io.openshift.config.v1.GitHubIdentityProvider" - }, - "gitlab": { - "description": "gitlab enables user authentication using GitLab credentials", - "$ref": "#/definitions/io.openshift.config.v1.GitLabIdentityProvider" - }, - "google": { - "description": "google enables user authentication using Google credentials", - "$ref": "#/definitions/io.openshift.config.v1.GoogleIdentityProvider" + "acceptedRisks": { + "description": "acceptedRisks records risks which were accepted to initiate the update. For example, it may menition an Upgradeable=False or missing signature that was overriden via desiredUpdate.force, or an update that was initiated despite not being in the availableUpdates set of recommended update targets.", + "type": "string" }, - "htpasswd": { - "description": "htpasswd enables user authentication using an HTPasswd file to validate credentials", - "$ref": "#/definitions/io.openshift.config.v1.HTPasswdIdentityProvider" + "completionTime": { + "description": "completionTime, if set, is when the update was fully applied. The update that is currently being applied will have a null completion time. Completion time will always be set for entries that are not the current update (usually to the started time of the next update).", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "keystone": { - "description": "keystone enables user authentication using keystone password credentials", - "$ref": "#/definitions/io.openshift.config.v1.KeystoneIdentityProvider" + "image": { + "description": "image is a container image location that contains the update. This value is always populated.", + "type": "string", + "default": "" }, - "ldap": { - "description": "ldap enables user authentication using LDAP credentials", - "$ref": "#/definitions/io.openshift.config.v1.LDAPIdentityProvider" + "startedTime": { + "description": "startedTime is the time at which the update was started.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "openID": { - "description": "openID enables user authentication using OpenID credentials", - "$ref": "#/definitions/io.openshift.config.v1.OpenIDIdentityProvider" + "state": { + "description": "state reflects whether the update was fully applied. The Partial state indicates the update is not fully applied, while the Completed state indicates the update was successfully rolled out at least once (all parts of the update successfully applied).", + "type": "string", + "default": "" }, - "requestHeader": { - "description": "requestHeader enables user authentication using request header credentials", - "$ref": "#/definitions/io.openshift.config.v1.RequestHeaderIdentityProvider" + "verified": { + "description": "verified indicates whether the provided update was properly verified before it was installed. If this is false the cluster may not be trusted. Verified does not cover upgradeable checks that depend on the cluster state at the time when the update target was accepted.", + "type": "boolean", + "default": false }, - "type": { - "description": "type identifies the identity provider type for this entry.", + "version": { + "description": "version is a semantic version identifying the update version. If the requested image does not define a version, or if a failure occurs retrieving the image, this value may be empty.", "type": "string", "default": "" } @@ -68635,231 +74604,240 @@ "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "IdentityProviderConfig", + "Kind": "UpdateHistory", "Scope": "Namespaced" } }, - "io.openshift.config.v1.Image": { - "description": "Image governs policies related to imagestream imports and runtime configuration for external registries. It allows cluster admins to configure which registries OpenShift is allowed to import images from, extra CA trust bundles for external registries, and policies to block or allow registry hostnames. When exposing OpenShift's image registry to the public, this also lets cluster admins specify the external hostname.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1.UsernameClaimMapping": { "type": "object", "required": [ - "spec" + "claim", + "prefixPolicy", + "prefix" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "claim": { + "description": "Claim is a JWT token claim to be used in the mapping", + "type": "string", + "default": "" }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ImageSpec" + "prefix": { + "$ref": "#/definitions/io.openshift.config.v1.UsernamePrefix" }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ImageStatus" + "prefixPolicy": { + "description": "PrefixPolicy specifies how a prefix should apply.\n\nBy default, claims other than `email` will be prefixed with the issuer URL to prevent naming clashes with other plugins.\n\nSet to \"NoPrefix\" to disable prefixing.\n\nExample:\n (1) `prefix` is set to \"myoidc:\" and `claim` is set to \"username\".\n If the JWT claim `username` contains value `userA`, the resulting\n mapped value will be \"myoidc:userA\".\n (2) `prefix` is set to \"myoidc:\" and `claim` is set to \"email\". If the\n JWT `email` claim contains value \"userA@myoidc.tld\", the resulting\n mapped value will be \"myoidc:userA@myoidc.tld\".\n (3) `prefix` is unset, `issuerURL` is set to `https://myoidc.tld`,\n the JWT claims include \"username\":\"userA\" and \"email\":\"userA@myoidc.tld\",\n and `claim` is set to:\n (a) \"username\": the mapped value will be \"https://myoidc.tld#userA\"\n (b) \"email\": the mapped value will be \"userA@myoidc.tld\"", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", + "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "Image", - "Scope": "Clustered" + "Kind": "UsernameClaimMapping", + "Scope": "Namespaced" } }, - "io.openshift.config.v1.ImageContentPolicy": { - "description": "ImageContentPolicy holds cluster-wide information about how to handle registry mirror rules. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1.UsernamePrefix": { "type": "object", "required": [ - "spec" + "prefixString" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ImageContentPolicySpec" + "prefixString": { + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", + "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ImageContentPolicy", - "Scope": "Clustered" + "Kind": "UsernamePrefix", + "Scope": "Namespaced" } }, - "io.openshift.config.v1.ImageContentPolicyList": { - "description": "ImageContentPolicyList lists the items in the ImageContentPolicy CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1.VSpherePlatformFailureDomainSpec": { + "description": "VSpherePlatformFailureDomainSpec holds the region and zone failure domain and the vCenter topology of that failure domain.", "type": "object", "required": [ - "metadata", - "items" + "name", + "region", + "zone", + "server", + "topology" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "name": { + "description": "name defines the arbitrary but unique name of a failure domain.", + "type": "string", + "default": "" }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ImageContentPolicy" - } + "region": { + "description": "region defines the name of a region tag that will be attached to a vCenter datacenter. The tag category in vCenter must be named openshift-region.", + "type": "string", + "default": "" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "server": { + "description": "server is the fully-qualified domain name or the IP address of the vCenter server.", + "type": "string", + "default": "" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "topology": { + "description": "Topology describes a given failure domain using vSphere constructs", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformTopology" + }, + "zone": { + "description": "zone defines the name of a zone tag that will be attached to a vCenter cluster. The tag category in vCenter must be named openshift-zone.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "list", + "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ImageContentPolicyList", + "Kind": "VSpherePlatformFailureDomainSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ImageContentPolicySpec": { - "description": "ImageContentPolicySpec is the specification of the ImageContentPolicy CRD.", + "io.openshift.config.v1.VSpherePlatformLoadBalancer": { + "description": "VSpherePlatformLoadBalancer defines the load balancer used by the cluster on VSphere platform.", "type": "object", "properties": { - "repositoryDigestMirrors": { - "description": "repositoryDigestMirrors allows images referenced by image digests in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in RepositoryDigestMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To pull image from mirrors by tags, should set the \"allowMirrorByTags\".\n\nEach “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.RepositoryDigestMirrors" - }, - "x-kubernetes-list-map-keys": [ - "source" - ], - "x-kubernetes-list-type": "map" + "type": { + "description": "type defines the type of load balancer used by the cluster on VSphere platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", + "type": "string", + "default": "OpenShiftManagedDefault" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ImageContentPolicySpec", + "Kind": "VSpherePlatformLoadBalancer", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": {} + } + ] }, - "io.openshift.config.v1.ImageDigestMirrorSet": { - "description": "ImageDigestMirrorSet holds cluster-wide information about how to handle registry mirror rules on using digest pull specification. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1.VSpherePlatformNodeNetworking": { + "description": "VSpherePlatformNodeNetworking holds the external and internal node networking spec.", "type": "object", - "required": [ - "spec" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "description": "spec holds user settable values for configuration", + "external": { + "description": "external represents the network configuration of the node that is externally routable.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ImageDigestMirrorSetSpec" + "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformNodeNetworkingSpec" }, - "status": { - "description": "status contains the observed state of the resource.", + "internal": { + "description": "internal represents the network configuration of the node that is routable only within the cluster.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ImageDigestMirrorSetStatus" + "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformNodeNetworkingSpec" } }, "x-fabric8-info": { - "Type": "object", + "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ImageDigestMirrorSet", - "Scope": "Clustered" + "Kind": "VSpherePlatformNodeNetworking", + "Scope": "Namespaced" } }, - "io.openshift.config.v1.ImageDigestMirrorSetList": { - "description": "ImageDigestMirrorSetList lists the items in the ImageDigestMirrorSet CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1.VSpherePlatformNodeNetworkingSpec": { + "description": "VSpherePlatformNodeNetworkingSpec holds the network CIDR(s) and port group name for including and excluding IP ranges in the cloud provider. This would be used for example when multiple network adapters are attached to a guest to help determine which IP address the cloud config manager should use for the external and internal node networking.", "type": "object", - "required": [ - "metadata", - "items" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { + "excludeNetworkSubnetCidr": { + "description": "excludeNetworkSubnetCidr IP addresses in subnet ranges will be excluded when selecting the IP address from the VirtualMachine's VM for use in the status.addresses fields.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ImageDigestMirrorSet" - } + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "network": { + "description": "network VirtualMachine's VM Network names that will be used to when searching for status.addresses fields. Note that if internal.networkSubnetCIDR and external.networkSubnetCIDR are not set, then the vNIC associated to this network must only have a single IP address assigned to it. The available networks (port groups) can be listed using `govc ls 'network/*'`", "type": "string" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "networkSubnetCidr": { + "description": "networkSubnetCidr IP address on VirtualMachine's network interfaces included in the fields' CIDRs that will be used in respective status.addresses fields.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" } }, "x-fabric8-info": { - "Type": "list", + "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ImageDigestMirrorSetList", + "Kind": "VSpherePlatformNodeNetworkingSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ImageDigestMirrorSetSpec": { - "description": "ImageDigestMirrorSetSpec is the specification of the ImageDigestMirrorSet CRD.", + "io.openshift.config.v1.VSpherePlatformSpec": { + "description": "VSpherePlatformSpec holds the desired state of the vSphere infrastructure provider. In the future the cloud provider operator, storage operator and machine operator will use these fields for configuration.", "type": "object", "properties": { - "imageDigestMirrors": { - "description": "imageDigestMirrors allows images referenced by image digests in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in imageDigestMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To use mirrors to pull images using tag specification, users should configure a list of mirrors using \"ImageTagMirrorSet\" CRD.\n\nIf the image pull specification matches the repository of \"source\" in multiple imagedigestmirrorset objects, only the objects which define the most specific namespace match will be used. For example, if there are objects using quay.io/libpod and quay.io/libpod/busybox as the \"source\", only the objects using quay.io/libpod/busybox are going to apply for pull specification quay.io/libpod/busybox. Each “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified. Users who want to use a specific order of mirrors, should configure them into one list of mirrors using the expected order.", + "apiServerInternalIPs": { + "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "failureDomains": { + "description": "failureDomains contains the definition of region, zone and the vCenter topology. If this is omitted failure domains (regions and zones) will not be used.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ImageDigestMirrors" + "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformFailureDomainSpec" + }, + "x-kubernetes-list-map-keys": [ + "name" + ], + "x-kubernetes-list-type": "map" + }, + "ingressIPs": { + "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "machineNetworks": { + "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "nodeNetworking": { + "description": "nodeNetworking contains the definition of internal and external network constraints for assigning the node's networking. If this field is omitted, networking defaults to the legacy address selection behavior which is to only support a single address and return the first one found.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformNodeNetworking" + }, + "vcenters": { + "description": "vcenters holds the connection details for services to communicate with vCenter. Currently, only a single vCenter is supported, but in tech preview 3 vCenters are supported. Once the cluster has been installed, you are unable to change the current number of defined vCenters except in the case where the cluster has been upgraded from a version of OpenShift where the vsphere platform spec was not present. You may make modifications to the existing vCenters that are defined in the vcenters list in order to match with any added or modified failure domains.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformVCenterSpec" }, "x-kubernetes-list-type": "atomic" } @@ -68868,199 +74846,187 @@ "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ImageDigestMirrorSetSpec", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.ImageDigestMirrorSetStatus": { - "type": "object", - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "ImageDigestMirrorSetStatus", + "Kind": "VSpherePlatformSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ImageDigestMirrors": { - "description": "ImageDigestMirrors holds cluster-wide information about how to handle mirrors in the registries config.", + "io.openshift.config.v1.VSpherePlatformStatus": { + "description": "VSpherePlatformStatus holds the current status of the vSphere infrastructure provider.", "type": "object", "required": [ - "source" + "apiServerInternalIPs", + "ingressIPs" ], "properties": { - "mirrorSourcePolicy": { - "description": "mirrorSourcePolicy defines the fallback policy if fails to pull image from the mirrors. If unset, the image will continue to be pulled from the the repository in the pull spec. sourcePolicy is valid configuration only when one or more mirrors are in the mirror list.", + "apiServerInternalIP": { + "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", "type": "string" }, - "mirrors": { - "description": "mirrors is zero or more locations that may also contain the same images. No mirror will be configured if not specified. Images can be pulled from these mirrors only if they are referenced by their digests. The mirrored location is obtained by replacing the part of the input reference that matches source by the mirrors entry, e.g. for registry.redhat.io/product/repo reference, a (source, mirror) pair *.redhat.io, mirror.local/redhat causes a mirror.local/redhat/product/repo repository to be used. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. If no mirror is specified or all image pulls from the mirror list fail, the image will continue to be pulled from the repository in the pull spec unless explicitly prohibited by \"mirrorSourcePolicy\" Other cluster configuration, including (but not limited to) other imageDigestMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering. \"mirrors\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", + "apiServerInternalIPs": { + "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-list-type": "set" + "x-kubernetes-list-type": "atomic" }, - "source": { - "description": "source matches the repository that users refer to, e.g. in image pull specifications. Setting source to a registry hostname e.g. docker.io. quay.io, or registry.redhat.io, will match the image pull specification of corressponding registry. \"source\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo [*.]host for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", - "type": "string", - "default": "" + "ingressIP": { + "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", + "type": "string" + }, + "ingressIPs": { + "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "loadBalancer": { + "description": "loadBalancer defines how the load balancer used by the cluster is configured.", + "default": { + "type": "OpenShiftManagedDefault" + }, + "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformLoadBalancer" + }, + "machineNetworks": { + "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "nodeDNSIP": { + "description": "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for vSphere deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ImageDigestMirrors", + "Kind": "VSpherePlatformStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ImageLabel": { + "io.openshift.config.v1.VSpherePlatformTopology": { + "description": "VSpherePlatformTopology holds the required and optional vCenter objects - datacenter, computeCluster, networks, datastore and resourcePool - to provision virtual machines.", "type": "object", "required": [ - "name" + "datacenter", + "computeCluster", + "networks", + "datastore" ], "properties": { - "name": { - "description": "Name defines the name of the label. It must have non-zero length.", + "computeCluster": { + "description": "computeCluster the absolute path of the vCenter cluster in which virtual machine will be located. The absolute path is of the form /\u003cdatacenter\u003e/host/\u003ccluster\u003e. The maximum length of the path is 2048 characters.", "type": "string", "default": "" }, - "value": { - "description": "Value defines the literal value of the label.", - "type": "string" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "ImageLabel", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.ImageList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "datacenter": { + "description": "datacenter is the name of vCenter datacenter in which virtual machines will be located. The maximum length of the datacenter name is 80 characters.", + "type": "string", + "default": "" + }, + "datastore": { + "description": "datastore is the absolute path of the datastore in which the virtual machine is located. The absolute path is of the form /\u003cdatacenter\u003e/datastore/\u003cdatastore\u003e The maximum length of the path is 2048 characters.", + "type": "string", + "default": "" + }, + "folder": { + "description": "folder is the absolute path of the folder where virtual machines are located. The absolute path is of the form /\u003cdatacenter\u003e/vm/\u003cfolder\u003e. The maximum length of the path is 2048 characters.", "type": "string" }, - "items": { + "networks": { + "description": "networks is the list of port group network names within this failure domain. If feature gate VSphereMultiNetworks is enabled, up to 10 network adapters may be defined. 10 is the maximum number of virtual network devices which may be attached to a VM as defined by: https://configmax.esp.vmware.com/guest?vmwareproduct=vSphere\u0026release=vSphere%208.0\u0026categories=1-0 The available networks (port groups) can be listed using `govc ls 'network/*'` Networks should be in the form of an absolute path: /\u003cdatacenter\u003e/network/\u003cportgroup\u003e.", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.Image" - } + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "resourcePool": { + "description": "resourcePool is the absolute path of the resource pool where virtual machines will be created. The absolute path is of the form /\u003cdatacenter\u003e/host/\u003ccluster\u003e/Resources/\u003cresourcepool\u003e. The maximum length of the path is 2048 characters.", + "type": "string" + }, + "template": { + "description": "template is the full inventory path of the virtual machine or template that will be cloned when creating new machines in this failure domain. The maximum length of the path is 2048 characters.\n\nWhen omitted, the template will be calculated by the control plane machineset operator based on the region and zone defined in VSpherePlatformFailureDomainSpec. For example, for zone=zonea, region=region1, and infrastructure name=test, the template path would be calculated as /\u003cdatacenter\u003e/vm/test-rhcos-region1-zonea.", "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "list", + "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ImageList", + "Kind": "VSpherePlatformTopology", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ImageSpec": { + "io.openshift.config.v1.VSpherePlatformVCenterSpec": { + "description": "VSpherePlatformVCenterSpec stores the vCenter connection fields. This is used by the vSphere CCM.", "type": "object", + "required": [ + "server", + "datacenters" + ], "properties": { - "additionalTrustedCA": { - "description": "additionalTrustedCA is a reference to a ConfigMap containing additional CAs that should be trusted during imagestream import, pod image pull, build image pull, and imageregistry pullthrough. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" - }, - "allowedRegistriesForImport": { - "description": "allowedRegistriesForImport limits the container image registries that normal users may import images from. Set this list to the registries that you trust to contain valid Docker images and that you want applications to be able to import from. Users with permission to create Images or ImageStreamMappings via the API are not affected by this policy - typically only administrators or system integrations will have those permissions.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.RegistryLocation" - }, - "x-kubernetes-list-type": "atomic" - }, - "externalRegistryHostnames": { - "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", + "datacenters": { + "description": "The vCenter Datacenters in which the RHCOS vm guests are located. This field will be used by the Cloud Controller Manager. Each datacenter listed here should be used within a topology.", "type": "array", "items": { "type": "string", "default": "" }, - "x-kubernetes-list-type": "atomic" + "x-kubernetes-list-type": "set" }, - "imageStreamImportMode": { - "description": "imageStreamImportMode controls the import mode behaviour of imagestreams. It can be set to `Legacy` or `PreserveOriginal` or the empty string. If this value is specified, this setting is applied to all newly created imagestreams which do not have the value set. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported. When empty, the behaviour will be decided based on the payload type advertised by the ClusterVersion status, i.e single arch payload implies the import mode is Legacy and multi payload implies PreserveOriginal.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.", - "type": "string", - "default": "", - "enum": [ - "Legacy", - "PreserveOriginal" - ] + "port": { + "description": "port is the TCP port that will be used to communicate to the vCenter endpoint. When omitted, this means the user has no opinion and it is up to the platform to choose a sensible default, which is subject to change over time.", + "type": "integer", + "format": "int32" }, - "registrySources": { - "description": "registrySources contains configuration that determines how the container runtime should treat individual registries when accessing images for builds+pods. (e.g. whether or not to allow insecure access). It does not contain configuration for the internal cluster registry.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.RegistrySources" + "server": { + "description": "server is the fully-qualified domain name or the IP address of the vCenter server.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ImageSpec", + "Kind": "VSpherePlatformVCenterSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ImageStatus": { + "io.openshift.config.v1.WebhookTokenAuthenticator": { + "description": "webhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator", "type": "object", + "required": [ + "kubeConfig" + ], "properties": { - "externalRegistryHostnames": { - "description": "externalRegistryHostnames provides the hostnames for the default external image registry. The external hostname should be set only when the image registry is exposed externally. The first value is used in 'publicDockerImageRepository' field in ImageStreams. The value must be in \"hostname[:port]\" format.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "imageStreamImportMode": { - "description": "imageStreamImportMode controls the import mode behaviour of imagestreams. It can be `Legacy` or `PreserveOriginal`. `Legacy` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported. This value will be reconciled based on either the spec value or if no spec value is specified, the image registry operator would look at the ClusterVersion status to determine the payload type and set the import mode accordingly, i.e single arch payload implies the import mode is Legacy and multi payload implies PreserveOriginal.\n\nPossible enum values:\n - `\"Legacy\"` indicates that the legacy behaviour should be used. For manifest lists, the legacy behaviour will discard the manifest list and import a single sub-manifest. In this case, the platform is chosen in the following order of priority: 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list. This mode is the default.\n - `\"PreserveOriginal\"` indicates that the original manifest will be preserved. For manifest lists, the manifest list and all its sub-manifests will be imported.", - "type": "string", - "enum": [ - "Legacy", - "PreserveOriginal" - ] - }, - "internalRegistryHostname": { - "description": "internalRegistryHostname sets the hostname for the default internal image registry. The value must be in \"hostname[:port]\" format. This value is set by the image registry operator which controls the internal registry hostname.", - "type": "string" + "kubeConfig": { + "description": "kubeConfig references a secret that contains kube config file data which describes how to access the remote webhook service. The namespace for the referenced secret is openshift-config.\n\nFor further details, see:\n\nhttps://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication\n\nThe key \"kubeConfig\" is used to locate the data. If the secret or expected key is not found, the webhook is not honored. If the specified kube config data is not valid, the webhook is not honored.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", "Version": "v1", - "Kind": "ImageStatus", + "Kind": "WebhookTokenAuthenticator", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ImageTagMirrorSet": { - "description": "ImageTagMirrorSet holds cluster-wide information about how to handle registry mirror rules on using tag pull specification. When multiple policies are defined, the outcome of the behavior is defined on each field.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1alpha1.Backup": { + "description": "Backup provides configuration for performing backups of the openshift cluster.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ "spec" @@ -69082,24 +75048,24 @@ "spec": { "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ImageTagMirrorSetSpec" + "$ref": "#/definitions/io.openshift.config.v1alpha1.BackupSpec" }, "status": { - "description": "status contains the observed state of the resource.", + "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ImageTagMirrorSetStatus" + "$ref": "#/definitions/io.openshift.config.v1alpha1.BackupStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "ImageTagMirrorSet", + "Version": "v1alpha1", + "Kind": "Backup", "Scope": "Clustered" } }, - "io.openshift.config.v1.ImageTagMirrorSetList": { - "description": "ImageTagMirrorSetList lists the items in the ImageTagMirrorSet CRD.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1alpha1.BackupList": { + "description": "BackupList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ "metadata", @@ -69114,7 +75080,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ImageTagMirrorSet" + "$ref": "#/definitions/io.openshift.config.v1alpha1.Backup" } }, "kind": { @@ -69130,79 +75096,43 @@ "x-fabric8-info": { "Type": "list", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "ImageTagMirrorSetList", + "Version": "v1alpha1", + "Kind": "BackupList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ImageTagMirrorSetSpec": { - "description": "ImageTagMirrorSetSpec is the specification of the ImageTagMirrorSet CRD.", + "io.openshift.config.v1alpha1.BackupSpec": { "type": "object", + "required": [ + "etcd" + ], "properties": { - "imageTagMirrors": { - "description": "imageTagMirrors allows images referenced by image tags in pods to be pulled from alternative mirrored repository locations. The image pull specification provided to the pod will be compared to the source locations described in imageTagMirrors and the image may be pulled down from any of the mirrors in the list instead of the specified repository allowing administrators to choose a potentially faster mirror. To use mirrors to pull images using digest specification only, users should configure a list of mirrors using \"ImageDigestMirrorSet\" CRD.\n\nIf the image pull specification matches the repository of \"source\" in multiple imagetagmirrorset objects, only the objects which define the most specific namespace match will be used. For example, if there are objects using quay.io/libpod and quay.io/libpod/busybox as the \"source\", only the objects using quay.io/libpod/busybox are going to apply for pull specification quay.io/libpod/busybox. Each “source” repository is treated independently; configurations for different “source” repositories don’t interact.\n\nIf the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec.\n\nWhen multiple policies are defined for the same “source” repository, the sets of defined mirrors will be merged together, preserving the relative order of the mirrors, if possible. For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified. Users who want to use a deterministic order of mirrors, should configure them into one list of mirrors using the expected order.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ImageTagMirrors" - }, - "x-kubernetes-list-type": "atomic" + "etcd": { + "description": "etcd specifies the configuration for periodic backups of the etcd cluster", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1alpha1.EtcdBackupSpec" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "ImageTagMirrorSetSpec", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.ImageTagMirrorSetStatus": { - "type": "object", - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "ImageTagMirrorSetStatus", + "Version": "v1alpha1", + "Kind": "BackupSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ImageTagMirrors": { - "description": "ImageTagMirrors holds cluster-wide information about how to handle mirrors in the registries config.", + "io.openshift.config.v1alpha1.BackupStatus": { "type": "object", - "required": [ - "source" - ], - "properties": { - "mirrorSourcePolicy": { - "description": "mirrorSourcePolicy defines the fallback policy if fails to pull image from the mirrors. If unset, the image will continue to be pulled from the repository in the pull spec. sourcePolicy is valid configuration only when one or more mirrors are in the mirror list.", - "type": "string" - }, - "mirrors": { - "description": "mirrors is zero or more locations that may also contain the same images. No mirror will be configured if not specified. Images can be pulled from these mirrors only if they are referenced by their tags. The mirrored location is obtained by replacing the part of the input reference that matches source by the mirrors entry, e.g. for registry.redhat.io/product/repo reference, a (source, mirror) pair *.redhat.io, mirror.local/redhat causes a mirror.local/redhat/product/repo repository to be used. Pulling images by tag can potentially yield different images, depending on which endpoint we pull from. Configuring a list of mirrors using \"ImageDigestMirrorSet\" CRD and forcing digest-pulls for mirrors avoids that issue. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. If no mirror is specified or all image pulls from the mirror list fail, the image will continue to be pulled from the repository in the pull spec unless explicitly prohibited by \"mirrorSourcePolicy\". Other cluster configuration, including (but not limited to) other imageTagMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering. \"mirrors\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "source": { - "description": "source matches the repository that users refer to, e.g. in image pull specifications. Setting source to a registry hostname e.g. docker.io. quay.io, or registry.redhat.io, will match the image pull specification of corressponding registry. \"source\" uses one of the following formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo [*.]host for more information about the format, see the document about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table", - "type": "string", - "default": "" - } - }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "ImageTagMirrors", + "Version": "v1alpha1", + "Kind": "BackupStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.Infrastructure": { - "description": "Infrastructure holds cluster-wide information about Infrastructure. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1alpha1.ClusterImagePolicy": { + "description": "ClusterImagePolicy holds cluster-wide configuration for image signature verification\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ "spec" @@ -69222,26 +75152,26 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec holds user settable values for configuration", + "description": "spec contains the configuration for the cluster image policy.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.InfrastructureSpec" + "$ref": "#/definitions/io.openshift.config.v1alpha1.ClusterImagePolicySpec" }, "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", + "description": "status contains the observed state of the resource.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.InfrastructureStatus" + "$ref": "#/definitions/io.openshift.config.v1alpha1.ClusterImagePolicyStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "Infrastructure", + "Version": "v1alpha1", + "Kind": "ClusterImagePolicy", "Scope": "Clustered" } }, - "io.openshift.config.v1.InfrastructureList": { - "description": "InfrastructureList is\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1alpha1.ClusterImagePolicyList": { + "description": "ClusterImagePolicyList is a list of ClusterImagePolicy resources\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ "metadata", @@ -69256,7 +75186,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.Infrastructure" + "$ref": "#/definitions/io.openshift.config.v1alpha1.ClusterImagePolicy" } }, "kind": { @@ -69272,100 +75202,158 @@ "x-fabric8-info": { "Type": "list", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "InfrastructureList", + "Version": "v1alpha1", + "Kind": "ClusterImagePolicyList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.InfrastructureSpec": { - "description": "InfrastructureSpec contains settings that apply to the cluster infrastructure.", + "io.openshift.config.v1alpha1.ClusterImagePolicySpec": { + "description": "CLusterImagePolicySpec is the specification of the ClusterImagePolicy custom resource.", "type": "object", + "required": [ + "scopes", + "policy" + ], "properties": { - "cloudConfig": { - "description": "cloudConfig is a reference to a ConfigMap containing the cloud provider configuration file. This configuration file is used to configure the Kubernetes cloud provider integration when using the built-in cloud provider integration or the external cloud controller manager. The namespace for this config map is openshift-config.\n\ncloudConfig should only be consumed by the kube_cloud_config controller. The controller is responsible for using the user configuration in the spec for various platforms and combining that with the user provided ConfigMap in this field to create a stitched kube cloud config. The controller generates a ConfigMap `kube-cloud-config` in `openshift-config-managed` namespace with the kube cloud config is stored in `cloud.conf` key. All the clients are expected to use the generated ConfigMap only.", + "policy": { + "description": "policy contains configuration to allow scopes to be verified, and defines how images not matching the verification policy will be treated.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConfigMapFileReference" + "$ref": "#/definitions/io.openshift.config.v1alpha1.Policy" }, - "platformSpec": { - "description": "platformSpec holds desired information specific to the underlying infrastructure provider.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.PlatformSpec" + "scopes": { + "description": "scopes defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the \"Docker Registry HTTP API V2\". Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. For additional details about the format, please refer to the document explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "InfrastructureSpec", + "Version": "v1alpha1", + "Kind": "ClusterImagePolicySpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.InfrastructureStatus": { - "description": "InfrastructureStatus describes the infrastructure the cluster is leveraging.", + "io.openshift.config.v1alpha1.ClusterImagePolicyStatus": { "type": "object", - "required": [ - "infrastructureName", - "etcdDiscoveryDomain", - "apiServerURL", - "apiServerInternalURI", - "controlPlaneTopology", - "infrastructureTopology" - ], "properties": { - "apiServerInternalURI": { - "description": "apiServerInternalURL is a valid URI with scheme 'https', address and optionally a port (defaulting to 443). apiServerInternalURL can be used by components like kubelets, to contact the Kubernetes API server using the infrastructure provider rather than Kubernetes networking.", + "conditions": { + "description": "conditions provide details on the status of this API Resource.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1alpha1", + "Kind": "ClusterImagePolicyStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1alpha1.EtcdBackupSpec": { + "description": "EtcdBackupSpec provides configuration for automated etcd backups to the cluster-etcd-operator", + "type": "object", + "properties": { + "pvcName": { + "description": "PVCName specifies the name of the PersistentVolumeClaim (PVC) which binds a PersistentVolume where the etcd backup files would be saved The PVC itself must always be created in the \"openshift-etcd\" namespace If the PVC is left unspecified \"\" then the platform will choose a reasonable default location to save the backup. In the future this would be backups saved across the control-plane master nodes.", "type": "string", "default": "" }, - "apiServerURL": { - "description": "apiServerURL is a valid URI with scheme 'https', address and optionally a port (defaulting to 443). apiServerURL can be used by components like the web console to tell users where to find the Kubernetes API.", - "type": "string", - "default": "" + "retentionPolicy": { + "description": "RetentionPolicy defines the retention policy for retaining and deleting existing backups.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1alpha1.RetentionPolicy" }, - "controlPlaneTopology": { - "description": "controlPlaneTopology expresses the expectations for operands that normally run on control nodes. The default is 'HighlyAvailable', which represents the behavior operators have in a \"normal\" cluster. The 'SingleReplica' mode will be used in single-node deployments and the operators should not configure the operand for highly-available operation The 'External' mode indicates that the control plane is hosted externally to the cluster and that its components are not visible within the cluster.", + "schedule": { + "description": "Schedule defines the recurring backup schedule in Cron format every 2 hours: 0 */2 * * * every day at 3am: 0 3 * * * Empty string means no opinion and the platform is left to choose a reasonable default which is subject to change without notice. The current default is \"no backups\", but will change in the future.", "type": "string", "default": "" }, - "cpuPartitioning": { - "description": "cpuPartitioning expresses if CPU partitioning is a currently enabled feature in the cluster. CPU Partitioning means that this cluster can support partitioning workloads to specific CPU Sets. Valid values are \"None\" and \"AllNodes\". When omitted, the default value is \"None\". The default value of \"None\" indicates that no nodes will be setup with CPU partitioning. The \"AllNodes\" value indicates that all nodes have been setup with CPU partitioning, and can then be further configured via the PerformanceProfile API.", - "type": "string", - "default": "None" - }, - "etcdDiscoveryDomain": { - "description": "etcdDiscoveryDomain is the domain used to fetch the SRV records for discovering etcd servers and clients. For more info: https://github.com/etcd-io/etcd/blob/329be66e8b3f9e2e6af83c123ff89297e49ebd15/Documentation/op-guide/clustering.md#dns-discovery deprecated: as of 4.7, this field is no longer set or honored. It will be removed in a future release.", + "timeZone": { + "description": "The time zone name for the given schedule, see https://en.wikipedia.org/wiki/List_of_tz_database_time_zones. If not specified, this will default to the time zone of the kube-controller-manager process. See https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/#time-zones", "type": "string", "default": "" - }, - "infrastructureName": { - "description": "infrastructureName uniquely identifies a cluster with a human friendly name. Once set it should not be changed. Must be of max length 27 and must have only alphanumeric or hyphen characters.", + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1alpha1", + "Kind": "EtcdBackupSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1alpha1.FulcioCAWithRekor": { + "description": "FulcioCAWithRekor defines the root of trust based on the Fulcio certificate and the Rekor public key.", + "type": "object", + "required": [ + "fulcioCAData", + "rekorKeyData" + ], + "properties": { + "fulcioCAData": { + "description": "fulcioCAData contains inline base64-encoded data for the PEM format fulcio CA. fulcioCAData must be at most 8192 characters.", "type": "string", - "default": "" + "format": "byte" }, - "infrastructureTopology": { - "description": "infrastructureTopology expresses the expectations for infrastructure services that do not run on control plane nodes, usually indicated by a node selector for a `role` value other than `master`. The default is 'HighlyAvailable', which represents the behavior operators have in a \"normal\" cluster. The 'SingleReplica' mode will be used in single-node deployments and the operators should not configure the operand for highly-available operation NOTE: External topology mode is not applicable for this field.", - "type": "string", - "default": "" + "fulcioSubject": { + "description": "fulcioSubject specifies OIDC issuer and the email of the Fulcio authentication configuration.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1alpha1.PolicyFulcioSubject" }, - "platform": { - "description": "platform is the underlying infrastructure provider for the cluster.\n\nDeprecated: Use platformStatus.type instead.", + "rekorKeyData": { + "description": "rekorKeyData contains inline base64-encoded data for the PEM format from the Rekor public key. rekorKeyData must be at most 8192 characters.", + "type": "string", + "format": "byte" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1alpha1", + "Kind": "FulcioCAWithRekor", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1alpha1.GatherConfig": { + "description": "gatherConfig provides data gathering configuration options.", + "type": "object", + "properties": { + "dataPolicy": { + "description": "dataPolicy allows user to enable additional global obfuscation of the IP addresses and base domain in the Insights archive data. Valid values are \"None\" and \"ObfuscateNetworking\". When set to None the data is not obfuscated. When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is None.", "type": "string" }, - "platformStatus": { - "description": "platformStatus holds status information specific to the underlying infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.PlatformStatus" + "disabledGatherers": { + "description": "disabledGatherers is a list of gatherers to be excluded from the gathering. All the gatherers can be disabled by providing \"all\" value. If all the gatherers are disabled, the Insights operator does not gather any data. The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\" An example of disabling gatherers looks like this: `disabledGatherers: [\"clusterconfig/machine_configs\", \"workloads/workload_info\"]`", + "type": "array", + "items": { + "type": "string", + "default": "" + } } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "InfrastructureStatus", + "Version": "v1alpha1", + "Kind": "GatherConfig", "Scope": "Namespaced" } }, - "io.openshift.config.v1.Ingress": { - "description": "Ingress holds cluster-wide information about ingress, including the default ingress domain used for routes. The canonical name is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1alpha1.ImagePolicy": { + "description": "ImagePolicy holds namespace-wide configuration for image signature verification\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ "spec" @@ -69387,24 +75375,24 @@ "spec": { "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.IngressSpec" + "$ref": "#/definitions/io.openshift.config.v1alpha1.ImagePolicySpec" }, "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", + "description": "status contains the observed state of the resource.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.IngressStatus" + "$ref": "#/definitions/io.openshift.config.v1alpha1.ImagePolicyStatus" } }, "x-fabric8-info": { "Type": "object", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "Ingress", - "Scope": "Clustered" + "Version": "v1alpha1", + "Kind": "ImagePolicy", + "Scope": "Namespaced" } }, - "io.openshift.config.v1.IngressList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.config.v1alpha1.ImagePolicyList": { + "description": "ImagePolicyList is a list of ImagePolicy resources\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ "metadata", @@ -69419,7 +75407,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.Ingress" + "$ref": "#/definitions/io.openshift.config.v1alpha1.ImagePolicy" } }, "kind": { @@ -69435,191 +75423,210 @@ "x-fabric8-info": { "Type": "list", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "IngressList", + "Version": "v1alpha1", + "Kind": "ImagePolicyList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.IngressPlatformSpec": { - "description": "IngressPlatformSpec holds the desired state of Ingress specific to the underlying infrastructure provider of the current cluster. Since these are used at spec-level for the underlying cluster, it is supposed that only one of the spec structs is set.", + "io.openshift.config.v1alpha1.ImagePolicySpec": { + "description": "ImagePolicySpec is the specification of the ImagePolicy CRD.", "type": "object", "required": [ - "type" + "scopes", + "policy" ], "properties": { - "aws": { - "description": "aws contains settings specific to the Amazon Web Services infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.AWSIngressSpec" + "policy": { + "description": "policy contains configuration to allow scopes to be verified, and defines how images not matching the verification policy will be treated.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1alpha1.Policy" }, - "type": { - "description": "type is the underlying infrastructure provider for the cluster. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"KubeVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.", - "type": "string", - "default": "" + "scopes": { + "description": "scopes defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the \"Docker Registry HTTP API V2\". Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. For additional details about the format, please refer to the document explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "IngressPlatformSpec", + "Version": "v1alpha1", + "Kind": "ImagePolicySpec", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "aws": "AWS" - } - } - ] + } }, - "io.openshift.config.v1.IngressSpec": { + "io.openshift.config.v1alpha1.ImagePolicyStatus": { "type": "object", - "required": [ - "domain" - ], "properties": { - "appsDomain": { - "description": "appsDomain is an optional domain to use instead of the one specified in the domain field when a Route is created without specifying an explicit host. If appsDomain is nonempty, this value is used to generate default host values for Route. Unlike domain, appsDomain may be modified after installation. This assumes a new ingresscontroller has been setup with a wildcard certificate.", - "type": "string" - }, - "componentRoutes": { - "description": "componentRoutes is an optional list of routes that are managed by OpenShift components that a cluster-admin is able to configure the hostname and serving certificate for. The namespace and name of each route in this list should match an existing entry in the status.componentRoutes list.\n\nTo determine the set of configurable Routes, look at namespace and name of entries in the .status.componentRoutes list, where participating operators write the status of configurable routes.", + "conditions": { + "description": "conditions provide details on the status of this API Resource.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ComponentRouteSpec" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" }, "x-kubernetes-list-map-keys": [ - "namespace", - "name" + "type" ], "x-kubernetes-list-type": "map" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "config.openshift.io", + "Version": "v1alpha1", + "Kind": "ImagePolicyStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.config.v1alpha1.InsightsDataGather": { + "description": "InsightsDataGather provides data gather configuration options for the the Insights Operator.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "type": "object", + "required": [ + "spec" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "domain": { - "description": "domain is used to generate a default host name for a route when the route's host name is empty. The generated host name will follow this pattern: \"\u003croute-name\u003e.\u003croute-namespace\u003e.\u003cdomain\u003e\".\n\nIt is also used as the default wildcard domain suffix for ingress. The default ingresscontroller domain will follow this pattern: \"*.\u003cdomain\u003e\".\n\nOnce set, changing domain is not currently supported.", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "loadBalancer": { - "description": "loadBalancer contains the load balancer details in general which are not only specific to the underlying infrastructure provider of the current cluster and are required for Ingress Controller to work on OpenShift.", + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.LoadBalancer" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "requiredHSTSPolicies": { - "description": "requiredHSTSPolicies specifies HSTS policies that are required to be set on newly created or updated routes matching the domainPattern/s and namespaceSelector/s that are specified in the policy. Each requiredHSTSPolicy must have at least a domainPattern and a maxAge to validate a route HSTS Policy route annotation, and affect route admission.\n\nA candidate route is checked for HSTS Policies if it has the HSTS Policy route annotation: \"haproxy.router.openshift.io/hsts_header\" E.g. haproxy.router.openshift.io/hsts_header: max-age=31536000;preload;includeSubDomains\n\n- For each candidate route, if it matches a requiredHSTSPolicy domainPattern and optional namespaceSelector, then the maxAge, preloadPolicy, and includeSubdomainsPolicy must be valid to be admitted. Otherwise, the route is rejected. - The first match, by domainPattern and optional namespaceSelector, in the ordering of the RequiredHSTSPolicies determines the route's admission status. - If the candidate route doesn't match any requiredHSTSPolicy domainPattern and optional namespaceSelector, then it may use any HSTS Policy annotation.\n\nThe HSTS policy configuration may be changed after routes have already been created. An update to a previously admitted route may then fail if the updated route does not conform to the updated HSTS policy configuration. However, changing the HSTS policy configuration will not cause a route that is already admitted to stop working.\n\nNote that if there are no RequiredHSTSPolicies, any HSTS Policy annotation on the route is valid.", + "spec": { + "description": "spec holds user settable values for configuration", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1alpha1.InsightsDataGatherSpec" + }, + "status": { + "description": "status holds observed values from the cluster. They may not be overridden.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1alpha1.InsightsDataGatherStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "config.openshift.io", + "Version": "v1alpha1", + "Kind": "InsightsDataGather", + "Scope": "Clustered" + } + }, + "io.openshift.config.v1alpha1.InsightsDataGatherList": { + "description": "InsightsDataGatherList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "type": "object", + "required": [ + "metadata", + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.RequiredHSTSPolicy" + "$ref": "#/definitions/io.openshift.config.v1alpha1.InsightsDataGather" } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", + "Type": "list", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "IngressSpec", + "Version": "v1alpha1", + "Kind": "InsightsDataGatherList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.IngressStatus": { + "io.openshift.config.v1alpha1.InsightsDataGatherSpec": { "type": "object", "properties": { - "componentRoutes": { - "description": "componentRoutes is where participating operators place the current route status for routes whose hostnames and serving certificates can be customized by the cluster-admin.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ComponentRouteStatus" - }, - "x-kubernetes-list-map-keys": [ - "namespace", - "name" - ], - "x-kubernetes-list-type": "map" - }, - "defaultPlacement": { - "description": "defaultPlacement is set at installation time to control which nodes will host the ingress router pods by default. The options are control-plane nodes or worker nodes.\n\nThis field works by dictating how the Cluster Ingress Operator will consider unset replicas and nodePlacement fields in IngressController resources when creating the corresponding Deployments.\n\nSee the documentation for the IngressController replicas and nodePlacement fields for more information.\n\nWhen omitted, the default value is Workers", - "type": "string", - "default": "" + "gatherConfig": { + "description": "gatherConfig spec attribute includes all the configuration options related to gathering of the Insights data and its uploading to the ingress.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1alpha1.GatherConfig" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "IngressStatus", + "Version": "v1alpha1", + "Kind": "InsightsDataGatherSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.IntermediateTLSProfile": { - "description": "IntermediateTLSProfile is a TLS security profile based on: https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29", + "io.openshift.config.v1alpha1.InsightsDataGatherStatus": { "type": "object", "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "IntermediateTLSProfile", + "Version": "v1alpha1", + "Kind": "InsightsDataGatherStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.KeystoneIdentityProvider": { - "description": "KeystonePasswordIdentityProvider provides identities for users authenticating using keystone password credentials", + "io.openshift.config.v1alpha1.Policy": { + "description": "Policy defines the verification policy for the items in the scopes list.", "type": "object", "required": [ - "url", - "domainName" + "rootOfTrust" ], "properties": { - "ca": { - "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" - }, - "domainName": { - "description": "domainName is required for keystone v3", - "type": "string", - "default": "" - }, - "tlsClientCert": { - "description": "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", + "rootOfTrust": { + "description": "rootOfTrust specifies the root of trust for the policy.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + "$ref": "#/definitions/io.openshift.config.v1alpha1.PolicyRootOfTrust" }, - "tlsClientKey": { - "description": "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", + "signedIdentity": { + "description": "signedIdentity specifies what image identity the signature claims about the image. The required matchPolicy field specifies the approach used in the verification process to verify the identity in the signature and the actual image identity, the default matchPolicy is \"MatchRepoDigestOrExact\".", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" - }, - "url": { - "description": "url is the remote URL to connect to", - "type": "string", - "default": "" + "$ref": "#/definitions/io.openshift.config.v1alpha1.PolicyIdentity" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "KeystoneIdentityProvider", + "Version": "v1alpha1", + "Kind": "Policy", "Scope": "Namespaced" } }, - "io.openshift.config.v1.KubeClientConfig": { + "io.openshift.config.v1alpha1.PolicyFulcioSubject": { + "description": "PolicyFulcioSubject defines the OIDC issuer and the email of the Fulcio authentication configuration.", "type": "object", "required": [ - "kubeConfig", - "connectionOverrides" + "oidcIssuer", + "signedEmail" ], "properties": { - "connectionOverrides": { - "description": "connectionOverrides specifies client overrides for system components to loop back to this master.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ClientConnectionOverrides" + "oidcIssuer": { + "description": "oidcIssuer contains the expected OIDC issuer. It will be verified that the Fulcio-issued certificate contains a (Fulcio-defined) certificate extension pointing at this OIDC issuer URL. When Fulcio issues certificates, it includes a value based on an URL inside the client-provided ID token. Example: \"https://expected.OIDC.issuer/\"", + "type": "string", + "default": "" }, - "kubeConfig": { - "description": "kubeConfig is a .kubeconfig filename for going to the owning kube-apiserver. Empty uses an in-cluster-config", + "signedEmail": { + "description": "signedEmail holds the email address the the Fulcio certificate is issued for. Example: \"expected-signing-user@example.com\"", "type": "string", "default": "" } @@ -69627,127 +75634,83 @@ "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "KubeClientConfig", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.KubevirtPlatformSpec": { - "description": "KubevirtPlatformSpec holds the desired state of the kubevirt infrastructure provider. This only includes fields that can be modified in the cluster.", - "type": "object", - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "KubevirtPlatformSpec", + "Version": "v1alpha1", + "Kind": "PolicyFulcioSubject", "Scope": "Namespaced" } }, - "io.openshift.config.v1.KubevirtPlatformStatus": { - "description": "KubevirtPlatformStatus holds the current status of the kubevirt infrastructure provider.", + "io.openshift.config.v1alpha1.PolicyIdentity": { + "description": "PolicyIdentity defines image identity the signature claims about the image. When omitted, the default matchPolicy is \"MatchRepoDigestOrExact\".", "type": "object", + "required": [ + "matchPolicy" + ], "properties": { - "apiServerInternalIP": { - "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.", - "type": "string" + "exactRepository": { + "description": "exactRepository is required if matchPolicy is set to \"ExactRepository\".", + "$ref": "#/definitions/io.openshift.config.v1alpha1.PolicyMatchExactRepository" }, - "ingressIP": { - "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.", - "type": "string" + "matchPolicy": { + "description": "matchPolicy sets the type of matching to be used. Valid values are \"MatchRepoDigestOrExact\", \"MatchRepository\", \"ExactRepository\", \"RemapIdentity\". When omitted, the default value is \"MatchRepoDigestOrExact\". If set matchPolicy to ExactRepository, then the exactRepository must be specified. If set matchPolicy to RemapIdentity, then the remapIdentity must be specified. \"MatchRepoDigestOrExact\" means that the identity in the signature must be in the same repository as the image identity if the image identity is referenced by a digest. Otherwise, the identity in the signature must be the same as the image identity. \"MatchRepository\" means that the identity in the signature must be in the same repository as the image identity. \"ExactRepository\" means that the identity in the signature must be in the same repository as a specific identity specified by \"repository\". \"RemapIdentity\" means that the signature must be in the same as the remapped image identity. Remapped image identity is obtained by replacing the \"prefix\" with the specified “signedPrefix” if the the image identity matches the specified remapPrefix.", + "type": "string", + "default": "" + }, + "remapIdentity": { + "description": "remapIdentity is required if matchPolicy is set to \"RemapIdentity\".", + "$ref": "#/definitions/io.openshift.config.v1alpha1.PolicyMatchRemapIdentity" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "KubevirtPlatformStatus", + "Version": "v1alpha1", + "Kind": "PolicyIdentity", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "matchPolicy", + "fields-to-discriminateBy": { + "exactRepository": "PolicyMatchExactRepository", + "remapIdentity": "PolicyMatchRemapIdentity" + } + } + ] }, - "io.openshift.config.v1.LDAPAttributeMapping": { - "description": "LDAPAttributeMapping maps LDAP attributes to OpenShift identity fields", + "io.openshift.config.v1alpha1.PolicyMatchExactRepository": { "type": "object", "required": [ - "id" + "repository" ], "properties": { - "email": { - "description": "email is the list of attributes whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "id": { - "description": "id is the list of attributes whose values should be used as the user ID. Required. First non-empty attribute is used. At least one attribute is required. If none of the listed attribute have a value, authentication fails. LDAP standard identity attribute is \"dn\"", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "name": { - "description": "name is the list of attributes whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity LDAP standard display name attribute is \"cn\"", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "preferredUsername": { - "description": "preferredUsername is the list of attributes whose values should be used as the preferred username. LDAP standard login attribute is \"uid\"", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "repository": { + "description": "repository is the reference of the image identity to be matched. The value should be a repository name (by omitting the tag or digest) in a registry implementing the \"Docker Registry HTTP API V2\". For example, docker.io/library/busybox", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "LDAPAttributeMapping", + "Version": "v1alpha1", + "Kind": "PolicyMatchExactRepository", "Scope": "Namespaced" } }, - "io.openshift.config.v1.LDAPIdentityProvider": { - "description": "LDAPPasswordIdentityProvider provides identities for users authenticating using LDAP credentials", + "io.openshift.config.v1alpha1.PolicyMatchRemapIdentity": { "type": "object", "required": [ - "url", - "insecure", - "attributes" + "prefix", + "signedPrefix" ], "properties": { - "attributes": { - "description": "attributes maps LDAP attributes to identities", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.LDAPAttributeMapping" - }, - "bindDN": { - "description": "bindDN is an optional DN to bind with during the search phase.", + "prefix": { + "description": "prefix is the prefix of the image identity to be matched. If the image identity matches the specified prefix, that prefix is replaced by the specified “signedPrefix” (otherwise it is used as unchanged and no remapping takes place). This useful when verifying signatures for a mirror of some other repository namespace that preserves the vendor’s repository structure. The prefix and signedPrefix values can be either host[:port] values (matching exactly the same host[:port], string), repository namespaces, or repositories (i.e. they must not contain tags/digests), and match as prefixes of the fully expanded form. For example, docker.io/library/busybox (not busybox) to specify that single repository, or docker.io/library (not an empty string) to specify the parent namespace of docker.io/library/busybox.", "type": "string", "default": "" }, - "bindPassword": { - "description": "bindPassword is an optional reference to a secret by name containing a password to bind with during the search phase. The key \"bindPassword\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" - }, - "ca": { - "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" - }, - "insecure": { - "description": "insecure, if true, indicates the connection should not use TLS WARNING: Should not be set to `true` with the URL scheme \"ldaps://\" as \"ldaps://\" URLs always\n attempt to connect using TLS, even when `insecure` is set to `true`\nWhen `true`, \"ldap://\" URLS connect insecurely. When `false`, \"ldap://\" URLs are upgraded to a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830.", - "type": "boolean", - "default": false - }, - "url": { - "description": "url is an RFC 2255 URL which specifies the LDAP search parameters to use. The syntax of the URL is: ldap://host:port/basedn?attribute?scope?filter", + "signedPrefix": { + "description": "signedPrefix is the prefix of the image identity to be matched in the signature. The format is the same as \"prefix\". The values can be either host[:port] values (matching exactly the same host[:port], string), repository namespaces, or repositories (i.e. they must not contain tags/digests), and match as prefixes of the fully expanded form. For example, docker.io/library/busybox (not busybox) to specify that single repository, or docker.io/library (not an empty string) to specify the parent namespace of docker.io/library/busybox.", "type": "string", "default": "" } @@ -69755,128 +75718,147 @@ "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "LDAPIdentityProvider", + "Version": "v1alpha1", + "Kind": "PolicyMatchRemapIdentity", "Scope": "Namespaced" } }, - "io.openshift.config.v1.LeaderElection": { - "description": "LeaderElection provides information to elect a leader", + "io.openshift.config.v1alpha1.PolicyRootOfTrust": { + "description": "PolicyRootOfTrust defines the root of trust based on the selected policyType.", "type": "object", "required": [ - "leaseDuration", - "renewDeadline", - "retryPeriod" + "policyType" ], "properties": { - "disable": { - "description": "disable allows leader election to be suspended while allowing a fully defaulted \"normal\" startup case.", - "type": "boolean" - }, - "leaseDuration": { - "description": "leaseDuration is the duration that non-leader candidates will wait after observing a leadership renewal until attempting to acquire leadership of a led but unrenewed leader slot. This is effectively the maximum duration that a leader can be stopped before it is replaced by another candidate. This is only applicable if leader election is enabled.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" - }, - "name": { - "description": "name indicates what name to use for the resource", - "type": "string" - }, - "namespace": { - "description": "namespace indicates which namespace the resource is in", - "type": "string" + "fulcioCAWithRekor": { + "description": "fulcioCAWithRekor defines the root of trust based on the Fulcio certificate and the Rekor public key. For more information about Fulcio and Rekor, please refer to the document at: https://github.com/sigstore/fulcio and https://github.com/sigstore/rekor", + "$ref": "#/definitions/io.openshift.config.v1alpha1.FulcioCAWithRekor" }, - "renewDeadline": { - "description": "renewDeadline is the interval between attempts by the acting master to renew a leadership slot before it stops leading. This must be less than or equal to the lease duration. This is only applicable if leader election is enabled.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" + "policyType": { + "description": "policyType serves as the union's discriminator. Users are required to assign a value to this field, choosing one of the policy types that define the root of trust. \"PublicKey\" indicates that the policy relies on a sigstore publicKey and may optionally use a Rekor verification. \"FulcioCAWithRekor\" indicates that the policy is based on the Fulcio certification and incorporates a Rekor verification.", + "type": "string", + "default": "" }, - "retryPeriod": { - "description": "retryPeriod is the duration the clients should wait between attempting acquisition and renewal of a leadership. This is only applicable if leader election is enabled.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" + "publicKey": { + "description": "publicKey defines the root of trust based on a sigstore public key.", + "$ref": "#/definitions/io.openshift.config.v1alpha1.PublicKey" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "LeaderElection", + "Version": "v1alpha1", + "Kind": "PolicyRootOfTrust", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "policyType", + "fields-to-discriminateBy": { + "fulcioCAWithRekor": "FulcioCAWithRekor", + "publicKey": "PublicKey" + } + } + ] }, - "io.openshift.config.v1.LoadBalancer": { + "io.openshift.config.v1alpha1.PublicKey": { + "description": "PublicKey defines the root of trust based on a sigstore public key.", "type": "object", + "required": [ + "keyData" + ], "properties": { - "platform": { - "description": "platform holds configuration specific to the underlying infrastructure provider for the ingress load balancers. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.IngressPlatformSpec" + "keyData": { + "description": "keyData contains inline base64-encoded data for the PEM format public key. KeyData must be at most 8192 characters.", + "type": "string", + "format": "byte" + }, + "rekorKeyData": { + "description": "rekorKeyData contains inline base64-encoded data for the PEM format from the Rekor public key. rekorKeyData must be at most 8192 characters.", + "type": "string", + "format": "byte" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "LoadBalancer", + "Version": "v1alpha1", + "Kind": "PublicKey", "Scope": "Namespaced" } }, - "io.openshift.config.v1.MTUMigration": { - "description": "MTUMigration contains infomation about MTU migration.", + "io.openshift.config.v1alpha1.RetentionNumberConfig": { + "description": "RetentionNumberConfig specifies the configuration of the retention policy on the number of backups", "type": "object", + "required": [ + "maxNumberOfBackups" + ], "properties": { - "machine": { - "description": "Machine contains MTU migration configuration for the machine's uplink.", - "$ref": "#/definitions/io.openshift.config.v1.MTUMigrationValues" - }, - "network": { - "description": "Network contains MTU migration configuration for the default network.", - "$ref": "#/definitions/io.openshift.config.v1.MTUMigrationValues" + "maxNumberOfBackups": { + "description": "MaxNumberOfBackups defines the maximum number of backups to retain. If the existing number of backups saved is equal to MaxNumberOfBackups then the oldest backup will be removed before a new backup is initiated.", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "MTUMigration", + "Version": "v1alpha1", + "Kind": "RetentionNumberConfig", "Scope": "Namespaced" } }, - "io.openshift.config.v1.MTUMigrationValues": { - "description": "MTUMigrationValues contains the values for a MTU migration.", + "io.openshift.config.v1alpha1.RetentionPolicy": { + "description": "RetentionPolicy defines the retention policy for retaining and deleting existing backups. This struct is a discriminated union that allows users to select the type of retention policy from the supported types.", "type": "object", "required": [ - "to" + "retentionType" ], "properties": { - "from": { - "description": "From is the MTU to migrate from.", - "type": "integer", - "format": "int64" + "retentionNumber": { + "description": "RetentionNumber configures the retention policy based on the number of backups", + "$ref": "#/definitions/io.openshift.config.v1alpha1.RetentionNumberConfig" }, - "to": { - "description": "To is the MTU to migrate to.", - "type": "integer", - "format": "int64" + "retentionSize": { + "description": "RetentionSize configures the retention policy based on the size of backups", + "$ref": "#/definitions/io.openshift.config.v1alpha1.RetentionSizeConfig" + }, + "retentionType": { + "description": "RetentionType sets the type of retention policy. Currently, the only valid policies are retention by number of backups (RetentionNumber), by the size of backups (RetentionSize). More policies or types may be added in the future. Empty string means no opinion and the platform is left to choose a reasonable default which is subject to change without notice. The current default is RetentionNumber with 15 backups kept.\n\nPossible enum values:\n - `\"RetentionNumber\"` sets the retention policy based on the number of backup files saved\n - `\"RetentionSize\"` sets the retention policy based on the total size of the backup files saved", + "type": "string", + "default": "", + "enum": [ + "RetentionNumber", + "RetentionSize" + ] } }, "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "MTUMigrationValues", + "Version": "v1alpha1", + "Kind": "RetentionPolicy", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "retentionType", + "fields-to-discriminateBy": { + "retentionNumber": "RetentionNumber", + "retentionSize": "RetentionSize" + } + } + ] }, - "io.openshift.config.v1.MaxAgePolicy": { - "description": "MaxAgePolicy contains a numeric range for specifying a compliant HSTS max-age for the enclosing RequiredHSTSPolicy", + "io.openshift.config.v1alpha1.RetentionSizeConfig": { + "description": "RetentionSizeConfig specifies the configuration of the retention policy on the total size of backups", "type": "object", + "required": [ + "maxSizeOfBackupsGb" + ], "properties": { - "largestMaxAge": { - "description": "The largest allowed value (in seconds) of the RequiredHSTSPolicy max-age This value can be left unspecified, in which case no upper limit is enforced.", - "type": "integer", - "format": "int32" - }, - "smallestMaxAge": { - "description": "The smallest allowed value (in seconds) of the RequiredHSTSPolicy max-age Setting max-age=0 allows the deletion of an existing HSTS header from a host. This is a necessary tool for administrators to quickly correct mistakes. This value can be left unspecified, in which case no lower limit is enforced.", + "maxSizeOfBackupsGb": { + "description": "MaxSizeOfBackupsGb defines the total size in GB of backups to retain. If the current total size backups exceeds MaxSizeOfBackupsGb then the oldest backup will be removed before a new backup is initiated.", "type": "integer", "format": "int32" } @@ -69884,59 +75866,63 @@ "x-fabric8-info": { "Type": "nested", "Group": "config.openshift.io", - "Version": "v1", - "Kind": "MaxAgePolicy", + "Version": "v1alpha1", + "Kind": "RetentionSizeConfig", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ModernTLSProfile": { - "description": "ModernTLSProfile is a TLS security profile based on: https://wiki.mozilla.org/Security/Server_Side_TLS#Modern_compatibility", + "io.openshift.console.v1.ApplicationMenuSpec": { + "description": "ApplicationMenuSpec is the specification of the desired section and icon used for the link in the application menu.", "type": "object", + "required": [ + "section" + ], + "properties": { + "imageURL": { + "description": "imageUrl is the URL for the icon used in front of the link in the application menu. The URL must be an HTTPS URL or a Data URI. The image should be square and will be shown at 24x24 pixels.", + "type": "string" + }, + "section": { + "description": "section is the section of the application menu in which the link should appear. This can be any text that will appear as a subheading in the application menu dropdown. A new section will be created if the text does not match text of an existing section.", + "type": "string", + "default": "" + } + }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "ModernTLSProfile", + "Kind": "ApplicationMenuSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.NamedCertificate": { - "description": "NamedCertificate specifies a certificate/key, and the names it should be served for", + "io.openshift.console.v1.CLIDownloadLink": { "type": "object", "required": [ - "certFile", - "keyFile" + "href" ], "properties": { - "certFile": { - "description": "CertFile is a file containing a PEM-encoded certificate", + "href": { + "description": "href is the absolute secure URL for the link (must use https)", "type": "string", "default": "" }, - "keyFile": { - "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "text": { + "description": "text is the display text for the link", "type": "string", "default": "" - }, - "names": { - "description": "Names is a list of DNS names this certificate should be used to secure A name can be a normal DNS name, or can contain leading wildcard segments.", - "type": "array", - "items": { - "type": "string", - "default": "" - } } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "NamedCertificate", + "Kind": "CLIDownloadLink", "Scope": "Namespaced" } }, - "io.openshift.config.v1.Network": { - "description": "Network holds cluster-wide information about Network. The canonical name is `cluster`. It is used to configure the desired network configuration, such as: IP address pools for services/pod IPs, network plugin, etc. Please view network.spec for an explanation on what applies when configuring this resource.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.console.v1.ConsoleCLIDownload": { + "description": "ConsoleCLIDownload is an extension for configuring openshift web console command line interface (CLI) downloads.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "spec" @@ -69956,113 +75942,126 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec holds user settable values for configuration. As a general rule, this SHOULD NOT be read directly. Instead, you should consume the NetworkStatus, as it indicates the currently deployed configuration. Currently, most spec fields are immutable after installation. Please view the individual ones for further details on each.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.NetworkSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.NetworkStatus" + "$ref": "#/definitions/io.openshift.console.v1.ConsoleCLIDownloadSpec" } }, "x-fabric8-info": { "Type": "object", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "Network", + "Kind": "ConsoleCLIDownload", "Scope": "Clustered" } }, - "io.openshift.config.v1.NetworkDiagnostics": { + "io.openshift.console.v1.ConsoleCLIDownloadList": { + "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", "type": "object", + "required": [ + "metadata", + "items" + ], "properties": { - "mode": { - "description": "mode controls the network diagnostics mode\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is All.", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "sourcePlacement": { - "description": "sourcePlacement controls the scheduling of network diagnostics source deployment\n\nSee NetworkDiagnosticsSourcePlacement for more details about default values.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.NetworkDiagnosticsSourcePlacement" + "items": { + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.console.v1.ConsoleCLIDownload" + } }, - "targetPlacement": { - "description": "targetPlacement controls the scheduling of network diagnostics target daemonset\n\nSee NetworkDiagnosticsTargetPlacement for more details about default values.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.NetworkDiagnosticsTargetPlacement" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", + "Type": "list", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "NetworkDiagnostics", + "Kind": "ConsoleCLIDownloadList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.NetworkDiagnosticsSourcePlacement": { - "description": "NetworkDiagnosticsSourcePlacement defines node scheduling configuration network diagnostics source components", + "io.openshift.console.v1.ConsoleCLIDownloadSpec": { + "description": "ConsoleCLIDownloadSpec is the desired cli download configuration.", "type": "object", + "required": [ + "displayName", + "description", + "links" + ], "properties": { - "nodeSelector": { - "description": "nodeSelector is the node selector applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `kubernetes.io/os: linux`.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } + "description": { + "description": "description is the description of the CLI download (can include markdown).", + "type": "string", + "default": "" }, - "tolerations": { - "description": "tolerations is a list of tolerations applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is an empty list.", + "displayName": { + "description": "displayName is the display name of the CLI download.", + "type": "string", + "default": "" + }, + "links": { + "description": "links is a list of objects that provide CLI download link details.", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - }, - "x-kubernetes-list-type": "atomic" + "$ref": "#/definitions/io.openshift.console.v1.CLIDownloadLink" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "NetworkDiagnosticsSourcePlacement", + "Kind": "ConsoleCLIDownloadSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.NetworkDiagnosticsTargetPlacement": { - "description": "NetworkDiagnosticsTargetPlacement defines node scheduling configuration network diagnostics target components", + "io.openshift.console.v1.ConsoleExternalLogLink": { + "description": "ConsoleExternalLogLink is an extension for customizing OpenShift web console log links.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", "type": "object", + "required": [ + "spec" + ], "properties": { - "nodeSelector": { - "description": "nodeSelector is the node selector applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `kubernetes.io/os: linux`.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "tolerations": { - "description": "tolerations is a list of tolerations applied to network diagnostics components\n\nWhen omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is `- operator: \"Exists\"` which means that all taints are tolerated.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.core.v1.Toleration" - }, - "x-kubernetes-list-type": "atomic" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "default": {}, + "$ref": "#/definitions/io.openshift.console.v1.ConsoleExternalLogLinkSpec" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", + "Type": "object", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "NetworkDiagnosticsTargetPlacement", - "Scope": "Namespaced" + "Kind": "ConsoleExternalLogLink", + "Scope": "Clustered" } }, - "io.openshift.config.v1.NetworkList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.console.v1.ConsoleExternalLogLinkList": { + "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "metadata", @@ -70077,7 +76076,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.Network" + "$ref": "#/definitions/io.openshift.console.v1.ConsoleExternalLogLink" } }, "kind": { @@ -70092,147 +76091,156 @@ }, "x-fabric8-info": { "Type": "list", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "NetworkList", + "Kind": "ConsoleExternalLogLinkList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.NetworkMigration": { - "description": "NetworkMigration represents the network migration status.", + "io.openshift.console.v1.ConsoleExternalLogLinkSpec": { + "description": "ConsoleExternalLogLinkSpec is the desired log link configuration. The log link will appear on the logs tab of the pod details page.", "type": "object", + "required": [ + "text", + "hrefTemplate" + ], "properties": { - "mtu": { - "description": "MTU is the MTU configuration that is being deployed.", - "$ref": "#/definitions/io.openshift.config.v1.MTUMigration" + "hrefTemplate": { + "description": "hrefTemplate is an absolute secure URL (must use https) for the log link including variables to be replaced. Variables are specified in the URL with the format ${variableName}, for instance, ${containerName} and will be replaced with the corresponding values from the resource. Resource is a pod. Supported variables are: - ${resourceName} - name of the resource which containes the logs - ${resourceUID} - UID of the resource which contains the logs\n - e.g. `11111111-2222-3333-4444-555555555555`\n- ${containerName} - name of the resource's container that contains the logs - ${resourceNamespace} - namespace of the resource that contains the logs - ${resourceNamespaceUID} - namespace UID of the resource that contains the logs - ${podLabels} - JSON representation of labels matching the pod with the logs\n - e.g. `{\"key1\":\"value1\",\"key2\":\"value2\"}`\n\ne.g., https://example.com/logs?resourceName=${resourceName}\u0026containerName=${containerName}\u0026resourceNamespace=${resourceNamespace}\u0026podLabels=${podLabels}", + "type": "string", + "default": "" }, - "networkType": { - "description": "NetworkType is the target plugin that is being deployed. DEPRECATED: network type migration is no longer supported, so this should always be unset.", + "namespaceFilter": { + "description": "namespaceFilter is a regular expression used to restrict a log link to a matching set of namespaces (e.g., `^openshift-`). The string is converted into a regular expression using the JavaScript RegExp constructor. If not specified, links will be displayed for all the namespaces.", "type": "string" + }, + "text": { + "description": "text is the display text for the link", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "NetworkMigration", + "Kind": "ConsoleExternalLogLinkSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.NetworkSpec": { - "description": "NetworkSpec is the desired network configuration. As a general rule, this SHOULD NOT be read directly. Instead, you should consume the NetworkStatus, as it indicates the currently deployed configuration. Currently, most spec fields are immutable after installation. Please view the individual ones for further details on each.", + "io.openshift.console.v1.ConsoleLink": { + "description": "ConsoleLink is an extension for customizing OpenShift web console links.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "clusterNetwork", - "serviceNetwork", - "networkType" + "spec" ], "properties": { - "clusterNetwork": { - "description": "IP address pool to use for pod IPs. This field is immutable after installation.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ClusterNetworkEntry" - }, - "x-kubernetes-list-type": "atomic" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "externalIP": { - "description": "externalIP defines configuration for controllers that affect Service.ExternalIP. If nil, then ExternalIP is not allowed to be set.", - "$ref": "#/definitions/io.openshift.config.v1.ExternalIPConfig" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "networkDiagnostics": { - "description": "networkDiagnostics defines network diagnostics configuration.\n\nTakes precedence over spec.disableNetworkDiagnostics in network.operator.openshift.io. If networkDiagnostics is not specified or is empty, and the spec.disableNetworkDiagnostics flag in network.operator.openshift.io is set to true, the network diagnostics feature will be disabled.", + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.NetworkDiagnostics" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "networkType": { - "description": "NetworkType is the plugin that is to be deployed (e.g. OVNKubernetes). This should match a value that the cluster-network-operator understands, or else no networking will be installed. Currently supported values are: - OVNKubernetes This field is immutable after installation.", - "type": "string", - "default": "" + "spec": { + "default": {}, + "$ref": "#/definitions/io.openshift.console.v1.ConsoleLinkSpec" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "console.openshift.io", + "Version": "v1", + "Kind": "ConsoleLink", + "Scope": "Clustered" + } + }, + "io.openshift.console.v1.ConsoleLinkList": { + "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + "type": "object", + "required": [ + "metadata", + "items" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "serviceNetwork": { - "description": "IP address pool for services. Currently, we only support a single entry here. This field is immutable after installation.", + "items": { "type": "array", "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "default": {}, + "$ref": "#/definitions/io.openshift.console.v1.ConsoleLink" + } }, - "serviceNodePortRange": { - "description": "The port range allowed for Services of type NodePort. If not specified, the default of 30000-32767 will be used. Such Services without a NodePort specified will have one automatically allocated from this range. This parameter can be updated after the cluster is installed.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" + }, + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", + "Type": "list", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "NetworkSpec", + "Kind": "ConsoleLinkList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.NetworkStatus": { - "description": "NetworkStatus is the current network configuration.", + "io.openshift.console.v1.ConsoleLinkSpec": { + "description": "ConsoleLinkSpec is the desired console link configuration.", "type": "object", + "required": [ + "text", + "href", + "location" + ], "properties": { - "clusterNetwork": { - "description": "IP address pool to use for pod IPs.