nvidia.com_dynamocomponentdeployments.yaml 688 KB
Newer Older
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
# SPDX-FileCopyrightText: Copyright (c) 2024-2025 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
# SPDX-License-Identifier: Apache-2.0
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.16.4
22
    helm.sh/resource-policy: keep
23
  name: dynamocomponentdeployments.nvidia.com
24
25
26
spec:
  group: nvidia.com
  names:
27
28
29
    kind: DynamoComponentDeployment
    listKind: DynamoComponentDeploymentList
    plural: dynamocomponentdeployments
30
    shortNames:
31
      - dcd
32
    singular: dynamocomponentdeployment
33
34
  scope: Namespaced
  versions:
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
    - additionalPrinterColumns:
        - description: Dynamo component
          jsonPath: .spec.dynamoComponent
          name: DynamoComponent
          type: string
        - description: Available
          jsonPath: .status.conditions[?(@.type=='Available')].status
          name: Available
          type: string
        - jsonPath: .metadata.creationTimestamp
          name: Age
          type: date
      name: v1alpha1
      schema:
        openAPIV3Schema:
50
          description: DynamoComponentDeployment is the Schema for the dynamocomponentdeployments API
51
52
          properties:
            apiVersion:
53
54
55
56
57
              description: |-
                APIVersion defines the versioned schema of this representation of an object.
                Servers should convert recognized schemas to the latest internal value, and
                may reject unrecognized values.
                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
58
59
              type: string
            kind:
60
61
62
63
64
65
              description: |-
                Kind is a string value representing the REST resource this object represents.
                Servers may infer this from the endpoint the client submits requests to.
                Cannot be updated.
                In CamelCase.
                More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
66
67
68
69
              type: string
            metadata:
              type: object
            spec:
70
              description: Spec defines the desired state for this Dynamo component deployment.
71
72
73
74
              properties:
                annotations:
                  additionalProperties:
                    type: string
75
76
77
                  description: |-
                    Annotations to add to generated Kubernetes resources for this component
                    (such as Pod, Service, and Ingress when applicable).
78
79
                  type: object
                autoscaling:
80
                  description: Autoscaling config for this component (replica range, target utilization, etc.).
81
82
                  properties:
                    behavior:
83
84
85
                      description: |-
                        HorizontalPodAutoscalerBehavior configures the scaling behavior of the target
                        in both Up and Down directions (scaleUp and scaleDown fields respectively).
86
87
                      properties:
                        scaleDown:
88
89
90
91
92
                          description: |-
                            scaleDown is scaling policy for scaling Down.
                            If not set, the default value is to allow to scale down to minReplicas pods, with a
                            300 second stabilization window (i.e., the highest recommendation for
                            the last 300sec is used).
93
94
                          properties:
                            policies:
95
96
97
98
99
                              description: |-
                                policies is a list of potential scaling polices which can be used during scaling.
                                If not set, use the default values:
                                - For scale up: allow doubling the number of pods, or an absolute change of 4 pods in a 15s window.
                                - For scale down: allow all pods to be removed in a 15s window.
100
                              items:
101
                                description: HPAScalingPolicy is a single policy which must hold true for a specified past interval.
102
103
                                properties:
                                  periodSeconds:
104
105
106
                                    description: |-
                                      periodSeconds specifies the window of time for which the policy should hold true.
                                      PeriodSeconds must be greater than zero and less than or equal to 1800 (30 min).
107
108
109
                                    format: int32
                                    type: integer
                                  type:
110
                                    description: type is used to specify the scaling policy.
111
112
                                    type: string
                                  value:
113
114
115
                                    description: |-
                                      value contains the amount of change which is permitted by the policy.
                                      It must be greater than zero
116
117
118
119
120
121
122
123
124
125
                                    format: int32
                                    type: integer
                                required:
                                  - periodSeconds
                                  - type
                                  - value
                                type: object
                              type: array
                              x-kubernetes-list-type: atomic
                            selectPolicy:
126
127
128
                              description: |-
                                selectPolicy is used to specify which policy should be used.
                                If not set, the default value Max is used.
129
130
                              type: string
                            stabilizationWindowSeconds:
131
132
133
134
135
136
137
                              description: |-
                                stabilizationWindowSeconds is the number of seconds for which past recommendations should be
                                considered while scaling up or scaling down.
                                StabilizationWindowSeconds must be greater than or equal to zero and less than or equal to 3600 (one hour).
                                If not set, use the default values:
                                - For scale up: 0 (i.e. no stabilization is done).
                                - For scale down: 300 (i.e. the stabilization window is 300 seconds long).
138
139
                              format: int32
                              type: integer
140
141
142
143
                            tolerance:
                              anyOf:
                                - type: integer
                                - type: string
144
145
146
147
148
149
150
151
152
153
154
155
                              description: |-
                                tolerance is the tolerance on the ratio between the current and desired
                                metric value under which no updates are made to the desired number of
                                replicas (e.g. 0.01 for 1%). Must be greater than or equal to zero. If not
                                set, the default cluster-wide tolerance is applied (by default 10%).

                                For example, if autoscaling is configured with a memory consumption target of 100Mi,
                                and scale-down and scale-up tolerances of 5% and 1% respectively, scaling will be
                                triggered when the actual consumption falls below 95Mi or exceeds 101Mi.

                                This is an alpha field and requires enabling the HPAConfigurableTolerance
                                feature gate.
156
157
                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                              x-kubernetes-int-or-string: true
158
159
                          type: object
                        scaleUp:
160
161
162
163
164
165
                          description: |-
                            scaleUp is scaling policy for scaling Up.
                            If not set, the default value is the higher of:
                              * increase no more than 4 pods per 60 seconds
                              * double the number of pods per 60 seconds
                            No stabilization is used.
166
167
                          properties:
                            policies:
168
169
170
171
172
                              description: |-
                                policies is a list of potential scaling polices which can be used during scaling.
                                If not set, use the default values:
                                - For scale up: allow doubling the number of pods, or an absolute change of 4 pods in a 15s window.
                                - For scale down: allow all pods to be removed in a 15s window.
173
                              items:
174
                                description: HPAScalingPolicy is a single policy which must hold true for a specified past interval.
175
176
                                properties:
                                  periodSeconds:
177
178
179
                                    description: |-
                                      periodSeconds specifies the window of time for which the policy should hold true.
                                      PeriodSeconds must be greater than zero and less than or equal to 1800 (30 min).
180
181
182
                                    format: int32
                                    type: integer
                                  type:
183
                                    description: type is used to specify the scaling policy.
184
185
                                    type: string
                                  value:
186
187
188
                                    description: |-
                                      value contains the amount of change which is permitted by the policy.
                                      It must be greater than zero
189
190
191
192
193
194
195
196
197
198
                                    format: int32
                                    type: integer
                                required:
                                  - periodSeconds
                                  - type
                                  - value
                                type: object
                              type: array
                              x-kubernetes-list-type: atomic
                            selectPolicy:
199
200
201
                              description: |-
                                selectPolicy is used to specify which policy should be used.
                                If not set, the default value Max is used.
202
203
                              type: string
                            stabilizationWindowSeconds:
204
205
206
207
208
209
210
                              description: |-
                                stabilizationWindowSeconds is the number of seconds for which past recommendations should be
                                considered while scaling up or scaling down.
                                StabilizationWindowSeconds must be greater than or equal to zero and less than or equal to 3600 (one hour).
                                If not set, use the default values:
                                - For scale up: 0 (i.e. no stabilization is done).
                                - For scale down: 300 (i.e. the stabilization window is 300 seconds long).
211
212
                              format: int32
                              type: integer
213
214
215
216
                            tolerance:
                              anyOf:
                                - type: integer
                                - type: string
217
218
219
220
221
222
223
224
225
226
227
228
                              description: |-
                                tolerance is the tolerance on the ratio between the current and desired
                                metric value under which no updates are made to the desired number of
                                replicas (e.g. 0.01 for 1%). Must be greater than or equal to zero. If not
                                set, the default cluster-wide tolerance is applied (by default 10%).

                                For example, if autoscaling is configured with a memory consumption target of 100Mi,
                                and scale-down and scale-up tolerances of 5% and 1% respectively, scaling will be
                                triggered when the actual consumption falls below 95Mi or exceeds 101Mi.

                                This is an alpha field and requires enabling the HPAConfigurableTolerance
                                feature gate.
229
230
                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                              x-kubernetes-int-or-string: true
231
232
233
234
235
236
237
238
                          type: object
                      type: object
                    enabled:
                      type: boolean
                    maxReplicas:
                      type: integer
                    metrics:
                      items:
239
240
241
                        description: |-
                          MetricSpec specifies how to scale based on a single metric
                          (only `type` and one other matching field should be set at once).
242
243
                        properties:
                          containerResource:
244
245
246
247
248
249
                            description: |-
                              containerResource refers to a resource metric (such as those specified in
                              requests and limits) known to Kubernetes describing a single container in
                              each pod of the current scale target (e.g. CPU or memory). Such metrics are
                              built in to Kubernetes, and have special scaling options on top of those
                              available to normal per-pod metrics using the "pods" source.
250
251
                            properties:
                              container:
252
                                description: container is the name of the container in the pods of the scaling target
253
254
                                type: string
                              name:
255
                                description: name is the name of the resource in question.
256
257
                                type: string
                              target:
258
                                description: target specifies the target value for the given metric
259
260
                                properties:
                                  averageUtilization:
261
262
263
264
265
                                    description: |-
                                      averageUtilization is the target value of the average of the
                                      resource metric across all relevant pods, represented as a percentage of
                                      the requested value of the resource for the pods.
                                      Currently only valid for Resource metric source type
266
267
268
269
270
271
                                    format: int32
                                    type: integer
                                  averageValue:
                                    anyOf:
                                      - type: integer
                                      - type: string
272
273
274
                                    description: |-
                                      averageValue is the target value of the average of the
                                      metric across all relevant pods (as a quantity)
275
276
277
                                    pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                    x-kubernetes-int-or-string: true
                                  type:
278
                                    description: type represents whether the metric type is Utilization, Value, or AverageValue
279
280
281
282
283
                                    type: string
                                  value:
                                    anyOf:
                                      - type: integer
                                      - type: string
284
                                    description: value is the target value of the metric (as a quantity).
285
286
287
288
289
290
291
292
293
294
295
                                    pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                    x-kubernetes-int-or-string: true
                                required:
                                  - type
                                type: object
                            required:
                              - container
                              - name
                              - target
                            type: object
                          external:
296
297
298
299
300
301
                            description: |-
                              external refers to a global metric that is not associated
                              with any Kubernetes object. It allows autoscaling based on information
                              coming from components running outside of cluster
                              (for example length of queue in cloud messaging service, or
                              QPS from loadbalancer running outside of cluster).
302
303
                            properties:
                              metric:
304
                                description: metric identifies the target metric by name and selector
305
306
                                properties:
                                  name:
307
                                    description: name is the name of the given metric
308
309
                                    type: string
                                  selector:
310
311
312
313
                                    description: |-
                                      selector is the string-encoded form of a standard kubernetes label selector for the given metric
                                      When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping.
                                      When unset, just the metricName will be used to gather metrics.
314
315
                                    properties:
                                      matchExpressions:
316
                                        description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
317
                                        items:
318
319
320
                                          description: |-
                                            A label selector requirement is a selector that contains values, a key, and an operator that
                                            relates the key and values.
321
322
                                          properties:
                                            key:
323
                                              description: key is the label key that the selector applies to.
324
325
                                              type: string
                                            operator:
326
327
328
                                              description: |-
                                                operator represents a key's relationship to a set of values.
                                                Valid operators are In, NotIn, Exists and DoesNotExist.
329
330
                                              type: string
                                            values:
331
332
333
334
335
                                              description: |-
                                                values is an array of string values. If the operator is In or NotIn,
                                                the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                the values array must be empty. This array is replaced during a strategic
                                                merge patch.
336
337
338
339
340
341
342
343
344
345
346
347
348
                                              items:
                                                type: string
                                              type: array
                                              x-kubernetes-list-type: atomic
                                          required:
                                            - key
                                            - operator
                                          type: object
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      matchLabels:
                                        additionalProperties:
                                          type: string
349
350
351
352
                                        description: |-
                                          matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                          map is equivalent to an element of matchExpressions, whose key field is "key", the
                                          operator is "In", and the values array contains only "value". The requirements are ANDed.
353
354
355
356
357
358
359
                                        type: object
                                    type: object
                                    x-kubernetes-map-type: atomic
                                required:
                                  - name
                                type: object
                              target:
360
                                description: target specifies the target value for the given metric
361
362
                                properties:
                                  averageUtilization:
363
364
365
366
367
                                    description: |-
                                      averageUtilization is the target value of the average of the
                                      resource metric across all relevant pods, represented as a percentage of
                                      the requested value of the resource for the pods.
                                      Currently only valid for Resource metric source type
368
369
370
371
372
373
                                    format: int32
                                    type: integer
                                  averageValue:
                                    anyOf:
                                      - type: integer
                                      - type: string
374
375
376
                                    description: |-
                                      averageValue is the target value of the average of the
                                      metric across all relevant pods (as a quantity)
377
378
379
                                    pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                    x-kubernetes-int-or-string: true
                                  type:
380
                                    description: type represents whether the metric type is Utilization, Value, or AverageValue
381
382
383
384
385
                                    type: string
                                  value:
                                    anyOf:
                                      - type: integer
                                      - type: string
386
                                    description: value is the target value of the metric (as a quantity).
387
388
389
390
391
392
393
394
395
396
                                    pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                    x-kubernetes-int-or-string: true
                                required:
                                  - type
                                type: object
                            required:
                              - metric
                              - target
                            type: object
                          object:
397
398
399
                            description: |-
                              object refers to a metric describing a single kubernetes object
                              (for example, hits-per-second on an Ingress object).
400
401
                            properties:
                              describedObject:
402
                                description: describedObject specifies the descriptions of a object,such as kind,name apiVersion
403
404
                                properties:
                                  apiVersion:
405
                                    description: apiVersion is the API version of the referent
406
407
                                    type: string
                                  kind:
408
                                    description: 'kind is the kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
409
410
                                    type: string
                                  name:
411
                                    description: 'name is the name of the referent; More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
412
413
414
415
416
417
                                    type: string
                                required:
                                  - kind
                                  - name
                                type: object
                              metric:
418
                                description: metric identifies the target metric by name and selector
419
420
                                properties:
                                  name:
421
                                    description: name is the name of the given metric
422
423
                                    type: string
                                  selector:
424
425
426
427
                                    description: |-
                                      selector is the string-encoded form of a standard kubernetes label selector for the given metric
                                      When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping.
                                      When unset, just the metricName will be used to gather metrics.
428
429
                                    properties:
                                      matchExpressions:
430
                                        description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
431
                                        items:
432
433
434
                                          description: |-
                                            A label selector requirement is a selector that contains values, a key, and an operator that
                                            relates the key and values.
435
436
                                          properties:
                                            key:
437
                                              description: key is the label key that the selector applies to.
438
439
                                              type: string
                                            operator:
440
441
442
                                              description: |-
                                                operator represents a key's relationship to a set of values.
                                                Valid operators are In, NotIn, Exists and DoesNotExist.
443
444
                                              type: string
                                            values:
445
446
447
448
449
                                              description: |-
                                                values is an array of string values. If the operator is In or NotIn,
                                                the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                the values array must be empty. This array is replaced during a strategic
                                                merge patch.
450
451
452
453
454
455
456
457
458
459
460
461
462
                                              items:
                                                type: string
                                              type: array
                                              x-kubernetes-list-type: atomic
                                          required:
                                            - key
                                            - operator
                                          type: object
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      matchLabels:
                                        additionalProperties:
                                          type: string
463
464
465
466
                                        description: |-
                                          matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                          map is equivalent to an element of matchExpressions, whose key field is "key", the
                                          operator is "In", and the values array contains only "value". The requirements are ANDed.
467
468
469
470
471
472
473
                                        type: object
                                    type: object
                                    x-kubernetes-map-type: atomic
                                required:
                                  - name
                                type: object
                              target:
474
                                description: target specifies the target value for the given metric
475
476
                                properties:
                                  averageUtilization:
477
478
479
480
481
                                    description: |-
                                      averageUtilization is the target value of the average of the
                                      resource metric across all relevant pods, represented as a percentage of
                                      the requested value of the resource for the pods.
                                      Currently only valid for Resource metric source type
482
483
484
485
486
487
                                    format: int32
                                    type: integer
                                  averageValue:
                                    anyOf:
                                      - type: integer
                                      - type: string
488
489
490
                                    description: |-
                                      averageValue is the target value of the average of the
                                      metric across all relevant pods (as a quantity)
491
492
493
                                    pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                    x-kubernetes-int-or-string: true
                                  type:
494
                                    description: type represents whether the metric type is Utilization, Value, or AverageValue
495
496
497
498
499
                                    type: string
                                  value:
                                    anyOf:
                                      - type: integer
                                      - type: string
500
                                    description: value is the target value of the metric (as a quantity).
501
502
503
504
505
506
507
508
509
510
511
                                    pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                    x-kubernetes-int-or-string: true
                                required:
                                  - type
                                type: object
                            required:
                              - describedObject
                              - metric
                              - target
                            type: object
                          pods:
512
513
514
515
                            description: |-
                              pods refers to a metric describing each pod in the current scale target
                              (for example, transactions-processed-per-second).  The values will be
                              averaged together before being compared to the target value.
516
517
                            properties:
                              metric:
518
                                description: metric identifies the target metric by name and selector
519
520
                                properties:
                                  name:
521
                                    description: name is the name of the given metric
522
523
                                    type: string
                                  selector:
524
525
526
527
                                    description: |-
                                      selector is the string-encoded form of a standard kubernetes label selector for the given metric
                                      When set, it is passed as an additional parameter to the metrics server for more specific metrics scoping.
                                      When unset, just the metricName will be used to gather metrics.
528
529
                                    properties:
                                      matchExpressions:
530
                                        description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
531
                                        items:
532
533
534
                                          description: |-
                                            A label selector requirement is a selector that contains values, a key, and an operator that
                                            relates the key and values.
535
536
                                          properties:
                                            key:
537
                                              description: key is the label key that the selector applies to.
538
539
                                              type: string
                                            operator:
540
541
542
                                              description: |-
                                                operator represents a key's relationship to a set of values.
                                                Valid operators are In, NotIn, Exists and DoesNotExist.
543
544
                                              type: string
                                            values:
545
546
547
548
549
                                              description: |-
                                                values is an array of string values. If the operator is In or NotIn,
                                                the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                the values array must be empty. This array is replaced during a strategic
                                                merge patch.
550
551
552
553
554
555
556
557
558
559
560
561
562
                                              items:
                                                type: string
                                              type: array
                                              x-kubernetes-list-type: atomic
                                          required:
                                            - key
                                            - operator
                                          type: object
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      matchLabels:
                                        additionalProperties:
                                          type: string
563
564
565
566
                                        description: |-
                                          matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                          map is equivalent to an element of matchExpressions, whose key field is "key", the
                                          operator is "In", and the values array contains only "value". The requirements are ANDed.
567
568
569
570
571
572
573
                                        type: object
                                    type: object
                                    x-kubernetes-map-type: atomic
                                required:
                                  - name
                                type: object
                              target:
574
                                description: target specifies the target value for the given metric
575
576
                                properties:
                                  averageUtilization:
577
578
579
580
581
                                    description: |-
                                      averageUtilization is the target value of the average of the
                                      resource metric across all relevant pods, represented as a percentage of
                                      the requested value of the resource for the pods.
                                      Currently only valid for Resource metric source type
582
583
584
585
586
587
                                    format: int32
                                    type: integer
                                  averageValue:
                                    anyOf:
                                      - type: integer
                                      - type: string
588
589
590
                                    description: |-
                                      averageValue is the target value of the average of the
                                      metric across all relevant pods (as a quantity)
591
592
593
                                    pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                    x-kubernetes-int-or-string: true
                                  type:
594
                                    description: type represents whether the metric type is Utilization, Value, or AverageValue
595
596
597
598
599
                                    type: string
                                  value:
                                    anyOf:
                                      - type: integer
                                      - type: string
600
                                    description: value is the target value of the metric (as a quantity).
601
602
603
604
605
606
607
608
609
610
                                    pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                    x-kubernetes-int-or-string: true
                                required:
                                  - type
                                type: object
                            required:
                              - metric
                              - target
                            type: object
                          resource:
611
612
613
614
615
616
                            description: |-
                              resource refers to a resource metric (such as those specified in
                              requests and limits) known to Kubernetes describing each pod in the
                              current scale target (e.g. CPU or memory). Such metrics are built in to
                              Kubernetes, and have special scaling options on top of those available
                              to normal per-pod metrics using the "pods" source.
617
618
                            properties:
                              name:
619
                                description: name is the name of the resource in question.
620
621
                                type: string
                              target:
622
                                description: target specifies the target value for the given metric
623
624
                                properties:
                                  averageUtilization:
625
626
627
628
629
                                    description: |-
                                      averageUtilization is the target value of the average of the
                                      resource metric across all relevant pods, represented as a percentage of
                                      the requested value of the resource for the pods.
                                      Currently only valid for Resource metric source type
630
631
632
633
634
635
                                    format: int32
                                    type: integer
                                  averageValue:
                                    anyOf:
                                      - type: integer
                                      - type: string
636
637
638
                                    description: |-
                                      averageValue is the target value of the average of the
                                      metric across all relevant pods (as a quantity)
639
640
641
                                    pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                    x-kubernetes-int-or-string: true
                                  type:
642
                                    description: type represents whether the metric type is Utilization, Value, or AverageValue
643
644
645
646
647
                                    type: string
                                  value:
                                    anyOf:
                                      - type: integer
                                      - type: string
648
                                    description: value is the target value of the metric (as a quantity).
649
650
651
652
653
654
655
656
657
658
                                    pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                    x-kubernetes-int-or-string: true
                                required:
                                  - type
                                type: object
                            required:
                              - name
                              - target
                            type: object
                          type:
659
660
661
                            description: |-
                              type is the type of metric source.  It should be one of "ContainerResource", "External",
                              "Object", "Pods" or "Resource", each mapping to a matching field in the object.
662
663
664
665
666
667
668
669
                            type: string
                        required:
                          - type
                        type: object
                      type: array
                    minReplicas:
                      type: integer
                  type: object
670
                backendFramework:
671
                  description: BackendFramework specifies the backend framework (e.g., "sglang", "vllm", "trtllm")
672
673
674
675
676
                  enum:
                    - sglang
                    - vllm
                    - trtllm
                  type: string
677
                componentType:
678
                  description: ComponentType indicates the role of this component (for example, "main").
679
680
                  type: string
                dynamoNamespace:
681
                  description: Dynamo namespace of the service (allows to override the Dynamo namespace of the service defined in annotations inside the Dynamo archive)
682
                  type: string
683
                envFromSecret:
684
685
686
                  description: |-
                    EnvFromSecret references a Secret whose key/value pairs will be exposed as
                    environment variables in the component containers.
687
688
                  type: string
                envs:
689
                  description: Envs defines additional environment variables to inject into the component containers.
690
                  items:
691
                    description: EnvVar represents an environment variable present in a Container.
692
                    properties:
693
                      name:
694
                        description: Name of the environment variable. Must be a C_IDENTIFIER.
695
696
                        type: string
                      value:
697
698
699
700
701
702
703
704
705
706
                        description: |-
                          Variable references $(VAR_NAME) are expanded
                          using the previously defined environment variables in the container and
                          any service environment variables. If a variable cannot be resolved,
                          the reference in the input string will be unchanged. Double $$ are reduced
                          to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.
                          "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
                          Escaped references will never be expanded, regardless of whether the variable
                          exists or not.