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ClusterNetworkEntry" - }, - "x-kubernetes-list-type": "atomic" - }, - "clusterNetworkMTU": { - "description": "ClusterNetworkMTU is the MTU for inter-pod networking.", - "type": "integer", - "format": "int32" + "applicationMenu": { + "description": "applicationMenu holds information about section and icon used for the link in the application menu, and it is applicable only when location is set to ApplicationMenu.", + "$ref": "#/definitions/io.openshift.console.v1.ApplicationMenuSpec" }, - "conditions": { - "description": "conditions represents the observations of a network.config current state. Known .status.conditions.type are: \"NetworkDiagnosticsAvailable\"", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "href": { + "description": "href is the absolute secure URL for the link (must use https)", + "type": "string", + "default": "" }, - "migration": { - "description": "Migration contains the cluster network migration configuration.", - "$ref": "#/definitions/io.openshift.config.v1.NetworkMigration" + "location": { + "description": "location determines which location in the console the link will be appended to (ApplicationMenu, HelpMenu, UserMenu, NamespaceDashboard).", + "type": "string", + "default": "" }, - "networkType": { - "description": "NetworkType is the plugin that is deployed (e.g. OVNKubernetes).", - "type": "string" + "namespaceDashboard": { + "description": "namespaceDashboard holds information about namespaces in which the dashboard link should appear, and it is applicable only when location is set to NamespaceDashboard. If not specified, the link will appear in all namespaces.", + "$ref": "#/definitions/io.openshift.console.v1.NamespaceDashboardSpec" }, - "serviceNetwork": { - "description": "IP address pool for services. Currently, we only support a single entry here.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "text": { + "description": "text is the display text for the link", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "NetworkStatus", + "Kind": "ConsoleLinkSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.Node": { - "description": "Node holds cluster-wide information about node specific features.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.console.v1.ConsoleNotification": { + "description": "ConsoleNotification is the extension for configuring openshift web console notifications.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "spec" @@ -70252,26 +76260,20 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.NodeSpec" - }, - "status": { - "description": "status holds observed values.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.NodeStatus" + "$ref": "#/definitions/io.openshift.console.v1.ConsoleNotificationSpec" } }, "x-fabric8-info": { "Type": "object", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "Node", + "Kind": "ConsoleNotification", "Scope": "Clustered" } }, - "io.openshift.config.v1.NodeList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.console.v1.ConsoleNotificationList": { + "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "metadata", @@ -70286,7 +76288,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.Node" + "$ref": "#/definitions/io.openshift.console.v1.ConsoleNotification" } }, "kind": { @@ -70301,260 +76303,302 @@ }, "x-fabric8-info": { "Type": "list", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "NodeList", + "Kind": "ConsoleNotificationList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.NodeSpec": { + "io.openshift.console.v1.ConsoleNotificationSpec": { + "description": "ConsoleNotificationSpec is the desired console notification configuration.", "type": "object", + "required": [ + "text" + ], "properties": { - "cgroupMode": { - "description": "CgroupMode determines the cgroups version on the node", + "backgroundColor": { + "description": "backgroundColor is the color of the background for the notification as CSS data type color.", "type": "string" }, - "workerLatencyProfile": { - "description": "WorkerLatencyProfile determins the how fast the kubelet is updating the status and corresponding reaction of the cluster", + "color": { + "description": "color is the color of the text for the notification as CSS data type color.", + "type": "string" + }, + "link": { + "description": "link is an object that holds notification link details.", + "$ref": "#/definitions/io.openshift.console.v1.Link" + }, + "location": { + "description": "location is the location of the notification in the console. Valid values are: \"BannerTop\", \"BannerBottom\", \"BannerTopBottom\".", "type": "string" + }, + "text": { + "description": "text is the visible text of the notification.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "NodeSpec", + "Kind": "ConsoleNotificationSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.NodeStatus": { + "io.openshift.console.v1.ConsolePlugin": { + "description": "ConsolePlugin is an extension for customizing OpenShift web console by dynamically loading code from another service running on the cluster.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", + "required": [ + "metadata", + "spec" + ], "properties": { - "conditions": { - "description": "conditions contain the details and the current state of the nodes.config object", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "default": {}, + "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginSpec" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", + "Type": "object", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "NodeStatus", - "Scope": "Namespaced" + "Kind": "ConsolePlugin", + "Scope": "Clustered" } }, - "io.openshift.config.v1.NutanixFailureDomain": { - "description": "NutanixFailureDomain configures failure domain information for the Nutanix platform.", + "io.openshift.console.v1.ConsolePluginBackend": { + "description": "ConsolePluginBackend holds information about the endpoint which serves the console's plugin", "type": "object", "required": [ - "name", - "cluster", - "subnets" + "type" ], "properties": { - "cluster": { - "description": "cluster is to identify the cluster (the Prism Element under management of the Prism Central), in which the Machine's VM will be created. The cluster identifier (uuid or name) can be obtained from the Prism Central console or using the prism_central API.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.NutanixResourceIdentifier" + "service": { + "description": "service is a Kubernetes Service that exposes the plugin using a deployment with an HTTP server. The Service must use HTTPS and Service serving certificate. The console backend will proxy the plugins assets from the Service using the service CA bundle.", + "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginService" }, - "name": { - "description": "name defines the unique name of a failure domain. Name is required and must be at most 64 characters in length. It must consist of only lower case alphanumeric characters and hyphens (-). It must start and end with an alphanumeric character. This value is arbitrary and is used to identify the failure domain within the platform.", + "type": { + "description": "type is the backend type which servers the console's plugin. Currently only \"Service\" is supported.", "type": "string", "default": "" - }, - "subnets": { - "description": "subnets holds a list of identifiers (one or more) of the cluster's network subnets for the Machine's VM to connect to. The subnet identifiers (uuid or name) can be obtained from the Prism Central console or using the prism_central API.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.NutanixResourceIdentifier" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "NutanixFailureDomain", + "Kind": "ConsolePluginBackend", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "service": "Service" + } + } + ] }, - "io.openshift.config.v1.NutanixPlatformLoadBalancer": { - "description": "NutanixPlatformLoadBalancer defines the load balancer used by the cluster on Nutanix platform.", + "io.openshift.console.v1.ConsolePluginI18n": { + "description": "ConsolePluginI18n holds information on localization resources that are served by the dynamic plugin.", "type": "object", + "required": [ + "loadType" + ], "properties": { - "type": { - "description": "type defines the type of load balancer used by the cluster on Nutanix platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", + "loadType": { + "description": "loadType indicates how the plugin's localization resource should be loaded. Valid values are Preload, Lazy and the empty string. When set to Preload, all localization resources are fetched when the plugin is loaded. When set to Lazy, localization resources are lazily loaded as and when they are required by the console. When omitted or set to the empty string, the behaviour is equivalent to Lazy type.", "type": "string", - "default": "OpenShiftManagedDefault" + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "NutanixPlatformLoadBalancer", + "Kind": "ConsolePluginI18n", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": {} - } - ] + } }, - "io.openshift.config.v1.NutanixPlatformSpec": { - "description": "NutanixPlatformSpec holds the desired state of the Nutanix infrastructure provider. This only includes fields that can be modified in the cluster.", + "io.openshift.console.v1.ConsolePluginList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "prismCentral", - "prismElements" + "metadata", + "items" ], "properties": { - "failureDomains": { - "description": "failureDomains configures failure domains information for the Nutanix platform. When set, the failure domains defined here may be used to spread Machines across prism element clusters to improve fault tolerance of the cluster.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.NutanixFailureDomain" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" + "$ref": "#/definitions/io.openshift.console.v1.ConsolePlugin" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "console.openshift.io", + "Version": "v1", + "Kind": "ConsolePluginList", + "Scope": "Namespaced" + } + }, + "io.openshift.console.v1.ConsolePluginProxy": { + "description": "ConsolePluginProxy holds information on various service types to which console's backend will proxy the plugin's requests.", + "type": "object", + "required": [ + "endpoint", + "alias" + ], + "properties": { + "alias": { + "description": "alias is a proxy name that identifies the plugin's proxy. An alias name should be unique per plugin. The console backend exposes following proxy endpoint:\n\n/api/proxy/plugin/\u003cplugin-name\u003e/\u003cproxy-alias\u003e/\u003crequest-path\u003e?\u003coptional-query-parameters\u003e\n\nRequest example path:\n\n/api/proxy/plugin/acm/search/pods?namespace=openshift-apiserver", + "type": "string", + "default": "" + }, + "authorization": { + "description": "authorization provides information about authorization type, which the proxied request should contain", + "type": "string" + }, + "caCertificate": { + "description": "caCertificate provides the cert authority certificate contents, in case the proxied Service is using custom service CA. By default, the service CA bundle provided by the service-ca operator is used.", + "type": "string" }, - "prismCentral": { - "description": "prismCentral holds the endpoint address and port to access the Nutanix Prism Central. When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy. Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the proxy spec.noProxy list.", + "endpoint": { + "description": "endpoint provides information about endpoint to which the request is proxied to.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.NutanixPrismEndpoint" - }, - "prismElements": { - "description": "prismElements holds one or more endpoint address and port data to access the Nutanix Prism Elements (clusters) of the Nutanix Prism Central. Currently we only support one Prism Element (cluster) for an OpenShift cluster, where all the Nutanix resources (VMs, subnets, volumes, etc.) used in the OpenShift cluster are located. In the future, we may support Nutanix resources (VMs, etc.) spread over multiple Prism Elements (clusters) of the Prism Central.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.NutanixPrismElementEndpoint" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" + "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginProxyEndpoint" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "NutanixPlatformSpec", + "Kind": "ConsolePluginProxy", "Scope": "Namespaced" } }, - "io.openshift.config.v1.NutanixPlatformStatus": { - "description": "NutanixPlatformStatus holds the current status of the Nutanix infrastructure provider.", + "io.openshift.console.v1.ConsolePluginProxyEndpoint": { + "description": "ConsolePluginProxyEndpoint holds information about the endpoint to which request will be proxied to.", "type": "object", "required": [ - "apiServerInternalIPs", - "ingressIPs" + "type" ], "properties": { - "apiServerInternalIP": { - "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", - "type": "string" - }, - "apiServerInternalIPs": { - "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "ingressIP": { - "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", - "type": "string" - }, - "ingressIPs": { - "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "service": { + "description": "service is an in-cluster Service that the plugin will connect to. The Service must use HTTPS. The console backend exposes an endpoint in order to proxy communication between the plugin and the Service. Note: service field is required for now, since currently only \"Service\" type is supported.", + "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginProxyServiceConfig" }, - "loadBalancer": { - "description": "loadBalancer defines how the load balancer used by the cluster is configured.", - "default": { - "type": "OpenShiftManagedDefault" - }, - "$ref": "#/definitions/io.openshift.config.v1.NutanixPlatformLoadBalancer" + "type": { + "description": "type is the type of the console plugin's proxy. Currently only \"Service\" is supported.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "NutanixPlatformStatus", + "Kind": "ConsolePluginProxyEndpoint", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "service": "Service" + } + } + ] }, - "io.openshift.config.v1.NutanixPrismElementEndpoint": { - "description": "NutanixPrismElementEndpoint holds the name and endpoint data for a Prism Element (cluster)", + "io.openshift.console.v1.ConsolePluginProxyServiceConfig": { + "description": "ProxyTypeServiceConfig holds information on Service to which console's backend will proxy the plugin's requests.", "type": "object", "required": [ "name", - "endpoint" + "namespace", + "port" ], "properties": { - "endpoint": { - "description": "endpoint holds the endpoint address and port data of the Prism Element (cluster). When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy. Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the proxy spec.noProxy list.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.NutanixPrismEndpoint" - }, "name": { - "description": "name is the name of the Prism Element (cluster). This value will correspond with the cluster field configured on other resources (eg Machines, PVCs, etc).", + "description": "name of Service that the plugin needs to connect to.", + "type": "string", + "default": "" + }, + "namespace": { + "description": "namespace of Service that the plugin needs to connect to", "type": "string", "default": "" + }, + "port": { + "description": "port on which the Service that the plugin needs to connect to is listening on.", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "NutanixPrismElementEndpoint", + "Kind": "ConsolePluginProxyServiceConfig", "Scope": "Namespaced" } }, - "io.openshift.config.v1.NutanixPrismEndpoint": { - "description": "NutanixPrismEndpoint holds the endpoint address and port to access the Nutanix Prism Central or Element (cluster)", + "io.openshift.console.v1.ConsolePluginService": { + "description": "ConsolePluginService holds information on Service that is serving console dynamic plugin assets.", "type": "object", "required": [ - "address", + "name", + "namespace", "port" ], "properties": { - "address": { - "description": "address is the endpoint address (DNS name or IP address) of the Nutanix Prism Central or Element (cluster)", + "basePath": { + "description": "basePath is the path to the plugin's assets. The primary asset it the manifest file called `plugin-manifest.json`, which is a JSON document that contains metadata about the plugin and the extensions.", + "type": "string", + "default": "" + }, + "name": { + "description": "name of Service that is serving the plugin assets.", + "type": "string", + "default": "" + }, + "namespace": { + "description": "namespace of Service that is serving the plugin assets.", "type": "string", "default": "" }, "port": { - "description": "port is the port number to access the Nutanix Prism Central or Element (cluster)", + "description": "port on which the Service that is serving the plugin is listening to.", "type": "integer", "format": "int32", "default": 0 @@ -70562,55 +76606,56 @@ }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "NutanixPrismEndpoint", + "Kind": "ConsolePluginService", "Scope": "Namespaced" } }, - "io.openshift.config.v1.NutanixResourceIdentifier": { - "description": "NutanixResourceIdentifier holds the identity of a Nutanix PC resource (cluster, image, subnet, etc.)", + "io.openshift.console.v1.ConsolePluginSpec": { + "description": "ConsolePluginSpec is the desired plugin configuration.", "type": "object", "required": [ - "type" + "displayName", + "backend" ], "properties": { - "name": { - "description": "name is the resource name in the PC. It cannot be empty if the type is Name.", - "type": "string" + "backend": { + "description": "backend holds the configuration of backend which is serving console's plugin .", + "default": {}, + "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginBackend" }, - "type": { - "description": "type is the identifier type to use for this resource.", + "displayName": { + "description": "displayName is the display name of the plugin. The dispalyName should be between 1 and 128 characters.", "type": "string", "default": "" }, - "uuid": { - "description": "uuid is the UUID of the resource in the PC. It cannot be empty if the type is UUID.", - "type": "string" + "i18n": { + "description": "i18n is the configuration of plugin's localization resources.", + "default": {}, + "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginI18n" + }, + "proxy": { + "description": "proxy is a list of proxies that describe various service type to which the plugin needs to connect to.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginProxy" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "NutanixResourceIdentifier", + "Kind": "ConsolePluginSpec", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "name": "Name", - "uuid": "UUID" - } - } - ] + } }, - "io.openshift.config.v1.OAuth": { - "description": "OAuth holds cluster-wide information about OAuth. The canonical name is `cluster`. It is used to configure the integrated OAuth server. This configuration is only honored when the top level Authentication config has type set to IntegratedOAuth.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.console.v1.ConsoleQuickStart": { + "description": "ConsoleQuickStart is an extension for guiding user through various workflows in the OpenShift web console.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "metadata", "spec" ], "properties": { @@ -70628,26 +76673,20 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec holds user settable values for configuration", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.OAuthSpec" - }, - "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.OAuthStatus" + "$ref": "#/definitions/io.openshift.console.v1.ConsoleQuickStartSpec" } }, "x-fabric8-info": { "Type": "object", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "OAuth", + "Kind": "ConsoleQuickStart", "Scope": "Clustered" } }, - "io.openshift.config.v1.OAuthList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.console.v1.ConsoleQuickStartList": { + "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "metadata", @@ -70662,7 +76701,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.OAuth" + "$ref": "#/definitions/io.openshift.console.v1.ConsoleQuickStart" } }, "kind": { @@ -70677,641 +76716,702 @@ }, "x-fabric8-info": { "Type": "list", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "OAuthList", + "Kind": "ConsoleQuickStartList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.OAuthRemoteConnectionInfo": { - "description": "OAuthRemoteConnectionInfo holds information necessary for establishing a remote connection", + "io.openshift.console.v1.ConsoleQuickStartSpec": { + "description": "ConsoleQuickStartSpec is the desired quick start configuration.", "type": "object", "required": [ - "url" + "displayName", + "durationMinutes", + "description", + "introduction", + "tasks" ], "properties": { - "ca": { - "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" + "accessReviewResources": { + "description": "accessReviewResources contains a list of resources that the user's access will be reviewed against in order for the user to complete the Quick Start. The Quick Start will be hidden if any of the access reviews fail.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.authorization.v1.ResourceAttributes" + } }, - "tlsClientCert": { - "description": "tlsClientCert is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate to present when connecting to the server. The key \"tls.crt\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + "conclusion": { + "description": "conclusion sums up the Quick Start and suggests the possible next steps. (includes markdown)", + "type": "string" }, - "tlsClientKey": { - "description": "tlsClientKey is an optional reference to a secret by name that contains the PEM-encoded TLS private key for the client certificate referenced in tlsClientCert. The key \"tls.key\" is used to locate the data. If specified and the secret or expected key is not found, the identity provider is not honored. If the specified certificate data is not valid, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + "description": { + "description": "description is the description of the Quick Start. (includes markdown)", + "type": "string", + "default": "" }, - "url": { - "description": "url is the remote URL to connect to", + "displayName": { + "description": "displayName is the display name of the Quick Start.", + "type": "string", + "default": "" + }, + "durationMinutes": { + "description": "durationMinutes describes approximately how many minutes it will take to complete the Quick Start.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "icon": { + "description": "icon is a base64 encoded image that will be displayed beside the Quick Start display name. The icon should be an vector image for easy scaling. The size of the icon should be 40x40.", + "type": "string" + }, + "introduction": { + "description": "introduction describes the purpose of the Quick Start. (includes markdown)", "type": "string", "default": "" + }, + "nextQuickStart": { + "description": "nextQuickStart is a list of the following Quick Starts, suggested for the user to try.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "prerequisites": { + "description": "prerequisites contains all prerequisites that need to be met before taking a Quick Start. (includes markdown)", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "tags": { + "description": "tags is a list of strings that describe the Quick Start.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "tasks": { + "description": "tasks is the list of steps the user has to perform to complete the Quick Start.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.console.v1.ConsoleQuickStartTask" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "OAuthRemoteConnectionInfo", + "Kind": "ConsoleQuickStartSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.OAuthSpec": { - "description": "OAuthSpec contains desired cluster auth configuration", + "io.openshift.console.v1.ConsoleQuickStartTask": { + "description": "ConsoleQuickStartTask is a single step in a Quick Start.", "type": "object", "required": [ - "tokenConfig" + "title", + "description" ], "properties": { - "identityProviders": { - "description": "identityProviders is an ordered list of ways for a user to identify themselves. When this list is empty, no identities are provisioned for users.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.IdentityProvider" - }, - "x-kubernetes-list-type": "atomic" + "description": { + "description": "description describes the steps needed to complete the task. (includes markdown)", + "type": "string", + "default": "" }, - "templates": { - "description": "templates allow you to customize pages like the login page.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.OAuthTemplates" + "review": { + "description": "review contains instructions to validate the task is complete. The user will select 'Yes' or 'No'. using a radio button, which indicates whether the step was completed successfully.", + "$ref": "#/definitions/io.openshift.console.v1.ConsoleQuickStartTaskReview" }, - "tokenConfig": { - "description": "tokenConfig contains options for authorization and access tokens", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.TokenConfig" + "summary": { + "description": "summary contains information about the passed step.", + "$ref": "#/definitions/io.openshift.console.v1.ConsoleQuickStartTaskSummary" + }, + "title": { + "description": "title describes the task and is displayed as a step heading.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "OAuthSpec", + "Kind": "ConsoleQuickStartTask", "Scope": "Namespaced" } }, - "io.openshift.config.v1.OAuthStatus": { - "description": "OAuthStatus shows current known state of OAuth server in the cluster", + "io.openshift.console.v1.ConsoleQuickStartTaskReview": { + "description": "ConsoleQuickStartTaskReview contains instructions that validate a task was completed successfully.", "type": "object", + "required": [ + "instructions", + "failedTaskHelp" + ], + "properties": { + "failedTaskHelp": { + "description": "failedTaskHelp contains suggestions for a failed task review and is shown at the end of task. (includes markdown)", + "type": "string", + "default": "" + }, + "instructions": { + "description": "instructions contains steps that user needs to take in order to validate his work after going through a task. (includes markdown)", + "type": "string", + "default": "" + } + }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "OAuthStatus", + "Kind": "ConsoleQuickStartTaskReview", "Scope": "Namespaced" } }, - "io.openshift.config.v1.OAuthTemplates": { - "description": "OAuthTemplates allow for customization of pages like the login page", + "io.openshift.console.v1.ConsoleQuickStartTaskSummary": { + "description": "ConsoleQuickStartTaskSummary contains information about a passed step.", "type": "object", + "required": [ + "success", + "failed" + ], "properties": { - "error": { - "description": "error is the name of a secret that specifies a go template to use to render error pages during the authentication or grant flow. The key \"errors.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default error page is used. If the specified template is not valid, the default error page is used. If unspecified, the default error page is used. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" - }, - "login": { - "description": "login is the name of a secret that specifies a go template to use to render the login page. The key \"login.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default login page is used. If the specified template is not valid, the default login page is used. If unspecified, the default login page is used. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + "failed": { + "description": "failed briefly describes the unsuccessfully passed task. (includes markdown)", + "type": "string", + "default": "" }, - "providerSelection": { - "description": "providerSelection is the name of a secret that specifies a go template to use to render the provider selection page. The key \"providers.html\" is used to locate the template data. If specified and the secret or expected key is not found, the default provider selection page is used. If the specified template is not valid, the default provider selection page is used. If unspecified, the default provider selection page is used. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + "success": { + "description": "success describes the succesfully passed task.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "OAuthTemplates", + "Kind": "ConsoleQuickStartTaskSummary", "Scope": "Namespaced" } }, - "io.openshift.config.v1.OIDCClientConfig": { + "io.openshift.console.v1.ConsoleSample": { + "description": "ConsoleSample is an extension to customizing OpenShift web console by adding samples.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "componentName", - "componentNamespace", - "clientID", - "clientSecret", - "extraScopes" + "metadata", + "spec" ], "properties": { - "clientID": { - "description": "ClientID is the identifier of the OIDC client from the OIDC provider", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "clientSecret": { - "description": "ClientSecret refers to a secret in the `openshift-config` namespace that contains the client secret in the `clientSecret` key of the `.data` field", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "componentName": { - "description": "ComponentName is the name of the component that is supposed to consume this client configuration", + "spec": { + "description": "spec contains configuration for a console sample.", + "default": {}, + "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleSpec" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "console.openshift.io", + "Version": "v1", + "Kind": "ConsoleSample", + "Scope": "Clustered" + } + }, + "io.openshift.console.v1.ConsoleSampleContainerImportSource": { + "description": "ConsoleSampleContainerImportSource let the user import a container image.", + "type": "object", + "required": [ + "image" + ], + "properties": { + "image": { + "description": "reference to a container image that provides a HTTP service. The service must be exposed on the default port (8080) unless otherwise configured with the port field.\n\nSupported formats:\n - \u003crepository-name\u003e/\u003cimage-name\u003e\n - docker.io/\u003crepository-name\u003e/\u003cimage-name\u003e\n - quay.io/\u003crepository-name\u003e/\u003cimage-name\u003e\n - quay.io/\u003crepository-name\u003e/\u003cimage-name\u003e@sha256:\u003cimage hash\u003e\n - quay.io/\u003crepository-name\u003e/\u003cimage-name\u003e:\u003ctag\u003e", "type": "string", "default": "" }, - "componentNamespace": { - "description": "ComponentNamespace is the namespace of the component that is supposed to consume this client configuration", - "type": "string", - "default": "" + "service": { + "description": "service contains configuration for the Service resource created for this sample.", + "default": {}, + "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleContainerImportSourceService" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "console.openshift.io", + "Version": "v1", + "Kind": "ConsoleSampleContainerImportSource", + "Scope": "Namespaced" + } + }, + "io.openshift.console.v1.ConsoleSampleContainerImportSourceService": { + "description": "ConsoleSampleContainerImportSourceService let the samples author define defaults for the Service created for this sample.", + "type": "object", + "properties": { + "targetPort": { + "description": "targetPort is the port that the service listens on for HTTP requests. This port will be used for Service and Route created for this sample. Port must be in the range 1 to 65535. Default port is 8080.", + "type": "integer", + "format": "int32" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "console.openshift.io", + "Version": "v1", + "Kind": "ConsoleSampleContainerImportSourceService", + "Scope": "Namespaced" + } + }, + "io.openshift.console.v1.ConsoleSampleGitImportSource": { + "description": "ConsoleSampleGitImportSource let the user import code from a public Git repository.", + "type": "object", + "required": [ + "repository" + ], + "properties": { + "repository": { + "description": "repository contains the reference to the actual Git repository.", + "default": {}, + "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleGitImportSourceRepository" }, - "extraScopes": { - "description": "ExtraScopes is an optional set of scopes to request tokens with.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "service": { + "description": "service contains configuration for the Service resource created for this sample.", + "default": {}, + "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleGitImportSourceService" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "OIDCClientConfig", + "Kind": "ConsoleSampleGitImportSource", "Scope": "Namespaced" } }, - "io.openshift.config.v1.OIDCClientReference": { + "io.openshift.console.v1.ConsoleSampleGitImportSourceRepository": { + "description": "ConsoleSampleGitImportSourceRepository let the user import code from a public git repository.", "type": "object", "required": [ - "oidcProviderName", - "issuerURL", - "clientID" + "url" ], "properties": { - "clientID": { - "description": "ClientID is the identifier of the OIDC client from the OIDC provider", + "contextDir": { + "description": "contextDir is used to specify a directory within the repository to build the component. Must start with `/` and have a maximum length of 256 characters. When omitted, the default value is to build from the root of the repository.", "type": "string", "default": "" }, - "issuerURL": { - "description": "URL is the serving URL of the token issuer. Must use the https:// scheme.", + "revision": { + "description": "revision is the git revision at which to clone the git repository Can be used to clone a specific branch, tag or commit SHA. Must be at most 256 characters in length. When omitted the repository's default branch is used.", "type": "string", "default": "" }, - "oidcProviderName": { - "description": "OIDCName refers to the `name` of the provider from `oidcProviders`", + "url": { + "description": "url of the Git repository that contains a HTTP service. The HTTP service must be exposed on the default port (8080) unless otherwise configured with the port field.\n\nOnly public repositories on GitHub, GitLab and Bitbucket are currently supported:\n\n - https://github.com/\u003corg\u003e/\u003crepository\u003e\n - https://gitlab.com/\u003corg\u003e/\u003crepository\u003e\n - https://bitbucket.org/\u003corg\u003e/\u003crepository\u003e\n\nThe url must have a maximum length of 256 characters.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "OIDCClientReference", + "Kind": "ConsoleSampleGitImportSourceRepository", "Scope": "Namespaced" } }, - "io.openshift.config.v1.OIDCClientStatus": { + "io.openshift.console.v1.ConsoleSampleGitImportSourceService": { + "description": "ConsoleSampleGitImportSourceService let the samples author define defaults for the Service created for this sample.", + "type": "object", + "properties": { + "targetPort": { + "description": "targetPort is the port that the service listens on for HTTP requests. This port will be used for Service created for this sample. Port must be in the range 1 to 65535. Default port is 8080.", + "type": "integer", + "format": "int32" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "console.openshift.io", + "Version": "v1", + "Kind": "ConsoleSampleGitImportSourceService", + "Scope": "Namespaced" + } + }, + "io.openshift.console.v1.ConsoleSampleList": { + "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "componentName", - "componentNamespace", - "currentOIDCClients", - "consumingUsers" + "metadata", + "items" ], "properties": { - "componentName": { - "description": "ComponentName is the name of the component that will consume a client configuration.", - "type": "string", - "default": "" - }, - "componentNamespace": { - "description": "ComponentNamespace is the namespace of the component that will consume a client configuration.", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "conditions": { - "description": "Conditions are used to communicate the state of the `oidcClients` entry.\n\nSupported conditions include Available, Degraded and Progressing.\n\nIf Available is true, the component is successfully using the configured client. If Degraded is true, that means something has gone wrong trying to handle the client configuration. If Progressing is true, that means the component is taking some action related to the `oidcClients` entry.", + "items": { "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" + "$ref": "#/definitions/io.openshift.console.v1.ConsoleSample" + } }, - "consumingUsers": { - "description": "ConsumingUsers is a slice of ServiceAccounts that need to have read permission on the `clientSecret` secret.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "currentOIDCClients": { - "description": "CurrentOIDCClients is a list of clients that the component is currently using.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.OIDCClientReference" - }, - "x-kubernetes-list-map-keys": [ - "issuerURL", - "clientID" - ], - "x-kubernetes-list-type": "map" + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", + "Type": "list", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "OIDCClientStatus", + "Kind": "ConsoleSampleList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.OIDCProvider": { + "io.openshift.console.v1.ConsoleSampleSource": { + "description": "ConsoleSampleSource is the actual sample definition and can hold different sample types. Unsupported sample types will be ignored in the web console.", "type": "object", "required": [ - "name", - "issuer", - "oidcClients", - "claimMappings" + "type" ], "properties": { - "claimMappings": { - "description": "ClaimMappings describes rules on how to transform information from an ID token into a cluster identity", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.TokenClaimMappings" - }, - "claimValidationRules": { - "description": "ClaimValidationRules are rules that are applied to validate token claims to authenticate users.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.TokenClaimValidationRule" - }, - "x-kubernetes-list-type": "atomic" + "containerImport": { + "description": "containerImport allows the user import a container image.", + "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleContainerImportSource" }, - "issuer": { - "description": "Issuer describes atributes of the OIDC token issuer", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.TokenIssuer" + "gitImport": { + "description": "gitImport allows the user to import code from a git repository.", + "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleGitImportSource" }, - "name": { - "description": "Name of the OIDC provider", + "type": { + "description": "type of the sample, currently supported: \"GitImport\";\"ContainerImport\"", "type": "string", "default": "" - }, - "oidcClients": { - "description": "OIDCClients contains configuration for the platform's clients that need to request tokens from the issuer", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.OIDCClientConfig" - }, - "x-kubernetes-list-map-keys": [ - "componentNamespace", - "componentName" - ], - "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "OIDCProvider", + "Kind": "ConsoleSampleSource", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "containerImport": "ContainerImport", + "gitImport": "GitImport" + } + } + ] }, - "io.openshift.config.v1.ObjectReference": { - "description": "ObjectReference contains enough information to let you inspect or modify the referred object.", + "io.openshift.console.v1.ConsoleSampleSpec": { + "description": "ConsoleSampleSpec is the desired sample for the web console. Samples will appear with their title, descriptions and a badge in a samples catalog.", "type": "object", "required": [ - "group", - "resource", - "name" + "title", + "abstract", + "description", + "source" ], "properties": { - "group": { - "description": "group of the referent.", + "abstract": { + "description": "abstract is a short introduction to the sample.\n\nIt is required and must be no more than 100 characters in length.\n\nThe abstract is shown on the sample card tile below the title and provider and is limited to three lines of content.", "type": "string", "default": "" }, - "name": { - "description": "name of the referent.", + "description": { + "description": "description is a long form explanation of the sample.\n\nIt is required and can have a maximum length of **4096** characters.\n\nIt is a README.md-like content for additional information, links, pre-conditions, and other instructions. It will be rendered as Markdown so that it can contain line breaks, links, and other simple formatting.", "type": "string", "default": "" }, - "namespace": { - "description": "namespace of the referent.", - "type": "string" + "icon": { + "description": "icon is an optional base64 encoded image and shown beside the sample title.\n\nThe format must follow the data: URL format and can have a maximum size of **10 KB**.\n\n data:[\u003cmediatype\u003e][;base64],\u003cbase64 encoded image\u003e\n\nFor example:\n\n data:image;base64, plus the base64 encoded image.\n\nVector images can also be used. SVG icons must start with:\n\n data:image/svg+xml;base64, plus the base64 encoded SVG image.\n\nAll sample catalog icons will be shown on a white background (also when the dark theme is used). The web console ensures that different aspect ratios work correctly. Currently, the surface of the icon is at most 40x100px.\n\nFor more information on the data URL format, please visit https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/Data_URLs.", + "type": "string", + "default": "" }, - "resource": { - "description": "resource of the referent.", + "provider": { + "description": "provider is an optional label to honor who provides the sample.\n\nIt is optional and must be no more than 50 characters in length.\n\nA provider can be a company like \"Red Hat\" or an organization like \"CNCF\" or \"Knative\".\n\nCurrently, the provider is only shown on the sample card tile below the title with the prefix \"Provided by \"", + "type": "string", + "default": "" + }, + "source": { + "description": "source defines where to deploy the sample service from. The sample may be sourced from an external git repository or container image.", + "default": {}, + "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleSource" + }, + "tags": { + "description": "tags are optional string values that can be used to find samples in the samples catalog.\n\nExamples of common tags may be \"Java\", \"Quarkus\", etc.\n\nThey will be displayed on the samples details page.", + "type": "array", + "items": { + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "set" + }, + "title": { + "description": "title is the display name of the sample.\n\nIt is required and must be no more than 50 characters in length.", + "type": "string", + "default": "" + }, + "type": { + "description": "type is an optional label to group multiple samples.\n\nIt is optional and must be no more than 20 characters in length.\n\nRecommendation is a singular term like \"Builder Image\", \"Devfile\" or \"Serverless Function\".\n\nCurrently, the type is shown a badge on the sample card tile in the top right corner.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "ObjectReference", + "Kind": "ConsoleSampleSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.OldTLSProfile": { - "description": "OldTLSProfile is a TLS security profile based on: https://wiki.mozilla.org/Security/Server_Side_TLS#Old_backward_compatibility", + "io.openshift.console.v1.ConsoleYAMLSample": { + "description": "ConsoleYAMLSample is an extension for customizing OpenShift web console YAML samples.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", "type": "object", + "required": [ + "metadata", + "spec" + ], + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "default": {}, + "$ref": "#/definitions/io.openshift.console.v1.ConsoleYAMLSampleSpec" + } + }, "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", + "Type": "object", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "OldTLSProfile", - "Scope": "Namespaced" + "Kind": "ConsoleYAMLSample", + "Scope": "Clustered" } }, - "io.openshift.config.v1.OpenIDClaims": { - "description": "OpenIDClaims contains a list of OpenID claims to use when authenticating with an OpenID identity provider", + "io.openshift.console.v1.ConsoleYAMLSampleList": { + "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", "type": "object", + "required": [ + "metadata", + "items" + ], "properties": { - "email": { - "description": "email is the list of claims whose values should be used as the email address. Optional. If unspecified, no email is set for the identity", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "groups": { - "description": "groups is the list of claims value of which should be used to synchronize groups from the OIDC provider to OpenShift for the user. If multiple claims are specified, the first one with a non-empty value is used.", + "items": { "type": "array", "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "default": {}, + "$ref": "#/definitions/io.openshift.console.v1.ConsoleYAMLSample" + } }, - "name": { - "description": "name is the list of claims whose values should be used as the display name. Optional. If unspecified, no display name is set for the identity", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "preferredUsername": { - "description": "preferredUsername is the list of claims whose values should be used as the preferred username. If unspecified, the preferred username is determined from the value of the sub claim", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", + "Type": "list", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "OpenIDClaims", + "Kind": "ConsoleYAMLSampleList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.OpenIDIdentityProvider": { - "description": "OpenIDIdentityProvider provides identities for users authenticating using OpenID credentials", + "io.openshift.console.v1.ConsoleYAMLSampleSpec": { + "description": "ConsoleYAMLSampleSpec is the desired YAML sample configuration. Samples will appear with their descriptions in a samples sidebar when creating a resources in the web console.", "type": "object", "required": [ - "clientID", - "clientSecret", - "issuer", - "claims" + "targetResource", + "title", + "description", + "yaml" ], "properties": { - "ca": { - "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. If empty, the default system roots are used. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" - }, - "claims": { - "description": "claims mappings", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.OpenIDClaims" - }, - "clientID": { - "description": "clientID is the oauth client ID", + "description": { + "description": "description of the YAML sample.", "type": "string", "default": "" }, - "clientSecret": { - "description": "clientSecret is a required reference to the secret by name containing the oauth client secret. The key \"clientSecret\" is used to locate the data. If the secret or expected key is not found, the identity provider is not honored. The namespace for this secret is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + "snippet": { + "description": "snippet indicates that the YAML sample is not the full YAML resource definition, but a fragment that can be inserted into the existing YAML document at the user's cursor.", + "type": "boolean", + "default": false }, - "extraAuthorizeParameters": { - "description": "extraAuthorizeParameters are any custom parameters to add to the authorize request.", - "type": "object", - "additionalProperties": { - "type": "string", - "default": "" - } + "targetResource": { + "description": "targetResource contains apiVersion and kind of the resource YAML sample is representating.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.TypeMeta" }, - "extraScopes": { - "description": "extraScopes are any scopes to request in addition to the standard \"openid\" scope.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "title": { + "description": "title of the YAML sample.", + "type": "string", + "default": "" }, - "issuer": { - "description": "issuer is the URL that the OpenID Provider asserts as its Issuer Identifier. It must use the https scheme with no query or fragment component.", + "yaml": { + "description": "yaml is the YAML sample to display.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "OpenIDIdentityProvider", + "Kind": "ConsoleYAMLSampleSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.OpenStackPlatformLoadBalancer": { - "description": "OpenStackPlatformLoadBalancer defines the load balancer used by the cluster on OpenStack platform.", + "io.openshift.console.v1.Link": { + "description": "Represents a standard link that could be generated in HTML", "type": "object", + "required": [ + "text", + "href" + ], "properties": { - "type": { - "description": "type defines the type of load balancer used by the cluster on OpenStack platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", + "href": { + "description": "href is the absolute secure URL for the link (must use https)", "type": "string", - "default": "OpenShiftManagedDefault" + "default": "" + }, + "text": { + "description": "text is the display text for the link", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "OpenStackPlatformLoadBalancer", + "Kind": "Link", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": {} - } - ] + } }, - "io.openshift.config.v1.OpenStackPlatformSpec": { - "description": "OpenStackPlatformSpec holds the desired state of the OpenStack infrastructure provider. This only includes fields that can be modified in the cluster.", + "io.openshift.console.v1.NamespaceDashboardSpec": { + "description": "NamespaceDashboardSpec is a specification of namespaces in which the dashboard link should appear. If both namespaces and namespaceSelector are specified, the link will appear in namespaces that match either", "type": "object", "properties": { - "apiServerInternalIPs": { - "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "ingressIPs": { - "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "namespaceSelector": { + "description": "namespaceSelector is used to select the Namespaces that should contain dashboard link by label. If the namespace labels match, dashboard link will be shown for the namespaces.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" }, - "machineNetworks": { - "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".", + "namespaces": { + "description": "namespaces is an array of namespace names in which the dashboard link should appear.", "type": "array", "items": { "type": "string", "default": "" - }, - "x-kubernetes-list-type": "atomic" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "console.openshift.io", "Version": "v1", - "Kind": "OpenStackPlatformSpec", + "Kind": "NamespaceDashboardSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.OpenStackPlatformStatus": { - "description": "OpenStackPlatformStatus holds the current status of the OpenStack infrastructure provider.", + "io.openshift.example.v1.CELUnion": { + "description": "CELUnion demonstrates how to use a discriminated union and how to validate it using CEL.", "type": "object", - "required": [ - "apiServerInternalIPs", - "ingressIPs" - ], "properties": { - "apiServerInternalIP": { - "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", - "type": "string" - }, - "apiServerInternalIPs": { - "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "cloudName": { - "description": "cloudName is the name of the desired OpenStack cloud in the client configuration file (`clouds.yaml`).", + "optionalMember": { + "description": "optionalMember is a union member that is optional.", "type": "string" }, - "ingressIP": { - "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", + "requiredMember": { + "description": "requiredMember is a union member that is required.", "type": "string" }, - "ingressIPs": { - "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "loadBalancer": { - "description": "loadBalancer defines how the load balancer used by the cluster is configured.", - "default": { - "type": "OpenShiftManagedDefault" - }, - "$ref": "#/definitions/io.openshift.config.v1.OpenStackPlatformLoadBalancer" - }, - "machineNetworks": { - "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "nodeDNSIP": { - "description": "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for OpenStack deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.", + "type": { + "description": "type determines which of the union members should be populated.", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "example.openshift.io", "Version": "v1", - "Kind": "OpenStackPlatformStatus", + "Kind": "CELUnion", "Scope": "Namespaced" - } + }, + "x-kubernetes-unions": [ + { + "discriminator": "type", + "fields-to-discriminateBy": { + "optionalMember": "OptionalMember", + "requiredMember": "RequiredMember" + } + } + ] }, - "io.openshift.config.v1.OperandVersion": { + "io.openshift.example.v1.EvolvingUnion": { "type": "object", - "required": [ - "name", - "version" - ], "properties": { - "name": { - "description": "name is the name of the particular operand this version is for. It usually matches container images, not operators.", - "type": "string", - "default": "" - }, - "version": { - "description": "version indicates which version of a particular operand is currently being managed. It must always match the Available operand. If 1.0.0 is Available, then this must indicate 1.0.0 even if the operator is trying to rollout 1.1.0", - "type": "string", - "default": "" + "type": { + "description": "type is the discriminator. It has different values for Default and for TechPreviewNoUpgrade", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "example.openshift.io", "Version": "v1", - "Kind": "OperandVersion", + "Kind": "EvolvingUnion", "Scope": "Namespaced" } }, - "io.openshift.config.v1.OperatorHub": { - "description": "OperatorHub is the Schema for the operatorhubs API. It can be used to change the state of the default hub sources for OperatorHub on the cluster from enabled to disabled and vice versa.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.example.v1.StableConfigType": { + "description": "StableConfigType is a stable config type that may include TechPreviewNoUpgrade fields.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", - "required": [ - "metadata", - "spec", - "status" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -71327,27 +77427,28 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { + "description": "spec is the specification of the desired behavior of the StableConfigType.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.OperatorHubSpec" + "$ref": "#/definitions/io.openshift.example.v1.StableConfigTypeSpec" }, "status": { + "description": "status is the most recently observed status of the StableConfigType.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.OperatorHubStatus" + "$ref": "#/definitions/io.openshift.example.v1.StableConfigTypeStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "config.openshift.io", + "Group": "example.openshift.io", "Version": "v1", - "Kind": "OperatorHub", + "Kind": "StableConfigType", "Scope": "Clustered" } }, - "io.openshift.config.v1.OperatorHubList": { - "description": "OperatorHubList contains a list of OperatorHub\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.example.v1.StableConfigTypeList": { + "description": "StableConfigTypeList contains a list of StableConfigTypes.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ - "metadata", "items" ], "properties": { @@ -71359,7 +77460,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.OperatorHub" + "$ref": "#/definitions/io.openshift.example.v1.StableConfigType" } }, "kind": { @@ -71374,451 +77475,299 @@ }, "x-fabric8-info": { "Type": "list", - "Group": "config.openshift.io", + "Group": "example.openshift.io", "Version": "v1", - "Kind": "OperatorHubList", + "Kind": "StableConfigTypeList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.OperatorHubSpec": { - "description": "OperatorHubSpec defines the desired state of OperatorHub", + "io.openshift.example.v1.StableConfigTypeSpec": { + "description": "StableConfigTypeSpec is the desired state", "type": "object", + "required": [ + "immutableField" + ], "properties": { - "disableAllDefaultSources": { - "description": "disableAllDefaultSources allows you to disable all the default hub sources. If this is true, a specific entry in sources can be used to enable a default source. If this is false, a specific entry in sources can be used to disable or enable a default source.", - "type": "boolean" + "celUnion": { + "description": "celUnion demonstrates how to validate a discrminated union using CEL", + "default": {}, + "$ref": "#/definitions/io.openshift.example.v1.CELUnion" }, - "sources": { - "description": "sources is the list of default hub sources and their configuration. If the list is empty, it implies that the default hub sources are enabled on the cluster unless disableAllDefaultSources is true. If disableAllDefaultSources is true and sources is not empty, the configuration present in sources will take precedence. The list of default hub sources and their current state will always be reflected in the status block.", + "coolNewField": { + "description": "coolNewField is a field that is for tech preview only. On normal clusters this shouldn't be present", + "type": "string", + "default": "" + }, + "evolvingCollection": { + "description": "evolvingCollection demonstrates how to have a collection where the maximum number of items varies on cluster type. For default clusters, this will be \"1\" but on TechPreview clusters, this value will be \"3\".", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.HubSource" + "type": "string", + "default": "" + }, + "x-kubernetes-list-type": "atomic" + }, + "evolvingUnion": { + "description": "evolvingUnion demonstrates how to phase in new values into discriminated union", + "default": {}, + "$ref": "#/definitions/io.openshift.example.v1.EvolvingUnion" + }, + "immutableField": { + "description": "immutableField is a field that is immutable once the object has been created. It is required at all times.", + "type": "string", + "default": "" + }, + "nonZeroDefault": { + "description": "nonZeroDefault is a demonstration of creating an integer field that has a non zero default. It required two default tags (one for CRD generation, one for client generation) and must have `omitempty` and be optional. A minimum value is added to demonstrate that a zero value would not be accepted.", + "type": "integer", + "format": "int32", + "default": 8 + }, + "optionalImmutableField": { + "description": "optionalImmutableField is a field that is immutable once set. It is optional but may not be changed once set.", + "type": "string", + "default": "" + }, + "set": { + "description": "set demonstrates how to define and validate set of strings", + "type": "array", + "items": { + "type": "string", + "default": "" } + }, + "stableField": { + "description": "stableField is a field that is present on default clusters and on tech preview clusters\n\nIf empty, the platform will choose a good default, which may change over time without notice.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "example.openshift.io", "Version": "v1", - "Kind": "OperatorHubSpec", + "Kind": "StableConfigTypeSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.OperatorHubStatus": { - "description": "OperatorHubStatus defines the observed state of OperatorHub. The current state of the default hub sources will always be reflected here.", + "io.openshift.example.v1.StableConfigTypeStatus": { + "description": "StableConfigTypeStatus defines the observed status of the StableConfigType.", "type": "object", "properties": { - "sources": { - "description": "sources encapsulates the result of applying the configuration for each hub source", + "conditions": { + "description": "Represents the observations of a foo's current state. Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\"", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.HubSourceStatus" - } - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "OperatorHubStatus", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.OvirtPlatformLoadBalancer": { - "description": "OvirtPlatformLoadBalancer defines the load balancer used by the cluster on Ovirt platform.", - "type": "object", - "properties": { - "type": { - "description": "type defines the type of load balancer used by the cluster on Ovirt platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", - "type": "string", - "default": "OpenShiftManagedDefault" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + }, + "x-kubernetes-list-map-keys": [ + "type" + ], + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "immutableField": { + "description": "immutableField is a field that is immutable once the object has been created. It is required at all times.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "OvirtPlatformLoadBalancer", - "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": {} - } - ] - }, - "io.openshift.config.v1.OvirtPlatformSpec": { - "description": "OvirtPlatformSpec holds the desired state of the oVirt infrastructure provider. This only includes fields that can be modified in the cluster.", - "type": "object", - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", + "Group": "example.openshift.io", "Version": "v1", - "Kind": "OvirtPlatformSpec", + "Kind": "StableConfigTypeStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.OvirtPlatformStatus": { - "description": "OvirtPlatformStatus holds the current status of the oVirt infrastructure provider.", + "io.openshift.example.v1alpha1.NotStableConfigType": { + "description": "NotStableConfigType is a stable config type that is TechPreviewNoUpgrade only.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", - "required": [ - "apiServerInternalIPs", - "ingressIPs" - ], "properties": { - "apiServerInternalIP": { - "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, - "apiServerInternalIPs": { - "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "ingressIP": { - "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, - "ingressIPs": { - "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "metadata": { + "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "loadBalancer": { - "description": "loadBalancer defines how the load balancer used by the cluster is configured.", - "default": { - "type": "OpenShiftManagedDefault" - }, - "$ref": "#/definitions/io.openshift.config.v1.OvirtPlatformLoadBalancer" + "spec": { + "description": "spec is the specification of the desired behavior of the NotStableConfigType.", + "default": {}, + "$ref": "#/definitions/io.openshift.example.v1alpha1.NotStableConfigTypeSpec" }, - "nodeDNSIP": { - "description": "deprecated: as of 4.6, this field is no longer set or honored. It will be removed in a future release.", - "type": "string" + "status": { + "description": "status is the most recently observed status of the NotStableConfigType.", + "default": {}, + "$ref": "#/definitions/io.openshift.example.v1alpha1.NotStableConfigTypeStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "OvirtPlatformStatus", - "Scope": "Namespaced" + "Type": "object", + "Group": "example.openshift.io", + "Version": "v1alpha1", + "Kind": "NotStableConfigType", + "Scope": "Clustered" } }, - "io.openshift.config.v1.PlatformSpec": { - "description": "PlatformSpec holds the desired state specific to the underlying infrastructure provider of the current cluster. Since these are used at spec-level for the underlying cluster, it is supposed that only one of the spec structs is set.", + "io.openshift.example.v1alpha1.NotStableConfigTypeList": { + "description": "NotStableConfigTypeList contains a list of NotStableConfigTypes.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", "type": "object", "required": [ - "type" + "items" ], "properties": { - "alibabaCloud": { - "description": "AlibabaCloud contains settings specific to the Alibaba Cloud infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.AlibabaCloudPlatformSpec" - }, - "aws": { - "description": "AWS contains settings specific to the Amazon Web Services infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.AWSPlatformSpec" - }, - "azure": { - "description": "Azure contains settings specific to the Azure infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.AzurePlatformSpec" - }, - "baremetal": { - "description": "BareMetal contains settings specific to the BareMetal platform.", - "$ref": "#/definitions/io.openshift.config.v1.BareMetalPlatformSpec" - }, - "equinixMetal": { - "description": "EquinixMetal contains settings specific to the Equinix Metal infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.EquinixMetalPlatformSpec" - }, - "external": { - "description": "ExternalPlatformType represents generic infrastructure provider. Platform-specific components should be supplemented separately.", - "$ref": "#/definitions/io.openshift.config.v1.ExternalPlatformSpec" - }, - "gcp": { - "description": "GCP contains settings specific to the Google Cloud Platform infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.GCPPlatformSpec" - }, - "ibmcloud": { - "description": "IBMCloud contains settings specific to the IBMCloud infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.IBMCloudPlatformSpec" - }, - "kubevirt": { - "description": "Kubevirt contains settings specific to the kubevirt infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.KubevirtPlatformSpec" - }, - "nutanix": { - "description": "Nutanix contains settings specific to the Nutanix infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.NutanixPlatformSpec" - }, - "openstack": { - "description": "OpenStack contains settings specific to the OpenStack infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.OpenStackPlatformSpec" - }, - "ovirt": { - "description": "Ovirt contains settings specific to the oVirt infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.OvirtPlatformSpec" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "powervs": { - "description": "PowerVS contains settings specific to the IBM Power Systems Virtual Servers infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.PowerVSPlatformSpec" + "items": { + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.example.v1alpha1.NotStableConfigType" + } }, - "type": { - "description": "type is the underlying infrastructure provider for the cluster. This value controls whether infrastructure automation such as service load balancers, dynamic volume provisioning, machine creation and deletion, and other integrations are enabled. If None, no infrastructure automation is enabled. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"KubeVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "vsphere": { - "description": "VSphere contains settings specific to the VSphere infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformSpec" + "metadata": { + "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "PlatformSpec", + "Type": "list", + "Group": "example.openshift.io", + "Version": "v1alpha1", + "Kind": "NotStableConfigTypeList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.PlatformStatus": { - "description": "PlatformStatus holds the current status specific to the underlying infrastructure provider of the current cluster. Since these are used at status-level for the underlying cluster, it is supposed that only one of the status structs is set.", + "io.openshift.example.v1alpha1.NotStableConfigTypeSpec": { + "description": "NotStableConfigTypeSpec is the desired state", "type": "object", "required": [ - "type" + "newField" ], "properties": { - "alibabaCloud": { - "description": "AlibabaCloud contains settings specific to the Alibaba Cloud infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.AlibabaCloudPlatformStatus" - }, - "aws": { - "description": "AWS contains settings specific to the Amazon Web Services infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.AWSPlatformStatus" - }, - "azure": { - "description": "Azure contains settings specific to the Azure infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.AzurePlatformStatus" - }, - "baremetal": { - "description": "BareMetal contains settings specific to the BareMetal platform.", - "$ref": "#/definitions/io.openshift.config.v1.BareMetalPlatformStatus" - }, - "equinixMetal": { - "description": "EquinixMetal contains settings specific to the Equinix Metal infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.EquinixMetalPlatformStatus" - }, - "external": { - "description": "External contains settings specific to the generic External infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.ExternalPlatformStatus" - }, - "gcp": { - "description": "GCP contains settings specific to the Google Cloud Platform infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.GCPPlatformStatus" - }, - "ibmcloud": { - "description": "IBMCloud contains settings specific to the IBMCloud infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.IBMCloudPlatformStatus" - }, - "kubevirt": { - "description": "Kubevirt contains settings specific to the kubevirt infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.KubevirtPlatformStatus" - }, - "nutanix": { - "description": "Nutanix contains settings specific to the Nutanix infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.NutanixPlatformStatus" - }, - "openstack": { - "description": "OpenStack contains settings specific to the OpenStack infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.OpenStackPlatformStatus" - }, - "ovirt": { - "description": "Ovirt contains settings specific to the oVirt infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.OvirtPlatformStatus" - }, - "powervs": { - "description": "PowerVS contains settings specific to the Power Systems Virtual Servers infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.PowerVSPlatformStatus" - }, - "type": { - "description": "type is the underlying infrastructure provider for the cluster. This value controls whether infrastructure automation such as service load balancers, dynamic volume provisioning, machine creation and deletion, and other integrations are enabled. If None, no infrastructure automation is enabled. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\", \"OpenStack\", \"VSphere\", \"oVirt\", \"EquinixMetal\", \"PowerVS\", \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components may not support all platforms, and must handle unrecognized platforms as None if they do not support that platform.\n\nThis value will be synced with to the `status.platform` and `status.platformStatus.type`. Currently this value cannot be changed once set.", + "newField": { + "description": "newField is a field that is tech preview, but because the entire type is gated, there is no marker on the field.", "type": "string", "default": "" - }, - "vsphere": { - "description": "VSphere contains settings specific to the VSphere infrastructure provider.", - "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformStatus" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "PlatformStatus", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.PowerVSPlatformSpec": { - "description": "PowerVSPlatformSpec holds the desired state of the IBM Power Systems Virtual Servers infrastructure provider. This only includes fields that can be modified in the cluster.", - "type": "object", - "properties": { - "serviceEndpoints": { - "description": "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of a Power VS service.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.PowerVSServiceEndpoint" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "PowerVSPlatformSpec", + "Group": "example.openshift.io", + "Version": "v1alpha1", + "Kind": "NotStableConfigTypeSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.PowerVSPlatformStatus": { - "description": "PowerVSPlatformStatus holds the current status of the IBM Power Systems Virtual Servers infrastrucutre provider.", + "io.openshift.example.v1alpha1.NotStableConfigTypeStatus": { + "description": "NotStableConfigTypeStatus defines the observed status of the NotStableConfigType.", "type": "object", - "required": [ - "region", - "zone" - ], "properties": { - "cisInstanceCRN": { - "description": "CISInstanceCRN is the CRN of the Cloud Internet Services instance managing the DNS zone for the cluster's base domain", - "type": "string" - }, - "dnsInstanceCRN": { - "description": "DNSInstanceCRN is the CRN of the DNS Services instance managing the DNS zone for the cluster's base domain", - "type": "string" - }, - "region": { - "description": "region holds the default Power VS region for new Power VS resources created by the cluster.", - "type": "string", - "default": "" - }, - "resourceGroup": { - "description": "resourceGroup is the resource group name for new IBMCloud resources created for a cluster. The resource group specified here will be used by cluster-image-registry-operator to set up a COS Instance in IBMCloud for the cluster registry. More about resource groups can be found here: https://cloud.ibm.com/docs/account?topic=account-rgs. When omitted, the image registry operator won't be able to configure storage, which results in the image registry cluster operator not being in an available state.", - "type": "string", - "default": "" - }, - "serviceEndpoints": { - "description": "serviceEndpoints is a list of custom endpoints which will override the default service endpoints of a Power VS service.", + "conditions": { + "description": "Represents the observations of a foo's current state. Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\"", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.PowerVSServiceEndpoint" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" }, "x-kubernetes-list-map-keys": [ - "name" + "type" ], - "x-kubernetes-list-type": "map" - }, - "zone": { - "description": "zone holds the default zone for the new Power VS resources created by the cluster. Note: Currently only single-zone OCP clusters are supported", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "PowerVSPlatformStatus", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.PowerVSServiceEndpoint": { - "description": "PowervsServiceEndpoint stores the configuration of a custom url to override existing defaults of PowerVS Services.", - "type": "object", - "required": [ - "name", - "url" - ], - "properties": { - "name": { - "description": "name is the name of the Power VS service. Few of the services are IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api ResourceController - https://cloud.ibm.com/apidocs/resource-controller/resource-controller Power Cloud - https://cloud.ibm.com/apidocs/power-cloud", - "type": "string", - "default": "" - }, - "url": { - "description": "url is fully qualified URI with scheme https, that overrides the default generated endpoint for a client. This must be provided and cannot be empty.", - "type": "string", - "default": "" + "x-kubernetes-list-type": "map", + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "PowerVSServiceEndpoint", + "Group": "example.openshift.io", + "Version": "v1alpha1", + "Kind": "NotStableConfigTypeStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.PrefixedClaimMapping": { + "io.openshift.helm.v1beta1.ConnectionConfig": { "type": "object", "required": [ - "claim", - "prefix" + "url" ], "properties": { - "claim": { - "description": "Claim is a JWT token claim to be used in the mapping", - "type": "string", - "default": "" + "ca": { + "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca-bundle.crt\" is used to locate the data. If empty, the default system roots are used. The namespace for this config map is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" }, - "prefix": { - "description": "Prefix is a string to prefix the value from the token in the result of the claim mapping.\n\nBy default, no prefixing occurs.\n\nExample: if `prefix` is set to \"myoidc:\"\" and the `claim` in JWT contains an array of strings \"a\", \"b\" and \"c\", the mapping will result in an array of string \"myoidc:a\", \"myoidc:b\" and \"myoidc:c\".", + "tlsClientConfig": { + "description": "tlsClientConfig is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate and private key to present when connecting to the server. The key \"tls.crt\" is used to locate the client certificate. The key \"tls.key\" is used to locate the private key. The namespace for this secret is openshift-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + }, + "url": { + "description": "Chart repository URL", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "PrefixedClaimMapping", + "Group": "helm.openshift.io", + "Version": "v1beta1", + "Kind": "ConnectionConfig", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ProfileCustomizations": { - "description": "ProfileCustomizations contains various parameters for modifying the default behavior of certain profiles", + "io.openshift.helm.v1beta1.ConnectionConfigNamespaceScoped": { "type": "object", + "required": [ + "url" + ], "properties": { - "dynamicResourceAllocation": { - "description": "dynamicResourceAllocation allows to enable or disable dynamic resource allocation within the scheduler. Dynamic resource allocation is an API for requesting and sharing resources between pods and containers inside a pod. Third-party resource drivers are responsible for tracking and allocating resources. Different kinds of resources support arbitrary parameters for defining requirements and initialization. Valid values are Enabled, Disabled and omitted. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is Disabled.", + "basicAuthConfig": { + "description": "basicAuthConfig is an optional reference to a secret by name that contains the basic authentication credentials to present when connecting to the server. The key \"username\" is used locate the username. The key \"password\" is used to locate the password. The namespace for this secret must be same as the namespace where the project helm chart repository is getting instantiated.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + }, + "ca": { + "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca-bundle.crt\" is used to locate the data. If empty, the default system roots are used. The namespace for this configmap must be same as the namespace where the project helm chart repository is getting instantiated.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" + }, + "tlsClientConfig": { + "description": "tlsClientConfig is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate and private key to present when connecting to the server. The key \"tls.crt\" is used to locate the client certificate. The key \"tls.key\" is used to locate the private key. The namespace for this secret must be same as the namespace where the project helm chart repository is getting instantiated.", + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + }, + "url": { + "description": "Chart repository URL", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "ProfileCustomizations", + "Group": "helm.openshift.io", + "Version": "v1beta1", + "Kind": "ConnectionConfigNamespaceScoped", "Scope": "Namespaced" } }, - "io.openshift.config.v1.Project": { - "description": "Project holds cluster-wide information about Project. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.helm.v1beta1.HelmChartRepository": { + "description": "HelmChartRepository holds cluster-wide configuration for proxied Helm chart repository\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "spec" @@ -71840,24 +77789,24 @@ "spec": { "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ProjectSpec" + "$ref": "#/definitions/io.openshift.helm.v1beta1.HelmChartRepositorySpec" }, "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", + "description": "Observed status of the repository within the cluster..", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ProjectStatus" + "$ref": "#/definitions/io.openshift.helm.v1beta1.HelmChartRepositoryStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "Project", + "Group": "helm.openshift.io", + "Version": "v1beta1", + "Kind": "HelmChartRepository", "Scope": "Clustered" } }, - "io.openshift.config.v1.ProjectList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.helm.v1beta1.HelmChartRepositoryList": { + "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "metadata", @@ -71872,7 +77821,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.Project" + "$ref": "#/definitions/io.openshift.helm.v1beta1.HelmChartRepository" } }, "kind": { @@ -71887,68 +77836,67 @@ }, "x-fabric8-info": { "Type": "list", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "ProjectList", + "Group": "helm.openshift.io", + "Version": "v1beta1", + "Kind": "HelmChartRepositoryList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ProjectSpec": { - "description": "ProjectSpec holds the project creation configuration.", + "io.openshift.helm.v1beta1.HelmChartRepositorySpec": { + "description": "Helm chart repository exposed within the cluster", "type": "object", + "required": [ + "connectionConfig" + ], "properties": { - "projectRequestMessage": { - "description": "projectRequestMessage is the string presented to a user if they are unable to request a project via the projectrequest api endpoint", - "type": "string", - "default": "" - }, - "projectRequestTemplate": { - "description": "projectRequestTemplate is the template to use for creating projects in response to projectrequest. This must point to a template in 'openshift-config' namespace. It is optional. If it is not specified, a default template is used.", + "connectionConfig": { + "description": "Required configuration for connecting to the chart repo", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.TemplateReference" + "$ref": "#/definitions/io.openshift.helm.v1beta1.ConnectionConfig" + }, + "description": { + "description": "Optional human readable repository description, it can be used by UI for displaying purposes", + "type": "string" + }, + "disabled": { + "description": "If set to true, disable the repo usage in the cluster/namespace", + "type": "boolean" + }, + "name": { + "description": "Optional associated human readable repository name, it can be used by UI for displaying purposes", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "ProjectSpec", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.ProjectStatus": { - "type": "object", - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "ProjectStatus", + "Group": "helm.openshift.io", + "Version": "v1beta1", + "Kind": "HelmChartRepositorySpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.PromQLClusterCondition": { - "description": "PromQLClusterCondition represents a cluster condition based on PromQL.", + "io.openshift.helm.v1beta1.HelmChartRepositoryStatus": { "type": "object", - "required": [ - "promql" - ], "properties": { - "promql": { - "description": "PromQL is a PromQL query classifying clusters. This query query should return a 1 in the match case and a 0 in the does-not-match case. Queries which return no time series, or which return values besides 0 or 1, are evaluation failures.", - "type": "string", - "default": "" + "conditions": { + "description": "conditions is a list of conditions and their statuses", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "PromQLClusterCondition", + "Group": "helm.openshift.io", + "Version": "v1beta1", + "Kind": "HelmChartRepositoryStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.Proxy": { - "description": "Proxy holds cluster-wide information on how to configure default proxies for the cluster. The canonical name is `cluster`\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.helm.v1beta1.ProjectHelmChartRepository": { + "description": "ProjectHelmChartRepository holds namespace-wide configuration for proxied Helm chart repository\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "spec" @@ -71968,26 +77916,26 @@ "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "Spec holds user-settable values for the proxy configuration", + "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ProxySpec" + "$ref": "#/definitions/io.openshift.helm.v1beta1.ProjectHelmChartRepositorySpec" }, "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", + "description": "Observed status of the repository within the namespace..", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ProxyStatus" + "$ref": "#/definitions/io.openshift.helm.v1beta1.HelmChartRepositoryStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "Proxy", - "Scope": "Clustered" + "Group": "helm.openshift.io", + "Version": "v1beta1", + "Kind": "ProjectHelmChartRepository", + "Scope": "Namespaced" } }, - "io.openshift.config.v1.ProxyList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.helm.v1beta1.ProjectHelmChartRepositoryList": { + "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", "type": "object", "required": [ "metadata", @@ -72002,7 +77950,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.Proxy" + "$ref": "#/definitions/io.openshift.helm.v1beta1.ProjectHelmChartRepository" } }, "kind": { @@ -72017,386 +77965,528 @@ }, "x-fabric8-info": { "Type": "list", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "ProxyList", + "Group": "helm.openshift.io", + "Version": "v1beta1", + "Kind": "ProjectHelmChartRepositoryList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ProxySpec": { - "description": "ProxySpec contains cluster proxy creation configuration.", + "io.openshift.helm.v1beta1.ProjectHelmChartRepositorySpec": { + "description": "Project Helm chart repository exposed within a namespace", "type": "object", + "required": [ + "connectionConfig" + ], "properties": { - "httpProxy": { - "description": "httpProxy is the URL of the proxy for HTTP requests. Empty means unset and will not result in an env var.", - "type": "string" - }, - "httpsProxy": { - "description": "httpsProxy is the URL of the proxy for HTTPS requests. Empty means unset and will not result in an env var.", - "type": "string" + "connectionConfig": { + "description": "Required configuration for connecting to the chart repo", + "default": {}, + "$ref": "#/definitions/io.openshift.helm.v1beta1.ConnectionConfigNamespaceScoped" }, - "noProxy": { - "description": "noProxy is a comma-separated list of hostnames and/or CIDRs and/or IPs for which the proxy should not be used. Empty means unset and will not result in an env var.", + "description": { + "description": "Optional human readable repository description, it can be used by UI for displaying purposes", "type": "string" }, - "readinessEndpoints": { - "description": "readinessEndpoints is a list of endpoints used to verify readiness of the proxy.", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "disabled": { + "description": "If set to true, disable the repo usage in the namespace", + "type": "boolean" }, - "trustedCA": { - "description": "trustedCA is a reference to a ConfigMap containing a CA certificate bundle. The trustedCA field should only be consumed by a proxy validator. The validator is responsible for reading the certificate bundle from the required key \"ca-bundle.crt\", merging it with the system default trust bundle, and writing the merged trust bundle to a ConfigMap named \"trusted-ca-bundle\" in the \"openshift-config-managed\" namespace. Clients that expect to make proxy connections must use the trusted-ca-bundle for all HTTPS requests to the proxy, and may use the trusted-ca-bundle for non-proxy HTTPS requests as well.\n\nThe namespace for the ConfigMap referenced by trustedCA is \"openshift-config\". Here is an example ConfigMap (in yaml):\n\napiVersion: v1 kind: ConfigMap metadata:\n name: user-ca-bundle\n namespace: openshift-config\n data:\n ca-bundle.crt: |\n -----BEGIN CERTIFICATE-----\n Custom CA certificate bundle.\n -----END CERTIFICATE-----", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" + "name": { + "description": "Optional associated human readable repository name, it can be used by UI for displaying purposes", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "ProxySpec", + "Group": "helm.openshift.io", + "Version": "v1beta1", + "Kind": "ProjectHelmChartRepositorySpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ProxyStatus": { - "description": "ProxyStatus shows current known state of the cluster proxy.", + "io.openshift.hive.v1.AWSAssociatedVPC": { + "description": "AWSAssociatedVPC defines a VPC that should be able to resolve the DNS addresses setup for Private Link.", "type": "object", + "required": [ + "vpcID", + "region" + ], "properties": { - "httpProxy": { - "description": "httpProxy is the URL of the proxy for HTTP requests.", - "type": "string" + "credentialsSecretRef": { + "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with AWS for associating the VPC with the Private HostedZone created for PrivateLink. When not provided, the common credentials for the controller should be used.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "httpsProxy": { - "description": "httpsProxy is the URL of the proxy for HTTPS requests.", - "type": "string" + "region": { + "type": "string", + "default": "" }, - "noProxy": { - "description": "noProxy is a comma-separated list of hostnames and/or CIDRs for which the proxy should not be used.", - "type": "string" + "vpcID": { + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ProxyStatus", + "Kind": "AWSAssociatedVPC", "Scope": "Namespaced" } }, - "io.openshift.config.v1.RegistryLocation": { - "description": "RegistryLocation contains a location of the registry specified by the registry domain name. The domain name might include wildcards, like '*' or '??'.", + "io.openshift.hive.v1.AWSClusterDeprovision": { + "description": "AWSClusterDeprovision contains AWS-specific configuration for a ClusterDeprovision", "type": "object", "required": [ - "domainName" + "region" ], "properties": { - "domainName": { - "description": "domainName specifies a domain name for the registry In case the registry use non-standard (80 or 443) port, the port should be included in the domain name as well.", + "credentialsAssumeRole": { + "description": "CredentialsAssumeRole refers to the IAM role that must be assumed to obtain AWS account access for deprovisioning the cluster.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.AssumeRole" + }, + "credentialsSecretRef": { + "description": "CredentialsSecretRef is the AWS account credentials to use for deprovisioning the cluster", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "hostedZoneRole": { + "description": "HostedZoneRole is the role to assume when performing operations on a hosted zone owned by another account.", + "type": "string" + }, + "region": { + "description": "Region is the AWS region for this deprovisioning", "type": "string", "default": "" - }, - "insecure": { - "description": "insecure indicates whether the registry is secure (https) or insecure (http) By default (if not specified) the registry is assumed as secure.", - "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "RegistryLocation", + "Kind": "AWSClusterDeprovision", "Scope": "Namespaced" } }, - "io.openshift.config.v1.RegistrySources": { - "description": "RegistrySources holds cluster-wide information about how to handle the registries config.", + "io.openshift.hive.v1.AWSDNSZoneSpec": { + "description": "AWSDNSZoneSpec contains AWS-specific DNSZone specifications", "type": "object", "properties": { - "allowedRegistries": { - "description": "allowedRegistries are the only registries permitted for image pull and push actions. All other registries are denied.\n\nOnly one of BlockedRegistries or AllowedRegistries may be set.", + "additionalTags": { + "description": "AdditionalTags is a set of additional tags to set on the DNS hosted zone. In addition to these tags,the DNS Zone controller will set a hive.openhsift.io/hostedzone tag identifying the HostedZone record that it belongs to.", "type": "array", "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.AWSResourceTag" + } }, - "blockedRegistries": { - "description": "blockedRegistries cannot be used for image pull and push actions. All other registries are permitted.\n\nOnly one of BlockedRegistries or AllowedRegistries may be set.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "credentialsAssumeRole": { + "description": "CredentialsAssumeRole refers to the IAM role that must be assumed to obtain AWS account access for the DNS CRUD operations.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.AssumeRole" }, - "containerRuntimeSearchRegistries": { - "description": "containerRuntimeSearchRegistries are registries that will be searched when pulling images that do not have fully qualified domains in their pull specs. Registries will be searched in the order provided in the list. Note: this search list only works with the container runtime, i.e CRI-O. Will NOT work with builds or imagestream imports.", + "credentialsSecretRef": { + "description": "CredentialsSecretRef contains a reference to a secret that contains AWS credentials for CRUD operations", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "region": { + "description": "Region is the AWS region to use for route53 operations. This defaults to us-east-1. For AWS China, use cn-northwest-1.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "AWSDNSZoneSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.AWSDNSZoneStatus": { + "description": "AWSDNSZoneStatus contains status information specific to AWS DNS zones", + "type": "object", + "properties": { + "zoneID": { + "description": "ZoneID is the ID of the zone in AWS", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "AWSDNSZoneStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.AWSPrivateLinkConfig": { + "description": "AWSPrivateLinkConfig defines the configuration for the aws-private-link controller.", + "type": "object", + "required": [ + "credentialsSecretRef" + ], + "properties": { + "associatedVPCs": { + "description": "AssociatedVPCs is the list of VPCs that should be able to resolve the DNS addresses setup for Private Link. This allows clients in VPC to resolve the AWS PrivateLink address using AWS's default DNS resolver for Private Route53 Hosted Zones.\n\nThis list should at minimum include the VPC where the current Hive controller is running.", "type": "array", "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.AWSAssociatedVPC" + } }, - "insecureRegistries": { - "description": "insecureRegistries are registries which do not have a valid TLS certificates or only support HTTP connections.", + "credentialsSecretRef": { + "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with AWS for creating the resources for AWS PrivateLink.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "dnsRecordType": { + "description": "DNSRecordType defines what type of DNS record should be created in Private Hosted Zone for the customer cluster's API endpoint (which is the VPC Endpoint's regional DNS name).", + "type": "string" + }, + "endpointVPCInventory": { + "description": "EndpointVPCInventory is a list of VPCs and the corresponding subnets in various AWS regions. The controller uses this list to choose a VPC for creating AWS VPC Endpoints. Since the VPC Endpoints must be in the same region as the ClusterDeployment, we must have VPCs in that region to be able to setup Private Link.", "type": "array", "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.AWSPrivateLinkInventory" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "RegistrySources", + "Kind": "AWSPrivateLinkConfig", "Scope": "Namespaced" } }, - "io.openshift.config.v1.Release": { - "description": "Release represents an OpenShift release image and associated metadata.", + "io.openshift.hive.v1.AWSPrivateLinkInventory": { + "description": "AWSPrivateLinkInventory is a VPC and its corresponding subnets in an AWS region. This VPC will be used to create an AWS VPC Endpoint whenever there is a VPC Endpoint Service created for a ClusterDeployment.", "type": "object", "required": [ - "version", - "image" + "vpcID", + "region", + "subnets" ], "properties": { - "channels": { - "description": "channels is the set of Cincinnati channels to which the release currently belongs.", + "region": { + "type": "string", + "default": "" + }, + "subnets": { "type": "array", "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.AWSPrivateLinkSubnet" + } }, - "image": { - "description": "image is a container image location that contains the update. When this field is part of spec, image is optional if version is specified and the availableUpdates field contains a matching version.", + "vpcID": { + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "AWSPrivateLinkInventory", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.AWSPrivateLinkSubnet": { + "description": "AWSPrivateLinkSubnet defines a subnet in the an AWS VPC.", + "type": "object", + "required": [ + "subnetID", + "availabilityZone" + ], + "properties": { + "availabilityZone": { "type": "string", "default": "" }, - "url": { - "description": "url contains information about this release. This URL is set by the 'url' metadata property on a release or the metadata returned by the update API and should be displayed as a link in user interfaces. The URL field may not be set for test or nightly releases.", - "type": "string" + "subnetID": { + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "AWSPrivateLinkSubnet", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.AWSPrivateLinkVPC": { + "description": "AWSPrivateLinkVPC defines an AWS VPC in a region.", + "type": "object", + "required": [ + "vpcID", + "region" + ], + "properties": { + "region": { + "type": "string", + "default": "" }, - "version": { - "description": "version is a semantic version identifying the update version. When this field is part of spec, version is optional if image is specified.", + "vpcID": { "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "Release", + "Kind": "AWSPrivateLinkVPC", "Scope": "Namespaced" } }, - "io.openshift.config.v1.RemoteConnectionInfo": { - "description": "RemoteConnectionInfo holds information necessary for establishing a remote connection", + "io.openshift.hive.v1.AWSResourceTag": { + "description": "AWSResourceTag represents a tag that is applied to an AWS cloud resource", "type": "object", "required": [ - "url", - "ca", - "certFile", - "keyFile" + "key", + "value" ], "properties": { - "ca": { - "description": "CA is the CA for verifying TLS connections", + "key": { + "description": "Key is the key for the tag", "type": "string", "default": "" }, - "certFile": { - "description": "CertFile is a file containing a PEM-encoded certificate", + "value": { + "description": "Value is the value for the tag", "type": "string", "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "AWSResourceTag", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.AWSServiceProviderCredentials": { + "description": "AWSServiceProviderCredentials is used to configure credentials related to being a service provider on AWS.", + "type": "object", + "properties": { + "credentialsSecretRef": { + "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with AWS to become the Service Provider. Being a Service Provider allows the controllers to assume the role in customer AWS accounts to manager clusters.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "AWSServiceProviderCredentials", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.ArgoCDConfig": { + "description": "ArgoCDConfig contains settings for integration with ArgoCD.", + "type": "object", + "required": [ + "enabled" + ], + "properties": { + "enabled": { + "description": "Enabled dictates if ArgoCD gitops integration is enabled. If not specified, the default is disabled.", + "type": "boolean", + "default": false }, - "keyFile": { - "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "namespace": { + "description": "Namespace specifies the namespace where ArgoCD is installed. Used for the location of cluster secrets. Defaults to \"argocd\"", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ArgoCDConfig", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.AzureClusterDeprovision": { + "description": "AzureClusterDeprovision contains Azure-specific configuration for a ClusterDeprovision", + "type": "object", + "properties": { + "cloudName": { + "description": "cloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK with the appropriate Azure API endpoints. If empty, the value is equal to \"AzurePublicCloud\".", + "type": "string" + }, + "credentialsSecretRef": { + "description": "CredentialsSecretRef is the Azure account credentials to use for deprovisioning the cluster", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "resourceGroupName": { + "description": "ResourceGroupName is the name of the resource group where the cluster was installed. Required for new deprovisions (schema notwithstanding).", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "AzureClusterDeprovision", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.AzureDNSZoneSpec": { + "description": "AzureDNSZoneSpec contains Azure-specific DNSZone specifications", + "type": "object", + "required": [ + "credentialsSecretRef", + "resourceGroupName" + ], + "properties": { + "cloudName": { + "description": "CloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK with the appropriate Azure API endpoints. If empty, the value is equal to \"AzurePublicCloud\".", + "type": "string" + }, + "credentialsSecretRef": { + "description": "CredentialsSecretRef references a secret that will be used to authenticate with Azure CloudDNS. It will need permission to create and manage CloudDNS Hosted Zones. Secret should have a key named 'osServicePrincipal.json'. The credentials must specify the project to use.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "resourceGroupName": { + "description": "ResourceGroupName specifies the Azure resource group in which the Hosted Zone should be created.", "type": "string", "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "AzureDNSZoneSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.AzureDNSZoneStatus": { + "description": "AzureDNSZoneStatus contains status information specific to Azure DNS zones", + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "AzureDNSZoneStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.BackupConfig": { + "description": "BackupConfig contains settings for the Velero backup integration.", + "type": "object", + "properties": { + "minBackupPeriodSeconds": { + "description": "MinBackupPeriodSeconds specifies that a minimum of MinBackupPeriodSeconds will occur in between each backup. This is used to rate limit backups. This potentially batches together multiple changes into 1 backup. No backups will be lost as changes that happen during this interval are queued up and will result in a backup happening once the interval has been completed.", + "type": "integer", + "format": "int32" }, - "url": { - "description": "URL is the remote URL to connect to", - "type": "string", - "default": "" + "velero": { + "description": "Velero specifies configuration for the Velero backup integration.", + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.VeleroBackupConfig" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "RemoteConnectionInfo", + "Kind": "BackupConfig", "Scope": "Namespaced" } }, - "io.openshift.config.v1.RepositoryDigestMirrors": { - "description": "RepositoryDigestMirrors holds cluster-wide information about how to handle mirrors in the registries config.", + "io.openshift.hive.v1.BackupReference": { + "description": "BackupReference is a reference to a backup resource", "type": "object", "required": [ - "source" + "name", + "namespace" ], "properties": { - "allowMirrorByTags": { - "description": "allowMirrorByTags if true, the mirrors can be used to pull the images that are referenced by their tags. Default is false, the mirrors only work when pulling the images that are referenced by their digests. Pulling images by tag can potentially yield different images, depending on which endpoint we pull from. Forcing digest-pulls for mirrors avoids that issue.", - "type": "boolean" - }, - "mirrors": { - "description": "mirrors is zero or more repositories that may also contain the same images. If the \"mirrors\" is not specified, the image will continue to be pulled from the specified repository in the pull spec. No mirror will be configured. The order of mirrors in this list is treated as the user's desired priority, while source is by default considered lower priority than all mirrors. Other cluster configuration, including (but not limited to) other repositoryDigestMirrors objects, may impact the exact order mirrors are contacted in, or some mirrors may be contacted in parallel, so this should be considered a preference rather than a guarantee of ordering.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "name": { + "type": "string", + "default": "" }, - "source": { - "description": "source is the repository that users refer to, e.g. in image pull specifications.", + "namespace": { "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "RepositoryDigestMirrors", + "Kind": "BackupReference", "Scope": "Namespaced" } }, - "io.openshift.config.v1.RequestHeaderIdentityProvider": { - "description": "RequestHeaderIdentityProvider provides identities for users authenticating using request header credentials", + "io.openshift.hive.v1.CertificateBundleSpec": { + "description": "CertificateBundleSpec specifies a certificate bundle associated with a cluster deployment", "type": "object", "required": [ - "loginURL", - "challengeURL", - "ca", - "headers", - "preferredUsernameHeaders", - "nameHeaders", - "emailHeaders" + "name", + "certificateSecretRef" ], "properties": { - "ca": { - "description": "ca is a required reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. Specifically, it allows verification of incoming requests to prevent header spoofing. The key \"ca.crt\" is used to locate the data. If the config map or expected key is not found, the identity provider is not honored. If the specified ca data is not valid, the identity provider is not honored. The namespace for this config map is openshift-config.", + "certificateSecretRef": { + "description": "CertificateSecretRef is the reference to the secret that contains the certificate bundle. If the certificate bundle is to be generated, it will be generated with the name in this reference. Otherwise, it is expected that the secret should exist in the same namespace as the ClusterDeployment", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" - }, - "challengeURL": { - "description": "challengeURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be redirected here. ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}\nRequired when challenge is set to true.", - "type": "string", - "default": "" - }, - "clientCommonNames": { - "description": "clientCommonNames is an optional list of common names to require a match from. If empty, any client certificate validated against the clientCA bundle is considered authoritative.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "emailHeaders": { - "description": "emailHeaders is the set of headers to check for the email address", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "headers": { - "description": "headers is the set of headers to check for identity information", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "generate": { + "description": "Generate indicates whether this bundle should have real certificates generated for it.", + "type": "boolean" }, - "loginURL": { - "description": "loginURL is a URL to redirect unauthenticated /authorize requests to Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here ${url} is replaced with the current URL, escaped to be safe in a query parameter\n https://www.example.com/sso-login?then=${url}\n${query} is replaced with the current query string\n https://www.example.com/auth-proxy/oauth/authorize?${query}\nRequired when login is set to true.", + "name": { + "description": "Name is an identifier that must be unique within the bundle and must be referenced by an ingress or by the control plane serving certs", "type": "string", "default": "" - }, - "nameHeaders": { - "description": "nameHeaders is the set of headers to check for the display name", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "preferredUsernameHeaders": { - "description": "preferredUsernameHeaders is the set of headers to check for the preferred username", - "type": "array", - "items": { - "type": "string", - "default": "" - } } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "RequestHeaderIdentityProvider", + "Kind": "CertificateBundleSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.RequiredHSTSPolicy": { + "io.openshift.hive.v1.CertificateBundleStatus": { + "description": "CertificateBundleStatus specifies whether a certificate bundle was generated for this cluster deployment.", "type": "object", "required": [ - "domainPatterns", - "maxAge" + "name", + "generated" ], "properties": { - "domainPatterns": { - "description": "domainPatterns is a list of domains for which the desired HSTS annotations are required. If domainPatterns is specified and a route is created with a spec.host matching one of the domains, the route must specify the HSTS Policy components described in the matching RequiredHSTSPolicy.\n\nThe use of wildcards is allowed like this: *.foo.com matches everything under foo.com. foo.com only matches foo.com, so to cover foo.com and everything under it, you must specify *both*.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "includeSubDomainsPolicy": { - "description": "includeSubDomainsPolicy means the HSTS Policy should apply to any subdomains of the host's domain name. Thus, for the host bar.foo.com, if includeSubDomainsPolicy was set to RequireIncludeSubDomains: - the host app.bar.foo.com would inherit the HSTS Policy of bar.foo.com - the host bar.foo.com would inherit the HSTS Policy of bar.foo.com - the host foo.com would NOT inherit the HSTS Policy of bar.foo.com - the host def.foo.com would NOT inherit the HSTS Policy of bar.foo.com", - "type": "string" - }, - "maxAge": { - "description": "maxAge is the delta time range in seconds during which hosts are regarded as HSTS hosts. If set to 0, it negates the effect, and hosts are removed as HSTS hosts. If set to 0 and includeSubdomains is specified, all subdomains of the host are also removed as HSTS hosts. maxAge is a time-to-live value, and if this policy is not refreshed on a client, the HSTS policy will eventually expire on that client.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.MaxAgePolicy" - }, - "namespaceSelector": { - "description": "namespaceSelector specifies a label selector such that the policy applies only to those routes that are in namespaces with labels that match the selector, and are in one of the DomainPatterns. Defaults to the empty LabelSelector, which matches everything.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "generated": { + "description": "Generated indicates whether the certificate bundle was generated", + "type": "boolean", + "default": false }, - "preloadPolicy": { - "description": "preloadPolicy directs the client to include hosts in its host preload list so that it never needs to do an initial load to get the HSTS header (note that this is not defined in RFC 6797 and is therefore client implementation-dependent).", - "type": "string" + "name": { + "description": "Name of the certificate bundle", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "RequiredHSTSPolicy", + "Kind": "CertificateBundleStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.Scheduler": { - "description": "Scheduler holds cluster-wide config information to run the Kubernetes Scheduler and influence its placement decisions. The canonical name for this config is `cluster`.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.Checkpoint": { + "description": "Checkpoint is the Schema for the backup of Hive objects.", "type": "object", - "required": [ - "spec" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -72407,34 +78497,30 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SchedulerSpec" + "$ref": "#/definitions/io.openshift.hive.v1.CheckpointSpec" }, "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SchedulerStatus" + "$ref": "#/definitions/io.openshift.hive.v1.CheckpointStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "Scheduler", - "Scope": "Clustered" + "Kind": "Checkpoint", + "Scope": "Namespaced" } }, - "io.openshift.config.v1.SchedulerList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.CheckpointList": { + "description": "CheckpointList contains a list of Checkpoint", "type": "object", "required": [ - "metadata", "items" ], "properties": { @@ -72446,7 +78532,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.Scheduler" + "$ref": "#/definitions/io.openshift.hive.v1.Checkpoint" } }, "kind": { @@ -72454,371 +78540,315 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "SchedulerList", + "Kind": "CheckpointList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.SchedulerSpec": { + "io.openshift.hive.v1.CheckpointSpec": { + "description": "CheckpointSpec defines the metadata around the Hive objects state in the namespace at the time of the last backup.", "type": "object", + "required": [ + "lastBackupChecksum", + "lastBackupTime", + "lastBackupRef" + ], "properties": { - "defaultNodeSelector": { - "description": "defaultNodeSelector helps set the cluster-wide default node selector to restrict pod placement to specific nodes. This is applied to the pods created in all namespaces and creates an intersection with any existing nodeSelectors already set on a pod, additionally constraining that pod's selector. For example, defaultNodeSelector: \"type=user-node,region=east\" would set nodeSelector field in pod spec to \"type=user-node,region=east\" to all pods created in all namespaces. Namespaces having project-wide node selectors won't be impacted even if this field is set. This adds an annotation section to the namespace. For example, if a new namespace is created with node-selector='type=user-node,region=east', the annotation openshift.io/node-selector: type=user-node,region=east gets added to the project. When the openshift.io/node-selector annotation is set on the project the value is used in preference to the value we are setting for defaultNodeSelector field. For instance, openshift.io/node-selector: \"type=user-node,region=west\" means that the default of \"type=user-node,region=east\" set in defaultNodeSelector would not be applied.", - "type": "string" - }, - "mastersSchedulable": { - "description": "MastersSchedulable allows masters nodes to be schedulable. When this flag is turned on, all the master nodes in the cluster will be made schedulable, so that workload pods can run on them. The default value for this field is false, meaning none of the master nodes are schedulable. Important Note: Once the workload pods start running on the master nodes, extreme care must be taken to ensure that cluster-critical control plane components are not impacted. Please turn on this field after doing due diligence.", - "type": "boolean", - "default": false + "lastBackupChecksum": { + "description": "LastBackupChecksum is the checksum of all Hive objects in the namespace at the time of the last backup.", + "type": "string", + "default": "" }, - "policy": { - "description": "DEPRECATED: the scheduler Policy API has been deprecated and will be removed in a future release. policy is a reference to a ConfigMap containing scheduler policy which has user specified predicates and priorities. If this ConfigMap is not available scheduler will default to use DefaultAlgorithmProvider. The namespace for this configmap is openshift-config.", + "lastBackupRef": { + "description": "LastBackupRef is a reference to last backup object created", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" - }, - "profile": { - "description": "profile sets which scheduling profile should be set in order to configure scheduling decisions for new pods.\n\nValid values are \"LowNodeUtilization\", \"HighNodeUtilization\", \"NoScoring\" Defaults to \"LowNodeUtilization\"", - "type": "string" + "$ref": "#/definitions/io.openshift.hive.v1.BackupReference" }, - "profileCustomizations": { - "description": "profileCustomizations contains configuration for modifying the default behavior of existing scheduler profiles.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ProfileCustomizations" + "lastBackupTime": { + "description": "LastBackupTime is the last time we performed a backup of the namespace", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "SchedulerSpec", + "Kind": "CheckpointSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.SchedulerStatus": { + "io.openshift.hive.v1.CheckpointStatus": { + "description": "CheckpointStatus defines the observed state of Checkpoint", "type": "object", "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "SchedulerStatus", + "Kind": "CheckpointStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.SecretNameReference": { - "description": "SecretNameReference references a secret in a specific namespace. The namespace must be specified at the point of use.", + "io.openshift.hive.v1.ClusterClaim": { + "description": "ClusterClaim represents a claim to a cluster from a cluster pool.", "type": "object", "required": [ - "name" + "spec" ], "properties": { - "name": { - "description": "name is the metadata.name of the referenced secret", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterClaimSpec" + }, + "status": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterClaimStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", + "Type": "object", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "SecretNameReference", + "Kind": "ClusterClaim", "Scope": "Namespaced" } }, - "io.openshift.config.v1.ServingInfo": { - "description": "ServingInfo holds information about serving web pages", + "io.openshift.hive.v1.ClusterClaimCondition": { + "description": "ClusterClaimCondition contains details for the current condition of a cluster claim.", "type": "object", "required": [ - "bindAddress", - "bindNetwork", - "certFile", - "keyFile" + "type", + "status" ], "properties": { - "bindAddress": { - "description": "BindAddress is the ip:port to serve on", - "type": "string", - "default": "" - }, - "bindNetwork": { - "description": "BindNetwork is the type of network to bind to - defaults to \"tcp4\", accepts \"tcp\", \"tcp4\", and \"tcp6\"", - "type": "string", - "default": "" + "lastProbeTime": { + "description": "LastProbeTime is the last time we probed the condition.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "certFile": { - "description": "CertFile is a file containing a PEM-encoded certificate", - "type": "string", - "default": "" + "lastTransitionTime": { + "description": "LastTransitionTime is the last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "cipherSuites": { - "description": "CipherSuites contains an overridden list of ciphers for the server to support. Values must match cipher suite IDs from https://golang.org/pkg/crypto/tls/#pkg-constants", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "message": { + "description": "Message is a human-readable message indicating details about last transition.", + "type": "string" }, - "clientCA": { - "description": "ClientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates", + "reason": { + "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.", "type": "string" }, - "keyFile": { - "description": "KeyFile is a file containing a PEM-encoded private key for the certificate specified by CertFile", + "status": { + "description": "Status is the status of the condition.", "type": "string", "default": "" }, - "minTLSVersion": { - "description": "MinTLSVersion is the minimum TLS version supported. Values must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants", - "type": "string" - }, - "namedCertificates": { - "description": "NamedCertificates is a list of certificates to use to secure requests to specific hostnames", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.NamedCertificate" - } - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "ServingInfo", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.SignatureStore": { - "description": "SignatureStore represents the URL of custom Signature Store", - "type": "object", - "required": [ - "url" - ], - "properties": { - "ca": { - "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca.crt\" is used to locate the data. If specified and the config map or expected key is not found, the signature store is not honored. If the specified ca data is not valid, the signature store is not honored. If empty, we fall back to the CA configured via Proxy, which is appended to the default system roots. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" - }, - "url": { - "description": "url contains the upstream custom signature store URL. url should be a valid absolute http/https URI of an upstream signature store as per rfc1738. This must be provided and cannot be empty.", + "type": { + "description": "Type is the type of the condition.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "SignatureStore", + "Kind": "ClusterClaimCondition", "Scope": "Namespaced" } }, - "io.openshift.config.v1.StringSource": { - "description": "StringSource allows specifying a string inline, or externally via env var or file. When it contains only a string value, it marshals to a simple JSON string.", + "io.openshift.hive.v1.ClusterClaimList": { + "description": "ClusterClaimList contains a list of ClusterClaims.", "type": "object", "required": [ - "value", - "env", - "file", - "keyFile" + "items" ], "properties": { - "env": { - "description": "Env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "file": { - "description": "File references a file containing the cleartext value, or an encrypted value if a keyFile is specified.", - "type": "string", - "default": "" + "items": { + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterClaim" + } }, - "keyFile": { - "description": "KeyFile references a file containing the key to use to decrypt the value.", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "value": { - "description": "Value specifies the cleartext value, or an encrypted value if keyFile is specified.", - "type": "string", - "default": "" + "metadata": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", + "Type": "list", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "StringSource", + "Kind": "ClusterClaimList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.StringSourceSpec": { - "description": "StringSourceSpec specifies a string value, or external location", + "io.openshift.hive.v1.ClusterClaimSpec": { + "description": "ClusterClaimSpec defines the desired state of the ClusterClaim.", "type": "object", "required": [ - "value", - "env", - "file", - "keyFile" + "clusterPoolName" ], "properties": { - "env": { - "description": "Env specifies an envvar containing the cleartext value, or an encrypted value if the keyFile is specified.", + "clusterPoolName": { + "description": "ClusterPoolName is the name of the cluster pool from which to claim a cluster.", "type": "string", "default": "" }, - "file": { - "description": "File references a file containing the cleartext value, or an encrypted value if a keyFile is specified.", - "type": "string", - "default": "" + "lifetime": { + "description": "Lifetime is the maximum lifetime of the claim after it is assigned a cluster. If the claim still exists when the lifetime has elapsed, the claim will be deleted by Hive. This is a Duration value; see https://pkg.go.dev/time#ParseDuration for accepted formats. Note: due to discrepancies in validation vs parsing, we use a Pattern instead of `Format=duration`. See https://bugzilla.redhat.com/show_bug.cgi?id=2050332 https://github.com/kubernetes/apimachinery/issues/131 https://github.com/kubernetes/apiextensions-apiserver/issues/56", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" }, - "keyFile": { - "description": "KeyFile references a file containing the key to use to decrypt the value.", - "type": "string", - "default": "" + "namespace": { + "description": "Namespace is the namespace containing the ClusterDeployment (name will match the namespace) of the claimed cluster. This field will be set as soon as a suitable cluster can be found, however that cluster may still be resuming and not yet ready for use. Wait for the ClusterRunning condition to be true to avoid this issue.", + "type": "string" }, - "value": { - "description": "Value specifies the cleartext value, or an encrypted value if keyFile is specified.", - "type": "string", - "default": "" + "subjects": { + "description": "Subjects hold references to which to authorize access to the claimed cluster.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.rbac.v1.Subject" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "StringSourceSpec", + "Kind": "ClusterClaimSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.TLSProfileSpec": { - "description": "TLSProfileSpec is the desired behavior of a TLSSecurityProfile.", + "io.openshift.hive.v1.ClusterClaimStatus": { + "description": "ClusterClaimStatus defines the observed state of ClusterClaim.", "type": "object", - "required": [ - "ciphers", - "minTLSVersion" - ], "properties": { - "ciphers": { - "description": "ciphers is used to specify the cipher algorithms that are negotiated during the TLS handshake. Operators may remove entries their operands do not support. For example, to use DES-CBC3-SHA (yaml):\n\n ciphers:\n - DES-CBC3-SHA", + "conditions": { + "description": "Conditions includes more detailed status for the cluster pool.", "type": "array", "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterClaimCondition" + } }, - "minTLSVersion": { - "description": "minTLSVersion is used to specify the minimal version of the TLS protocol that is negotiated during the TLS handshake. For example, to use TLS versions 1.1, 1.2 and 1.3 (yaml):\n\n minTLSVersion: VersionTLS11\n\nNOTE: currently the highest minTLSVersion allowed is VersionTLS12", - "type": "string", - "default": "" + "lifetime": { + "description": "Lifetime is the maximum lifetime of the claim after it is assigned a cluster. If the claim still exists when the lifetime has elapsed, the claim will be deleted by Hive.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "TLSProfileSpec", + "Kind": "ClusterClaimStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.TLSSecurityProfile": { - "description": "TLSSecurityProfile defines the schema for a TLS security profile. This object is used by operators to apply TLS security settings to operands.", + "io.openshift.hive.v1.ClusterDeployment": { + "description": "ClusterDeployment is the Schema for the clusterdeployments API", "type": "object", "properties": { - "custom": { - "description": "custom is a user-defined TLS security profile. Be extremely careful using a custom profile as invalid configurations can be catastrophic. An example custom profile looks like this:\n\n ciphers:\n\n - ECDHE-ECDSA-CHACHA20-POLY1305\n\n - ECDHE-RSA-CHACHA20-POLY1305\n\n - ECDHE-RSA-AES128-GCM-SHA256\n\n - ECDHE-ECDSA-AES128-GCM-SHA256\n\n minTLSVersion: VersionTLS11", - "$ref": "#/definitions/io.openshift.config.v1.CustomTLSProfile" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "intermediate": { - "description": "intermediate is a TLS security profile based on:\n\nhttps://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28recommended.29\n\nand looks like this (yaml):\n\n ciphers:\n\n - TLS_AES_128_GCM_SHA256\n\n - TLS_AES_256_GCM_SHA384\n\n - TLS_CHACHA20_POLY1305_SHA256\n\n - ECDHE-ECDSA-AES128-GCM-SHA256\n\n - ECDHE-RSA-AES128-GCM-SHA256\n\n - ECDHE-ECDSA-AES256-GCM-SHA384\n\n - ECDHE-RSA-AES256-GCM-SHA384\n\n - ECDHE-ECDSA-CHACHA20-POLY1305\n\n - ECDHE-RSA-CHACHA20-POLY1305\n\n - DHE-RSA-AES128-GCM-SHA256\n\n - DHE-RSA-AES256-GCM-SHA384\n\n minTLSVersion: VersionTLS12", - "$ref": "#/definitions/io.openshift.config.v1.IntermediateTLSProfile" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "modern": { - "description": "modern is a TLS security profile based on:\n\nhttps://wiki.mozilla.org/Security/Server_Side_TLS#Modern_compatibility\n\nand looks like this (yaml):\n\n ciphers:\n\n - TLS_AES_128_GCM_SHA256\n\n - TLS_AES_256_GCM_SHA384\n\n - TLS_CHACHA20_POLY1305_SHA256\n\n minTLSVersion: VersionTLS13", - "$ref": "#/definitions/io.openshift.config.v1.ModernTLSProfile" + "metadata": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "old": { - "description": "old is a TLS security profile based on:\n\nhttps://wiki.mozilla.org/Security/Server_Side_TLS#Old_backward_compatibility\n\nand looks like this (yaml):\n\n ciphers:\n\n - TLS_AES_128_GCM_SHA256\n\n - TLS_AES_256_GCM_SHA384\n\n - TLS_CHACHA20_POLY1305_SHA256\n\n - ECDHE-ECDSA-AES128-GCM-SHA256\n\n - ECDHE-RSA-AES128-GCM-SHA256\n\n - ECDHE-ECDSA-AES256-GCM-SHA384\n\n - ECDHE-RSA-AES256-GCM-SHA384\n\n - ECDHE-ECDSA-CHACHA20-POLY1305\n\n - ECDHE-RSA-CHACHA20-POLY1305\n\n - DHE-RSA-AES128-GCM-SHA256\n\n - DHE-RSA-AES256-GCM-SHA384\n\n - DHE-RSA-CHACHA20-POLY1305\n\n - ECDHE-ECDSA-AES128-SHA256\n\n - ECDHE-RSA-AES128-SHA256\n\n - ECDHE-ECDSA-AES128-SHA\n\n - ECDHE-RSA-AES128-SHA\n\n - ECDHE-ECDSA-AES256-SHA384\n\n - ECDHE-RSA-AES256-SHA384\n\n - ECDHE-ECDSA-AES256-SHA\n\n - ECDHE-RSA-AES256-SHA\n\n - DHE-RSA-AES128-SHA256\n\n - DHE-RSA-AES256-SHA256\n\n - AES128-GCM-SHA256\n\n - AES256-GCM-SHA384\n\n - AES128-SHA256\n\n - AES256-SHA256\n\n - AES128-SHA\n\n - AES256-SHA\n\n - DES-CBC3-SHA\n\n minTLSVersion: VersionTLS10", - "$ref": "#/definitions/io.openshift.config.v1.OldTLSProfile" + "spec": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeploymentSpec" }, - "type": { - "description": "type is one of Old, Intermediate, Modern or Custom. Custom provides the ability to specify individual TLS security profile parameters. Old, Intermediate and Modern are TLS security profiles based on:\n\nhttps://wiki.mozilla.org/Security/Server_Side_TLS#Recommended_configurations\n\nThe profiles are intent based, so they may change over time as new ciphers are developed and existing ciphers are found to be insecure. Depending on precisely which ciphers are available to a process, the list may be reduced.\n\nNote that the Modern profile is currently not supported because it is not yet well adopted by common software libraries.", - "type": "string", - "default": "" + "status": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeploymentStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", + "Type": "object", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "TLSSecurityProfile", + "Kind": "ClusterDeployment", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "custom": "Custom", - "intermediate": "Intermediate", - "modern": "Modern", - "old": "Old" - } - } - ] + } }, - "io.openshift.config.v1.TemplateReference": { - "description": "TemplateReference references a template in a specific namespace. The namespace must be specified at the point of use.", + "io.openshift.hive.v1.ClusterDeploymentCondition": { + "description": "ClusterDeploymentCondition contains details for the current condition of a cluster deployment", "type": "object", "required": [ - "name" + "type", + "status" ], "properties": { - "name": { - "description": "name is the metadata.name of the referenced project request template", + "lastProbeTime": { + "description": "LastProbeTime is the last time we probed the condition.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "lastTransitionTime": { + "description": "LastTransitionTime is the last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "Message is a human-readable message indicating details about last transition.", + "type": "string" + }, + "reason": { + "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status is the status of the condition.", "type": "string", "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1", - "Kind": "TemplateReference", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1.TestDetails": { - "type": "object", - "required": [ - "testName" - ], - "properties": { - "testName": { - "description": "TestName is the name of the test as it appears in junit XMLs. It does not include the suite name since the same test can be executed in many suites.", + }, + "type": { + "description": "Type is the type of the condition.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "TestDetails", + "Kind": "ClusterDeploymentCondition", "Scope": "Namespaced" } }, - "io.openshift.config.v1.TestReporting": { - "description": "TestReporting is used for origin (and potentially others) to report the test names for a given FeatureGate into the payload for later analysis on a per-payload basis. This doesn't need any CRD because it's never stored in the cluster.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.hive.v1.ClusterDeploymentCustomization": { + "description": "ClusterDeploymentCustomization is the Schema for clusterdeploymentcustomizations API.", "type": "object", "required": [ "spec" @@ -72833,721 +78863,883 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.TestReportingSpec" + "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeploymentCustomizationSpec" }, "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.TestReportingStatus" + "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeploymentCustomizationStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "TestReporting", + "Kind": "ClusterDeploymentCustomization", "Scope": "Namespaced" } }, - "io.openshift.config.v1.TestReportingSpec": { + "io.openshift.hive.v1.ClusterDeploymentCustomizationList": { + "description": "ClusterDeploymentCustomizationList contains a list of ClusterDeploymentCustomizations.", "type": "object", "required": [ - "testsForFeatureGates" + "items" ], "properties": { - "testsForFeatureGates": { - "description": "TestsForFeatureGates is a list, indexed by FeatureGate and includes information about testing.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.FeatureGateTests" + "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeploymentCustomization" } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", + "Type": "list", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "TestReportingSpec", + "Kind": "ClusterDeploymentCustomizationList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.TestReportingStatus": { + "io.openshift.hive.v1.ClusterDeploymentCustomizationSpec": { + "description": "ClusterDeploymentCustomizationSpec defines the desired state of ClusterDeploymentCustomization.", "type": "object", + "properties": { + "installConfigPatches": { + "description": "InstallConfigPatches is a list of patches to be applied to the install-config.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.PatchEntity" + } + } + }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "TestReportingStatus", + "Kind": "ClusterDeploymentCustomizationSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.TokenClaimMapping": { + "io.openshift.hive.v1.ClusterDeploymentCustomizationStatus": { + "description": "ClusterDeploymentCustomizationStatus defines the observed state of ClusterDeploymentCustomization.", "type": "object", - "required": [ - "claim" - ], "properties": { - "claim": { - "description": "Claim is a JWT token claim to be used in the mapping", - "type": "string", - "default": "" + "clusterDeploymentRef": { + "description": "ClusterDeploymentRef is a reference to the cluster deployment that this customization is applied on.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "clusterPoolRef": { + "description": "ClusterPoolRef is the name of the current cluster pool the CDC used at.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "conditions": { + "description": "Conditions describes the state of the operator's reconciliation functionality.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/com.github.openshift.custom-resource-status.conditions.v1.Condition" + }, + "x-kubernetes-patch-merge-key": "type", + "x-kubernetes-patch-strategy": "merge" + }, + "lastAppliedConfiguration": { + "description": "LastAppliedConfiguration contains the last applied patches to the install-config. The information will retain for reference in case the customization is updated.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "TokenClaimMapping", + "Kind": "ClusterDeploymentCustomizationStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.TokenClaimMappings": { + "io.openshift.hive.v1.ClusterDeploymentList": { + "description": "ClusterDeploymentList contains a list of ClusterDeployment", "type": "object", + "required": [ + "items" + ], "properties": { - "groups": { - "description": "Groups is a name of the claim that should be used to construct groups for the cluster identity. The referenced claim must use array of strings values.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.PrefixedClaimMapping" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "username": { - "description": "Username is a name of the claim that should be used to construct usernames for the cluster identity.\n\nDefault value: \"sub\"", + "items": { + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeployment" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.UsernameClaimMapping" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", + "Type": "list", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "TokenClaimMappings", + "Kind": "ClusterDeploymentList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.TokenClaimValidationRule": { + "io.openshift.hive.v1.ClusterDeploymentSpec": { + "description": "ClusterDeploymentSpec defines the desired state of ClusterDeployment", "type": "object", "required": [ - "type", - "requiredClaim" + "clusterName", + "baseDomain", + "platform" ], "properties": { - "requiredClaim": { - "description": "RequiredClaim allows configuring a required claim name and its expected value", - "$ref": "#/definitions/io.openshift.config.v1.TokenRequiredClaim" + "baseDomain": { + "description": "BaseDomain is the base domain to which the cluster should belong.", + "type": "string", + "default": "" }, - "type": { - "description": "Type sets the type of the validation rule", + "boundServiceAccountSigningKeySecretRef": { + "description": "BoundServiceAccountSigningKeySecretRef refers to a Secret that contains a 'bound-service-account-signing-key.key' data key pointing to the private key that will be used to sign ServiceAccount objects. Primarily used to provision AWS clusters to use Amazon's Security Token Service.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "certificateBundles": { + "description": "CertificateBundles is a list of certificate bundles associated with this cluster", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.CertificateBundleSpec" + } + }, + "clusterInstallRef": { + "description": "ClusterInstallLocalReference provides reference to an object that implements the hivecontract ClusterInstall. The namespace of the object is same as the ClusterDeployment. This cannot be set when Provisioning is also set.", + "$ref": "#/definitions/io.openshift.hive.v1.ClusterInstallLocalReference" + }, + "clusterMetadata": { + "description": "ClusterMetadata contains metadata information about the installed cluster.", + "$ref": "#/definitions/io.openshift.hive.v1.ClusterMetadata" + }, + "clusterName": { + "description": "ClusterName is the friendly name of the cluster. It is used for subdomains, some resource tagging, and other instances where a friendly name for the cluster is useful.", "type": "string", "default": "" + }, + "clusterPoolRef": { + "description": "ClusterPoolRef is a reference to the ClusterPool that this ClusterDeployment originated from.", + "$ref": "#/definitions/io.openshift.hive.v1.ClusterPoolReference" + }, + "controlPlaneConfig": { + "description": "ControlPlaneConfig contains additional configuration for the target cluster's control plane", + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ControlPlaneConfigSpec" + }, + "hibernateAfter": { + "description": "HibernateAfter will transition a cluster to hibernating power state after it has been running for the given duration. The time that a cluster has been running is the time since the cluster was installed or the time since the cluster last came out of hibernation. This is a Duration value; see https://pkg.go.dev/time#ParseDuration for accepted formats. Note: due to discrepancies in validation vs parsing, we use a Pattern instead of `Format=duration`. See https://bugzilla.redhat.com/show_bug.cgi?id=2050332 https://github.com/kubernetes/apimachinery/issues/131 https://github.com/kubernetes/apiextensions-apiserver/issues/56", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" + }, + "ingress": { + "description": "Ingress allows defining desired clusteringress/shards to be configured on the cluster.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterIngress" + } + }, + "installAttemptsLimit": { + "description": "InstallAttemptsLimit is the maximum number of times Hive will attempt to install the cluster.", + "type": "integer", + "format": "int32" + }, + "installed": { + "description": "Installed is true if the cluster has been installed", + "type": "boolean", + "default": false + }, + "manageDNS": { + "description": "ManageDNS specifies whether a DNSZone should be created and managed automatically for this ClusterDeployment", + "type": "boolean" + }, + "platform": { + "description": "Platform is the configuration for the specific platform upon which to perform the installation.", + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.Platform" + }, + "powerState": { + "description": "PowerState indicates whether a cluster should be running or hibernating. When omitted, PowerState defaults to the Running state.", + "type": "string" + }, + "preserveOnDelete": { + "description": "PreserveOnDelete allows the user to disconnect a cluster from Hive without deprovisioning it. This can also be used to abandon ongoing cluster deprovision.", + "type": "boolean" + }, + "provisioning": { + "description": "Provisioning contains settings used only for initial cluster provisioning. May be unset in the case of adopted clusters.", + "$ref": "#/definitions/io.openshift.hive.v1.Provisioning" + }, + "pullSecretRef": { + "description": "PullSecretRef is the reference to the secret to use when pulling images.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "TokenClaimValidationRule", + "Kind": "ClusterDeploymentSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.TokenConfig": { - "description": "TokenConfig holds the necessary configuration options for authorization and access tokens", + "io.openshift.hive.v1.ClusterDeploymentStatus": { + "description": "ClusterDeploymentStatus defines the observed state of ClusterDeployment", "type": "object", "properties": { - "accessTokenInactivityTimeout": { - "description": "accessTokenInactivityTimeout defines the token inactivity timeout for tokens granted by any client. The value represents the maximum amount of time that can occur between consecutive uses of the token. Tokens become invalid if they are not used within this temporal window. The user will need to acquire a new token to regain access once a token times out. Takes valid time duration string such as \"5m\", \"1.5h\" or \"2h45m\". The minimum allowed value for duration is 300s (5 minutes). If the timeout is configured per client, then that value takes precedence. If the timeout value is not specified and the client does not override the value, then tokens are valid until their lifetime.\n\nWARNING: existing tokens' timeout will not be affected (lowered) by changing this value", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" + "apiURL": { + "description": "APIURL is the URL where the cluster's API can be accessed.", + "type": "string" }, - "accessTokenInactivityTimeoutSeconds": { - "description": "accessTokenInactivityTimeoutSeconds - DEPRECATED: setting this field has no effect.", - "type": "integer", - "format": "int32" + "certificateBundles": { + "description": "CertificateBundles contains of the status of the certificate bundles associated with this cluster deployment.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.CertificateBundleStatus" + } }, - "accessTokenMaxAgeSeconds": { - "description": "accessTokenMaxAgeSeconds defines the maximum age of access tokens", + "cliImage": { + "description": "CLIImage is the name of the oc cli image to use when installing the target cluster", + "type": "string" + }, + "conditions": { + "description": "Conditions includes more detailed status for the cluster deployment", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeploymentCondition" + } + }, + "installRestarts": { + "description": "InstallRestarts is the total count of container restarts on the clusters install job.", "type": "integer", "format": "int32" + }, + "installStartedTimestamp": { + "description": "InstallStartedTimestamp is the time when all pre-requisites were met and cluster installation was launched.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "installVersion": { + "description": "InstallVersion is the version of OpenShift as reported by the release image resolved for the installation.", + "type": "string" + }, + "installedTimestamp": { + "description": "InstalledTimestamp is the time we first detected that the cluster has been successfully installed.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "installerImage": { + "description": "InstallerImage is the name of the installer image to use when installing the target cluster", + "type": "string" + }, + "platformStatus": { + "description": "Platform contains the observed state for the specific platform upon which to perform the installation.", + "$ref": "#/definitions/io.openshift.hive.v1.PlatformStatus" + }, + "powerState": { + "description": "PowerState indicates the powerstate of cluster", + "type": "string" + }, + "provisionRef": { + "description": "ProvisionRef is a reference to the last ClusterProvision created for the deployment", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "webConsoleURL": { + "description": "WebConsoleURL is the URL for the cluster's web console UI.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "TokenConfig", + "Kind": "ClusterDeploymentStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.TokenIssuer": { + "io.openshift.hive.v1.ClusterDeprovision": { + "description": "ClusterDeprovision is the Schema for the clusterdeprovisions API", "type": "object", - "required": [ - "issuerURL", - "audiences", - "issuerCertificateAuthority" - ], "properties": { - "audiences": { - "description": "Audiences is an array of audiences that the token was issued for. Valid tokens must include at least one of these values in their \"aud\" claim. Must be set to exactly one value.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "issuerCertificateAuthority": { - "description": "CertificateAuthority is a reference to a config map in the configuration namespace. The .data of the configMap must contain the \"ca-bundle.crt\" key. If unset, system trust is used instead.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "issuerURL": { - "description": "URL is the serving URL of the token issuer. Must use the https:// scheme.", - "type": "string", - "default": "" + "spec": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeprovisionSpec" + }, + "status": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeprovisionStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", + "Type": "object", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "TokenIssuer", + "Kind": "ClusterDeprovision", "Scope": "Namespaced" } }, - "io.openshift.config.v1.TokenRequiredClaim": { + "io.openshift.hive.v1.ClusterDeprovisionCondition": { + "description": "ClusterDeprovisionCondition contains details for the current condition of a ClusterDeprovision", "type": "object", "required": [ - "claim", - "requiredValue" + "type", + "status" ], "properties": { - "claim": { - "description": "Claim is a name of a required claim. Only claims with string values are supported.", + "lastProbeTime": { + "description": "LastProbeTime is the last time we probed the condition.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "lastTransitionTime": { + "description": "LastTransitionTime is the last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "Message is a human-readable message indicating details about last transition.", + "type": "string" + }, + "reason": { + "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status is the status of the condition.", "type": "string", "default": "" }, - "requiredValue": { - "description": "RequiredValue is the required value for the claim.", + "type": { + "description": "Type is the type of the condition.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "TokenRequiredClaim", + "Kind": "ClusterDeprovisionCondition", "Scope": "Namespaced" } }, - "io.openshift.config.v1.Update": { - "description": "Update represents an administrator update request.", + "io.openshift.hive.v1.ClusterDeprovisionList": { + "description": "ClusterDeprovisionList contains a list of ClusterDeprovision", "type": "object", + "required": [ + "items" + ], "properties": { - "architecture": { - "description": "architecture is an optional field that indicates the desired value of the cluster architecture. In this context cluster architecture means either a single architecture or a multi architecture. architecture can only be set to Multi thereby only allowing updates from single to multi architecture. If architecture is set, image cannot be set and version must be set. Valid values are 'Multi' and empty.", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "force": { - "description": "force allows an administrator to update to an image that has failed verification or upgradeable checks. This option should only be used when the authenticity of the provided image has been verified out of band because the provided image will run with full administrative access to the cluster. Do not use this flag with images that comes from unknown or potentially malicious sources.", - "type": "boolean", - "default": false + "items": { + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeprovision" + } }, - "image": { - "description": "image is a container image location that contains the update. image should be used when the desired version does not exist in availableUpdates or history. When image is set, version is ignored. When image is set, version should be empty. When image is set, architecture cannot be specified.", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "version": { - "description": "version is a semantic version identifying the update version. version is ignored if image is specified and required if architecture is specified.", - "type": "string", - "default": "" + "metadata": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", + "Type": "list", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "Update", + "Kind": "ClusterDeprovisionList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.UpdateHistory": { - "description": "UpdateHistory is a single attempted update to the cluster.", + "io.openshift.hive.v1.ClusterDeprovisionPlatform": { + "description": "ClusterDeprovisionPlatform contains platform-specific configuration for the deprovision", "type": "object", - "required": [ - "state", - "startedTime", - "completionTime", - "image", - "verified" - ], "properties": { - "acceptedRisks": { - "description": "acceptedRisks records risks which were accepted to initiate the update. For example, it may menition an Upgradeable=False or missing signature that was overriden via desiredUpdate.force, or an update that was initiated despite not being in the availableUpdates set of recommended update targets.", - "type": "string" + "aws": { + "description": "AWS contains AWS-specific deprovision settings", + "$ref": "#/definitions/io.openshift.hive.v1.AWSClusterDeprovision" }, - "completionTime": { - "description": "completionTime, if set, is when the update was fully applied. The update that is currently being applied will have a null completion time. Completion time will always be set for entries that are not the current update (usually to the started time of the next update).", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "azure": { + "description": "Azure contains Azure-specific deprovision settings", + "$ref": "#/definitions/io.openshift.hive.v1.AzureClusterDeprovision" }, - "image": { - "description": "image is a container image location that contains the update. This value is always populated.", - "type": "string", - "default": "" + "gcp": { + "description": "GCP contains GCP-specific deprovision settings", + "$ref": "#/definitions/io.openshift.hive.v1.GCPClusterDeprovision" }, - "startedTime": { - "description": "startedTime is the time at which the update was started.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + "ibmcloud": { + "description": "IBMCloud contains IBM Cloud specific deprovision settings", + "$ref": "#/definitions/io.openshift.hive.v1.IBMClusterDeprovision" }, - "state": { - "description": "state reflects whether the update was fully applied. The Partial state indicates the update is not fully applied, while the Completed state indicates the update was successfully rolled out at least once (all parts of the update successfully applied).", - "type": "string", - "default": "" + "openstack": { + "description": "OpenStack contains OpenStack-specific deprovision settings", + "$ref": "#/definitions/io.openshift.hive.v1.OpenStackClusterDeprovision" }, - "verified": { - "description": "verified indicates whether the provided update was properly verified before it was installed. If this is false the cluster may not be trusted. Verified does not cover upgradeable checks that depend on the cluster state at the time when the update target was accepted.", - "type": "boolean", - "default": false + "ovirt": { + "description": "Ovirt contains oVirt-specific deprovision settings", + "$ref": "#/definitions/io.openshift.hive.v1.OvirtClusterDeprovision" }, - "version": { - "description": "version is a semantic version identifying the update version. If the requested image does not define a version, or if a failure occurs retrieving the image, this value may be empty.", - "type": "string", - "default": "" + "vsphere": { + "description": "VSphere contains VMWare vSphere-specific deprovision settings", + "$ref": "#/definitions/io.openshift.hive.v1.VSphereClusterDeprovision" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "UpdateHistory", + "Kind": "ClusterDeprovisionPlatform", "Scope": "Namespaced" } }, - "io.openshift.config.v1.UsernameClaimMapping": { + "io.openshift.hive.v1.ClusterDeprovisionSpec": { + "description": "ClusterDeprovisionSpec defines the desired state of ClusterDeprovision", "type": "object", "required": [ - "claim", - "prefixPolicy", - "prefix" + "infraID" ], "properties": { - "claim": { - "description": "Claim is a JWT token claim to be used in the mapping", - "type": "string", - "default": "" + "baseDomain": { + "description": "BaseDomain is the DNS base domain.", + "type": "string" }, - "prefix": { - "$ref": "#/definitions/io.openshift.config.v1.UsernamePrefix" + "clusterID": { + "description": "ClusterID is a globally unique identifier for the cluster to deprovision. It will be used if specified.", + "type": "string" }, - "prefixPolicy": { - "description": "PrefixPolicy specifies how a prefix should apply.\n\nBy default, claims other than `email` will be prefixed with the issuer URL to prevent naming clashes with other plugins.\n\nSet to \"NoPrefix\" to disable prefixing.\n\nExample:\n (1) `prefix` is set to \"myoidc:\" and `claim` is set to \"username\".\n If the JWT claim `username` contains value `userA`, the resulting\n mapped value will be \"myoidc:userA\".\n (2) `prefix` is set to \"myoidc:\" and `claim` is set to \"email\". If the\n JWT `email` claim contains value \"userA@myoidc.tld\", the resulting\n mapped value will be \"myoidc:userA@myoidc.tld\".\n (3) `prefix` is unset, `issuerURL` is set to `https://myoidc.tld`,\n the JWT claims include \"username\":\"userA\" and \"email\":\"userA@myoidc.tld\",\n and `claim` is set to:\n (a) \"username\": the mapped value will be \"https://myoidc.tld#userA\"\n (b) \"email\": the mapped value will be \"userA@myoidc.tld\"", + "clusterName": { + "description": "ClusterName is the friendly name of the cluster. It is used for subdomains, some resource tagging, and other instances where a friendly name for the cluster is useful.", + "type": "string" + }, + "infraID": { + "description": "InfraID is the identifier generated during installation for a cluster. It is used for tagging/naming resources in cloud providers.", "type": "string", "default": "" + }, + "platform": { + "description": "Platform contains platform-specific configuration for a ClusterDeprovision", + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeprovisionPlatform" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "UsernameClaimMapping", + "Kind": "ClusterDeprovisionSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.UsernamePrefix": { + "io.openshift.hive.v1.ClusterDeprovisionStatus": { + "description": "ClusterDeprovisionStatus defines the observed state of ClusterDeprovision", "type": "object", - "required": [ - "prefixString" - ], "properties": { - "prefixString": { - "type": "string", - "default": "" + "completed": { + "description": "Completed is true when the uninstall has completed successfully", + "type": "boolean" + }, + "conditions": { + "description": "Conditions includes more detailed status for the cluster deprovision", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterDeprovisionCondition" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "UsernamePrefix", + "Kind": "ClusterDeprovisionStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.VSpherePlatformFailureDomainSpec": { - "description": "VSpherePlatformFailureDomainSpec holds the region and zone failure domain and the vCenter topology of that failure domain.", + "io.openshift.hive.v1.ClusterImageSet": { + "description": "ClusterImageSet is the Schema for the clusterimagesets API", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterImageSetSpec" + }, + "status": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterImageSetStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterImageSet", + "Scope": "Clustered" + } + }, + "io.openshift.hive.v1.ClusterImageSetList": { + "description": "ClusterImageSetList contains a list of ClusterImageSet", "type": "object", "required": [ - "name", - "region", - "zone", - "server", - "topology" + "items" ], "properties": { - "name": { - "description": "name defines the arbitrary but unique name of a failure domain.", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "region": { - "description": "region defines the name of a region tag that will be attached to a vCenter datacenter. The tag category in vCenter must be named openshift-region.", - "type": "string", - "default": "" + "items": { + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterImageSet" + } }, - "server": { - "description": "server is the fully-qualified domain name or the IP address of the vCenter server.", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" }, - "topology": { - "description": "Topology describes a given failure domain using vSphere constructs", + "metadata": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformTopology" - }, - "zone": { - "description": "zone defines the name of a zone tag that will be attached to a vCenter cluster. The tag category in vCenter must be named openshift-zone.", - "type": "string", - "default": "" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", + "Type": "list", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "VSpherePlatformFailureDomainSpec", + "Kind": "ClusterImageSetList", "Scope": "Namespaced" } }, - "io.openshift.config.v1.VSpherePlatformLoadBalancer": { - "description": "VSpherePlatformLoadBalancer defines the load balancer used by the cluster on VSphere platform.", + "io.openshift.hive.v1.ClusterImageSetReference": { + "description": "ClusterImageSetReference is a reference to a ClusterImageSet", "type": "object", + "required": [ + "name" + ], "properties": { - "type": { - "description": "type defines the type of load balancer used by the cluster on VSphere platform which can be a user-managed or openshift-managed load balancer that is to be used for the OpenShift API and Ingress endpoints. When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing defined in the machine config operator will be deployed. When set to UserManaged these static pods will not be deployed and it is expected that the load balancer is configured out of band by the deployer. When omitted, this means no opinion and the platform is left to choose a reasonable default. The default value is OpenShiftManagedDefault.", + "name": { + "description": "Name is the name of the ClusterImageSet that this refers to", "type": "string", - "default": "OpenShiftManagedDefault" + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "VSpherePlatformLoadBalancer", + "Kind": "ClusterImageSetReference", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": {} - } - ] + } }, - "io.openshift.config.v1.VSpherePlatformNodeNetworking": { - "description": "VSpherePlatformNodeNetworking holds the external and internal node networking spec.", + "io.openshift.hive.v1.ClusterImageSetSpec": { + "description": "ClusterImageSetSpec defines the desired state of ClusterImageSet", "type": "object", + "required": [ + "releaseImage" + ], "properties": { - "external": { - "description": "external represents the network configuration of the node that is externally routable.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformNodeNetworkingSpec" - }, - "internal": { - "description": "internal represents the network configuration of the node that is routable only within the cluster.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformNodeNetworkingSpec" + "releaseImage": { + "description": "ReleaseImage is the image that contains the payload to use when installing a cluster.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "VSpherePlatformNodeNetworking", + "Kind": "ClusterImageSetSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1.VSpherePlatformNodeNetworkingSpec": { - "description": "VSpherePlatformNodeNetworkingSpec holds the network CIDR(s) and port group name for including and excluding IP ranges in the cloud provider. This would be used for example when multiple network adapters are attached to a guest to help determine which IP address the cloud config manager should use for the external and internal node networking.", + "io.openshift.hive.v1.ClusterImageSetStatus": { + "description": "ClusterImageSetStatus defines the observed state of ClusterImageSet", "type": "object", - "properties": { - "excludeNetworkSubnetCidr": { - "description": "excludeNetworkSubnetCidr IP addresses in subnet ranges will be excluded when selecting the IP address from the VirtualMachine's VM for use in the status.addresses fields.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "network": { - "description": "network VirtualMachine's VM Network names that will be used to when searching for status.addresses fields. Note that if internal.networkSubnetCIDR and external.networkSubnetCIDR are not set, then the vNIC associated to this network must only have a single IP address assigned to it. The available networks (port groups) can be listed using `govc ls 'network/*'`", - "type": "string" - }, - "networkSubnetCidr": { - "description": "networkSubnetCidr IP address on VirtualMachine's network interfaces included in the fields' CIDRs that will be used in respective status.addresses fields.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - } - }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "VSpherePlatformNodeNetworkingSpec", + "Kind": "ClusterImageSetStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1.VSpherePlatformSpec": { - "description": "VSpherePlatformSpec holds the desired state of the vSphere infrastructure provider. In the future the cloud provider operator, storage operator and machine operator will use these fields for configuration.", + "io.openshift.hive.v1.ClusterIngress": { + "description": "ClusterIngress contains the configurable pieces for any ClusterIngress objects that should exist on the cluster.", "type": "object", + "required": [ + "name", + "domain" + ], "properties": { - "apiServerInternalIPs": { - "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.apiServerInternalIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "domain": { + "description": "Domain (sometimes referred to as shard) is the full DNS suffix that the resulting IngressController object will service (eg abcd.mycluster.mydomain.com).", + "type": "string", + "default": "" }, - "failureDomains": { - "description": "failureDomains contains the definition of region, zone and the vCenter topology. If this is omitted failure domains (regions and zones) will not be used.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformFailureDomainSpec" - }, - "x-kubernetes-list-map-keys": [ - "name" - ], - "x-kubernetes-list-type": "map" + "httpErrorCodePages": { + "description": "HttpErrorCodePages allows configuring custom HTTP error pages using the IngressController object", + "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" }, - "ingressIPs": { - "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IP addresses, one from IPv4 family and one from IPv6. In single stack clusters a single IP address is expected. When omitted, values from the status.ingressIPs will be used. Once set, the list cannot be completely removed (but its second entry can).", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "name": { + "description": "Name of the ClusterIngress object to create.", + "type": "string", + "default": "" }, - "machineNetworks": { - "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6, for example \"10.0.0.0/8\" or \"fd00::/8\".", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "namespaceSelector": { + "description": "NamespaceSelector allows filtering the list of namespaces serviced by the ingress controller.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" }, - "nodeNetworking": { - "description": "nodeNetworking contains the definition of internal and external network constraints for assigning the node's networking. If this field is omitted, networking defaults to the legacy address selection behavior which is to only support a single address and return the first one found.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformNodeNetworking" + "routeSelector": { + "description": "RouteSelector allows filtering the set of Routes serviced by the ingress controller", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" }, - "vcenters": { - "description": "vcenters holds the connection details for services to communicate with vCenter. Currently, only a single vCenter is supported, but in tech preview 3 vCenters are supported. Once the cluster has been installed, you are unable to change the current number of defined vCenters except in the case where the cluster has been upgraded from a version of OpenShift where the vsphere platform spec was not present. You may make modifications to the existing vCenters that are defined in the vcenters list in order to match with any added or modified failure domains.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformVCenterSpec" - }, - "x-kubernetes-list-type": "atomic" + "servingCertificate": { + "description": "ServingCertificate references a CertificateBundle in the ClusterDeployment.Spec that should be used for this Ingress", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "VSpherePlatformSpec", + "Kind": "ClusterIngress", "Scope": "Namespaced" } }, - "io.openshift.config.v1.VSpherePlatformStatus": { - "description": "VSpherePlatformStatus holds the current status of the vSphere infrastructure provider.", + "io.openshift.hive.v1.ClusterInstallCondition": { + "description": "ClusterInstallCondition contains details for the current condition of a cluster install.", "type": "object", "required": [ - "apiServerInternalIPs", - "ingressIPs" + "type", + "status" ], "properties": { - "apiServerInternalIP": { - "description": "apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI points to. It is the IP for a self-hosted load balancer in front of the API servers.\n\nDeprecated: Use APIServerInternalIPs instead.", - "type": "string" + "lastProbeTime": { + "description": "LastProbeTime is the last time we probed the condition.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "apiServerInternalIPs": { - "description": "apiServerInternalIPs are the IP addresses to contact the Kubernetes API server that can be used by components inside the cluster, like kubelets using the infrastructure rather than Kubernetes networking. These are the IPs for a self-hosted load balancer in front of the API servers. In dual stack clusters this list contains two IPs otherwise only one.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "lastTransitionTime": { + "description": "LastTransitionTime is the last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "ingressIP": { - "description": "ingressIP is an external IP which routes to the default ingress controller. The IP is a suitable target of a wildcard DNS record used to resolve default route host names.\n\nDeprecated: Use IngressIPs instead.", + "message": { + "description": "Message is a human-readable message indicating details about last transition.", "type": "string" }, - "ingressIPs": { - "description": "ingressIPs are the external IPs which route to the default ingress controller. The IPs are suitable targets of a wildcard DNS record used to resolve default route host names. In dual stack clusters this list contains two IPs otherwise only one.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "loadBalancer": { - "description": "loadBalancer defines how the load balancer used by the cluster is configured.", - "default": { - "type": "OpenShiftManagedDefault" - }, - "$ref": "#/definitions/io.openshift.config.v1.VSpherePlatformLoadBalancer" + "reason": { + "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" }, - "machineNetworks": { - "description": "machineNetworks are IP networks used to connect all the OpenShift cluster nodes.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "status": { + "description": "Status is the status of the condition.", + "type": "string", + "default": "" }, - "nodeDNSIP": { - "description": "nodeDNSIP is the IP address for the internal DNS used by the nodes. Unlike the one managed by the DNS operator, `NodeDNSIP` provides name resolution for the nodes themselves. There is no DNS-as-a-service for vSphere deployments. In order to minimize necessary changes to the datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames to the nodes in the cluster.", - "type": "string" + "type": { + "description": "Type is the type of the condition.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "VSpherePlatformStatus", + "Kind": "ClusterInstallCondition", "Scope": "Namespaced" } }, - "io.openshift.config.v1.VSpherePlatformTopology": { - "description": "VSpherePlatformTopology holds the required and optional vCenter objects - datacenter, computeCluster, networks, datastore and resourcePool - to provision virtual machines.", + "io.openshift.hive.v1.ClusterInstallLocalReference": { + "description": "ClusterInstallLocalReference provides reference to an object that implements the hivecontract ClusterInstall. The namespace of the object is same as the ClusterDeployment.", "type": "object", "required": [ - "datacenter", - "computeCluster", - "networks", - "datastore" + "group", + "version", + "kind", + "name" ], "properties": { - "computeCluster": { - "description": "computeCluster the absolute path of the vCenter cluster in which virtual machine will be located. The absolute path is of the form /\u003cdatacenter\u003e/host/\u003ccluster\u003e. The maximum length of the path is 2048 characters.", + "group": { "type": "string", "default": "" }, - "datacenter": { - "description": "datacenter is the name of vCenter datacenter in which virtual machines will be located. The maximum length of the datacenter name is 80 characters.", + "kind": { "type": "string", "default": "" }, - "datastore": { - "description": "datastore is the absolute path of the datastore in which the virtual machine is located. The absolute path is of the form /\u003cdatacenter\u003e/datastore/\u003cdatastore\u003e The maximum length of the path is 2048 characters.", + "name": { "type": "string", "default": "" }, - "folder": { - "description": "folder is the absolute path of the folder where virtual machines are located. The absolute path is of the form /\u003cdatacenter\u003e/vm/\u003cfolder\u003e. The maximum length of the path is 2048 characters.", - "type": "string" + "version": { + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterInstallLocalReference", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.ClusterMetadata": { + "description": "ClusterMetadata contains metadata information about the installed cluster.", + "type": "object", + "required": [ + "clusterID", + "infraID", + "adminKubeconfigSecretRef" + ], + "properties": { + "adminKubeconfigSecretRef": { + "description": "AdminKubeconfigSecretRef references the secret containing the admin kubeconfig for this cluster.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "networks": { - "description": "networks is the list of port group network names within this failure domain. If feature gate VSphereMultiNetworks is enabled, up to 10 network adapters may be defined. 10 is the maximum number of virtual network devices which may be attached to a VM as defined by: https://configmax.esp.vmware.com/guest?vmwareproduct=vSphere\u0026release=vSphere%208.0\u0026categories=1-0 The available networks (port groups) can be listed using `govc ls 'network/*'` Networks should be in the form of an absolute path: /\u003cdatacenter\u003e/network/\u003cportgroup\u003e.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" + "adminPasswordSecretRef": { + "description": "AdminPasswordSecretRef references the secret containing the admin username/password which can be used to login to this cluster.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "resourcePool": { - "description": "resourcePool is the absolute path of the resource pool where virtual machines will be created. The absolute path is of the form /\u003cdatacenter\u003e/host/\u003ccluster\u003e/Resources/\u003cresourcepool\u003e. The maximum length of the path is 2048 characters.", - "type": "string" + "clusterID": { + "description": "ClusterID is a globally unique identifier for this cluster generated during installation. Used for reporting metrics among other places.", + "type": "string", + "default": "" }, - "template": { - "description": "template is the full inventory path of the virtual machine or template that will be cloned when creating new machines in this failure domain. The maximum length of the path is 2048 characters.\n\nWhen omitted, the template will be calculated by the control plane machineset operator based on the region and zone defined in VSpherePlatformFailureDomainSpec. For example, for zone=zonea, region=region1, and infrastructure name=test, the template path would be calculated as /\u003cdatacenter\u003e/vm/test-rhcos-region1-zonea.", - "type": "string" + "infraID": { + "description": "InfraID is an identifier for this cluster generated during installation and used for tagging/naming resources in cloud providers.", + "type": "string", + "default": "" + }, + "platform": { + "description": "Platform holds platform-specific cluster metadata", + "$ref": "#/definitions/io.openshift.hive.v1.ClusterPlatformMetadata" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "VSpherePlatformTopology", + "Kind": "ClusterMetadata", "Scope": "Namespaced" } }, - "io.openshift.config.v1.VSpherePlatformVCenterSpec": { - "description": "VSpherePlatformVCenterSpec stores the vCenter connection fields. This is used by the vSphere CCM.", + "io.openshift.hive.v1.ClusterOperatorState": { + "description": "ClusterOperatorState summarizes the status of a single cluster operator", "type": "object", "required": [ - "server", - "datacenters" + "name" ], "properties": { - "datacenters": { - "description": "The vCenter Datacenters in which the RHCOS vm guests are located. This field will be used by the Cloud Controller Manager. Each datacenter listed here should be used within a topology.", + "conditions": { + "description": "Conditions is the set of conditions in the status of the cluster operator on the target cluster", "type": "array", "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - }, - "port": { - "description": "port is the TCP port that will be used to communicate to the vCenter endpoint. When omitted, this means the user has no opinion and it is up to the platform to choose a sensible default, which is subject to change over time.", - "type": "integer", - "format": "int32" + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.ClusterOperatorStatusCondition" + } }, - "server": { - "description": "server is the fully-qualified domain name or the IP address of the vCenter server.", + "name": { + "description": "Name is the name of the cluster operator", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "VSpherePlatformVCenterSpec", + "Kind": "ClusterOperatorState", "Scope": "Namespaced" } }, - "io.openshift.config.v1.WebhookTokenAuthenticator": { - "description": "webhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator", + "io.openshift.hive.v1.ClusterPlatformMetadata": { "type": "object", - "required": [ - "kubeConfig" - ], "properties": { - "kubeConfig": { - "description": "kubeConfig references a secret that contains kube config file data which describes how to access the remote webhook service. The namespace for the referenced secret is openshift-config.\n\nFor further details, see:\n\nhttps://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication\n\nThe key \"kubeConfig\" is used to locate the data. If the secret or expected key is not found, the webhook is not honored. If the specified kube config data is not valid, the webhook is not honored.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + "aws": { + "description": "AWS holds AWS-specific cluster metadata", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.Metadata" + }, + "azure": { + "description": "Azure holds azure-specific cluster metadata", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.azure.Metadata" + }, + "gcp": { + "description": "GCP holds GCP-specific cluster metadata", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.Metadata" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "WebhookTokenAuthenticator", + "Kind": "ClusterPlatformMetadata", "Scope": "Namespaced" } }, - "io.openshift.config.v1alpha1.Backup": { - "description": "Backup provides configuration for performing backups of the openshift cluster.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.hive.v1.ClusterPool": { + "description": "ClusterPool represents a pool of clusters that should be kept ready to be given out to users. Clusters are removed from the pool once claimed and then automatically replaced with a new one.", "type": "object", "required": [ "spec" @@ -73562,140 +79754,94 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1alpha1.BackupSpec" + "$ref": "#/definitions/io.openshift.hive.v1.ClusterPoolSpec" }, "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1alpha1.BackupStatus" + "$ref": "#/definitions/io.openshift.hive.v1.ClusterPoolStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "Backup", - "Scope": "Clustered" - } - }, - "io.openshift.config.v1alpha1.BackupList": { - "description": "BackupList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", - "type": "object", - "required": [ - "metadata", - "items" - ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1alpha1.Backup" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" - } - }, - "x-fabric8-info": { - "Type": "list", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "BackupList", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterPool", "Scope": "Namespaced" } }, - "io.openshift.config.v1alpha1.BackupSpec": { + "io.openshift.hive.v1.ClusterPoolClaimLifetime": { + "description": "ClusterPoolClaimLifetime defines the lifetimes for claims for the cluster pool.", "type": "object", - "required": [ - "etcd" - ], "properties": { - "etcd": { - "description": "etcd specifies the configuration for periodic backups of the etcd cluster", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1alpha1.EtcdBackupSpec" + "default": { + "description": "Default is the default lifetime of the claim when no lifetime is set on the claim itself. This is a Duration value; see https://pkg.go.dev/time#ParseDuration for accepted formats. Note: due to discrepancies in validation vs parsing, we use a Pattern instead of `Format=duration`. See https://bugzilla.redhat.com/show_bug.cgi?id=2050332 https://github.com/kubernetes/apimachinery/issues/131 https://github.com/kubernetes/apiextensions-apiserver/issues/56", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" + }, + "maximum": { + "description": "Maximum is the maximum lifetime of the claim after it is assigned a cluster. If the claim still exists when the lifetime has elapsed, the claim will be deleted by Hive. The lifetime of a claim is the mimimum of the lifetimes set by the cluster pool and the claim itself. This is a Duration value; see https://pkg.go.dev/time#ParseDuration for accepted formats. Note: due to discrepancies in validation vs parsing, we use a Pattern instead of `Format=duration`. See https://bugzilla.redhat.com/show_bug.cgi?id=2050332 https://github.com/kubernetes/apimachinery/issues/131 https://github.com/kubernetes/apiextensions-apiserver/issues/56", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "BackupSpec", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1alpha1.BackupStatus": { - "type": "object", - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "BackupStatus", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterPoolClaimLifetime", "Scope": "Namespaced" } }, - "io.openshift.config.v1alpha1.ClusterImagePolicy": { - "description": "ClusterImagePolicy holds cluster-wide configuration for image signature verification\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.hive.v1.ClusterPoolCondition": { + "description": "ClusterPoolCondition contains details for the current condition of a cluster pool", "type": "object", "required": [ - "spec" + "type", + "status" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "lastProbeTime": { + "description": "LastProbeTime is the last time we probed the condition.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "lastTransitionTime": { + "description": "LastTransitionTime is the last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "message": { + "description": "Message is a human-readable message indicating details about last transition.", + "type": "string" }, - "spec": { - "description": "spec contains the configuration for the cluster image policy.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1alpha1.ClusterImagePolicySpec" + "reason": { + "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" }, "status": { - "description": "status contains the observed state of the resource.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1alpha1.ClusterImagePolicyStatus" + "description": "Status is the status of the condition.", + "type": "string", + "default": "" + }, + "type": { + "description": "Type is the type of the condition.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "ClusterImagePolicy", - "Scope": "Clustered" + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterPoolCondition", + "Scope": "Namespaced" } }, - "io.openshift.config.v1alpha1.ClusterImagePolicyList": { - "description": "ClusterImagePolicyList is a list of ClusterImagePolicy resources\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.hive.v1.ClusterPoolList": { + "description": "ClusterPoolList contains a list of ClusterPools", "type": "object", "required": [ - "metadata", "items" ], "properties": { @@ -73707,7 +79853,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1alpha1.ClusterImagePolicy" + "$ref": "#/definitions/io.openshift.hive.v1.ClusterPool" } }, "kind": { @@ -73715,170 +79861,219 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "ClusterImagePolicyList", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterPoolList", "Scope": "Namespaced" } }, - "io.openshift.config.v1alpha1.ClusterImagePolicySpec": { - "description": "CLusterImagePolicySpec is the specification of the ClusterImagePolicy custom resource.", + "io.openshift.hive.v1.ClusterPoolReference": { + "description": "ClusterPoolReference is a reference to a ClusterPool", "type": "object", "required": [ - "scopes", - "policy" + "namespace", + "poolName" ], "properties": { - "policy": { - "description": "policy contains configuration to allow scopes to be verified, and defines how images not matching the verification policy will be treated.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1alpha1.Policy" + "claimName": { + "description": "ClaimName is the name of the ClusterClaim that claimed the cluster from the pool.", + "type": "string" }, - "scopes": { - "description": "scopes defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the \"Docker Registry HTTP API V2\". Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. For additional details about the format, please refer to the document explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "ClusterImagePolicySpec", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1alpha1.ClusterImagePolicyStatus": { - "type": "object", - "properties": { - "conditions": { - "description": "conditions provide details on the status of this API Resource.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "ClusterImagePolicyStatus", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1alpha1.EtcdBackupSpec": { - "description": "EtcdBackupSpec provides configuration for automated etcd backups to the cluster-etcd-operator", - "type": "object", - "properties": { - "pvcName": { - "description": "PVCName specifies the name of the PersistentVolumeClaim (PVC) which binds a PersistentVolume where the etcd backup files would be saved The PVC itself must always be created in the \"openshift-etcd\" namespace If the PVC is left unspecified \"\" then the platform will choose a reasonable default location to save the backup. In the future this would be backups saved across the control-plane master nodes.", - "type": "string", - "default": "" + "claimedTimestamp": { + "description": "ClaimedTimestamp is the time this cluster was assigned to a ClusterClaim. This is only used for ClusterDeployments belonging to ClusterPools.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "retentionPolicy": { - "description": "RetentionPolicy defines the retention policy for retaining and deleting existing backups.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1alpha1.RetentionPolicy" + "clusterDeploymentCustomization": { + "description": "CustomizationRef is the ClusterPool Inventory claimed customization for this ClusterDeployment. The Customization exists in the ClusterPool namespace.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "schedule": { - "description": "Schedule defines the recurring backup schedule in Cron format every 2 hours: 0 */2 * * * every day at 3am: 0 3 * * * Empty string means no opinion and the platform is left to choose a reasonable default which is subject to change without notice. The current default is \"no backups\", but will change in the future.", + "namespace": { + "description": "Namespace is the namespace where the ClusterPool resides.", "type": "string", "default": "" }, - "timeZone": { - "description": "The time zone name for the given schedule, see https://en.wikipedia.org/wiki/List_of_tz_database_time_zones. If not specified, this will default to the time zone of the kube-controller-manager process. See https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/#time-zones", + "poolName": { + "description": "PoolName is the name of the ClusterPool for which the cluster was created.