                          Defaults to "".
707
708
                        type: string
                      valueFrom:
709
                        description: Source for the environment variable's value. Cannot be used if value is not empty.
710
711
                        properties:
                          configMapKeyRef:
712
                            description: Selects a key of a ConfigMap.
713
714
                            properties:
                              key:
715
                                description: The key to select.
716
717
718
                                type: string
                              name:
                                default: ""
719
720
721
722
723
724
                                description: |-
                                  Name of the referent.
                                  This field is effectively required, but due to backwards compatibility is
                                  allowed to be empty. Instances of this type with an empty value here are
                                  almost certainly wrong.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
725
726
                                type: string
                              optional:
727
                                description: Specify whether the ConfigMap or its key must be defined
728
729
730
731
732
733
                                type: boolean
                            required:
                              - key
                            type: object
                            x-kubernetes-map-type: atomic
                          fieldRef:
734
735
736
                            description: |-
                              Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['<KEY>']`, `metadata.annotations['<KEY>']`,
                              spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
737
738
                            properties:
                              apiVersion:
739
                                description: Version of the schema the FieldPath is written in terms of, defaults to "v1".
740
741
                                type: string
                              fieldPath:
742
                                description: Path of the field to select in the specified API version.
743
744
745
746
747
748
                                type: string
                            required:
                              - fieldPath
                            type: object
                            x-kubernetes-map-type: atomic
                          resourceFieldRef:
749
750
751
                            description: |-
                              Selects a resource of the container: only resources limits and requests
                              (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
752
753
                            properties:
                              containerName:
754
                                description: 'Container name: required for volumes, optional for env vars'
755
756
757
758
759
                                type: string
                              divisor:
                                anyOf:
                                  - type: integer
                                  - type: string
760
                                description: Specifies the output format of the exposed resources, defaults to "1"
761
762
763
                                pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                x-kubernetes-int-or-string: true
                              resource:
764
                                description: 'Required: resource to select'
765
766
767
768
769
770
                                type: string
                            required:
                              - resource
                            type: object
                            x-kubernetes-map-type: atomic
                          secretKeyRef:
771
                            description: Selects a key of a secret in the pod's namespace
772
773
                            properties:
                              key:
774
                                description: The key of the secret to select from.  Must be a valid secret key.
775
776
777
                                type: string
                              name:
                                default: ""
778
779
780
781
782
783
                                description: |-
                                  Name of the referent.
                                  This field is effectively required, but due to backwards compatibility is
                                  allowed to be empty. Instances of this type with an empty value here are
                                  almost certainly wrong.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
784
785
                                type: string
                              optional:
786
                                description: Specify whether the Secret or its key must be defined
787
788
789
790
791
792
793
794
795
796
797
                                type: boolean
                            required:
                              - key
                            type: object
                            x-kubernetes-map-type: atomic
                        type: object
                    required:
                      - name
                    type: object
                  type: array
                extraPodMetadata:
798
                  description: ExtraPodMetadata adds labels/annotations to the created Pods.
799
800
801
802
803
804
805
806
807
808
809
                  properties:
                    annotations:
                      additionalProperties:
                        type: string
                      type: object
                    labels:
                      additionalProperties:
                        type: string
                      type: object
                  type: object
                extraPodSpec:
810
                  description: |-
811
812
813
                    ExtraPodSpec allows to override the main pod spec configuration.
                    It is a k8s standard PodSpec. It also contains a MainContainer (standard k8s Container) field
                    that allows overriding the main container configuration.
814
                  properties:
815
                    activeDeadlineSeconds:
816
817
818
819
                      description: |-
                        Optional duration in seconds the pod may be active on the node relative to
                        StartTime before the system will actively try to mark it failed and kill associated containers.
                        Value must be a positive integer.
820
821
                      format: int64
                      type: integer
822
                    affinity:
823
                      description: If specified, the pod's scheduling constraints
824
825
                      properties:
                        nodeAffinity:
826
                          description: Describes node affinity scheduling rules for the pod.
827
828
                          properties:
                            preferredDuringSchedulingIgnoredDuringExecution:
829
830
831
832
833
834
835
836
837
838
                              description: |-
                                The scheduler will prefer to schedule pods to nodes that satisfy
                                the affinity expressions specified by this field, but it may choose
                                a node that violates one or more of the expressions. The node that is
                                most preferred is the one with the greatest sum of weights, i.e.
                                for each node that meets all of the scheduling requirements (resource
                                request, requiredDuringScheduling affinity expressions, etc.),
                                compute a sum by iterating through the elements of this field and adding
                                "weight" to the sum if the node matches the corresponding matchExpressions; the
                                node(s) with the highest sum are the most preferred.
839
                              items:
840
841
842
                                description: |-
                                  An empty preferred scheduling term matches all objects with implicit weight 0
                                  (i.e. it's a no-op). A null preferred scheduling term matches no objects (i.e. is also a no-op).
843
844
                                properties:
                                  preference:
845
                                    description: A node selector term, associated with the corresponding weight.
846
847
                                    properties:
                                      matchExpressions:
848
                                        description: A list of node selector requirements by node's labels.
849
                                        items:
850
851
852
                                          description: |-
                                            A node selector requirement is a selector that contains values, a key, and an operator
                                            that relates the key and values.
853
854
                                          properties:
                                            key:
855
                                              description: The label key that the selector applies to.
856
857
                                              type: string
                                            operator:
858
859
860
                                              description: |-
                                                Represents a key's relationship to a set of values.
                                                Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
861
862
                                              type: string
                                            values:
863
864
865
866
867
868
                                              description: |-
                                                An array of string values. If the operator is In or NotIn,
                                                the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                the values array must be empty. If the operator is Gt or Lt, the values
                                                array must have a single element, which will be interpreted as an integer.
                                                This array is replaced during a strategic merge patch.
869
870
871
872
873
874
875
876
877
878
879
                                              items:
                                                type: string
                                              type: array
                                              x-kubernetes-list-type: atomic
                                          required:
                                            - key
                                            - operator
                                          type: object
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      matchFields:
880
                                        description: A list of node selector requirements by node's fields.
881
                                        items:
882
883
884
                                          description: |-
                                            A node selector requirement is a selector that contains values, a key, and an operator
                                            that relates the key and values.
885
886
                                          properties:
                                            key:
887
                                              description: The label key that the selector applies to.
888
889
                                              type: string
                                            operator:
890
891
892
                                              description: |-
                                                Represents a key's relationship to a set of values.
                                                Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
893
894
                                              type: string
                                            values:
895
896
897
898
899
900
                                              description: |-
                                                An array of string values. If the operator is In or NotIn,
                                                the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                the values array must be empty. If the operator is Gt or Lt, the values
                                                array must have a single element, which will be interpreted as an integer.
                                                This array is replaced during a strategic merge patch.
901
902
903
904
905
906
907
908
909
910
911
912
913
                                              items:
                                                type: string
                                              type: array
                                              x-kubernetes-list-type: atomic
                                          required:
                                            - key
                                            - operator
                                          type: object
                                        type: array
                                        x-kubernetes-list-type: atomic
                                    type: object
                                    x-kubernetes-map-type: atomic
                                  weight:
914
                                    description: Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.
915
916
917
918
919
920
921
922
923
                                    format: int32
                                    type: integer
                                required:
                                  - preference
                                  - weight
                                type: object
                              type: array
                              x-kubernetes-list-type: atomic
                            requiredDuringSchedulingIgnoredDuringExecution:
924
925
926
927
928
929
                              description: |-
                                If the affinity requirements specified by this field are not met at
                                scheduling time, the pod will not be scheduled onto the node.
                                If the affinity requirements specified by this field cease to be met
                                at some point during pod execution (e.g. due to an update), the system
                                may or may not try to eventually evict the pod from its node.
930
931
                              properties:
                                nodeSelectorTerms:
932
                                  description: Required. A list of node selector terms. The terms are ORed.
933
                                  items:
934
935
936
937
                                    description: |-
                                      A null or empty node selector term matches no objects. The requirements of
                                      them are ANDed.
                                      The TopologySelectorTerm type implements a subset of the NodeSelectorTerm.
938
939
                                    properties:
                                      matchExpressions:
940
                                        description: A list of node selector requirements by node's labels.
941
                                        items:
942
943
944
                                          description: |-
                                            A node selector requirement is a selector that contains values, a key, and an operator
                                            that relates the key and values.
945
946
                                          properties:
                                            key:
947
                                              description: The label key that the selector applies to.
948
949
                                              type: string
                                            operator:
950
951
952
                                              description: |-
                                                Represents a key's relationship to a set of values.
                                                Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
953
954
                                              type: string
                                            values:
955
956
957
958
959
960
                                              description: |-
                                                An array of string values. If the operator is In or NotIn,
                                                the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                the values array must be empty. If the operator is Gt or Lt, the values
                                                array must have a single element, which will be interpreted as an integer.
                                                This array is replaced during a strategic merge patch.
961
962
963
964
965
966
967
968
969
970
971
                                              items:
                                                type: string
                                              type: array
                                              x-kubernetes-list-type: atomic
                                          required:
                                            - key
                                            - operator
                                          type: object
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      matchFields:
972
                                        description: A list of node selector requirements by node's fields.
973
                                        items:
974
975
976
                                          description: |-
                                            A node selector requirement is a selector that contains values, a key, and an operator
                                            that relates the key and values.
977
978
                                          properties:
                                            key:
979
                                              description: The label key that the selector applies to.
980
981
                                              type: string
                                            operator:
982
983
984
                                              description: |-
                                                Represents a key's relationship to a set of values.
                                                Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
985
986
                                              type: string
                                            values:
987
988
989
990
991
992
                                              description: |-
                                                An array of string values. If the operator is In or NotIn,
                                                the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                the values array must be empty. If the operator is Gt or Lt, the values
                                                array must have a single element, which will be interpreted as an integer.
                                                This array is replaced during a strategic merge patch.
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
                                              items:
                                                type: string
                                              type: array
                                              x-kubernetes-list-type: atomic
                                          required:
                                            - key
                                            - operator
                                          type: object
                                        type: array
                                        x-kubernetes-list-type: atomic
                                    type: object
                                    x-kubernetes-map-type: atomic
                                  type: array
                                  x-kubernetes-list-type: atomic
                              required:
                                - nodeSelectorTerms
                              type: object
                              x-kubernetes-map-type: atomic
                          type: object
                        podAffinity:
1013
                          description: Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)).
1014
1015
                          properties:
                            preferredDuringSchedulingIgnoredDuringExecution:
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
                              description: |-
                                The scheduler will prefer to schedule pods to nodes that satisfy
                                the affinity expressions specified by this field, but it may choose
                                a node that violates one or more of the expressions. The node that is
                                most preferred is the one with the greatest sum of weights, i.e.
                                for each node that meets all of the scheduling requirements (resource
                                request, requiredDuringScheduling affinity expressions, etc.),
                                compute a sum by iterating through the elements of this field and adding
                                "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the
                                node(s) with the highest sum are the most preferred.
1026
                              items:
1027
                                description: The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)
1028
1029
                                properties:
                                  podAffinityTerm:
1030
                                    description: Required. A pod affinity term, associated with the corresponding weight.
1031
1032
                                    properties:
                                      labelSelector:
1033
1034
1035
                                        description: |-
                                          A label query over a set of resources, in this case pods.
                                          If it's null, this PodAffinityTerm matches with no Pods.
1036
1037
                                        properties:
                                          matchExpressions:
1038
                                            description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
1039
                                            items:
1040
1041
1042
                                              description: |-
                                                A label selector requirement is a selector that contains values, a key, and an operator that
                                                relates the key and values.
1043
1044
                                              properties:
                                                key:
1045
                                                  description: key is the label key that the selector applies to.
1046
1047
                                                  type: string
                                                operator:
1048
1049
1050
                                                  description: |-
                                                    operator represents a key's relationship to a set of values.
                                                    Valid operators are In, NotIn, Exists and DoesNotExist.