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "EtcdBackupSpec", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterPoolReference", "Scope": "Namespaced" } }, - "io.openshift.config.v1alpha1.FulcioCAWithRekor": { - "description": "FulcioCAWithRekor defines the root of trust based on the Fulcio certificate and the Rekor public key.", + "io.openshift.hive.v1.ClusterPoolSpec": { + "description": "ClusterPoolSpec defines the desired state of the ClusterPool.", "type": "object", "required": [ - "fulcioCAData", - "rekorKeyData" + "platform", + "size", + "baseDomain", + "imageSetRef" ], "properties": { - "fulcioCAData": { - "description": "fulcioCAData contains inline base64-encoded data for the PEM format fulcio CA. fulcioCAData must be at most 8192 characters.", + "annotations": { + "description": "Annotations to be applied to new ClusterDeployments created for the pool. ClusterDeployments that have already been claimed will not be affected when this value is modified.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "baseDomain": { + "description": "BaseDomain is the base domain to use for all clusters created in this pool.", "type": "string", - "format": "byte" + "default": "" }, - "fulcioSubject": { - "description": "fulcioSubject specifies OIDC issuer and the email of the Fulcio authentication configuration.", + "claimLifetime": { + "description": "ClaimLifetime defines the lifetimes for claims for the cluster pool.", + "$ref": "#/definitions/io.openshift.hive.v1.ClusterPoolClaimLifetime" + }, + "hibernateAfter": { + "description": "HibernateAfter will be applied to new ClusterDeployments created for the pool. HibernateAfter will transition clusters in the clusterpool to hibernating power state after it has been running for the given duration. The time that a cluster has been running is the time since the cluster was installed or the time since the cluster last came out of hibernation. This is a Duration value; see https://pkg.go.dev/time#ParseDuration for accepted formats. Note: due to discrepancies in validation vs parsing, we use a Pattern instead of `Format=duration`. See https://bugzilla.redhat.com/show_bug.cgi?id=2050332 https://github.com/kubernetes/apimachinery/issues/131 https://github.com/kubernetes/apiextensions-apiserver/issues/56", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" + }, + "hibernationConfig": { + "description": "HibernationConfig configures the hibernation/resume behavior of ClusterDeployments owned by the ClusterPool.", + "$ref": "#/definitions/io.openshift.hive.v1.HibernationConfig" + }, + "imageSetRef": { + "description": "ImageSetRef is a reference to a ClusterImageSet. The release image specified in the ClusterImageSet will be used by clusters created for this cluster pool.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1alpha1.PolicyFulcioSubject" + "$ref": "#/definitions/io.openshift.hive.v1.ClusterImageSetReference" }, - "rekorKeyData": { - "description": "rekorKeyData contains inline base64-encoded data for the PEM format from the Rekor public key. rekorKeyData must be at most 8192 characters.", - "type": "string", - "format": "byte" + "installAttemptsLimit": { + "description": "InstallAttemptsLimit is the maximum number of times Hive will attempt to install the cluster.", + "type": "integer", + "format": "int32" + }, + "installConfigSecretTemplateRef": { + "description": "InstallConfigSecretTemplateRef is a secret with the key install-config.yaml consisting of the content of the install-config.yaml to be used as a template for all clusters in this pool. Cluster specific settings (name, basedomain) will be injected dynamically when the ClusterDeployment install-config Secret is generated.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "installerEnv": { + "description": "InstallerEnv are extra environment variables to pass through to the installer. This may be used to enable additional features of the installer.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" + } + }, + "inventory": { + "description": "Inventory maintains a list of entries consumed by the ClusterPool to customize the default ClusterDeployment.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.InventoryEntry" + } + }, + "labels": { + "description": "Labels to be applied to new ClusterDeployments created for the pool. ClusterDeployments that have already been claimed will not be affected when this value is modified.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "maxConcurrent": { + "description": "MaxConcurrent is the maximum number of clusters that will be provisioned or deprovisioned at an time. This includes the claimed clusters being deprovisioned. By default there is no limit.", + "type": "integer", + "format": "int32" + }, + "maxSize": { + "description": "MaxSize is the maximum number of clusters that will be provisioned including clusters that have been claimed and ones waiting to be used. By default there is no limit.", + "type": "integer", + "format": "int32" + }, + "platform": { + "description": "Platform encompasses the desired platform for the cluster.", + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.Platform" + }, + "pullSecretRef": { + "description": "PullSecretRef is the reference to the secret to use when pulling images.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "runningCount": { + "description": "RunningCount is the number of clusters we should keep running. The remainder will be kept hibernated until claimed. By default no clusters will be kept running (all will be hibernated).", + "type": "integer", + "format": "int32" + }, + "size": { + "description": "Size is the default number of clusters that we should keep provisioned and waiting for use.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "skipMachinePools": { + "description": "SkipMachinePools allows creating clusterpools where the machinepools are not managed by hive after cluster creation", + "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "FulcioCAWithRekor", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterPoolSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1alpha1.GatherConfig": { - "description": "gatherConfig provides data gathering configuration options.", + "io.openshift.hive.v1.ClusterPoolStatus": { + "description": "ClusterPoolStatus defines the observed state of ClusterPool", "type": "object", + "required": [ + "size", + "ready" + ], "properties": { - "dataPolicy": { - "description": "dataPolicy allows user to enable additional global obfuscation of the IP addresses and base domain in the Insights archive data. Valid values are \"None\" and \"ObfuscateNetworking\". When set to None the data is not obfuscated. When set to ObfuscateNetworking the IP addresses and the cluster domain name are obfuscated. When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is None.", - "type": "string" - }, - "disabledGatherers": { - "description": "disabledGatherers is a list of gatherers to be excluded from the gathering. All the gatherers can be disabled by providing \"all\" value. If all the gatherers are disabled, the Insights operator does not gather any data. The particular gatherers IDs can be found at https://github.com/openshift/insights-operator/blob/master/docs/gathered-data.md. Run the following command to get the names of last active gatherers: \"oc get insightsoperators.operator.openshift.io cluster -o json | jq '.status.gatherStatus.gatherers[].name'\" An example of disabling gatherers looks like this: `disabledGatherers: [\"clusterconfig/machine_configs\", \"workloads/workload_info\"]`", + "conditions": { + "description": "Conditions includes more detailed status for the cluster pool", "type": "array", "items": { - "type": "string", - "default": "" + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterPoolCondition" } + }, + "ready": { + "description": "Ready is the number of unclaimed clusters that are installed and are running and ready to be claimed.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "size": { + "description": "Size is the number of unclaimed clusters that have been created for the pool.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "standby": { + "description": "Standby is the number of unclaimed clusters that are installed, but not running.", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "GatherConfig", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterPoolStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1alpha1.ImagePolicy": { - "description": "ImagePolicy holds namespace-wide configuration for image signature verification\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.hive.v1.ClusterProvision": { + "description": "ClusterProvision is the Schema for the clusterprovisions API", "type": "object", - "required": [ - "spec" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -73889,34 +80084,73 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1alpha1.ImagePolicySpec" + "$ref": "#/definitions/io.openshift.hive.v1.ClusterProvisionSpec" }, "status": { - "description": "status contains the observed state of the resource.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1alpha1.ImagePolicyStatus" + "$ref": "#/definitions/io.openshift.hive.v1.ClusterProvisionStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "ImagePolicy", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterProvision", "Scope": "Namespaced" } }, - "io.openshift.config.v1alpha1.ImagePolicyList": { - "description": "ImagePolicyList is a list of ImagePolicy resources\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.hive.v1.ClusterProvisionCondition": { + "description": "ClusterProvisionCondition contains details for the current condition of a cluster provision", + "type": "object", + "required": [ + "type", + "status" + ], + "properties": { + "lastProbeTime": { + "description": "LastProbeTime is the last time we probed the condition.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "lastTransitionTime": { + "description": "LastTransitionTime is the last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "Message is a human-readable message indicating details about last transition.", + "type": "string" + }, + "reason": { + "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status is the status of the condition.", + "type": "string", + "default": "" + }, + "type": { + "description": "Type is the type of the condition.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterProvisionCondition", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.ClusterProvisionList": { + "description": "ClusterProvisionList contains a list of ClusterProvision", "type": "object", "required": [ - "metadata", "items" ], "properties": { @@ -73928,7 +80162,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1alpha1.ImagePolicy" + "$ref": "#/definitions/io.openshift.hive.v1.ClusterProvision" } }, "kind": { @@ -73936,80 +80170,127 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "ImagePolicyList", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterProvisionList", "Scope": "Namespaced" } }, - "io.openshift.config.v1alpha1.ImagePolicySpec": { - "description": "ImagePolicySpec is the specification of the ImagePolicy CRD.", + "io.openshift.hive.v1.ClusterProvisionSpec": { + "description": "ClusterProvisionSpec defines the results of provisioning a cluster.", "type": "object", "required": [ - "scopes", - "policy" + "clusterDeploymentRef", + "podSpec", + "attempt", + "stage" ], "properties": { - "policy": { - "description": "policy contains configuration to allow scopes to be verified, and defines how images not matching the verification policy will be treated.", + "adminKubeconfigSecretRef": { + "description": "AdminKubeconfigSecretRef references the secret containing the admin kubeconfig for this cluster.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "adminPasswordSecretRef": { + "description": "AdminPasswordSecretRef references the secret containing the admin username/password which can be used to login to this cluster.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "attempt": { + "description": "Attempt is which attempt number of the cluster deployment that this ClusterProvision is", + "type": "integer", + "format": "int32", + "default": 0 + }, + "clusterDeploymentRef": { + "description": "ClusterDeploymentRef references the cluster deployment provisioned.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1alpha1.Policy" + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "scopes": { - "description": "scopes defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the \"Docker Registry HTTP API V2\". Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. For additional details about the format, please refer to the document explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "clusterID": { + "description": "ClusterID is a globally unique identifier for this cluster generated during installation. Used for reporting metrics among other places.", + "type": "string" + }, + "infraID": { + "description": "InfraID is an identifier for this cluster generated during installation and used for tagging/naming resources in cloud providers.", + "type": "string" + }, + "installLog": { + "description": "InstallLog is the log from the installer.", + "type": "string" + }, + "metadata": { + "description": "Metadata is the metadata.json generated by the installer, providing metadata information about the cluster created. NOTE: This is not used because it didn't work (it was always empty). We think because the thing it's storing (ClusterMetadata from installer) is not a runtime.Object, so can't be put in a RawExtension.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + }, + "metadataJSON": { + "description": "MetadataJSON is a JSON representation of the ClusterMetadata produced by the installer. We don't use a runtime.RawExtension because ClusterMetadata isn't a runtime.Object. We don't use ClusterMetadata itself because we don't want our API consumers to need to pull in the installer code and its dependencies.", + "type": "string", + "format": "byte" + }, + "podSpec": { + "description": "PodSpec is the spec to use for the installer pod.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.PodSpec" + }, + "prevClusterID": { + "description": "PrevClusterID is the cluster ID of the previous failed provision attempt.", + "type": "string" + }, + "prevInfraID": { + "description": "PrevInfraID is the infra ID of the previous failed provision attempt.", + "type": "string" + }, + "prevProvisionName": { + "description": "PrevProvisionName is the name of the previous failed provision attempt.", + "type": "string" + }, + "stage": { + "description": "Stage is the stage of provisioning that the cluster deployment has reached.", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "ImagePolicySpec", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterProvisionSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1alpha1.ImagePolicyStatus": { + "io.openshift.hive.v1.ClusterProvisionStatus": { + "description": "ClusterProvisionStatus defines the observed state of ClusterProvision.", "type": "object", "properties": { "conditions": { - "description": "conditions provide details on the status of this API Resource.", + "description": "Conditions includes more detailed status for the cluster provision", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map" + "$ref": "#/definitions/io.openshift.hive.v1.ClusterProvisionCondition" + } + }, + "jobRef": { + "description": "JobRef is the reference to the job performing the provision.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "ImagePolicyStatus", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterProvisionStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1alpha1.InsightsDataGather": { - "description": "InsightsDataGather provides data gather configuration options for the the Insights Operator.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.hive.v1.ClusterRelocate": { + "description": "ClusterRelocate is the Schema for the ClusterRelocates API", "type": "object", - "required": [ - "spec" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -74020,34 +80301,30 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1alpha1.InsightsDataGatherSpec" + "$ref": "#/definitions/io.openshift.hive.v1.ClusterRelocateSpec" }, "status": { - "description": "status holds observed values from the cluster. They may not be overridden.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1alpha1.InsightsDataGatherStatus" + "$ref": "#/definitions/io.openshift.hive.v1.ClusterRelocateStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "InsightsDataGather", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterRelocate", "Scope": "Clustered" } }, - "io.openshift.config.v1alpha1.InsightsDataGatherList": { - "description": "InsightsDataGatherList is a collection of items\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.hive.v1.ClusterRelocateList": { + "description": "ClusterRelocateList contains a list of ClusterRelocate", "type": "object", "required": [ - "metadata", "items" ], "properties": { @@ -74059,7 +80336,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1alpha1.InsightsDataGather" + "$ref": "#/definitions/io.openshift.hive.v1.ClusterRelocate" } }, "kind": { @@ -74067,419 +80344,390 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "InsightsDataGatherList", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterRelocateList", "Scope": "Namespaced" } }, - "io.openshift.config.v1alpha1.InsightsDataGatherSpec": { + "io.openshift.hive.v1.ClusterRelocateSpec": { + "description": "ClusterRelocateSpec defines the relocation of clusters from one Hive instance to another.", "type": "object", + "required": [ + "kubeconfigSecretRef", + "clusterDeploymentSelector" + ], "properties": { - "gatherConfig": { - "description": "gatherConfig spec attribute includes all the configuration options related to gathering of the Insights data and its uploading to the ingress.", + "clusterDeploymentSelector": { + "description": "ClusterDeploymentSelector is a LabelSelector indicating which clusters will be relocated.", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1alpha1.GatherConfig" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "kubeconfigSecretRef": { + "description": "KubeconfigSecretRef is a reference to the secret containing the kubeconfig for the destination Hive instance. The kubeconfig must be in a data field where the key is \"kubeconfig\".", + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.KubeconfigSecretReference" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "InsightsDataGatherSpec", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterRelocateSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1alpha1.InsightsDataGatherStatus": { + "io.openshift.hive.v1.ClusterRelocateStatus": { + "description": "ClusterRelocateStatus defines the observed state of ClusterRelocate.", "type": "object", "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "InsightsDataGatherStatus", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterRelocateStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1alpha1.Policy": { - "description": "Policy defines the verification policy for the items in the scopes list.", + "io.openshift.hive.v1.ClusterState": { + "description": "ClusterState is the Schema for the clusterstates API", "type": "object", - "required": [ - "rootOfTrust" - ], "properties": { - "rootOfTrust": { - "description": "rootOfTrust specifies the root of trust for the policy.", + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1alpha1.PolicyRootOfTrust" + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, - "signedIdentity": { - "description": "signedIdentity specifies what image identity the signature claims about the image. The required matchPolicy field specifies the approach used in the verification process to verify the identity in the signature and the actual image identity, the default matchPolicy is \"MatchRepoDigestOrExact\".", + "spec": { "default": {}, - "$ref": "#/definitions/io.openshift.config.v1alpha1.PolicyIdentity" + "$ref": "#/definitions/io.openshift.hive.v1.ClusterStateSpec" + }, + "status": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterStateStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "Policy", + "Type": "object", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterState", "Scope": "Namespaced" } }, - "io.openshift.config.v1alpha1.PolicyFulcioSubject": { - "description": "PolicyFulcioSubject defines the OIDC issuer and the email of the Fulcio authentication configuration.", + "io.openshift.hive.v1.ClusterStateList": { + "description": "ClusterStateList contains a list of ClusterState", "type": "object", "required": [ - "oidcIssuer", - "signedEmail" + "items" ], "properties": { - "oidcIssuer": { - "description": "oidcIssuer contains the expected OIDC issuer. It will be verified that the Fulcio-issued certificate contains a (Fulcio-defined) certificate extension pointing at this OIDC issuer URL. When Fulcio issues certificates, it includes a value based on an URL inside the client-provided ID token. Example: \"https://expected.OIDC.issuer/\"", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "signedEmail": { - "description": "signedEmail holds the email address the the Fulcio certificate is issued for. Example: \"expected-signing-user@example.com\"", - "type": "string", - "default": "" + "items": { + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterState" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "PolicyFulcioSubject", + "Type": "list", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterStateList", "Scope": "Namespaced" } }, - "io.openshift.config.v1alpha1.PolicyIdentity": { - "description": "PolicyIdentity defines image identity the signature claims about the image. When omitted, the default matchPolicy is \"MatchRepoDigestOrExact\".", + "io.openshift.hive.v1.ClusterStateSpec": { + "description": "ClusterStateSpec defines the desired state of ClusterState", "type": "object", - "required": [ - "matchPolicy" - ], - "properties": { - "exactRepository": { - "description": "exactRepository is required if matchPolicy is set to \"ExactRepository\".", - "$ref": "#/definitions/io.openshift.config.v1alpha1.PolicyMatchExactRepository" - }, - "matchPolicy": { - "description": "matchPolicy sets the type of matching to be used. Valid values are \"MatchRepoDigestOrExact\", \"MatchRepository\", \"ExactRepository\", \"RemapIdentity\". When omitted, the default value is \"MatchRepoDigestOrExact\". If set matchPolicy to ExactRepository, then the exactRepository must be specified. If set matchPolicy to RemapIdentity, then the remapIdentity must be specified. \"MatchRepoDigestOrExact\" means that the identity in the signature must be in the same repository as the image identity if the image identity is referenced by a digest. Otherwise, the identity in the signature must be the same as the image identity. \"MatchRepository\" means that the identity in the signature must be in the same repository as the image identity. \"ExactRepository\" means that the identity in the signature must be in the same repository as a specific identity specified by \"repository\". \"RemapIdentity\" means that the signature must be in the same as the remapped image identity. Remapped image identity is obtained by replacing the \"prefix\" with the specified “signedPrefix” if the the image identity matches the specified remapPrefix.", - "type": "string", - "default": "" - }, - "remapIdentity": { - "description": "remapIdentity is required if matchPolicy is set to \"RemapIdentity\".", - "$ref": "#/definitions/io.openshift.config.v1alpha1.PolicyMatchRemapIdentity" - } - }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "PolicyIdentity", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterStateSpec", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "matchPolicy", - "fields-to-discriminateBy": { - "exactRepository": "PolicyMatchExactRepository", - "remapIdentity": "PolicyMatchRemapIdentity" - } - } - ] + } }, - "io.openshift.config.v1alpha1.PolicyMatchExactRepository": { + "io.openshift.hive.v1.ClusterStateStatus": { + "description": "ClusterStateStatus defines the observed state of ClusterState", "type": "object", - "required": [ - "repository" - ], "properties": { - "repository": { - "description": "repository is the reference of the image identity to be matched. The value should be a repository name (by omitting the tag or digest) in a registry implementing the \"Docker Registry HTTP API V2\". For example, docker.io/library/busybox", - "type": "string", - "default": "" + "clusterOperators": { + "description": "ClusterOperators contains the state for every cluster operator in the target cluster", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ClusterOperatorState" + } + }, + "lastUpdated": { + "description": "LastUpdated is the last time that operator state was updated", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "PolicyMatchExactRepository", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ClusterStateStatus", "Scope": "Namespaced" } }, - "io.openshift.config.v1alpha1.PolicyMatchRemapIdentity": { + "io.openshift.hive.v1.ControlPlaneAdditionalCertificate": { + "description": "ControlPlaneAdditionalCertificate defines an additional serving certificate for a control plane", "type": "object", "required": [ - "prefix", - "signedPrefix" + "name", + "domain" ], "properties": { - "prefix": { - "description": "prefix is the prefix of the image identity to be matched. If the image identity matches the specified prefix, that prefix is replaced by the specified “signedPrefix” (otherwise it is used as unchanged and no remapping takes place). This useful when verifying signatures for a mirror of some other repository namespace that preserves the vendor’s repository structure. The prefix and signedPrefix values can be either host[:port] values (matching exactly the same host[:port], string), repository namespaces, or repositories (i.e. they must not contain tags/digests), and match as prefixes of the fully expanded form. For example, docker.io/library/busybox (not busybox) to specify that single repository, or docker.io/library (not an empty string) to specify the parent namespace of docker.io/library/busybox.", + "domain": { + "description": "Domain is the domain of the additional control plane certificate", "type": "string", "default": "" }, - "signedPrefix": { - "description": "signedPrefix is the prefix of the image identity to be matched in the signature. The format is the same as \"prefix\". The values can be either host[:port] values (matching exactly the same host[:port], string), repository namespaces, or repositories (i.e. they must not contain tags/digests), and match as prefixes of the fully expanded form. For example, docker.io/library/busybox (not busybox) to specify that single repository, or docker.io/library (not an empty string) to specify the parent namespace of docker.io/library/busybox.", + "name": { + "description": "Name references a CertificateBundle in the ClusterDeployment.Spec that should be used for this additional certificate.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "PolicyMatchRemapIdentity", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ControlPlaneAdditionalCertificate", "Scope": "Namespaced" } }, - "io.openshift.config.v1alpha1.PolicyRootOfTrust": { - "description": "PolicyRootOfTrust defines the root of trust based on the selected policyType.", + "io.openshift.hive.v1.ControlPlaneConfigSpec": { + "description": "ControlPlaneConfigSpec contains additional configuration settings for a target cluster's control plane.", "type": "object", - "required": [ - "policyType" - ], "properties": { - "fulcioCAWithRekor": { - "description": "fulcioCAWithRekor defines the root of trust based on the Fulcio certificate and the Rekor public key. For more information about Fulcio and Rekor, please refer to the document at: https://github.com/sigstore/fulcio and https://github.com/sigstore/rekor", - "$ref": "#/definitions/io.openshift.config.v1alpha1.FulcioCAWithRekor" + "apiServerIPOverride": { + "description": "APIServerIPOverride is the optional override of the API server IP address. Hive will use this IP address for creating TCP connections. Port from the original API server URL will be used. This field can be used when repointing the APIServer's DNS is not viable option.", + "type": "string" }, - "policyType": { - "description": "policyType serves as the union's discriminator. Users are required to assign a value to this field, choosing one of the policy types that define the root of trust. \"PublicKey\" indicates that the policy relies on a sigstore publicKey and may optionally use a Rekor verification. \"FulcioCAWithRekor\" indicates that the policy is based on the Fulcio certification and incorporates a Rekor verification.", - "type": "string", - "default": "" + "apiURLOverride": { + "description": "APIURLOverride is the optional URL override to which Hive will transition for communication with the API server of the remote cluster. When a remote cluster is created, Hive will initially communicate using the API URL established during installation. If an API URL Override is specified, Hive will periodically attempt to connect to the remote cluster using the override URL. Once Hive has determined that the override URL is active, Hive will use the override URL for further communications with the API server of the remote cluster.", + "type": "string" }, - "publicKey": { - "description": "publicKey defines the root of trust based on a sigstore public key.", - "$ref": "#/definitions/io.openshift.config.v1alpha1.PublicKey" + "servingCertificates": { + "description": "ServingCertificates specifies serving certificates for the control plane", + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ControlPlaneServingCertificateSpec" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "PolicyRootOfTrust", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ControlPlaneConfigSpec", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "policyType", - "fields-to-discriminateBy": { - "fulcioCAWithRekor": "FulcioCAWithRekor", - "publicKey": "PublicKey" - } - } - ] + } }, - "io.openshift.config.v1alpha1.PublicKey": { - "description": "PublicKey defines the root of trust based on a sigstore public key.", + "io.openshift.hive.v1.ControlPlaneServingCertificateSpec": { + "description": "ControlPlaneServingCertificateSpec specifies serving certificate settings for the control plane of the target cluster.", "type": "object", - "required": [ - "keyData" - ], "properties": { - "keyData": { - "description": "keyData contains inline base64-encoded data for the PEM format public key. KeyData must be at most 8192 characters.", - "type": "string", - "format": "byte" + "additional": { + "description": "Additional is a list of additional domains and certificates that are also associated with the control plane's api endpoint.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ControlPlaneAdditionalCertificate" + } }, - "rekorKeyData": { - "description": "rekorKeyData contains inline base64-encoded data for the PEM format from the Rekor public key. rekorKeyData must be at most 8192 characters.", - "type": "string", - "format": "byte" + "default": { + "description": "Default references the name of a CertificateBundle in the ClusterDeployment that should be used for the control plane's default endpoint.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "PublicKey", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ControlPlaneServingCertificateSpec", "Scope": "Namespaced" } }, - "io.openshift.config.v1alpha1.RetentionNumberConfig": { - "description": "RetentionNumberConfig specifies the configuration of the retention policy on the number of backups", + "io.openshift.hive.v1.ControllerConfig": { + "description": "ControllerConfig contains the configuration for a controller", "type": "object", - "required": [ - "maxNumberOfBackups" - ], "properties": { - "maxNumberOfBackups": { - "description": "MaxNumberOfBackups defines the maximum number of backups to retain. If the existing number of backups saved is equal to MaxNumberOfBackups then the oldest backup will be removed before a new backup is initiated.", + "clientBurst": { + "description": "ClientBurst specifies client rate limiter burst for a controller", "type": "integer", "format": "int32" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "RetentionNumberConfig", - "Scope": "Namespaced" - } - }, - "io.openshift.config.v1alpha1.RetentionPolicy": { - "description": "RetentionPolicy defines the retention policy for retaining and deleting existing backups. This struct is a discriminated union that allows users to select the type of retention policy from the supported types.", - "type": "object", - "required": [ - "retentionType" - ], - "properties": { - "retentionNumber": { - "description": "RetentionNumber configures the retention policy based on the number of backups", - "$ref": "#/definitions/io.openshift.config.v1alpha1.RetentionNumberConfig" }, - "retentionSize": { - "description": "RetentionSize configures the retention policy based on the size of backups", - "$ref": "#/definitions/io.openshift.config.v1alpha1.RetentionSizeConfig" + "clientQPS": { + "description": "ClientQPS specifies client rate limiter QPS for a controller", + "type": "integer", + "format": "int32" }, - "retentionType": { - "description": "RetentionType sets the type of retention policy. Currently, the only valid policies are retention by number of backups (RetentionNumber), by the size of backups (RetentionSize). More policies or types may be added in the future. Empty string means no opinion and the platform is left to choose a reasonable default which is subject to change without notice. The current default is RetentionNumber with 15 backups kept.\n\nPossible enum values:\n - `\"RetentionNumber\"` sets the retention policy based on the number of backup files saved\n - `\"RetentionSize\"` sets the retention policy based on the total size of the backup files saved", - "type": "string", - "default": "", - "enum": [ - "RetentionNumber", - "RetentionSize" - ] - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "RetentionPolicy", - "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "retentionType", - "fields-to-discriminateBy": { - "retentionNumber": "RetentionNumber", - "retentionSize": "RetentionSize" - } - } - ] - }, - "io.openshift.config.v1alpha1.RetentionSizeConfig": { - "description": "RetentionSizeConfig specifies the configuration of the retention policy on the total size of backups", - "type": "object", - "required": [ - "maxSizeOfBackupsGb" - ], - "properties": { - "maxSizeOfBackupsGb": { - "description": "MaxSizeOfBackupsGb defines the total size in GB of backups to retain. If the current total size backups exceeds MaxSizeOfBackupsGb then the oldest backup will be removed before a new backup is initiated.", + "concurrentReconciles": { + "description": "ConcurrentReconciles specifies number of concurrent reconciles for a controller", + "type": "integer", + "format": "int32" + }, + "queueBurst": { + "description": "QueueBurst specifies workqueue rate limiter burst for a controller", + "type": "integer", + "format": "int32" + }, + "queueQPS": { + "description": "QueueQPS specifies workqueue rate limiter QPS for a controller", + "type": "integer", + "format": "int32" + }, + "replicas": { + "description": "Replicas specifies the number of replicas the specific controller pod should use. This is ONLY for controllers that have been split out into their own pods. This is ignored for all others.", "type": "integer", "format": "int32" + }, + "resources": { + "description": "Resources describes the compute resource requirements of the controller container. This is ONLY for controllers that have been split out into their own pods. This is ignored for all others.", + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" } }, "x-fabric8-info": { "Type": "nested", - "Group": "config.openshift.io", - "Version": "v1alpha1", - "Kind": "RetentionSizeConfig", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ControllerConfig", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ApplicationMenuSpec": { - "description": "ApplicationMenuSpec is the specification of the desired section and icon used for the link in the application menu.", + "io.openshift.hive.v1.ControllersConfig": { + "description": "ControllersConfig contains default as well as controller specific configurations", "type": "object", - "required": [ - "section" - ], "properties": { - "imageURL": { - "description": "imageUrl is the URL for the icon used in front of the link in the application menu. The URL must be an HTTPS URL or a Data URI. The image should be square and will be shown at 24x24 pixels.", - "type": "string" + "controllers": { + "description": "Controllers contains a list of configurations for different controllers", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.SpecificControllerConfig" + } }, - "section": { - "description": "section is the section of the application menu in which the link should appear. This can be any text that will appear as a subheading in the application menu dropdown. A new section will be created if the text does not match text of an existing section.", - "type": "string", - "default": "" + "default": { + "description": "Default specifies default configuration for all the controllers, can be used to override following coded defaults default for concurrent reconciles is 5 default for client qps is 5 default for client burst is 10 default for queue qps is 10 default for queue burst is 100", + "$ref": "#/definitions/io.openshift.hive.v1.ControllerConfig" } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ApplicationMenuSpec", + "Kind": "ControllersConfig", "Scope": "Namespaced" } }, - "io.openshift.console.v1.CLIDownloadLink": { + "io.openshift.hive.v1.DNSZone": { + "description": "DNSZone is the Schema for the dnszones API", "type": "object", - "required": [ - "href" - ], "properties": { - "href": { - "description": "href is the absolute secure URL for the link (must use https)", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "text": { - "description": "text is the display text for the link", - "type": "string", - "default": "" + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.DNSZoneSpec" + }, + "status": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.DNSZoneStatus" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "console.openshift.io", + "Type": "object", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "CLIDownloadLink", + "Kind": "DNSZone", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleCLIDownload": { - "description": "ConsoleCLIDownload is an extension for configuring openshift web console command line interface (CLI) downloads.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.DNSZoneCondition": { + "description": "DNSZoneCondition contains details for the current condition of a DNSZone", "type": "object", "required": [ - "spec" + "type", + "status" ], - "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "properties": { + "lastProbeTime": { + "description": "LastProbeTime is the last time we probed the condition.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "lastTransitionTime": { + "description": "LastTransitionTime is the last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "Message is a human-readable message indicating details about last transition.", "type": "string" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "reason": { + "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.", "type": "string" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "status": { + "description": "Status is the status of the condition.", + "type": "string", + "default": "" }, - "spec": { - "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsoleCLIDownloadSpec" + "type": { + "description": "Type is the type of the condition.", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "console.openshift.io", + "Type": "nested", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleCLIDownload", - "Scope": "Clustered" + "Kind": "DNSZoneCondition", + "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleCLIDownloadList": { - "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.DNSZoneList": { + "description": "DNSZoneList contains a list of DNSZone", "type": "object", "required": [ - "metadata", "items" ], "properties": { @@ -74491,7 +80739,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsoleCLIDownload" + "$ref": "#/definitions/io.openshift.hive.v1.DNSZone" } }, "kind": { @@ -74499,381 +80747,404 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleCLIDownloadList", + "Kind": "DNSZoneList", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleCLIDownloadSpec": { - "description": "ConsoleCLIDownloadSpec is the desired cli download configuration.", + "io.openshift.hive.v1.DNSZoneSpec": { + "description": "DNSZoneSpec defines the desired state of DNSZone", "type": "object", "required": [ - "displayName", - "description", - "links" + "zone" ], "properties": { - "description": { - "description": "description is the description of the CLI download (can include markdown).", - "type": "string", - "default": "" + "aws": { + "description": "AWS specifies AWS-specific cloud configuration", + "$ref": "#/definitions/io.openshift.hive.v1.AWSDNSZoneSpec" }, - "displayName": { - "description": "displayName is the display name of the CLI download.", + "azure": { + "description": "Azure specifes Azure-specific cloud configuration", + "$ref": "#/definitions/io.openshift.hive.v1.AzureDNSZoneSpec" + }, + "gcp": { + "description": "GCP specifies GCP-specific cloud configuration", + "$ref": "#/definitions/io.openshift.hive.v1.GCPDNSZoneSpec" + }, + "linkToParentDomain": { + "description": "LinkToParentDomain specifies whether DNS records should be automatically created to link this DNSZone with a parent domain.", + "type": "boolean" + }, + "preserveOnDelete": { + "description": "PreserveOnDelete allows the user to disconnect a DNSZone from Hive without deprovisioning it. This can also be used to abandon ongoing DNSZone deprovision. Typically set automatically due to PreserveOnDelete being set on a ClusterDeployment.", + "type": "boolean" + }, + "zone": { + "description": "Zone is the DNS zone to host", "type": "string", "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "DNSZoneSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.DNSZoneStatus": { + "description": "DNSZoneStatus defines the observed state of DNSZone", + "type": "object", + "properties": { + "aws": { + "description": "AWSDNSZoneStatus contains status information specific to AWS", + "$ref": "#/definitions/io.openshift.hive.v1.AWSDNSZoneStatus" }, - "links": { - "description": "links is a list of objects that provide CLI download link details.", + "azure": { + "description": "AzureDNSZoneStatus contains status information specific to Azure", + "$ref": "#/definitions/io.openshift.hive.v1.AzureDNSZoneStatus" + }, + "conditions": { + "description": "Conditions includes more detailed status for the DNSZone", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.CLIDownloadLink" + "$ref": "#/definitions/io.openshift.hive.v1.DNSZoneCondition" + } + }, + "gcp": { + "description": "GCPDNSZoneStatus contains status information specific to GCP", + "$ref": "#/definitions/io.openshift.hive.v1.GCPDNSZoneStatus" + }, + "lastSyncGeneration": { + "description": "LastSyncGeneration is the generation of the zone resource that was last sync'd. This is used to know if the Object has changed and we should sync immediately.", + "type": "integer", + "format": "int64" + }, + "lastSyncTimestamp": { + "description": "LastSyncTimestamp is the time that the zone was last sync'd.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "nameServers": { + "description": "NameServers is a list of nameservers for this DNS zone", + "type": "array", + "items": { + "type": "string", + "default": "" } } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleCLIDownloadSpec", + "Kind": "DNSZoneStatus", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleExternalLogLink": { - "description": "ConsoleExternalLogLink is an extension for customizing OpenShift web console log links.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.DeploymentConfig": { "type": "object", "required": [ - "spec" + "deploymentName" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "deploymentName": { + "description": "DeploymentName is the name of one of the Deployments/StatefulSets managed by hive-operator. NOTE: At this time each deployment has only one container. In the future, we may provide a way to specify which container this DeploymentConfig will be applied to.", + "type": "string", + "default": "" }, - "spec": { - "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsoleExternalLogLinkSpec" + "resources": { + "description": "Resources allows customization of the resource (memory, CPU, etc.) limits and requests used by containers in the Deployment/StatefulSet named by DeploymentName.", + "$ref": "#/definitions/io.k8s.api.core.v1.ResourceRequirements" } }, "x-fabric8-info": { - "Type": "object", - "Group": "console.openshift.io", + "Type": "nested", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleExternalLogLink", - "Scope": "Clustered" + "Kind": "DeploymentConfig", + "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleExternalLogLinkList": { - "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.FailedProvisionAWSConfig": { + "description": "FailedProvisionAWSConfig contains AWS-specific info to upload log files.", "type": "object", "required": [ - "metadata", - "items" + "credentialsSecretRef" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "bucket": { + "description": "Bucket is the S3 bucket to store the logs in.", "type": "string" }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsoleExternalLogLink" - } + "credentialsSecretRef": { + "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with AWS S3. It will need permission to upload logs to S3. Secret should have keys named aws_access_key_id and aws_secret_access_key that contain the AWS credentials. Example Secret:\n data:\n aws_access_key_id: minio\n aws_secret_access_key: minio123", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "region": { + "description": "Region is the AWS region to use for S3 operations. This defaults to us-east-1. For AWS China, use cn-northwest-1.", "type": "string" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "serviceEndpoint": { + "description": "ServiceEndpoint is the url to connect to an S3 compatible provider.", + "type": "string" } }, "x-fabric8-info": { - "Type": "list", - "Group": "console.openshift.io", + "Type": "nested", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleExternalLogLinkList", + "Kind": "FailedProvisionAWSConfig", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleExternalLogLinkSpec": { - "description": "ConsoleExternalLogLinkSpec is the desired log link configuration. The log link will appear on the logs tab of the pod details page.", + "io.openshift.hive.v1.FailedProvisionConfig": { + "description": "FailedProvisionConfig contains settings to control behavior undertaken by Hive when an installation attempt fails.", "type": "object", - "required": [ - "text", - "hrefTemplate" - ], "properties": { - "hrefTemplate": { - "description": "hrefTemplate is an absolute secure URL (must use https) for the log link including variables to be replaced. Variables are specified in the URL with the format ${variableName}, for instance, ${containerName} and will be replaced with the corresponding values from the resource. Resource is a pod. Supported variables are: - ${resourceName} - name of the resource which containes the logs - ${resourceUID} - UID of the resource which contains the logs\n - e.g. `11111111-2222-3333-4444-555555555555`\n- ${containerName} - name of the resource's container that contains the logs - ${resourceNamespace} - namespace of the resource that contains the logs - ${resourceNamespaceUID} - namespace UID of the resource that contains the logs - ${podLabels} - JSON representation of labels matching the pod with the logs\n - e.g. `{\"key1\":\"value1\",\"key2\":\"value2\"}`\n\ne.g., https://example.com/logs?resourceName=${resourceName}\u0026containerName=${containerName}\u0026resourceNamespace=${resourceNamespace}\u0026podLabels=${podLabels}", - "type": "string", - "default": "" + "aws": { + "$ref": "#/definitions/io.openshift.hive.v1.FailedProvisionAWSConfig" }, - "namespaceFilter": { - "description": "namespaceFilter is a regular expression used to restrict a log link to a matching set of namespaces (e.g., `^openshift-`). The string is converted into a regular expression using the JavaScript RegExp constructor. If not specified, links will be displayed for all the namespaces.", - "type": "string" + "retryReasons": { + "description": "RetryReasons is a list of installFailingReason strings from the [additional-]install-log-regexes ConfigMaps. If specified, Hive will only retry a failed installation if it results in one of the listed reasons. If omitted (not the same thing as empty!), Hive will retry regardless of the failure reason. (The total number of install attempts is still constrained by ClusterDeployment.Spec.InstallAttemptsLimit.)", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "text": { - "description": "text is the display text for the link", - "type": "string", - "default": "" + "skipGatherLogs": { + "description": "DEPRECATED: This flag is no longer respected and will be removed in the future.", + "type": "boolean" } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleExternalLogLinkSpec", + "Kind": "FailedProvisionConfig", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleLink": { - "description": "ConsoleLink is an extension for customizing OpenShift web console links.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.FeatureGateSelection": { + "description": "FeatureGateSelection allows selecting feature gates for the controller.", "type": "object", - "required": [ - "spec" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "custom": { + "description": "custom allows the enabling or disabling of any feature. Because of its nature, this setting cannot be validated. If you have any typos or accidentally apply invalid combinations might cause unknown behavior. featureSet must equal \"Custom\" must be set to use this field.", + "$ref": "#/definitions/io.openshift.hive.v1.FeatureGatesEnabled" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "featureSet": { + "description": "featureSet changes the list of features in the cluster. The default is empty. Be very careful adjusting this setting.", "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" - }, - "spec": { - "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsoleLinkSpec" } }, "x-fabric8-info": { - "Type": "object", - "Group": "console.openshift.io", + "Type": "nested", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleLink", - "Scope": "Clustered" + "Kind": "FeatureGateSelection", + "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleLinkList": { - "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.FeatureGatesEnabled": { + "description": "FeatureGatesEnabled is list of feature gates that must be enabled.", "type": "object", - "required": [ - "metadata", - "items" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { + "enabled": { + "description": "enabled is a list of all feature gates that you want to force on", "type": "array", "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsoleLink" + "type": "string", + "default": "" } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "list", - "Group": "console.openshift.io", + "Type": "nested", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleLinkList", + "Kind": "FeatureGatesEnabled", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleLinkSpec": { - "description": "ConsoleLinkSpec is the desired console link configuration.", + "io.openshift.hive.v1.GCPClusterDeprovision": { + "description": "GCPClusterDeprovision contains GCP-specific configuration for a ClusterDeprovision", "type": "object", "required": [ - "text", - "href", - "location" + "region" ], "properties": { - "applicationMenu": { - "description": "applicationMenu holds information about section and icon used for the link in the application menu, and it is applicable only when location is set to ApplicationMenu.", - "$ref": "#/definitions/io.openshift.console.v1.ApplicationMenuSpec" - }, - "href": { - "description": "href is the absolute secure URL for the link (must use https)", - "type": "string", - "default": "" - }, - "location": { - "description": "location determines which location in the console the link will be appended to (ApplicationMenu, HelpMenu, UserMenu, NamespaceDashboard).", - "type": "string", - "default": "" + "credentialsSecretRef": { + "description": "CredentialsSecretRef is the GCP account credentials to use for deprovisioning the cluster", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "namespaceDashboard": { - "description": "namespaceDashboard holds information about namespaces in which the dashboard link should appear, and it is applicable only when location is set to NamespaceDashboard. If not specified, the link will appear in all namespaces.", - "$ref": "#/definitions/io.openshift.console.v1.NamespaceDashboardSpec" + "networkProjectID": { + "description": "NetworkProjectID is used for shared VPC setups", + "type": "string" }, - "text": { - "description": "text is the display text for the link", + "region": { + "description": "Region is the GCP region for this deprovision", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleLinkSpec", + "Kind": "GCPClusterDeprovision", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleNotification": { - "description": "ConsoleNotification is the extension for configuring openshift web console notifications.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.GCPDNSZoneSpec": { + "description": "GCPDNSZoneSpec contains GCP-specific DNSZone specifications", "type": "object", "required": [ - "spec" + "credentialsSecretRef" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "credentialsSecretRef": { + "description": "CredentialsSecretRef references a secret that will be used to authenticate with GCP CloudDNS. It will need permission to create and manage CloudDNS Hosted Zones. Secret should have a key named 'osServiceAccount.json'. The credentials must specify the project to use.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "GCPDNSZoneSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.GCPDNSZoneStatus": { + "description": "GCPDNSZoneStatus contains status information specific to GCP Cloud DNS zones", + "type": "object", + "properties": { + "zoneName": { + "description": "ZoneName is the name of the zone in GCP Cloud DNS", "type": "string" - }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "GCPDNSZoneStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.GCPPrivateServiceConnectConfig": { + "description": "GCPPrivateServiceConnectConfig defines the gcp private service connect config for the private-link controller.", + "type": "object", + "required": [ + "credentialsSecretRef" + ], + "properties": { + "credentialsSecretRef": { + "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with GCP for creating the resources for GCP Private Service Connect", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "spec": { - "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsoleNotificationSpec" + "endpointVPCInventory": { + "description": "EndpointVPCInventory is a list of VPCs and the corresponding subnets in various GCP regions. The controller uses this list to choose a VPC for creating GCP Endpoints. Since the VPC Endpoints must be in the same region as the ClusterDeployment, we must have VPCs in that region to be able to setup Private Service Connect.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.GCPPrivateServiceConnectInventory" + } } }, "x-fabric8-info": { - "Type": "object", - "Group": "console.openshift.io", + "Type": "nested", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleNotification", - "Scope": "Clustered" + "Kind": "GCPPrivateServiceConnectConfig", + "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleNotificationList": { - "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.GCPPrivateServiceConnectInventory": { + "description": "GCPPrivateServiceConnectInventory is a VPC and its corresponding subnets. This VPC will be used to create a GCP Endpoint whenever there is a Private Service Connect service created for a ClusterDeployment.", "type": "object", "required": [ - "metadata", - "items" + "network", + "subnets" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "network": { + "type": "string", + "default": "" }, - "items": { + "subnets": { "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsoleNotification" + "$ref": "#/definitions/io.openshift.hive.v1.GCPPrivateServiceConnectSubnet" } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "list", - "Group": "console.openshift.io", + "Type": "nested", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleNotificationList", + "Kind": "GCPPrivateServiceConnectInventory", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleNotificationSpec": { - "description": "ConsoleNotificationSpec is the desired console notification configuration.", + "io.openshift.hive.v1.GCPPrivateServiceConnectSubnet": { + "description": "GCPPrivateServiceConnectSubnet defines subnet and the corresponding GCP region.", "type": "object", "required": [ - "text" + "subnet", + "region" ], "properties": { - "backgroundColor": { - "description": "backgroundColor is the color of the background for the notification as CSS data type color.", - "type": "string" - }, - "color": { - "description": "color is the color of the text for the notification as CSS data type color.", - "type": "string" - }, - "link": { - "description": "link is an object that holds notification link details.", - "$ref": "#/definitions/io.openshift.console.v1.Link" - }, - "location": { - "description": "location is the location of the notification in the console. Valid values are: \"BannerTop\", \"BannerBottom\", \"BannerTopBottom\".", - "type": "string" + "region": { + "type": "string", + "default": "" }, - "text": { - "description": "text is the visible text of the notification.", + "subnet": { "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleNotificationSpec", + "Kind": "GCPPrivateServiceConnectSubnet", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsolePlugin": { - "description": "ConsolePlugin is an extension for customizing OpenShift web console by dynamically loading code from another service running on the cluster.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.HibernationConfig": { + "type": "object", + "properties": { + "resumeTimeout": { + "description": "ResumeTimeout is the maximum amount of time we will wait for an unclaimed ClusterDeployment to resume from hibernation (e.g. at the behest of runningCount, or in preparation for being claimed). If this time is exceeded, the ClusterDeployment will be considered Broken and we will replace it. The default (unspecified or zero) means no timeout -- we will allow the ClusterDeployment to continue trying to resume \"forever\". This is a Duration value; see https://pkg.go.dev/time#ParseDuration for accepted formats. Note: due to discrepancies in validation vs parsing, we use a Pattern instead of `Format=duration`. See https://bugzilla.redhat.com/show_bug.cgi?id=2050332 https://github.com/kubernetes/apimachinery/issues/131 https://github.com/kubernetes/apiextensions-apiserver/issues/56", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Duration" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "HibernationConfig", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.HiveConfig": { + "description": "HiveConfig is the Schema for the hives API", "type": "object", - "required": [ - "metadata", - "spec" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -74884,203 +81155,410 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginSpec" + "$ref": "#/definitions/io.openshift.hive.v1.HiveConfigSpec" + }, + "status": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.HiveConfigStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsolePlugin", + "Kind": "HiveConfig", "Scope": "Clustered" } }, - "io.openshift.console.v1.ConsolePluginBackend": { - "description": "ConsolePluginBackend holds information about the endpoint which serves the console's plugin", + "io.openshift.hive.v1.HiveConfigCondition": { + "description": "HiveConfigCondition contains details for the current condition of a HiveConfig", "type": "object", "required": [ - "type" + "type", + "status" ], "properties": { - "service": { - "description": "service is a Kubernetes Service that exposes the plugin using a deployment with an HTTP server. The Service must use HTTPS and Service serving certificate. The console backend will proxy the plugins assets from the Service using the service CA bundle.", - "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginService" + "lastProbeTime": { + "description": "LastProbeTime is the last time we probed the condition.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "lastTransitionTime": { + "description": "LastTransitionTime is the last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "Message is a human-readable message indicating details about last transition.", + "type": "string" + }, + "reason": { + "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status is the status of the condition.", + "type": "string", + "default": "" }, "type": { - "description": "type is the backend type which servers the console's plugin. Currently only \"Service\" is supported.", + "description": "Type is the type of the condition.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsolePluginBackend", + "Kind": "HiveConfigCondition", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "service": "Service" - } - } - ] + } }, - "io.openshift.console.v1.ConsolePluginI18n": { - "description": "ConsolePluginI18n holds information on localization resources that are served by the dynamic plugin.", + "io.openshift.hive.v1.HiveConfigList": { + "description": "HiveConfigList contains a list of Hive", "type": "object", "required": [ - "loadType" + "items" ], "properties": { - "loadType": { - "description": "loadType indicates how the plugin's localization resource should be loaded. Valid values are Preload, Lazy and the empty string. When set to Preload, all localization resources are fetched when the plugin is loaded. When set to Lazy, localization resources are lazily loaded as and when they are required by the console. When omitted or set to the empty string, the behaviour is equivalent to Lazy type.", - "type": "string", - "default": "" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" + }, + "items": { + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.HiveConfig" + } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + } + }, + "x-fabric8-info": { + "Type": "list", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "HiveConfigList", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.HiveConfigSpec": { + "description": "HiveConfigSpec defines the desired state of Hive", + "type": "object", + "properties": { + "additionalCertificateAuthoritiesSecretRef": { + "description": "AdditionalCertificateAuthoritiesSecretRef is a list of references to secrets in the TargetNamespace that contain an additional Certificate Authority to use when communicating with target clusters. These certificate authorities will be used in addition to any self-signed CA generated by each cluster on installation. The cert data should be stored in the Secret key named 'ca.crt'.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + } + }, + "argoCDConfig": { + "description": "ArgoCD specifies configuration for ArgoCD integration. If enabled, Hive will automatically add provisioned clusters to ArgoCD, and remove them when they are deprovisioned.", + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ArgoCDConfig" + }, + "awsPrivateLink": { + "description": "AWSPrivateLink defines the configuration for the aws-private-link controller. It provides 3 major pieces of information required by the controller, 1. The Credentials that should be used to create AWS PrivateLink resources other than\n what exist in the customer's account.\n2. A list of VPCs that can be used by the controller to choose one to create AWS VPC Endpoints\n for the AWS VPC Endpoint Services created for ClusterDeployments in their\n corresponding regions.\n3. A list of VPCs that should be able to resolve the DNS addresses setup for Private Link.", + "$ref": "#/definitions/io.openshift.hive.v1.AWSPrivateLinkConfig" + }, + "backup": { + "description": "Backup specifies configuration for backup integration. If absent, backup integration will be disabled.", + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.BackupConfig" + }, + "clusterVersionPollInterval": { + "description": "ClusterVersionPollInterval is a string duration indicating how much time must pass before checking whether we need to update the hive.openshift.io/version* labels on ClusterDeployment. If zero or unset, we'll only reconcile when the ClusterDeployment changes.", + "type": "string" + }, + "controllersConfig": { + "description": "ControllersConfig is used to configure different hive controllers", + "$ref": "#/definitions/io.openshift.hive.v1.ControllersConfig" + }, + "deleteProtection": { + "description": "DeleteProtection can be set to \"enabled\" to turn on automatic delete protection for ClusterDeployments. When enabled, Hive will add the \"hive.openshift.io/protected-delete\" annotation to new ClusterDeployments. Once a ClusterDeployment has been installed, a user must remove the annotation from a ClusterDeployment prior to deleting it.", + "type": "string" + }, + "deploymentConfig": { + "description": "DeploymentConfig is used to configure (pods/containers of) the Deployments generated by hive-operator.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.DeploymentConfig" + } + }, + "deprovisionsDisabled": { + "description": "DeprovisionsDisabled can be set to true to block deprovision jobs from running.", + "type": "boolean" + }, + "disabledControllers": { + "description": "DisabledControllers allows selectively disabling Hive controllers by name. The name of an individual controller matches the name of the controller as seen in the Hive logging output.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "exportMetrics": { + "description": "ExportMetrics has been disabled and has no effect. If upgrading from a version where it was active, please be aware of the following in your HiveConfig.Spec.TargetNamespace (default `hive` if unset): 1) ServiceMonitors named hive-controllers and hive-clustersync; 2) Role and RoleBinding named prometheus-k8s; 3) The `openshift.io/cluster-monitoring` metadata.label on the Namespace itself. You may wish to delete these resources. Or you may wish to continue using them to enable monitoring in your environment; but be aware that hive will no longer reconcile them.", + "type": "boolean" + }, + "failedProvisionConfig": { + "description": "FailedProvisionConfig is used to configure settings related to handling provision failures.", + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.FailedProvisionConfig" + }, + "featureGates": { + "$ref": "#/definitions/io.openshift.hive.v1.FeatureGateSelection" + }, + "globalPullSecretRef": { + "description": "GlobalPullSecretRef is used to specify a pull secret that will be used globally by all of the cluster deployments. For each cluster deployment, the contents of GlobalPullSecret will be merged with the specific pull secret for a cluster deployment(if specified), with precedence given to the contents of the pull secret for the cluster deployment. The global pull secret is assumed to be in the TargetNamespace.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "logLevel": { + "description": "LogLevel is the level of logging to use for the Hive controllers. Acceptable levels, from coarsest to finest, are panic, fatal, error, warn, info, debug, and trace. The default level is info.", + "type": "string" + }, + "machinePoolPollInterval": { + "description": "MachinePoolPollInterval is a string duration indicating how much time must pass before checking whether remote resources related to MachinePools need to be reapplied. Set to zero to disable polling -- we'll only reconcile when hub objects change. The default interval is 30m.", + "type": "string" + }, + "maintenanceMode": { + "description": "MaintenanceMode can be set to true to disable the hive controllers in situations where we need to ensure nothing is running that will add or act upon finalizers on Hive types. This should rarely be needed. Sets replicas to 0 for the hive-controllers deployment to accomplish this.", + "type": "boolean" + }, + "managedDomains": { + "description": "ManagedDomains is the list of DNS domains that are managed by the Hive cluster When specifying 'manageDNS: true' in a ClusterDeployment, the ClusterDeployment's baseDomain should be a direct child of one of these domains, otherwise the ClusterDeployment creation will result in a validation error.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ManageDNSConfig" + } + }, + "metricsConfig": { + "description": "MetricsConfig encapsulates metrics specific configurations, like opting in for certain metrics.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.metricsconfig.MetricsConfig" + }, + "privateLink": { + "description": "PrivateLink is used to configure the privatelink controller.", + "$ref": "#/definitions/io.openshift.hive.v1.PrivateLinkConfig" + }, + "releaseImageVerificationConfigMapRef": { + "description": "ReleaseImageVerificationConfigMapRef is a reference to the ConfigMap that will be used to verify release images.\n\nThe config map structure is exactly the same as the config map used for verification of release images for OpenShift 4 during upgrades. Therefore you can usually set this to the config map shipped as part of OpenShift (openshift-config-managed/release-verification).\n\nSee https://github.com/openshift/cluster-update-keys for more details. The keys within the config map in the data field define how verification is performed:\n\nverifier-public-key-*: One or more GPG public keys in ASCII form that must have signed the\n release image by digest.\n\nstore-*: A URL (scheme file://, http://, or https://) location that contains signatures. These\n signatures are in the atomic container signature format. The URL will have the digest\n of the image appended to it as \"\u003cSTORE\u003e/\u003cALGO\u003e=\u003cDIGEST\u003e/signature-\u003cNUMBER\u003e\" as described\n in the container image signing format. The docker-image-manifest section of the\n signature must match the release image digest. Signatures are searched starting at\n NUMBER 1 and incrementing if the signature exists but is not valid. The signature is a\n GPG signed and encrypted JSON message. The file store is provided for testing only at\n the current time, although future versions of the CVO might allow host mounting of\n signatures.\n\nSee https://github.com/containers/image/blob/ab49b0a48428c623a8f03b41b9083d48966b34a9/docs/signature-protocols.md for a description of the signature store\n\nThe returned verifier will require that any new release image will only be considered verified if each provided public key has signed the release image digest. The signature may be in any store and the lookup order is internally defined.\n\nIf not set, no verification will be performed.", + "$ref": "#/definitions/io.openshift.hive.v1.ReleaseImageVerificationConfigMapReference" + }, + "serviceProviderCredentialsConfig": { + "description": "ServiceProviderCredentialsConfig is used to configure credentials related to being a service provider on various cloud platforms.", + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.ServiceProviderCredentials" + }, + "syncSetReapplyInterval": { + "description": "SyncSetReapplyInterval is a string duration indicating how much time must pass before SyncSet resources will be reapplied. The default reapply interval is two hours.", + "type": "string" + }, + "targetNamespace": { + "description": "TargetNamespace is the namespace where the core Hive components should be run. Defaults to \"hive\". Will be created if it does not already exist. All resource references in HiveConfig can be assumed to be in the TargetNamespace. NOTE: Whereas it is possible to edit this value, causing hive to \"move\" its core components to the new namespace, the old namespace is not deleted, as it will still contain resources created by kubernetes and/or other OpenShift controllers.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsolePluginI18n", + "Kind": "HiveConfigSpec", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsolePluginList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.HiveConfigStatus": { + "description": "HiveConfigStatus defines the observed state of Hive", "type": "object", - "required": [ - "metadata", - "items" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "aggregatorClientCAHash": { + "description": "AggregatorClientCAHash keeps an md5 hash of the aggregator client CA configmap data from the openshift-config-managed namespace. When the configmap changes, admission is redeployed.", "type": "string" }, - "items": { + "conditions": { + "description": "Conditions includes more detailed status for the HiveConfig", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsolePlugin" + "$ref": "#/definitions/io.openshift.hive.v1.HiveConfigCondition" } }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "configApplied": { + "description": "ConfigApplied will be set by the hive operator to indicate whether or not the LastGenerationObserved was successfully reconciled.", + "type": "boolean" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "observedGeneration": { + "description": "ObservedGeneration will record the most recently processed HiveConfig object's generation.", + "type": "integer", + "format": "int64" } }, "x-fabric8-info": { - "Type": "list", - "Group": "console.openshift.io", + "Type": "nested", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsolePluginList", + "Kind": "HiveConfigStatus", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsolePluginProxy": { - "description": "ConsolePluginProxy holds information on various service types to which console's backend will proxy the plugin's requests.", + "io.openshift.hive.v1.IBMClusterDeprovision": { + "description": "IBMClusterDeprovision contains IBM Cloud specific configuration for a ClusterDeprovision", "type": "object", "required": [ - "endpoint", - "alias" + "credentialsSecretRef", + "region", + "baseDomain" ], "properties": { - "alias": { - "description": "alias is a proxy name that identifies the plugin's proxy. An alias name should be unique per plugin. The console backend exposes following proxy endpoint:\n\n/api/proxy/plugin/\u003cplugin-name\u003e/\u003cproxy-alias\u003e/\u003crequest-path\u003e?\u003coptional-query-parameters\u003e\n\nRequest example path:\n\n/api/proxy/plugin/acm/search/pods?namespace=openshift-apiserver", + "baseDomain": { + "description": "BaseDomain is the DNS base domain.", "type": "string", "default": "" }, - "authorization": { - "description": "authorization provides information about authorization type, which the proxied request should contain", - "type": "string" - }, - "caCertificate": { - "description": "caCertificate provides the cert authority certificate contents, in case the proxied Service is using custom service CA. By default, the service CA bundle provided by the service-ca operator is used.", - "type": "string" - }, - "endpoint": { - "description": "endpoint provides information about endpoint to which the request is proxied to.", + "credentialsSecretRef": { + "description": "CredentialsSecretRef is the IBM Cloud credentials to use for deprovisioning the cluster", "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginProxyEndpoint" + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "region": { + "description": "Region specifies the IBM Cloud region", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsolePluginProxy", + "Kind": "IBMClusterDeprovision", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsolePluginProxyEndpoint": { - "description": "ConsolePluginProxyEndpoint holds information about the endpoint to which request will be proxied to.", + "io.openshift.hive.v1.IdentityProviderStatus": { + "description": "IdentityProviderStatus defines the observed state of SyncSet", + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "IdentityProviderStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.InventoryEntry": { + "description": "InventoryEntry maintains a reference to a custom resource consumed by a clusterpool to customize the cluster deployment.", "type": "object", "required": [ - "type" + "name" ], "properties": { - "service": { - "description": "service is an in-cluster Service that the plugin will connect to. The Service must use HTTPS. The console backend exposes an endpoint in order to proxy communication between the plugin and the Service. Note: service field is required for now, since currently only \"Service\" type is supported.", - "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginProxyServiceConfig" + "kind": { + "description": "Kind denotes the kind of the referenced resource. The default is ClusterDeploymentCustomization, which is also currently the only supported value.", + "type": "string" }, - "type": { - "description": "type is the type of the console plugin's proxy. Currently only \"Service\" is supported.", - "type": "string", - "default": "" + "name": { + "description": "Name is the name of the referenced resource.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsolePluginProxyEndpoint", + "Kind": "InventoryEntry", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "service": "Service" - } - } - ] + } }, - "io.openshift.console.v1.ConsolePluginProxyServiceConfig": { - "description": "ProxyTypeServiceConfig holds information on Service to which console's backend will proxy the plugin's requests.", + "io.openshift.hive.v1.KubeconfigSecretReference": { + "description": "KubeconfigSecretReference is a reference to a secret containing the kubeconfig for a remote cluster.", "type": "object", "required": [ "name", - "namespace", - "port" + "namespace" ], "properties": { "name": { - "description": "name of Service that the plugin needs to connect to.", + "description": "Name is the name of the secret.", "type": "string", "default": "" }, "namespace": { - "description": "namespace of Service that the plugin needs to connect to", + "description": "Namespace is the namespace where the secret lives.", "type": "string", "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "KubeconfigSecretReference", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.MachinePool": { + "description": "MachinePool is the Schema for the machinepools API", + "type": "object", + "properties": { + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "port": { - "description": "port on which the Service that the plugin needs to connect to is listening on.", + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + }, + "spec": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolSpec" + }, + "status": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolStatus" + } + }, + "x-fabric8-info": { + "Type": "object", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "MachinePool", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.MachinePoolAutoscaling": { + "description": "MachinePoolAutoscaling details how the machine pool is to be auto-scaled.", + "type": "object", + "required": [ + "minReplicas", + "maxReplicas" + ], + "properties": { + "maxReplicas": { + "description": "MaxReplicas is the maximum number of replicas for the machine pool.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "minReplicas": { + "description": "MinReplicas is the minimum number of replicas for the machine pool.", "type": "integer", "format": "int32", "default": 0 @@ -75088,97 +81566,93 @@ }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsolePluginProxyServiceConfig", + "Kind": "MachinePoolAutoscaling", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsolePluginService": { - "description": "ConsolePluginService holds information on Service that is serving console dynamic plugin assets.", + "io.openshift.hive.v1.MachinePoolCondition": { + "description": "MachinePoolCondition contains details for the current condition of a machine pool", "type": "object", "required": [ - "name", - "namespace", - "port" + "type", + "status" ], "properties": { - "basePath": { - "description": "basePath is the path to the plugin's assets. The primary asset it the manifest file called `plugin-manifest.json`, which is a JSON document that contains metadata about the plugin and the extensions.", - "type": "string", - "default": "" + "lastProbeTime": { + "description": "LastProbeTime is the last time we probed the condition.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "name": { - "description": "name of Service that is serving the plugin assets.", + "lastTransitionTime": { + "description": "LastTransitionTime is the last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" + }, + "message": { + "description": "Message is a human-readable message indicating details about last transition.", + "type": "string" + }, + "reason": { + "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status is the status of the condition.", "type": "string", "default": "" }, - "namespace": { - "description": "namespace of Service that is serving the plugin assets.", + "type": { + "description": "Type is the type of the condition.", "type": "string", "default": "" - }, - "port": { - "description": "port on which the Service that is serving the plugin is listening to.", - "type": "integer", - "format": "int32", - "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsolePluginService", + "Kind": "MachinePoolCondition", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsolePluginSpec": { - "description": "ConsolePluginSpec is the desired plugin configuration.", + "io.openshift.hive.v1.MachinePoolList": { + "description": "MachinePoolList contains a list of MachinePool", "type": "object", "required": [ - "displayName", - "backend" + "items" ], "properties": { - "backend": { - "description": "backend holds the configuration of backend which is serving console's plugin .", - "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginBackend" - }, - "displayName": { - "description": "displayName is the display name of the plugin. The dispalyName should be between 1 and 128 characters.", - "type": "string", - "default": "" - }, - "i18n": { - "description": "i18n is the configuration of plugin's localization resources.", - "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginI18n" + "apiVersion": { + "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "type": "string" }, - "proxy": { - "description": "proxy is a list of proxies that describe various service type to which the plugin needs to connect to.", + "items": { "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsolePluginProxy" + "$ref": "#/definitions/io.openshift.hive.v1.MachinePool" } + }, + "kind": { + "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", + "type": "string" + }, + "metadata": { + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { - "Type": "nested", - "Group": "console.openshift.io", + "Type": "list", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsolePluginSpec", + "Kind": "MachinePoolList", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleQuickStart": { - "description": "ConsoleQuickStart is an extension for guiding user through various workflows in the OpenShift web console.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.MachinePoolNameLease": { + "description": "MachinePoolNameLease is the Schema for the MachinePoolNameLeases API. This resource is mostly empty as we're primarily relying on the name to determine if a lease is available. Note that not all cloud providers require the use of a lease for naming, at present this is only required for GCP where we're extremely restricted on name lengths.", "type": "object", - "required": [ - "spec" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -75189,28 +81663,30 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsoleQuickStartSpec" + "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolNameLeaseSpec" + }, + "status": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolNameLeaseStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleQuickStart", - "Scope": "Clustered" + "Kind": "MachinePoolNameLease", + "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleQuickStartList": { - "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.MachinePoolNameLeaseList": { + "description": "MachinePoolNameLeaseList contains a list of MachinePoolNameLeases.", "type": "object", "required": [ - "metadata", "items" ], "properties": { @@ -75222,7 +81698,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsoleQuickStart" + "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolNameLease" } }, "kind": { @@ -75230,708 +81706,705 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleQuickStartList", + "Kind": "MachinePoolNameLeaseList", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleQuickStartSpec": { - "description": "ConsoleQuickStartSpec is the desired quick start configuration.", + "io.openshift.hive.v1.MachinePoolNameLeaseSpec": { + "description": "MachinePoolNameLeaseSpec is a minimal resource for obtaining unique machine pool names of a limited length.", "type": "object", - "required": [ - "displayName", - "durationMinutes", - "description", - "introduction", - "tasks" - ], - "properties": { - "accessReviewResources": { - "description": "accessReviewResources contains a list of resources that the user's access will be reviewed against in order for the user to complete the Quick Start. The Quick Start will be hidden if any of the access reviews fail.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.api.authorization.v1.ResourceAttributes" - } - }, - "conclusion": { - "description": "conclusion sums up the Quick Start and suggests the possible next steps. (includes markdown)", - "type": "string" - }, - "description": { - "description": "description is the description of the Quick Start. (includes markdown)", - "type": "string", - "default": "" - }, - "displayName": { - "description": "displayName is the display name of the Quick Start.", - "type": "string", - "default": "" - }, - "durationMinutes": { - "description": "durationMinutes describes approximately how many minutes it will take to complete the Quick Start.", - "type": "integer", - "format": "int32", - "default": 0 - }, - "icon": { - "description": "icon is a base64 encoded image that will be displayed beside the Quick Start display name. The icon should be an vector image for easy scaling. The size of the icon should be 40x40.", - "type": "string" - }, - "introduction": { - "description": "introduction describes the purpose of the Quick Start. (includes markdown)", - "type": "string", - "default": "" - }, - "nextQuickStart": { - "description": "nextQuickStart is a list of the following Quick Starts, suggested for the user to try.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "prerequisites": { - "description": "prerequisites contains all prerequisites that need to be met before taking a Quick Start. (includes markdown)", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "tags": { - "description": "tags is a list of strings that describe the Quick Start.", - "type": "array", - "items": { - "type": "string", - "default": "" - } - }, - "tasks": { - "description": "tasks is the list of steps the user has to perform to complete the Quick Start.", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsoleQuickStartTask" - } - } - }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleQuickStartSpec", + "Kind": "MachinePoolNameLeaseSpec", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleQuickStartTask": { - "description": "ConsoleQuickStartTask is a single step in a Quick Start.", + "io.openshift.hive.v1.MachinePoolNameLeaseStatus": { + "description": "MachinePoolNameLeaseStatus defines the observed state of MachinePoolNameLease.", "type": "object", - "required": [ - "title", - "description" - ], - "properties": { - "description": { - "description": "description describes the steps needed to complete the task. (includes markdown)", - "type": "string", - "default": "" - }, - "review": { - "description": "review contains instructions to validate the task is complete. The user will select 'Yes' or 'No'. using a radio button, which indicates whether the step was completed successfully.", - "$ref": "#/definitions/io.openshift.console.v1.ConsoleQuickStartTaskReview" - }, - "summary": { - "description": "summary contains information about the passed step.", - "$ref": "#/definitions/io.openshift.console.v1.ConsoleQuickStartTaskSummary" - }, - "title": { - "description": "title describes the task and is displayed as a step heading.", - "type": "string", - "default": "" - } - }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleQuickStartTask", + "Kind": "MachinePoolNameLeaseStatus", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleQuickStartTaskReview": { - "description": "ConsoleQuickStartTaskReview contains instructions that validate a task was completed successfully.", + "io.openshift.hive.v1.MachinePoolPlatform": { + "description": "MachinePoolPlatform is the platform-specific configuration for a machine pool. Only one of the platforms should be set.", "type": "object", - "required": [ - "instructions", - "failedTaskHelp" - ], "properties": { - "failedTaskHelp": { - "description": "failedTaskHelp contains suggestions for a failed task review and is shown at the end of task. (includes markdown)", - "type": "string", - "default": "" + "aws": { + "description": "AWS is the configuration used when installing on AWS.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.MachinePoolPlatform" }, - "instructions": { - "description": "instructions contains steps that user needs to take in order to validate his work after going through a task. (includes markdown)", - "type": "string", - "default": "" + "azure": { + "description": "Azure is the configuration used when installing on Azure.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.azure.MachinePool" + }, + "gcp": { + "description": "GCP is the configuration used when installing on GCP.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.MachinePool" + }, + "ibmcloud": { + "description": "IBMCloud is the configuration used when installing on IBM Cloud.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.ibmcloud.MachinePool" + }, + "openstack": { + "description": "OpenStack is the configuration used when installing on OpenStack.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.openstack.MachinePool" + }, + "ovirt": { + "description": "Ovirt is the configuration used when installing on oVirt.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.ovirt.MachinePool" + }, + "vsphere": { + "description": "VSphere is the configuration used when installing on vSphere", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.vsphere.MachinePool" } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleQuickStartTaskReview", + "Kind": "MachinePoolPlatform", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleQuickStartTaskSummary": { - "description": "ConsoleQuickStartTaskSummary contains information about a passed step.", + "io.openshift.hive.v1.MachinePoolSpec": { + "description": "MachinePoolSpec defines the desired state of MachinePool", "type": "object", "required": [ - "success", - "failed" + "clusterDeploymentRef", + "name", + "platform" ], "properties": { - "failed": { - "description": "failed briefly describes the unsuccessfully passed task. (includes markdown)", - "type": "string", - "default": "" + "autoscaling": { + "description": "Autoscaling is the details for auto-scaling the machine pool. Replicas and autoscaling cannot be used together.", + "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolAutoscaling" }, - "success": { - "description": "success describes the succesfully passed task.", + "clusterDeploymentRef": { + "description": "ClusterDeploymentRef references the cluster deployment to which this machine pool belongs.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "labels": { + "description": "Map of label string keys and values that will be applied to the created MachineSet's MachineSpec. This affects the labels that will end up on the *Nodes* (in contrast with the MachineLabels field). This list will overwrite any modifications made to Node labels on an ongoing basis.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "machineLabels": { + "description": "Map of label string keys and values that will be applied to the created MachineSet's MachineTemplateSpec. This affects the labels that will end up on the *Machines* (in contrast with the Labels field). This list will overwrite any modifications made to Machine labels on an ongoing basis. Note: We ignore entries that conflict with generated labels.", + "type": "object", + "additionalProperties": { + "type": "string", + "default": "" + } + }, + "name": { + "description": "Name is the name of the machine pool.", "type": "string", "default": "" + }, + "platform": { + "description": "Platform is configuration for machine pool specific to the platform. When using a MachinePool to control the default worker machines created by installer, these must match the values provided in the install-config.", + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolPlatform" + }, + "replicas": { + "description": "Replicas is the count of machines for this machine pool. Replicas and autoscaling cannot be used together. Default is 1, if autoscaling is not used.", + "type": "integer", + "format": "int64" + }, + "taints": { + "description": "List of taints that will be applied to the created MachineSet's MachineSpec. This list will overwrite any modifications made to Node taints on an ongoing basis. In case of duplicate entries, first encountered taint Value will be preserved, and the rest collapsed on the corresponding MachineSets. Note that taints are uniquely identified based on key+effect, not just key.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.Taint" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleQuickStartTaskSummary", + "Kind": "MachinePoolSpec", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleSample": { - "description": "ConsoleSample is an extension to customizing OpenShift web console by adding samples.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.MachinePoolStatus": { + "description": "MachinePoolStatus defines the observed state of MachinePool", "type": "object", - "required": [ - "metadata", - "spec" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "conditions": { + "description": "Conditions includes more detailed status for the cluster deployment", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.MachinePoolCondition" + } }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "controlledByReplica": { + "description": "ControlledByReplica indicates which replica of the hive-machinepool StatefulSet is responsible for this MachinePool. Note that this value indicates the replica that most recently handled the MachinePool. If the hive-machinepool statefulset is scaled up or down, the controlling replica can change, potentially causing logs to be spread across multiple pods.", + "type": "integer", + "format": "int64" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "machineSets": { + "description": "MachineSets is the status of the machine sets for the machine pool on the remote cluster.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.MachineSetStatus" + } }, - "spec": { - "description": "spec contains configuration for a console sample.", - "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleSpec" - } - }, - "x-fabric8-info": { - "Type": "object", - "Group": "console.openshift.io", - "Version": "v1", - "Kind": "ConsoleSample", - "Scope": "Clustered" - } - }, - "io.openshift.console.v1.ConsoleSampleContainerImportSource": { - "description": "ConsoleSampleContainerImportSource let the user import a container image.", - "type": "object", - "required": [ - "image" - ], - "properties": { - "image": { - "description": "reference to a container image that provides a HTTP service. The service must be exposed on the default port (8080) unless otherwise configured with the port field.\n\nSupported formats:\n - \u003crepository-name\u003e/\u003cimage-name\u003e\n - docker.io/\u003crepository-name\u003e/\u003cimage-name\u003e\n - quay.io/\u003crepository-name\u003e/\u003cimage-name\u003e\n - quay.io/\u003crepository-name\u003e/\u003cimage-name\u003e@sha256:\u003cimage hash\u003e\n - quay.io/\u003crepository-name\u003e/\u003cimage-name\u003e:\u003ctag\u003e", - "type": "string", - "default": "" + "ownedLabels": { + "description": "OwnedLabels lists the keys of labels this MachinePool created on the remote MachineSet's MachineSpec. (In contrast with OwnedMachineLabels.) Used to identify labels to remove from the remote MachineSet when they are absent from the MachinePool's spec.labels.", + "type": "array", + "items": { + "type": "string", + "default": "" + } }, - "service": { - "description": "service contains configuration for the Service resource created for this sample.", - "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleContainerImportSourceService" + "ownedMachineLabels": { + "description": "OwnedMachineLabels lists the keys of labels this MachinePool created on the remote MachineSet's MachineTemplateSpec. (In contrast with OwnedLabels.) Used to identify labels to remove from the remote MachineSet when they are absent from the MachinePool's spec.machineLabels.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "ownedTaints": { + "description": "OwnedTaints lists identifiers of taints this MachinePool created on the remote MachineSet. Used to identify taints to remove from the remote MachineSet when they are absent from the MachinePool's spec.taints.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.TaintIdentifier" + } + }, + "replicas": { + "description": "Replicas is the current number of replicas for the machine pool.", + "type": "integer", + "format": "int32" } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleSampleContainerImportSource", + "Kind": "MachinePoolStatus", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleSampleContainerImportSourceService": { - "description": "ConsoleSampleContainerImportSourceService let the samples author define defaults for the Service created for this sample.", + "io.openshift.hive.v1.MachineSetStatus": { + "description": "MachineSetStatus is the status of a machineset in the remote cluster.", "type": "object", + "required": [ + "name", + "replicas", + "minReplicas", + "maxReplicas" + ], "properties": { - "targetPort": { - "description": "targetPort is the port that the service listens on for HTTP requests. This port will be used for Service and Route created for this sample. Port must be in the range 1 to 65535. Default port is 8080.", + "errorMessage": { + "type": "string" + }, + "errorReason": { + "description": "In the event that there is a terminal problem reconciling the replicas, both ErrorReason and ErrorMessage will be set. ErrorReason will be populated with a succinct value suitable for machine interpretation, while ErrorMessage will contain a more verbose string suitable for logging and human consumption.", + "type": "string" + }, + "maxReplicas": { + "description": "MaxReplicas is the maximum number of replicas for the machine set.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "minReplicas": { + "description": "MinReplicas is the minimum number of replicas for the machine set.", + "type": "integer", + "format": "int32", + "default": 0 + }, + "name": { + "description": "Name is the name of the machine set.", + "type": "string", + "default": "" + }, + "readyReplicas": { + "description": "The number of ready replicas for this MachineSet. A machine is considered ready when the node has been created and is \"Ready\". It is transferred as-is from the MachineSet from remote cluster.", "type": "integer", "format": "int32" + }, + "replicas": { + "description": "Replicas is the current number of replicas for the machine set.", + "type": "integer", + "format": "int32", + "default": 0 } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleSampleContainerImportSourceService", + "Kind": "MachineSetStatus", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleSampleGitImportSource": { - "description": "ConsoleSampleGitImportSource let the user import code from a public Git repository.", + "io.openshift.hive.v1.ManageDNSAWSConfig": { + "description": "ManageDNSAWSConfig contains AWS-specific info to manage a given domain.", "type": "object", "required": [ - "repository" + "credentialsSecretRef" ], "properties": { - "repository": { - "description": "repository contains the reference to the actual Git repository.", + "credentialsSecretRef": { + "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with AWS Route53. It will need permission to manage entries for the domain listed in the parent ManageDNSConfig object. Secret should have AWS keys named 'aws_access_key_id' and 'aws_secret_access_key'.", "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleGitImportSourceRepository" + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "service": { - "description": "service contains configuration for the Service resource created for this sample.", - "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleGitImportSourceService" + "region": { + "description": "Region is the AWS region to use for route53 operations. This defaults to us-east-1. For AWS China, use cn-northwest-1.", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleSampleGitImportSource", + "Kind": "ManageDNSAWSConfig", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleSampleGitImportSourceRepository": { - "description": "ConsoleSampleGitImportSourceRepository let the user import code from a public git repository.", + "io.openshift.hive.v1.ManageDNSAzureConfig": { + "description": "ManageDNSAzureConfig contains Azure-specific info to manage a given domain", "type": "object", "required": [ - "url" + "credentialsSecretRef", + "resourceGroupName" ], "properties": { - "contextDir": { - "description": "contextDir is used to specify a directory within the repository to build the component. Must start with `/` and have a maximum length of 256 characters. When omitted, the default value is to build from the root of the repository.", - "type": "string", - "default": "" + "cloudName": { + "description": "CloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK with the appropriate Azure API endpoints. If empty, the value is equal to \"AzurePublicCloud\".", + "type": "string" }, - "revision": { - "description": "revision is the git revision at which to clone the git repository Can be used to clone a specific branch, tag or commit SHA. Must be at most 256 characters in length. When omitted the repository's default branch is used.", - "type": "string", - "default": "" + "credentialsSecretRef": { + "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with Azure DNS. It wil need permission to manage entries in each of the managed domains listed in the parent ManageDNSConfig object. Secret should have a key named 'osServicePrincipal.json'", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "url": { - "description": "url of the Git repository that contains a HTTP service. The HTTP service must be exposed on the default port (8080) unless otherwise configured with the port field.\n\nOnly public repositories on GitHub, GitLab and Bitbucket are currently supported:\n\n - https://github.com/\u003corg\u003e/\u003crepository\u003e\n - https://gitlab.com/\u003corg\u003e/\u003crepository\u003e\n - https://bitbucket.org/\u003corg\u003e/\u003crepository\u003e\n\nThe url must have a maximum length of 256 characters.", + "resourceGroupName": { + "description": "ResourceGroupName specifies the Azure resource group containing the DNS zones for the domains being managed.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleSampleGitImportSourceRepository", + "Kind": "ManageDNSAzureConfig", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleSampleGitImportSourceService": { - "description": "ConsoleSampleGitImportSourceService let the samples author define defaults for the Service created for this sample.", + "io.openshift.hive.v1.ManageDNSConfig": { + "description": "ManageDNSConfig contains the domain being managed, and the cloud-specific details for accessing/managing the domain.", "type": "object", + "required": [ + "domains" + ], "properties": { - "targetPort": { - "description": "targetPort is the port that the service listens on for HTTP requests. This port will be used for Service created for this sample. Port must be in the range 1 to 65535. Default port is 8080.", - "type": "integer", - "format": "int32" + "aws": { + "description": "AWS contains AWS-specific settings for external DNS", + "$ref": "#/definitions/io.openshift.hive.v1.ManageDNSAWSConfig" + }, + "azure": { + "description": "Azure contains Azure-specific settings for external DNS", + "$ref": "#/definitions/io.openshift.hive.v1.ManageDNSAzureConfig" + }, + "domains": { + "description": "Domains is the list of domains that hive will be managing entries for with the provided credentials.", + "type": "array", + "items": { + "type": "string", + "default": "" + } + }, + "gcp": { + "description": "GCP contains GCP-specific settings for external DNS", + "$ref": "#/definitions/io.openshift.hive.v1.ManageDNSGCPConfig" } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleSampleGitImportSourceService", + "Kind": "ManageDNSConfig", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleSampleList": { - "description": "Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.ManageDNSGCPConfig": { + "description": "ManageDNSGCPConfig contains GCP-specific info to manage a given domain.", "type": "object", "required": [ - "metadata", - "items" + "credentialsSecretRef" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" - }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsoleSample" - } - }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" - }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", + "credentialsSecretRef": { + "description": "CredentialsSecretRef references a secret in the TargetNamespace that will be used to authenticate with GCP DNS. It will need permission to manage entries in each of the managed domains for this cluster. listed in the parent ManageDNSConfig object. Secret should have a key named 'osServiceAccount.json'. The credentials must specify the project to use.", "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" } }, "x-fabric8-info": { - "Type": "list", - "Group": "console.openshift.io", + "Type": "nested", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleSampleList", + "Kind": "ManageDNSGCPConfig", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleSampleSource": { - "description": "ConsoleSampleSource is the actual sample definition and can hold different sample types. Unsupported sample types will be ignored in the web console.", + "io.openshift.hive.v1.OpenStackClusterDeprovision": { + "description": "OpenStackClusterDeprovision contains OpenStack-specific configuration for a ClusterDeprovision", "type": "object", "required": [ - "type" + "cloud" ], "properties": { - "containerImport": { - "description": "containerImport allows the user import a container image.", - "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleContainerImportSource" - }, - "gitImport": { - "description": "gitImport allows the user to import code from a git repository.", - "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleGitImportSource" + "certificatesSecretRef": { + "description": "CertificatesSecretRef refers to a secret that contains CA certificates necessary for communicating with the OpenStack.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "type": { - "description": "type of the sample, currently supported: \"GitImport\";\"ContainerImport\"", + "cloud": { + "description": "Cloud is the secion in the clouds.yaml secret below to use for auth/connectivity.", "type": "string", "default": "" + }, + "credentialsSecretRef": { + "description": "CredentialsSecretRef is the OpenStack account credentials to use for deprovisioning the cluster", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleSampleSource", + "Kind": "OpenStackClusterDeprovision", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "containerImport": "ContainerImport", - "gitImport": "GitImport" - } - } - ] + } }, - "io.openshift.console.v1.ConsoleSampleSpec": { - "description": "ConsoleSampleSpec is the desired sample for the web console. Samples will appear with their title, descriptions and a badge in a samples catalog.", + "io.openshift.hive.v1.OvirtClusterDeprovision": { + "description": "OvirtClusterDeprovision contains oVirt-specific configuration for a ClusterDeprovision", "type": "object", "required": [ - "title", - "abstract", - "description", - "source" + "clusterID", + "credentialsSecretRef", + "certificatesSecretRef" ], "properties": { - "abstract": { - "description": "abstract is a short introduction to the sample.\n\nIt is required and must be no more than 100 characters in length.\n\nThe abstract is shown on the sample card tile below the title and provider and is limited to three lines of content.", - "type": "string", - "default": "" - }, - "description": { - "description": "description is a long form explanation of the sample.\n\nIt is required and can have a maximum length of **4096** characters.\n\nIt is a README.md-like content for additional information, links, pre-conditions, and other instructions. It will be rendered as Markdown so that it can contain line breaks, links, and other simple formatting.", - "type": "string", - "default": "" - }, - "icon": { - "description": "icon is an optional base64 encoded image and shown beside the sample title.\n\nThe format must follow the data: URL format and can have a maximum size of **10 KB**.\n\n data:[\u003cmediatype\u003e][;base64],\u003cbase64 encoded image\u003e\n\nFor example:\n\n data:image;base64, plus the base64 encoded image.\n\nVector images can also be used. SVG icons must start with:\n\n data:image/svg+xml;base64, plus the base64 encoded SVG image.\n\nAll sample catalog icons will be shown on a white background (also when the dark theme is used). The web console ensures that different aspect ratios work correctly. Currently, the surface of the icon is at most 40x100px.\n\nFor more information on the data URL format, please visit https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/Data_URLs.", - "type": "string", - "default": "" - }, - "provider": { - "description": "provider is an optional label to honor who provides the sample.\n\nIt is optional and must be no more than 50 characters in length.\n\nA provider can be a company like \"Red Hat\" or an organization like \"CNCF\" or \"Knative\".\n\nCurrently, the provider is only shown on the sample card tile below the title with the prefix \"Provided by \"", - "type": "string", - "default": "" - }, - "source": { - "description": "source defines where to deploy the sample service from. The sample may be sourced from an external git repository or container image.", + "certificatesSecretRef": { + "description": "CertificatesSecretRef refers to a secret that contains the oVirt CA certificates necessary for communicating with the oVirt.", "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsoleSampleSource" - }, - "tags": { - "description": "tags are optional string values that can be used to find samples in the samples catalog.\n\nExamples of common tags may be \"Java\", \"Quarkus\", etc.\n\nThey will be displayed on the samples details page.", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "set" + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" }, - "title": { - "description": "title is the display name of the sample.\n\nIt is required and must be no more than 50 characters in length.", + "clusterID": { + "description": "The oVirt cluster ID", "type": "string", "default": "" }, - "type": { - "description": "type is an optional label to group multiple samples.\n\nIt is optional and must be no more than 20 characters in length.\n\nRecommendation is a singular term like \"Builder Image\", \"Devfile\" or \"Serverless Function\".\n\nCurrently, the type is shown a badge on the sample card tile in the top right corner.", - "type": "string", - "default": "" + "credentialsSecretRef": { + "description": "CredentialsSecretRef is the oVirt account credentials to use for deprovisioning the cluster secret fields: ovirt_url, ovirt_username, ovirt_password, ovirt_ca_bundle", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleSampleSpec", + "Kind": "OvirtClusterDeprovision", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleYAMLSample": { - "description": "ConsoleYAMLSample is an extension for customizing OpenShift web console YAML samples.\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.PatchEntity": { + "description": "PatchEntity represent a json patch (RFC 6902) to be applied to the install-config", "type": "object", "required": [ - "metadata", - "spec" + "op", + "path", + "value" ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", + "from": { + "description": "From is the json path to copy or move the value from", "type": "string" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "op": { + "description": "Op is the operation to perform: add, remove, replace, move, copy, test", + "type": "string", + "default": "" }, - "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" + "path": { + "description": "Path is the json path to the value to be modified", + "type": "string", + "default": "" }, - "spec": { - "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsoleYAMLSampleSpec" + "value": { + "description": "Value is the value to be used in the operation", + "type": "string", + "default": "" } }, "x-fabric8-info": { - "Type": "object", - "Group": "console.openshift.io", + "Type": "nested", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleYAMLSample", - "Scope": "Clustered" + "Kind": "PatchEntity", + "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleYAMLSampleList": { - "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.Platform": { + "description": "Platform is the configuration for the specific platform upon which to perform the installation. Only one of the platform configuration should be set.", "type": "object", - "required": [ - "metadata", - "items" - ], "properties": { - "apiVersion": { - "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", - "type": "string" + "agentBareMetal": { + "description": "AgentBareMetal is the configuration used when performing an Assisted Agent based installation to bare metal.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.agent.BareMetalPlatform" }, - "items": { - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.openshift.console.v1.ConsoleYAMLSample" - } + "aws": { + "description": "AWS is the configuration used when installing on AWS.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.Platform" }, - "kind": { - "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", - "type": "string" + "azure": { + "description": "Azure is the configuration used when installing on Azure.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.azure.Platform" }, - "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" + "baremetal": { + "description": "BareMetal is the configuration used when installing on bare metal.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.baremetal.Platform" + }, + "gcp": { + "description": "GCP is the configuration used when installing on Google Cloud Platform.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.Platform" + }, + "ibmcloud": { + "description": "IBMCloud is the configuration used when installing on IBM Cloud", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.ibmcloud.Platform" + }, + "none": { + "description": "None indicates platform-agnostic install. https://docs.openshift.com/container-platform/4.7/installing/installing_platform_agnostic/installing-platform-agnostic.html", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.none.Platform" + }, + "openstack": { + "description": "OpenStack is the configuration used when installing on OpenStack", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.openstack.Platform" + }, + "ovirt": { + "description": "Ovirt is the configuration used when installing on oVirt", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.ovirt.Platform" + }, + "vsphere": { + "description": "VSphere is the configuration used when installing on vSphere", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.vsphere.Platform" } }, "x-fabric8-info": { - "Type": "list", - "Group": "console.openshift.io", + "Type": "nested", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleYAMLSampleList", + "Kind": "Platform", "Scope": "Namespaced" } }, - "io.openshift.console.v1.ConsoleYAMLSampleSpec": { - "description": "ConsoleYAMLSampleSpec is the desired YAML sample configuration. Samples will appear with their descriptions in a samples sidebar when creating a resources in the web console.", + "io.openshift.hive.v1.PlatformStatus": { + "description": "PlatformStatus contains the observed state for the specific platform upon which to perform the installation", "type": "object", - "required": [ - "targetResource", - "title", - "description", - "yaml" - ], "properties": { - "description": { - "description": "description of the YAML sample.", - "type": "string", - "default": "" - }, - "snippet": { - "description": "snippet indicates that the YAML sample is not the full YAML resource definition, but a fragment that can be inserted into the existing YAML document at the user's cursor.", - "type": "boolean", - "default": false - }, - "targetResource": { - "description": "targetResource contains apiVersion and kind of the resource YAML sample is representating.", - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.TypeMeta" - }, - "title": { - "description": "title of the YAML sample.", - "type": "string", - "default": "" + "aws": { + "description": "AWS is the observed state on AWS.", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.aws.PlatformStatus" }, - "yaml": { - "description": "yaml is the YAML sample to display.", - "type": "string", - "default": "" + "gcp": { + "description": "GCP is the observed state on GCP", + "$ref": "#/definitions/com.github.openshift.hive.apis.hive.v1.gcp.PlatformStatus" } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "ConsoleYAMLSampleSpec", + "Kind": "PlatformStatus", "Scope": "Namespaced" } }, - "io.openshift.console.v1.Link": { - "description": "Represents a standard link that could be generated in HTML", + "io.openshift.hive.v1.PrivateLinkConfig": { + "description": "PrivateLinkConfig defines the configuration for the privatelink controller.", "type": "object", - "required": [ - "text", - "href" - ], "properties": { - "href": { - "description": "href is the absolute secure URL for the link (must use https)", - "type": "string", - "default": "" - }, - "text": { - "description": "text is the display text for the link", - "type": "string", - "default": "" + "gcp": { + "description": "GCP is the configuration for GCP hub and link resources.", + "$ref": "#/definitions/io.openshift.hive.v1.GCPPrivateServiceConnectConfig" } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "Link", + "Kind": "PrivateLinkConfig", "Scope": "Namespaced" } }, - "io.openshift.console.v1.NamespaceDashboardSpec": { - "description": "NamespaceDashboardSpec is a specification of namespaces in which the dashboard link should appear. If both namespaces and namespaceSelector are specified, the link will appear in namespaces that match either", + "io.openshift.hive.v1.Provisioning": { + "description": "Provisioning contains settings used only for initial cluster provisioning.", "type": "object", "properties": { - "namespaceSelector": { - "description": "namespaceSelector is used to select the Namespaces that should contain dashboard link by label. If the namespace labels match, dashboard link will be shown for the namespaces.", - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + "imageSetRef": { + "description": "ImageSetRef is a reference to a ClusterImageSet. If a value is specified for ReleaseImage, that will take precedence over the one from the ClusterImageSet.", + "$ref": "#/definitions/io.openshift.hive.v1.ClusterImageSetReference" }, - "namespaces": { - "description": "namespaces is an array of namespace names in which the dashboard link should appear.", + "installConfigSecretRef": { + "description": "InstallConfigSecretRef is the reference to a secret that contains an openshift-install InstallConfig. This file will be passed through directly to the installer. Any version of InstallConfig can be used, provided it can be parsed by the openshift-install version for the release you are provisioning.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "installerEnv": { + "description": "InstallerEnv are extra environment variables to pass through to the installer. This may be used to enable additional features of the installer.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.EnvVar" + } + }, + "installerImageOverride": { + "description": "InstallerImageOverride allows specifying a URI for the installer image, normally gleaned from the metadata within the ReleaseImage.", + "type": "string" + }, + "manifestsConfigMapRef": { + "description": "ManifestsConfigMapRef is a reference to user-provided manifests to add to or replace manifests that are generated by the installer. It serves the same purpose as, and is mutually exclusive with, ManifestsSecretRef.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "manifestsSecretRef": { + "description": "ManifestsSecretRef is a reference to user-provided manifests to add to or replace manifests that are generated by the installer. It serves the same purpose as, and is mutually exclusive with, ManifestsConfigMapRef.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "releaseImage": { + "description": "ReleaseImage is the image containing metadata for all components that run in the cluster, and is the primary and best way to specify what specific version of OpenShift you wish to install.", + "type": "string" + }, + "sshKnownHosts": { + "description": "SSHKnownHosts are known hosts to be configured in the hive install manager pod to avoid ssh prompts. Use of ssh in the install pod is somewhat limited today (failure log gathering from cluster, some bare metal provisioning scenarios), so this setting is often not needed.", "type": "array", "items": { "type": "string", "default": "" } + }, + "sshPrivateKeySecretRef": { + "description": "SSHPrivateKeySecretRef is the reference to the secret that contains the private SSH key to use for access to compute instances. This private key should correspond to the public key included in the InstallConfig. The private key is used by Hive to gather logs on the target cluster if there are install failures. The SSH private key is expected to be in the secret data under the \"ssh-privatekey\" key.", + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" } }, "x-fabric8-info": { "Type": "nested", - "Group": "console.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "NamespaceDashboardSpec", + "Kind": "Provisioning", "Scope": "Namespaced" } }, - "io.openshift.example.v1.CELUnion": { - "description": "CELUnion demonstrates how to use a discriminated union and how to validate it using CEL.", + "io.openshift.hive.v1.ReleaseImageVerificationConfigMapReference": { + "description": "ReleaseImageVerificationConfigMapReference is a reference to the ConfigMap that will be used to verify release images.", "type": "object", + "required": [ + "namespace", + "name" + ], "properties": { - "optionalMember": { - "description": "optionalMember is a union member that is optional.", - "type": "string" - }, - "requiredMember": { - "description": "requiredMember is a union member that is required.", - "type": "string" + "name": { + "description": "Name of the ConfigMap", + "type": "string", + "default": "" }, - "type": { - "description": "type determines which of the union members should be populated.", - "type": "string" + "namespace": { + "description": "Namespace of the ConfigMap", + "type": "string", + "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "example.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "CELUnion", + "Kind": "ReleaseImageVerificationConfigMapReference", "Scope": "Namespaced" - }, - "x-kubernetes-unions": [ - { - "discriminator": "type", - "fields-to-discriminateBy": { - "optionalMember": "OptionalMember", - "requiredMember": "RequiredMember" - } + } + }, + "io.openshift.hive.v1.SecretMapping": { + "description": "SecretMapping defines a source and destination for a secret to be synced by a SyncSet", + "type": "object", + "required": [ + "sourceRef", + "targetRef" + ], + "properties": { + "sourceRef": { + "description": "SourceRef specifies the name and namespace of a secret on the management cluster", + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.SecretReference" + }, + "targetRef": { + "description": "TargetRef specifies the target name and namespace of the secret on the target cluster", + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.SecretReference" } - ] + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "SecretMapping", + "Scope": "Namespaced" + } }, - "io.openshift.example.v1.EvolvingUnion": { + "io.openshift.hive.v1.SecretReference": { + "description": "SecretReference is a reference to a secret by name and namespace", "type": "object", + "required": [ + "name" + ], "properties": { - "type": { - "description": "type is the discriminator. It has different values for Default and for TechPreviewNoUpgrade", + "name": { + "description": "Name is the name of the secret", + "type": "string", + "default": "" + }, + "namespace": { + "description": "Namespace is the namespace where the secret lives. If not present for the source secret reference, it is assumed to be the same namespace as the syncset with the reference.", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "example.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "EvolvingUnion", + "Kind": "SecretReference", "Scope": "Namespaced" } }, - "io.openshift.example.v1.StableConfigType": { - "description": "StableConfigType is a stable config type that may include TechPreviewNoUpgrade fields.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.SelectorSyncIdentityProvider": { + "description": "SelectorSyncIdentityProvider is the Schema for the SelectorSyncSet API", "type": "object", "properties": { "apiVersion": { @@ -75943,31 +82416,28 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec is the specification of the desired behavior of the StableConfigType.", "default": {}, - "$ref": "#/definitions/io.openshift.example.v1.StableConfigTypeSpec" + "$ref": "#/definitions/io.openshift.hive.v1.SelectorSyncIdentityProviderSpec" }, "status": { - "description": "status is the most recently observed status of the StableConfigType.", "default": {}, - "$ref": "#/definitions/io.openshift.example.v1.StableConfigTypeStatus" + "$ref": "#/definitions/io.openshift.hive.v1.IdentityProviderStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "example.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "StableConfigType", + "Kind": "SelectorSyncIdentityProvider", "Scope": "Clustered" } }, - "io.openshift.example.v1.StableConfigTypeList": { - "description": "StableConfigTypeList contains a list of StableConfigTypes.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.SelectorSyncIdentityProviderList": { + "description": "SelectorSyncIdentityProviderList contains a list of SelectorSyncIdentityProviders", "type": "object", "required": [ "items" @@ -75981,7 +82451,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.example.v1.StableConfigType" + "$ref": "#/definitions/io.openshift.hive.v1.SelectorSyncIdentityProvider" } }, "kind": { @@ -75989,121 +82459,49 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "example.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "StableConfigTypeList", + "Kind": "SelectorSyncIdentityProviderList", "Scope": "Namespaced" } }, - "io.openshift.example.v1.StableConfigTypeSpec": { - "description": "StableConfigTypeSpec is the desired state", + "io.openshift.hive.v1.SelectorSyncIdentityProviderSpec": { + "description": "SelectorSyncIdentityProviderSpec defines the SyncIdentityProviderCommonSpec to sync to ClusterDeploymentSelector indicating which clusters the SelectorSyncIdentityProvider applies to in any namespace.", "type": "object", "required": [ - "immutableField" + "identityProviders" ], "properties": { - "celUnion": { - "description": "celUnion demonstrates how to validate a discrminated union using CEL", - "default": {}, - "$ref": "#/definitions/io.openshift.example.v1.CELUnion" - }, - "coolNewField": { - "description": "coolNewField is a field that is for tech preview only. On normal clusters this shouldn't be present", - "type": "string", - "default": "" - }, - "evolvingCollection": { - "description": "evolvingCollection demonstrates how to have a collection where the maximum number of items varies on cluster type. For default clusters, this will be \"1\" but on TechPreview clusters, this value will be \"3\".", - "type": "array", - "items": { - "type": "string", - "default": "" - }, - "x-kubernetes-list-type": "atomic" - }, - "evolvingUnion": { - "description": "evolvingUnion demonstrates how to phase in new values into discriminated union", + "clusterDeploymentSelector": { + "description": "ClusterDeploymentSelector is a LabelSelector indicating which clusters the SelectorIdentityProvider applies to in any namespace.", "default": {}, - "$ref": "#/definitions/io.openshift.example.v1.EvolvingUnion" - }, - "immutableField": { - "description": "immutableField is a field that is immutable once the object has been created. It is required at all times.", - "type": "string", - "default": "" - }, - "nonZeroDefault": { - "description": "nonZeroDefault is a demonstration of creating an integer field that has a non zero default. It required two default tags (one for CRD generation, one for client generation) and must have `omitempty` and be optional. A minimum value is added to demonstrate that a zero value would not be accepted.", - "type": "integer", - "format": "int32", - "default": 8 - }, - "optionalImmutableField": { - "description": "optionalImmutableField is a field that is immutable once set. It is optional but may not be changed once set.", - "type": "string", - "default": "" - }, - "set": { - "description": "set demonstrates how to define and validate set of strings", - "type": "array", - "items": { - "type": "string", - "default": "" - } + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" }, - "stableField": { - "description": "stableField is a field that is present on default clusters and on tech preview clusters\n\nIf empty, the platform will choose a good default, which may change over time without notice.", - "type": "string", - "default": "" - } - }, - "x-fabric8-info": { - "Type": "nested", - "Group": "example.openshift.io", - "Version": "v1", - "Kind": "StableConfigTypeSpec", - "Scope": "Namespaced" - } - }, - "io.openshift.example.v1.StableConfigTypeStatus": { - "description": "StableConfigTypeStatus defines the observed status of the StableConfigType.", - "type": "object", - "properties": { - "conditions": { - "description": "Represents the observations of a foo's current state. Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\"", + "identityProviders": { + "description": "IdentityProviders is an ordered list of ways for a user to identify themselves", "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" - }, - "immutableField": { - "description": "immutableField is a field that is immutable once the object has been created. It is required at all times.", - "type": "string" + "$ref": "#/definitions/io.openshift.config.v1.IdentityProvider" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "example.openshift.io", + "Group": "hive.openshift.io", "Version": "v1", - "Kind": "StableConfigTypeStatus", + "Kind": "SelectorSyncIdentityProviderSpec", "Scope": "Namespaced" } }, - "io.openshift.example.v1alpha1.NotStableConfigType": { - "description": "NotStableConfigType is a stable config type that is TechPreviewNoUpgrade only.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.hive.v1.SelectorSyncSet": { + "description": "SelectorSyncSet is the Schema for the SelectorSyncSet API", "type": "object", "properties": { "apiVersion": { @@ -76115,31 +82513,28 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec is the specification of the desired behavior of the NotStableConfigType.", "default": {}, - "$ref": "#/definitions/io.openshift.example.v1alpha1.NotStableConfigTypeSpec" + "$ref": "#/definitions/io.openshift.hive.v1.SelectorSyncSetSpec" }, "status": { - "description": "status is the most recently observed status of the NotStableConfigType.", "default": {}, - "$ref": "#/definitions/io.openshift.example.v1alpha1.NotStableConfigTypeStatus" + "$ref": "#/definitions/io.openshift.hive.v1.SelectorSyncSetStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "example.openshift.io", - "Version": "v1alpha1", - "Kind": "NotStableConfigType", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "SelectorSyncSet", "Scope": "Clustered" } }, - "io.openshift.example.v1alpha1.NotStableConfigTypeList": { - "description": "NotStableConfigTypeList contains a list of NotStableConfigTypes.\n\nCompatibility level 4: No compatibility is provided, the API can change at any point for any reason. These capabilities should not be used by applications needing long term support.", + "io.openshift.hive.v1.SelectorSyncSetList": { + "description": "SelectorSyncSetList contains a list of SyncSets", "type": "object", "required": [ "items" @@ -76153,7 +82548,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.example.v1alpha1.NotStableConfigType" + "$ref": "#/definitions/io.openshift.hive.v1.SelectorSyncSet" } }, "kind": { @@ -76161,138 +82556,172 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "example.openshift.io", - "Version": "v1alpha1", - "Kind": "NotStableConfigTypeList", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "SelectorSyncSetList", "Scope": "Namespaced" } }, - "io.openshift.example.v1alpha1.NotStableConfigTypeSpec": { - "description": "NotStableConfigTypeSpec is the desired state", + "io.openshift.hive.v1.SelectorSyncSetSpec": { + "description": "SelectorSyncSetSpec defines the SyncSetCommonSpec resources and patches to sync along with a ClusterDeploymentSelector indicating which clusters the SelectorSyncSet applies to in any namespace.", "type": "object", - "required": [ - "newField" - ], "properties": { - "newField": { - "description": "newField is a field that is tech preview, but because the entire type is gated, there is no marker on the field.", - "type": "string", - "default": "" + "applyBehavior": { + "description": "ApplyBehavior indicates how resources in this syncset will be applied to the target cluster. The default value of \"Apply\" indicates that resources should be applied using the 'oc apply' command. If no value is set, \"Apply\" is assumed. A value of \"CreateOnly\" indicates that the resource will only be created if it does not already exist in the target cluster. Otherwise, it will be left alone. A value of \"CreateOrUpdate\" indicates that the resource will be created/updated without the use of the 'oc apply' command, allowing larger resources to be synced, but losing some functionality of the 'oc apply' command such as the ability to remove annotations, labels, and other map entries in general.", + "type": "string" + }, + "clusterDeploymentSelector": { + "description": "ClusterDeploymentSelector is a LabelSelector indicating which clusters the SelectorSyncSet applies to in any namespace.", + "default": {}, + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector" + }, + "enableResourceTemplates": { + "description": "EnableResourceTemplates, if True, causes hive to honor golang text/templates in Resources. While the standard syntax is supported, it won't do you a whole lot of good as the parser does not pass a data object (i.e. there is no \"dot\" for you to use). This currently exists to expose a single function: {{ fromCDLabel \"some.label/key\" }} will be substituted with the string value of ClusterDeployment.Labels[\"some.label/key\"]. The empty string is interpolated if there are no labels, or if the indicated key does not exist. Note that this only works in values (not e.g. map keys) that are of type string.", + "type": "boolean" + }, + "patches": { + "description": "Patches is the list of patches to apply.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.SyncObjectPatch" + } + }, + "resourceApplyMode": { + "description": "ResourceApplyMode indicates if the Resource apply mode is \"Upsert\" (default) or \"Sync\". ApplyMode \"Upsert\" indicates create and update. ApplyMode \"Sync\" indicates create, update and delete.", + "type": "string" + }, + "resources": { + "description": "Resources is the list of objects to sync from RawExtension definitions.", + "type": "array", + "items": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + } + }, + "secretMappings": { + "description": "Secrets is the list of secrets to sync along with their respective destinations.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.SecretMapping" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "example.openshift.io", - "Version": "v1alpha1", - "Kind": "NotStableConfigTypeSpec", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "SelectorSyncSetSpec", "Scope": "Namespaced" } }, - "io.openshift.example.v1alpha1.NotStableConfigTypeStatus": { - "description": "NotStableConfigTypeStatus defines the observed status of the NotStableConfigType.", + "io.openshift.hive.v1.SelectorSyncSetStatus": { + "description": "SelectorSyncSetStatus defines the observed state of a SelectorSyncSet", + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "SelectorSyncSetStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.ServiceProviderCredentials": { + "description": "ServiceProviderCredentials is used to configure credentials related to being a service provider on various cloud platforms.", "type": "object", "properties": { - "conditions": { - "description": "Represents the observations of a foo's current state. Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\"", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - }, - "x-kubernetes-list-map-keys": [ - "type" - ], - "x-kubernetes-list-type": "map", - "x-kubernetes-patch-merge-key": "type", - "x-kubernetes-patch-strategy": "merge" + "aws": { + "description": "AWS is used to configure credentials related to being a service provider on AWS.", + "$ref": "#/definitions/io.openshift.hive.v1.AWSServiceProviderCredentials" } }, "x-fabric8-info": { "Type": "nested", - "Group": "example.openshift.io", - "Version": "v1alpha1", - "Kind": "NotStableConfigTypeStatus", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "ServiceProviderCredentials", "Scope": "Namespaced" } }, - "io.openshift.helm.v1beta1.ConnectionConfig": { + "io.openshift.hive.v1.SpecificControllerConfig": { + "description": "SpecificControllerConfig contains the configuration for a specific controller", "type": "object", "required": [ - "url" + "name", + "config" ], "properties": { - "ca": { - "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca-bundle.crt\" is used to locate the data. If empty, the default system roots are used. The namespace for this config map is openshift-config.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" - }, - "tlsClientConfig": { - "description": "tlsClientConfig is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate and private key to present when connecting to the server. The key \"tls.crt\" is used to locate the client certificate. The key \"tls.key\" is used to locate the private key. The namespace for this secret is openshift-config.", + "config": { + "description": "ControllerConfig contains the configuration for the controller specified by Name field", "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + "$ref": "#/definitions/io.openshift.hive.v1.ControllerConfig" }, - "url": { - "description": "Chart repository URL", + "name": { + "description": "Name specifies the name of the controller", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "helm.openshift.io", - "Version": "v1beta1", - "Kind": "ConnectionConfig", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "SpecificControllerConfig", "Scope": "Namespaced" } }, - "io.openshift.helm.v1beta1.ConnectionConfigNamespaceScoped": { + "io.openshift.hive.v1.SyncCondition": { + "description": "SyncCondition is a condition in a SyncStatus", "type": "object", "required": [ - "url" + "type", + "status" ], "properties": { - "basicAuthConfig": { - "description": "basicAuthConfig is an optional reference to a secret by name that contains the basic authentication credentials to present when connecting to the server. The key \"username\" is used locate the username. The key \"password\" is used to locate the password. The namespace for this secret must be same as the namespace where the project helm chart repository is getting instantiated.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + "lastProbeTime": { + "description": "LastProbeTime is the last time we probed the condition.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "ca": { - "description": "ca is an optional reference to a config map by name containing the PEM-encoded CA bundle. It is used as a trust anchor to validate the TLS certificate presented by the remote server. The key \"ca-bundle.crt\" is used to locate the data. If empty, the default system roots are used. The namespace for this configmap must be same as the namespace where the project helm chart repository is getting instantiated.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.ConfigMapNameReference" + "lastTransitionTime": { + "description": "LastTransitionTime is the last time the condition transitioned from one status to another.", + "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Time" }, - "tlsClientConfig": { - "description": "tlsClientConfig is an optional reference to a secret by name that contains the PEM-encoded TLS client certificate and private key to present when connecting to the server. The key \"tls.crt\" is used to locate the client certificate. The key \"tls.key\" is used to locate the private key. The namespace for this secret must be same as the namespace where the project helm chart repository is getting instantiated.", - "default": {}, - "$ref": "#/definitions/io.openshift.config.v1.SecretNameReference" + "message": { + "description": "Message is a human-readable message indicating details about last transition.", + "type": "string" }, - "url": { - "description": "Chart repository URL", + "reason": { + "description": "Reason is a unique, one-word, CamelCase reason for the condition's last transition.", + "type": "string" + }, + "status": { + "description": "Status is the status of the condition.", + "type": "string", + "default": "" + }, + "type": { + "description": "Type is the type of the condition.", "type": "string", "default": "" } }, "x-fabric8-info": { "Type": "nested", - "Group": "helm.openshift.io", - "Version": "v1beta1", - "Kind": "ConnectionConfigNamespaceScoped", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "SyncCondition", "Scope": "Namespaced" } }, - "io.openshift.helm.v1beta1.HelmChartRepository": { - "description": "HelmChartRepository holds cluster-wide configuration for proxied Helm chart repository\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.SyncIdentityProvider": { + "description": "SyncIdentityProvider is the Schema for the SyncIdentityProvider API", "type": "object", - "required": [ - "spec" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -76303,34 +82732,54 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/io.openshift.helm.v1beta1.HelmChartRepositorySpec" + "$ref": "#/definitions/io.openshift.hive.v1.SyncIdentityProviderSpec" }, "status": { - "description": "Observed status of the repository within the cluster..", "default": {}, - "$ref": "#/definitions/io.openshift.helm.v1beta1.HelmChartRepositoryStatus" + "$ref": "#/definitions/io.openshift.hive.v1.IdentityProviderStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "helm.openshift.io", - "Version": "v1beta1", - "Kind": "HelmChartRepository", - "Scope": "Clustered" + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "SyncIdentityProvider", + "Scope": "Namespaced" } }, - "io.openshift.helm.v1beta1.HelmChartRepositoryList": { - "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.SyncIdentityProviderCommonSpec": { + "description": "SyncIdentityProviderCommonSpec defines the identity providers to sync", + "type": "object", + "required": [ + "identityProviders" + ], + "properties": { + "identityProviders": { + "description": "IdentityProviders is an ordered list of ways for a user to identify themselves", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.IdentityProvider" + } + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "SyncIdentityProviderCommonSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.SyncIdentityProviderList": { + "description": "SyncIdentityProviderList contains a list of SyncIdentityProviders", "type": "object", "required": [ - "metadata", "items" ], "properties": { @@ -76342,7 +82791,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.helm.v1beta1.HelmChartRepository" + "$ref": "#/definitions/io.openshift.hive.v1.SyncIdentityProvider" } }, "kind": { @@ -76350,78 +82799,101 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "helm.openshift.io", - "Version": "v1beta1", - "Kind": "HelmChartRepositoryList", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "SyncIdentityProviderList", "Scope": "Namespaced" } }, - "io.openshift.helm.v1beta1.HelmChartRepositorySpec": { - "description": "Helm chart repository exposed within the cluster", + "io.openshift.hive.v1.SyncIdentityProviderSpec": { + "description": "SyncIdentityProviderSpec defines the SyncIdentityProviderCommonSpec identity providers to sync along with ClusterDeploymentRefs indicating which clusters the SyncIdentityProvider applies to in the SyncIdentityProvider's namespace.", "type": "object", "required": [ - "connectionConfig" + "identityProviders", + "clusterDeploymentRefs" ], "properties": { - "connectionConfig": { - "description": "Required configuration for connecting to the chart repo", - "default": {}, - "$ref": "#/definitions/io.openshift.helm.v1beta1.ConnectionConfig" - }, - "description": { - "description": "Optional human readable repository description, it can be used by UI for displaying purposes", - "type": "string" - }, - "disabled": { - "description": "If set to true, disable the repo usage in the cluster/namespace", - "type": "boolean" + "clusterDeploymentRefs": { + "description": "ClusterDeploymentRefs is the list of LocalObjectReference indicating which clusters the SyncSet applies to in the SyncSet's namespace.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + } }, - "name": { - "description": "Optional associated human readable repository name, it can be used by UI for displaying purposes", - "type": "string" + "identityProviders": { + "description": "IdentityProviders is an ordered list of ways for a user to identify themselves", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.config.v1.IdentityProvider" + } } }, "x-fabric8-info": { "Type": "nested", - "Group": "helm.openshift.io", - "Version": "v1beta1", - "Kind": "HelmChartRepositorySpec", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "SyncIdentityProviderSpec", "Scope": "Namespaced" } }, - "io.openshift.helm.v1beta1.HelmChartRepositoryStatus": { + "io.openshift.hive.v1.SyncObjectPatch": { + "description": "SyncObjectPatch represents a patch to be applied to a specific object", "type": "object", + "required": [ + "apiVersion", + "kind", + "name", + "patch" + ], "properties": { - "conditions": { - "description": "conditions is a list of conditions and their statuses", - "type": "array", - "items": { - "default": {}, - "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.Condition" - } + "apiVersion": { + "description": "APIVersion is the Group and Version of the object to be patched.", + "type": "string", + "default": "" + }, + "kind": { + "description": "Kind is the Kind of the object to be patched.", + "type": "string", + "default": "" + }, + "name": { + "description": "Name is the name of the object to be patched.", + "type": "string", + "default": "" + }, + "namespace": { + "description": "Namespace is the Namespace in which the object to patch exists. Defaults to the SyncSet's Namespace.", + "type": "string" + }, + "patch": { + "description": "Patch is the patch to apply.", + "type": "string", + "default": "" + }, + "patchType": { + "description": "PatchType indicates the PatchType as \"strategic\" (default), \"json\", or \"merge\".", + "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "helm.openshift.io", - "Version": "v1beta1", - "Kind": "HelmChartRepositoryStatus", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "SyncObjectPatch", "Scope": "Namespaced" } }, - "io.openshift.helm.v1beta1.ProjectHelmChartRepository": { - "description": "ProjectHelmChartRepository holds namespace-wide configuration for proxied Helm chart repository\n\nCompatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.SyncSet": { + "description": "SyncSet is the Schema for the SyncSet API", "type": "object", - "required": [ - "spec" - ], "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", @@ -76432,34 +82904,78 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta" }, "spec": { - "description": "spec holds user settable values for configuration", "default": {}, - "$ref": "#/definitions/io.openshift.helm.v1beta1.ProjectHelmChartRepositorySpec" + "$ref": "#/definitions/io.openshift.hive.v1.SyncSetSpec" }, "status": { - "description": "Observed status of the repository within the namespace..", "default": {}, - "$ref": "#/definitions/io.openshift.helm.v1beta1.HelmChartRepositoryStatus" + "$ref": "#/definitions/io.openshift.hive.v1.SyncSetStatus" } }, "x-fabric8-info": { "Type": "object", - "Group": "helm.openshift.io", - "Version": "v1beta1", - "Kind": "ProjectHelmChartRepository", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "SyncSet", "Scope": "Namespaced" } }, - "io.openshift.helm.v1beta1.ProjectHelmChartRepositoryList": { - "description": "Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).", + "io.openshift.hive.v1.SyncSetCommonSpec": { + "description": "SyncSetCommonSpec defines the resources and patches to sync", + "type": "object", + "properties": { + "applyBehavior": { + "description": "ApplyBehavior indicates how resources in this syncset will be applied to the target cluster. The default value of \"Apply\" indicates that resources should be applied using the 'oc apply' command. If no value is set, \"Apply\" is assumed. A value of \"CreateOnly\" indicates that the resource will only be created if it does not already exist in the target cluster. Otherwise, it will be left alone. A value of \"CreateOrUpdate\" indicates that the resource will be created/updated without the use of the 'oc apply' command, allowing larger resources to be synced, but losing some functionality of the 'oc apply' command such as the ability to remove annotations, labels, and other map entries in general.", + "type": "string" + }, + "enableResourceTemplates": { + "description": "EnableResourceTemplates, if True, causes hive to honor golang text/templates in Resources. While the standard syntax is supported, it won't do you a whole lot of good as the parser does not pass a data object (i.e. there is no \"dot\" for you to use). This currently exists to expose a single function: {{ fromCDLabel \"some.label/key\" }} will be substituted with the string value of ClusterDeployment.Labels[\"some.label/key\"]. The empty string is interpolated if there are no labels, or if the indicated key does not exist. Note that this only works in values (not e.g. map keys) that are of type string.", + "type": "boolean" + }, + "patches": { + "description": "Patches is the list of patches to apply.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.SyncObjectPatch" + } + }, + "resourceApplyMode": { + "description": "ResourceApplyMode indicates if the Resource apply mode is \"Upsert\" (default) or \"Sync\". ApplyMode \"Upsert\" indicates create and update. ApplyMode \"Sync\" indicates create, update and delete.", + "type": "string" + }, + "resources": { + "description": "Resources is the list of objects to sync from RawExtension definitions.", + "type": "array", + "items": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + } + }, + "secretMappings": { + "description": "Secrets is the list of secrets to sync along with their respective destinations.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.SecretMapping" + } + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "SyncSetCommonSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.SyncSetList": { + "description": "SyncSetList contains a list of SyncSets", "type": "object", "required": [ - "metadata", "items" ], "properties": { @@ -76471,7 +82987,7 @@ "type": "array", "items": { "default": {}, - "$ref": "#/definitions/io.openshift.helm.v1beta1.ProjectHelmChartRepository" + "$ref": "#/definitions/io.openshift.hive.v1.SyncSet" } }, "kind": { @@ -76479,49 +82995,280 @@ "type": "string" }, "metadata": { - "description": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata", "default": {}, "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ListMeta" } }, "x-fabric8-info": { "Type": "list", - "Group": "helm.openshift.io", - "Version": "v1beta1", - "Kind": "ProjectHelmChartRepositoryList", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "SyncSetList", "Scope": "Namespaced" } }, - "io.openshift.helm.v1beta1.ProjectHelmChartRepositorySpec": { - "description": "Project Helm chart repository exposed within a namespace", + "io.openshift.hive.v1.SyncSetObjectStatus": { + "description": "SyncSetObjectStatus describes the status of resources created or patches that have been applied from a SyncSet or SelectorSyncSet.", "type": "object", "required": [ - "connectionConfig" + "name" ], "properties": { - "connectionConfig": { - "description": "Required configuration for connecting to the chart repo", - "default": {}, - "$ref": "#/definitions/io.openshift.helm.v1beta1.ConnectionConfigNamespaceScoped" + "conditions": { + "description": "Conditions is the list of SyncConditions used to indicate UnknownObject when a resource type cannot be determined from a SyncSet resource.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.SyncCondition" + } }, - "description": { - "description": "Optional human readable repository description, it can be used by UI for displaying purposes", + "name": { + "description": "Name is the name of the SyncSet.", + "type": "string", + "default": "" + }, + "patches": { + "description": "Patches is the list of SyncStatus for patches that have been applied.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.SyncStatus" + } + }, + "resourceApplyMode": { + "description": "ResourceApplyMode indicates if the Resource apply mode is \"Upsert\" (default) or \"Sync\". ApplyMode \"Upsert\" indicates create and update. ApplyMode \"Sync\" indicates create, update and delete.", "type": "string" }, - "disabled": { - "description": "If set to true, disable the repo usage in the namespace", + "resources": { + "description": "Resources is the list of SyncStatus for objects that have been synced.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.SyncStatus" + } + }, + "secrets": { + "description": "Secrets is the list of SyncStatus for secrets that have been synced.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.SyncStatus" + } + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "SyncSetObjectStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.SyncSetSpec": { + "description": "SyncSetSpec defines the SyncSetCommonSpec resources and patches to sync along with ClusterDeploymentRefs indicating which clusters the SyncSet applies to in the SyncSet's namespace.", + "type": "object", + "required": [ + "clusterDeploymentRefs" + ], + "properties": { + "applyBehavior": { + "description": "ApplyBehavior indicates how resources in this syncset will be applied to the target cluster. The default value of \"Apply\" indicates that resources should be applied using the 'oc apply' command. If no value is set, \"Apply\" is assumed. A value of \"CreateOnly\" indicates that the resource will only be created if it does not already exist in the target cluster. Otherwise, it will be left alone. A value of \"CreateOrUpdate\" indicates that the resource will be created/updated without the use of the 'oc apply' command, allowing larger resources to be synced, but losing some functionality of the 'oc apply' command such as the ability to remove annotations, labels, and other map entries in general.", + "type": "string" + }, + "clusterDeploymentRefs": { + "description": "ClusterDeploymentRefs is the list of LocalObjectReference indicating which clusters the SyncSet applies to in the SyncSet's namespace.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + } + }, + "enableResourceTemplates": { + "description": "EnableResourceTemplates, if True, causes hive to honor golang text/templates in Resources. While the standard syntax is supported, it won't do you a whole lot of good as the parser does not pass a data object (i.e. there is no \"dot\" for you to use). This currently exists to expose a single function: {{ fromCDLabel \"some.label/key\" }} will be substituted with the string value of ClusterDeployment.Labels[\"some.label/key\"]. The empty string is interpolated if there are no labels, or if the indicated key does not exist. Note that this only works in values (not e.g. map keys) that are of type string.", "type": "boolean" }, + "patches": { + "description": "Patches is the list of patches to apply.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.SyncObjectPatch" + } + }, + "resourceApplyMode": { + "description": "ResourceApplyMode indicates if the Resource apply mode is \"Upsert\" (default) or \"Sync\". ApplyMode \"Upsert\" indicates create and update. ApplyMode \"Sync\" indicates create, update and delete.", + "type": "string" + }, + "resources": { + "description": "Resources is the list of objects to sync from RawExtension definitions.", + "type": "array", + "items": { + "$ref": "#/definitions/io.k8s.apimachinery.pkg.runtime.RawExtension" + } + }, + "secretMappings": { + "description": "Secrets is the list of secrets to sync along with their respective destinations.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.SecretMapping" + } + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "SyncSetSpec", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.SyncSetStatus": { + "description": "SyncSetStatus defines the observed state of a SyncSet", + "type": "object", + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "SyncSetStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.SyncStatus": { + "description": "SyncStatus describes objects that have been created or patches that have been applied using the unique md5 sum of the object or patch.", + "type": "object", + "required": [ + "apiVersion", + "kind", + "name", + "namespace", + "hash", + "conditions" + ], + "properties": { + "apiVersion": { + "description": "APIVersion is the Group and Version of the object that was synced or patched.", + "type": "string", + "default": "" + }, + "conditions": { + "description": "Conditions is the list of conditions indicating success or failure of object create, update and delete as well as patch application.", + "type": "array", + "items": { + "default": {}, + "$ref": "#/definitions/io.openshift.hive.v1.SyncCondition" + } + }, + "hash": { + "description": "Hash is the unique md5 hash of the resource or patch.", + "type": "string", + "default": "" + }, + "kind": { + "description": "Kind is the Kind of the object that was synced or patched.", + "type": "string", + "default": "" + }, "name": { - "description": "Optional associated human readable repository name, it can be used by UI for displaying purposes", + "description": "Name is the name of the object that was synced or patched.", + "type": "string", + "default": "" + }, + "namespace": { + "description": "Namespace is the Namespace of the object that was synced or patched.", + "type": "string", + "default": "" + }, + "resource": { + "description": "Resource is the resource name for the object that was synced. This will be populated for resources, but not patches", "type": "string" } }, "x-fabric8-info": { "Type": "nested", - "Group": "helm.openshift.io", - "Version": "v1beta1", - "Kind": "ProjectHelmChartRepositorySpec", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "SyncStatus", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.TaintIdentifier": { + "description": "TaintIdentifier uniquely identifies a Taint. (It turns out taints are mutually exclusive by key+effect, not simply by key.)", + "type": "object", + "properties": { + "effect": { + "description": "Effect matches corev1.Taint.Effect.\n\nPossible enum values:\n - `\"NoExecute\"` Evict any already-running pods that do not tolerate the taint. Currently enforced by NodeController.\n - `\"NoSchedule\"` Do not allow new pods to schedule onto the node unless they tolerate the taint, but allow all pods submitted to Kubelet without going through the scheduler to start, and allow all already-running pods to continue running. Enforced by the scheduler.\n - `\"PreferNoSchedule\"` Like TaintEffectNoSchedule, but the scheduler tries not to schedule new pods onto the node, rather than prohibiting new pods from scheduling onto the node entirely. Enforced by the scheduler.", + "type": "string", + "enum": [ + "NoExecute", + "NoSchedule", + "PreferNoSchedule" + ] + }, + "key": { + "description": "Key matches corev1.Taint.Key.", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "TaintIdentifier", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.VSphereClusterDeprovision": { + "description": "VSphereClusterDeprovision contains VMware vSphere-specific configuration for a ClusterDeprovision", + "type": "object", + "required": [ + "credentialsSecretRef", + "certificatesSecretRef", + "vCenter" + ], + "properties": { + "certificatesSecretRef": { + "description": "CertificatesSecretRef refers to a secret that contains the vSphere CA certificates necessary for communicating with the VCenter.", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "credentialsSecretRef": { + "description": "CredentialsSecretRef is the vSphere account credentials to use for deprovisioning the cluster", + "default": {}, + "$ref": "#/definitions/io.k8s.api.core.v1.LocalObjectReference" + }, + "vCenter": { + "description": "VCenter is the vSphere vCenter hostname.", + "type": "string", + "default": "" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "VSphereClusterDeprovision", + "Scope": "Namespaced" + } + }, + "io.openshift.hive.v1.VeleroBackupConfig": { + "description": "VeleroBackupConfig contains settings for the Velero backup integration.", + "type": "object", + "properties": { + "enabled": { + "description": "Enabled dictates if Velero backup integration is enabled. If not specified, the default is disabled.", + "type": "boolean" + }, + "namespace": { + "description": "Namespace specifies in which namespace velero backup objects should be created. If not specified, the default is a namespace named \"velero\".", + "type": "string" + } + }, + "x-fabric8-info": { + "Type": "nested", + "Group": "hive.openshift.io", + "Version": "v1", + "Kind": "VeleroBackupConfig", "Scope": "Namespaced" } }, diff --git a/kubernetes-model-generator/openshift-model-hive/Makefile b/kubernetes-model-generator/openshift-model-hive/Makefile deleted file mode 100644 index c09a7003874..00000000000 --- a/kubernetes-model-generator/openshift-model-hive/Makefile +++ /dev/null @@ -1,27 +0,0 @@ -# -# Copyright (C) 2015 Red Hat, Inc. -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. -# - -SHELL := /bin/bash - -all: build - -build: gobuild - mvn -Pgenerate clean install -DskipTests - -gobuild: - CGO_ENABLED=0 GO15VENDOREXPERIMENT=1 go build -a ./cmd/generate/generate.go - ./generate > src/main/resources/schema/kube-schema.json - ./generate validation > src/main/resources/schema/validation-schema.json diff --git a/kubernetes-model-generator/openshift-model-hive/cmd/generate/generate.go b/kubernetes-model-generator/openshift-model-hive/cmd/generate/generate.go deleted file mode 100644 index a1618513e87..00000000000 --- a/kubernetes-model-generator/openshift-model-hive/cmd/generate/generate.go +++ /dev/null @@ -1,149 +0,0 @@ -/** - * Copyright (C) 2015 Red Hat, Inc. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * http://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - */ -package main - -import ( - "bytes" - "encoding/json" - "fmt" - openshiftconfigapi "github.com/openshift/api/config/v1" - kapi "k8s.io/api/core/v1" - metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" - runtime "k8s.io/apimachinery/pkg/runtime" - "log" - "reflect" - "strings" - "time" - - hivev1 "github.com/openshift/hive/apis/hive/v1" - azure "github.com/openshift/hive/apis/hive/v1/azure" - gcp "github.com/openshift/hive/apis/hive/v1/gcp" - vsphere "github.com/openshift/hive/apis/hive/v1/vsphere" - "os" - - "github.com/fabric8io/kubernetes-client/kubernetes-model-generator/pkg/schemagen" -) - -type Schema struct { - APIGroup metav1.APIGroup - APIGroupList metav1.APIGroupList - BaseKubernetesList metav1.List - ObjectMeta metav1.ObjectMeta - LocalObjectReference kapi.LocalObjectReference - TypeMeta metav1.TypeMeta - Status metav1.Status - Patch metav1.Patch - Time metav1.Time - ClusterOperatorStatusCondition openshiftconfigapi.ClusterOperatorStatusCondition - Checkpoint hivev1.Checkpoint - CheckpointList hivev1.CheckpointList - ClusterClaim hivev1.ClusterClaim - ClusterClaimList hivev1.ClusterClaimList - ClusterDeployment hivev1.ClusterDeployment - ClusterDeploymentList hivev1.ClusterDeploymentList - ClusterDeprovision hivev1.ClusterDeprovision - ClusterDeprovisionList hivev1.ClusterDeprovisionList - ClusterImageSet hivev1.ClusterImageSet - ClusterImageSetList hivev1.ClusterImageSetList - ClusterPool hivev1.ClusterPool - ClusterPoolList hivev1.ClusterPoolList - ClusterProvision hivev1.ClusterProvision - ClusterProvisionList hivev1.ClusterProvisionList - ClusterRelocate hivev1.ClusterRelocate - ClusterRelocateList hivev1.ClusterRelocateList - ClusterState hivev1.ClusterState - ClusterStateList hivev1.ClusterStateList - DNSZone hivev1.DNSZone - DNSZoneList hivev1.DNSZoneList - HiveConfig hivev1.HiveConfig - HiveConfigList hivev1.HiveConfigList - MachinePoolNameLease hivev1.MachinePoolNameLease - MachinePoolNameLeaseList hivev1.MachinePoolNameLeaseList - MachinePool hivev1.MachinePool - MachinePoolList hivev1.MachinePoolList - SelectorSyncIdentityProvider hivev1.SelectorSyncIdentityProvider - SelectorSyncIdentityProviderList hivev1.SelectorSyncIdentityProviderList - SelectorSyncSet hivev1.SelectorSyncSet - SelectorSyncSetList hivev1.SelectorSyncSetList - SyncIdentityProvider hivev1.SyncIdentityProvider - SyncIdentityProviderList hivev1.SyncIdentityProviderList - SyncSet hivev1.SyncSet - SyncSetList hivev1.SyncSetList - AzureOSDisk azure.OSDisk - GcpOSDisk gcp.OSDisk - VsphereOSDisk vsphere.OSDisk -} - -func main() { - packages := []schemagen.PackageDescriptor{ - {"k8s.io/apimachinery/pkg/apis/meta/v1", "", "io.fabric8.kubernetes.api.model", "kubernetes_apimachinery_", false}, - {"k8s.io/api/core/v1", "", "io.fabric8.kubernetes.api.model", "kubernetes_core_", false}, - {"k8s.io/api/rbac/v1", "", "io.fabric8.kubernetes.api.model.rbac", "kubernetes_rbac_", false}, - {"github.com/openshift/api/config/v1", "", "io.fabric8.openshift.api.model.config.v1", "os_config_v1_", false}, - {"github.com/openshift/hive/apis/hive/v1", "hive", "io.fabric8.openshift.api.model.hive.v1", "os_hive_v1_", true}, - {"github.com/openshift/hive/apis/hive/v1/alibabacloud", "hive", "io.fabric8.openshift.api.model.hive.alibabacloud.v1", "os_hive_alibabacloud_v1_", true}, - {"github.com/openshift/hive/apis/hive/v1/ibmcloud", "hive", "io.fabric8.openshift.api.model.hive.ibmcloud.v1", "os_hive_ibmcloud_v1_", true}, - {"github.com/openshift/hive/apis/hive/v1/aws", "hive", "io.fabric8.openshift.api.model.hive.aws.v1", "os_hive_aws_v1_", true}, - {"github.com/openshift/hive/apis/hive/v1/azure", "hive", "io.fabric8.openshift.api.model.hive.azure.v1", "os_hive_azure_v1_", true}, - {"github.com/openshift/hive/apis/hive/v1/baremetal", "hive", "io.fabric8.openshift.api.model.hive.baremetal.v1", "os_hive_baremetal_v1_", true}, - {"github.com/openshift/hive/apis/hive/v1/gcp", "hive", "io.fabric8.openshift.api.model.hive.gcp.v1", "os_hive_gcp_v1_", true}, - {"github.com/openshift/hive/apis/hive/v1/openstack", "hive", "io.fabric8.openshift.api.model.hive.openstack.v1", "os_hive_openstack_v1_", true}, - {"github.com/openshift/hive/apis/hive/v1/vsphere", "hive", "io.fabric8.openshift.api.model.hive.vsphere.v1", "os_hive_vsphere_v1_", true}, - {"github.com/openshift/hive/apis/hive/v1/ovirt", "hive", "io.fabric8.openshift.api.model.hive.ovirt.v1", "os_hive_ovirt_v1_", true}, - {"github.com/openshift/hive/apis/hive/v1/agent", "hive", "io.fabric8.openshift.api.model.hive.agent.v1", "os_hive_agent_v1_", true}, - {"github.com/openshift/hive/apis/hive/v1/none", "hive", "io.fabric8.openshift.api.model.hive.none.v1", "os_hive_none_v1_", true}, - {"github.com/openshift/hive/apis/hive/v1/metricsconfig", "hive", "io.fabric8.openshift.api.model.hive.metricsconfig.v1", "os_hive_metricsconfig_v1_", true}, - } - - typeMap := map[reflect.Type]reflect.Type{ - reflect.TypeOf(time.Time{}): reflect.TypeOf(""), - reflect.TypeOf(struct{}{}): reflect.TypeOf(""), - } - manualTypeMap := map[reflect.Type]string{ - reflect.TypeOf(runtime.RawExtension{}): "java.util.Map", - } - schema, err := schemagen.GenerateSchema(reflect.TypeOf(Schema{}), packages, typeMap, manualTypeMap, "hive") - if err != nil { - fmt.Fprintf(os.Stderr, "An error occurred: %v", err) - return - } - - args := os.Args[1:] - if len(args) < 1 || args[0] != "validation" { - schema.Resources = nil - } - - b, err := json.Marshal(&schema) - if err != nil { - log.Fatal(err) - } - result := string(b) - result = strings.Replace(result, "\"additionalProperty\":", "\"additionalProperties\":", -1) - // Sundrio seems to be having problems with generating builders when there are fields with same class - // names but different packages - result = strings.Replace(result, "io.fabric8.openshift.api.model.hive.aws.v1.Metadata", "io.fabric8.openshift.api.model.hive.aws.v1.AwsMetadata", -1) - result = strings.Replace(result, "io.fabric8.openshift.api.model.hive.azure.v1.Metadata", "io.fabric8.openshift.api.model.hive.azure.v1.AzureMetadata", -1) - result = strings.Replace(result, "io.fabric8.openshift.api.model.hive.aws.v1.Platform", "io.fabric8.openshift.api.model.hive.aws.v1.AwsPlatform", -1) - result = strings.Replace(result, "io.fabric8.openshift.api.model.hive.azure.v1.Platform", "io.fabric8.openshift.api.model.hive.azure.v1.AzurePlatform", -1) - - var out bytes.Buffer - err = json.Indent(&out, []byte(result), "", " ") - if err != nil { - log.Fatal(err) - } - - fmt.Println(out.String()) -} diff --git a/kubernetes-model-generator/openshift-model-hive/pom.xml b/kubernetes-model-generator/openshift-model-hive/pom.xml index d63b369f853..97ab659473a 100644 --- a/kubernetes-model-generator/openshift-model-hive/pom.xml +++ b/kubernetes-model-generator/openshift-model-hive/pom.xml @@ -43,22 +43,10 @@ io.fabric8 kubernetes-model-core - - io.fabric8 - kubernetes-model-common - - - io.fabric8 - kubernetes-model-rbac - io.fabric8 openshift-model - - io.fabric8 - openshift-model-config - org.assertj assertj-core @@ -66,31 +54,39 @@ - - - - org.codehaus.mojo - build-helper-maven-plugin - - - attach-artifacts - - false - - - - - - - generate - org.jsonschema2pojo - jsonschema2pojo-maven-plugin + io.fabric8 + openapi-model-generator-maven-plugin + + + + ${openapi.schema.openshift-generated} + + + io.fabric8.openshift.api.model.hive.agent.v1 + io.fabric8.openshift.api.model.hive.alibabacloud.v1 + io.fabric8.openshift.api.model.hive.aws.v1 + io.fabric8.openshift.api.model.hive.azure.v1 + io.fabric8.openshift.api.model.hive.baremetal.v1 + io.fabric8.openshift.api.model.hive.gcp.v1 + io.fabric8.openshift.api.model.hive.ibmcloud.v1 + io.fabric8.openshift.api.model.hive.metricsconfig.v1 + io.fabric8.openshift.api.model.hive.none.v1 + io.fabric8.openshift.api.model.hive.openstack.v1 + io.fabric8.openshift.api.model.hive.ovirt.v1 + io.fabric8.openshift.api.model.hive.vsphere.v1 + + + ^io\.openshift\.hive\..*$ + ^com\.github\.openshift\.hive\..*$ + + + diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/kubernetes/api/model/KubeSchema.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/kubernetes/api/model/KubeSchema.java deleted file mode 100644 index 83d14dc9716..00000000000 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/kubernetes/api/model/KubeSchema.java +++ /dev/null @@ -1,642 +0,0 @@ - -package io.fabric8.kubernetes.api.model; - -import java.util.LinkedHashMap; -import java.util.Map; -import javax.annotation.Generated; -import com.fasterxml.jackson.annotation.JsonAnyGetter; -import com.fasterxml.jackson.annotation.JsonAnySetter; -import com.fasterxml.jackson.annotation.JsonIgnore; -import com.fasterxml.jackson.annotation.JsonProperty; -import io.fabric8.openshift.api.model.config.v1.ClusterOperatorStatusCondition; -import io.fabric8.openshift.api.model.hive.v1.Checkpoint; -import io.fabric8.openshift.api.model.hive.v1.CheckpointList; -import io.fabric8.openshift.api.model.hive.v1.ClusterClaim; -import io.fabric8.openshift.api.model.hive.v1.ClusterClaimList; -import io.fabric8.openshift.api.model.hive.v1.ClusterDeployment; -import io.fabric8.openshift.api.model.hive.v1.ClusterDeploymentList; -import io.fabric8.openshift.api.model.hive.v1.ClusterDeprovision; -import io.fabric8.openshift.api.model.hive.v1.ClusterDeprovisionList; -import io.fabric8.openshift.api.model.hive.v1.ClusterImageSet; -import io.fabric8.openshift.api.model.hive.v1.ClusterImageSetList; -import io.fabric8.openshift.api.model.hive.v1.ClusterPool; -import io.fabric8.openshift.api.model.hive.v1.ClusterPoolList; -import io.fabric8.openshift.api.model.hive.v1.ClusterProvision; -import io.fabric8.openshift.api.model.hive.v1.ClusterProvisionList; -import io.fabric8.openshift.api.model.hive.v1.ClusterRelocate; -import io.fabric8.openshift.api.model.hive.v1.ClusterRelocateList; -import io.fabric8.openshift.api.model.hive.v1.ClusterState; -import io.fabric8.openshift.api.model.hive.v1.ClusterStateList; -import io.fabric8.openshift.api.model.hive.v1.DNSZone; -import io.fabric8.openshift.api.model.hive.v1.DNSZoneList; -import io.fabric8.openshift.api.model.hive.v1.HiveConfig; -import io.fabric8.openshift.api.model.hive.v1.HiveConfigList; -import io.fabric8.openshift.api.model.hive.v1.MachinePool; -import io.fabric8.openshift.api.model.hive.v1.MachinePoolList; -import io.fabric8.openshift.api.model.hive.v1.MachinePoolNameLease; -import io.fabric8.openshift.api.model.hive.v1.MachinePoolNameLeaseList; -import io.fabric8.openshift.api.model.hive.v1.SelectorSyncIdentityProvider; -import io.fabric8.openshift.api.model.hive.v1.SelectorSyncIdentityProviderList; -import io.fabric8.openshift.api.model.hive.v1.SelectorSyncSet; -import io.fabric8.openshift.api.model.hive.v1.SelectorSyncSetList; -import io.fabric8.openshift.api.model.hive.v1.SyncIdentityProvider; -import io.fabric8.openshift.api.model.hive.v1.SyncIdentityProviderList; -import io.fabric8.openshift.api.model.hive.v1.SyncSet; -import io.fabric8.openshift.api.model.hive.v1.SyncSetList; - -@Generated("jsonschema2pojo") -public class KubeSchema { - - private APIGroup aPIGroup; - private APIGroupList aPIGroupList; - private io.fabric8.openshift.api.model.hive.azure.v1.OSDisk azureOSDisk; - private KubernetesList baseKubernetesList; - private Checkpoint checkpoint; - private CheckpointList checkpointList; - private ClusterClaim clusterClaim; - private ClusterClaimList clusterClaimList; - private ClusterDeployment clusterDeployment; - private ClusterDeploymentList clusterDeploymentList; - private ClusterDeprovision clusterDeprovision; - private ClusterDeprovisionList clusterDeprovisionList; - private ClusterImageSet clusterImageSet; - private ClusterImageSetList clusterImageSetList; - private ClusterOperatorStatusCondition clusterOperatorStatusCondition; - private ClusterPool clusterPool; - private ClusterPoolList clusterPoolList; - private ClusterProvision clusterProvision; - private ClusterProvisionList clusterProvisionList; - private ClusterRelocate clusterRelocate; - private ClusterRelocateList clusterRelocateList; - private ClusterState clusterState; - private ClusterStateList clusterStateList; - private DNSZone dNSZone; - private DNSZoneList dNSZoneList; - private io.fabric8.openshift.api.model.hive.gcp.v1.OSDisk gcpOSDisk; - private HiveConfig hiveConfig; - private HiveConfigList hiveConfigList; - private LocalObjectReference localObjectReference; - private MachinePool machinePool; - private MachinePoolList machinePoolList; - private MachinePoolNameLease machinePoolNameLease; - private MachinePoolNameLeaseList machinePoolNameLeaseList; - private ObjectMeta objectMeta; - private Patch patch; - private SelectorSyncIdentityProvider selectorSyncIdentityProvider; - private SelectorSyncIdentityProviderList selectorSyncIdentityProviderList; - private SelectorSyncSet selectorSyncSet; - private SelectorSyncSetList selectorSyncSetList; - private Status status; - private SyncIdentityProvider syncIdentityProvider; - private SyncIdentityProviderList syncIdentityProviderList; - private SyncSet syncSet; - private SyncSetList syncSetList; - private String time; - private TypeMeta typeMeta; - private io.fabric8.openshift.api.model.hive.vsphere.v1.OSDisk vsphereOSDisk; - @JsonIgnore - private Map additionalProperties = new LinkedHashMap(); - - /** - * No args constructor for use in serialization - * - */ - public KubeSchema() { - } - - public KubeSchema(APIGroup aPIGroup, APIGroupList aPIGroupList, io.fabric8.openshift.api.model.hive.azure.v1.OSDisk azureOSDisk, KubernetesList baseKubernetesList, Checkpoint checkpoint, CheckpointList checkpointList, ClusterClaim clusterClaim, ClusterClaimList clusterClaimList, ClusterDeployment clusterDeployment, ClusterDeploymentList clusterDeploymentList, ClusterDeprovision clusterDeprovision, ClusterDeprovisionList clusterDeprovisionList, ClusterImageSet clusterImageSet, ClusterImageSetList clusterImageSetList, ClusterOperatorStatusCondition clusterOperatorStatusCondition, ClusterPool clusterPool, ClusterPoolList clusterPoolList, ClusterProvision clusterProvision, ClusterProvisionList clusterProvisionList, ClusterRelocate clusterRelocate, ClusterRelocateList clusterRelocateList, ClusterState clusterState, ClusterStateList clusterStateList, DNSZone dNSZone, DNSZoneList dNSZoneList, io.fabric8.openshift.api.model.hive.gcp.v1.OSDisk gcpOSDisk, HiveConfig hiveConfig, HiveConfigList hiveConfigList, LocalObjectReference localObjectReference, MachinePool machinePool, MachinePoolList machinePoolList, MachinePoolNameLease machinePoolNameLease, MachinePoolNameLeaseList machinePoolNameLeaseList, ObjectMeta objectMeta, Patch patch, SelectorSyncIdentityProvider selectorSyncIdentityProvider, SelectorSyncIdentityProviderList selectorSyncIdentityProviderList, SelectorSyncSet selectorSyncSet, SelectorSyncSetList selectorSyncSetList, Status status, SyncIdentityProvider syncIdentityProvider, SyncIdentityProviderList syncIdentityProviderList, SyncSet syncSet, SyncSetList syncSetList, String time, TypeMeta typeMeta, io.fabric8.openshift.api.model.hive.vsphere.v1.OSDisk vsphereOSDisk) { - super(); - this.aPIGroup = aPIGroup; - this.aPIGroupList = aPIGroupList; - this.azureOSDisk = azureOSDisk; - this.baseKubernetesList = baseKubernetesList; - this.checkpoint = checkpoint; - this.checkpointList = checkpointList; - this.clusterClaim = clusterClaim; - this.clusterClaimList = clusterClaimList; - this.clusterDeployment = clusterDeployment; - this.clusterDeploymentList = clusterDeploymentList; - this.clusterDeprovision = clusterDeprovision; - this.clusterDeprovisionList = clusterDeprovisionList; - this.clusterImageSet = clusterImageSet; - this.clusterImageSetList = clusterImageSetList; - this.clusterOperatorStatusCondition = clusterOperatorStatusCondition; - this.clusterPool = clusterPool; - this.clusterPoolList = clusterPoolList; - this.clusterProvision = clusterProvision; - this.clusterProvisionList = clusterProvisionList; - this.clusterRelocate = clusterRelocate; - this.clusterRelocateList = clusterRelocateList; - this.clusterState = clusterState; - this.clusterStateList = clusterStateList; - this.dNSZone = dNSZone; - this.dNSZoneList = dNSZoneList; - this.gcpOSDisk = gcpOSDisk; - this.hiveConfig = hiveConfig; - this.hiveConfigList = hiveConfigList; - this.localObjectReference = localObjectReference; - this.machinePool = machinePool; - this.machinePoolList = machinePoolList; - this.machinePoolNameLease = machinePoolNameLease; - this.machinePoolNameLeaseList = machinePoolNameLeaseList; - this.objectMeta = objectMeta; - this.patch = patch; - this.selectorSyncIdentityProvider = selectorSyncIdentityProvider; - this.selectorSyncIdentityProviderList = selectorSyncIdentityProviderList; - this.selectorSyncSet = selectorSyncSet; - this.selectorSyncSetList = selectorSyncSetList; - this.status = status; - this.syncIdentityProvider = syncIdentityProvider; - this.syncIdentityProviderList = syncIdentityProviderList; - this.syncSet = syncSet; - this.syncSetList = syncSetList; - this.time = time; - this.typeMeta = typeMeta; - this.vsphereOSDisk = vsphereOSDisk; - } - - @JsonProperty("APIGroup") - public APIGroup getAPIGroup() { - return aPIGroup; - } - - @JsonProperty("APIGroup") - public void setAPIGroup(APIGroup aPIGroup) { - this.aPIGroup = aPIGroup; - } - - @JsonProperty("APIGroupList") - public APIGroupList getAPIGroupList() { - return aPIGroupList; - } - - @JsonProperty("APIGroupList") - public void setAPIGroupList(APIGroupList aPIGroupList) { - this.aPIGroupList = aPIGroupList; - } - - @JsonProperty("AzureOSDisk") - public io.fabric8.openshift.api.model.hive.azure.v1.OSDisk getAzureOSDisk() { - return azureOSDisk; - } - - @JsonProperty("AzureOSDisk") - public void setAzureOSDisk(io.fabric8.openshift.api.model.hive.azure.v1.OSDisk azureOSDisk) { - this.azureOSDisk = azureOSDisk; - } - - @JsonProperty("BaseKubernetesList") - public KubernetesList getBaseKubernetesList() { - return baseKubernetesList; - } - - @JsonProperty("BaseKubernetesList") - public void setBaseKubernetesList(KubernetesList baseKubernetesList) { - this.baseKubernetesList = baseKubernetesList; - } - - @JsonProperty("Checkpoint") - public Checkpoint getCheckpoint() { - return checkpoint; - } - - @JsonProperty("Checkpoint") - public void setCheckpoint(Checkpoint checkpoint) { - this.checkpoint = checkpoint; - } - - @JsonProperty("CheckpointList") - public CheckpointList getCheckpointList() { - return checkpointList; - } - - @JsonProperty("CheckpointList") - public void setCheckpointList(CheckpointList checkpointList) { - this.checkpointList = checkpointList; - } - - @JsonProperty("ClusterClaim") - public ClusterClaim getClusterClaim() { - return clusterClaim; - } - - @JsonProperty("ClusterClaim") - public void setClusterClaim(ClusterClaim clusterClaim) { - this.clusterClaim = clusterClaim; - } - - @JsonProperty("ClusterClaimList") - public ClusterClaimList getClusterClaimList() { - return clusterClaimList; - } - - @JsonProperty("ClusterClaimList") - public void setClusterClaimList(ClusterClaimList clusterClaimList) { - this.clusterClaimList = clusterClaimList; - } - - @JsonProperty("ClusterDeployment") - public ClusterDeployment getClusterDeployment() { - return clusterDeployment; - } - - @JsonProperty("ClusterDeployment") - public void setClusterDeployment(ClusterDeployment clusterDeployment) { - this.clusterDeployment = clusterDeployment; - } - - @JsonProperty("ClusterDeploymentList") - public ClusterDeploymentList getClusterDeploymentList() { - return clusterDeploymentList; - } - - @JsonProperty("ClusterDeploymentList") - public void setClusterDeploymentList(ClusterDeploymentList clusterDeploymentList) { - this.clusterDeploymentList = clusterDeploymentList; - } - - @JsonProperty("ClusterDeprovision") - public ClusterDeprovision getClusterDeprovision() { - return clusterDeprovision; - } - - @JsonProperty("ClusterDeprovision") - public void setClusterDeprovision(ClusterDeprovision clusterDeprovision) { - this.clusterDeprovision = clusterDeprovision; - } - - @JsonProperty("ClusterDeprovisionList") - public ClusterDeprovisionList getClusterDeprovisionList() { - return clusterDeprovisionList; - } - - @JsonProperty("ClusterDeprovisionList") - public void setClusterDeprovisionList(ClusterDeprovisionList clusterDeprovisionList) { - this.clusterDeprovisionList = clusterDeprovisionList; - } - - @JsonProperty("ClusterImageSet") - public ClusterImageSet getClusterImageSet() { - return clusterImageSet; - } - - @JsonProperty("ClusterImageSet") - public void setClusterImageSet(ClusterImageSet clusterImageSet) { - this.clusterImageSet = clusterImageSet; - } - - @JsonProperty("ClusterImageSetList") - public ClusterImageSetList getClusterImageSetList() { - return clusterImageSetList; - } - - @JsonProperty("ClusterImageSetList") - public void setClusterImageSetList(ClusterImageSetList clusterImageSetList) { - this.clusterImageSetList = clusterImageSetList; - } - - @JsonProperty("ClusterOperatorStatusCondition") - public ClusterOperatorStatusCondition getClusterOperatorStatusCondition() { - return clusterOperatorStatusCondition; - } - - @JsonProperty("ClusterOperatorStatusCondition") - public void setClusterOperatorStatusCondition(ClusterOperatorStatusCondition clusterOperatorStatusCondition) { - this.clusterOperatorStatusCondition = clusterOperatorStatusCondition; - } - - @JsonProperty("ClusterPool") - public ClusterPool getClusterPool() { - return clusterPool; - } - - @JsonProperty("ClusterPool") - public void setClusterPool(ClusterPool clusterPool) { - this.clusterPool = clusterPool; - } - - @JsonProperty("ClusterPoolList") - public ClusterPoolList getClusterPoolList() { - return clusterPoolList; - } - - @JsonProperty("ClusterPoolList") - public void setClusterPoolList(ClusterPoolList clusterPoolList) { - this.clusterPoolList = clusterPoolList; - } - - @JsonProperty("ClusterProvision") - public ClusterProvision getClusterProvision() { - return clusterProvision; - } - - @JsonProperty("ClusterProvision") - public void setClusterProvision(ClusterProvision clusterProvision) { - this.clusterProvision = clusterProvision; - } - - @JsonProperty("ClusterProvisionList") - public ClusterProvisionList getClusterProvisionList() { - return clusterProvisionList; - } - - @JsonProperty("ClusterProvisionList") - public void setClusterProvisionList(ClusterProvisionList clusterProvisionList) { - this.clusterProvisionList = clusterProvisionList; - } - - @JsonProperty("ClusterRelocate") - public ClusterRelocate getClusterRelocate() { - return clusterRelocate; - } - - @JsonProperty("ClusterRelocate") - public void setClusterRelocate(ClusterRelocate clusterRelocate) { - this.clusterRelocate = clusterRelocate; - } - - @JsonProperty("ClusterRelocateList") - public ClusterRelocateList getClusterRelocateList() { - return clusterRelocateList; - } - - @JsonProperty("ClusterRelocateList") - public void setClusterRelocateList(ClusterRelocateList clusterRelocateList) { - this.clusterRelocateList = clusterRelocateList; - } - - @JsonProperty("ClusterState") - public ClusterState getClusterState() { - return clusterState; - } - - @JsonProperty("ClusterState") - public void setClusterState(ClusterState clusterState) { - this.clusterState = clusterState; - } - - @JsonProperty("ClusterStateList") - public ClusterStateList getClusterStateList() { - return clusterStateList; - } - - @JsonProperty("ClusterStateList") - public void setClusterStateList(ClusterStateList clusterStateList) { - this.clusterStateList = clusterStateList; - } - - @JsonProperty("DNSZone") - public DNSZone getDNSZone() { - return dNSZone; - } - - @JsonProperty("DNSZone") - public void setDNSZone(DNSZone dNSZone) { - this.dNSZone = dNSZone; - } - - @JsonProperty("DNSZoneList") - public DNSZoneList getDNSZoneList() { - return dNSZoneList; - } - - @JsonProperty("DNSZoneList") - public void setDNSZoneList(DNSZoneList dNSZoneList) { - this.dNSZoneList = dNSZoneList; - } - - @JsonProperty("GcpOSDisk") - public io.fabric8.openshift.api.model.hive.gcp.v1.OSDisk getGcpOSDisk() { - return gcpOSDisk; - } - - @JsonProperty("GcpOSDisk") - public void setGcpOSDisk(io.fabric8.openshift.api.model.hive.gcp.v1.OSDisk gcpOSDisk) { - this.gcpOSDisk = gcpOSDisk; - } - - @JsonProperty("HiveConfig") - public HiveConfig getHiveConfig() { - return hiveConfig; - } - - @JsonProperty("HiveConfig") - public void setHiveConfig(HiveConfig hiveConfig) { - this.hiveConfig = hiveConfig; - } - - @JsonProperty("HiveConfigList") - public HiveConfigList getHiveConfigList() { - return hiveConfigList; - } - - @JsonProperty("HiveConfigList") - public void setHiveConfigList(HiveConfigList hiveConfigList) { - this.hiveConfigList = hiveConfigList; - } - - @JsonProperty("LocalObjectReference") - public LocalObjectReference getLocalObjectReference() { - return localObjectReference; - } - - @JsonProperty("LocalObjectReference") - public void setLocalObjectReference(LocalObjectReference localObjectReference) { - this.localObjectReference = localObjectReference; - } - - @JsonProperty("MachinePool") - public MachinePool getMachinePool() { - return machinePool; - } - - @JsonProperty("MachinePool") - public void setMachinePool(MachinePool machinePool) { - this.machinePool = machinePool; - } - - @JsonProperty("MachinePoolList") - public MachinePoolList getMachinePoolList() { - return machinePoolList; - } - - @JsonProperty("MachinePoolList") - public void setMachinePoolList(MachinePoolList machinePoolList) { - this.machinePoolList = machinePoolList; - } - - @JsonProperty("MachinePoolNameLease") - public MachinePoolNameLease getMachinePoolNameLease() { - return machinePoolNameLease; - } - - @JsonProperty("MachinePoolNameLease") - public void setMachinePoolNameLease(MachinePoolNameLease machinePoolNameLease) { - this.machinePoolNameLease = machinePoolNameLease; - } - - @JsonProperty("MachinePoolNameLeaseList") - public MachinePoolNameLeaseList getMachinePoolNameLeaseList() { - return machinePoolNameLeaseList; - } - - @JsonProperty("MachinePoolNameLeaseList") - public void setMachinePoolNameLeaseList(MachinePoolNameLeaseList machinePoolNameLeaseList) { - this.machinePoolNameLeaseList = machinePoolNameLeaseList; - } - - @JsonProperty("ObjectMeta") - public ObjectMeta getObjectMeta() { - return objectMeta; - } - - @JsonProperty("ObjectMeta") - public void setObjectMeta(ObjectMeta objectMeta) { - this.objectMeta = objectMeta; - } - - @JsonProperty("Patch") - public Patch getPatch() { - return patch; - } - - @JsonProperty("Patch") - public void setPatch(Patch patch) { - this.patch = patch; - } - - @JsonProperty("SelectorSyncIdentityProvider") - public SelectorSyncIdentityProvider getSelectorSyncIdentityProvider() { - return selectorSyncIdentityProvider; - } - - @JsonProperty("SelectorSyncIdentityProvider") - public void setSelectorSyncIdentityProvider(SelectorSyncIdentityProvider selectorSyncIdentityProvider) { - this.selectorSyncIdentityProvider = selectorSyncIdentityProvider; - } - - @JsonProperty("SelectorSyncIdentityProviderList") - public SelectorSyncIdentityProviderList getSelectorSyncIdentityProviderList() { - return selectorSyncIdentityProviderList; - } - - @JsonProperty("SelectorSyncIdentityProviderList") - public void setSelectorSyncIdentityProviderList(SelectorSyncIdentityProviderList selectorSyncIdentityProviderList) { - this.selectorSyncIdentityProviderList = selectorSyncIdentityProviderList; - } - - @JsonProperty("SelectorSyncSet") - public SelectorSyncSet getSelectorSyncSet() { - return selectorSyncSet; - } - - @JsonProperty("SelectorSyncSet") - public void setSelectorSyncSet(SelectorSyncSet selectorSyncSet) { - this.selectorSyncSet = selectorSyncSet; - } - - @JsonProperty("SelectorSyncSetList") - public SelectorSyncSetList getSelectorSyncSetList() { - return selectorSyncSetList; - } - - @JsonProperty("SelectorSyncSetList") - public void setSelectorSyncSetList(SelectorSyncSetList selectorSyncSetList) { - this.selectorSyncSetList = selectorSyncSetList; - } - - @JsonProperty("Status") - public Status getStatus() { - return status; - } - - @JsonProperty("Status") - public void setStatus(Status status) { - this.status = status; - } - - @JsonProperty("SyncIdentityProvider") - public SyncIdentityProvider getSyncIdentityProvider() { - return syncIdentityProvider; - } - - @JsonProperty("SyncIdentityProvider") - public void setSyncIdentityProvider(SyncIdentityProvider syncIdentityProvider) { - this.syncIdentityProvider = syncIdentityProvider; - } - - @JsonProperty("SyncIdentityProviderList") - public SyncIdentityProviderList getSyncIdentityProviderList() { - return syncIdentityProviderList; - } - - @JsonProperty("SyncIdentityProviderList") - public void setSyncIdentityProviderList(SyncIdentityProviderList syncIdentityProviderList) { - this.syncIdentityProviderList = syncIdentityProviderList; - } - - @JsonProperty("SyncSet") - public SyncSet getSyncSet() { - return syncSet; - } - - @JsonProperty("SyncSet") - public void setSyncSet(SyncSet syncSet) { - this.syncSet = syncSet; - } - - @JsonProperty("SyncSetList") - public SyncSetList getSyncSetList() { - return syncSetList; - } - - @JsonProperty("SyncSetList") - public void setSyncSetList(SyncSetList syncSetList) { - this.syncSetList = syncSetList; - } - - @JsonProperty("Time") - public String getTime() { - return time; - } - - @JsonProperty("Time") - public void setTime(String time) { - this.time = time; - } - - @JsonProperty("TypeMeta") - public TypeMeta getTypeMeta() { - return typeMeta; - } - - @JsonProperty("TypeMeta") - public void setTypeMeta(TypeMeta typeMeta) { - this.typeMeta = typeMeta; - } - - @JsonProperty("VsphereOSDisk") - public io.fabric8.openshift.api.model.hive.vsphere.v1.OSDisk getVsphereOSDisk() { - return vsphereOSDisk; - } - - @JsonProperty("VsphereOSDisk") - public void setVsphereOSDisk(io.fabric8.openshift.api.model.hive.vsphere.v1.OSDisk vsphereOSDisk) { - this.vsphereOSDisk = vsphereOSDisk; - } - - @JsonAnyGetter - public Map getAdditionalProperties() { - return this.additionalProperties; - } - - @JsonAnySetter - public void setAdditionalProperty(String name, Object value) { - this.additionalProperties.put(name, value); - } - - public void setAdditionalProperties(Map additionalProperties) { - this.additionalProperties = additionalProperties; - } - -} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/kubernetes/api/model/ValidationSchema.