1051
1052
                                                  type: string
                                                values:
1053
1054
1055
1056
1057
                                                  description: |-
                                                    values is an array of string values. If the operator is In or NotIn,
                                                    the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                    the values array must be empty. This array is replaced during a strategic
                                                    merge patch.
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
                                                  items:
                                                    type: string
                                                  type: array
                                                  x-kubernetes-list-type: atomic
                                              required:
                                                - key
                                                - operator
                                              type: object
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          matchLabels:
                                            additionalProperties:
                                              type: string
1071
1072
1073
1074
                                            description: |-
                                              matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                              map is equivalent to an element of matchExpressions, whose key field is "key", the
                                              operator is "In", and the values array contains only "value". The requirements are ANDed.
1075
1076
1077
1078
                                            type: object
                                        type: object
                                        x-kubernetes-map-type: atomic
                                      matchLabelKeys:
1079
1080
1081
1082
1083
1084
1085
1086
1087
                                        description: |-
                                          MatchLabelKeys is a set of pod label keys to select which pods will
                                          be taken into consideration. The keys are used to lookup values from the
                                          incoming pod labels, those key-value labels are merged with `labelSelector` as `key in (value)`
                                          to select the group of existing pods which pods will be taken into consideration
                                          for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                          pod labels will be ignored. The default value is empty.
                                          The same key is forbidden to exist in both matchLabelKeys and labelSelector.
                                          Also, matchLabelKeys cannot be set when labelSelector isn't set.
1088
1089
1090
1091
1092
                                        items:
                                          type: string
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      mismatchLabelKeys:
1093
1094
1095
1096
1097
1098
1099
1100
1101
                                        description: |-
                                          MismatchLabelKeys is a set of pod label keys to select which pods will
                                          be taken into consideration. The keys are used to lookup values from the
                                          incoming pod labels, those key-value labels are merged with `labelSelector` as `key notin (value)`
                                          to select the group of existing pods which pods will be taken into consideration
                                          for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                          pod labels will be ignored. The default value is empty.
                                          The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
                                          Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
1102
1103
1104
1105
1106
                                        items:
                                          type: string
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      namespaceSelector:
1107
1108
1109
1110
1111
1112
                                        description: |-
                                          A label query over the set of namespaces that the term applies to.
                                          The term is applied to the union of the namespaces selected by this field
                                          and the ones listed in the namespaces field.
                                          null selector and null or empty namespaces list means "this pod's namespace".
                                          An empty selector ({}) matches all namespaces.
1113
1114
                                        properties:
                                          matchExpressions:
1115
                                            description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
1116
                                            items:
1117
1118
1119
                                              description: |-
                                                A label selector requirement is a selector that contains values, a key, and an operator that
                                                relates the key and values.
1120
1121
                                              properties:
                                                key:
1122
                                                  description: key is the label key that the selector applies to.
1123
1124
                                                  type: string
                                                operator:
1125
1126
1127
                                                  description: |-
                                                    operator represents a key's relationship to a set of values.
                                                    Valid operators are In, NotIn, Exists and DoesNotExist.
1128
1129
                                                  type: string
                                                values:
1130
1131
1132
1133
1134
                                                  description: |-
                                                    values is an array of string values. If the operator is In or NotIn,
                                                    the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                    the values array must be empty. This array is replaced during a strategic
                                                    merge patch.
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
                                                  items:
                                                    type: string
                                                  type: array
                                                  x-kubernetes-list-type: atomic
                                              required:
                                                - key
                                                - operator
                                              type: object
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          matchLabels:
                                            additionalProperties:
                                              type: string
1148
1149
1150
1151
                                            description: |-
                                              matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                              map is equivalent to an element of matchExpressions, whose key field is "key", the
                                              operator is "In", and the values array contains only "value". The requirements are ANDed.
1152
1153
1154
1155
                                            type: object
                                        type: object
                                        x-kubernetes-map-type: atomic
                                      namespaces:
1156
1157
1158
1159
1160
                                        description: |-
                                          namespaces specifies a static list of namespace names that the term applies to.
                                          The term is applied to the union of the namespaces listed in this field
                                          and the ones selected by namespaceSelector.
                                          null or empty namespaces list and null namespaceSelector means "this pod's namespace".
1161
1162
1163
1164
1165
                                        items:
                                          type: string
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      topologyKey:
1166
1167
1168
1169
1170
1171
                                        description: |-
                                          This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching
                                          the labelSelector in the specified namespaces, where co-located is defined as running on a node
                                          whose value of the label with key topologyKey matches that of any node on which any of the
                                          selected pods is running.
                                          Empty topologyKey is not allowed.
1172
1173
1174
1175
1176
                                        type: string
                                    required:
                                      - topologyKey
                                    type: object
                                  weight:
1177
1178
1179
                                    description: |-
                                      weight associated with matching the corresponding podAffinityTerm,
                                      in the range 1-100.
1180
1181
1182
1183
1184
1185
1186
1187
1188
                                    format: int32
                                    type: integer
                                required:
                                  - podAffinityTerm
                                  - weight
                                type: object
                              type: array
                              x-kubernetes-list-type: atomic
                            requiredDuringSchedulingIgnoredDuringExecution:
1189
1190
1191
1192
1193
1194
1195
1196
                              description: |-
                                If the affinity requirements specified by this field are not met at
                                scheduling time, the pod will not be scheduled onto the node.
                                If the affinity requirements specified by this field cease to be met
                                at some point during pod execution (e.g. due to a pod label update), the
                                system may or may not try to eventually evict the pod from its node.
                                When there are multiple elements, the lists of nodes corresponding to each
                                podAffinityTerm are intersected, i.e. all terms must be satisfied.
1197
                              items:
1198
1199
1200
1201
1202
1203
1204
                                description: |-
                                  Defines a set of pods (namely those matching the labelSelector
                                  relative to the given namespace(s)) that this pod should be
                                  co-located (affinity) or not co-located (anti-affinity) with,
                                  where co-located is defined as running on a node whose value of
                                  the label with key <topologyKey> matches that of any node on which
                                  a pod of the set of pods is running
1205
1206
                                properties:
                                  labelSelector:
1207
1208
1209
                                    description: |-
                                      A label query over a set of resources, in this case pods.
                                      If it's null, this PodAffinityTerm matches with no Pods.
1210
1211
                                    properties:
                                      matchExpressions:
1212
                                        description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
1213
                                        items:
1214
1215
1216
                                          description: |-
                                            A label selector requirement is a selector that contains values, a key, and an operator that
                                            relates the key and values.
1217
1218
                                          properties:
                                            key:
1219
                                              description: key is the label key that the selector applies to.
1220
1221
                                              type: string
                                            operator:
1222
1223
1224
                                              description: |-
                                                operator represents a key's relationship to a set of values.
                                                Valid operators are In, NotIn, Exists and DoesNotExist.
1225
1226
                                              type: string
                                            values:
1227
1228
1229
1230
1231
                                              description: |-
                                                values is an array of string values. If the operator is In or NotIn,
                                                the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                the values array must be empty. This array is replaced during a strategic
                                                merge patch.
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
                                              items:
                                                type: string
                                              type: array
                                              x-kubernetes-list-type: atomic
                                          required:
                                            - key
                                            - operator
                                          type: object
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      matchLabels:
                                        additionalProperties:
                                          type: string
1245
1246
1247
1248
                                        description: |-
                                          matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                          map is equivalent to an element of matchExpressions, whose key field is "key", the
                                          operator is "In", and the values array contains only "value". The requirements are ANDed.
1249
1250
1251
1252
                                        type: object
                                    type: object
                                    x-kubernetes-map-type: atomic
                                  matchLabelKeys:
1253
1254
1255
1256
1257
1258
1259
1260
1261
                                    description: |-
                                      MatchLabelKeys is a set of pod label keys to select which pods will
                                      be taken into consideration. The keys are used to lookup values from the
                                      incoming pod labels, those key-value labels are merged with `labelSelector` as `key in (value)`
                                      to select the group of existing pods which pods will be taken into consideration
                                      for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                      pod labels will be ignored. The default value is empty.
                                      The same key is forbidden to exist in both matchLabelKeys and labelSelector.
                                      Also, matchLabelKeys cannot be set when labelSelector isn't set.
1262
1263
1264
1265
1266
                                    items:
                                      type: string
                                    type: array
                                    x-kubernetes-list-type: atomic
                                  mismatchLabelKeys:
1267
1268
1269
1270
1271
1272
1273
1274
1275
                                    description: |-
                                      MismatchLabelKeys is a set of pod label keys to select which pods will
                                      be taken into consideration. The keys are used to lookup values from the
                                      incoming pod labels, those key-value labels are merged with `labelSelector` as `key notin (value)`
                                      to select the group of existing pods which pods will be taken into consideration
                                      for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                      pod labels will be ignored. The default value is empty.
                                      The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
                                      Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
1276
1277
1278
1279
1280
                                    items:
                                      type: string
                                    type: array
                                    x-kubernetes-list-type: atomic
                                  namespaceSelector:
1281
1282
1283
1284
1285
1286
                                    description: |-
                                      A label query over the set of namespaces that the term applies to.
                                      The term is applied to the union of the namespaces selected by this field
                                      and the ones listed in the namespaces field.
                                      null selector and null or empty namespaces list means "this pod's namespace".
                                      An empty selector ({}) matches all namespaces.
1287
1288
                                    properties:
                                      matchExpressions:
1289
                                        description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
1290
                                        items:
1291
1292
1293
                                          description: |-
                                            A label selector requirement is a selector that contains values, a key, and an operator that
                                            relates the key and values.
1294
1295
                                          properties:
                                            key:
1296
                                              description: key is the label key that the selector applies to.
1297
1298
                                              type: string
                                            operator:
1299
1300
1301
                                              description: |-
                                                operator represents a key's relationship to a set of values.
                                                Valid operators are In, NotIn, Exists and DoesNotExist.
1302
1303
                                              type: string
                                            values:
1304
1305
1306
1307
1308
                                              description: |-
                                                values is an array of string values. If the operator is In or NotIn,
                                                the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                the values array must be empty. This array is replaced during a strategic
                                                merge patch.
1309
1310
1311
1312
1313
1314
1315
1316
1317
1318
1319
1320
1321
                                              items:
                                                type: string
                                              type: array
                                              x-kubernetes-list-type: atomic
                                          required:
                                            - key
                                            - operator
                                          type: object
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      matchLabels:
                                        additionalProperties:
                                          type: string
1322
1323
1324
1325
                                        description: |-
                                          matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                          map is equivalent to an element of matchExpressions, whose key field is "key", the
                                          operator is "In", and the values array contains only "value". The requirements are ANDed.
1326
1327
1328
1329
                                        type: object
                                    type: object
                                    x-kubernetes-map-type: atomic
                                  namespaces:
1330
1331
1332
1333
1334
                                    description: |-
                                      namespaces specifies a static list of namespace names that the term applies to.
                                      The term is applied to the union of the namespaces listed in this field
                                      and the ones selected by namespaceSelector.
                                      null or empty namespaces list and null namespaceSelector means "this pod's namespace".
1335
1336
1337
1338
1339
                                    items:
                                      type: string
                                    type: array
                                    x-kubernetes-list-type: atomic
                                  topologyKey:
1340
1341
1342
1343
1344
1345
                                    description: |-
                                      This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching
                                      the labelSelector in the specified namespaces, where co-located is defined as running on a node
                                      whose value of the label with key topologyKey matches that of any node on which any of the
                                      selected pods is running.
                                      Empty topologyKey is not allowed.
1346
1347
1348
1349
1350
1351
1352
1353
                                    type: string
                                required:
                                  - topologyKey
                                type: object
                              type: array
                              x-kubernetes-list-type: atomic
                          type: object
                        podAntiAffinity:
1354
                          description: Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)).
1355
1356
                          properties:
                            preferredDuringSchedulingIgnoredDuringExecution:
1357
1358
1359
1360
1361
1362
1363
1364
1365
1366
                              description: |-
                                The scheduler will prefer to schedule pods to nodes that satisfy
                                the anti-affinity expressions specified by this field, but it may choose
                                a node that violates one or more of the expressions. The node that is
                                most preferred is the one with the greatest sum of weights, i.e.