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/kubernetes/api/model/ValidationSchema.java deleted file mode 100644 index 7c9cc5c2075..00000000000 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/kubernetes/api/model/ValidationSchema.java +++ /dev/null @@ -1,642 +0,0 @@ - -package io.fabric8.kubernetes.api.model; - -import java.util.LinkedHashMap; -import java.util.Map; -import javax.annotation.Generated; -import com.fasterxml.jackson.annotation.JsonAnyGetter; -import com.fasterxml.jackson.annotation.JsonAnySetter; -import com.fasterxml.jackson.annotation.JsonIgnore; -import com.fasterxml.jackson.annotation.JsonProperty; -import io.fabric8.openshift.api.model.config.v1.ClusterOperatorStatusCondition; -import io.fabric8.openshift.api.model.hive.v1.Checkpoint; -import io.fabric8.openshift.api.model.hive.v1.CheckpointList; -import io.fabric8.openshift.api.model.hive.v1.ClusterClaim; -import io.fabric8.openshift.api.model.hive.v1.ClusterClaimList; -import io.fabric8.openshift.api.model.hive.v1.ClusterDeployment; -import io.fabric8.openshift.api.model.hive.v1.ClusterDeploymentList; -import io.fabric8.openshift.api.model.hive.v1.ClusterDeprovision; -import io.fabric8.openshift.api.model.hive.v1.ClusterDeprovisionList; -import io.fabric8.openshift.api.model.hive.v1.ClusterImageSet; -import io.fabric8.openshift.api.model.hive.v1.ClusterImageSetList; -import io.fabric8.openshift.api.model.hive.v1.ClusterPool; -import io.fabric8.openshift.api.model.hive.v1.ClusterPoolList; -import io.fabric8.openshift.api.model.hive.v1.ClusterProvision; -import io.fabric8.openshift.api.model.hive.v1.ClusterProvisionList; -import io.fabric8.openshift.api.model.hive.v1.ClusterRelocate; -import io.fabric8.openshift.api.model.hive.v1.ClusterRelocateList; -import io.fabric8.openshift.api.model.hive.v1.ClusterState; -import io.fabric8.openshift.api.model.hive.v1.ClusterStateList; -import io.fabric8.openshift.api.model.hive.v1.DNSZone; -import io.fabric8.openshift.api.model.hive.v1.DNSZoneList; -import io.fabric8.openshift.api.model.hive.v1.HiveConfig; -import io.fabric8.openshift.api.model.hive.v1.HiveConfigList; -import io.fabric8.openshift.api.model.hive.v1.MachinePool; -import io.fabric8.openshift.api.model.hive.v1.MachinePoolList; -import io.fabric8.openshift.api.model.hive.v1.MachinePoolNameLease; -import io.fabric8.openshift.api.model.hive.v1.MachinePoolNameLeaseList; -import io.fabric8.openshift.api.model.hive.v1.SelectorSyncIdentityProvider; -import io.fabric8.openshift.api.model.hive.v1.SelectorSyncIdentityProviderList; -import io.fabric8.openshift.api.model.hive.v1.SelectorSyncSet; -import io.fabric8.openshift.api.model.hive.v1.SelectorSyncSetList; -import io.fabric8.openshift.api.model.hive.v1.SyncIdentityProvider; -import io.fabric8.openshift.api.model.hive.v1.SyncIdentityProviderList; -import io.fabric8.openshift.api.model.hive.v1.SyncSet; -import io.fabric8.openshift.api.model.hive.v1.SyncSetList; - -@Generated("jsonschema2pojo") -public class ValidationSchema { - - private APIGroup aPIGroup; - private APIGroupList aPIGroupList; - private io.fabric8.openshift.api.model.hive.azure.v1.OSDisk azureOSDisk; - private KubernetesList baseKubernetesList; - private Checkpoint checkpoint; - private CheckpointList checkpointList; - private ClusterClaim clusterClaim; - private ClusterClaimList clusterClaimList; - private ClusterDeployment clusterDeployment; - private ClusterDeploymentList clusterDeploymentList; - private ClusterDeprovision clusterDeprovision; - private ClusterDeprovisionList clusterDeprovisionList; - private ClusterImageSet clusterImageSet; - private ClusterImageSetList clusterImageSetList; - private ClusterOperatorStatusCondition clusterOperatorStatusCondition; - private ClusterPool clusterPool; - private ClusterPoolList clusterPoolList; - private ClusterProvision clusterProvision; - private ClusterProvisionList clusterProvisionList; - private ClusterRelocate clusterRelocate; - private ClusterRelocateList clusterRelocateList; - private ClusterState clusterState; - private ClusterStateList clusterStateList; - private DNSZone dNSZone; - private DNSZoneList dNSZoneList; - private io.fabric8.openshift.api.model.hive.gcp.v1.OSDisk gcpOSDisk; - private HiveConfig hiveConfig; - private HiveConfigList hiveConfigList; - private LocalObjectReference localObjectReference; - private MachinePool machinePool; - private MachinePoolList machinePoolList; - private MachinePoolNameLease machinePoolNameLease; - private MachinePoolNameLeaseList machinePoolNameLeaseList; - private ObjectMeta objectMeta; - private Patch patch; - private SelectorSyncIdentityProvider selectorSyncIdentityProvider; - private SelectorSyncIdentityProviderList selectorSyncIdentityProviderList; - private SelectorSyncSet selectorSyncSet; - private SelectorSyncSetList selectorSyncSetList; - private Status status; - private SyncIdentityProvider syncIdentityProvider; - private SyncIdentityProviderList syncIdentityProviderList; - private SyncSet syncSet; - private SyncSetList syncSetList; - private String time; - private TypeMeta typeMeta; - private io.fabric8.openshift.api.model.hive.vsphere.v1.OSDisk vsphereOSDisk; - @JsonIgnore - private Map additionalProperties = new LinkedHashMap(); - - /** - * No args constructor for use in serialization - * - */ - public ValidationSchema() { - } - - public ValidationSchema(APIGroup aPIGroup, APIGroupList aPIGroupList, io.fabric8.openshift.api.model.hive.azure.v1.OSDisk azureOSDisk, KubernetesList baseKubernetesList, Checkpoint checkpoint, CheckpointList checkpointList, ClusterClaim clusterClaim, ClusterClaimList clusterClaimList, ClusterDeployment clusterDeployment, ClusterDeploymentList clusterDeploymentList, ClusterDeprovision clusterDeprovision, ClusterDeprovisionList clusterDeprovisionList, ClusterImageSet clusterImageSet, ClusterImageSetList clusterImageSetList, ClusterOperatorStatusCondition clusterOperatorStatusCondition, ClusterPool clusterPool, ClusterPoolList clusterPoolList, ClusterProvision clusterProvision, ClusterProvisionList clusterProvisionList, ClusterRelocate clusterRelocate, ClusterRelocateList clusterRelocateList, ClusterState clusterState, ClusterStateList clusterStateList, DNSZone dNSZone, DNSZoneList dNSZoneList, io.fabric8.openshift.api.model.hive.gcp.v1.OSDisk gcpOSDisk, HiveConfig hiveConfig, HiveConfigList hiveConfigList, LocalObjectReference localObjectReference, MachinePool machinePool, MachinePoolList machinePoolList, MachinePoolNameLease machinePoolNameLease, MachinePoolNameLeaseList machinePoolNameLeaseList, ObjectMeta objectMeta, Patch patch, SelectorSyncIdentityProvider selectorSyncIdentityProvider, SelectorSyncIdentityProviderList selectorSyncIdentityProviderList, SelectorSyncSet selectorSyncSet, SelectorSyncSetList selectorSyncSetList, Status status, SyncIdentityProvider syncIdentityProvider, SyncIdentityProviderList syncIdentityProviderList, SyncSet syncSet, SyncSetList syncSetList, String time, TypeMeta typeMeta, io.fabric8.openshift.api.model.hive.vsphere.v1.OSDisk vsphereOSDisk) { - super(); - this.aPIGroup = aPIGroup; - this.aPIGroupList = aPIGroupList; - this.azureOSDisk = azureOSDisk; - this.baseKubernetesList = baseKubernetesList; - this.checkpoint = checkpoint; - this.checkpointList = checkpointList; - this.clusterClaim = clusterClaim; - this.clusterClaimList = clusterClaimList; - this.clusterDeployment = clusterDeployment; - this.clusterDeploymentList = clusterDeploymentList; - this.clusterDeprovision = clusterDeprovision; - this.clusterDeprovisionList = clusterDeprovisionList; - this.clusterImageSet = clusterImageSet; - this.clusterImageSetList = clusterImageSetList; - this.clusterOperatorStatusCondition = clusterOperatorStatusCondition; - this.clusterPool = clusterPool; - this.clusterPoolList = clusterPoolList; - this.clusterProvision = clusterProvision; - this.clusterProvisionList = clusterProvisionList; - this.clusterRelocate = clusterRelocate; - this.clusterRelocateList = clusterRelocateList; - this.clusterState = clusterState; - this.clusterStateList = clusterStateList; - this.dNSZone = dNSZone; - this.dNSZoneList = dNSZoneList; - this.gcpOSDisk = gcpOSDisk; - this.hiveConfig = hiveConfig; - this.hiveConfigList = hiveConfigList; - this.localObjectReference = localObjectReference; - this.machinePool = machinePool; - this.machinePoolList = machinePoolList; - this.machinePoolNameLease = machinePoolNameLease; - this.machinePoolNameLeaseList = machinePoolNameLeaseList; - this.objectMeta = objectMeta; - this.patch = patch; - this.selectorSyncIdentityProvider = selectorSyncIdentityProvider; - this.selectorSyncIdentityProviderList = selectorSyncIdentityProviderList; - this.selectorSyncSet = selectorSyncSet; - this.selectorSyncSetList = selectorSyncSetList; - this.status = status; - this.syncIdentityProvider = syncIdentityProvider; - this.syncIdentityProviderList = syncIdentityProviderList; - this.syncSet = syncSet; - this.syncSetList = syncSetList; - this.time = time; - this.typeMeta = typeMeta; - this.vsphereOSDisk = vsphereOSDisk; - } - - @JsonProperty("APIGroup") - public APIGroup getAPIGroup() { - return aPIGroup; - } - - @JsonProperty("APIGroup") - public void setAPIGroup(APIGroup aPIGroup) { - this.aPIGroup = aPIGroup; - } - - @JsonProperty("APIGroupList") - public APIGroupList getAPIGroupList() { - return aPIGroupList; - } - - @JsonProperty("APIGroupList") - public void setAPIGroupList(APIGroupList aPIGroupList) { - this.aPIGroupList = aPIGroupList; - } - - @JsonProperty("AzureOSDisk") - public io.fabric8.openshift.api.model.hive.azure.v1.OSDisk getAzureOSDisk() { - return azureOSDisk; - } - - @JsonProperty("AzureOSDisk") - public void setAzureOSDisk(io.fabric8.openshift.api.model.hive.azure.v1.OSDisk azureOSDisk) { - this.azureOSDisk = azureOSDisk; - } - - @JsonProperty("BaseKubernetesList") - public KubernetesList getBaseKubernetesList() { - return baseKubernetesList; - } - - @JsonProperty("BaseKubernetesList") - public void setBaseKubernetesList(KubernetesList baseKubernetesList) { - this.baseKubernetesList = baseKubernetesList; - } - - @JsonProperty("Checkpoint") - public Checkpoint getCheckpoint() { - return checkpoint; - } - - @JsonProperty("Checkpoint") - public void setCheckpoint(Checkpoint checkpoint) { - this.checkpoint = checkpoint; - } - - @JsonProperty("CheckpointList") - public CheckpointList getCheckpointList() { - return checkpointList; - } - - @JsonProperty("CheckpointList") - public void setCheckpointList(CheckpointList checkpointList) { - this.checkpointList = checkpointList; - } - - @JsonProperty("ClusterClaim") - public ClusterClaim getClusterClaim() { - return clusterClaim; - } - - @JsonProperty("ClusterClaim") - public void setClusterClaim(ClusterClaim clusterClaim) { - this.clusterClaim = clusterClaim; - } - - @JsonProperty("ClusterClaimList") - public ClusterClaimList getClusterClaimList() { - return clusterClaimList; - } - - @JsonProperty("ClusterClaimList") - public void setClusterClaimList(ClusterClaimList clusterClaimList) { - this.clusterClaimList = clusterClaimList; - } - - @JsonProperty("ClusterDeployment") - public ClusterDeployment getClusterDeployment() { - return clusterDeployment; - } - - @JsonProperty("ClusterDeployment") - public void setClusterDeployment(ClusterDeployment clusterDeployment) { - this.clusterDeployment = clusterDeployment; - } - - @JsonProperty("ClusterDeploymentList") - public ClusterDeploymentList getClusterDeploymentList() { - return clusterDeploymentList; - } - - @JsonProperty("ClusterDeploymentList") - public void setClusterDeploymentList(ClusterDeploymentList clusterDeploymentList) { - this.clusterDeploymentList = clusterDeploymentList; - } - - @JsonProperty("ClusterDeprovision") - public ClusterDeprovision getClusterDeprovision() { - return clusterDeprovision; - } - - @JsonProperty("ClusterDeprovision") - public void setClusterDeprovision(ClusterDeprovision clusterDeprovision) { - this.clusterDeprovision = clusterDeprovision; - } - - @JsonProperty("ClusterDeprovisionList") - public ClusterDeprovisionList getClusterDeprovisionList() { - return clusterDeprovisionList; - } - - @JsonProperty("ClusterDeprovisionList") - public void setClusterDeprovisionList(ClusterDeprovisionList clusterDeprovisionList) { - this.clusterDeprovisionList = clusterDeprovisionList; - } - - @JsonProperty("ClusterImageSet") - public ClusterImageSet getClusterImageSet() { - return clusterImageSet; - } - - @JsonProperty("ClusterImageSet") - public void setClusterImageSet(ClusterImageSet clusterImageSet) { - this.clusterImageSet = clusterImageSet; - } - - @JsonProperty("ClusterImageSetList") - public ClusterImageSetList getClusterImageSetList() { - return clusterImageSetList; - } - - @JsonProperty("ClusterImageSetList") - public void setClusterImageSetList(ClusterImageSetList clusterImageSetList) { - this.clusterImageSetList = clusterImageSetList; - } - - @JsonProperty("ClusterOperatorStatusCondition") - public ClusterOperatorStatusCondition getClusterOperatorStatusCondition() { - return clusterOperatorStatusCondition; - } - - @JsonProperty("ClusterOperatorStatusCondition") - public void setClusterOperatorStatusCondition(ClusterOperatorStatusCondition clusterOperatorStatusCondition) { - this.clusterOperatorStatusCondition = clusterOperatorStatusCondition; - } - - @JsonProperty("ClusterPool") - public ClusterPool getClusterPool() { - return clusterPool; - } - - @JsonProperty("ClusterPool") - public void setClusterPool(ClusterPool clusterPool) { - this.clusterPool = clusterPool; - } - - @JsonProperty("ClusterPoolList") - public ClusterPoolList getClusterPoolList() { - return clusterPoolList; - } - - @JsonProperty("ClusterPoolList") - public void setClusterPoolList(ClusterPoolList clusterPoolList) { - this.clusterPoolList = clusterPoolList; - } - - @JsonProperty("ClusterProvision") - public ClusterProvision getClusterProvision() { - return clusterProvision; - } - - @JsonProperty("ClusterProvision") - public void setClusterProvision(ClusterProvision clusterProvision) { - this.clusterProvision = clusterProvision; - } - - @JsonProperty("ClusterProvisionList") - public ClusterProvisionList getClusterProvisionList() { - return clusterProvisionList; - } - - @JsonProperty("ClusterProvisionList") - public void setClusterProvisionList(ClusterProvisionList clusterProvisionList) { - this.clusterProvisionList = clusterProvisionList; - } - - @JsonProperty("ClusterRelocate") - public ClusterRelocate getClusterRelocate() { - return clusterRelocate; - } - - @JsonProperty("ClusterRelocate") - public void setClusterRelocate(ClusterRelocate clusterRelocate) { - this.clusterRelocate = clusterRelocate; - } - - @JsonProperty("ClusterRelocateList") - public ClusterRelocateList getClusterRelocateList() { - return clusterRelocateList; - } - - @JsonProperty("ClusterRelocateList") - public void setClusterRelocateList(ClusterRelocateList clusterRelocateList) { - this.clusterRelocateList = clusterRelocateList; - } - - @JsonProperty("ClusterState") - public ClusterState getClusterState() { - return clusterState; - } - - @JsonProperty("ClusterState") - public void setClusterState(ClusterState clusterState) { - this.clusterState = clusterState; - } - - @JsonProperty("ClusterStateList") - public ClusterStateList getClusterStateList() { - return clusterStateList; - } - - @JsonProperty("ClusterStateList") - public void setClusterStateList(ClusterStateList clusterStateList) { - this.clusterStateList = clusterStateList; - } - - @JsonProperty("DNSZone") - public DNSZone getDNSZone() { - return dNSZone; - } - - @JsonProperty("DNSZone") - public void setDNSZone(DNSZone dNSZone) { - this.dNSZone = dNSZone; - } - - @JsonProperty("DNSZoneList") - public DNSZoneList getDNSZoneList() { - return dNSZoneList; - } - - @JsonProperty("DNSZoneList") - public void setDNSZoneList(DNSZoneList dNSZoneList) { - this.dNSZoneList = dNSZoneList; - } - - @JsonProperty("GcpOSDisk") - public io.fabric8.openshift.api.model.hive.gcp.v1.OSDisk getGcpOSDisk() { - return gcpOSDisk; - } - - @JsonProperty("GcpOSDisk") - public void setGcpOSDisk(io.fabric8.openshift.api.model.hive.gcp.v1.OSDisk gcpOSDisk) { - this.gcpOSDisk = gcpOSDisk; - } - - @JsonProperty("HiveConfig") - public HiveConfig getHiveConfig() { - return hiveConfig; - } - - @JsonProperty("HiveConfig") - public void setHiveConfig(HiveConfig hiveConfig) { - this.hiveConfig = hiveConfig; - } - - @JsonProperty("HiveConfigList") - public HiveConfigList getHiveConfigList() { - return hiveConfigList; - } - - @JsonProperty("HiveConfigList") - public void setHiveConfigList(HiveConfigList hiveConfigList) { - this.hiveConfigList = hiveConfigList; - } - - @JsonProperty("LocalObjectReference") - public LocalObjectReference getLocalObjectReference() { - return localObjectReference; - } - - @JsonProperty("LocalObjectReference") - public void setLocalObjectReference(LocalObjectReference localObjectReference) { - this.localObjectReference = localObjectReference; - } - - @JsonProperty("MachinePool") - public MachinePool getMachinePool() { - return machinePool; - } - - @JsonProperty("MachinePool") - public void setMachinePool(MachinePool machinePool) { - this.machinePool = machinePool; - } - - @JsonProperty("MachinePoolList") - public MachinePoolList getMachinePoolList() { - return machinePoolList; - } - - @JsonProperty("MachinePoolList") - public void setMachinePoolList(MachinePoolList machinePoolList) { - this.machinePoolList = machinePoolList; - } - - @JsonProperty("MachinePoolNameLease") - public MachinePoolNameLease getMachinePoolNameLease() { - return machinePoolNameLease; - } - - @JsonProperty("MachinePoolNameLease") - public void setMachinePoolNameLease(MachinePoolNameLease machinePoolNameLease) { - this.machinePoolNameLease = machinePoolNameLease; - } - - @JsonProperty("MachinePoolNameLeaseList") - public MachinePoolNameLeaseList getMachinePoolNameLeaseList() { - return machinePoolNameLeaseList; - } - - @JsonProperty("MachinePoolNameLeaseList") - public void setMachinePoolNameLeaseList(MachinePoolNameLeaseList machinePoolNameLeaseList) { - this.machinePoolNameLeaseList = machinePoolNameLeaseList; - } - - @JsonProperty("ObjectMeta") - public ObjectMeta getObjectMeta() { - return objectMeta; - } - - @JsonProperty("ObjectMeta") - public void setObjectMeta(ObjectMeta objectMeta) { - this.objectMeta = objectMeta; - } - - @JsonProperty("Patch") - public Patch getPatch() { - return patch; - } - - @JsonProperty("Patch") - public void setPatch(Patch patch) { - this.patch = patch; - } - - @JsonProperty("SelectorSyncIdentityProvider") - public SelectorSyncIdentityProvider getSelectorSyncIdentityProvider() { - return selectorSyncIdentityProvider; - } - - @JsonProperty("SelectorSyncIdentityProvider") - public void setSelectorSyncIdentityProvider(SelectorSyncIdentityProvider selectorSyncIdentityProvider) { - this.selectorSyncIdentityProvider = selectorSyncIdentityProvider; - } - - @JsonProperty("SelectorSyncIdentityProviderList") - public SelectorSyncIdentityProviderList getSelectorSyncIdentityProviderList() { - return selectorSyncIdentityProviderList; - } - - @JsonProperty("SelectorSyncIdentityProviderList") - public void setSelectorSyncIdentityProviderList(SelectorSyncIdentityProviderList selectorSyncIdentityProviderList) { - this.selectorSyncIdentityProviderList = selectorSyncIdentityProviderList; - } - - @JsonProperty("SelectorSyncSet") - public SelectorSyncSet getSelectorSyncSet() { - return selectorSyncSet; - } - - @JsonProperty("SelectorSyncSet") - public void setSelectorSyncSet(SelectorSyncSet selectorSyncSet) { - this.selectorSyncSet = selectorSyncSet; - } - - @JsonProperty("SelectorSyncSetList") - public SelectorSyncSetList getSelectorSyncSetList() { - return selectorSyncSetList; - } - - @JsonProperty("SelectorSyncSetList") - public void setSelectorSyncSetList(SelectorSyncSetList selectorSyncSetList) { - this.selectorSyncSetList = selectorSyncSetList; - } - - @JsonProperty("Status") - public Status getStatus() { - return status; - } - - @JsonProperty("Status") - public void setStatus(Status status) { - this.status = status; - } - - @JsonProperty("SyncIdentityProvider") - public SyncIdentityProvider getSyncIdentityProvider() { - return syncIdentityProvider; - } - - @JsonProperty("SyncIdentityProvider") - public void setSyncIdentityProvider(SyncIdentityProvider syncIdentityProvider) { - this.syncIdentityProvider = syncIdentityProvider; - } - - @JsonProperty("SyncIdentityProviderList") - public SyncIdentityProviderList getSyncIdentityProviderList() { - return syncIdentityProviderList; - } - - @JsonProperty("SyncIdentityProviderList") - public void setSyncIdentityProviderList(SyncIdentityProviderList syncIdentityProviderList) { - this.syncIdentityProviderList = syncIdentityProviderList; - } - - @JsonProperty("SyncSet") - public SyncSet getSyncSet() { - return syncSet; - } - - @JsonProperty("SyncSet") - public void setSyncSet(SyncSet syncSet) { - this.syncSet = syncSet; - } - - @JsonProperty("SyncSetList") - public SyncSetList getSyncSetList() { - return syncSetList; - } - - @JsonProperty("SyncSetList") - public void setSyncSetList(SyncSetList syncSetList) { - this.syncSetList = syncSetList; - } - - @JsonProperty("Time") - public String getTime() { - return time; - } - - @JsonProperty("Time") - public void setTime(String time) { - this.time = time; - } - - @JsonProperty("TypeMeta") - public TypeMeta getTypeMeta() { - return typeMeta; - } - - @JsonProperty("TypeMeta") - public void setTypeMeta(TypeMeta typeMeta) { - this.typeMeta = typeMeta; - } - - @JsonProperty("VsphereOSDisk") - public io.fabric8.openshift.api.model.hive.vsphere.v1.OSDisk getVsphereOSDisk() { - return vsphereOSDisk; - } - - @JsonProperty("VsphereOSDisk") - public void setVsphereOSDisk(io.fabric8.openshift.api.model.hive.vsphere.v1.OSDisk vsphereOSDisk) { - this.vsphereOSDisk = vsphereOSDisk; - } - - @JsonAnyGetter - public Map getAdditionalProperties() { - return this.additionalProperties; - } - - @JsonAnySetter - public void setAdditionalProperty(String name, Object value) { - this.additionalProperties.put(name, value); - } - - public void setAdditionalProperties(Map additionalProperties) { - this.additionalProperties = additionalProperties; - } - -} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/agent/v1/BareMetalPlatform.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/agent/v1/BareMetalPlatform.java index fab29bf817b..176a84cf918 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/agent/v1/BareMetalPlatform.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/agent/v1/BareMetalPlatform.java @@ -15,6 +15,7 @@ import io.fabric8.kubernetes.api.model.Container; import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; @@ -40,7 +41,7 @@ }) @Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { @BuildableReference(ObjectMeta.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LabelSelector.class), + @BuildableReference(LabelSelector.class), @BuildableReference(Container.class), @BuildableReference(PodTemplateSpec.class), @BuildableReference(ResourceRequirements.class), @@ -54,7 +55,7 @@ public class BareMetalPlatform implements Editable , K { @JsonProperty("agentSelector") - private io.fabric8.kubernetes.api.model.LabelSelector agentSelector; + private LabelSelector agentSelector; @JsonIgnore private Map additionalProperties = new LinkedHashMap(); @@ -65,18 +66,18 @@ public class BareMetalPlatform implements Editable , K public BareMetalPlatform() { } - public BareMetalPlatform(io.fabric8.kubernetes.api.model.LabelSelector agentSelector) { + public BareMetalPlatform(LabelSelector agentSelector) { super(); this.agentSelector = agentSelector; } @JsonProperty("agentSelector") - public io.fabric8.kubernetes.api.model.LabelSelector getAgentSelector() { + public LabelSelector getAgentSelector() { return agentSelector; } @JsonProperty("agentSelector") - public void setAgentSelector(io.fabric8.kubernetes.api.model.LabelSelector agentSelector) { + public void setAgentSelector(LabelSelector agentSelector) { this.agentSelector = agentSelector; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/MachinePoolPlatform.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/MachinePoolPlatform.java index 7a663457964..1b3c72bf400 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/MachinePoolPlatform.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/MachinePoolPlatform.java @@ -39,6 +39,7 @@ "spotMarketOptions", "subnets", "type", + "userTags", "zones" }) @ToString @@ -76,6 +77,9 @@ public class MachinePoolPlatform implements Editable private List subnets = new ArrayList<>(); @JsonProperty("type") private String type; + @JsonProperty("userTags") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + private Map userTags = new LinkedHashMap<>(); @JsonProperty("zones") @JsonInclude(JsonInclude.Include.NON_EMPTY) private List zones = new ArrayList<>(); @@ -89,7 +93,7 @@ public class MachinePoolPlatform implements Editable public MachinePoolPlatform() { } - public MachinePoolPlatform(List additionalSecurityGroupIDs, EC2Metadata metadataService, EC2RootVolume rootVolume, SpotMarketOptions spotMarketOptions, List subnets, String type, List zones) { + public MachinePoolPlatform(List additionalSecurityGroupIDs, EC2Metadata metadataService, EC2RootVolume rootVolume, SpotMarketOptions spotMarketOptions, List subnets, String type, Map userTags, List zones) { super(); this.additionalSecurityGroupIDs = additionalSecurityGroupIDs; this.metadataService = metadataService; @@ -97,6 +101,7 @@ public MachinePoolPlatform(List additionalSecurityGroupIDs, EC2Metadata this.spotMarketOptions = spotMarketOptions; this.subnets = subnets; this.type = type; + this.userTags = userTags; this.zones = zones; } @@ -162,6 +167,17 @@ public void setType(String type) { this.type = type; } + @JsonProperty("userTags") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + public Map getUserTags() { + return userTags; + } + + @JsonProperty("userTags") + public void setUserTags(Map userTags) { + this.userTags = userTags; + } + @JsonProperty("zones") @JsonInclude(JsonInclude.Include.NON_EMPTY) public List getZones() { diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/AwsMetadata.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/Metadata.java similarity index 92% rename from kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/AwsMetadata.java rename to kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/Metadata.java index 8c42c9cdc13..e32d4b3a242 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/AwsMetadata.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/Metadata.java @@ -51,7 +51,7 @@ @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") -public class AwsMetadata implements Editable , KubernetesResource +public class Metadata implements Editable , KubernetesResource { @JsonProperty("hostedZoneRole") @@ -63,10 +63,10 @@ public class AwsMetadata implements Editable , KubernetesRes * No args constructor for use in serialization * */ - public AwsMetadata() { + public Metadata() { } - public AwsMetadata(String hostedZoneRole) { + public Metadata(String hostedZoneRole) { super(); this.hostedZoneRole = hostedZoneRole; } @@ -82,12 +82,12 @@ public void setHostedZoneRole(String hostedZoneRole) { } @JsonIgnore - public AwsMetadataBuilder edit() { - return new AwsMetadataBuilder(this); + public MetadataBuilder edit() { + return new MetadataBuilder(this); } @JsonIgnore - public AwsMetadataBuilder toBuilder() { + public MetadataBuilder toBuilder() { return edit(); } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/AwsPlatform.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/Platform.java similarity index 85% rename from kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/AwsPlatform.java rename to kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/Platform.java index b9b741e785c..2f2247ef170 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/AwsPlatform.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/Platform.java @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -50,17 +51,17 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") -public class AwsPlatform implements Editable , KubernetesResource +public class Platform implements Editable , KubernetesResource { @JsonProperty("credentialsAssumeRole") private AssumeRole credentialsAssumeRole; @JsonProperty("credentialsSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef; + private LocalObjectReference credentialsSecretRef; @JsonProperty("privateLink") private PrivateLinkAccess privateLink; @JsonProperty("region") @@ -75,10 +76,10 @@ public class AwsPlatform implements Editable , KubernetesRes * No args constructor for use in serialization * */ - public AwsPlatform() { + public Platform() { } - public AwsPlatform(AssumeRole credentialsAssumeRole, io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef, PrivateLinkAccess privateLink, String region, Map userTags) { + public Platform(AssumeRole credentialsAssumeRole, LocalObjectReference credentialsSecretRef, PrivateLinkAccess privateLink, String region, Map userTags) { super(); this.credentialsAssumeRole = credentialsAssumeRole; this.credentialsSecretRef = credentialsSecretRef; @@ -98,12 +99,12 @@ public void setCredentialsAssumeRole(AssumeRole credentialsAssumeRole) { } @JsonProperty("credentialsSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getCredentialsSecretRef() { + public LocalObjectReference getCredentialsSecretRef() { return credentialsSecretRef; } @JsonProperty("credentialsSecretRef") - public void setCredentialsSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef) { + public void setCredentialsSecretRef(LocalObjectReference credentialsSecretRef) { this.credentialsSecretRef = credentialsSecretRef; } @@ -139,12 +140,12 @@ public void setUserTags(Map userTags) { } @JsonIgnore - public AwsPlatformBuilder edit() { - return new AwsPlatformBuilder(this); + public PlatformBuilder edit() { + return new PlatformBuilder(this); } @JsonIgnore - public AwsPlatformBuilder toBuilder() { + public PlatformBuilder toBuilder() { return edit(); } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/AwsPlatformStatus.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/PlatformStatus.java similarity index 90% rename from kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/AwsPlatformStatus.java rename to kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/PlatformStatus.java index b29bd95d52a..751bf3e2a2f 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/AwsPlatformStatus.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/aws/v1/PlatformStatus.java @@ -51,7 +51,7 @@ @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") -public class AwsPlatformStatus implements Editable , KubernetesResource +public class PlatformStatus implements Editable , KubernetesResource { @JsonProperty("privateLink") @@ -63,10 +63,10 @@ public class AwsPlatformStatus implements Editable , K * No args constructor for use in serialization * */ - public AwsPlatformStatus() { + public PlatformStatus() { } - public AwsPlatformStatus(PrivateLinkAccessStatus privateLink) { + public PlatformStatus(PrivateLinkAccessStatus privateLink) { super(); this.privateLink = privateLink; } @@ -82,12 +82,12 @@ public void setPrivateLink(PrivateLinkAccessStatus privateLink) { } @JsonIgnore - public AwsPlatformStatusBuilder edit() { - return new AwsPlatformStatusBuilder(this); + public PlatformStatusBuilder edit() { + return new PlatformStatusBuilder(this); } @JsonIgnore - public AwsPlatformStatusBuilder toBuilder() { + public PlatformStatusBuilder toBuilder() { return edit(); } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/azure/v1/MachinePool.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/azure/v1/MachinePool.java index 93f83d2dcbe..2a44073c34a 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/azure/v1/MachinePool.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/azure/v1/MachinePool.java @@ -33,9 +33,13 @@ @JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) @JsonInclude(JsonInclude.Include.NON_NULL) @JsonPropertyOrder({ + "computeSubnet", + "networkResourceGroupName", "osDisk", "osImage", "type", + "virtualNetwork", + "vmNetworkingType", "zones" }) @ToString @@ -59,12 +63,20 @@ public class MachinePool implements Editable , KubernetesResource { + @JsonProperty("computeSubnet") + private String computeSubnet; + @JsonProperty("networkResourceGroupName") + private String networkResourceGroupName; @JsonProperty("osDisk") private OSDisk osDisk; @JsonProperty("osImage") private OSImage osImage; @JsonProperty("type") private String type; + @JsonProperty("virtualNetwork") + private String virtualNetwork; + @JsonProperty("vmNetworkingType") + private String vmNetworkingType; @JsonProperty("zones") @JsonInclude(JsonInclude.Include.NON_EMPTY) private List zones = new ArrayList<>(); @@ -78,14 +90,38 @@ public class MachinePool implements Editable , KubernetesRes public MachinePool() { } - public MachinePool(OSDisk osDisk, OSImage osImage, String type, List zones) { + public MachinePool(String computeSubnet, String networkResourceGroupName, OSDisk osDisk, OSImage osImage, String type, String virtualNetwork, String vmNetworkingType, List zones) { super(); + this.computeSubnet = computeSubnet; + this.networkResourceGroupName = networkResourceGroupName; this.osDisk = osDisk; this.osImage = osImage; this.type = type; + this.virtualNetwork = virtualNetwork; + this.vmNetworkingType = vmNetworkingType; this.zones = zones; } + @JsonProperty("computeSubnet") + public String getComputeSubnet() { + return computeSubnet; + } + + @JsonProperty("computeSubnet") + public void setComputeSubnet(String computeSubnet) { + this.computeSubnet = computeSubnet; + } + + @JsonProperty("networkResourceGroupName") + public String getNetworkResourceGroupName() { + return networkResourceGroupName; + } + + @JsonProperty("networkResourceGroupName") + public void setNetworkResourceGroupName(String networkResourceGroupName) { + this.networkResourceGroupName = networkResourceGroupName; + } + @JsonProperty("osDisk") public OSDisk getOsDisk() { return osDisk; @@ -116,6 +152,26 @@ public void setType(String type) { this.type = type; } + @JsonProperty("virtualNetwork") + public String getVirtualNetwork() { + return virtualNetwork; + } + + @JsonProperty("virtualNetwork") + public void setVirtualNetwork(String virtualNetwork) { + this.virtualNetwork = virtualNetwork; + } + + @JsonProperty("vmNetworkingType") + public String getVmNetworkingType() { + return vmNetworkingType; + } + + @JsonProperty("vmNetworkingType") + public void setVmNetworkingType(String vmNetworkingType) { + this.vmNetworkingType = vmNetworkingType; + } + @JsonProperty("zones") @JsonInclude(JsonInclude.Include.NON_EMPTY) public List getZones() { diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/azure/v1/AzureMetadata.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/azure/v1/Metadata.java similarity index 91% rename from kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/azure/v1/AzureMetadata.java rename to kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/azure/v1/Metadata.java index 8e20a71eb4c..6fabf49a5eb 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/azure/v1/AzureMetadata.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/azure/v1/Metadata.java @@ -51,7 +51,7 @@ @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") -public class AzureMetadata implements Editable , KubernetesResource +public class Metadata implements Editable , KubernetesResource { @JsonProperty("resourceGroupName") @@ -63,10 +63,10 @@ public class AzureMetadata implements Editable , Kubernete * No args constructor for use in serialization * */ - public AzureMetadata() { + public Metadata() { } - public AzureMetadata(String resourceGroupName) { + public Metadata(String resourceGroupName) { super(); this.resourceGroupName = resourceGroupName; } @@ -82,12 +82,12 @@ public void setResourceGroupName(String resourceGroupName) { } @JsonIgnore - public AzureMetadataBuilder edit() { - return new AzureMetadataBuilder(this); + public MetadataBuilder edit() { + return new MetadataBuilder(this); } @JsonIgnore - public AzureMetadataBuilder toBuilder() { + public MetadataBuilder toBuilder() { return edit(); } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/azure/v1/AzurePlatform.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/azure/v1/Platform.java similarity index 84% rename from kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/azure/v1/AzurePlatform.java rename to kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/azure/v1/Platform.java index 5fef4b8ff00..3eba952e0fe 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/azure/v1/AzurePlatform.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/azure/v1/Platform.java @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -49,11 +50,11 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") -public class AzurePlatform implements Editable , KubernetesResource +public class Platform implements Editable , KubernetesResource { @JsonProperty("baseDomainResourceGroupName") @@ -61,7 +62,7 @@ public class AzurePlatform implements Editable , Kubernete @JsonProperty("cloudName") private String cloudName; @JsonProperty("credentialsSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef; + private LocalObjectReference credentialsSecretRef; @JsonProperty("region") private String region; @JsonIgnore @@ -71,10 +72,10 @@ public class AzurePlatform implements Editable , Kubernete * No args constructor for use in serialization * */ - public AzurePlatform() { + public Platform() { } - public AzurePlatform(String baseDomainResourceGroupName, String cloudName, io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef, String region) { + public Platform(String baseDomainResourceGroupName, String cloudName, LocalObjectReference credentialsSecretRef, String region) { super(); this.baseDomainResourceGroupName = baseDomainResourceGroupName; this.cloudName = cloudName; @@ -103,12 +104,12 @@ public void setCloudName(String cloudName) { } @JsonProperty("credentialsSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getCredentialsSecretRef() { + public LocalObjectReference getCredentialsSecretRef() { return credentialsSecretRef; } @JsonProperty("credentialsSecretRef") - public void setCredentialsSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef) { + public void setCredentialsSecretRef(LocalObjectReference credentialsSecretRef) { this.credentialsSecretRef = credentialsSecretRef; } @@ -123,12 +124,12 @@ public void setRegion(String region) { } @JsonIgnore - public AzurePlatformBuilder edit() { - return new AzurePlatformBuilder(this); + public PlatformBuilder edit() { + return new PlatformBuilder(this); } @JsonIgnore - public AzurePlatformBuilder toBuilder() { + public PlatformBuilder toBuilder() { return edit(); } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/baremetal/v1/Platform.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/baremetal/v1/Platform.java index 06f4d9b1498..b762af8a911 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/baremetal/v1/Platform.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/baremetal/v1/Platform.java @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -46,7 +47,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -54,7 +55,7 @@ public class Platform implements Editable , KubernetesResource { @JsonProperty("libvirtSSHPrivateKeySecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference libvirtSSHPrivateKeySecretRef; + private LocalObjectReference libvirtSSHPrivateKeySecretRef; @JsonIgnore private Map additionalProperties = new LinkedHashMap(); @@ -65,18 +66,18 @@ public class Platform implements Editable , KubernetesResource public Platform() { } - public Platform(io.fabric8.kubernetes.api.model.LocalObjectReference libvirtSSHPrivateKeySecretRef) { + public Platform(LocalObjectReference libvirtSSHPrivateKeySecretRef) { super(); this.libvirtSSHPrivateKeySecretRef = libvirtSSHPrivateKeySecretRef; } @JsonProperty("libvirtSSHPrivateKeySecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getLibvirtSSHPrivateKeySecretRef() { + public LocalObjectReference getLibvirtSSHPrivateKeySecretRef() { return libvirtSSHPrivateKeySecretRef; } @JsonProperty("libvirtSSHPrivateKeySecretRef") - public void setLibvirtSSHPrivateKeySecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference libvirtSSHPrivateKeySecretRef) { + public void setLibvirtSSHPrivateKeySecretRef(LocalObjectReference libvirtSSHPrivateKeySecretRef) { this.libvirtSSHPrivateKeySecretRef = libvirtSSHPrivateKeySecretRef; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/MachinePool.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/MachinePool.java index 5eed8c06e12..72cbbab3edf 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/MachinePool.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/MachinePool.java @@ -34,8 +34,12 @@ @JsonInclude(JsonInclude.Include.NON_NULL) @JsonPropertyOrder({ "networkProjectID", + "onHostMaintenance", "osDisk", + "secureBoot", + "serviceAccount", "type", + "userTags", "zones" }) @ToString @@ -61,10 +65,19 @@ public class MachinePool implements Editable , KubernetesRes @JsonProperty("networkProjectID") private String networkProjectID; + @JsonProperty("onHostMaintenance") + private String onHostMaintenance; @JsonProperty("osDisk") private OSDisk osDisk; + @JsonProperty("secureBoot") + private String secureBoot; + @JsonProperty("serviceAccount") + private String serviceAccount; @JsonProperty("type") private String type; + @JsonProperty("userTags") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + private List userTags = new ArrayList<>(); @JsonProperty("zones") @JsonInclude(JsonInclude.Include.NON_EMPTY) private List zones = new ArrayList<>(); @@ -78,11 +91,15 @@ public class MachinePool implements Editable , KubernetesRes public MachinePool() { } - public MachinePool(String networkProjectID, OSDisk osDisk, String type, List zones) { + public MachinePool(String networkProjectID, String onHostMaintenance, OSDisk osDisk, String secureBoot, String serviceAccount, String type, List userTags, List zones) { super(); this.networkProjectID = networkProjectID; + this.onHostMaintenance = onHostMaintenance; this.osDisk = osDisk; + this.secureBoot = secureBoot; + this.serviceAccount = serviceAccount; this.type = type; + this.userTags = userTags; this.zones = zones; } @@ -96,6 +113,16 @@ public void setNetworkProjectID(String networkProjectID) { this.networkProjectID = networkProjectID; } + @JsonProperty("onHostMaintenance") + public String getOnHostMaintenance() { + return onHostMaintenance; + } + + @JsonProperty("onHostMaintenance") + public void setOnHostMaintenance(String onHostMaintenance) { + this.onHostMaintenance = onHostMaintenance; + } + @JsonProperty("osDisk") public OSDisk getOsDisk() { return osDisk; @@ -106,6 +133,26 @@ public void setOsDisk(OSDisk osDisk) { this.osDisk = osDisk; } + @JsonProperty("secureBoot") + public String getSecureBoot() { + return secureBoot; + } + + @JsonProperty("secureBoot") + public void setSecureBoot(String secureBoot) { + this.secureBoot = secureBoot; + } + + @JsonProperty("serviceAccount") + public String getServiceAccount() { + return serviceAccount; + } + + @JsonProperty("serviceAccount") + public void setServiceAccount(String serviceAccount) { + this.serviceAccount = serviceAccount; + } + @JsonProperty("type") public String getType() { return type; @@ -116,6 +163,17 @@ public void setType(String type) { this.type = type; } + @JsonProperty("userTags") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + public List getUserTags() { + return userTags; + } + + @JsonProperty("userTags") + public void setUserTags(List userTags) { + this.userTags = userTags; + } + @JsonProperty("zones") @JsonInclude(JsonInclude.Include.NON_EMPTY) public List getZones() { diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/Metadata.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/Metadata.java new file mode 100644 index 00000000000..35f2b62ffc4 --- /dev/null +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/Metadata.java @@ -0,0 +1,108 @@ + +package io.fabric8.openshift.api.model.hive.gcp.v1; + +import java.util.LinkedHashMap; +import java.util.Map; +import javax.annotation.Generated; +import com.fasterxml.jackson.annotation.JsonAnyGetter; +import com.fasterxml.jackson.annotation.JsonAnySetter; +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonPropertyOrder; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.fabric8.kubernetes.api.builder.Editable; +import io.fabric8.kubernetes.api.model.Container; +import io.fabric8.kubernetes.api.model.IntOrString; +import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; +import io.fabric8.kubernetes.api.model.ObjectReference; +import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; +import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; +import io.sundr.builder.annotations.Buildable; +import io.sundr.builder.annotations.BuildableReference; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.Accessors; + +@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) +@JsonInclude(JsonInclude.Include.NON_NULL) +@JsonPropertyOrder({ + "networkProjectID" +}) +@ToString +@EqualsAndHashCode +@Accessors(prefix = { + "_", + "" +}) +@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { + @BuildableReference(ObjectMeta.class), + @BuildableReference(LabelSelector.class), + @BuildableReference(Container.class), + @BuildableReference(PodTemplateSpec.class), + @BuildableReference(ResourceRequirements.class), + @BuildableReference(IntOrString.class), + @BuildableReference(ObjectReference.class), + @BuildableReference(LocalObjectReference.class), + @BuildableReference(PersistentVolumeClaim.class) +}) +@Generated("jsonschema2pojo") +public class Metadata implements Editable , KubernetesResource +{ + + @JsonProperty("networkProjectID") + private String networkProjectID; + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public Metadata() { + } + + public Metadata(String networkProjectID) { + super(); + this.networkProjectID = networkProjectID; + } + + @JsonProperty("networkProjectID") + public String getNetworkProjectID() { + return networkProjectID; + } + + @JsonProperty("networkProjectID") + public void setNetworkProjectID(String networkProjectID) { + this.networkProjectID = networkProjectID; + } + + @JsonIgnore + public MetadataBuilder edit() { + return new MetadataBuilder(this); + } + + @JsonIgnore + public MetadataBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/Platform.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/Platform.java index f444181f2c7..5ccd9adb725 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/Platform.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/Platform.java @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -31,6 +32,7 @@ @JsonInclude(JsonInclude.Include.NON_NULL) @JsonPropertyOrder({ "credentialsSecretRef", + "privateServiceConnect", "region" }) @ToString @@ -47,7 +49,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -55,7 +57,9 @@ public class Platform implements Editable , KubernetesResource { @JsonProperty("credentialsSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef; + private LocalObjectReference credentialsSecretRef; + @JsonProperty("privateServiceConnect") + private PrivateServiceConnect privateServiceConnect; @JsonProperty("region") private String region; @JsonIgnore @@ -68,22 +72,33 @@ public class Platform implements Editable , KubernetesResource public Platform() { } - public Platform(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef, String region) { + public Platform(LocalObjectReference credentialsSecretRef, PrivateServiceConnect privateServiceConnect, String region) { super(); this.credentialsSecretRef = credentialsSecretRef; + this.privateServiceConnect = privateServiceConnect; this.region = region; } @JsonProperty("credentialsSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getCredentialsSecretRef() { + public LocalObjectReference getCredentialsSecretRef() { return credentialsSecretRef; } @JsonProperty("credentialsSecretRef") - public void setCredentialsSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef) { + public void setCredentialsSecretRef(LocalObjectReference credentialsSecretRef) { this.credentialsSecretRef = credentialsSecretRef; } + @JsonProperty("privateServiceConnect") + public PrivateServiceConnect getPrivateServiceConnect() { + return privateServiceConnect; + } + + @JsonProperty("privateServiceConnect") + public void setPrivateServiceConnect(PrivateServiceConnect privateServiceConnect) { + this.privateServiceConnect = privateServiceConnect; + } + @JsonProperty("region") public String getRegion() { return region; diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/PlatformStatus.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/PlatformStatus.java new file mode 100644 index 00000000000..5827c39afef --- /dev/null +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/PlatformStatus.java @@ -0,0 +1,108 @@ + +package io.fabric8.openshift.api.model.hive.gcp.v1; + +import java.util.LinkedHashMap; +import java.util.Map; +import javax.annotation.Generated; +import com.fasterxml.jackson.annotation.JsonAnyGetter; +import com.fasterxml.jackson.annotation.JsonAnySetter; +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonPropertyOrder; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.fabric8.kubernetes.api.builder.Editable; +import io.fabric8.kubernetes.api.model.Container; +import io.fabric8.kubernetes.api.model.IntOrString; +import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; +import io.fabric8.kubernetes.api.model.ObjectReference; +import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; +import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; +import io.sundr.builder.annotations.Buildable; +import io.sundr.builder.annotations.BuildableReference; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.Accessors; + +@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) +@JsonInclude(JsonInclude.Include.NON_NULL) +@JsonPropertyOrder({ + "privateServiceConnect" +}) +@ToString +@EqualsAndHashCode +@Accessors(prefix = { + "_", + "" +}) +@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { + @BuildableReference(ObjectMeta.class), + @BuildableReference(LabelSelector.class), + @BuildableReference(Container.class), + @BuildableReference(PodTemplateSpec.class), + @BuildableReference(ResourceRequirements.class), + @BuildableReference(IntOrString.class), + @BuildableReference(ObjectReference.class), + @BuildableReference(LocalObjectReference.class), + @BuildableReference(PersistentVolumeClaim.class) +}) +@Generated("jsonschema2pojo") +public class PlatformStatus implements Editable , KubernetesResource +{ + + @JsonProperty("privateServiceConnect") + private PrivateServiceConnectStatus privateServiceConnect; + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public PlatformStatus() { + } + + public PlatformStatus(PrivateServiceConnectStatus privateServiceConnect) { + super(); + this.privateServiceConnect = privateServiceConnect; + } + + @JsonProperty("privateServiceConnect") + public PrivateServiceConnectStatus getPrivateServiceConnect() { + return privateServiceConnect; + } + + @JsonProperty("privateServiceConnect") + public void setPrivateServiceConnect(PrivateServiceConnectStatus privateServiceConnect) { + this.privateServiceConnect = privateServiceConnect; + } + + @JsonIgnore + public PlatformStatusBuilder edit() { + return new PlatformStatusBuilder(this); + } + + @JsonIgnore + public PlatformStatusBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/PrivateServiceConnect.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/PrivateServiceConnect.java new file mode 100644 index 00000000000..acf29992c2c --- /dev/null +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/PrivateServiceConnect.java @@ -0,0 +1,122 @@ + +package io.fabric8.openshift.api.model.hive.gcp.v1; + +import java.util.LinkedHashMap; +import java.util.Map; +import javax.annotation.Generated; +import com.fasterxml.jackson.annotation.JsonAnyGetter; +import com.fasterxml.jackson.annotation.JsonAnySetter; +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonPropertyOrder; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.fabric8.kubernetes.api.builder.Editable; +import io.fabric8.kubernetes.api.model.Container; +import io.fabric8.kubernetes.api.model.IntOrString; +import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; +import io.fabric8.kubernetes.api.model.ObjectReference; +import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; +import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; +import io.sundr.builder.annotations.Buildable; +import io.sundr.builder.annotations.BuildableReference; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.Accessors; + +@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) +@JsonInclude(JsonInclude.Include.NON_NULL) +@JsonPropertyOrder({ + "enabled", + "serviceAttachment" +}) +@ToString +@EqualsAndHashCode +@Accessors(prefix = { + "_", + "" +}) +@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { + @BuildableReference(ObjectMeta.class), + @BuildableReference(LabelSelector.class), + @BuildableReference(Container.class), + @BuildableReference(PodTemplateSpec.class), + @BuildableReference(ResourceRequirements.class), + @BuildableReference(IntOrString.class), + @BuildableReference(ObjectReference.class), + @BuildableReference(LocalObjectReference.class), + @BuildableReference(PersistentVolumeClaim.class) +}) +@Generated("jsonschema2pojo") +public class PrivateServiceConnect implements Editable , KubernetesResource +{ + + @JsonProperty("enabled") + private Boolean enabled; + @JsonProperty("serviceAttachment") + private ServiceAttachment serviceAttachment; + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public PrivateServiceConnect() { + } + + public PrivateServiceConnect(Boolean enabled, ServiceAttachment serviceAttachment) { + super(); + this.enabled = enabled; + this.serviceAttachment = serviceAttachment; + } + + @JsonProperty("enabled") + public Boolean getEnabled() { + return enabled; + } + + @JsonProperty("enabled") + public void setEnabled(Boolean enabled) { + this.enabled = enabled; + } + + @JsonProperty("serviceAttachment") + public ServiceAttachment getServiceAttachment() { + return serviceAttachment; + } + + @JsonProperty("serviceAttachment") + public void setServiceAttachment(ServiceAttachment serviceAttachment) { + this.serviceAttachment = serviceAttachment; + } + + @JsonIgnore + public PrivateServiceConnectBuilder edit() { + return new PrivateServiceConnectBuilder(this); + } + + @JsonIgnore + public PrivateServiceConnectBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/PrivateServiceConnectStatus.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/PrivateServiceConnectStatus.java new file mode 100644 index 00000000000..b8132824d35 --- /dev/null +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/PrivateServiceConnectStatus.java @@ -0,0 +1,164 @@ + +package io.fabric8.openshift.api.model.hive.gcp.v1; + +import java.util.LinkedHashMap; +import java.util.Map; +import javax.annotation.Generated; +import com.fasterxml.jackson.annotation.JsonAnyGetter; +import com.fasterxml.jackson.annotation.JsonAnySetter; +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonPropertyOrder; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.fabric8.kubernetes.api.builder.Editable; +import io.fabric8.kubernetes.api.model.Container; +import io.fabric8.kubernetes.api.model.IntOrString; +import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; +import io.fabric8.kubernetes.api.model.ObjectReference; +import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; +import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; +import io.sundr.builder.annotations.Buildable; +import io.sundr.builder.annotations.BuildableReference; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.Accessors; + +@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) +@JsonInclude(JsonInclude.Include.NON_NULL) +@JsonPropertyOrder({ + "endpoint", + "endpointAddress", + "serviceAttachment", + "serviceAttachmentFirewall", + "serviceAttachmentSubnet" +}) +@ToString +@EqualsAndHashCode +@Accessors(prefix = { + "_", + "" +}) +@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { + @BuildableReference(ObjectMeta.class), + @BuildableReference(LabelSelector.class), + @BuildableReference(Container.class), + @BuildableReference(PodTemplateSpec.class), + @BuildableReference(ResourceRequirements.class), + @BuildableReference(IntOrString.class), + @BuildableReference(ObjectReference.class), + @BuildableReference(LocalObjectReference.class), + @BuildableReference(PersistentVolumeClaim.class) +}) +@Generated("jsonschema2pojo") +public class PrivateServiceConnectStatus implements Editable , KubernetesResource +{ + + @JsonProperty("endpoint") + private String endpoint; + @JsonProperty("endpointAddress") + private String endpointAddress; + @JsonProperty("serviceAttachment") + private String serviceAttachment; + @JsonProperty("serviceAttachmentFirewall") + private String serviceAttachmentFirewall; + @JsonProperty("serviceAttachmentSubnet") + private String serviceAttachmentSubnet; + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public PrivateServiceConnectStatus() { + } + + public PrivateServiceConnectStatus(String endpoint, String endpointAddress, String serviceAttachment, String serviceAttachmentFirewall, String serviceAttachmentSubnet) { + super(); + this.endpoint = endpoint; + this.endpointAddress = endpointAddress; + this.serviceAttachment = serviceAttachment; + this.serviceAttachmentFirewall = serviceAttachmentFirewall; + this.serviceAttachmentSubnet = serviceAttachmentSubnet; + } + + @JsonProperty("endpoint") + public String getEndpoint() { + return endpoint; + } + + @JsonProperty("endpoint") + public void setEndpoint(String endpoint) { + this.endpoint = endpoint; + } + + @JsonProperty("endpointAddress") + public String getEndpointAddress() { + return endpointAddress; + } + + @JsonProperty("endpointAddress") + public void setEndpointAddress(String endpointAddress) { + this.endpointAddress = endpointAddress; + } + + @JsonProperty("serviceAttachment") + public String getServiceAttachment() { + return serviceAttachment; + } + + @JsonProperty("serviceAttachment") + public void setServiceAttachment(String serviceAttachment) { + this.serviceAttachment = serviceAttachment; + } + + @JsonProperty("serviceAttachmentFirewall") + public String getServiceAttachmentFirewall() { + return serviceAttachmentFirewall; + } + + @JsonProperty("serviceAttachmentFirewall") + public void setServiceAttachmentFirewall(String serviceAttachmentFirewall) { + this.serviceAttachmentFirewall = serviceAttachmentFirewall; + } + + @JsonProperty("serviceAttachmentSubnet") + public String getServiceAttachmentSubnet() { + return serviceAttachmentSubnet; + } + + @JsonProperty("serviceAttachmentSubnet") + public void setServiceAttachmentSubnet(String serviceAttachmentSubnet) { + this.serviceAttachmentSubnet = serviceAttachmentSubnet; + } + + @JsonIgnore + public PrivateServiceConnectStatusBuilder edit() { + return new PrivateServiceConnectStatusBuilder(this); + } + + @JsonIgnore + public PrivateServiceConnectStatusBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/ServiceAttachment.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/ServiceAttachment.java new file mode 100644 index 00000000000..331dc42168b --- /dev/null +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/ServiceAttachment.java @@ -0,0 +1,108 @@ + +package io.fabric8.openshift.api.model.hive.gcp.v1; + +import java.util.LinkedHashMap; +import java.util.Map; +import javax.annotation.Generated; +import com.fasterxml.jackson.annotation.JsonAnyGetter; +import com.fasterxml.jackson.annotation.JsonAnySetter; +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonPropertyOrder; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.fabric8.kubernetes.api.builder.Editable; +import io.fabric8.kubernetes.api.model.Container; +import io.fabric8.kubernetes.api.model.IntOrString; +import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; +import io.fabric8.kubernetes.api.model.ObjectReference; +import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; +import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; +import io.sundr.builder.annotations.Buildable; +import io.sundr.builder.annotations.BuildableReference; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.Accessors; + +@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) +@JsonInclude(JsonInclude.Include.NON_NULL) +@JsonPropertyOrder({ + "subnet" +}) +@ToString +@EqualsAndHashCode +@Accessors(prefix = { + "_", + "" +}) +@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { + @BuildableReference(ObjectMeta.class), + @BuildableReference(LabelSelector.class), + @BuildableReference(Container.class), + @BuildableReference(PodTemplateSpec.class), + @BuildableReference(ResourceRequirements.class), + @BuildableReference(IntOrString.class), + @BuildableReference(ObjectReference.class), + @BuildableReference(LocalObjectReference.class), + @BuildableReference(PersistentVolumeClaim.class) +}) +@Generated("jsonschema2pojo") +public class ServiceAttachment implements Editable , KubernetesResource +{ + + @JsonProperty("subnet") + private ServiceAttachmentSubnet subnet; + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public ServiceAttachment() { + } + + public ServiceAttachment(ServiceAttachmentSubnet subnet) { + super(); + this.subnet = subnet; + } + + @JsonProperty("subnet") + public ServiceAttachmentSubnet getSubnet() { + return subnet; + } + + @JsonProperty("subnet") + public void setSubnet(ServiceAttachmentSubnet subnet) { + this.subnet = subnet; + } + + @JsonIgnore + public ServiceAttachmentBuilder edit() { + return new ServiceAttachmentBuilder(this); + } + + @JsonIgnore + public ServiceAttachmentBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/ServiceAttachmentSubnet.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/ServiceAttachmentSubnet.java new file mode 100644 index 00000000000..08e0ec5f74a --- /dev/null +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/ServiceAttachmentSubnet.java @@ -0,0 +1,122 @@ + +package io.fabric8.openshift.api.model.hive.gcp.v1; + +import java.util.LinkedHashMap; +import java.util.Map; +import javax.annotation.Generated; +import com.fasterxml.jackson.annotation.JsonAnyGetter; +import com.fasterxml.jackson.annotation.JsonAnySetter; +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonPropertyOrder; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.fabric8.kubernetes.api.builder.Editable; +import io.fabric8.kubernetes.api.model.Container; +import io.fabric8.kubernetes.api.model.IntOrString; +import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; +import io.fabric8.kubernetes.api.model.ObjectReference; +import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; +import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; +import io.sundr.builder.annotations.Buildable; +import io.sundr.builder.annotations.BuildableReference; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.Accessors; + +@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) +@JsonInclude(JsonInclude.Include.NON_NULL) +@JsonPropertyOrder({ + "cidr", + "existing" +}) +@ToString +@EqualsAndHashCode +@Accessors(prefix = { + "_", + "" +}) +@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { + @BuildableReference(ObjectMeta.class), + @BuildableReference(LabelSelector.class), + @BuildableReference(Container.class), + @BuildableReference(PodTemplateSpec.class), + @BuildableReference(ResourceRequirements.class), + @BuildableReference(IntOrString.class), + @BuildableReference(ObjectReference.class), + @BuildableReference(LocalObjectReference.class), + @BuildableReference(PersistentVolumeClaim.class) +}) +@Generated("jsonschema2pojo") +public class ServiceAttachmentSubnet implements Editable , KubernetesResource +{ + + @JsonProperty("cidr") + private String cidr; + @JsonProperty("existing") + private ServiceAttachmentSubnetExisting existing; + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public ServiceAttachmentSubnet() { + } + + public ServiceAttachmentSubnet(String cidr, ServiceAttachmentSubnetExisting existing) { + super(); + this.cidr = cidr; + this.existing = existing; + } + + @JsonProperty("cidr") + public String getCidr() { + return cidr; + } + + @JsonProperty("cidr") + public void setCidr(String cidr) { + this.cidr = cidr; + } + + @JsonProperty("existing") + public ServiceAttachmentSubnetExisting getExisting() { + return existing; + } + + @JsonProperty("existing") + public void setExisting(ServiceAttachmentSubnetExisting existing) { + this.existing = existing; + } + + @JsonIgnore + public ServiceAttachmentSubnetBuilder edit() { + return new ServiceAttachmentSubnetBuilder(this); + } + + @JsonIgnore + public ServiceAttachmentSubnetBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/ServiceAttachmentSubnetExisting.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/ServiceAttachmentSubnetExisting.java new file mode 100644 index 00000000000..6eb9382d7fa --- /dev/null +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/ServiceAttachmentSubnetExisting.java @@ -0,0 +1,122 @@ + +package io.fabric8.openshift.api.model.hive.gcp.v1; + +import java.util.LinkedHashMap; +import java.util.Map; +import javax.annotation.Generated; +import com.fasterxml.jackson.annotation.JsonAnyGetter; +import com.fasterxml.jackson.annotation.JsonAnySetter; +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonPropertyOrder; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.fabric8.kubernetes.api.builder.Editable; +import io.fabric8.kubernetes.api.model.Container; +import io.fabric8.kubernetes.api.model.IntOrString; +import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; +import io.fabric8.kubernetes.api.model.ObjectReference; +import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; +import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; +import io.sundr.builder.annotations.Buildable; +import io.sundr.builder.annotations.BuildableReference; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.Accessors; + +@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) +@JsonInclude(JsonInclude.Include.NON_NULL) +@JsonPropertyOrder({ + "name", + "project" +}) +@ToString +@EqualsAndHashCode +@Accessors(prefix = { + "_", + "" +}) +@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { + @BuildableReference(ObjectMeta.class), + @BuildableReference(LabelSelector.class), + @BuildableReference(Container.class), + @BuildableReference(PodTemplateSpec.class), + @BuildableReference(ResourceRequirements.class), + @BuildableReference(IntOrString.class), + @BuildableReference(ObjectReference.class), + @BuildableReference(LocalObjectReference.class), + @BuildableReference(PersistentVolumeClaim.class) +}) +@Generated("jsonschema2pojo") +public class ServiceAttachmentSubnetExisting implements Editable , KubernetesResource +{ + + @JsonProperty("name") + private String name; + @JsonProperty("project") + private String project; + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public ServiceAttachmentSubnetExisting() { + } + + public ServiceAttachmentSubnetExisting(String name, String project) { + super(); + this.name = name; + this.project = project; + } + + @JsonProperty("name") + public String getName() { + return name; + } + + @JsonProperty("name") + public void setName(String name) { + this.name = name; + } + + @JsonProperty("project") + public String getProject() { + return project; + } + + @JsonProperty("project") + public void setProject(String project) { + this.project = project; + } + + @JsonIgnore + public ServiceAttachmentSubnetExistingBuilder edit() { + return new ServiceAttachmentSubnetExistingBuilder(this); + } + + @JsonIgnore + public ServiceAttachmentSubnetExistingBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/UserTag.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/UserTag.java new file mode 100644 index 00000000000..9bb6293aaf6 --- /dev/null +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/gcp/v1/UserTag.java @@ -0,0 +1,136 @@ + +package io.fabric8.openshift.api.model.hive.gcp.v1; + +import java.util.LinkedHashMap; +import java.util.Map; +import javax.annotation.Generated; +import com.fasterxml.jackson.annotation.JsonAnyGetter; +import com.fasterxml.jackson.annotation.JsonAnySetter; +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonPropertyOrder; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.fabric8.kubernetes.api.builder.Editable; +import io.fabric8.kubernetes.api.model.Container; +import io.fabric8.kubernetes.api.model.IntOrString; +import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; +import io.fabric8.kubernetes.api.model.ObjectReference; +import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; +import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; +import io.sundr.builder.annotations.Buildable; +import io.sundr.builder.annotations.BuildableReference; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.Accessors; + +@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) +@JsonInclude(JsonInclude.Include.NON_NULL) +@JsonPropertyOrder({ + "key", + "parentID", + "value" +}) +@ToString +@EqualsAndHashCode +@Accessors(prefix = { + "_", + "" +}) +@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { + @BuildableReference(ObjectMeta.class), + @BuildableReference(LabelSelector.class), + @BuildableReference(Container.class), + @BuildableReference(PodTemplateSpec.class), + @BuildableReference(ResourceRequirements.class), + @BuildableReference(IntOrString.class), + @BuildableReference(ObjectReference.class), + @BuildableReference(LocalObjectReference.class), + @BuildableReference(PersistentVolumeClaim.class) +}) +@Generated("jsonschema2pojo") +public class UserTag implements Editable , KubernetesResource +{ + + @JsonProperty("key") + private String key; + @JsonProperty("parentID") + private String parentID; + @JsonProperty("value") + private String value; + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public UserTag() { + } + + public UserTag(String key, String parentID, String value) { + super(); + this.key = key; + this.parentID = parentID; + this.value = value; + } + + @JsonProperty("key") + public String getKey() { + return key; + } + + @JsonProperty("key") + public void setKey(String key) { + this.key = key; + } + + @JsonProperty("parentID") + public String getParentID() { + return parentID; + } + + @JsonProperty("parentID") + public void setParentID(String parentID) { + this.parentID = parentID; + } + + @JsonProperty("value") + public String getValue() { + return value; + } + + @JsonProperty("value") + public void setValue(String value) { + this.value = value; + } + + @JsonIgnore + public UserTagBuilder edit() { + return new UserTagBuilder(this); + } + + @JsonIgnore + public UserTagBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/ibmcloud/v1/Platform.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/ibmcloud/v1/Platform.java index 1baf865f258..160e1ddc0bc 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/ibmcloud/v1/Platform.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/ibmcloud/v1/Platform.java @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -49,7 +50,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -61,7 +62,7 @@ public class Platform implements Editable , KubernetesResource @JsonProperty("cisInstanceCRN") private String cisInstanceCRN; @JsonProperty("credentialsSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef; + private LocalObjectReference credentialsSecretRef; @JsonProperty("region") private String region; @JsonIgnore @@ -74,7 +75,7 @@ public class Platform implements Editable , KubernetesResource public Platform() { } - public Platform(String accountID, String cisInstanceCRN, io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef, String region) { + public Platform(String accountID, String cisInstanceCRN, LocalObjectReference credentialsSecretRef, String region) { super(); this.accountID = accountID; this.cisInstanceCRN = cisInstanceCRN; @@ -103,12 +104,12 @@ public void setCisInstanceCRN(String cisInstanceCRN) { } @JsonProperty("credentialsSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getCredentialsSecretRef() { + public LocalObjectReference getCredentialsSecretRef() { return credentialsSecretRef; } @JsonProperty("credentialsSecretRef") - public void setCredentialsSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef) { + public void setCredentialsSecretRef(LocalObjectReference credentialsSecretRef) { this.credentialsSecretRef = credentialsSecretRef; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/metricsconfig/v1/MetricsWithDuration.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/metricsconfig/v1/MetricsWithDuration.java index 58dff32db30..b43b0ade0cd 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/metricsconfig/v1/MetricsWithDuration.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/metricsconfig/v1/MetricsWithDuration.java @@ -13,7 +13,6 @@ import com.fasterxml.jackson.databind.annotation.JsonDeserialize; import io.fabric8.kubernetes.api.builder.Editable; import io.fabric8.kubernetes.api.model.Container; -import io.fabric8.kubernetes.api.model.Duration; import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; @@ -57,7 +56,7 @@ public class MetricsWithDuration implements Editable { @JsonProperty("duration") - private Duration duration; + private String duration; @JsonProperty("name") private String name; @JsonIgnore @@ -70,19 +69,19 @@ public class MetricsWithDuration implements Editable public MetricsWithDuration() { } - public MetricsWithDuration(Duration duration, String name) { + public MetricsWithDuration(String duration, String name) { super(); this.duration = duration; this.name = name; } @JsonProperty("duration") - public Duration getDuration() { + public String getDuration() { return duration; } @JsonProperty("duration") - public void setDuration(Duration duration) { + public void setDuration(String duration) { this.duration = duration; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/openstack/v1/Platform.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/openstack/v1/Platform.java index e48a17952ac..6f6ca82537b 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/openstack/v1/Platform.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/openstack/v1/Platform.java @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -49,7 +50,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -57,11 +58,11 @@ public class Platform implements Editable , KubernetesResource { @JsonProperty("certificatesSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference certificatesSecretRef; + private LocalObjectReference certificatesSecretRef; @JsonProperty("cloud") private String cloud; @JsonProperty("credentialsSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef; + private LocalObjectReference credentialsSecretRef; @JsonProperty("trunkSupport") private Boolean trunkSupport; @JsonIgnore @@ -74,7 +75,7 @@ public class Platform implements Editable , KubernetesResource public Platform() { } - public Platform(io.fabric8.kubernetes.api.model.LocalObjectReference certificatesSecretRef, String cloud, io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef, Boolean trunkSupport) { + public Platform(LocalObjectReference certificatesSecretRef, String cloud, LocalObjectReference credentialsSecretRef, Boolean trunkSupport) { super(); this.certificatesSecretRef = certificatesSecretRef; this.cloud = cloud; @@ -83,12 +84,12 @@ public Platform(io.fabric8.kubernetes.api.model.LocalObjectReference certificate } @JsonProperty("certificatesSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getCertificatesSecretRef() { + public LocalObjectReference getCertificatesSecretRef() { return certificatesSecretRef; } @JsonProperty("certificatesSecretRef") - public void setCertificatesSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference certificatesSecretRef) { + public void setCertificatesSecretRef(LocalObjectReference certificatesSecretRef) { this.certificatesSecretRef = certificatesSecretRef; } @@ -103,12 +104,12 @@ public void setCloud(String cloud) { } @JsonProperty("credentialsSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getCredentialsSecretRef() { + public LocalObjectReference getCredentialsSecretRef() { return credentialsSecretRef; } @JsonProperty("credentialsSecretRef") - public void setCredentialsSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef) { + public void setCredentialsSecretRef(LocalObjectReference credentialsSecretRef) { this.credentialsSecretRef = credentialsSecretRef; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/ovirt/v1/Platform.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/ovirt/v1/Platform.java index da9f6c3e09f..6e96f09e5de 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/ovirt/v1/Platform.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/ovirt/v1/Platform.java @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -50,7 +51,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -58,15 +59,15 @@ public class Platform implements Editable , KubernetesResource { @JsonProperty("certificatesSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference certificatesSecretRef; + private LocalObjectReference certificatesSecretRef; @JsonProperty("credentialsSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef; + private LocalObjectReference credentialsSecretRef; @JsonProperty("ovirt_cluster_id") - private String ovirtClusterId; + private String ovirt_cluster_id; @JsonProperty("ovirt_network_name") - private String ovirtNetworkName; + private String ovirt_network_name; @JsonProperty("storage_domain_id") - private String storageDomainId; + private String storage_domain_id; @JsonIgnore private Map additionalProperties = new LinkedHashMap(); @@ -77,63 +78,63 @@ public class Platform implements Editable , KubernetesResource public Platform() { } - public Platform(io.fabric8.kubernetes.api.model.LocalObjectReference certificatesSecretRef, io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef, String ovirtClusterId, String ovirtNetworkName, String storageDomainId) { + public Platform(LocalObjectReference certificatesSecretRef, LocalObjectReference credentialsSecretRef, String ovirt_cluster_id, String ovirt_network_name, String storage_domain_id) { super(); this.certificatesSecretRef = certificatesSecretRef; this.credentialsSecretRef = credentialsSecretRef; - this.ovirtClusterId = ovirtClusterId; - this.ovirtNetworkName = ovirtNetworkName; - this.storageDomainId = storageDomainId; + this.ovirt_cluster_id = ovirt_cluster_id; + this.ovirt_network_name = ovirt_network_name; + this.storage_domain_id = storage_domain_id; } @JsonProperty("certificatesSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getCertificatesSecretRef() { + public LocalObjectReference getCertificatesSecretRef() { return certificatesSecretRef; } @JsonProperty("certificatesSecretRef") - public void setCertificatesSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference certificatesSecretRef) { + public void setCertificatesSecretRef(LocalObjectReference certificatesSecretRef) { this.certificatesSecretRef = certificatesSecretRef; } @JsonProperty("credentialsSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getCredentialsSecretRef() { + public LocalObjectReference getCredentialsSecretRef() { return credentialsSecretRef; } @JsonProperty("credentialsSecretRef") - public void setCredentialsSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef) { + public void setCredentialsSecretRef(LocalObjectReference credentialsSecretRef) { this.credentialsSecretRef = credentialsSecretRef; } @JsonProperty("ovirt_cluster_id") - public String getOvirtClusterId() { - return ovirtClusterId; + public String getOvirt_cluster_id() { + return ovirt_cluster_id; } @JsonProperty("ovirt_cluster_id") - public void setOvirtClusterId(String ovirtClusterId) { - this.ovirtClusterId = ovirtClusterId; + public void setOvirt_cluster_id(String ovirt_cluster_id) { + this.ovirt_cluster_id = ovirt_cluster_id; } @JsonProperty("ovirt_network_name") - public String getOvirtNetworkName() { - return ovirtNetworkName; + public String getOvirt_network_name() { + return ovirt_network_name; } @JsonProperty("ovirt_network_name") - public void setOvirtNetworkName(String ovirtNetworkName) { - this.ovirtNetworkName = ovirtNetworkName; + public void setOvirt_network_name(String ovirt_network_name) { + this.ovirt_network_name = ovirt_network_name; } @JsonProperty("storage_domain_id") - public String getStorageDomainId() { - return storageDomainId; + public String getStorage_domain_id() { + return storage_domain_id; } @JsonProperty("storage_domain_id") - public void setStorageDomainId(String storageDomainId) { - this.storageDomainId = storageDomainId; + public void setStorage_domain_id(String storage_domain_id) { + this.storage_domain_id = storage_domain_id; } @JsonIgnore diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AWSAssociatedVPC.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AWSAssociatedVPC.java index fed69efb54b..6303abe647e 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AWSAssociatedVPC.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AWSAssociatedVPC.java @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -48,7 +49,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -56,7 +57,7 @@ public class AWSAssociatedVPC implements Editable , Kub { @JsonProperty("credentialsSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef; + private LocalObjectReference credentialsSecretRef; @JsonProperty("region") private String region; @JsonProperty("vpcID") @@ -71,7 +72,7 @@ public class AWSAssociatedVPC implements Editable , Kub public AWSAssociatedVPC() { } - public AWSAssociatedVPC(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef, String region, String vpcID) { + public AWSAssociatedVPC(LocalObjectReference credentialsSecretRef, String region, String vpcID) { super(); this.credentialsSecretRef = credentialsSecretRef; this.region = region; @@ -79,12 +80,12 @@ public AWSAssociatedVPC(io.fabric8.kubernetes.api.model.LocalObjectReference cre } @JsonProperty("credentialsSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getCredentialsSecretRef() { + public LocalObjectReference getCredentialsSecretRef() { return credentialsSecretRef; } @JsonProperty("credentialsSecretRef") - public void setCredentialsSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef) { + public void setCredentialsSecretRef(LocalObjectReference credentialsSecretRef) { this.credentialsSecretRef = credentialsSecretRef; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AWSClusterDeprovision.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AWSClusterDeprovision.java index fc0b3eaac21..88d71d75749 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AWSClusterDeprovision.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AWSClusterDeprovision.java @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -50,7 +51,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -60,7 +61,7 @@ public class AWSClusterDeprovision implements Editable , Kuberne @JsonProperty("credentialsAssumeRole") private AssumeRole credentialsAssumeRole; @JsonProperty("credentialsSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef; + private LocalObjectReference credentialsSecretRef; @JsonProperty("region") private String region; @JsonIgnore @@ -78,7 +79,7 @@ public class AWSDNSZoneSpec implements Editable , Kuberne public AWSDNSZoneSpec() { } - public AWSDNSZoneSpec(List additionalTags, AssumeRole credentialsAssumeRole, io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef, String region) { + public AWSDNSZoneSpec(List additionalTags, AssumeRole credentialsAssumeRole, LocalObjectReference credentialsSecretRef, String region) { super(); this.additionalTags = additionalTags; this.credentialsAssumeRole = credentialsAssumeRole; @@ -108,12 +109,12 @@ public void setCredentialsAssumeRole(AssumeRole credentialsAssumeRole) { } @JsonProperty("credentialsSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getCredentialsSecretRef() { + public LocalObjectReference getCredentialsSecretRef() { return credentialsSecretRef; } @JsonProperty("credentialsSecretRef") - public void setCredentialsSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef) { + public void setCredentialsSecretRef(LocalObjectReference credentialsSecretRef) { this.credentialsSecretRef = credentialsSecretRef; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AWSPrivateLinkConfig.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AWSPrivateLinkConfig.java index e71eabb25e8..5d1774a7113 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AWSPrivateLinkConfig.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AWSPrivateLinkConfig.java @@ -18,6 +18,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -51,7 +52,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -62,7 +63,7 @@ public class AWSPrivateLinkConfig implements Editable associatedVPCs = new ArrayList<>(); @JsonProperty("credentialsSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef; + private LocalObjectReference credentialsSecretRef; @JsonProperty("dnsRecordType") private String dnsRecordType; @JsonProperty("endpointVPCInventory") @@ -78,7 +79,7 @@ public class AWSPrivateLinkConfig implements Editable associatedVPCs, io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef, String dnsRecordType, List endpointVPCInventory) { + public AWSPrivateLinkConfig(List associatedVPCs, LocalObjectReference credentialsSecretRef, String dnsRecordType, List endpointVPCInventory) { super(); this.associatedVPCs = associatedVPCs; this.credentialsSecretRef = credentialsSecretRef; @@ -98,12 +99,12 @@ public void setAssociatedVPCs(List associatedVPCs) { } @JsonProperty("credentialsSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getCredentialsSecretRef() { + public LocalObjectReference getCredentialsSecretRef() { return credentialsSecretRef; } @JsonProperty("credentialsSecretRef") - public void setCredentialsSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef) { + public void setCredentialsSecretRef(LocalObjectReference credentialsSecretRef) { this.credentialsSecretRef = credentialsSecretRef; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/alibabacloud/v1/Platform.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AWSPrivateLinkVPC.java similarity index 73% rename from kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/alibabacloud/v1/Platform.java rename to kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AWSPrivateLinkVPC.java index c51f209dba7..96bbf981997 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/alibabacloud/v1/Platform.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AWSPrivateLinkVPC.java @@ -1,5 +1,5 @@ -package io.fabric8.openshift.api.model.hive.alibabacloud.v1; +package io.fabric8.openshift.api.model.hive.v1; import java.util.LinkedHashMap; import java.util.Map; @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -30,8 +31,8 @@ @JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) @JsonInclude(JsonInclude.Include.NON_NULL) @JsonPropertyOrder({ - "credentialsSecretRef", - "region" + "region", + "vpcID" }) @ToString @EqualsAndHashCode @@ -47,17 +48,17 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") -public class Platform implements Editable , KubernetesResource +public class AWSPrivateLinkVPC implements Editable , KubernetesResource { - @JsonProperty("credentialsSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef; @JsonProperty("region") private String region; + @JsonProperty("vpcID") + private String vpcID; @JsonIgnore private Map additionalProperties = new LinkedHashMap(); @@ -65,23 +66,13 @@ public class Platform implements Editable , KubernetesResource * No args constructor for use in serialization * */ - public Platform() { + public AWSPrivateLinkVPC() { } - public Platform(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef, String region) { + public AWSPrivateLinkVPC(String region, String vpcID) { super(); - this.credentialsSecretRef = credentialsSecretRef; this.region = region; - } - - @JsonProperty("credentialsSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getCredentialsSecretRef() { - return credentialsSecretRef; - } - - @JsonProperty("credentialsSecretRef") - public void setCredentialsSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef) { - this.credentialsSecretRef = credentialsSecretRef; + this.vpcID = vpcID; } @JsonProperty("region") @@ -94,13 +85,23 @@ public void setRegion(String region) { this.region = region; } + @JsonProperty("vpcID") + public String getVpcID() { + return vpcID; + } + + @JsonProperty("vpcID") + public void setVpcID(String vpcID) { + this.vpcID = vpcID; + } + @JsonIgnore - public PlatformBuilder edit() { - return new PlatformBuilder(this); + public AWSPrivateLinkVPCBuilder edit() { + return new AWSPrivateLinkVPCBuilder(this); } @JsonIgnore - public PlatformBuilder toBuilder() { + public AWSPrivateLinkVPCBuilder toBuilder() { return edit(); } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AWSServiceProviderCredentials.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AWSServiceProviderCredentials.java index bef2435983d..00a3d8af423 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AWSServiceProviderCredentials.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AWSServiceProviderCredentials.java @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -46,7 +47,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -54,7 +55,7 @@ public class AWSServiceProviderCredentials implements Editable additionalProperties = new LinkedHashMap(); @@ -65,18 +66,18 @@ public class AWSServiceProviderCredentials implements Editable , Kub @JsonProperty("cloudName") private String cloudName; @JsonProperty("credentialsSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef; + private LocalObjectReference credentialsSecretRef; @JsonProperty("resourceGroupName") private String resourceGroupName; @JsonIgnore @@ -71,7 +72,7 @@ public class AzureDNSZoneSpec implements Editable , Kub public AzureDNSZoneSpec() { } - public AzureDNSZoneSpec(String cloudName, io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef, String resourceGroupName) { + public AzureDNSZoneSpec(String cloudName, LocalObjectReference credentialsSecretRef, String resourceGroupName) { super(); this.cloudName = cloudName; this.credentialsSecretRef = credentialsSecretRef; @@ -89,12 +90,12 @@ public void setCloudName(String cloudName) { } @JsonProperty("credentialsSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getCredentialsSecretRef() { + public LocalObjectReference getCredentialsSecretRef() { return credentialsSecretRef; } @JsonProperty("credentialsSecretRef") - public void setCredentialsSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef) { + public void setCredentialsSecretRef(LocalObjectReference credentialsSecretRef) { this.credentialsSecretRef = credentialsSecretRef; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/CertificateBundleSpec.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/CertificateBundleSpec.java index 6e38d20a63c..ab26c490a17 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/CertificateBundleSpec.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/CertificateBundleSpec.java @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -48,7 +49,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -56,7 +57,7 @@ public class CertificateBundleSpec implements Editable , HasMetadata, Na @JsonProperty("kind") private String kind = "Checkpoint"; @JsonProperty("metadata") - private io.fabric8.kubernetes.api.model.ObjectMeta metadata; + private ObjectMeta metadata; @JsonProperty("spec") private CheckpointSpec spec; @JsonProperty("status") @@ -97,7 +98,7 @@ public class Checkpoint implements Editable , HasMetadata, Na public Checkpoint() { } - public Checkpoint(String apiVersion, String kind, io.fabric8.kubernetes.api.model.ObjectMeta metadata, CheckpointSpec spec, CheckpointStatus status) { + public Checkpoint(String apiVersion, String kind, ObjectMeta metadata, CheckpointSpec spec, CheckpointStatus status) { super(); this.apiVersion = apiVersion; this.kind = kind; @@ -147,12 +148,12 @@ public void setKind(String kind) { } @JsonProperty("metadata") - public io.fabric8.kubernetes.api.model.ObjectMeta getMetadata() { + public ObjectMeta getMetadata() { return metadata; } @JsonProperty("metadata") - public void setMetadata(io.fabric8.kubernetes.api.model.ObjectMeta metadata) { + public void setMetadata(ObjectMeta metadata) { this.metadata = metadata; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterClaim.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterClaim.java index 01010850974..45fb3dfe432 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterClaim.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterClaim.java @@ -18,6 +18,7 @@ import io.fabric8.kubernetes.api.model.LabelSelector; import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.Namespaced; +import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; import io.fabric8.kubernetes.api.model.PodTemplateSpec; @@ -48,7 +49,7 @@ "" }) @Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { - @BuildableReference(io.fabric8.kubernetes.api.model.ObjectMeta.class), + @BuildableReference(ObjectMeta.class), @BuildableReference(LabelSelector.class), @BuildableReference(Container.class), @BuildableReference(PodTemplateSpec.class), @@ -82,7 +83,7 @@ public class ClusterClaim implements Editable , HasMetadata @JsonProperty("kind") private String kind = "ClusterClaim"; @JsonProperty("metadata") - private io.fabric8.kubernetes.api.model.ObjectMeta metadata; + private ObjectMeta metadata; @JsonProperty("spec") private ClusterClaimSpec spec; @JsonProperty("status") @@ -97,7 +98,7 @@ public class ClusterClaim implements Editable , HasMetadata public ClusterClaim() { } - public ClusterClaim(String apiVersion, String kind, io.fabric8.kubernetes.api.model.ObjectMeta metadata, ClusterClaimSpec spec, ClusterClaimStatus status) { + public ClusterClaim(String apiVersion, String kind, ObjectMeta metadata, ClusterClaimSpec spec, ClusterClaimStatus status) { super(); this.apiVersion = apiVersion; this.kind = kind; @@ -147,12 +148,12 @@ public void setKind(String kind) { } @JsonProperty("metadata") - public io.fabric8.kubernetes.api.model.ObjectMeta getMetadata() { + public ObjectMeta getMetadata() { return metadata; } @JsonProperty("metadata") - public void setMetadata(io.fabric8.kubernetes.api.model.ObjectMeta metadata) { + public void setMetadata(ObjectMeta metadata) { this.metadata = metadata; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterClaimSpec.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterClaimSpec.java index 643d3914c87..9773eade705 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterClaimSpec.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterClaimSpec.java @@ -15,7 +15,6 @@ import com.fasterxml.jackson.databind.annotation.JsonDeserialize; import io.fabric8.kubernetes.api.builder.Editable; import io.fabric8.kubernetes.api.model.Container; -import io.fabric8.kubernetes.api.model.Duration; import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; @@ -64,7 +63,7 @@ public class ClusterClaimSpec implements Editable , Kub @JsonProperty("clusterPoolName") private String clusterPoolName; @JsonProperty("lifetime") - private Duration lifetime; + private String lifetime; @JsonProperty("namespace") private String namespace; @JsonProperty("subjects") @@ -80,7 +79,7 @@ public class ClusterClaimSpec implements Editable , Kub public ClusterClaimSpec() { } - public ClusterClaimSpec(String clusterPoolName, Duration lifetime, String namespace, List subjects) { + public ClusterClaimSpec(String clusterPoolName, String lifetime, String namespace, List subjects) { super(); this.clusterPoolName = clusterPoolName; this.lifetime = lifetime; @@ -99,12 +98,12 @@ public void setClusterPoolName(String clusterPoolName) { } @JsonProperty("lifetime") - public Duration getLifetime() { + public String getLifetime() { return lifetime; } @JsonProperty("lifetime") - public void setLifetime(Duration lifetime) { + public void setLifetime(String lifetime) { this.lifetime = lifetime; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterClaimStatus.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterClaimStatus.java index e9632ec9994..28eadf580fd 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterClaimStatus.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterClaimStatus.java @@ -15,7 +15,6 @@ import com.fasterxml.jackson.databind.annotation.JsonDeserialize; import io.fabric8.kubernetes.api.builder.Editable; import io.fabric8.kubernetes.api.model.Container; -import io.fabric8.kubernetes.api.model.Duration; import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; @@ -62,7 +61,7 @@ public class ClusterClaimStatus implements Editable , @JsonInclude(JsonInclude.Include.NON_EMPTY) private List conditions = new ArrayList<>(); @JsonProperty("lifetime") - private Duration lifetime; + private String lifetime; @JsonIgnore private Map additionalProperties = new LinkedHashMap(); @@ -73,7 +72,7 @@ public class ClusterClaimStatus implements Editable , public ClusterClaimStatus() { } - public ClusterClaimStatus(List conditions, Duration lifetime) { + public ClusterClaimStatus(List conditions, String lifetime) { super(); this.conditions = conditions; this.lifetime = lifetime; @@ -91,12 +90,12 @@ public void setConditions(List conditions) { } @JsonProperty("lifetime") - public Duration getLifetime() { + public String getLifetime() { return lifetime; } @JsonProperty("lifetime") - public void setLifetime(Duration lifetime) { + public void setLifetime(String lifetime) { this.lifetime = lifetime; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeployment.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeployment.java index abb9d4694e0..ef07f20a9f1 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeployment.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeployment.java @@ -18,6 +18,7 @@ import io.fabric8.kubernetes.api.model.LabelSelector; import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.Namespaced; +import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; import io.fabric8.kubernetes.api.model.PodTemplateSpec; @@ -48,7 +49,7 @@ "" }) @Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { - @BuildableReference(io.fabric8.kubernetes.api.model.ObjectMeta.class), + @BuildableReference(ObjectMeta.class), @BuildableReference(LabelSelector.class), @BuildableReference(Container.class), @BuildableReference(PodTemplateSpec.class), @@ -82,7 +83,7 @@ public class ClusterDeployment implements Editable , H @JsonProperty("kind") private String kind = "ClusterDeployment"; @JsonProperty("metadata") - private io.fabric8.kubernetes.api.model.ObjectMeta metadata; + private ObjectMeta metadata; @JsonProperty("spec") private ClusterDeploymentSpec spec; @JsonProperty("status") @@ -97,7 +98,7 @@ public class ClusterDeployment implements Editable , H public ClusterDeployment() { } - public ClusterDeployment(String apiVersion, String kind, io.fabric8.kubernetes.api.model.ObjectMeta metadata, ClusterDeploymentSpec spec, ClusterDeploymentStatus status) { + public ClusterDeployment(String apiVersion, String kind, ObjectMeta metadata, ClusterDeploymentSpec spec, ClusterDeploymentStatus status) { super(); this.apiVersion = apiVersion; this.kind = kind; @@ -147,12 +148,12 @@ public void setKind(String kind) { } @JsonProperty("metadata") - public io.fabric8.kubernetes.api.model.ObjectMeta getMetadata() { + public ObjectMeta getMetadata() { return metadata; } @JsonProperty("metadata") - public void setMetadata(io.fabric8.kubernetes.api.model.ObjectMeta metadata) { + public void setMetadata(ObjectMeta metadata) { this.metadata = metadata; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeploymentCustomization.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeploymentCustomization.java new file mode 100644 index 00000000000..6742dc06012 --- /dev/null +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeploymentCustomization.java @@ -0,0 +1,204 @@ + +package io.fabric8.openshift.api.model.hive.v1; + +import java.util.LinkedHashMap; +import java.util.Map; +import javax.annotation.Generated; +import com.fasterxml.jackson.annotation.JsonAnyGetter; +import com.fasterxml.jackson.annotation.JsonAnySetter; +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonPropertyOrder; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.fabric8.kubernetes.api.builder.Editable; +import io.fabric8.kubernetes.api.model.Container; +import io.fabric8.kubernetes.api.model.HasMetadata; +import io.fabric8.kubernetes.api.model.IntOrString; +import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.Namespaced; +import io.fabric8.kubernetes.api.model.ObjectMeta; +import io.fabric8.kubernetes.api.model.ObjectReference; +import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; +import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; +import io.fabric8.kubernetes.model.annotation.Group; +import io.fabric8.kubernetes.model.annotation.Version; +import io.sundr.builder.annotations.Buildable; +import io.sundr.builder.annotations.BuildableReference; +import io.sundr.transform.annotations.TemplateTransformation; +import io.sundr.transform.annotations.TemplateTransformations; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.Accessors; + +@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) +@JsonInclude(JsonInclude.Include.NON_NULL) +@JsonPropertyOrder({ + "apiVersion", + "kind", + "metadata", + "spec", + "status" +}) +@ToString +@EqualsAndHashCode +@Accessors(prefix = { + "_", + "" +}) +@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { + @BuildableReference(ObjectMeta.class), + @BuildableReference(LabelSelector.class), + @BuildableReference(Container.class), + @BuildableReference(PodTemplateSpec.class), + @BuildableReference(ResourceRequirements.class), + @BuildableReference(IntOrString.class), + @BuildableReference(ObjectReference.class), + @BuildableReference(LocalObjectReference.class), + @BuildableReference(PersistentVolumeClaim.class) +}) +@TemplateTransformations({ + @TemplateTransformation(value = "/manifest.vm", outputPath = "META-INF/services/io.fabric8.kubernetes.api.model.KubernetesResource", gather = true) +}) +@Version("v1") +@Group("hive.openshift.io") +@Generated("jsonschema2pojo") +public class ClusterDeploymentCustomization implements Editable , HasMetadata, Namespaced +{ + + /** + * + * (Required) + * + */ + @JsonProperty("apiVersion") + private String apiVersion = "hive.openshift.io/v1"; + /** + * + * (Required) + * + */ + @JsonProperty("kind") + private String kind = "ClusterDeploymentCustomization"; + @JsonProperty("metadata") + private ObjectMeta metadata; + @JsonProperty("spec") + private ClusterDeploymentCustomizationSpec spec; + @JsonProperty("status") + private ClusterDeploymentCustomizationStatus status; + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public ClusterDeploymentCustomization() { + } + + public ClusterDeploymentCustomization(String apiVersion, String kind, ObjectMeta metadata, ClusterDeploymentCustomizationSpec spec, ClusterDeploymentCustomizationStatus status) { + super(); + this.apiVersion = apiVersion; + this.kind = kind; + this.metadata = metadata; + this.spec = spec; + this.status = status; + } + + /** + * + * (Required) + * + */ + @JsonProperty("apiVersion") + public String getApiVersion() { + return apiVersion; + } + + /** + * + * (Required) + * + */ + @JsonProperty("apiVersion") + public void setApiVersion(String apiVersion) { + this.apiVersion = apiVersion; + } + + /** + * + * (Required) + * + */ + @JsonProperty("kind") + public String getKind() { + return kind; + } + + /** + * + * (Required) + * + */ + @JsonProperty("kind") + public void setKind(String kind) { + this.kind = kind; + } + + @JsonProperty("metadata") + public ObjectMeta getMetadata() { + return metadata; + } + + @JsonProperty("metadata") + public void setMetadata(ObjectMeta metadata) { + this.metadata = metadata; + } + + @JsonProperty("spec") + public ClusterDeploymentCustomizationSpec getSpec() { + return spec; + } + + @JsonProperty("spec") + public void setSpec(ClusterDeploymentCustomizationSpec spec) { + this.spec = spec; + } + + @JsonProperty("status") + public ClusterDeploymentCustomizationStatus getStatus() { + return status; + } + + @JsonProperty("status") + public void setStatus(ClusterDeploymentCustomizationStatus status) { + this.status = status; + } + + @JsonIgnore + public ClusterDeploymentCustomizationBuilder edit() { + return new ClusterDeploymentCustomizationBuilder(this); + } + + @JsonIgnore + public ClusterDeploymentCustomizationBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeploymentCustomizationList.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeploymentCustomizationList.java new file mode 100644 index 00000000000..671435c5bb2 --- /dev/null +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeploymentCustomizationList.java @@ -0,0 +1,195 @@ + +package io.fabric8.openshift.api.model.hive.v1; + +import java.util.ArrayList; +import java.util.LinkedHashMap; +import java.util.List; +import java.util.Map; +import javax.annotation.Generated; +import com.fasterxml.jackson.annotation.JsonAnyGetter; +import com.fasterxml.jackson.annotation.JsonAnySetter; +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonPropertyOrder; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.fabric8.kubernetes.api.builder.Editable; +import io.fabric8.kubernetes.api.model.Container; +import io.fabric8.kubernetes.api.model.IntOrString; +import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.KubernetesResourceList; +import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.ListMeta; +import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; +import io.fabric8.kubernetes.api.model.ObjectReference; +import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; +import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; +import io.fabric8.kubernetes.model.annotation.Group; +import io.fabric8.kubernetes.model.annotation.Version; +import io.sundr.builder.annotations.Buildable; +import io.sundr.builder.annotations.BuildableReference; +import io.sundr.transform.annotations.TemplateTransformation; +import io.sundr.transform.annotations.TemplateTransformations; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.Accessors; + +@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) +@JsonInclude(JsonInclude.Include.NON_NULL) +@JsonPropertyOrder({ + "apiVersion", + "kind", + "metadata", + "items" +}) +@ToString +@EqualsAndHashCode +@Accessors(prefix = { + "_", + "" +}) +@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { + @BuildableReference(ObjectMeta.class), + @BuildableReference(LabelSelector.class), + @BuildableReference(Container.class), + @BuildableReference(PodTemplateSpec.class), + @BuildableReference(ResourceRequirements.class), + @BuildableReference(IntOrString.class), + @BuildableReference(ObjectReference.class), + @BuildableReference(LocalObjectReference.class), + @BuildableReference(PersistentVolumeClaim.class) +}) +@TemplateTransformations({ + @TemplateTransformation(value = "/manifest.vm", outputPath = "META-INF/services/io.fabric8.kubernetes.api.model.KubernetesResource", gather = true) +}) +@Version("v1") +@Group("hive.openshift.io") +@Generated("jsonschema2pojo") +public class ClusterDeploymentCustomizationList implements Editable , KubernetesResource, KubernetesResourceList +{ + + /** + * + * (Required) + * + */ + @JsonProperty("apiVersion") + private String apiVersion = "hive.openshift.io/v1"; + @JsonProperty("items") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + private List items = new ArrayList<>(); + /** + * + * (Required) + * + */ + @JsonProperty("kind") + private String kind = "ClusterDeploymentCustomizationList"; + @JsonProperty("metadata") + private ListMeta metadata; + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public ClusterDeploymentCustomizationList() { + } + + public ClusterDeploymentCustomizationList(String apiVersion, List items, String kind, ListMeta metadata) { + super(); + this.apiVersion = apiVersion; + this.items = items; + this.kind = kind; + this.metadata = metadata; + } + + /** + * + * (Required) + * + */ + @JsonProperty("apiVersion") + public String getApiVersion() { + return apiVersion; + } + + /** + * + * (Required) + * + */ + @JsonProperty("apiVersion") + public void setApiVersion(String apiVersion) { + this.apiVersion = apiVersion; + } + + @JsonProperty("items") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + public List getItems() { + return items; + } + + @JsonProperty("items") + public void setItems(List items) { + this.items = items; + } + + /** + * + * (Required) + * + */ + @JsonProperty("kind") + public String getKind() { + return kind; + } + + /** + * + * (Required) + * + */ + @JsonProperty("kind") + public void setKind(String kind) { + this.kind = kind; + } + + @JsonProperty("metadata") + public ListMeta getMetadata() { + return metadata; + } + + @JsonProperty("metadata") + public void setMetadata(ListMeta metadata) { + this.metadata = metadata; + } + + @JsonIgnore + public ClusterDeploymentCustomizationListBuilder edit() { + return new ClusterDeploymentCustomizationListBuilder(this); + } + + @JsonIgnore + public ClusterDeploymentCustomizationListBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeploymentCustomizationSpec.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeploymentCustomizationSpec.java new file mode 100644 index 00000000000..a15475527f5 --- /dev/null +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeploymentCustomizationSpec.java @@ -0,0 +1,112 @@ + +package io.fabric8.openshift.api.model.hive.v1; + +import java.util.ArrayList; +import java.util.LinkedHashMap; +import java.util.List; +import java.util.Map; +import javax.annotation.Generated; +import com.fasterxml.jackson.annotation.JsonAnyGetter; +import com.fasterxml.jackson.annotation.JsonAnySetter; +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonPropertyOrder; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.fabric8.kubernetes.api.builder.Editable; +import io.fabric8.kubernetes.api.model.Container; +import io.fabric8.kubernetes.api.model.IntOrString; +import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; +import io.fabric8.kubernetes.api.model.ObjectReference; +import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; +import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; +import io.sundr.builder.annotations.Buildable; +import io.sundr.builder.annotations.BuildableReference; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.Accessors; + +@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) +@JsonInclude(JsonInclude.Include.NON_NULL) +@JsonPropertyOrder({ + "installConfigPatches" +}) +@ToString +@EqualsAndHashCode +@Accessors(prefix = { + "_", + "" +}) +@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { + @BuildableReference(ObjectMeta.class), + @BuildableReference(LabelSelector.class), + @BuildableReference(Container.class), + @BuildableReference(PodTemplateSpec.class), + @BuildableReference(ResourceRequirements.class), + @BuildableReference(IntOrString.class), + @BuildableReference(ObjectReference.class), + @BuildableReference(LocalObjectReference.class), + @BuildableReference(PersistentVolumeClaim.class) +}) +@Generated("jsonschema2pojo") +public class ClusterDeploymentCustomizationSpec implements Editable , KubernetesResource +{ + + @JsonProperty("installConfigPatches") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + private List installConfigPatches = new ArrayList<>(); + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public ClusterDeploymentCustomizationSpec() { + } + + public ClusterDeploymentCustomizationSpec(List installConfigPatches) { + super(); + this.installConfigPatches = installConfigPatches; + } + + @JsonProperty("installConfigPatches") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + public List getInstallConfigPatches() { + return installConfigPatches; + } + + @JsonProperty("installConfigPatches") + public void setInstallConfigPatches(List installConfigPatches) { + this.installConfigPatches = installConfigPatches; + } + + @JsonIgnore + public ClusterDeploymentCustomizationSpecBuilder edit() { + return new ClusterDeploymentCustomizationSpecBuilder(this); + } + + @JsonIgnore + public ClusterDeploymentCustomizationSpecBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeploymentCustomizationStatus.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeploymentCustomizationStatus.java new file mode 100644 index 00000000000..34e380ccef0 --- /dev/null +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeploymentCustomizationStatus.java @@ -0,0 +1,155 @@ + +package io.fabric8.openshift.api.model.hive.v1; + +import java.util.ArrayList; +import java.util.LinkedHashMap; +import java.util.List; +import java.util.Map; +import javax.annotation.Generated; +import com.fasterxml.jackson.annotation.JsonAnyGetter; +import com.fasterxml.jackson.annotation.JsonAnySetter; +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonPropertyOrder; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.fabric8.kubernetes.api.builder.Editable; +import io.fabric8.kubernetes.api.model.Container; +import io.fabric8.kubernetes.api.model.IntOrString; +import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; +import io.fabric8.kubernetes.api.model.ObjectReference; +import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; +import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; +import io.fabric8.openshift.api.model.customresourcestatus.conditions.v1.Condition; +import io.sundr.builder.annotations.Buildable; +import io.sundr.builder.annotations.BuildableReference; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.Accessors; + +@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) +@JsonInclude(JsonInclude.Include.NON_NULL) +@JsonPropertyOrder({ + "clusterDeploymentRef", + "clusterPoolRef", + "conditions", + "lastAppliedConfiguration" +}) +@ToString +@EqualsAndHashCode +@Accessors(prefix = { + "_", + "" +}) +@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { + @BuildableReference(ObjectMeta.class), + @BuildableReference(LabelSelector.class), + @BuildableReference(Container.class), + @BuildableReference(PodTemplateSpec.class), + @BuildableReference(ResourceRequirements.class), + @BuildableReference(IntOrString.class), + @BuildableReference(ObjectReference.class), + @BuildableReference(LocalObjectReference.class), + @BuildableReference(PersistentVolumeClaim.class) +}) +@Generated("jsonschema2pojo") +public class ClusterDeploymentCustomizationStatus implements Editable , KubernetesResource +{ + + @JsonProperty("clusterDeploymentRef") + private LocalObjectReference clusterDeploymentRef; + @JsonProperty("clusterPoolRef") + private LocalObjectReference clusterPoolRef; + @JsonProperty("conditions") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + private List conditions = new ArrayList<>(); + @JsonProperty("lastAppliedConfiguration") + private String lastAppliedConfiguration; + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public ClusterDeploymentCustomizationStatus() { + } + + public ClusterDeploymentCustomizationStatus(LocalObjectReference clusterDeploymentRef, LocalObjectReference clusterPoolRef, List conditions, String lastAppliedConfiguration) { + super(); + this.clusterDeploymentRef = clusterDeploymentRef; + this.clusterPoolRef = clusterPoolRef; + this.conditions = conditions; + this.lastAppliedConfiguration = lastAppliedConfiguration; + } + + @JsonProperty("clusterDeploymentRef") + public LocalObjectReference getClusterDeploymentRef() { + return clusterDeploymentRef; + } + + @JsonProperty("clusterDeploymentRef") + public void setClusterDeploymentRef(LocalObjectReference clusterDeploymentRef) { + this.clusterDeploymentRef = clusterDeploymentRef; + } + + @JsonProperty("clusterPoolRef") + public LocalObjectReference getClusterPoolRef() { + return clusterPoolRef; + } + + @JsonProperty("clusterPoolRef") + public void setClusterPoolRef(LocalObjectReference clusterPoolRef) { + this.clusterPoolRef = clusterPoolRef; + } + + @JsonProperty("conditions") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + public List getConditions() { + return conditions; + } + + @JsonProperty("conditions") + public void setConditions(List conditions) { + this.conditions = conditions; + } + + @JsonProperty("lastAppliedConfiguration") + public String getLastAppliedConfiguration() { + return lastAppliedConfiguration; + } + + @JsonProperty("lastAppliedConfiguration") + public void setLastAppliedConfiguration(String lastAppliedConfiguration) { + this.lastAppliedConfiguration = lastAppliedConfiguration; + } + + @JsonIgnore + public ClusterDeploymentCustomizationStatusBuilder edit() { + return new ClusterDeploymentCustomizationStatusBuilder(this); + } + + @JsonIgnore + public ClusterDeploymentCustomizationStatusBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeploymentSpec.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeploymentSpec.java index 4c79d64a981..fe63d34e93a 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeploymentSpec.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeploymentSpec.java @@ -15,10 +15,10 @@ import com.fasterxml.jackson.databind.annotation.JsonDeserialize; import io.fabric8.kubernetes.api.builder.Editable; import io.fabric8.kubernetes.api.model.Container; -import io.fabric8.kubernetes.api.model.Duration; import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -66,7 +66,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -76,7 +76,7 @@ public class ClusterDeploymentSpec implements Editable certificateBundles = new ArrayList<>(); @@ -91,7 +91,7 @@ public class ClusterDeploymentSpec implements Editable ingress = new ArrayList<>(); @@ -110,7 +110,7 @@ public class ClusterDeploymentSpec implements Editable additionalProperties = new LinkedHashMap(); @@ -121,7 +121,7 @@ public class ClusterDeploymentSpec implements Editable certificateBundles, ClusterInstallLocalReference clusterInstallRef, ClusterMetadata clusterMetadata, String clusterName, ClusterPoolReference clusterPoolRef, ControlPlaneConfigSpec controlPlaneConfig, Duration hibernateAfter, List ingress, Integer installAttemptsLimit, Boolean installed, Boolean manageDNS, Platform platform, String powerState, Boolean preserveOnDelete, Provisioning provisioning, io.fabric8.kubernetes.api.model.LocalObjectReference pullSecretRef) { + public ClusterDeploymentSpec(String baseDomain, LocalObjectReference boundServiceAccountSigningKeySecretRef, List certificateBundles, ClusterInstallLocalReference clusterInstallRef, ClusterMetadata clusterMetadata, String clusterName, ClusterPoolReference clusterPoolRef, ControlPlaneConfigSpec controlPlaneConfig, String hibernateAfter, List ingress, Integer installAttemptsLimit, Boolean installed, Boolean manageDNS, Platform platform, String powerState, Boolean preserveOnDelete, Provisioning provisioning, LocalObjectReference pullSecretRef) { super(); this.baseDomain = baseDomain; this.boundServiceAccountSigningKeySecretRef = boundServiceAccountSigningKeySecretRef; @@ -154,12 +154,12 @@ public void setBaseDomain(String baseDomain) { } @JsonProperty("boundServiceAccountSigningKeySecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getBoundServiceAccountSigningKeySecretRef() { + public LocalObjectReference getBoundServiceAccountSigningKeySecretRef() { return boundServiceAccountSigningKeySecretRef; } @JsonProperty("boundServiceAccountSigningKeySecretRef") - public void setBoundServiceAccountSigningKeySecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference boundServiceAccountSigningKeySecretRef) { + public void setBoundServiceAccountSigningKeySecretRef(LocalObjectReference boundServiceAccountSigningKeySecretRef) { this.boundServiceAccountSigningKeySecretRef = boundServiceAccountSigningKeySecretRef; } @@ -225,12 +225,12 @@ public void setControlPlaneConfig(ControlPlaneConfigSpec controlPlaneConfig) { } @JsonProperty("hibernateAfter") - public Duration getHibernateAfter() { + public String getHibernateAfter() { return hibernateAfter; } @JsonProperty("hibernateAfter") - public void setHibernateAfter(Duration hibernateAfter) { + public void setHibernateAfter(String hibernateAfter) { this.hibernateAfter = hibernateAfter; } @@ -316,12 +316,12 @@ public void setProvisioning(Provisioning provisioning) { } @JsonProperty("pullSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getPullSecretRef() { + public LocalObjectReference getPullSecretRef() { return pullSecretRef; } @JsonProperty("pullSecretRef") - public void setPullSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference pullSecretRef) { + public void setPullSecretRef(LocalObjectReference pullSecretRef) { this.pullSecretRef = pullSecretRef; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeploymentStatus.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeploymentStatus.java index 0ad663a116d..c1d61abbd4b 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeploymentStatus.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeploymentStatus.java @@ -18,6 +18,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -60,7 +61,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -92,7 +93,7 @@ public class ClusterDeploymentStatus implements Editable certificateBundles, String cliImage, List conditions, Integer installRestarts, String installStartedTimestamp, String installVersion, String installedTimestamp, String installerImage, PlatformStatus platformStatus, String powerState, io.fabric8.kubernetes.api.model.LocalObjectReference provisionRef, String webConsoleURL) { + public ClusterDeploymentStatus(String apiURL, List certificateBundles, String cliImage, List conditions, Integer installRestarts, String installStartedTimestamp, String installVersion, String installedTimestamp, String installerImage, PlatformStatus platformStatus, String powerState, LocalObjectReference provisionRef, String webConsoleURL) { super(); this.apiURL = apiURL; this.certificateBundles = certificateBundles; @@ -235,12 +236,12 @@ public void setPowerState(String powerState) { } @JsonProperty("provisionRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getProvisionRef() { + public LocalObjectReference getProvisionRef() { return provisionRef; } @JsonProperty("provisionRef") - public void setProvisionRef(io.fabric8.kubernetes.api.model.LocalObjectReference provisionRef) { + public void setProvisionRef(LocalObjectReference provisionRef) { this.provisionRef = provisionRef; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeprovision.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeprovision.java index 128708d0f96..9eae05b3862 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeprovision.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeprovision.java @@ -18,6 +18,7 @@ import io.fabric8.kubernetes.api.model.LabelSelector; import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.Namespaced; +import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; import io.fabric8.kubernetes.api.model.PodTemplateSpec; @@ -48,7 +49,7 @@ "" }) @Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { - @BuildableReference(io.fabric8.kubernetes.api.model.ObjectMeta.class), + @BuildableReference(ObjectMeta.class), @BuildableReference(LabelSelector.class), @BuildableReference(Container.class), @BuildableReference(PodTemplateSpec.class), @@ -82,7 +83,7 @@ public class ClusterDeprovision implements Editable , @JsonProperty("kind") private String kind = "ClusterDeprovision"; @JsonProperty("metadata") - private io.fabric8.kubernetes.api.model.ObjectMeta metadata; + private ObjectMeta metadata; @JsonProperty("spec") private ClusterDeprovisionSpec spec; @JsonProperty("status") @@ -97,7 +98,7 @@ public class ClusterDeprovision implements Editable , public ClusterDeprovision() { } - public ClusterDeprovision(String apiVersion, String kind, io.fabric8.kubernetes.api.model.ObjectMeta metadata, ClusterDeprovisionSpec spec, ClusterDeprovisionStatus status) { + public ClusterDeprovision(String apiVersion, String kind, ObjectMeta metadata, ClusterDeprovisionSpec spec, ClusterDeprovisionStatus status) { super(); this.apiVersion = apiVersion; this.kind = kind; @@ -147,12 +148,12 @@ public void setKind(String kind) { } @JsonProperty("metadata") - public io.fabric8.kubernetes.api.model.ObjectMeta getMetadata() { + public ObjectMeta getMetadata() { return metadata; } @JsonProperty("metadata") - public void setMetadata(io.fabric8.kubernetes.api.model.ObjectMeta metadata) { + public void setMetadata(ObjectMeta metadata) { this.metadata = metadata; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeprovisionPlatform.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeprovisionPlatform.java index 814fbe679ce..fb5dc972054 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeprovisionPlatform.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterDeprovisionPlatform.java @@ -31,7 +31,6 @@ @JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) @JsonInclude(JsonInclude.Include.NON_NULL) @JsonPropertyOrder({ - "alibabacloud", "aws", "azure", "gcp", @@ -61,8 +60,6 @@ public class ClusterDeprovisionPlatform implements Editable , KubernetesResource { - @JsonProperty("alibabacloud") - private AlibabaCloudClusterDeprovision alibabacloud; @JsonProperty("aws") private AWSClusterDeprovision aws; @JsonProperty("azure") @@ -87,9 +84,8 @@ public class ClusterDeprovisionPlatform implements Editable , HasMe @JsonProperty("kind") private String kind = "ClusterImageSet"; @JsonProperty("metadata") - private io.fabric8.kubernetes.api.model.ObjectMeta metadata; + private ObjectMeta metadata; @JsonProperty("spec") private ClusterImageSetSpec spec; @JsonProperty("status") @@ -96,7 +97,7 @@ public class ClusterImageSet implements Editable , HasMe public ClusterImageSet() { } - public ClusterImageSet(String apiVersion, String kind, io.fabric8.kubernetes.api.model.ObjectMeta metadata, ClusterImageSetSpec spec, ClusterImageSetStatus status) { + public ClusterImageSet(String apiVersion, String kind, ObjectMeta metadata, ClusterImageSetSpec spec, ClusterImageSetStatus status) { super(); this.apiVersion = apiVersion; this.kind = kind; @@ -146,12 +147,12 @@ public void setKind(String kind) { } @JsonProperty("metadata") - public io.fabric8.kubernetes.api.model.ObjectMeta getMetadata() { + public ObjectMeta getMetadata() { return metadata; } @JsonProperty("metadata") - public void setMetadata(io.fabric8.kubernetes.api.model.ObjectMeta metadata) { + public void setMetadata(ObjectMeta metadata) { this.metadata = metadata; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterIngress.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterIngress.java index f0b646a8266..b5957b1918e 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterIngress.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterIngress.java @@ -15,6 +15,7 @@ import io.fabric8.kubernetes.api.model.Container; import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; @@ -46,7 +47,7 @@ }) @Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { @BuildableReference(ObjectMeta.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LabelSelector.class), + @BuildableReference(LabelSelector.class), @BuildableReference(Container.class), @BuildableReference(PodTemplateSpec.class), @BuildableReference(ResourceRequirements.class), @@ -66,9 +67,9 @@ public class ClusterIngress implements Editable , Kuberne @JsonProperty("name") private String name; @JsonProperty("namespaceSelector") - private io.fabric8.kubernetes.api.model.LabelSelector namespaceSelector; + private LabelSelector namespaceSelector; @JsonProperty("routeSelector") - private io.fabric8.kubernetes.api.model.LabelSelector routeSelector; + private LabelSelector routeSelector; @JsonProperty("servingCertificate") private String servingCertificate; @JsonIgnore @@ -81,7 +82,7 @@ public class ClusterIngress implements Editable , Kuberne public ClusterIngress() { } - public ClusterIngress(String domain, ConfigMapNameReference httpErrorCodePages, String name, io.fabric8.kubernetes.api.model.LabelSelector namespaceSelector, io.fabric8.kubernetes.api.model.LabelSelector routeSelector, String servingCertificate) { + public ClusterIngress(String domain, ConfigMapNameReference httpErrorCodePages, String name, LabelSelector namespaceSelector, LabelSelector routeSelector, String servingCertificate) { super(); this.domain = domain; this.httpErrorCodePages = httpErrorCodePages; @@ -122,22 +123,22 @@ public void setName(String name) { } @JsonProperty("namespaceSelector") - public io.fabric8.kubernetes.api.model.LabelSelector getNamespaceSelector() { + public LabelSelector getNamespaceSelector() { return namespaceSelector; } @JsonProperty("namespaceSelector") - public void setNamespaceSelector(io.fabric8.kubernetes.api.model.LabelSelector namespaceSelector) { + public void setNamespaceSelector(LabelSelector namespaceSelector) { this.namespaceSelector = namespaceSelector; } @JsonProperty("routeSelector") - public io.fabric8.kubernetes.api.model.LabelSelector getRouteSelector() { + public LabelSelector getRouteSelector() { return routeSelector; } @JsonProperty("routeSelector") - public void setRouteSelector(io.fabric8.kubernetes.api.model.LabelSelector routeSelector) { + public void setRouteSelector(LabelSelector routeSelector) { this.routeSelector = routeSelector; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterInstallCondition.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterInstallCondition.java new file mode 100644 index 00000000000..5adeabe7c6b --- /dev/null +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterInstallCondition.java @@ -0,0 +1,178 @@ + +package io.fabric8.openshift.api.model.hive.v1; + +import java.util.LinkedHashMap; +import java.util.Map; +import javax.annotation.Generated; +import com.fasterxml.jackson.annotation.JsonAnyGetter; +import com.fasterxml.jackson.annotation.JsonAnySetter; +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonPropertyOrder; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.fabric8.kubernetes.api.builder.Editable; +import io.fabric8.kubernetes.api.model.Container; +import io.fabric8.kubernetes.api.model.IntOrString; +import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; +import io.fabric8.kubernetes.api.model.ObjectReference; +import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; +import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; +import io.sundr.builder.annotations.Buildable; +import io.sundr.builder.annotations.BuildableReference; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.Accessors; + +@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) +@JsonInclude(JsonInclude.Include.NON_NULL) +@JsonPropertyOrder({ + "lastProbeTime", + "lastTransitionTime", + "message", + "reason", + "status", + "type" +}) +@ToString +@EqualsAndHashCode +@Accessors(prefix = { + "_", + "" +}) +@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { + @BuildableReference(ObjectMeta.class), + @BuildableReference(LabelSelector.class), + @BuildableReference(Container.class), + @BuildableReference(PodTemplateSpec.class), + @BuildableReference(ResourceRequirements.class), + @BuildableReference(IntOrString.class), + @BuildableReference(ObjectReference.class), + @BuildableReference(LocalObjectReference.class), + @BuildableReference(PersistentVolumeClaim.class) +}) +@Generated("jsonschema2pojo") +public class ClusterInstallCondition implements Editable , KubernetesResource +{ + + @JsonProperty("lastProbeTime") + private String lastProbeTime; + @JsonProperty("lastTransitionTime") + private String lastTransitionTime; + @JsonProperty("message") + private String message; + @JsonProperty("reason") + private String reason; + @JsonProperty("status") + private String status; + @JsonProperty("type") + private String type; + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public ClusterInstallCondition() { + } + + public ClusterInstallCondition(String lastProbeTime, String lastTransitionTime, String message, String reason, String status, String type) { + super(); + this.lastProbeTime = lastProbeTime; + this.lastTransitionTime = lastTransitionTime; + this.message = message; + this.reason = reason; + this.status = status; + this.type = type; + } + + @JsonProperty("lastProbeTime") + public String getLastProbeTime() { + return lastProbeTime; + } + + @JsonProperty("lastProbeTime") + public void setLastProbeTime(String lastProbeTime) { + this.lastProbeTime = lastProbeTime; + } + + @JsonProperty("lastTransitionTime") + public String getLastTransitionTime() { + return lastTransitionTime; + } + + @JsonProperty("lastTransitionTime") + public void setLastTransitionTime(String lastTransitionTime) { + this.lastTransitionTime = lastTransitionTime; + } + + @JsonProperty("message") + public String getMessage() { + return message; + } + + @JsonProperty("message") + public void setMessage(String message) { + this.message = message; + } + + @JsonProperty("reason") + public String getReason() { + return reason; + } + + @JsonProperty("reason") + public void setReason(String reason) { + this.reason = reason; + } + + @JsonProperty("status") + public String getStatus() { + return status; + } + + @JsonProperty("status") + public void setStatus(String status) { + this.status = status; + } + + @JsonProperty("type") + public String getType() { + return type; + } + + @JsonProperty("type") + public void setType(String type) { + this.type = type; + } + + @JsonIgnore + public ClusterInstallConditionBuilder edit() { + return new ClusterInstallConditionBuilder(this); + } + + @JsonIgnore + public ClusterInstallConditionBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterMetadata.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterMetadata.java index 6fa3bd1e57a..6ca5ce4cca9 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterMetadata.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterMetadata.java @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -50,7 +51,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -58,9 +59,9 @@ public class ClusterMetadata implements Editable , Kuber { @JsonProperty("adminKubeconfigSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference adminKubeconfigSecretRef; + private LocalObjectReference adminKubeconfigSecretRef; @JsonProperty("adminPasswordSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference adminPasswordSecretRef; + private LocalObjectReference adminPasswordSecretRef; @JsonProperty("clusterID") private String clusterID; @JsonProperty("infraID") @@ -77,7 +78,7 @@ public class ClusterMetadata implements Editable , Kuber public ClusterMetadata() { } - public ClusterMetadata(io.fabric8.kubernetes.api.model.LocalObjectReference adminKubeconfigSecretRef, io.fabric8.kubernetes.api.model.LocalObjectReference adminPasswordSecretRef, String clusterID, String infraID, ClusterPlatformMetadata platform) { + public ClusterMetadata(LocalObjectReference adminKubeconfigSecretRef, LocalObjectReference adminPasswordSecretRef, String clusterID, String infraID, ClusterPlatformMetadata platform) { super(); this.adminKubeconfigSecretRef = adminKubeconfigSecretRef; this.adminPasswordSecretRef = adminPasswordSecretRef; @@ -87,22 +88,22 @@ public ClusterMetadata(io.fabric8.kubernetes.api.model.LocalObjectReference admi } @JsonProperty("adminKubeconfigSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getAdminKubeconfigSecretRef() { + public LocalObjectReference getAdminKubeconfigSecretRef() { return adminKubeconfigSecretRef; } @JsonProperty("adminKubeconfigSecretRef") - public void setAdminKubeconfigSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference adminKubeconfigSecretRef) { + public void setAdminKubeconfigSecretRef(LocalObjectReference adminKubeconfigSecretRef) { this.adminKubeconfigSecretRef = adminKubeconfigSecretRef; } @JsonProperty("adminPasswordSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getAdminPasswordSecretRef() { + public LocalObjectReference getAdminPasswordSecretRef() { return adminPasswordSecretRef; } @JsonProperty("adminPasswordSecretRef") - public void setAdminPasswordSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference adminPasswordSecretRef) { + public void setAdminPasswordSecretRef(LocalObjectReference adminPasswordSecretRef) { this.adminPasswordSecretRef = adminPasswordSecretRef; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterPlatformMetadata.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterPlatformMetadata.java index c67ab7866ff..279d2389385 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterPlatformMetadata.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterPlatformMetadata.java @@ -22,8 +22,7 @@ import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; import io.fabric8.kubernetes.api.model.PodTemplateSpec; import io.fabric8.kubernetes.api.model.ResourceRequirements; -import io.fabric8.openshift.api.model.hive.aws.v1.AwsMetadata; -import io.fabric8.openshift.api.model.hive.azure.v1.AzureMetadata; +import io.fabric8.openshift.api.model.hive.aws.v1.Metadata; import io.sundr.builder.annotations.Buildable; import io.sundr.builder.annotations.BuildableReference; import lombok.EqualsAndHashCode; @@ -34,7 +33,8 @@ @JsonInclude(JsonInclude.Include.NON_NULL) @JsonPropertyOrder({ "aws", - "azure" + "azure", + "gcp" }) @ToString @EqualsAndHashCode @@ -58,9 +58,11 @@ public class ClusterPlatformMetadata implements Editable additionalProperties = new LinkedHashMap(); @@ -71,32 +73,43 @@ public class ClusterPlatformMetadata implements Editable , HasMetadata, @JsonProperty("kind") private String kind = "ClusterPool"; @JsonProperty("metadata") - private io.fabric8.kubernetes.api.model.ObjectMeta metadata; + private ObjectMeta metadata; @JsonProperty("spec") private ClusterPoolSpec spec; @JsonProperty("status") @@ -97,7 +98,7 @@ public class ClusterPool implements Editable , HasMetadata, public ClusterPool() { } - public ClusterPool(String apiVersion, String kind, io.fabric8.kubernetes.api.model.ObjectMeta metadata, ClusterPoolSpec spec, ClusterPoolStatus status) { + public ClusterPool(String apiVersion, String kind, ObjectMeta metadata, ClusterPoolSpec spec, ClusterPoolStatus status) { super(); this.apiVersion = apiVersion; this.kind = kind; @@ -147,12 +148,12 @@ public void setKind(String kind) { } @JsonProperty("metadata") - public io.fabric8.kubernetes.api.model.ObjectMeta getMetadata() { + public ObjectMeta getMetadata() { return metadata; } @JsonProperty("metadata") - public void setMetadata(io.fabric8.kubernetes.api.model.ObjectMeta metadata) { + public void setMetadata(ObjectMeta metadata) { this.metadata = metadata; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterPoolClaimLifetime.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterPoolClaimLifetime.java index d1bbba05a75..dc201f0f9be 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterPoolClaimLifetime.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterPoolClaimLifetime.java @@ -13,7 +13,6 @@ import com.fasterxml.jackson.databind.annotation.JsonDeserialize; import io.fabric8.kubernetes.api.builder.Editable; import io.fabric8.kubernetes.api.model.Container; -import io.fabric8.kubernetes.api.model.Duration; import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; @@ -57,9 +56,9 @@ public class ClusterPoolClaimLifetime implements Editable additionalProperties = new LinkedHashMap(); @@ -70,29 +69,29 @@ public class ClusterPoolClaimLifetime implements Editable , Kuber @JsonProperty("claimLifetime") private ClusterPoolClaimLifetime claimLifetime; @JsonProperty("hibernateAfter") - private Duration hibernateAfter; + private String hibernateAfter; @JsonProperty("hibernationConfig") private HibernationConfig hibernationConfig; @JsonProperty("imageSetRef") @@ -88,7 +90,10 @@ public class ClusterPoolSpec implements Editable , Kuber @JsonProperty("installAttemptsLimit") private Integer installAttemptsLimit; @JsonProperty("installConfigSecretTemplateRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference installConfigSecretTemplateRef; + private LocalObjectReference installConfigSecretTemplateRef; + @JsonProperty("installerEnv") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + private List installerEnv = new ArrayList<>(); @JsonProperty("inventory") @JsonInclude(JsonInclude.Include.NON_EMPTY) private List inventory = new ArrayList<>(); @@ -102,7 +107,7 @@ public class ClusterPoolSpec implements Editable , Kuber @JsonProperty("platform") private Platform platform; @JsonProperty("pullSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference pullSecretRef; + private LocalObjectReference pullSecretRef; @JsonProperty("runningCount") private Integer runningCount; @JsonProperty("size") @@ -119,7 +124,7 @@ public class ClusterPoolSpec implements Editable , Kuber public ClusterPoolSpec() { } - public ClusterPoolSpec(Map annotations, String baseDomain, ClusterPoolClaimLifetime claimLifetime, Duration hibernateAfter, HibernationConfig hibernationConfig, ClusterImageSetReference imageSetRef, Integer installAttemptsLimit, io.fabric8.kubernetes.api.model.LocalObjectReference installConfigSecretTemplateRef, List inventory, Map labels, Integer maxConcurrent, Integer maxSize, Platform platform, io.fabric8.kubernetes.api.model.LocalObjectReference pullSecretRef, Integer runningCount, Integer size, Boolean skipMachinePools) { + public ClusterPoolSpec(Map annotations, String baseDomain, ClusterPoolClaimLifetime claimLifetime, String hibernateAfter, HibernationConfig hibernationConfig, ClusterImageSetReference imageSetRef, Integer installAttemptsLimit, LocalObjectReference installConfigSecretTemplateRef, List installerEnv, List inventory, Map labels, Integer maxConcurrent, Integer maxSize, Platform platform, LocalObjectReference pullSecretRef, Integer runningCount, Integer size, Boolean skipMachinePools) { super(); this.annotations = annotations; this.baseDomain = baseDomain; @@ -129,6 +134,7 @@ public ClusterPoolSpec(Map annotations, String baseDomain, Clust this.imageSetRef = imageSetRef; this.installAttemptsLimit = installAttemptsLimit; this.installConfigSecretTemplateRef = installConfigSecretTemplateRef; + this.installerEnv = installerEnv; this.inventory = inventory; this.labels = labels; this.maxConcurrent = maxConcurrent; @@ -172,12 +178,12 @@ public void setClaimLifetime(ClusterPoolClaimLifetime claimLifetime) { } @JsonProperty("hibernateAfter") - public Duration getHibernateAfter() { + public String getHibernateAfter() { return hibernateAfter; } @JsonProperty("hibernateAfter") - public void setHibernateAfter(Duration hibernateAfter) { + public void setHibernateAfter(String hibernateAfter) { this.hibernateAfter = hibernateAfter; } @@ -212,15 +218,26 @@ public void setInstallAttemptsLimit(Integer installAttemptsLimit) { } @JsonProperty("installConfigSecretTemplateRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getInstallConfigSecretTemplateRef() { + public LocalObjectReference getInstallConfigSecretTemplateRef() { return installConfigSecretTemplateRef; } @JsonProperty("installConfigSecretTemplateRef") - public void setInstallConfigSecretTemplateRef(io.fabric8.kubernetes.api.model.LocalObjectReference installConfigSecretTemplateRef) { + public void setInstallConfigSecretTemplateRef(LocalObjectReference installConfigSecretTemplateRef) { this.installConfigSecretTemplateRef = installConfigSecretTemplateRef; } + @JsonProperty("installerEnv") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + public List getInstallerEnv() { + return installerEnv; + } + + @JsonProperty("installerEnv") + public void setInstallerEnv(List installerEnv) { + this.installerEnv = installerEnv; + } + @JsonProperty("inventory") @JsonInclude(JsonInclude.Include.NON_EMPTY) public List getInventory() { @@ -274,12 +291,12 @@ public void setPlatform(Platform platform) { } @JsonProperty("pullSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getPullSecretRef() { + public LocalObjectReference getPullSecretRef() { return pullSecretRef; } @JsonProperty("pullSecretRef") - public void setPullSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference pullSecretRef) { + public void setPullSecretRef(LocalObjectReference pullSecretRef) { this.pullSecretRef = pullSecretRef; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterProvision.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterProvision.java index 77c5ccfd968..17f4605cd37 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterProvision.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterProvision.java @@ -18,6 +18,7 @@ import io.fabric8.kubernetes.api.model.LabelSelector; import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.Namespaced; +import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; import io.fabric8.kubernetes.api.model.PodTemplateSpec; @@ -48,7 +49,7 @@ "" }) @Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { - @BuildableReference(io.fabric8.kubernetes.api.model.ObjectMeta.class), + @BuildableReference(ObjectMeta.class), @BuildableReference(LabelSelector.class), @BuildableReference(Container.class), @BuildableReference(PodTemplateSpec.class), @@ -82,7 +83,7 @@ public class ClusterProvision implements Editable , Has @JsonProperty("kind") private String kind = "ClusterProvision"; @JsonProperty("metadata") - private io.fabric8.kubernetes.api.model.ObjectMeta metadata; + private ObjectMeta metadata; @JsonProperty("spec") private ClusterProvisionSpec spec; @JsonProperty("status") @@ -97,7 +98,7 @@ public class ClusterProvision implements Editable , Has public ClusterProvision() { } - public ClusterProvision(String apiVersion, String kind, io.fabric8.kubernetes.api.model.ObjectMeta metadata, ClusterProvisionSpec spec, ClusterProvisionStatus status) { + public ClusterProvision(String apiVersion, String kind, ObjectMeta metadata, ClusterProvisionSpec spec, ClusterProvisionStatus status) { super(); this.apiVersion = apiVersion; this.kind = kind; @@ -147,12 +148,12 @@ public void setKind(String kind) { } @JsonProperty("metadata") - public io.fabric8.kubernetes.api.model.ObjectMeta getMetadata() { + public ObjectMeta getMetadata() { return metadata; } @JsonProperty("metadata") - public void setMetadata(io.fabric8.kubernetes.api.model.ObjectMeta metadata) { + public void setMetadata(ObjectMeta metadata) { this.metadata = metadata; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterProvisionSpec.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterProvisionSpec.java index ba3b3a9d9a6..8b7ce362f0f 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterProvisionSpec.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterProvisionSpec.java @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -60,7 +61,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -68,36 +69,36 @@ public class ClusterProvisionSpec implements Editable metadata = new LinkedHashMap<>(); + @JsonDeserialize(using = io.fabric8.kubernetes.internal.KubernetesDeserializer.class) + private Object metadata; @JsonProperty("metadataJSON") - private java.lang.String metadataJSON; + private String metadataJSON; @JsonProperty("podSpec") private PodSpec podSpec; @JsonProperty("prevClusterID") - private java.lang.String prevClusterID; + private String prevClusterID; @JsonProperty("prevInfraID") - private java.lang.String prevInfraID; + private String prevInfraID; @JsonProperty("prevProvisionName") - private java.lang.String prevProvisionName; + private String prevProvisionName; @JsonProperty("stage") - private java.lang.String stage; + private String stage; @JsonIgnore - private Map additionalProperties = new LinkedHashMap(); + private Map additionalProperties = new LinkedHashMap(); /** * No args constructor for use in serialization @@ -106,7 +107,7 @@ public class ClusterProvisionSpec implements Editable metadata, java.lang.String metadataJSON, PodSpec podSpec, java.lang.String prevClusterID, java.lang.String prevInfraID, java.lang.String prevProvisionName, java.lang.String stage) { + public ClusterProvisionSpec(LocalObjectReference adminKubeconfigSecretRef, LocalObjectReference adminPasswordSecretRef, Integer attempt, LocalObjectReference clusterDeploymentRef, String clusterID, String infraID, String installLog, Object metadata, String metadataJSON, PodSpec podSpec, String prevClusterID, String prevInfraID, String prevProvisionName, String stage) { super(); this.adminKubeconfigSecretRef = adminKubeconfigSecretRef; this.adminPasswordSecretRef = adminPasswordSecretRef; @@ -125,22 +126,22 @@ public ClusterProvisionSpec(io.fabric8.kubernetes.api.model.LocalObjectReference } @JsonProperty("adminKubeconfigSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getAdminKubeconfigSecretRef() { + public LocalObjectReference getAdminKubeconfigSecretRef() { return adminKubeconfigSecretRef; } @JsonProperty("adminKubeconfigSecretRef") - public void setAdminKubeconfigSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference adminKubeconfigSecretRef) { + public void setAdminKubeconfigSecretRef(LocalObjectReference adminKubeconfigSecretRef) { this.adminKubeconfigSecretRef = adminKubeconfigSecretRef; } @JsonProperty("adminPasswordSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getAdminPasswordSecretRef() { + public LocalObjectReference getAdminPasswordSecretRef() { return adminPasswordSecretRef; } @JsonProperty("adminPasswordSecretRef") - public void setAdminPasswordSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference adminPasswordSecretRef) { + public void setAdminPasswordSecretRef(LocalObjectReference adminPasswordSecretRef) { this.adminPasswordSecretRef = adminPasswordSecretRef; } @@ -155,63 +156,63 @@ public void setAttempt(Integer attempt) { } @JsonProperty("clusterDeploymentRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getClusterDeploymentRef() { + public LocalObjectReference getClusterDeploymentRef() { return clusterDeploymentRef; } @JsonProperty("clusterDeploymentRef") - public void setClusterDeploymentRef(io.fabric8.kubernetes.api.model.LocalObjectReference clusterDeploymentRef) { + public void setClusterDeploymentRef(LocalObjectReference clusterDeploymentRef) { this.clusterDeploymentRef = clusterDeploymentRef; } @JsonProperty("clusterID") - public java.lang.String getClusterID() { + public String getClusterID() { return clusterID; } @JsonProperty("clusterID") - public void setClusterID(java.lang.String clusterID) { + public void setClusterID(String clusterID) { this.clusterID = clusterID; } @JsonProperty("infraID") - public java.lang.String getInfraID() { + public String getInfraID() { return infraID; } @JsonProperty("infraID") - public void setInfraID(java.lang.String infraID) { + public void setInfraID(String infraID) { this.infraID = infraID; } @JsonProperty("installLog") - public java.lang.String getInstallLog() { + public String getInstallLog() { return installLog; } @JsonProperty("installLog") - public void setInstallLog(java.lang.String installLog) { + public void setInstallLog(String installLog) { this.installLog = installLog; } @JsonProperty("metadata") - @JsonInclude(JsonInclude.Include.NON_EMPTY) - public Map getMetadata() { + public Object getMetadata() { return metadata; } @JsonProperty("metadata") - public void setMetadata(Map metadata) { + @JsonDeserialize(using = io.fabric8.kubernetes.internal.KubernetesDeserializer.class) + public void setMetadata(Object metadata) { this.metadata = metadata; } @JsonProperty("metadataJSON") - public java.lang.String getMetadataJSON() { + public String getMetadataJSON() { return metadataJSON; } @JsonProperty("metadataJSON") - public void setMetadataJSON(java.lang.String metadataJSON) { + public void setMetadataJSON(String metadataJSON) { this.metadataJSON = metadataJSON; } @@ -226,42 +227,42 @@ public void setPodSpec(PodSpec podSpec) { } @JsonProperty("prevClusterID") - public java.lang.String getPrevClusterID() { + public String getPrevClusterID() { return prevClusterID; } @JsonProperty("prevClusterID") - public void setPrevClusterID(java.lang.String prevClusterID) { + public void setPrevClusterID(String prevClusterID) { this.prevClusterID = prevClusterID; } @JsonProperty("prevInfraID") - public java.lang.String getPrevInfraID() { + public String getPrevInfraID() { return prevInfraID; } @JsonProperty("prevInfraID") - public void setPrevInfraID(java.lang.String prevInfraID) { + public void setPrevInfraID(String prevInfraID) { this.prevInfraID = prevInfraID; } @JsonProperty("prevProvisionName") - public java.lang.String getPrevProvisionName() { + public String getPrevProvisionName() { return prevProvisionName; } @JsonProperty("prevProvisionName") - public void setPrevProvisionName(java.lang.String prevProvisionName) { + public void setPrevProvisionName(String prevProvisionName) { this.prevProvisionName = prevProvisionName; } @JsonProperty("stage") - public java.lang.String getStage() { + public String getStage() { return stage; } @JsonProperty("stage") - public void setStage(java.lang.String stage) { + public void setStage(String stage) { this.stage = stage; } @@ -276,16 +277,16 @@ public ClusterProvisionSpecBuilder toBuilder() { } @JsonAnyGetter - public Map getAdditionalProperties() { + public Map getAdditionalProperties() { return this.additionalProperties; } @JsonAnySetter - public void setAdditionalProperty(java.lang.String name, java.lang.Object value) { + public void setAdditionalProperty(String name, Object value) { this.additionalProperties.put(name, value); } - public void setAdditionalProperties(Map additionalProperties) { + public void setAdditionalProperties(Map additionalProperties) { this.additionalProperties = additionalProperties; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterProvisionStatus.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterProvisionStatus.java index d372fa51bf2..cf9783935c4 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterProvisionStatus.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterProvisionStatus.java @@ -18,6 +18,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -49,7 +50,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -60,7 +61,7 @@ public class ClusterProvisionStatus implements Editable conditions = new ArrayList<>(); @JsonProperty("jobRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference jobRef; + private LocalObjectReference jobRef; @JsonIgnore private Map additionalProperties = new LinkedHashMap(); @@ -71,7 +72,7 @@ public class ClusterProvisionStatus implements Editable conditions, io.fabric8.kubernetes.api.model.LocalObjectReference jobRef) { + public ClusterProvisionStatus(List conditions, LocalObjectReference jobRef) { super(); this.conditions = conditions; this.jobRef = jobRef; @@ -89,12 +90,12 @@ public void setConditions(List conditions) { } @JsonProperty("jobRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getJobRef() { + public LocalObjectReference getJobRef() { return jobRef; } @JsonProperty("jobRef") - public void setJobRef(io.fabric8.kubernetes.api.model.LocalObjectReference jobRef) { + public void setJobRef(LocalObjectReference jobRef) { this.jobRef = jobRef; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterRelocate.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterRelocate.java index e51589b79de..a872eeffcb7 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterRelocate.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterRelocate.java @@ -17,7 +17,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.LabelSelector; import io.fabric8.kubernetes.api.model.LocalObjectReference; -import io.fabric8.kubernetes.api.model.Namespaced; +import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; import io.fabric8.kubernetes.api.model.PodTemplateSpec; @@ -48,7 +48,7 @@ "" }) @Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { - @BuildableReference(io.fabric8.kubernetes.api.model.ObjectMeta.class), + @BuildableReference(ObjectMeta.class), @BuildableReference(LabelSelector.class), @BuildableReference(Container.class), @BuildableReference(PodTemplateSpec.class), @@ -64,7 +64,7 @@ @Version("v1") @Group("hive.openshift.io") @Generated("jsonschema2pojo") -public class ClusterRelocate implements Editable , HasMetadata, Namespaced +public class ClusterRelocate implements Editable , HasMetadata { /** @@ -82,7 +82,7 @@ public class ClusterRelocate implements Editable , HasMe @JsonProperty("kind") private String kind = "ClusterRelocate"; @JsonProperty("metadata") - private io.fabric8.kubernetes.api.model.ObjectMeta metadata; + private ObjectMeta metadata; @JsonProperty("spec") private ClusterRelocateSpec spec; @JsonProperty("status") @@ -97,7 +97,7 @@ public class ClusterRelocate implements Editable , HasMe public ClusterRelocate() { } - public ClusterRelocate(String apiVersion, String kind, io.fabric8.kubernetes.api.model.ObjectMeta metadata, ClusterRelocateSpec spec, ClusterRelocateStatus status) { + public ClusterRelocate(String apiVersion, String kind, ObjectMeta metadata, ClusterRelocateSpec spec, ClusterRelocateStatus status) { super(); this.apiVersion = apiVersion; this.kind = kind; @@ -147,12 +147,12 @@ public void setKind(String kind) { } @JsonProperty("metadata") - public io.fabric8.kubernetes.api.model.ObjectMeta getMetadata() { + public ObjectMeta getMetadata() { return metadata; } @JsonProperty("metadata") - public void setMetadata(io.fabric8.kubernetes.api.model.ObjectMeta metadata) { + public void setMetadata(ObjectMeta metadata) { this.metadata = metadata; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterRelocateSpec.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterRelocateSpec.java index 9f182c16866..89f8f73d498 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterRelocateSpec.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterRelocateSpec.java @@ -15,6 +15,7 @@ import io.fabric8.kubernetes.api.model.Container; import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; @@ -41,7 +42,7 @@ }) @Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { @BuildableReference(ObjectMeta.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LabelSelector.class), + @BuildableReference(LabelSelector.class), @BuildableReference(Container.class), @BuildableReference(PodTemplateSpec.class), @BuildableReference(ResourceRequirements.class), @@ -55,7 +56,7 @@ public class ClusterRelocateSpec implements Editable { @JsonProperty("clusterDeploymentSelector") - private io.fabric8.kubernetes.api.model.LabelSelector clusterDeploymentSelector; + private LabelSelector clusterDeploymentSelector; @JsonProperty("kubeconfigSecretRef") private KubeconfigSecretReference kubeconfigSecretRef; @JsonIgnore @@ -68,19 +69,19 @@ public class ClusterRelocateSpec implements Editable public ClusterRelocateSpec() { } - public ClusterRelocateSpec(io.fabric8.kubernetes.api.model.LabelSelector clusterDeploymentSelector, KubeconfigSecretReference kubeconfigSecretRef) { + public ClusterRelocateSpec(LabelSelector clusterDeploymentSelector, KubeconfigSecretReference kubeconfigSecretRef) { super(); this.clusterDeploymentSelector = clusterDeploymentSelector; this.kubeconfigSecretRef = kubeconfigSecretRef; } @JsonProperty("clusterDeploymentSelector") - public io.fabric8.kubernetes.api.model.LabelSelector getClusterDeploymentSelector() { + public LabelSelector getClusterDeploymentSelector() { return clusterDeploymentSelector; } @JsonProperty("clusterDeploymentSelector") - public void setClusterDeploymentSelector(io.fabric8.kubernetes.api.model.LabelSelector clusterDeploymentSelector) { + public void setClusterDeploymentSelector(LabelSelector clusterDeploymentSelector) { this.clusterDeploymentSelector = clusterDeploymentSelector; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterState.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterState.java index 104332ee1cf..a6eea34ef7c 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterState.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ClusterState.java @@ -18,6 +18,7 @@ import io.fabric8.kubernetes.api.model.LabelSelector; import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.Namespaced; +import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; import io.fabric8.kubernetes.api.model.PodTemplateSpec; @@ -48,7 +49,7 @@ "" }) @Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { - @BuildableReference(io.fabric8.kubernetes.api.model.ObjectMeta.class), + @BuildableReference(ObjectMeta.class), @BuildableReference(LabelSelector.class), @BuildableReference(Container.class), @BuildableReference(PodTemplateSpec.class), @@ -82,7 +83,7 @@ public class ClusterState implements Editable , HasMetadata @JsonProperty("kind") private String kind = "ClusterState"; @JsonProperty("metadata") - private io.fabric8.kubernetes.api.model.ObjectMeta metadata; + private ObjectMeta metadata; @JsonProperty("spec") private ClusterStateSpec spec; @JsonProperty("status") @@ -97,7 +98,7 @@ public class ClusterState implements Editable , HasMetadata public ClusterState() { } - public ClusterState(String apiVersion, String kind, io.fabric8.kubernetes.api.model.ObjectMeta metadata, ClusterStateSpec spec, ClusterStateStatus status) { + public ClusterState(String apiVersion, String kind, ObjectMeta metadata, ClusterStateSpec spec, ClusterStateStatus status) { super(); this.apiVersion = apiVersion; this.kind = kind; @@ -147,12 +148,12 @@ public void setKind(String kind) { } @JsonProperty("metadata") - public io.fabric8.kubernetes.api.model.ObjectMeta getMetadata() { + public ObjectMeta getMetadata() { return metadata; } @JsonProperty("metadata") - public void setMetadata(io.fabric8.kubernetes.api.model.ObjectMeta metadata) { + public void setMetadata(ObjectMeta metadata) { this.metadata = metadata; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ControllerConfig.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ControllerConfig.java index 96d35fe882e..ba1236536d4 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ControllerConfig.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ControllerConfig.java @@ -36,7 +36,8 @@ "concurrentReconciles", "queueBurst", "queueQPS", - "replicas" + "replicas", + "resources" }) @ToString @EqualsAndHashCode @@ -71,6 +72,8 @@ public class ControllerConfig implements Editable , Kub private Integer queueQPS; @JsonProperty("replicas") private Integer replicas; + @JsonProperty("resources") + private ResourceRequirements resources; @JsonIgnore private Map additionalProperties = new LinkedHashMap(); @@ -81,7 +84,7 @@ public class ControllerConfig implements Editable , Kub public ControllerConfig() { } - public ControllerConfig(Integer clientBurst, Integer clientQPS, Integer concurrentReconciles, Integer queueBurst, Integer queueQPS, Integer replicas) { + public ControllerConfig(Integer clientBurst, Integer clientQPS, Integer concurrentReconciles, Integer queueBurst, Integer queueQPS, Integer replicas, ResourceRequirements resources) { super(); this.clientBurst = clientBurst; this.clientQPS = clientQPS; @@ -89,6 +92,7 @@ public ControllerConfig(Integer clientBurst, Integer clientQPS, Integer concurre this.queueBurst = queueBurst; this.queueQPS = queueQPS; this.replicas = replicas; + this.resources = resources; } @JsonProperty("clientBurst") @@ -151,6 +155,16 @@ public void setReplicas(Integer replicas) { this.replicas = replicas; } + @JsonProperty("resources") + public ResourceRequirements getResources() { + return resources; + } + + @JsonProperty("resources") + public void setResources(ResourceRequirements resources) { + this.resources = resources; + } + @JsonIgnore public ControllerConfigBuilder edit() { return new ControllerConfigBuilder(this); diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/DNSZone.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/DNSZone.java index d2f3a4880a7..77f134c7ca6 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/DNSZone.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/DNSZone.java @@ -18,6 +18,7 @@ import io.fabric8.kubernetes.api.model.LabelSelector; import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.Namespaced; +import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; import io.fabric8.kubernetes.api.model.PodTemplateSpec; @@ -48,7 +49,7 @@ "" }) @Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { - @BuildableReference(io.fabric8.kubernetes.api.model.ObjectMeta.class), + @BuildableReference(ObjectMeta.class), @BuildableReference(LabelSelector.class), @BuildableReference(Container.class), @BuildableReference(PodTemplateSpec.class), @@ -82,7 +83,7 @@ public class DNSZone implements Editable , HasMetadata, Namespac @JsonProperty("kind") private String kind = "DNSZone"; @JsonProperty("metadata") - private io.fabric8.kubernetes.api.model.ObjectMeta metadata; + private ObjectMeta metadata; @JsonProperty("spec") private DNSZoneSpec spec; @JsonProperty("status") @@ -97,7 +98,7 @@ public class DNSZone implements Editable , HasMetadata, Namespac public DNSZone() { } - public DNSZone(String apiVersion, String kind, io.fabric8.kubernetes.api.model.ObjectMeta metadata, DNSZoneSpec spec, DNSZoneStatus status) { + public DNSZone(String apiVersion, String kind, ObjectMeta metadata, DNSZoneSpec spec, DNSZoneStatus status) { super(); this.apiVersion = apiVersion; this.kind = kind; @@ -147,12 +148,12 @@ public void setKind(String kind) { } @JsonProperty("metadata") - public io.fabric8.kubernetes.api.model.ObjectMeta getMetadata() { + public ObjectMeta getMetadata() { return metadata; } @JsonProperty("metadata") - public void setMetadata(io.fabric8.kubernetes.api.model.ObjectMeta metadata) { + public void setMetadata(ObjectMeta metadata) { this.metadata = metadata; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/DeploymentConfig.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/DeploymentConfig.java index 2b12fc7a1c7..ba111a22fc5 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/DeploymentConfig.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/DeploymentConfig.java @@ -21,6 +21,7 @@ import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; import io.sundr.builder.annotations.Buildable; import io.sundr.builder.annotations.BuildableReference; import lombok.EqualsAndHashCode; @@ -44,7 +45,7 @@ @BuildableReference(LabelSelector.class), @BuildableReference(Container.class), @BuildableReference(PodTemplateSpec.class), - @BuildableReference(io.fabric8.kubernetes.api.model.ResourceRequirements.class), + @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), @BuildableReference(LocalObjectReference.class), @@ -57,7 +58,7 @@ public class DeploymentConfig implements Editable , Kub @JsonProperty("deploymentName") private String deploymentName; @JsonProperty("resources") - private io.fabric8.kubernetes.api.model.ResourceRequirements resources; + private ResourceRequirements resources; @JsonIgnore private Map additionalProperties = new LinkedHashMap(); @@ -68,7 +69,7 @@ public class DeploymentConfig implements Editable , Kub public DeploymentConfig() { } - public DeploymentConfig(String deploymentName, io.fabric8.kubernetes.api.model.ResourceRequirements resources) { + public DeploymentConfig(String deploymentName, ResourceRequirements resources) { super(); this.deploymentName = deploymentName; this.resources = resources; @@ -85,12 +86,12 @@ public void setDeploymentName(String deploymentName) { } @JsonProperty("resources") - public io.fabric8.kubernetes.api.model.ResourceRequirements getResources() { + public ResourceRequirements getResources() { return resources; } @JsonProperty("resources") - public void setResources(io.fabric8.kubernetes.api.model.ResourceRequirements resources) { + public void setResources(ResourceRequirements resources) { this.resources = resources; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/FailedProvisionAWSConfig.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/FailedProvisionAWSConfig.java index 3a6acd1b391..52ab64c9419 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/FailedProvisionAWSConfig.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/FailedProvisionAWSConfig.java @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -49,7 +50,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -59,7 +60,7 @@ public class FailedProvisionAWSConfig implements Editable , Kuberne { @JsonProperty("credentialsSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef; + private LocalObjectReference credentialsSecretRef; @JsonIgnore private Map additionalProperties = new LinkedHashMap(); @@ -65,18 +66,18 @@ public class GCPDNSZoneSpec implements Editable , Kuberne public GCPDNSZoneSpec() { } - public GCPDNSZoneSpec(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef) { + public GCPDNSZoneSpec(LocalObjectReference credentialsSecretRef) { super(); this.credentialsSecretRef = credentialsSecretRef; } @JsonProperty("credentialsSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getCredentialsSecretRef() { + public LocalObjectReference getCredentialsSecretRef() { return credentialsSecretRef; } @JsonProperty("credentialsSecretRef") - public void setCredentialsSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef) { + public void setCredentialsSecretRef(LocalObjectReference credentialsSecretRef) { this.credentialsSecretRef = credentialsSecretRef; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AlibabaCloudClusterDeprovision.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/GCPPrivateServiceConnectConfig.java similarity index 67% rename from kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AlibabaCloudClusterDeprovision.java rename to kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/GCPPrivateServiceConnectConfig.java index 132ce00fbb4..582433acc4a 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/AlibabaCloudClusterDeprovision.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/GCPPrivateServiceConnectConfig.java @@ -1,7 +1,9 @@ package io.fabric8.openshift.api.model.hive.v1; +import java.util.ArrayList; import java.util.LinkedHashMap; +import java.util.List; import java.util.Map; import javax.annotation.Generated; import com.fasterxml.jackson.annotation.JsonAnyGetter; @@ -16,6 +18,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -30,9 +33,8 @@ @JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) @JsonInclude(JsonInclude.Include.NON_NULL) @JsonPropertyOrder({ - "baseDomain", "credentialsSecretRef", - "region" + "endpointVPCInventory" }) @ToString @EqualsAndHashCode @@ -48,19 +50,18 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") -public class AlibabaCloudClusterDeprovision implements Editable , KubernetesResource +public class GCPPrivateServiceConnectConfig implements Editable , KubernetesResource { - @JsonProperty("baseDomain") - private String baseDomain; @JsonProperty("credentialsSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef; - @JsonProperty("region") - private String region; + private LocalObjectReference credentialsSecretRef; + @JsonProperty("endpointVPCInventory") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + private List endpointVPCInventory = new ArrayList<>(); @JsonIgnore private Map additionalProperties = new LinkedHashMap(); @@ -68,53 +69,43 @@ public class AlibabaCloudClusterDeprovision implements Editable endpointVPCInventory) { super(); - this.baseDomain = baseDomain; this.credentialsSecretRef = credentialsSecretRef; - this.region = region; - } - - @JsonProperty("baseDomain") - public String getBaseDomain() { - return baseDomain; - } - - @JsonProperty("baseDomain") - public void setBaseDomain(String baseDomain) { - this.baseDomain = baseDomain; + this.endpointVPCInventory = endpointVPCInventory; } @JsonProperty("credentialsSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getCredentialsSecretRef() { + public LocalObjectReference getCredentialsSecretRef() { return credentialsSecretRef; } @JsonProperty("credentialsSecretRef") - public void setCredentialsSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef) { + public void setCredentialsSecretRef(LocalObjectReference credentialsSecretRef) { this.credentialsSecretRef = credentialsSecretRef; } - @JsonProperty("region") - public String getRegion() { - return region; + @JsonProperty("endpointVPCInventory") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + public List getEndpointVPCInventory() { + return endpointVPCInventory; } - @JsonProperty("region") - public void setRegion(String region) { - this.region = region; + @JsonProperty("endpointVPCInventory") + public void setEndpointVPCInventory(List endpointVPCInventory) { + this.endpointVPCInventory = endpointVPCInventory; } @JsonIgnore - public AlibabaCloudClusterDeprovisionBuilder edit() { - return new AlibabaCloudClusterDeprovisionBuilder(this); + public GCPPrivateServiceConnectConfigBuilder edit() { + return new GCPPrivateServiceConnectConfigBuilder(this); } @JsonIgnore - public AlibabaCloudClusterDeprovisionBuilder toBuilder() { + public GCPPrivateServiceConnectConfigBuilder toBuilder() { return edit(); } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/GCPPrivateServiceConnectInventory.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/GCPPrivateServiceConnectInventory.java new file mode 100644 index 00000000000..bd6e860d1d2 --- /dev/null +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/GCPPrivateServiceConnectInventory.java @@ -0,0 +1,126 @@ + +package io.fabric8.openshift.api.model.hive.v1; + +import java.util.ArrayList; +import java.util.LinkedHashMap; +import java.util.List; +import java.util.Map; +import javax.annotation.Generated; +import com.fasterxml.jackson.annotation.JsonAnyGetter; +import com.fasterxml.jackson.annotation.JsonAnySetter; +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonPropertyOrder; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.fabric8.kubernetes.api.builder.Editable; +import io.fabric8.kubernetes.api.model.Container; +import io.fabric8.kubernetes.api.model.IntOrString; +import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; +import io.fabric8.kubernetes.api.model.ObjectReference; +import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; +import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; +import io.sundr.builder.annotations.Buildable; +import io.sundr.builder.annotations.BuildableReference; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.Accessors; + +@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) +@JsonInclude(JsonInclude.Include.NON_NULL) +@JsonPropertyOrder({ + "network", + "subnets" +}) +@ToString +@EqualsAndHashCode +@Accessors(prefix = { + "_", + "" +}) +@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { + @BuildableReference(ObjectMeta.class), + @BuildableReference(LabelSelector.class), + @BuildableReference(Container.class), + @BuildableReference(PodTemplateSpec.class), + @BuildableReference(ResourceRequirements.class), + @BuildableReference(IntOrString.class), + @BuildableReference(ObjectReference.class), + @BuildableReference(LocalObjectReference.class), + @BuildableReference(PersistentVolumeClaim.class) +}) +@Generated("jsonschema2pojo") +public class GCPPrivateServiceConnectInventory implements Editable , KubernetesResource +{ + + @JsonProperty("network") + private String network; + @JsonProperty("subnets") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + private List subnets = new ArrayList<>(); + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public GCPPrivateServiceConnectInventory() { + } + + public GCPPrivateServiceConnectInventory(String network, List subnets) { + super(); + this.network = network; + this.subnets = subnets; + } + + @JsonProperty("network") + public String getNetwork() { + return network; + } + + @JsonProperty("network") + public void setNetwork(String network) { + this.network = network; + } + + @JsonProperty("subnets") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + public List getSubnets() { + return subnets; + } + + @JsonProperty("subnets") + public void setSubnets(List subnets) { + this.subnets = subnets; + } + + @JsonIgnore + public GCPPrivateServiceConnectInventoryBuilder edit() { + return new GCPPrivateServiceConnectInventoryBuilder(this); + } + + @JsonIgnore + public GCPPrivateServiceConnectInventoryBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/GCPPrivateServiceConnectSubnet.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/GCPPrivateServiceConnectSubnet.java new file mode 100644 index 00000000000..0bcaf177ef5 --- /dev/null +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/GCPPrivateServiceConnectSubnet.java @@ -0,0 +1,122 @@ + +package io.fabric8.openshift.api.model.hive.v1; + +import java.util.LinkedHashMap; +import java.util.Map; +import javax.annotation.Generated; +import com.fasterxml.jackson.annotation.JsonAnyGetter; +import com.fasterxml.jackson.annotation.JsonAnySetter; +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonPropertyOrder; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.fabric8.kubernetes.api.builder.Editable; +import io.fabric8.kubernetes.api.model.Container; +import io.fabric8.kubernetes.api.model.IntOrString; +import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; +import io.fabric8.kubernetes.api.model.ObjectReference; +import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; +import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; +import io.sundr.builder.annotations.Buildable; +import io.sundr.builder.annotations.BuildableReference; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.Accessors; + +@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) +@JsonInclude(JsonInclude.Include.NON_NULL) +@JsonPropertyOrder({ + "region", + "subnet" +}) +@ToString +@EqualsAndHashCode +@Accessors(prefix = { + "_", + "" +}) +@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { + @BuildableReference(ObjectMeta.class), + @BuildableReference(LabelSelector.class), + @BuildableReference(Container.class), + @BuildableReference(PodTemplateSpec.class), + @BuildableReference(ResourceRequirements.class), + @BuildableReference(IntOrString.class), + @BuildableReference(ObjectReference.class), + @BuildableReference(LocalObjectReference.class), + @BuildableReference(PersistentVolumeClaim.class) +}) +@Generated("jsonschema2pojo") +public class GCPPrivateServiceConnectSubnet implements Editable , KubernetesResource +{ + + @JsonProperty("region") + private String region; + @JsonProperty("subnet") + private String subnet; + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public GCPPrivateServiceConnectSubnet() { + } + + public GCPPrivateServiceConnectSubnet(String region, String subnet) { + super(); + this.region = region; + this.subnet = subnet; + } + + @JsonProperty("region") + public String getRegion() { + return region; + } + + @JsonProperty("region") + public void setRegion(String region) { + this.region = region; + } + + @JsonProperty("subnet") + public String getSubnet() { + return subnet; + } + + @JsonProperty("subnet") + public void setSubnet(String subnet) { + this.subnet = subnet; + } + + @JsonIgnore + public GCPPrivateServiceConnectSubnetBuilder edit() { + return new GCPPrivateServiceConnectSubnetBuilder(this); + } + + @JsonIgnore + public GCPPrivateServiceConnectSubnetBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/HibernationConfig.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/HibernationConfig.java index 781d55c2e45..3ad070cbbc3 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/HibernationConfig.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/HibernationConfig.java @@ -13,7 +13,6 @@ import com.fasterxml.jackson.databind.annotation.JsonDeserialize; import io.fabric8.kubernetes.api.builder.Editable; import io.fabric8.kubernetes.api.model.Container; -import io.fabric8.kubernetes.api.model.Duration; import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; @@ -56,7 +55,7 @@ public class HibernationConfig implements Editable , K { @JsonProperty("resumeTimeout") - private Duration resumeTimeout; + private String resumeTimeout; @JsonIgnore private Map additionalProperties = new LinkedHashMap(); @@ -67,18 +66,18 @@ public class HibernationConfig implements Editable , K public HibernationConfig() { } - public HibernationConfig(Duration resumeTimeout) { + public HibernationConfig(String resumeTimeout) { super(); this.resumeTimeout = resumeTimeout; } @JsonProperty("resumeTimeout") - public Duration getResumeTimeout() { + public String getResumeTimeout() { return resumeTimeout; } @JsonProperty("resumeTimeout") - public void setResumeTimeout(Duration resumeTimeout) { + public void setResumeTimeout(String resumeTimeout) { this.resumeTimeout = resumeTimeout; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/HiveConfig.