                                for each node that meets all of the scheduling requirements (resource
                                request, requiredDuringScheduling anti-affinity expressions, etc.),
                                compute a sum by iterating through the elements of this field and adding
                                "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the
                                node(s) with the highest sum are the most preferred.
1367
                              items:
1368
                                description: The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s)
1369
1370
                                properties:
                                  podAffinityTerm:
1371
                                    description: Required. A pod affinity term, associated with the corresponding weight.
1372
1373
                                    properties:
                                      labelSelector:
1374
1375
1376
                                        description: |-
                                          A label query over a set of resources, in this case pods.
                                          If it's null, this PodAffinityTerm matches with no Pods.
1377
1378
                                        properties:
                                          matchExpressions:
1379
                                            description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
1380
                                            items:
1381
1382
1383
                                              description: |-
                                                A label selector requirement is a selector that contains values, a key, and an operator that
                                                relates the key and values.
1384
1385
                                              properties:
                                                key:
1386
                                                  description: key is the label key that the selector applies to.
1387
1388
                                                  type: string
                                                operator:
1389
1390
1391
                                                  description: |-
                                                    operator represents a key's relationship to a set of values.
                                                    Valid operators are In, NotIn, Exists and DoesNotExist.
1392
1393
                                                  type: string
                                                values:
1394
1395
1396
1397
1398
                                                  description: |-
                                                    values is an array of string values. If the operator is In or NotIn,
                                                    the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                    the values array must be empty. This array is replaced during a strategic
                                                    merge patch.
1399
1400
1401
1402
1403
1404
1405
1406
1407
1408
1409
1410
1411
                                                  items:
                                                    type: string
                                                  type: array
                                                  x-kubernetes-list-type: atomic
                                              required:
                                                - key
                                                - operator
                                              type: object
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          matchLabels:
                                            additionalProperties:
                                              type: string
1412
1413
1414
1415
                                            description: |-
                                              matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                              map is equivalent to an element of matchExpressions, whose key field is "key", the
                                              operator is "In", and the values array contains only "value". The requirements are ANDed.
1416
1417
1418
1419
                                            type: object
                                        type: object
                                        x-kubernetes-map-type: atomic
                                      matchLabelKeys:
1420
1421
1422
1423
1424
1425
1426
1427
1428
                                        description: |-
                                          MatchLabelKeys is a set of pod label keys to select which pods will
                                          be taken into consideration. The keys are used to lookup values from the
                                          incoming pod labels, those key-value labels are merged with `labelSelector` as `key in (value)`
                                          to select the group of existing pods which pods will be taken into consideration
                                          for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                          pod labels will be ignored. The default value is empty.
                                          The same key is forbidden to exist in both matchLabelKeys and labelSelector.
                                          Also, matchLabelKeys cannot be set when labelSelector isn't set.
1429
1430
1431
1432
1433
                                        items:
                                          type: string
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      mismatchLabelKeys:
1434
1435
1436
1437
1438
1439
1440
1441
1442
                                        description: |-
                                          MismatchLabelKeys is a set of pod label keys to select which pods will
                                          be taken into consideration. The keys are used to lookup values from the
                                          incoming pod labels, those key-value labels are merged with `labelSelector` as `key notin (value)`
                                          to select the group of existing pods which pods will be taken into consideration
                                          for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                          pod labels will be ignored. The default value is empty.
                                          The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
                                          Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
1443
1444
1445
1446
1447
                                        items:
                                          type: string
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      namespaceSelector:
1448
1449
1450
1451
1452
1453
                                        description: |-
                                          A label query over the set of namespaces that the term applies to.
                                          The term is applied to the union of the namespaces selected by this field
                                          and the ones listed in the namespaces field.
                                          null selector and null or empty namespaces list means "this pod's namespace".
                                          An empty selector ({}) matches all namespaces.
1454
1455
                                        properties:
                                          matchExpressions:
1456
                                            description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
1457
                                            items:
1458
1459
1460
                                              description: |-
                                                A label selector requirement is a selector that contains values, a key, and an operator that
                                                relates the key and values.
1461
1462
                                              properties:
                                                key:
1463
                                                  description: key is the label key that the selector applies to.
1464
1465
                                                  type: string
                                                operator:
1466
1467
1468
                                                  description: |-
                                                    operator represents a key's relationship to a set of values.
                                                    Valid operators are In, NotIn, Exists and DoesNotExist.
1469
1470
                                                  type: string
                                                values:
1471
1472
1473
1474
1475
                                                  description: |-
                                                    values is an array of string values. If the operator is In or NotIn,
                                                    the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                    the values array must be empty. This array is replaced during a strategic
                                                    merge patch.
1476
1477
1478
1479
1480
1481
1482
1483
1484
1485
1486
1487
1488
                                                  items:
                                                    type: string
                                                  type: array
                                                  x-kubernetes-list-type: atomic
                                              required:
                                                - key
                                                - operator
                                              type: object
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          matchLabels:
                                            additionalProperties:
                                              type: string
1489
1490
1491
1492
                                            description: |-
                                              matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                              map is equivalent to an element of matchExpressions, whose key field is "key", the
                                              operator is "In", and the values array contains only "value". The requirements are ANDed.
1493
1494
1495
1496
                                            type: object
                                        type: object
                                        x-kubernetes-map-type: atomic
                                      namespaces:
1497
1498
1499
1500
1501
                                        description: |-
                                          namespaces specifies a static list of namespace names that the term applies to.
                                          The term is applied to the union of the namespaces listed in this field
                                          and the ones selected by namespaceSelector.
                                          null or empty namespaces list and null namespaceSelector means "this pod's namespace".
1502
1503
1504
1505
1506
                                        items:
                                          type: string
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      topologyKey:
1507
1508
1509
1510
1511
1512
                                        description: |-
                                          This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching
                                          the labelSelector in the specified namespaces, where co-located is defined as running on a node
                                          whose value of the label with key topologyKey matches that of any node on which any of the
                                          selected pods is running.
                                          Empty topologyKey is not allowed.
1513
1514
1515
1516
1517
                                        type: string
                                    required:
                                      - topologyKey
                                    type: object
                                  weight:
1518
1519
1520
                                    description: |-
                                      weight associated with matching the corresponding podAffinityTerm,
                                      in the range 1-100.
1521
1522
1523
1524
1525
1526
1527
1528
1529
                                    format: int32
                                    type: integer
                                required:
                                  - podAffinityTerm
                                  - weight
                                type: object
                              type: array
                              x-kubernetes-list-type: atomic
                            requiredDuringSchedulingIgnoredDuringExecution:
1530
1531
1532
1533
1534
1535
1536
1537
                              description: |-
                                If the anti-affinity requirements specified by this field are not met at
                                scheduling time, the pod will not be scheduled onto the node.
                                If the anti-affinity requirements specified by this field cease to be met
                                at some point during pod execution (e.g. due to a pod label update), the
                                system may or may not try to eventually evict the pod from its node.
                                When there are multiple elements, the lists of nodes corresponding to each
                                podAffinityTerm are intersected, i.e. all terms must be satisfied.
1538
                              items:
1539
1540
1541
1542
1543
1544
1545
                                description: |-
                                  Defines a set of pods (namely those matching the labelSelector
                                  relative to the given namespace(s)) that this pod should be
                                  co-located (affinity) or not co-located (anti-affinity) with,
                                  where co-located is defined as running on a node whose value of
                                  the label with key <topologyKey> matches that of any node on which
                                  a pod of the set of pods is running
1546
1547
                                properties:
                                  labelSelector:
1548
1549
1550
                                    description: |-
                                      A label query over a set of resources, in this case pods.
                                      If it's null, this PodAffinityTerm matches with no Pods.
1551
1552
                                    properties:
                                      matchExpressions:
1553
                                        description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
1554
                                        items:
1555
1556
1557
                                          description: |-
                                            A label selector requirement is a selector that contains values, a key, and an operator that
                                            relates the key and values.
1558
1559
                                          properties:
                                            key:
1560
                                              description: key is the label key that the selector applies to.
1561
1562
                                              type: string
                                            operator:
1563
1564
1565
                                              description: |-
                                                operator represents a key's relationship to a set of values.
                                                Valid operators are In, NotIn, Exists and DoesNotExist.
1566
1567
                                              type: string
                                            values:
1568
1569
1570
1571
1572
                                              description: |-
                                                values is an array of string values. If the operator is In or NotIn,
                                                the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                the values array must be empty. This array is replaced during a strategic
                                                merge patch.
1573
1574
1575
1576
1577
1578
1579
1580
1581
1582
1583
1584
1585
                                              items:
                                                type: string
                                              type: array
                                              x-kubernetes-list-type: atomic
                                          required:
                                            - key
                                            - operator
                                          type: object
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      matchLabels:
                                        additionalProperties:
                                          type: string
1586
1587
1588
1589
                                        description: |-
                                          matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                          map is equivalent to an element of matchExpressions, whose key field is "key", the
                                          operator is "In", and the values array contains only "value". The requirements are ANDed.
1590
1591
1592
1593
                                        type: object
                                    type: object
                                    x-kubernetes-map-type: atomic
                                  matchLabelKeys:
1594
1595
1596
1597
1598
1599
1600
1601
1602
                                    description: |-
                                      MatchLabelKeys is a set of pod label keys to select which pods will
                                      be taken into consideration. The keys are used to lookup values from the
                                      incoming pod labels, those key-value labels are merged with `labelSelector` as `key in (value)`
                                      to select the group of existing pods which pods will be taken into consideration
                                      for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                      pod labels will be ignored. The default value is empty.
                                      The same key is forbidden to exist in both matchLabelKeys and labelSelector.
                                      Also, matchLabelKeys cannot be set when labelSelector isn't set.
1603
1604
1605
1606
1607
                                    items:
                                      type: string
                                    type: array
                                    x-kubernetes-list-type: atomic
                                  mismatchLabelKeys:
1608
1609
1610
1611
1612
1613
1614
1615
1616
                                    description: |-
                                      MismatchLabelKeys is a set of pod label keys to select which pods will
                                      be taken into consideration. The keys are used to lookup values from the
                                      incoming pod labels, those key-value labels are merged with `labelSelector` as `key notin (value)`
                                      to select the group of existing pods which pods will be taken into consideration
                                      for the incoming pod's pod (anti) affinity. Keys that don't exist in the incoming
                                      pod labels will be ignored. The default value is empty.
                                      The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
                                      Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
1617
1618
1619
1620
1621
                                    items:
                                      type: string
                                    type: array
                                    x-kubernetes-list-type: atomic
                                  namespaceSelector:
1622
1623
1624
1625
1626
1627
                                    description: |-
                                      A label query over the set of namespaces that the term applies to.
                                      The term is applied to the union of the namespaces selected by this field
                                      and the ones listed in the namespaces field.
                                      null selector and null or empty namespaces list means "this pod's namespace".
                                      An empty selector ({}) matches all namespaces.
1628
1629
                                    properties:
                                      matchExpressions:
1630
                                        description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
1631
                                        items:
1632
1633
1634
                                          description: |-
                                            A label selector requirement is a selector that contains values, a key, and an operator that
                                            relates the key and values.
1635
1636
                                          properties:
                                            key:
1637
                                              description: key is the label key that the selector applies to.
1638
1639
                                              type: string
                                            operator:
1640
1641
1642
                                              description: |-
                                                operator represents a key's relationship to a set of values.
                                                Valid operators are In, NotIn, Exists and DoesNotExist.
1643
1644
                                              type: string
                                            values:
1645
1646
1647
1648
1649
                                              description: |-
                                                values is an array of string values. If the operator is In or NotIn,
                                                the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                the values array must be empty. This array is replaced during a strategic
                                                merge patch.
1650
1651
1652
1653
1654
1655
1656
1657
1658
1659
1660
1661
1662
                                              items:
                                                type: string
                                              type: array
                                              x-kubernetes-list-type: atomic
                                          required:
                                            - key
                                            - operator
                                          type: object
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      matchLabels:
                                        additionalProperties:
                                          type: string
1663
1664
1665
1666
                                        description: |-
                                          matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                          map is equivalent to an element of matchExpressions, whose key field is "key", the
                                          operator is "In", and the values array contains only "value". The requirements are ANDed.
1667
1668
1669
1670
                                        type: object
                                    type: object
                                    x-kubernetes-map-type: atomic
                                  namespaces:
1671
1672
1673
1674
1675
                                    description: |-
                                      namespaces specifies a static list of namespace names that the term applies to.
                                      The term is applied to the union of the namespaces listed in this field
                                      and the ones selected by namespaceSelector.
                                      null or empty namespaces list and null namespaceSelector means "this pod's namespace".
1676
1677
1678
1679
1680
                                    items:
                                      type: string
                                    type: array
                                    x-kubernetes-list-type: atomic
                                  topologyKey:
1681
1682
1683
1684
1685
1686
                                    description: |-
                                      This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching
                                      the labelSelector in the specified namespaces, where co-located is defined as running on a node
                                      whose value of the label with key topologyKey matches that of any node on which any of the
                                      selected pods is running.
                                      Empty topologyKey is not allowed.
1687
1688
1689
1690
1691
1692
1693
1694
                                    type: string
                                required:
                                  - topologyKey
                                type: object
                              type: array
                              x-kubernetes-list-type: atomic
                          type: object
                      type: object
1695
                    automountServiceAccountToken:
1696
                      description: AutomountServiceAccountToken indicates whether a service account token should be automatically mounted.
1697
                      type: boolean
1698
                    containers:
1699
1700
1701
1702
1703
                      description: |-
                        List of containers belonging to the pod.
                        Containers cannot currently be added or removed.
                        There must be at least one container in a Pod.
                        Cannot be updated.
1704
                      items:
1705
                        description: A single application container that you want to run within a pod.
1706
                        properties:
1707
                          args:
1708
1709
1710
1711
1712
1713
1714
1715
1716
                            description: |-
                              Arguments to the entrypoint.
                              The container image's CMD is used if this is not provided.
                              Variable references $(VAR_NAME) are expanded using the container's environment. If a variable
                              cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced
                              to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
                              produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless
                              of whether the variable exists or not. Cannot be updated.
                              More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
1717
                            items:
1718
                              type: string
1719
1720
                            type: array
                            x-kubernetes-list-type: atomic
1721
                          command:
1722
1723
1724
1725
1726
1727
1728
1729
1730
                            description: |-
                              Entrypoint array. Not executed within a shell.
                              The container image's ENTRYPOINT is used if this is not provided.
                              Variable references $(VAR_NAME) are expanded using the container's environment. If a variable
                              cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced
                              to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
                              produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless
                              of whether the variable exists or not. Cannot be updated.
                              More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
1731
                            items:
1732
                              type: string
1733
1734
                            type: array
                            x-kubernetes-list-type: atomic
1735
                          env:
1736
1737
1738
                            description: |-
                              List of environment variables to set in the container.
                              Cannot be updated.
1739
                            items:
1740
                              description: EnvVar represents an environment variable present in a Container.
1741
                              properties:
1742
                                name:
1743
                                  description: Name of the environment variable. Must be a C_IDENTIFIER.
1744
1745
                                  type: string
                                value:
1746
1747
1748
1749
1750
1751
1752
1753
1754
1755
                                  description: |-
                                    Variable references $(VAR_NAME) are expanded
                                    using the previously defined environment variables in the container and
                                    any service environment variables. If a variable cannot be resolved,
                                    the reference in the input string will be unchanged. Double $$ are reduced
                                    to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.
                                    "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
                                    Escaped references will never be expanded, regardless of whether the variable
                                    exists or not.
                                    Defaults to "".
1756
                                  type: string
1757
                                valueFrom:
1758
                                  description: Source for the environment variable's value. Cannot be used if value is not empty.
1759
                                  properties:
1760
                                    configMapKeyRef:
1761
                                      description: Selects a key of a ConfigMap.
1762
1763
                                      properties:
                                        key:
1764
                                          description: The key to select.
1765
1766
1767
                                          type: string
                                        name:
                                          default: ""
1768
1769
1770
1771
1772
1773
                                          description: |-
                                            Name of the referent.
                                            This field is effectively required, but due to backwards compatibility is
                                            allowed to be empty. Instances of this type with an empty value here are
                                            almost certainly wrong.
                                            More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
1774
1775
                                          type: string
                                        optional:
1776
                                          description: Specify whether the ConfigMap or its key must be defined
1777
1778
1779
1780
1781
1782
                                          type: boolean
                                      required:
                                        - key
                                      type: object
                                      x-kubernetes-map-type: atomic
                                    fieldRef:
1783
1784
1785
                                      description: |-
                                        Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['<KEY>']`, `metadata.annotations['<KEY>']`,
                                        spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
1786
1787
                                      properties:
                                        apiVersion:
1788
                                          description: Version of the schema the FieldPath is written in terms of, defaults to "v1".
1789
1790
                                          type: string
                                        fieldPath:
1791
                                          description: Path of the field to select in the specified API version.
1792
1793
1794
1795
1796
1797
                                          type: string
                                      required:
                                        - fieldPath
                                      type: object
                                      x-kubernetes-map-type: atomic
                                    resourceFieldRef:
1798
1799
1800
                                      description: |-
                                        Selects a resource of the container: only resources limits and requests
                                        (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
1801
1802
                                      properties:
                                        containerName:
1803
                                          description: 'Container name: required for volumes, optional for env vars'
1804
1805
1806
1807
1808
                                          type: string
                                        divisor:
                                          anyOf:
                                            - type: integer
                                            - type: string
1809
                                          description: Specifies the output format of the exposed resources, defaults to "1"
1810
1811
1812
                                          pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                          x-kubernetes-int-or-string: true
                                        resource:
1813
                                          description: 'Required: resource to select'
1814
1815
1816
1817
1818
1819
                                          type: string
                                      required:
                                        - resource
                                      type: object
                                      x-kubernetes-map-type: atomic
                                    secretKeyRef:
1820
                                      description: Selects a key of a secret in the pod's namespace
1821
1822
                                      properties:
                                        key:
1823
                                          description: The key of the secret to select from.  Must be a valid secret key.
1824
1825
1826
                                          type: string
                                        name:
                                          default: ""
1827
1828
1829
1830
1831
1832
                                          description: |-
                                            Name of the referent.
                                            This field is effectively required, but due to backwards compatibility is
                                            allowed to be empty. Instances of this type with an empty value here are
                                            almost certainly wrong.
                                            More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
1833
1834
                                          type: string
                                        optional:
1835
                                          description: Specify whether the Secret or its key must be defined
1836
1837
                                          type: boolean
                                      required:
1838
1839
                                        - key
                                      type: object
1840
                                      x-kubernetes-map-type: atomic
1841
1842
                                  type: object
                              required:
1843
                                - name
1844
                              type: object
1845
1846
                            type: array
                            x-kubernetes-list-map-keys:
1847
                              - name
1848
1849
                            x-kubernetes-list-type: map
                          envFrom:
1850
1851
1852
1853
1854
1855
1856
                            description: |-
                              List of sources to populate environment variables in the container.
                              The keys defined within a source must be a C_IDENTIFIER. All invalid keys
                              will be reported as an event when the container is starting. When a key exists in multiple
                              sources, the value associated with the last source will take precedence.
                              Values defined by an Env with a duplicate key will take precedence.
                              Cannot be updated.
1857
                            items:
1858
                              description: EnvFromSource represents the source of a set of ConfigMaps or Secrets
1859
                              properties:
1860
                                configMapRef:
1861
                                  description: The ConfigMap to select from
1862
                                  properties:
1863
1864
                                    name:
                                      default: ""
1865
1866
1867
1868
1869
1870
                                      description: |-
                                        Name of the referent.
                                        This field is effectively required, but due to backwards compatibility is
                                        allowed to be empty. Instances of this type with an empty value here are
                                        almost certainly wrong.
                                        More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
1871
1872
                                      type: string
                                    optional:
1873
                                      description: Specify whether the ConfigMap must be defined
1874
                                      type: boolean
1875
1876
                                  type: object
                                  x-kubernetes-map-type: atomic
1877
                                prefix:
1878
                                  description: Optional text to prepend to the name of each environment variable. Must be a C_IDENTIFIER.
1879
                                  type: string
1880
                                secretRef:
1881
                                  description: The Secret to select from
1882
1883
1884
                                  properties:
                                    name:
                                      default: ""
1885
1886
1887
1888
1889
1890
                                      description: |-
                                        Name of the referent.
                                        This field is effectively required, but due to backwards compatibility is
                                        allowed to be empty. Instances of this type with an empty value here are
                                        almost certainly wrong.
                                        More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
1891
1892
                                      type: string
                                    optional:
1893
                                      description: Specify whether the Secret must be defined
1894
1895
1896
                                      type: boolean
                                  type: object
                                  x-kubernetes-map-type: atomic
1897
                              type: object
1898
1899
1900
                            type: array
                            x-kubernetes-list-type: atomic
                          image:
1901
1902
1903
1904
1905
                            description: |-
                              Container image name.
                              More info: https://kubernetes.io/docs/concepts/containers/images
                              This field is optional to allow higher level config management to default or override
                              container images in workload controllers like Deployments and StatefulSets.
1906
1907
                            type: string
                          imagePullPolicy:
1908
1909
1910
1911
1912
1913
                            description: |-
                              Image pull policy.
                              One of Always, Never, IfNotPresent.
                              Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.
                              Cannot be updated.
                              More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
1914
1915
                            type: string
                          lifecycle:
1916
1917
1918
                            description: |-
                              Actions that the management system should take in response to container lifecycle events.
                              Cannot be updated.
1919
1920
                            properties:
                              postStart:
1921
1922
1923
1924
1925
                                description: |-
                                  PostStart is called immediately after a container is created. If the handler fails,
                                  the container is terminated and restarted according to its restart policy.
                                  Other management of the container blocks until the hook completes.
                                  More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
1926
1927
                                properties:
                                  exec:
1928
                                    description: Exec specifies a command to execute in the container.
1929
1930
                                    properties:
                                      command:
1931
1932
1933
1934
1935
1936
                                        description: |-
                                          Command is the command line to execute inside the container, the working directory for the
                                          command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                          not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                          a shell, you need to explicitly call out to that shell.
                                          Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
1937
1938
1939
1940
1941
1942
                                        items:
                                          type: string
                                        type: array
                                        x-kubernetes-list-type: atomic
                                    type: object
                                  httpGet:
1943
                                    description: HTTPGet specifies an HTTP GET request to perform.
1944
1945
                                    properties:
                                      host:
1946
1947
1948
                                        description: |-
                                          Host name to connect to, defaults to the pod IP. You probably want to set
                                          "Host" in httpHeaders instead.
1949
1950
                                        type: string
                                      httpHeaders:
1951
                                        description: Custom headers to set in the request. HTTP allows repeated headers.
1952
                                        items:
1953
                                          description: HTTPHeader describes a custom header to be used in HTTP probes
1954
1955
                                          properties:
                                            name:
1956
1957
1958
                                              description: |-
                                                The header field name.
                                                This will be canonicalized upon output, so case-variant names will be understood as the same header.
1959
                                              type: string
1960
                                            value:
1961
                                              description: The header field value
1962
1963
1964
1965
1966
1967
1968
1969
                                              type: string
                                          required:
                                            - name
                                            - value
                                          type: object
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      path:
1970
                                        description: Path to access on the HTTP server.
1971
1972
1973
1974
1975
                                        type: string
                                      port:
                                        anyOf:
                                          - type: integer
                                          - type: string
1976
1977
1978
1979
                                        description: |-
                                          Name or number of the port to access on the container.