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/HiveConfig.java index a4561fcf8bb..1126ab012ef 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/HiveConfig.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/HiveConfig.java @@ -17,6 +17,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.LabelSelector; import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; import io.fabric8.kubernetes.api.model.PodTemplateSpec; @@ -47,7 +48,7 @@ "" }) @Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { - @BuildableReference(io.fabric8.kubernetes.api.model.ObjectMeta.class), + @BuildableReference(ObjectMeta.class), @BuildableReference(LabelSelector.class), @BuildableReference(Container.class), @BuildableReference(PodTemplateSpec.class), @@ -81,7 +82,7 @@ public class HiveConfig implements Editable , HasMetadata @JsonProperty("kind") private String kind = "HiveConfig"; @JsonProperty("metadata") - private io.fabric8.kubernetes.api.model.ObjectMeta metadata; + private ObjectMeta metadata; @JsonProperty("spec") private HiveConfigSpec spec; @JsonProperty("status") @@ -96,7 +97,7 @@ public class HiveConfig implements Editable , HasMetadata public HiveConfig() { } - public HiveConfig(String apiVersion, String kind, io.fabric8.kubernetes.api.model.ObjectMeta metadata, HiveConfigSpec spec, HiveConfigStatus status) { + public HiveConfig(String apiVersion, String kind, ObjectMeta metadata, HiveConfigSpec spec, HiveConfigStatus status) { super(); this.apiVersion = apiVersion; this.kind = kind; @@ -146,12 +147,12 @@ public void setKind(String kind) { } @JsonProperty("metadata") - public io.fabric8.kubernetes.api.model.ObjectMeta getMetadata() { + public ObjectMeta getMetadata() { return metadata; } @JsonProperty("metadata") - public void setMetadata(io.fabric8.kubernetes.api.model.ObjectMeta metadata) { + public void setMetadata(ObjectMeta metadata) { this.metadata = metadata; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/HiveConfigSpec.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/HiveConfigSpec.java index 6999151bd70..900789c3420 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/HiveConfigSpec.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/HiveConfigSpec.java @@ -18,6 +18,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -37,6 +38,7 @@ "argoCDConfig", "awsPrivateLink", "backup", + "clusterVersionPollInterval", "controllersConfig", "deleteProtection", "deploymentConfig", @@ -47,9 +49,11 @@ "featureGates", "globalPullSecretRef", "logLevel", + "machinePoolPollInterval", "maintenanceMode", "managedDomains", "metricsConfig", + "privateLink", "releaseImageVerificationConfigMapRef", "serviceProviderCredentialsConfig", "syncSetReapplyInterval", @@ -69,7 +73,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -78,13 +82,15 @@ public class HiveConfigSpec implements Editable , Kuberne @JsonProperty("additionalCertificateAuthoritiesSecretRef") @JsonInclude(JsonInclude.Include.NON_EMPTY) - private List additionalCertificateAuthoritiesSecretRef = new ArrayList<>(); + private List additionalCertificateAuthoritiesSecretRef = new ArrayList<>(); @JsonProperty("argoCDConfig") private ArgoCDConfig argoCDConfig; @JsonProperty("awsPrivateLink") private AWSPrivateLinkConfig awsPrivateLink; @JsonProperty("backup") private BackupConfig backup; + @JsonProperty("clusterVersionPollInterval") + private String clusterVersionPollInterval; @JsonProperty("controllersConfig") private ControllersConfig controllersConfig; @JsonProperty("deleteProtection") @@ -104,9 +110,11 @@ public class HiveConfigSpec implements Editable , Kuberne @JsonProperty("featureGates") private FeatureGateSelection featureGates; @JsonProperty("globalPullSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference globalPullSecretRef; + private LocalObjectReference globalPullSecretRef; @JsonProperty("logLevel") private String logLevel; + @JsonProperty("machinePoolPollInterval") + private String machinePoolPollInterval; @JsonProperty("maintenanceMode") private Boolean maintenanceMode; @JsonProperty("managedDomains") @@ -114,6 +122,8 @@ public class HiveConfigSpec implements Editable , Kuberne private List managedDomains = new ArrayList<>(); @JsonProperty("metricsConfig") private MetricsConfig metricsConfig; + @JsonProperty("privateLink") + private PrivateLinkConfig privateLink; @JsonProperty("releaseImageVerificationConfigMapRef") private ReleaseImageVerificationConfigMapReference releaseImageVerificationConfigMapRef; @JsonProperty("serviceProviderCredentialsConfig") @@ -132,12 +142,13 @@ public class HiveConfigSpec implements Editable , Kuberne public HiveConfigSpec() { } - public HiveConfigSpec(List additionalCertificateAuthoritiesSecretRef, ArgoCDConfig argoCDConfig, AWSPrivateLinkConfig awsPrivateLink, BackupConfig backup, ControllersConfig controllersConfig, String deleteProtection, List deploymentConfig, Boolean deprovisionsDisabled, List disabledControllers, Boolean exportMetrics, FailedProvisionConfig failedProvisionConfig, FeatureGateSelection featureGates, io.fabric8.kubernetes.api.model.LocalObjectReference globalPullSecretRef, String logLevel, Boolean maintenanceMode, List managedDomains, MetricsConfig metricsConfig, ReleaseImageVerificationConfigMapReference releaseImageVerificationConfigMapRef, ServiceProviderCredentials serviceProviderCredentialsConfig, String syncSetReapplyInterval, String targetNamespace) { + public HiveConfigSpec(List additionalCertificateAuthoritiesSecretRef, ArgoCDConfig argoCDConfig, AWSPrivateLinkConfig awsPrivateLink, BackupConfig backup, String clusterVersionPollInterval, ControllersConfig controllersConfig, String deleteProtection, List deploymentConfig, Boolean deprovisionsDisabled, List disabledControllers, Boolean exportMetrics, FailedProvisionConfig failedProvisionConfig, FeatureGateSelection featureGates, LocalObjectReference globalPullSecretRef, String logLevel, String machinePoolPollInterval, Boolean maintenanceMode, List managedDomains, MetricsConfig metricsConfig, PrivateLinkConfig privateLink, ReleaseImageVerificationConfigMapReference releaseImageVerificationConfigMapRef, ServiceProviderCredentials serviceProviderCredentialsConfig, String syncSetReapplyInterval, String targetNamespace) { super(); this.additionalCertificateAuthoritiesSecretRef = additionalCertificateAuthoritiesSecretRef; this.argoCDConfig = argoCDConfig; this.awsPrivateLink = awsPrivateLink; this.backup = backup; + this.clusterVersionPollInterval = clusterVersionPollInterval; this.controllersConfig = controllersConfig; this.deleteProtection = deleteProtection; this.deploymentConfig = deploymentConfig; @@ -148,9 +159,11 @@ public HiveConfigSpec(List this.featureGates = featureGates; this.globalPullSecretRef = globalPullSecretRef; this.logLevel = logLevel; + this.machinePoolPollInterval = machinePoolPollInterval; this.maintenanceMode = maintenanceMode; this.managedDomains = managedDomains; this.metricsConfig = metricsConfig; + this.privateLink = privateLink; this.releaseImageVerificationConfigMapRef = releaseImageVerificationConfigMapRef; this.serviceProviderCredentialsConfig = serviceProviderCredentialsConfig; this.syncSetReapplyInterval = syncSetReapplyInterval; @@ -159,12 +172,12 @@ public HiveConfigSpec(List @JsonProperty("additionalCertificateAuthoritiesSecretRef") @JsonInclude(JsonInclude.Include.NON_EMPTY) - public List getAdditionalCertificateAuthoritiesSecretRef() { + public List getAdditionalCertificateAuthoritiesSecretRef() { return additionalCertificateAuthoritiesSecretRef; } @JsonProperty("additionalCertificateAuthoritiesSecretRef") - public void setAdditionalCertificateAuthoritiesSecretRef(List additionalCertificateAuthoritiesSecretRef) { + public void setAdditionalCertificateAuthoritiesSecretRef(List additionalCertificateAuthoritiesSecretRef) { this.additionalCertificateAuthoritiesSecretRef = additionalCertificateAuthoritiesSecretRef; } @@ -198,6 +211,16 @@ public void setBackup(BackupConfig backup) { this.backup = backup; } + @JsonProperty("clusterVersionPollInterval") + public String getClusterVersionPollInterval() { + return clusterVersionPollInterval; + } + + @JsonProperty("clusterVersionPollInterval") + public void setClusterVersionPollInterval(String clusterVersionPollInterval) { + this.clusterVersionPollInterval = clusterVersionPollInterval; + } + @JsonProperty("controllersConfig") public ControllersConfig getControllersConfig() { return controllersConfig; @@ -281,12 +304,12 @@ public void setFeatureGates(FeatureGateSelection featureGates) { } @JsonProperty("globalPullSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getGlobalPullSecretRef() { + public LocalObjectReference getGlobalPullSecretRef() { return globalPullSecretRef; } @JsonProperty("globalPullSecretRef") - public void setGlobalPullSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference globalPullSecretRef) { + public void setGlobalPullSecretRef(LocalObjectReference globalPullSecretRef) { this.globalPullSecretRef = globalPullSecretRef; } @@ -300,6 +323,16 @@ public void setLogLevel(String logLevel) { this.logLevel = logLevel; } + @JsonProperty("machinePoolPollInterval") + public String getMachinePoolPollInterval() { + return machinePoolPollInterval; + } + + @JsonProperty("machinePoolPollInterval") + public void setMachinePoolPollInterval(String machinePoolPollInterval) { + this.machinePoolPollInterval = machinePoolPollInterval; + } + @JsonProperty("maintenanceMode") public Boolean getMaintenanceMode() { return maintenanceMode; @@ -331,6 +364,16 @@ public void setMetricsConfig(MetricsConfig metricsConfig) { this.metricsConfig = metricsConfig; } + @JsonProperty("privateLink") + public PrivateLinkConfig getPrivateLink() { + return privateLink; + } + + @JsonProperty("privateLink") + public void setPrivateLink(PrivateLinkConfig privateLink) { + this.privateLink = privateLink; + } + @JsonProperty("releaseImageVerificationConfigMapRef") public ReleaseImageVerificationConfigMapReference getReleaseImageVerificationConfigMapRef() { return releaseImageVerificationConfigMapRef; diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/IBMClusterDeprovision.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/IBMClusterDeprovision.java index d174c91723d..b95dd434260 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/IBMClusterDeprovision.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/IBMClusterDeprovision.java @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -48,7 +49,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -58,7 +59,7 @@ public class IBMClusterDeprovision implements Editable , HasMetadata, @JsonProperty("kind") private String kind = "MachinePool"; @JsonProperty("metadata") - private io.fabric8.kubernetes.api.model.ObjectMeta metadata; + private ObjectMeta metadata; @JsonProperty("spec") private MachinePoolSpec spec; @JsonProperty("status") @@ -97,7 +98,7 @@ public class MachinePool implements Editable , HasMetadata, public MachinePool() { } - public MachinePool(String apiVersion, String kind, io.fabric8.kubernetes.api.model.ObjectMeta metadata, MachinePoolSpec spec, MachinePoolStatus status) { + public MachinePool(String apiVersion, String kind, ObjectMeta metadata, MachinePoolSpec spec, MachinePoolStatus status) { super(); this.apiVersion = apiVersion; this.kind = kind; @@ -147,12 +148,12 @@ public void setKind(String kind) { } @JsonProperty("metadata") - public io.fabric8.kubernetes.api.model.ObjectMeta getMetadata() { + public ObjectMeta getMetadata() { return metadata; } @JsonProperty("metadata") - public void setMetadata(io.fabric8.kubernetes.api.model.ObjectMeta metadata) { + public void setMetadata(ObjectMeta metadata) { this.metadata = metadata; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/MachinePoolNameLease.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/MachinePoolNameLease.java index 612ff6850d0..980e4bd6b66 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/MachinePoolNameLease.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/MachinePoolNameLease.java @@ -18,6 +18,7 @@ import io.fabric8.kubernetes.api.model.LabelSelector; import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.Namespaced; +import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; import io.fabric8.kubernetes.api.model.PodTemplateSpec; @@ -48,7 +49,7 @@ "" }) @Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { - @BuildableReference(io.fabric8.kubernetes.api.model.ObjectMeta.class), + @BuildableReference(ObjectMeta.class), @BuildableReference(LabelSelector.class), @BuildableReference(Container.class), @BuildableReference(PodTemplateSpec.class), @@ -82,7 +83,7 @@ public class MachinePoolNameLease implements Editable , KubernetesResource { - @JsonProperty("alibabacloud") - private io.fabric8.openshift.api.model.hive.alibabacloud.v1.MachinePool alibabacloud; @JsonProperty("aws") private io.fabric8.openshift.api.model.hive.aws.v1.MachinePoolPlatform aws; @JsonProperty("azure") - private io.fabric8.openshift.api.model.hive.azure.v1.MachinePool azure; + private MachinePool azure; @JsonProperty("gcp") private io.fabric8.openshift.api.model.hive.gcp.v1.MachinePool gcp; @JsonProperty("ibmcloud") @@ -87,9 +85,8 @@ public class MachinePoolPlatform implements Editable public MachinePoolPlatform() { } - public MachinePoolPlatform(io.fabric8.openshift.api.model.hive.alibabacloud.v1.MachinePool alibabacloud, io.fabric8.openshift.api.model.hive.aws.v1.MachinePoolPlatform aws, io.fabric8.openshift.api.model.hive.azure.v1.MachinePool azure, io.fabric8.openshift.api.model.hive.gcp.v1.MachinePool gcp, io.fabric8.openshift.api.model.hive.ibmcloud.v1.MachinePool ibmcloud, io.fabric8.openshift.api.model.hive.openstack.v1.MachinePool openstack, io.fabric8.openshift.api.model.hive.ovirt.v1.MachinePool ovirt, io.fabric8.openshift.api.model.hive.vsphere.v1.MachinePool vsphere) { + public MachinePoolPlatform(io.fabric8.openshift.api.model.hive.aws.v1.MachinePoolPlatform aws, MachinePool azure, io.fabric8.openshift.api.model.hive.gcp.v1.MachinePool gcp, io.fabric8.openshift.api.model.hive.ibmcloud.v1.MachinePool ibmcloud, io.fabric8.openshift.api.model.hive.openstack.v1.MachinePool openstack, io.fabric8.openshift.api.model.hive.ovirt.v1.MachinePool ovirt, io.fabric8.openshift.api.model.hive.vsphere.v1.MachinePool vsphere) { super(); - this.alibabacloud = alibabacloud; this.aws = aws; this.azure = azure; this.gcp = gcp; @@ -99,16 +96,6 @@ public MachinePoolPlatform(io.fabric8.openshift.api.model.hive.alibabacloud.v1.M this.vsphere = vsphere; } - @JsonProperty("alibabacloud") - public io.fabric8.openshift.api.model.hive.alibabacloud.v1.MachinePool getAlibabacloud() { - return alibabacloud; - } - - @JsonProperty("alibabacloud") - public void setAlibabacloud(io.fabric8.openshift.api.model.hive.alibabacloud.v1.MachinePool alibabacloud) { - this.alibabacloud = alibabacloud; - } - @JsonProperty("aws") public io.fabric8.openshift.api.model.hive.aws.v1.MachinePoolPlatform getAws() { return aws; @@ -120,12 +107,12 @@ public void setAws(io.fabric8.openshift.api.model.hive.aws.v1.MachinePoolPlatfor } @JsonProperty("azure") - public io.fabric8.openshift.api.model.hive.azure.v1.MachinePool getAzure() { + public MachinePool getAzure() { return azure; } @JsonProperty("azure") - public void setAzure(io.fabric8.openshift.api.model.hive.azure.v1.MachinePool azure) { + public void setAzure(MachinePool azure) { this.azure = azure; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/MachinePoolSpec.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/MachinePoolSpec.java index 044e1465555..da755f93431 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/MachinePoolSpec.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/MachinePoolSpec.java @@ -18,6 +18,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -36,6 +37,7 @@ "autoscaling", "clusterDeploymentRef", "labels", + "machineLabels", "name", "platform", "replicas", @@ -55,7 +57,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -65,10 +67,13 @@ public class MachinePoolSpec implements Editable , Kuber @JsonProperty("autoscaling") private MachinePoolAutoscaling autoscaling; @JsonProperty("clusterDeploymentRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference clusterDeploymentRef; + private LocalObjectReference clusterDeploymentRef; @JsonProperty("labels") @JsonInclude(JsonInclude.Include.NON_EMPTY) private Map labels = new LinkedHashMap<>(); + @JsonProperty("machineLabels") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + private Map machineLabels = new LinkedHashMap<>(); @JsonProperty("name") private String name; @JsonProperty("platform") @@ -88,11 +93,12 @@ public class MachinePoolSpec implements Editable , Kuber public MachinePoolSpec() { } - public MachinePoolSpec(MachinePoolAutoscaling autoscaling, io.fabric8.kubernetes.api.model.LocalObjectReference clusterDeploymentRef, Map labels, String name, MachinePoolPlatform platform, Long replicas, List taints) { + public MachinePoolSpec(MachinePoolAutoscaling autoscaling, LocalObjectReference clusterDeploymentRef, Map labels, Map machineLabels, String name, MachinePoolPlatform platform, Long replicas, List taints) { super(); this.autoscaling = autoscaling; this.clusterDeploymentRef = clusterDeploymentRef; this.labels = labels; + this.machineLabels = machineLabels; this.name = name; this.platform = platform; this.replicas = replicas; @@ -110,12 +116,12 @@ public void setAutoscaling(MachinePoolAutoscaling autoscaling) { } @JsonProperty("clusterDeploymentRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getClusterDeploymentRef() { + public LocalObjectReference getClusterDeploymentRef() { return clusterDeploymentRef; } @JsonProperty("clusterDeploymentRef") - public void setClusterDeploymentRef(io.fabric8.kubernetes.api.model.LocalObjectReference clusterDeploymentRef) { + public void setClusterDeploymentRef(LocalObjectReference clusterDeploymentRef) { this.clusterDeploymentRef = clusterDeploymentRef; } @@ -130,6 +136,17 @@ public void setLabels(Map labels) { this.labels = labels; } + @JsonProperty("machineLabels") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + public Map getMachineLabels() { + return machineLabels; + } + + @JsonProperty("machineLabels") + public void setMachineLabels(Map machineLabels) { + this.machineLabels = machineLabels; + } + @JsonProperty("name") public String getName() { return name; diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/MachinePoolStatus.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/MachinePoolStatus.java index b4112719a14..b2b7e834985 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/MachinePoolStatus.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/MachinePoolStatus.java @@ -34,8 +34,10 @@ @JsonInclude(JsonInclude.Include.NON_NULL) @JsonPropertyOrder({ "conditions", + "controlledByReplica", "machineSets", "ownedLabels", + "ownedMachineLabels", "ownedTaints", "replicas" }) @@ -63,12 +65,17 @@ public class MachinePoolStatus implements Editable , K @JsonProperty("conditions") @JsonInclude(JsonInclude.Include.NON_EMPTY) private List conditions = new ArrayList<>(); + @JsonProperty("controlledByReplica") + private Long controlledByReplica; @JsonProperty("machineSets") @JsonInclude(JsonInclude.Include.NON_EMPTY) private List machineSets = new ArrayList<>(); @JsonProperty("ownedLabels") @JsonInclude(JsonInclude.Include.NON_EMPTY) private List ownedLabels = new ArrayList<>(); + @JsonProperty("ownedMachineLabels") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + private List ownedMachineLabels = new ArrayList<>(); @JsonProperty("ownedTaints") @JsonInclude(JsonInclude.Include.NON_EMPTY) private List ownedTaints = new ArrayList<>(); @@ -84,11 +91,13 @@ public class MachinePoolStatus implements Editable , K public MachinePoolStatus() { } - public MachinePoolStatus(List conditions, List machineSets, List ownedLabels, List ownedTaints, Integer replicas) { + public MachinePoolStatus(List conditions, Long controlledByReplica, List machineSets, List ownedLabels, List ownedMachineLabels, List ownedTaints, Integer replicas) { super(); this.conditions = conditions; + this.controlledByReplica = controlledByReplica; this.machineSets = machineSets; this.ownedLabels = ownedLabels; + this.ownedMachineLabels = ownedMachineLabels; this.ownedTaints = ownedTaints; this.replicas = replicas; } @@ -104,6 +113,16 @@ public void setConditions(List conditions) { this.conditions = conditions; } + @JsonProperty("controlledByReplica") + public Long getControlledByReplica() { + return controlledByReplica; + } + + @JsonProperty("controlledByReplica") + public void setControlledByReplica(Long controlledByReplica) { + this.controlledByReplica = controlledByReplica; + } + @JsonProperty("machineSets") @JsonInclude(JsonInclude.Include.NON_EMPTY) public List getMachineSets() { @@ -126,6 +145,17 @@ public void setOwnedLabels(List ownedLabels) { this.ownedLabels = ownedLabels; } + @JsonProperty("ownedMachineLabels") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + public List getOwnedMachineLabels() { + return ownedMachineLabels; + } + + @JsonProperty("ownedMachineLabels") + public void setOwnedMachineLabels(List ownedMachineLabels) { + this.ownedMachineLabels = ownedMachineLabels; + } + @JsonProperty("ownedTaints") @JsonInclude(JsonInclude.Include.NON_EMPTY) public List getOwnedTaints() { diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ManageDNSAWSConfig.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ManageDNSAWSConfig.java index 5cdb078ea07..a545383f146 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ManageDNSAWSConfig.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ManageDNSAWSConfig.java @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -47,7 +48,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -55,7 +56,7 @@ public class ManageDNSAWSConfig implements Editable , { @JsonProperty("credentialsSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef; + private LocalObjectReference credentialsSecretRef; @JsonProperty("region") private String region; @JsonIgnore @@ -68,19 +69,19 @@ public class ManageDNSAWSConfig implements Editable , public ManageDNSAWSConfig() { } - public ManageDNSAWSConfig(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef, String region) { + public ManageDNSAWSConfig(LocalObjectReference credentialsSecretRef, String region) { super(); this.credentialsSecretRef = credentialsSecretRef; this.region = region; } @JsonProperty("credentialsSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getCredentialsSecretRef() { + public LocalObjectReference getCredentialsSecretRef() { return credentialsSecretRef; } @JsonProperty("credentialsSecretRef") - public void setCredentialsSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef) { + public void setCredentialsSecretRef(LocalObjectReference credentialsSecretRef) { this.credentialsSecretRef = credentialsSecretRef; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ManageDNSAzureConfig.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ManageDNSAzureConfig.java index 89846032e67..36244605286 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ManageDNSAzureConfig.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/ManageDNSAzureConfig.java @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -48,7 +49,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -58,7 +59,7 @@ public class ManageDNSAzureConfig implements Editable , { @JsonProperty("credentialsSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef; + private LocalObjectReference credentialsSecretRef; @JsonIgnore private Map additionalProperties = new LinkedHashMap(); @@ -65,18 +66,18 @@ public class ManageDNSGCPConfig implements Editable , public ManageDNSGCPConfig() { } - public ManageDNSGCPConfig(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef) { + public ManageDNSGCPConfig(LocalObjectReference credentialsSecretRef) { super(); this.credentialsSecretRef = credentialsSecretRef; } @JsonProperty("credentialsSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getCredentialsSecretRef() { + public LocalObjectReference getCredentialsSecretRef() { return credentialsSecretRef; } @JsonProperty("credentialsSecretRef") - public void setCredentialsSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef) { + public void setCredentialsSecretRef(LocalObjectReference credentialsSecretRef) { this.credentialsSecretRef = credentialsSecretRef; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/OpenStackClusterDeprovision.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/OpenStackClusterDeprovision.java index 755e3007e73..8f106be655a 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/OpenStackClusterDeprovision.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/OpenStackClusterDeprovision.java @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -48,7 +49,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -56,11 +57,11 @@ public class OpenStackClusterDeprovision implements Editable additionalProperties = new LinkedHashMap(); @@ -71,7 +72,7 @@ public class OpenStackClusterDeprovision implements Editable additionalProperties = new LinkedHashMap(); @@ -71,7 +72,7 @@ public class OvirtClusterDeprovision implements Editable , KubernetesResource +{ + + @JsonProperty("from") + private String from; + @JsonProperty("op") + private String op; + @JsonProperty("path") + private String path; + @JsonProperty("value") + private String value; + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public PatchEntity() { + } + + public PatchEntity(String from, String op, String path, String value) { + super(); + this.from = from; + this.op = op; + this.path = path; + this.value = value; + } + + @JsonProperty("from") + public String getFrom() { + return from; + } + + @JsonProperty("from") + public void setFrom(String from) { + this.from = from; + } + + @JsonProperty("op") + public String getOp() { + return op; + } + + @JsonProperty("op") + public void setOp(String op) { + this.op = op; + } + + @JsonProperty("path") + public String getPath() { + return path; + } + + @JsonProperty("path") + public void setPath(String path) { + this.path = path; + } + + @JsonProperty("value") + public String getValue() { + return value; + } + + @JsonProperty("value") + public void setValue(String value) { + this.value = value; + } + + @JsonIgnore + public PatchEntityBuilder edit() { + return new PatchEntityBuilder(this); + } + + @JsonIgnore + public PatchEntityBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/Platform.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/Platform.java index 94dfa0e6c1e..72b2c1b651d 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/Platform.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/Platform.java @@ -23,8 +23,6 @@ import io.fabric8.kubernetes.api.model.PodTemplateSpec; import io.fabric8.kubernetes.api.model.ResourceRequirements; import io.fabric8.openshift.api.model.hive.agent.v1.BareMetalPlatform; -import io.fabric8.openshift.api.model.hive.aws.v1.AwsPlatform; -import io.fabric8.openshift.api.model.hive.azure.v1.AzurePlatform; import io.sundr.builder.annotations.Buildable; import io.sundr.builder.annotations.BuildableReference; import lombok.EqualsAndHashCode; @@ -35,7 +33,6 @@ @JsonInclude(JsonInclude.Include.NON_NULL) @JsonPropertyOrder({ "agentBareMetal", - "alibabacloud", "aws", "azure", "baremetal", @@ -69,12 +66,10 @@ public class Platform implements Editable , KubernetesResource @JsonProperty("agentBareMetal") private BareMetalPlatform agentBareMetal; - @JsonProperty("alibabacloud") - private io.fabric8.openshift.api.model.hive.alibabacloud.v1.Platform alibabacloud; @JsonProperty("aws") - private AwsPlatform aws; + private io.fabric8.openshift.api.model.hive.aws.v1.Platform aws; @JsonProperty("azure") - private AzurePlatform azure; + private io.fabric8.openshift.api.model.hive.azure.v1.Platform azure; @JsonProperty("baremetal") private io.fabric8.openshift.api.model.hive.baremetal.v1.Platform baremetal; @JsonProperty("gcp") @@ -99,10 +94,9 @@ public class Platform implements Editable , KubernetesResource public Platform() { } - public Platform(BareMetalPlatform agentBareMetal, io.fabric8.openshift.api.model.hive.alibabacloud.v1.Platform alibabacloud, AwsPlatform aws, AzurePlatform azure, io.fabric8.openshift.api.model.hive.baremetal.v1.Platform baremetal, io.fabric8.openshift.api.model.hive.gcp.v1.Platform gcp, io.fabric8.openshift.api.model.hive.ibmcloud.v1.Platform ibmcloud, io.fabric8.openshift.api.model.hive.none.v1.Platform none, io.fabric8.openshift.api.model.hive.openstack.v1.Platform openstack, io.fabric8.openshift.api.model.hive.ovirt.v1.Platform ovirt, io.fabric8.openshift.api.model.hive.vsphere.v1.Platform vsphere) { + public Platform(BareMetalPlatform agentBareMetal, io.fabric8.openshift.api.model.hive.aws.v1.Platform aws, io.fabric8.openshift.api.model.hive.azure.v1.Platform azure, io.fabric8.openshift.api.model.hive.baremetal.v1.Platform baremetal, io.fabric8.openshift.api.model.hive.gcp.v1.Platform gcp, io.fabric8.openshift.api.model.hive.ibmcloud.v1.Platform ibmcloud, io.fabric8.openshift.api.model.hive.none.v1.Platform none, io.fabric8.openshift.api.model.hive.openstack.v1.Platform openstack, io.fabric8.openshift.api.model.hive.ovirt.v1.Platform ovirt, io.fabric8.openshift.api.model.hive.vsphere.v1.Platform vsphere) { super(); this.agentBareMetal = agentBareMetal; - this.alibabacloud = alibabacloud; this.aws = aws; this.azure = azure; this.baremetal = baremetal; @@ -124,33 +118,23 @@ public void setAgentBareMetal(BareMetalPlatform agentBareMetal) { this.agentBareMetal = agentBareMetal; } - @JsonProperty("alibabacloud") - public io.fabric8.openshift.api.model.hive.alibabacloud.v1.Platform getAlibabacloud() { - return alibabacloud; - } - - @JsonProperty("alibabacloud") - public void setAlibabacloud(io.fabric8.openshift.api.model.hive.alibabacloud.v1.Platform alibabacloud) { - this.alibabacloud = alibabacloud; - } - @JsonProperty("aws") - public AwsPlatform getAws() { + public io.fabric8.openshift.api.model.hive.aws.v1.Platform getAws() { return aws; } @JsonProperty("aws") - public void setAws(AwsPlatform aws) { + public void setAws(io.fabric8.openshift.api.model.hive.aws.v1.Platform aws) { this.aws = aws; } @JsonProperty("azure") - public AzurePlatform getAzure() { + public io.fabric8.openshift.api.model.hive.azure.v1.Platform getAzure() { return azure; } @JsonProperty("azure") - public void setAzure(AzurePlatform azure) { + public void setAzure(io.fabric8.openshift.api.model.hive.azure.v1.Platform azure) { this.azure = azure; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/PlatformStatus.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/PlatformStatus.java index 290d5d6f1fa..5ca51f48e57 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/PlatformStatus.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/PlatformStatus.java @@ -22,7 +22,6 @@ import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; import io.fabric8.kubernetes.api.model.PodTemplateSpec; import io.fabric8.kubernetes.api.model.ResourceRequirements; -import io.fabric8.openshift.api.model.hive.aws.v1.AwsPlatformStatus; import io.sundr.builder.annotations.Buildable; import io.sundr.builder.annotations.BuildableReference; import lombok.EqualsAndHashCode; @@ -32,7 +31,8 @@ @JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) @JsonInclude(JsonInclude.Include.NON_NULL) @JsonPropertyOrder({ - "aws" + "aws", + "gcp" }) @ToString @EqualsAndHashCode @@ -56,7 +56,9 @@ public class PlatformStatus implements Editable , Kuberne { @JsonProperty("aws") - private AwsPlatformStatus aws; + private io.fabric8.openshift.api.model.hive.aws.v1.PlatformStatus aws; + @JsonProperty("gcp") + private io.fabric8.openshift.api.model.hive.gcp.v1.PlatformStatus gcp; @JsonIgnore private Map additionalProperties = new LinkedHashMap(); @@ -67,21 +69,32 @@ public class PlatformStatus implements Editable , Kuberne public PlatformStatus() { } - public PlatformStatus(AwsPlatformStatus aws) { + public PlatformStatus(io.fabric8.openshift.api.model.hive.aws.v1.PlatformStatus aws, io.fabric8.openshift.api.model.hive.gcp.v1.PlatformStatus gcp) { super(); this.aws = aws; + this.gcp = gcp; } @JsonProperty("aws") - public AwsPlatformStatus getAws() { + public io.fabric8.openshift.api.model.hive.aws.v1.PlatformStatus getAws() { return aws; } @JsonProperty("aws") - public void setAws(AwsPlatformStatus aws) { + public void setAws(io.fabric8.openshift.api.model.hive.aws.v1.PlatformStatus aws) { this.aws = aws; } + @JsonProperty("gcp") + public io.fabric8.openshift.api.model.hive.gcp.v1.PlatformStatus getGcp() { + return gcp; + } + + @JsonProperty("gcp") + public void setGcp(io.fabric8.openshift.api.model.hive.gcp.v1.PlatformStatus gcp) { + this.gcp = gcp; + } + @JsonIgnore public PlatformStatusBuilder edit() { return new PlatformStatusBuilder(this); diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/PrivateLinkConfig.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/PrivateLinkConfig.java new file mode 100644 index 00000000000..023d18f8de4 --- /dev/null +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/PrivateLinkConfig.java @@ -0,0 +1,108 @@ + +package io.fabric8.openshift.api.model.hive.v1; + +import java.util.LinkedHashMap; +import java.util.Map; +import javax.annotation.Generated; +import com.fasterxml.jackson.annotation.JsonAnyGetter; +import com.fasterxml.jackson.annotation.JsonAnySetter; +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonPropertyOrder; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.fabric8.kubernetes.api.builder.Editable; +import io.fabric8.kubernetes.api.model.Container; +import io.fabric8.kubernetes.api.model.IntOrString; +import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; +import io.fabric8.kubernetes.api.model.ObjectReference; +import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; +import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; +import io.sundr.builder.annotations.Buildable; +import io.sundr.builder.annotations.BuildableReference; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.Accessors; + +@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) +@JsonInclude(JsonInclude.Include.NON_NULL) +@JsonPropertyOrder({ + "gcp" +}) +@ToString +@EqualsAndHashCode +@Accessors(prefix = { + "_", + "" +}) +@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { + @BuildableReference(ObjectMeta.class), + @BuildableReference(LabelSelector.class), + @BuildableReference(Container.class), + @BuildableReference(PodTemplateSpec.class), + @BuildableReference(ResourceRequirements.class), + @BuildableReference(IntOrString.class), + @BuildableReference(ObjectReference.class), + @BuildableReference(LocalObjectReference.class), + @BuildableReference(PersistentVolumeClaim.class) +}) +@Generated("jsonschema2pojo") +public class PrivateLinkConfig implements Editable , KubernetesResource +{ + + @JsonProperty("gcp") + private GCPPrivateServiceConnectConfig gcp; + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public PrivateLinkConfig() { + } + + public PrivateLinkConfig(GCPPrivateServiceConnectConfig gcp) { + super(); + this.gcp = gcp; + } + + @JsonProperty("gcp") + public GCPPrivateServiceConnectConfig getGcp() { + return gcp; + } + + @JsonProperty("gcp") + public void setGcp(GCPPrivateServiceConnectConfig gcp) { + this.gcp = gcp; + } + + @JsonIgnore + public PrivateLinkConfigBuilder edit() { + return new PrivateLinkConfigBuilder(this); + } + + @JsonIgnore + public PrivateLinkConfigBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/Provisioning.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/Provisioning.java index 6491bf5a95f..a2e94ae49ec 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/Provisioning.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/Provisioning.java @@ -19,6 +19,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -57,7 +58,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -67,23 +68,23 @@ public class Provisioning implements Editable , KubernetesR @JsonProperty("imageSetRef") private ClusterImageSetReference imageSetRef; @JsonProperty("installConfigSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference installConfigSecretRef; + private LocalObjectReference installConfigSecretRef; @JsonProperty("installerEnv") @JsonInclude(JsonInclude.Include.NON_EMPTY) private List installerEnv = new ArrayList<>(); @JsonProperty("installerImageOverride") private String installerImageOverride; @JsonProperty("manifestsConfigMapRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference manifestsConfigMapRef; + private LocalObjectReference manifestsConfigMapRef; @JsonProperty("manifestsSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference manifestsSecretRef; + private LocalObjectReference manifestsSecretRef; @JsonProperty("releaseImage") private String releaseImage; @JsonProperty("sshKnownHosts") @JsonInclude(JsonInclude.Include.NON_EMPTY) private List sshKnownHosts = new ArrayList<>(); @JsonProperty("sshPrivateKeySecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference sshPrivateKeySecretRef; + private LocalObjectReference sshPrivateKeySecretRef; @JsonIgnore private Map additionalProperties = new LinkedHashMap(); @@ -94,7 +95,7 @@ public class Provisioning implements Editable , KubernetesR public Provisioning() { } - public Provisioning(ClusterImageSetReference imageSetRef, io.fabric8.kubernetes.api.model.LocalObjectReference installConfigSecretRef, List installerEnv, String installerImageOverride, io.fabric8.kubernetes.api.model.LocalObjectReference manifestsConfigMapRef, io.fabric8.kubernetes.api.model.LocalObjectReference manifestsSecretRef, String releaseImage, List sshKnownHosts, io.fabric8.kubernetes.api.model.LocalObjectReference sshPrivateKeySecretRef) { + public Provisioning(ClusterImageSetReference imageSetRef, LocalObjectReference installConfigSecretRef, List installerEnv, String installerImageOverride, LocalObjectReference manifestsConfigMapRef, LocalObjectReference manifestsSecretRef, String releaseImage, List sshKnownHosts, LocalObjectReference sshPrivateKeySecretRef) { super(); this.imageSetRef = imageSetRef; this.installConfigSecretRef = installConfigSecretRef; @@ -118,12 +119,12 @@ public void setImageSetRef(ClusterImageSetReference imageSetRef) { } @JsonProperty("installConfigSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getInstallConfigSecretRef() { + public LocalObjectReference getInstallConfigSecretRef() { return installConfigSecretRef; } @JsonProperty("installConfigSecretRef") - public void setInstallConfigSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference installConfigSecretRef) { + public void setInstallConfigSecretRef(LocalObjectReference installConfigSecretRef) { this.installConfigSecretRef = installConfigSecretRef; } @@ -149,22 +150,22 @@ public void setInstallerImageOverride(String installerImageOverride) { } @JsonProperty("manifestsConfigMapRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getManifestsConfigMapRef() { + public LocalObjectReference getManifestsConfigMapRef() { return manifestsConfigMapRef; } @JsonProperty("manifestsConfigMapRef") - public void setManifestsConfigMapRef(io.fabric8.kubernetes.api.model.LocalObjectReference manifestsConfigMapRef) { + public void setManifestsConfigMapRef(LocalObjectReference manifestsConfigMapRef) { this.manifestsConfigMapRef = manifestsConfigMapRef; } @JsonProperty("manifestsSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getManifestsSecretRef() { + public LocalObjectReference getManifestsSecretRef() { return manifestsSecretRef; } @JsonProperty("manifestsSecretRef") - public void setManifestsSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference manifestsSecretRef) { + public void setManifestsSecretRef(LocalObjectReference manifestsSecretRef) { this.manifestsSecretRef = manifestsSecretRef; } @@ -190,12 +191,12 @@ public void setSshKnownHosts(List sshKnownHosts) { } @JsonProperty("sshPrivateKeySecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getSshPrivateKeySecretRef() { + public LocalObjectReference getSshPrivateKeySecretRef() { return sshPrivateKeySecretRef; } @JsonProperty("sshPrivateKeySecretRef") - public void setSshPrivateKeySecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference sshPrivateKeySecretRef) { + public void setSshPrivateKeySecretRef(LocalObjectReference sshPrivateKeySecretRef) { this.sshPrivateKeySecretRef = sshPrivateKeySecretRef; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SelectorSyncIdentityProvider.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SelectorSyncIdentityProvider.java index 2ed45e4f973..f400b046c17 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SelectorSyncIdentityProvider.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SelectorSyncIdentityProvider.java @@ -17,6 +17,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.LabelSelector; import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; import io.fabric8.kubernetes.api.model.PodTemplateSpec; @@ -47,7 +48,7 @@ "" }) @Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { - @BuildableReference(io.fabric8.kubernetes.api.model.ObjectMeta.class), + @BuildableReference(ObjectMeta.class), @BuildableReference(LabelSelector.class), @BuildableReference(Container.class), @BuildableReference(PodTemplateSpec.class), @@ -81,7 +82,7 @@ public class SelectorSyncIdentityProvider implements Editable identityProviders = new ArrayList<>(); @@ -72,19 +73,19 @@ public class SelectorSyncIdentityProviderSpec implements Editable identityProviders) { + public SelectorSyncIdentityProviderSpec(LabelSelector clusterDeploymentSelector, List identityProviders) { super(); this.clusterDeploymentSelector = clusterDeploymentSelector; this.identityProviders = identityProviders; } @JsonProperty("clusterDeploymentSelector") - public io.fabric8.kubernetes.api.model.LabelSelector getClusterDeploymentSelector() { + public LabelSelector getClusterDeploymentSelector() { return clusterDeploymentSelector; } @JsonProperty("clusterDeploymentSelector") - public void setClusterDeploymentSelector(io.fabric8.kubernetes.api.model.LabelSelector clusterDeploymentSelector) { + public void setClusterDeploymentSelector(LabelSelector clusterDeploymentSelector) { this.clusterDeploymentSelector = clusterDeploymentSelector; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SelectorSyncSet.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SelectorSyncSet.java index 2f11c9a0d4c..8173651925e 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SelectorSyncSet.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SelectorSyncSet.java @@ -17,6 +17,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.LabelSelector; import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; import io.fabric8.kubernetes.api.model.PodTemplateSpec; @@ -47,7 +48,7 @@ "" }) @Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { - @BuildableReference(io.fabric8.kubernetes.api.model.ObjectMeta.class), + @BuildableReference(ObjectMeta.class), @BuildableReference(LabelSelector.class), @BuildableReference(Container.class), @BuildableReference(PodTemplateSpec.class), @@ -81,7 +82,7 @@ public class SelectorSyncSet implements Editable , HasMe @JsonProperty("kind") private String kind = "SelectorSyncSet"; @JsonProperty("metadata") - private io.fabric8.kubernetes.api.model.ObjectMeta metadata; + private ObjectMeta metadata; @JsonProperty("spec") private SelectorSyncSetSpec spec; @JsonProperty("status") @@ -96,7 +97,7 @@ public class SelectorSyncSet implements Editable , HasMe public SelectorSyncSet() { } - public SelectorSyncSet(String apiVersion, String kind, io.fabric8.kubernetes.api.model.ObjectMeta metadata, SelectorSyncSetSpec spec, SelectorSyncSetStatus status) { + public SelectorSyncSet(String apiVersion, String kind, ObjectMeta metadata, SelectorSyncSetSpec spec, SelectorSyncSetStatus status) { super(); this.apiVersion = apiVersion; this.kind = kind; @@ -146,12 +147,12 @@ public void setKind(String kind) { } @JsonProperty("metadata") - public io.fabric8.kubernetes.api.model.ObjectMeta getMetadata() { + public ObjectMeta getMetadata() { return metadata; } @JsonProperty("metadata") - public void setMetadata(io.fabric8.kubernetes.api.model.ObjectMeta metadata) { + public void setMetadata(ObjectMeta metadata) { this.metadata = metadata; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SelectorSyncSetSpec.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SelectorSyncSetSpec.java index bb86c742df2..55a4b2088db 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SelectorSyncSetSpec.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SelectorSyncSetSpec.java @@ -17,6 +17,7 @@ import io.fabric8.kubernetes.api.model.Container; import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; @@ -34,6 +35,7 @@ @JsonPropertyOrder({ "applyBehavior", "clusterDeploymentSelector", + "enableResourceTemplates", "patches", "resourceApplyMode", "resources", @@ -47,7 +49,7 @@ }) @Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { @BuildableReference(ObjectMeta.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LabelSelector.class), + @BuildableReference(LabelSelector.class), @BuildableReference(Container.class), @BuildableReference(PodTemplateSpec.class), @BuildableReference(ResourceRequirements.class), @@ -61,22 +63,25 @@ public class SelectorSyncSetSpec implements Editable { @JsonProperty("applyBehavior") - private java.lang.String applyBehavior; + private String applyBehavior; @JsonProperty("clusterDeploymentSelector") - private io.fabric8.kubernetes.api.model.LabelSelector clusterDeploymentSelector; + private LabelSelector clusterDeploymentSelector; + @JsonProperty("enableResourceTemplates") + private Boolean enableResourceTemplates; @JsonProperty("patches") @JsonInclude(JsonInclude.Include.NON_EMPTY) private List patches = new ArrayList<>(); @JsonProperty("resourceApplyMode") - private java.lang.String resourceApplyMode; + private String resourceApplyMode; @JsonProperty("resources") + @JsonDeserialize(using = io.fabric8.kubernetes.internal.KubernetesDeserializerForList.class) @JsonInclude(JsonInclude.Include.NON_EMPTY) - private List> resources = new ArrayList<>(); + private List resources = new ArrayList<>(); @JsonProperty("secretMappings") @JsonInclude(JsonInclude.Include.NON_EMPTY) private List secretMappings = new ArrayList<>(); @JsonIgnore - private Map additionalProperties = new LinkedHashMap(); + private Map additionalProperties = new LinkedHashMap(); /** * No args constructor for use in serialization @@ -85,10 +90,11 @@ public class SelectorSyncSetSpec implements Editable public SelectorSyncSetSpec() { } - public SelectorSyncSetSpec(java.lang.String applyBehavior, io.fabric8.kubernetes.api.model.LabelSelector clusterDeploymentSelector, List patches, java.lang.String resourceApplyMode, List> resources, List secretMappings) { + public SelectorSyncSetSpec(String applyBehavior, LabelSelector clusterDeploymentSelector, Boolean enableResourceTemplates, List patches, String resourceApplyMode, List resources, List secretMappings) { super(); this.applyBehavior = applyBehavior; this.clusterDeploymentSelector = clusterDeploymentSelector; + this.enableResourceTemplates = enableResourceTemplates; this.patches = patches; this.resourceApplyMode = resourceApplyMode; this.resources = resources; @@ -96,25 +102,35 @@ public SelectorSyncSetSpec(java.lang.String applyBehavior, io.fabric8.kubernetes } @JsonProperty("applyBehavior") - public java.lang.String getApplyBehavior() { + public String getApplyBehavior() { return applyBehavior; } @JsonProperty("applyBehavior") - public void setApplyBehavior(java.lang.String applyBehavior) { + public void setApplyBehavior(String applyBehavior) { this.applyBehavior = applyBehavior; } @JsonProperty("clusterDeploymentSelector") - public io.fabric8.kubernetes.api.model.LabelSelector getClusterDeploymentSelector() { + public LabelSelector getClusterDeploymentSelector() { return clusterDeploymentSelector; } @JsonProperty("clusterDeploymentSelector") - public void setClusterDeploymentSelector(io.fabric8.kubernetes.api.model.LabelSelector clusterDeploymentSelector) { + public void setClusterDeploymentSelector(LabelSelector clusterDeploymentSelector) { this.clusterDeploymentSelector = clusterDeploymentSelector; } + @JsonProperty("enableResourceTemplates") + public Boolean getEnableResourceTemplates() { + return enableResourceTemplates; + } + + @JsonProperty("enableResourceTemplates") + public void setEnableResourceTemplates(Boolean enableResourceTemplates) { + this.enableResourceTemplates = enableResourceTemplates; + } + @JsonProperty("patches") @JsonInclude(JsonInclude.Include.NON_EMPTY) public List getPatches() { @@ -127,23 +143,24 @@ public void setPatches(List patches) { } @JsonProperty("resourceApplyMode") - public java.lang.String getResourceApplyMode() { + public String getResourceApplyMode() { return resourceApplyMode; } @JsonProperty("resourceApplyMode") - public void setResourceApplyMode(java.lang.String resourceApplyMode) { + public void setResourceApplyMode(String resourceApplyMode) { this.resourceApplyMode = resourceApplyMode; } @JsonProperty("resources") @JsonInclude(JsonInclude.Include.NON_EMPTY) - public List> getResources() { + public List getResources() { return resources; } @JsonProperty("resources") - public void setResources(List> resources) { + @JsonDeserialize(using = io.fabric8.kubernetes.internal.KubernetesDeserializerForList.class) + public void setResources(List resources) { this.resources = resources; } @@ -169,16 +186,16 @@ public SelectorSyncSetSpecBuilder toBuilder() { } @JsonAnyGetter - public Map getAdditionalProperties() { + public Map getAdditionalProperties() { return this.additionalProperties; } @JsonAnySetter - public void setAdditionalProperty(java.lang.String name, java.lang.Object value) { + public void setAdditionalProperty(String name, Object value) { this.additionalProperties.put(name, value); } - public void setAdditionalProperties(Map additionalProperties) { + public void setAdditionalProperties(Map additionalProperties) { this.additionalProperties = additionalProperties; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/alibabacloud/v1/MachinePool.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncCondition.java similarity index 55% rename from kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/alibabacloud/v1/MachinePool.java rename to kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncCondition.java index d04b0abef14..2cfd02caa78 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/alibabacloud/v1/MachinePool.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncCondition.java @@ -1,9 +1,7 @@ -package io.fabric8.openshift.api.model.hive.alibabacloud.v1; +package io.fabric8.openshift.api.model.hive.v1; -import java.util.ArrayList; import java.util.LinkedHashMap; -import java.util.List; import java.util.Map; import javax.annotation.Generated; import com.fasterxml.jackson.annotation.JsonAnyGetter; @@ -33,11 +31,12 @@ @JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) @JsonInclude(JsonInclude.Include.NON_NULL) @JsonPropertyOrder({ - "imageID", - "instanceType", - "systemDiskCategory", - "systemDiskSize", - "zones" + "lastProbeTime", + "lastTransitionTime", + "message", + "reason", + "status", + "type" }) @ToString @EqualsAndHashCode @@ -57,20 +56,21 @@ @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") -public class MachinePool implements Editable , KubernetesResource +public class SyncCondition implements Editable , KubernetesResource { - @JsonProperty("imageID") - private String imageID; - @JsonProperty("instanceType") - private String instanceType; - @JsonProperty("systemDiskCategory") - private String systemDiskCategory; - @JsonProperty("systemDiskSize") - private Integer systemDiskSize; - @JsonProperty("zones") - @JsonInclude(JsonInclude.Include.NON_EMPTY) - private List zones = new ArrayList<>(); + @JsonProperty("lastProbeTime") + private String lastProbeTime; + @JsonProperty("lastTransitionTime") + private String lastTransitionTime; + @JsonProperty("message") + private String message; + @JsonProperty("reason") + private String reason; + @JsonProperty("status") + private String status; + @JsonProperty("type") + private String type; @JsonIgnore private Map additionalProperties = new LinkedHashMap(); @@ -78,76 +78,86 @@ public class MachinePool implements Editable , KubernetesRes * No args constructor for use in serialization * */ - public MachinePool() { + public SyncCondition() { } - public MachinePool(String imageID, String instanceType, String systemDiskCategory, Integer systemDiskSize, List zones) { + public SyncCondition(String lastProbeTime, String lastTransitionTime, String message, String reason, String status, String type) { super(); - this.imageID = imageID; - this.instanceType = instanceType; - this.systemDiskCategory = systemDiskCategory; - this.systemDiskSize = systemDiskSize; - this.zones = zones; + this.lastProbeTime = lastProbeTime; + this.lastTransitionTime = lastTransitionTime; + this.message = message; + this.reason = reason; + this.status = status; + this.type = type; } - @JsonProperty("imageID") - public String getImageID() { - return imageID; + @JsonProperty("lastProbeTime") + public String getLastProbeTime() { + return lastProbeTime; } - @JsonProperty("imageID") - public void setImageID(String imageID) { - this.imageID = imageID; + @JsonProperty("lastProbeTime") + public void setLastProbeTime(String lastProbeTime) { + this.lastProbeTime = lastProbeTime; } - @JsonProperty("instanceType") - public String getInstanceType() { - return instanceType; + @JsonProperty("lastTransitionTime") + public String getLastTransitionTime() { + return lastTransitionTime; } - @JsonProperty("instanceType") - public void setInstanceType(String instanceType) { - this.instanceType = instanceType; + @JsonProperty("lastTransitionTime") + public void setLastTransitionTime(String lastTransitionTime) { + this.lastTransitionTime = lastTransitionTime; } - @JsonProperty("systemDiskCategory") - public String getSystemDiskCategory() { - return systemDiskCategory; + @JsonProperty("message") + public String getMessage() { + return message; } - @JsonProperty("systemDiskCategory") - public void setSystemDiskCategory(String systemDiskCategory) { - this.systemDiskCategory = systemDiskCategory; + @JsonProperty("message") + public void setMessage(String message) { + this.message = message; } - @JsonProperty("systemDiskSize") - public Integer getSystemDiskSize() { - return systemDiskSize; + @JsonProperty("reason") + public String getReason() { + return reason; } - @JsonProperty("systemDiskSize") - public void setSystemDiskSize(Integer systemDiskSize) { - this.systemDiskSize = systemDiskSize; + @JsonProperty("reason") + public void setReason(String reason) { + this.reason = reason; } - @JsonProperty("zones") - @JsonInclude(JsonInclude.Include.NON_EMPTY) - public List getZones() { - return zones; + @JsonProperty("status") + public String getStatus() { + return status; } - @JsonProperty("zones") - public void setZones(List zones) { - this.zones = zones; + @JsonProperty("status") + public void setStatus(String status) { + this.status = status; + } + + @JsonProperty("type") + public String getType() { + return type; + } + + @JsonProperty("type") + public void setType(String type) { + this.type = type; } @JsonIgnore - public MachinePoolBuilder edit() { - return new MachinePoolBuilder(this); + public SyncConditionBuilder edit() { + return new SyncConditionBuilder(this); } @JsonIgnore - public MachinePoolBuilder toBuilder() { + public SyncConditionBuilder toBuilder() { return edit(); } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncIdentityProvider.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncIdentityProvider.java index 45a7be8773b..056eb4dc22b 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncIdentityProvider.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncIdentityProvider.java @@ -18,6 +18,7 @@ import io.fabric8.kubernetes.api.model.LabelSelector; import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.Namespaced; +import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; import io.fabric8.kubernetes.api.model.PodTemplateSpec; @@ -48,7 +49,7 @@ "" }) @Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { - @BuildableReference(io.fabric8.kubernetes.api.model.ObjectMeta.class), + @BuildableReference(ObjectMeta.class), @BuildableReference(LabelSelector.class), @BuildableReference(Container.class), @BuildableReference(PodTemplateSpec.class), @@ -82,7 +83,7 @@ public class SyncIdentityProvider implements Editable , KubernetesResource +{ + + @JsonProperty("identityProviders") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + private List identityProviders = new ArrayList<>(); + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public SyncIdentityProviderCommonSpec() { + } + + public SyncIdentityProviderCommonSpec(List identityProviders) { + super(); + this.identityProviders = identityProviders; + } + + @JsonProperty("identityProviders") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + public List getIdentityProviders() { + return identityProviders; + } + + @JsonProperty("identityProviders") + public void setIdentityProviders(List identityProviders) { + this.identityProviders = identityProviders; + } + + @JsonIgnore + public SyncIdentityProviderCommonSpecBuilder edit() { + return new SyncIdentityProviderCommonSpecBuilder(this); + } + + @JsonIgnore + public SyncIdentityProviderCommonSpecBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncIdentityProviderSpec.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncIdentityProviderSpec.java index c31aa00078c..32493d391c9 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncIdentityProviderSpec.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncIdentityProviderSpec.java @@ -18,6 +18,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -50,7 +51,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -59,7 +60,7 @@ public class SyncIdentityProviderSpec implements Editable clusterDeploymentRefs = new ArrayList<>(); + private List clusterDeploymentRefs = new ArrayList<>(); @JsonProperty("identityProviders") @JsonInclude(JsonInclude.Include.NON_EMPTY) private List identityProviders = new ArrayList<>(); @@ -73,7 +74,7 @@ public class SyncIdentityProviderSpec implements Editable clusterDeploymentRefs, List identityProviders) { + public SyncIdentityProviderSpec(List clusterDeploymentRefs, List identityProviders) { super(); this.clusterDeploymentRefs = clusterDeploymentRefs; this.identityProviders = identityProviders; @@ -81,12 +82,12 @@ public SyncIdentityProviderSpec(List getClusterDeploymentRefs() { + public List getClusterDeploymentRefs() { return clusterDeploymentRefs; } @JsonProperty("clusterDeploymentRefs") - public void setClusterDeploymentRefs(List clusterDeploymentRefs) { + public void setClusterDeploymentRefs(List clusterDeploymentRefs) { this.clusterDeploymentRefs = clusterDeploymentRefs; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncSet.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncSet.java index 0c85286c3a3..922e5c42f67 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncSet.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncSet.java @@ -18,6 +18,7 @@ import io.fabric8.kubernetes.api.model.LabelSelector; import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.Namespaced; +import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; import io.fabric8.kubernetes.api.model.PodTemplateSpec; @@ -48,7 +49,7 @@ "" }) @Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { - @BuildableReference(io.fabric8.kubernetes.api.model.ObjectMeta.class), + @BuildableReference(ObjectMeta.class), @BuildableReference(LabelSelector.class), @BuildableReference(Container.class), @BuildableReference(PodTemplateSpec.class), @@ -82,7 +83,7 @@ public class SyncSet implements Editable , HasMetadata, Namespac @JsonProperty("kind") private String kind = "SyncSet"; @JsonProperty("metadata") - private io.fabric8.kubernetes.api.model.ObjectMeta metadata; + private ObjectMeta metadata; @JsonProperty("spec") private SyncSetSpec spec; @JsonProperty("status") @@ -97,7 +98,7 @@ public class SyncSet implements Editable , HasMetadata, Namespac public SyncSet() { } - public SyncSet(String apiVersion, String kind, io.fabric8.kubernetes.api.model.ObjectMeta metadata, SyncSetSpec spec, SyncSetStatus status) { + public SyncSet(String apiVersion, String kind, ObjectMeta metadata, SyncSetSpec spec, SyncSetStatus status) { super(); this.apiVersion = apiVersion; this.kind = kind; @@ -147,12 +148,12 @@ public void setKind(String kind) { } @JsonProperty("metadata") - public io.fabric8.kubernetes.api.model.ObjectMeta getMetadata() { + public ObjectMeta getMetadata() { return metadata; } @JsonProperty("metadata") - public void setMetadata(io.fabric8.kubernetes.api.model.ObjectMeta metadata) { + public void setMetadata(ObjectMeta metadata) { this.metadata = metadata; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncSetCommonSpec.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncSetCommonSpec.java new file mode 100644 index 00000000000..f353b65b70f --- /dev/null +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncSetCommonSpec.java @@ -0,0 +1,188 @@ + +package io.fabric8.openshift.api.model.hive.v1; + +import java.util.ArrayList; +import java.util.LinkedHashMap; +import java.util.List; +import java.util.Map; +import javax.annotation.Generated; +import com.fasterxml.jackson.annotation.JsonAnyGetter; +import com.fasterxml.jackson.annotation.JsonAnySetter; +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonPropertyOrder; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.fabric8.kubernetes.api.builder.Editable; +import io.fabric8.kubernetes.api.model.Container; +import io.fabric8.kubernetes.api.model.IntOrString; +import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; +import io.fabric8.kubernetes.api.model.ObjectReference; +import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; +import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; +import io.sundr.builder.annotations.Buildable; +import io.sundr.builder.annotations.BuildableReference; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.Accessors; + +@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) +@JsonInclude(JsonInclude.Include.NON_NULL) +@JsonPropertyOrder({ + "applyBehavior", + "enableResourceTemplates", + "patches", + "resourceApplyMode", + "resources", + "secretMappings" +}) +@ToString +@EqualsAndHashCode +@Accessors(prefix = { + "_", + "" +}) +@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { + @BuildableReference(ObjectMeta.class), + @BuildableReference(LabelSelector.class), + @BuildableReference(Container.class), + @BuildableReference(PodTemplateSpec.class), + @BuildableReference(ResourceRequirements.class), + @BuildableReference(IntOrString.class), + @BuildableReference(ObjectReference.class), + @BuildableReference(LocalObjectReference.class), + @BuildableReference(PersistentVolumeClaim.class) +}) +@Generated("jsonschema2pojo") +public class SyncSetCommonSpec implements Editable , KubernetesResource +{ + + @JsonProperty("applyBehavior") + private String applyBehavior; + @JsonProperty("enableResourceTemplates") + private Boolean enableResourceTemplates; + @JsonProperty("patches") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + private List patches = new ArrayList<>(); + @JsonProperty("resourceApplyMode") + private String resourceApplyMode; + @JsonProperty("resources") + @JsonDeserialize(using = io.fabric8.kubernetes.internal.KubernetesDeserializerForList.class) + @JsonInclude(JsonInclude.Include.NON_EMPTY) + private List resources = new ArrayList<>(); + @JsonProperty("secretMappings") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + private List secretMappings = new ArrayList<>(); + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public SyncSetCommonSpec() { + } + + public SyncSetCommonSpec(String applyBehavior, Boolean enableResourceTemplates, List patches, String resourceApplyMode, List resources, List secretMappings) { + super(); + this.applyBehavior = applyBehavior; + this.enableResourceTemplates = enableResourceTemplates; + this.patches = patches; + this.resourceApplyMode = resourceApplyMode; + this.resources = resources; + this.secretMappings = secretMappings; + } + + @JsonProperty("applyBehavior") + public String getApplyBehavior() { + return applyBehavior; + } + + @JsonProperty("applyBehavior") + public void setApplyBehavior(String applyBehavior) { + this.applyBehavior = applyBehavior; + } + + @JsonProperty("enableResourceTemplates") + public Boolean getEnableResourceTemplates() { + return enableResourceTemplates; + } + + @JsonProperty("enableResourceTemplates") + public void setEnableResourceTemplates(Boolean enableResourceTemplates) { + this.enableResourceTemplates = enableResourceTemplates; + } + + @JsonProperty("patches") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + public List getPatches() { + return patches; + } + + @JsonProperty("patches") + public void setPatches(List patches) { + this.patches = patches; + } + + @JsonProperty("resourceApplyMode") + public String getResourceApplyMode() { + return resourceApplyMode; + } + + @JsonProperty("resourceApplyMode") + public void setResourceApplyMode(String resourceApplyMode) { + this.resourceApplyMode = resourceApplyMode; + } + + @JsonProperty("resources") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + public List getResources() { + return resources; + } + + @JsonProperty("resources") + @JsonDeserialize(using = io.fabric8.kubernetes.internal.KubernetesDeserializerForList.class) + public void setResources(List resources) { + this.resources = resources; + } + + @JsonProperty("secretMappings") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + public List getSecretMappings() { + return secretMappings; + } + + @JsonProperty("secretMappings") + public void setSecretMappings(List secretMappings) { + this.secretMappings = secretMappings; + } + + @JsonIgnore + public SyncSetCommonSpecBuilder edit() { + return new SyncSetCommonSpecBuilder(this); + } + + @JsonIgnore + public SyncSetCommonSpecBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncSetObjectStatus.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncSetObjectStatus.java new file mode 100644 index 00000000000..82dde0395af --- /dev/null +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncSetObjectStatus.java @@ -0,0 +1,188 @@ + +package io.fabric8.openshift.api.model.hive.v1; + +import java.util.ArrayList; +import java.util.LinkedHashMap; +import java.util.List; +import java.util.Map; +import javax.annotation.Generated; +import com.fasterxml.jackson.annotation.JsonAnyGetter; +import com.fasterxml.jackson.annotation.JsonAnySetter; +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonPropertyOrder; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.fabric8.kubernetes.api.builder.Editable; +import io.fabric8.kubernetes.api.model.Container; +import io.fabric8.kubernetes.api.model.IntOrString; +import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; +import io.fabric8.kubernetes.api.model.ObjectReference; +import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; +import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; +import io.sundr.builder.annotations.Buildable; +import io.sundr.builder.annotations.BuildableReference; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.Accessors; + +@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) +@JsonInclude(JsonInclude.Include.NON_NULL) +@JsonPropertyOrder({ + "conditions", + "name", + "patches", + "resourceApplyMode", + "resources", + "secrets" +}) +@ToString +@EqualsAndHashCode +@Accessors(prefix = { + "_", + "" +}) +@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { + @BuildableReference(ObjectMeta.class), + @BuildableReference(LabelSelector.class), + @BuildableReference(Container.class), + @BuildableReference(PodTemplateSpec.class), + @BuildableReference(ResourceRequirements.class), + @BuildableReference(IntOrString.class), + @BuildableReference(ObjectReference.class), + @BuildableReference(LocalObjectReference.class), + @BuildableReference(PersistentVolumeClaim.class) +}) +@Generated("jsonschema2pojo") +public class SyncSetObjectStatus implements Editable , KubernetesResource +{ + + @JsonProperty("conditions") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + private List conditions = new ArrayList<>(); + @JsonProperty("name") + private String name; + @JsonProperty("patches") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + private List patches = new ArrayList<>(); + @JsonProperty("resourceApplyMode") + private String resourceApplyMode; + @JsonProperty("resources") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + private List resources = new ArrayList<>(); + @JsonProperty("secrets") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + private List secrets = new ArrayList<>(); + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public SyncSetObjectStatus() { + } + + public SyncSetObjectStatus(List conditions, String name, List patches, String resourceApplyMode, List resources, List secrets) { + super(); + this.conditions = conditions; + this.name = name; + this.patches = patches; + this.resourceApplyMode = resourceApplyMode; + this.resources = resources; + this.secrets = secrets; + } + + @JsonProperty("conditions") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + public List getConditions() { + return conditions; + } + + @JsonProperty("conditions") + public void setConditions(List conditions) { + this.conditions = conditions; + } + + @JsonProperty("name") + public String getName() { + return name; + } + + @JsonProperty("name") + public void setName(String name) { + this.name = name; + } + + @JsonProperty("patches") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + public List getPatches() { + return patches; + } + + @JsonProperty("patches") + public void setPatches(List patches) { + this.patches = patches; + } + + @JsonProperty("resourceApplyMode") + public String getResourceApplyMode() { + return resourceApplyMode; + } + + @JsonProperty("resourceApplyMode") + public void setResourceApplyMode(String resourceApplyMode) { + this.resourceApplyMode = resourceApplyMode; + } + + @JsonProperty("resources") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + public List getResources() { + return resources; + } + + @JsonProperty("resources") + public void setResources(List resources) { + this.resources = resources; + } + + @JsonProperty("secrets") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + public List getSecrets() { + return secrets; + } + + @JsonProperty("secrets") + public void setSecrets(List secrets) { + this.secrets = secrets; + } + + @JsonIgnore + public SyncSetObjectStatusBuilder edit() { + return new SyncSetObjectStatusBuilder(this); + } + + @JsonIgnore + public SyncSetObjectStatusBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncSetSpec.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncSetSpec.java index 05f5c9d9454..604fc09f62f 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncSetSpec.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncSetSpec.java @@ -18,6 +18,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -34,6 +35,7 @@ @JsonPropertyOrder({ "applyBehavior", "clusterDeploymentRefs", + "enableResourceTemplates", "patches", "resourceApplyMode", "resources", @@ -53,7 +55,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -61,23 +63,26 @@ public class SyncSetSpec implements Editable , KubernetesRes { @JsonProperty("applyBehavior") - private java.lang.String applyBehavior; + private String applyBehavior; @JsonProperty("clusterDeploymentRefs") @JsonInclude(JsonInclude.Include.NON_EMPTY) - private List clusterDeploymentRefs = new ArrayList<>(); + private List clusterDeploymentRefs = new ArrayList<>(); + @JsonProperty("enableResourceTemplates") + private Boolean enableResourceTemplates; @JsonProperty("patches") @JsonInclude(JsonInclude.Include.NON_EMPTY) private List patches = new ArrayList<>(); @JsonProperty("resourceApplyMode") - private java.lang.String resourceApplyMode; + private String resourceApplyMode; @JsonProperty("resources") + @JsonDeserialize(using = io.fabric8.kubernetes.internal.KubernetesDeserializerForList.class) @JsonInclude(JsonInclude.Include.NON_EMPTY) - private List> resources = new ArrayList<>(); + private List resources = new ArrayList<>(); @JsonProperty("secretMappings") @JsonInclude(JsonInclude.Include.NON_EMPTY) private List secretMappings = new ArrayList<>(); @JsonIgnore - private Map additionalProperties = new LinkedHashMap(); + private Map additionalProperties = new LinkedHashMap(); /** * No args constructor for use in serialization @@ -86,10 +91,11 @@ public class SyncSetSpec implements Editable , KubernetesRes public SyncSetSpec() { } - public SyncSetSpec(java.lang.String applyBehavior, List clusterDeploymentRefs, List patches, java.lang.String resourceApplyMode, List> resources, List secretMappings) { + public SyncSetSpec(String applyBehavior, List clusterDeploymentRefs, Boolean enableResourceTemplates, List patches, String resourceApplyMode, List resources, List secretMappings) { super(); this.applyBehavior = applyBehavior; this.clusterDeploymentRefs = clusterDeploymentRefs; + this.enableResourceTemplates = enableResourceTemplates; this.patches = patches; this.resourceApplyMode = resourceApplyMode; this.resources = resources; @@ -97,26 +103,36 @@ public SyncSetSpec(java.lang.String applyBehavior, List getClusterDeploymentRefs() { + public List getClusterDeploymentRefs() { return clusterDeploymentRefs; } @JsonProperty("clusterDeploymentRefs") - public void setClusterDeploymentRefs(List clusterDeploymentRefs) { + public void setClusterDeploymentRefs(List clusterDeploymentRefs) { this.clusterDeploymentRefs = clusterDeploymentRefs; } + @JsonProperty("enableResourceTemplates") + public Boolean getEnableResourceTemplates() { + return enableResourceTemplates; + } + + @JsonProperty("enableResourceTemplates") + public void setEnableResourceTemplates(Boolean enableResourceTemplates) { + this.enableResourceTemplates = enableResourceTemplates; + } + @JsonProperty("patches") @JsonInclude(JsonInclude.Include.NON_EMPTY) public List getPatches() { @@ -129,23 +145,24 @@ public void setPatches(List patches) { } @JsonProperty("resourceApplyMode") - public java.lang.String getResourceApplyMode() { + public String getResourceApplyMode() { return resourceApplyMode; } @JsonProperty("resourceApplyMode") - public void setResourceApplyMode(java.lang.String resourceApplyMode) { + public void setResourceApplyMode(String resourceApplyMode) { this.resourceApplyMode = resourceApplyMode; } @JsonProperty("resources") @JsonInclude(JsonInclude.Include.NON_EMPTY) - public List> getResources() { + public List getResources() { return resources; } @JsonProperty("resources") - public void setResources(List> resources) { + @JsonDeserialize(using = io.fabric8.kubernetes.internal.KubernetesDeserializerForList.class) + public void setResources(List resources) { this.resources = resources; } @@ -171,16 +188,16 @@ public SyncSetSpecBuilder toBuilder() { } @JsonAnyGetter - public Map getAdditionalProperties() { + public Map getAdditionalProperties() { return this.additionalProperties; } @JsonAnySetter - public void setAdditionalProperty(java.lang.String name, java.lang.Object value) { + public void setAdditionalProperty(String name, Object value) { this.additionalProperties.put(name, value); } - public void setAdditionalProperties(Map additionalProperties) { + public void setAdditionalProperties(Map additionalProperties) { this.additionalProperties = additionalProperties; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncStatus.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncStatus.java new file mode 100644 index 00000000000..48dbcbab904 --- /dev/null +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/SyncStatus.java @@ -0,0 +1,196 @@ + +package io.fabric8.openshift.api.model.hive.v1; + +import java.util.ArrayList; +import java.util.LinkedHashMap; +import java.util.List; +import java.util.Map; +import javax.annotation.Generated; +import com.fasterxml.jackson.annotation.JsonAnyGetter; +import com.fasterxml.jackson.annotation.JsonAnySetter; +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonPropertyOrder; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.fabric8.kubernetes.api.builder.Editable; +import io.fabric8.kubernetes.api.model.Container; +import io.fabric8.kubernetes.api.model.IntOrString; +import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; +import io.fabric8.kubernetes.api.model.ObjectReference; +import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; +import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; +import io.sundr.builder.annotations.Buildable; +import io.sundr.builder.annotations.BuildableReference; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.Accessors; + +@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) +@JsonInclude(JsonInclude.Include.NON_NULL) +@JsonPropertyOrder({ + "apiVersion", + "kind", + "conditions", + "hash", + "name", + "namespace", + "resource" +}) +@ToString +@EqualsAndHashCode +@Accessors(prefix = { + "_", + "" +}) +@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { + @BuildableReference(ObjectMeta.class), + @BuildableReference(LabelSelector.class), + @BuildableReference(Container.class), + @BuildableReference(PodTemplateSpec.class), + @BuildableReference(ResourceRequirements.class), + @BuildableReference(IntOrString.class), + @BuildableReference(ObjectReference.class), + @BuildableReference(LocalObjectReference.class), + @BuildableReference(PersistentVolumeClaim.class) +}) +@Generated("jsonschema2pojo") +public class SyncStatus implements Editable , KubernetesResource +{ + + @JsonProperty("apiVersion") + private String apiVersion; + @JsonProperty("conditions") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + private List conditions = new ArrayList<>(); + @JsonProperty("hash") + private String hash; + @JsonProperty("kind") + private String kind; + @JsonProperty("name") + private String name; + @JsonProperty("namespace") + private String namespace; + @JsonProperty("resource") + private String resource; + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public SyncStatus() { + } + + public SyncStatus(String apiVersion, List conditions, String hash, String kind, String name, String namespace, String resource) { + super(); + this.apiVersion = apiVersion; + this.conditions = conditions; + this.hash = hash; + this.kind = kind; + this.name = name; + this.namespace = namespace; + this.resource = resource; + } + + @JsonProperty("apiVersion") + public String getApiVersion() { + return apiVersion; + } + + @JsonProperty("apiVersion") + public void setApiVersion(String apiVersion) { + this.apiVersion = apiVersion; + } + + @JsonProperty("conditions") + @JsonInclude(JsonInclude.Include.NON_EMPTY) + public List getConditions() { + return conditions; + } + + @JsonProperty("conditions") + public void setConditions(List conditions) { + this.conditions = conditions; + } + + @JsonProperty("hash") + public String getHash() { + return hash; + } + + @JsonProperty("hash") + public void setHash(String hash) { + this.hash = hash; + } + + @JsonProperty("kind") + public String getKind() { + return kind; + } + + @JsonProperty("kind") + public void setKind(String kind) { + this.kind = kind; + } + + @JsonProperty("name") + public String getName() { + return name; + } + + @JsonProperty("name") + public void setName(String name) { + this.name = name; + } + + @JsonProperty("namespace") + public String getNamespace() { + return namespace; + } + + @JsonProperty("namespace") + public void setNamespace(String namespace) { + this.namespace = namespace; + } + + @JsonProperty("resource") + public String getResource() { + return resource; + } + + @JsonProperty("resource") + public void setResource(String resource) { + this.resource = resource; + } + + @JsonIgnore + public SyncStatusBuilder edit() { + return new SyncStatusBuilder(this); + } + + @JsonIgnore + public SyncStatusBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/VSphereClusterDeprovision.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/VSphereClusterDeprovision.java index f6b8d347333..193952f2888 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/VSphereClusterDeprovision.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/v1/VSphereClusterDeprovision.java @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -48,7 +49,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -56,9 +57,9 @@ public class VSphereClusterDeprovision implements Editable , KubernetesRes private Long memoryMB; @JsonProperty("osDisk") private OSDisk osDisk; + @JsonProperty("resourcePool") + private String resourcePool; @JsonIgnore private Map additionalProperties = new LinkedHashMap(); @@ -75,12 +78,13 @@ public class MachinePool implements Editable , KubernetesRes public MachinePool() { } - public MachinePool(Integer coresPerSocket, Integer cpus, Long memoryMB, OSDisk osDisk) { + public MachinePool(Integer coresPerSocket, Integer cpus, Long memoryMB, OSDisk osDisk, String resourcePool) { super(); this.coresPerSocket = coresPerSocket; this.cpus = cpus; this.memoryMB = memoryMB; this.osDisk = osDisk; + this.resourcePool = resourcePool; } @JsonProperty("coresPerSocket") @@ -123,6 +127,16 @@ public void setOsDisk(OSDisk osDisk) { this.osDisk = osDisk; } + @JsonProperty("resourcePool") + public String getResourcePool() { + return resourcePool; + } + + @JsonProperty("resourcePool") + public void setResourcePool(String resourcePool) { + this.resourcePool = resourcePool; + } + @JsonIgnore public MachinePoolBuilder edit() { return new MachinePoolBuilder(this); diff --git a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/vsphere/v1/Platform.java b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/vsphere/v1/Platform.java index 67845ae1409..e91944932e5 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/vsphere/v1/Platform.java +++ b/kubernetes-model-generator/openshift-model-hive/src/generated/java/io/fabric8/openshift/api/model/hive/vsphere/v1/Platform.java @@ -16,6 +16,7 @@ import io.fabric8.kubernetes.api.model.IntOrString; import io.fabric8.kubernetes.api.model.KubernetesResource; import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; import io.fabric8.kubernetes.api.model.ObjectMeta; import io.fabric8.kubernetes.api.model.ObjectReference; import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; @@ -53,7 +54,7 @@ @BuildableReference(ResourceRequirements.class), @BuildableReference(IntOrString.class), @BuildableReference(ObjectReference.class), - @BuildableReference(io.fabric8.kubernetes.api.model.LocalObjectReference.class), + @BuildableReference(LocalObjectReference.class), @BuildableReference(PersistentVolumeClaim.class) }) @Generated("jsonschema2pojo") @@ -61,11 +62,11 @@ public class Platform implements Editable , KubernetesResource { @JsonProperty("certificatesSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference certificatesSecretRef; + private LocalObjectReference certificatesSecretRef; @JsonProperty("cluster") private String cluster; @JsonProperty("credentialsSecretRef") - private io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef; + private LocalObjectReference credentialsSecretRef; @JsonProperty("datacenter") private String datacenter; @JsonProperty("defaultDatastore") @@ -86,7 +87,7 @@ public class Platform implements Editable , KubernetesResource public Platform() { } - public Platform(io.fabric8.kubernetes.api.model.LocalObjectReference certificatesSecretRef, String cluster, io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef, String datacenter, String defaultDatastore, String folder, String network, String vCenter) { + public Platform(LocalObjectReference certificatesSecretRef, String cluster, LocalObjectReference credentialsSecretRef, String datacenter, String defaultDatastore, String folder, String network, String vCenter) { super(); this.certificatesSecretRef = certificatesSecretRef; this.cluster = cluster; @@ -99,12 +100,12 @@ public Platform(io.fabric8.kubernetes.api.model.LocalObjectReference certificate } @JsonProperty("certificatesSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getCertificatesSecretRef() { + public LocalObjectReference getCertificatesSecretRef() { return certificatesSecretRef; } @JsonProperty("certificatesSecretRef") - public void setCertificatesSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference certificatesSecretRef) { + public void setCertificatesSecretRef(LocalObjectReference certificatesSecretRef) { this.certificatesSecretRef = certificatesSecretRef; } @@ -119,12 +120,12 @@ public void setCluster(String cluster) { } @JsonProperty("credentialsSecretRef") - public io.fabric8.kubernetes.api.model.LocalObjectReference getCredentialsSecretRef() { + public LocalObjectReference getCredentialsSecretRef() { return credentialsSecretRef; } @JsonProperty("credentialsSecretRef") - public void setCredentialsSecretRef(io.fabric8.kubernetes.api.model.LocalObjectReference credentialsSecretRef) { + public void setCredentialsSecretRef(LocalObjectReference credentialsSecretRef) { this.credentialsSecretRef = credentialsSecretRef; } diff --git a/kubernetes-model-generator/openshift-model-hive/src/test/java/io/fabric8/openshift/api/model/hive/v1/ClusterClaimTest.java b/kubernetes-model-generator/openshift-model-hive/src/test/java/io/fabric8/openshift/api/model/hive/v1/ClusterClaimTest.java index 3689c6ffed7..8482ff13965 100644 --- a/kubernetes-model-generator/openshift-model-hive/src/test/java/io/fabric8/openshift/api/model/hive/v1/ClusterClaimTest.java +++ b/kubernetes-model-generator/openshift-model-hive/src/test/java/io/fabric8/openshift/api/model/hive/v1/ClusterClaimTest.java @@ -16,12 +16,11 @@ package io.fabric8.openshift.api.model.hive.v1; import com.fasterxml.jackson.databind.ObjectMapper; -import io.fabric8.kubernetes.api.model.Duration; +import io.fabric8.kubernetes.model.util.Helper; import org.junit.jupiter.api.Test; import java.io.IOException; import java.text.ParseException; -import java.util.Scanner; import static org.assertj.core.api.Assertions.assertThat; @@ -31,9 +30,7 @@ class ClusterClaimTest { @Test void deserializationAndSerializationShouldWorkAsExpected() throws IOException, ParseException { // Given - String originalJson = new Scanner(getClass().getResourceAsStream("/valid-clusterclaim.json")) - .useDelimiter("\\A") - .next(); + String originalJson = Helper.loadJson("/valid-clusterclaim.json"); // When final ClusterClaim clusterClaim = mapper.readValue(originalJson, ClusterClaim.class); @@ -48,7 +45,7 @@ void deserializationAndSerializationShouldWorkAsExpected() throws IOException, P .hasFieldOrPropertyWithValue("metadata.name", "foo") .hasFieldOrPropertyWithValue("metadata.namespace", "my-project") .hasFieldOrPropertyWithValue("spec.clusterPoolName", "openshift-46-aws-us-east-1") - .hasFieldOrPropertyWithValue("spec.lifetime", Duration.parse("8h")) + .hasFieldOrPropertyWithValue("spec.lifetime", "8h") .hasFieldOrPropertyWithValue("spec.namespace", "openshift-46-aws-us-east-1-j495p"); } @@ -61,7 +58,7 @@ void builderShouldCreateObject() throws ParseException { .endMetadata() .withNewSpec() .withClusterPoolName("openshift-46-aws-us-east-1") - .withLifetime(Duration.parse("8h")) + .withLifetime("8h") .withNamespace("openshift-46-aws-us-east-1-j495p") .endSpec(); @@ -73,7 +70,7 @@ void builderShouldCreateObject() throws ParseException { .isNotNull() .hasFieldOrPropertyWithValue("metadata.name", "foo") .hasFieldOrPropertyWithValue("spec.clusterPoolName", "openshift-46-aws-us-east-1") - .hasFieldOrPropertyWithValue("spec.lifetime", Duration.parse("8h")) + .hasFieldOrPropertyWithValue("spec.lifetime", "8h") .hasFieldOrPropertyWithValue("spec.namespace", "openshift-46-aws-us-east-1-j495p"); } } diff --git a/kubernetes-model-generator/openshift-model/pom.xml b/kubernetes-model-generator/openshift-model/pom.xml index c98ffcf9efa..d14906f5f49 100644 --- a/kubernetes-model-generator/openshift-model/pom.xml +++ b/kubernetes-model-generator/openshift-model/pom.xml @@ -35,6 +35,7 @@ * io.fabric8.openshift.api.model**, + io.fabric8.openshift.api.model.customresourcestatus.conditions.v1**, @@ -75,6 +76,7 @@ + ^com\.github\.openshift\.custom-resource-status\..*$ ^io\.openshift\.apps\..*$ ^io\.openshift\.authorization\..*$ ^io\.openshift\.build\..*$ diff --git a/kubernetes-model-generator/openshift-model/src/generated/java/io/fabric8/openshift/api/model/customresourcestatus/conditions/v1/Condition.java b/kubernetes-model-generator/openshift-model/src/generated/java/io/fabric8/openshift/api/model/customresourcestatus/conditions/v1/Condition.java new file mode 100644 index 00000000000..4deb07cf8af --- /dev/null +++ b/kubernetes-model-generator/openshift-model/src/generated/java/io/fabric8/openshift/api/model/customresourcestatus/conditions/v1/Condition.java @@ -0,0 +1,178 @@ + +package io.fabric8.openshift.api.model.customresourcestatus.conditions.v1; + +import java.util.LinkedHashMap; +import java.util.Map; +import javax.annotation.Generated; +import com.fasterxml.jackson.annotation.JsonAnyGetter; +import com.fasterxml.jackson.annotation.JsonAnySetter; +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonPropertyOrder; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.fabric8.kubernetes.api.builder.Editable; +import io.fabric8.kubernetes.api.model.Container; +import io.fabric8.kubernetes.api.model.IntOrString; +import io.fabric8.kubernetes.api.model.KubernetesResource; +import io.fabric8.kubernetes.api.model.LabelSelector; +import io.fabric8.kubernetes.api.model.LocalObjectReference; +import io.fabric8.kubernetes.api.model.ObjectMeta; +import io.fabric8.kubernetes.api.model.ObjectReference; +import io.fabric8.kubernetes.api.model.PersistentVolumeClaim; +import io.fabric8.kubernetes.api.model.PodTemplateSpec; +import io.fabric8.kubernetes.api.model.ResourceRequirements; +import io.sundr.builder.annotations.Buildable; +import io.sundr.builder.annotations.BuildableReference; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.Accessors; + +@JsonDeserialize(using = com.fasterxml.jackson.databind.JsonDeserializer.None.class) +@JsonInclude(JsonInclude.Include.NON_NULL) +@JsonPropertyOrder({ + "lastHeartbeatTime", + "lastTransitionTime", + "message", + "reason", + "status", + "type" +}) +@ToString +@EqualsAndHashCode +@Accessors(prefix = { + "_", + "" +}) +@Buildable(editableEnabled = false, validationEnabled = false, generateBuilderPackage = false, lazyCollectionInitEnabled = false, builderPackage = "io.fabric8.kubernetes.api.builder", refs = { + @BuildableReference(ObjectMeta.class), + @BuildableReference(LabelSelector.class), + @BuildableReference(Container.class), + @BuildableReference(PodTemplateSpec.class), + @BuildableReference(ResourceRequirements.class), + @BuildableReference(IntOrString.class), + @BuildableReference(ObjectReference.class), + @BuildableReference(LocalObjectReference.class), + @BuildableReference(PersistentVolumeClaim.class) +}) +@Generated("jsonschema2pojo") +public class Condition implements Editable , KubernetesResource +{ + + @JsonProperty("lastHeartbeatTime") + private String lastHeartbeatTime; + @JsonProperty("lastTransitionTime") + private String lastTransitionTime; + @JsonProperty("message") + private String message; + @JsonProperty("reason") + private String reason; + @JsonProperty("status") + private String status; + @JsonProperty("type") + private String type; + @JsonIgnore + private Map additionalProperties = new LinkedHashMap(); + + /** + * No args constructor for use in serialization + * + */ + public Condition() { + } + + public Condition(String lastHeartbeatTime, String lastTransitionTime, String message, String reason, String status, String type) { + super(); + this.lastHeartbeatTime = lastHeartbeatTime; + this.lastTransitionTime = lastTransitionTime; + this.message = message; + this.reason = reason; + this.status = status; + this.type = type; + } + + @JsonProperty("lastHeartbeatTime") + public String getLastHeartbeatTime() { + return lastHeartbeatTime; + } + + @JsonProperty("lastHeartbeatTime") + public void setLastHeartbeatTime(String lastHeartbeatTime) { + this.lastHeartbeatTime = lastHeartbeatTime; + } + + @JsonProperty("lastTransitionTime") + public String getLastTransitionTime() { + return lastTransitionTime; + } + + @JsonProperty("lastTransitionTime") + public void setLastTransitionTime(String lastTransitionTime) { + this.lastTransitionTime = lastTransitionTime; + } + + @JsonProperty("message") + public String getMessage() { + return message; + } + + @JsonProperty("message") + public void setMessage(String message) { + this.message = message; + } + + @JsonProperty("reason") + public String getReason() { + return reason; + } + + @JsonProperty("reason") + public void setReason(String reason) { + this.reason = reason; + } + + @JsonProperty("status") + public String getStatus() { + return status; + } + + @JsonProperty("status") + public void setStatus(String status) { + this.status = status; + } + + @JsonProperty("type") + public String getType() { + return type; + } + + @JsonProperty("type") + public void setType(String type) { + this.type = type; + } + + @JsonIgnore + public ConditionBuilder edit() { + return new ConditionBuilder(this); + } + + @JsonIgnore + public ConditionBuilder toBuilder() { + return edit(); + } + + @JsonAnyGetter + public Map getAdditionalProperties() { + return this.additionalProperties; + } + + @JsonAnySetter + public void setAdditionalProperty(String name, Object value) { + this.additionalProperties.put(name, value); + } + + public void setAdditionalProperties(Map additionalProperties) { + this.additionalProperties = additionalProperties; + } + +} diff --git a/kubernetes-model-generator/pom.xml b/kubernetes-model-generator/pom.xml index ca9e371fcff..d53f6eed40f 100644 --- a/kubernetes-model-generator/pom.xml +++ b/kubernetes-model-generator/pom.xml @@ -157,6 +157,7 @@ false io.fabric8.openshift.api.model.monitoring + io.fabric8.openshift.api.model.customresourcestatus io.fabric8.kubernetes.api.model io.fabric8.kubernetes.api.model io.fabric8.kubernetes.api.model