                                          Number must be in the range 1 to 65535.
                                          Name must be an IANA_SVC_NAME.
1980
1981
                                        x-kubernetes-int-or-string: true
                                      scheme:
1982
1983
1984
                                        description: |-
                                          Scheme to use for connecting to the host.
                                          Defaults to HTTP.
1985
1986
1987
1988
1989
                                        type: string
                                    required:
                                      - port
                                    type: object
                                  sleep:
1990
                                    description: Sleep represents a duration that the container should sleep.
1991
1992
                                    properties:
                                      seconds:
1993
                                        description: Seconds is the number of seconds to sleep.
1994
1995
1996
1997
1998
1999
                                        format: int64
                                        type: integer
                                    required:
                                      - seconds
                                    type: object
                                  tcpSocket:
2000
2001
2002
2003
                                    description: |-
                                      Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept
                                      for backward compatibility. There is no validation of this field and
                                      lifecycle hooks will fail at runtime when it is specified.
2004
2005
                                    properties:
                                      host:
2006
                                        description: 'Optional: Host name to connect to, defaults to the pod IP.'
2007
2008
2009
2010
2011
                                        type: string
                                      port:
                                        anyOf:
                                          - type: integer
                                          - type: string
2012
2013
2014
2015
                                        description: |-
                                          Number or name of the port to access on the container.
                                          Number must be in the range 1 to 65535.
                                          Name must be an IANA_SVC_NAME.
2016
2017
2018
2019
2020
2021
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - port
                                    type: object
                                type: object
                              preStop:
2022
2023
2024
2025
2026
2027
2028
2029
2030
2031
                                description: |-
                                  PreStop is called immediately before a container is terminated due to an
                                  API request or management event such as liveness/startup probe failure,
                                  preemption, resource contention, etc. The handler is not called if the
                                  container crashes or exits. The Pod's termination grace period countdown begins before the
                                  PreStop hook is executed. Regardless of the outcome of the handler, the
                                  container will eventually terminate within the Pod's termination grace
                                  period (unless delayed by finalizers). Other management of the container blocks until the hook completes
                                  or until the termination grace period is reached.
                                  More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
2032
2033
                                properties:
                                  exec:
2034
                                    description: Exec specifies a command to execute in the container.
2035
2036
                                    properties:
                                      command:
2037
2038
2039
2040
2041
2042
                                        description: |-
                                          Command is the command line to execute inside the container, the working directory for the
                                          command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                          not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                          a shell, you need to explicitly call out to that shell.
                                          Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
2043
2044
2045
2046
2047
2048
                                        items:
                                          type: string
                                        type: array
                                        x-kubernetes-list-type: atomic
                                    type: object
                                  httpGet:
2049
                                    description: HTTPGet specifies an HTTP GET request to perform.
2050
2051
                                    properties:
                                      host:
2052
2053
2054
                                        description: |-
                                          Host name to connect to, defaults to the pod IP. You probably want to set
                                          "Host" in httpHeaders instead.
2055
2056
                                        type: string
                                      httpHeaders:
2057
                                        description: Custom headers to set in the request. HTTP allows repeated headers.
2058
                                        items:
2059
                                          description: HTTPHeader describes a custom header to be used in HTTP probes
2060
2061
                                          properties:
                                            name:
2062
2063
2064
                                              description: |-
                                                The header field name.
                                                This will be canonicalized upon output, so case-variant names will be understood as the same header.
2065
2066
                                              type: string
                                            value:
2067
                                              description: The header field value
2068
2069
2070
2071
2072
2073
2074
2075
                                              type: string
                                          required:
                                            - name
                                            - value
                                          type: object
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      path:
2076
                                        description: Path to access on the HTTP server.
2077
2078
2079
2080
2081
                                        type: string
                                      port:
                                        anyOf:
                                          - type: integer
                                          - type: string
2082
2083
2084
2085
                                        description: |-
                                          Name or number of the port to access on the container.
                                          Number must be in the range 1 to 65535.
                                          Name must be an IANA_SVC_NAME.
2086
2087
                                        x-kubernetes-int-or-string: true
                                      scheme:
2088
2089
2090
                                        description: |-
                                          Scheme to use for connecting to the host.
                                          Defaults to HTTP.
2091
2092
2093
2094
2095
                                        type: string
                                    required:
                                      - port
                                    type: object
                                  sleep:
2096
                                    description: Sleep represents a duration that the container should sleep.
2097
2098
                                    properties:
                                      seconds:
2099
                                        description: Seconds is the number of seconds to sleep.
2100
2101
2102
2103
2104
2105
                                        format: int64
                                        type: integer
                                    required:
                                      - seconds
                                    type: object
                                  tcpSocket:
2106
2107
2108
2109
                                    description: |-
                                      Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept
                                      for backward compatibility. There is no validation of this field and
                                      lifecycle hooks will fail at runtime when it is specified.
2110
2111
                                    properties:
                                      host:
2112
                                        description: 'Optional: Host name to connect to, defaults to the pod IP.'
2113
                                        type: string
2114
2115
2116
2117
                                      port:
                                        anyOf:
                                          - type: integer
                                          - type: string
2118
2119
2120
2121
                                        description: |-
                                          Number or name of the port to access on the container.
                                          Number must be in the range 1 to 65535.
                                          Name must be an IANA_SVC_NAME.
2122
2123
2124
2125
2126
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - port
                                    type: object
                                type: object
2127
                              stopSignal:
2128
2129
2130
2131
                                description: |-
                                  StopSignal defines which signal will be sent to a container when it is being stopped.
                                  If not specified, the default is defined by the container runtime in use.
                                  StopSignal can only be set for Pods with a non-empty .spec.os.name
2132
                                type: string
2133
2134
                            type: object
                          livenessProbe:
2135
2136
2137
2138
2139
                            description: |-
                              Periodic probe of container liveness.
                              Container will be restarted if the probe fails.
                              Cannot be updated.
                              More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
2140
2141
                            properties:
                              exec:
2142
                                description: Exec specifies a command to execute in the container.
2143
2144
                                properties:
                                  command:
2145
2146
2147
2148
2149
2150
                                    description: |-
                                      Command is the command line to execute inside the container, the working directory for the
                                      command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                      not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                      a shell, you need to explicitly call out to that shell.
                                      Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
2151
2152
2153
2154
2155
2156
                                    items:
                                      type: string
                                    type: array
                                    x-kubernetes-list-type: atomic
                                type: object
                              failureThreshold:
2157
2158
2159
                                description: |-
                                  Minimum consecutive failures for the probe to be considered failed after having succeeded.
                                  Defaults to 3. Minimum value is 1.
2160
2161
2162
                                format: int32
                                type: integer
                              grpc:
2163
                                description: GRPC specifies a GRPC HealthCheckRequest.
2164
2165
                                properties:
                                  port:
2166
                                    description: Port number of the gRPC service. Number must be in the range 1 to 65535.
2167
2168
2169
2170
                                    format: int32
                                    type: integer
                                  service:
                                    default: ""
2171
2172
2173
2174
2175
                                    description: |-
                                      Service is the name of the service to place in the gRPC HealthCheckRequest
                                      (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).

                                      If this is not specified, the default behavior is defined by gRPC.
2176
2177
2178
2179
2180
                                    type: string
                                required:
                                  - port
                                type: object
                              httpGet:
2181
                                description: HTTPGet specifies an HTTP GET request to perform.
2182
2183
                                properties:
                                  host:
2184
2185
2186
                                    description: |-
                                      Host name to connect to, defaults to the pod IP. You probably want to set
                                      "Host" in httpHeaders instead.
2187
2188
                                    type: string
                                  httpHeaders:
2189
                                    description: Custom headers to set in the request. HTTP allows repeated headers.
2190
                                    items:
2191
                                      description: HTTPHeader describes a custom header to be used in HTTP probes
2192
2193
                                      properties:
                                        name:
2194
2195
2196
                                          description: |-
                                            The header field name.
                                            This will be canonicalized upon output, so case-variant names will be understood as the same header.
2197
2198
                                          type: string
                                        value:
2199
                                          description: The header field value
2200
2201
2202
2203
                                          type: string
                                      required:
                                        - name
                                        - value
2204
                                      type: object
2205
2206
2207
                                    type: array
                                    x-kubernetes-list-type: atomic
                                  path:
2208
                                    description: Path to access on the HTTP server.
2209
2210
2211
2212
2213
                                    type: string
                                  port:
                                    anyOf:
                                      - type: integer
                                      - type: string
2214
2215
2216
2217
                                    description: |-
                                      Name or number of the port to access on the container.
                                      Number must be in the range 1 to 65535.
                                      Name must be an IANA_SVC_NAME.
2218
2219
                                    x-kubernetes-int-or-string: true
                                  scheme:
2220
2221
2222
                                    description: |-
                                      Scheme to use for connecting to the host.
                                      Defaults to HTTP.
2223
2224
2225
2226
2227
                                    type: string
                                required:
                                  - port
                                type: object
                              initialDelaySeconds:
2228
2229
2230
                                description: |-
                                  Number of seconds after the container has started before liveness probes are initiated.
                                  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
2231
2232
2233
                                format: int32
                                type: integer
                              periodSeconds:
2234
2235
2236
                                description: |-
                                  How often (in seconds) to perform the probe.
                                  Default to 10 seconds. Minimum value is 1.
2237
2238
2239
                                format: int32
                                type: integer
                              successThreshold:
2240
2241
2242
                                description: |-
                                  Minimum consecutive successes for the probe to be considered successful after having failed.
                                  Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
2243
2244
2245
                                format: int32
                                type: integer
                              tcpSocket:
2246
                                description: TCPSocket specifies a connection to a TCP port.
2247
2248
                                properties:
                                  host:
2249
                                    description: 'Optional: Host name to connect to, defaults to the pod IP.'
2250
2251
2252
2253
2254
                                    type: string
                                  port:
                                    anyOf:
                                      - type: integer
                                      - type: string
2255
2256
2257
2258
                                    description: |-
                                      Number or name of the port to access on the container.
                                      Number must be in the range 1 to 65535.
                                      Name must be an IANA_SVC_NAME.
2259
2260
2261
2262
2263
                                    x-kubernetes-int-or-string: true
                                required:
                                  - port
                                type: object
                              terminationGracePeriodSeconds:
2264
2265
2266
2267
2268
2269
2270
2271
2272
2273
2274
                                description: |-
                                  Optional duration in seconds the pod needs to terminate gracefully upon probe failure.
                                  The grace period is the duration in seconds after the processes running in the pod are sent
                                  a termination signal and the time when the processes are forcibly halted with a kill signal.
                                  Set this value longer than the expected cleanup time for your process.
                                  If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                                  value overrides the value provided by the pod spec.
                                  Value must be non-negative integer. The value zero indicates stop immediately via
                                  the kill signal (no opportunity to shut down).
                                  This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.
                                  Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
2275
2276
2277
                                format: int64
                                type: integer
                              timeoutSeconds:
2278
2279
2280
2281
                                description: |-
                                  Number of seconds after which the probe times out.
                                  Defaults to 1 second. Minimum value is 1.
                                  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
2282
2283
2284
2285
                                format: int32
                                type: integer
                            type: object
                          name:
2286
2287
2288
2289
                            description: |-
                              Name of the container specified as a DNS_LABEL.
                              Each container in a pod must have a unique name (DNS_LABEL).
                              Cannot be updated.
2290
2291
                            type: string
                          ports:
2292
2293
2294
2295
2296
2297
2298
2299
                            description: |-
                              List of ports to expose from the container. Not specifying a port here
                              DOES NOT prevent that port from being exposed. Any port which is
                              listening on the default "0.0.0.0" address inside a container will be
                              accessible from the network.
                              Modifying this array with strategic merge patch may corrupt the data.
                              For more information See https://github.com/kubernetes/kubernetes/issues/108255.
                              Cannot be updated.
2300
                            items:
2301
                              description: ContainerPort represents a network port in a single container.
2302
                              properties:
2303
                                containerPort:
2304
2305
2306
                                  description: |-
                                    Number of port to expose on the pod's IP address.
                                    This must be a valid port number, 0 < x < 65536.
2307
2308
                                  format: int32
                                  type: integer
2309
                                hostIP:
2310
                                  description: What host IP to bind the external port to.
2311
                                  type: string
2312
                                hostPort:
2313
2314
2315
2316
2317
                                  description: |-
                                    Number of port to expose on the host.
                                    If specified, this must be a valid port number, 0 < x < 65536.
                                    If HostNetwork is specified, this must match ContainerPort.
                                    Most containers do not need this.
2318
2319
                                  format: int32
                                  type: integer
2320
                                name:
2321
2322
2323
2324
                                  description: |-
                                    If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
                                    named port in a pod must have a unique name. Name for the port that can be
                                    referred to by services.
2325
2326
2327
                                  type: string
                                protocol:
                                  default: TCP
2328
2329
2330
                                  description: |-
                                    Protocol for port. Must be UDP, TCP, or SCTP.
                                    Defaults to "TCP".
2331
2332
                                  type: string
                              required:
2333
                                - containerPort
2334
                              type: object
2335
2336
2337
2338
2339
2340
                            type: array
                            x-kubernetes-list-map-keys:
                              - containerPort
                              - protocol
                            x-kubernetes-list-type: map
                          readinessProbe:
2341
2342
2343
2344
2345
                            description: |-
                              Periodic probe of container service readiness.
                              Container will be removed from service endpoints if the probe fails.
                              Cannot be updated.
                              More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
2346
2347
                            properties:
                              exec:
2348
                                description: Exec specifies a command to execute in the container.
2349
2350
                                properties:
                                  command:
2351
2352
2353
2354
2355
2356
                                    description: |-
                                      Command is the command line to execute inside the container, the working directory for the
                                      command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                      not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                      a shell, you need to explicitly call out to that shell.
                                      Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
2357
2358
2359
2360
2361
2362
                                    items:
                                      type: string
                                    type: array
                                    x-kubernetes-list-type: atomic
                                type: object
                              failureThreshold:
2363
2364
2365
                                description: |-
                                  Minimum consecutive failures for the probe to be considered failed after having succeeded.
                                  Defaults to 3. Minimum value is 1.
2366
2367
2368
                                format: int32
                                type: integer
                              grpc:
2369
                                description: GRPC specifies a GRPC HealthCheckRequest.
2370
2371
                                properties:
                                  port:
2372
                                    description: Port number of the gRPC service. Number must be in the range 1 to 65535.
2373
2374
2375
2376
                                    format: int32
                                    type: integer
                                  service:
                                    default: ""
2377
2378
2379
2380
2381
                                    description: |-
                                      Service is the name of the service to place in the gRPC HealthCheckRequest
                                      (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).

                                      If this is not specified, the default behavior is defined by gRPC.
2382
2383
2384
2385
2386
                                    type: string
                                required:
                                  - port
                                type: object
                              httpGet:
2387
                                description: HTTPGet specifies an HTTP GET request to perform.
2388
2389
                                properties:
                                  host:
2390
2391
2392
                                    description: |-
                                      Host name to connect to, defaults to the pod IP. You probably want to set
                                      "Host" in httpHeaders instead.
2393
2394
                                    type: string
                                  httpHeaders:
2395
                                    description: Custom headers to set in the request. HTTP allows repeated headers.
2396
                                    items:
2397
                                      description: HTTPHeader describes a custom header to be used in HTTP probes
2398
2399
                                      properties:
                                        name:
2400
2401
2402
                                          description: |-
                                            The header field name.
                                            This will be canonicalized upon output, so case-variant names will be understood as the same header.
2403
2404
                                          type: string
                                        value:
2405
                                          description: The header field value
2406
2407
2408
2409
2410
2411
2412
2413
                                          type: string
                                      required:
                                        - name
                                        - value
                                      type: object
                                    type: array
                                    x-kubernetes-list-type: atomic
                                  path:
2414
                                    description: Path to access on the HTTP server.
2415
2416
2417
2418
2419
                                    type: string
                                  port:
                                    anyOf:
                                      - type: integer
                                      - type: string
2420
2421
2422
2423
                                    description: |-
                                      Name or number of the port to access on the container.
                                      Number must be in the range 1 to 65535.
                                      Name must be an IANA_SVC_NAME.
2424
2425
                                    x-kubernetes-int-or-string: true
                                  scheme:
2426
2427
2428
                                    description: |-
                                      Scheme to use for connecting to the host.
                                      Defaults to HTTP.
2429
2430
2431
2432
2433
                                    type: string
                                required:
                                  - port
                                type: object
                              initialDelaySeconds:
2434
2435
2436
                                description: |-
                                  Number of seconds after the container has started before liveness probes are initiated.
                                  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
2437
2438
2439
                                format: int32
                                type: integer
                              periodSeconds:
2440
2441
2442
                                description: |-
                                  How often (in seconds) to perform the probe.
                                  Default to 10 seconds. Minimum value is 1.
2443
2444
2445
                                format: int32
                                type: integer
                              successThreshold:
2446
2447
2448
                                description: |-
                                  Minimum consecutive successes for the probe to be considered successful after having failed.
                                  Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
2449
2450
2451
                                format: int32
                                type: integer
                              tcpSocket:
2452
                                description: TCPSocket specifies a connection to a TCP port.
2453
2454
                                properties:
                                  host:
2455
                                    description: 'Optional: Host name to connect to, defaults to the pod IP.'
2456
2457
2458
2459
2460
                                    type: string
                                  port:
                                    anyOf:
                                      - type: integer
                                      - type: string
2461
2462
2463
2464
                                    description: |-
                                      Number or name of the port to access on the container.
                                      Number must be in the range 1 to 65535.
                                      Name must be an IANA_SVC_NAME.
2465
2466
2467
2468
2469
                                    x-kubernetes-int-or-string: true
                                required:
                                  - port
                                type: object
                              terminationGracePeriodSeconds:
2470
2471
2472
2473
2474
2475
2476
2477
2478
2479
2480
                                description: |-
                                  Optional duration in seconds the pod needs to terminate gracefully upon probe failure.
                                  The grace period is the duration in seconds after the processes running in the pod are sent
                                  a termination signal and the time when the processes are forcibly halted with a kill signal.
                                  Set this value longer than the expected cleanup time for your process.
                                  If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                                  value overrides the value provided by the pod spec.
                                  Value must be non-negative integer. The value zero indicates stop immediately via
                                  the kill signal (no opportunity to shut down).
                                  This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.
                                  Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
2481
2482
2483
                                format: int64
                                type: integer
                              timeoutSeconds:
2484
2485
2486
2487
                                description: |-
                                  Number of seconds after which the probe times out.
                                  Defaults to 1 second. Minimum value is 1.
                                  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
2488
2489
2490
2491
                                format: int32
                                type: integer
                            type: object
                          resizePolicy:
2492
                            description: Resources resize policy for the container.
2493
                            items:
2494
                              description: ContainerResizePolicy represents resource resize policy for the container.
2495
                              properties:
2496
                                resourceName:
2497
2498
2499
                                  description: |-
                                    Name of the resource to which this resource resize policy applies.
                                    Supported values: cpu, memory.
2500
2501
                                  type: string
                                restartPolicy:
2502
2503
2504
                                  description: |-
                                    Restart policy to apply when specified resource is resized.
                                    If not specified, it defaults to NotRequired.
2505
                                  type: string
2506
                              required:
2507
2508
                                - resourceName
                                - restartPolicy
2509
2510
2511
                              type: object
                            type: array
                            x-kubernetes-list-type: atomic
2512
                          resources:
2513
2514
2515
2516
                            description: |-
                              Compute Resources required by this container.
                              Cannot be updated.
                              More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
2517
                            properties:
2518
                              claims:
2519
2520
2521
2522
2523
2524
2525
2526
                                description: |-
                                  Claims lists the names of resources, defined in spec.resourceClaims,
                                  that are used by this container.

                                  This is an alpha field and requires enabling the
                                  DynamicResourceAllocation feature gate.

                                  This field is immutable. It can only be set for containers.
2527
                                items:
2528
                                  description: ResourceClaim references one entry in PodSpec.ResourceClaims.
2529
                                  properties:
2530
                                    name:
2531
2532
2533
2534
                                      description: |-
                                        Name must match the name of one entry in pod.spec.resourceClaims of
                                        the Pod where this field is used. It makes that resource available
                                        inside a container.
2535
2536
                                      type: string
                                    request:
2537
2538
2539
2540
                                      description: |-
                                        Request is the name chosen for a request in the referenced claim.
                                        If empty, everything from the claim is made available, otherwise
                                        only the result of this request.
2541
2542
2543
                                      type: string
                                  required:
                                    - name
2544
2545
                                  type: object
                                type: array
2546
2547
2548
2549
2550
2551
2552
2553
2554
2555
                                x-kubernetes-list-map-keys:
                                  - name
                                x-kubernetes-list-type: map
                              limits:
                                additionalProperties:
                                  anyOf:
                                    - type: integer
                                    - type: string
                                  pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                  x-kubernetes-int-or-string: true
2556
2557
2558
                                description: |-
                                  Limits describes the maximum amount of compute resources allowed.
                                  More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
2559
2560
2561
2562
2563
2564
2565
2566
                                type: object
                              requests:
                                additionalProperties:
                                  anyOf:
                                    - type: integer
                                    - type: string
                                  pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                  x-kubernetes-int-or-string: true
2567
2568
2569
2570
2571
                                description: |-
                                  Requests describes the minimum amount of compute resources required.
                                  If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
                                  otherwise to an implementation-defined value. Requests cannot exceed Limits.
                                  More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
2572
                                type: object
2573
                            type: object
2574
                          restartPolicy:
2575
2576
2577
2578
2579
2580
2581
2582
2583
2584
2585
2586
2587
2588
2589
2590
                            description: |-
                              RestartPolicy defines the restart behavior of individual containers in a pod.
                              This field may only be set for init containers, and the only allowed value is "Always".
                              For non-init containers or when this field is not specified,
                              the restart behavior is defined by the Pod's restart policy and the container type.
                              Setting the RestartPolicy as "Always" for the init container will have the following effect:
                              this init container will be continually restarted on
                              exit until all regular containers have terminated. Once all regular
                              containers have completed, all init containers with restartPolicy "Always"
                              will be shut down. This lifecycle differs from normal init containers and
                              is often referred to as a "sidecar" container. Although this init
                              container still starts in the init container sequence, it does not wait
                              for the container to complete before proceeding to the next init
                              container. Instead, the next init container starts immediately after this
                              init container is started, or after any startupProbe has successfully
                              completed.
2591
2592
                            type: string
                          securityContext:
2593
2594
2595
2596
                            description: |-
                              SecurityContext defines the security options the container should be run with.
                              If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.
                              More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
2597
2598
                            properties:
                              allowPrivilegeEscalation:
2599
2600
2601
2602
2603
2604
2605
2606
                                description: |-
                                  AllowPrivilegeEscalation controls whether a process can gain more
                                  privileges than its parent process. This bool directly controls if
                                  the no_new_privs flag will be set on the container process.
                                  AllowPrivilegeEscalation is true always when the container is:
                                  1) run as Privileged
                                  2) has CAP_SYS_ADMIN
                                  Note that this field cannot be set when spec.os.name is windows.
2607
2608
                                type: boolean
                              appArmorProfile:
2609
2610
2611
2612
                                description: |-
                                  appArmorProfile is the AppArmor options to use by this container. If set, this profile
                                  overrides the pod's appArmorProfile.
                                  Note that this field cannot be set when spec.os.name is windows.
2613
2614
                                properties:
                                  localhostProfile:
2615
2616
2617
2618
2619
                                    description: |-
                                      localhostProfile indicates a profile loaded on the node that should be used.
                                      The profile must be preconfigured on the node to work.
                                      Must match the loaded name of the profile.
                                      Must be set if and only if type is "Localhost".
2620
2621
                                    type: string
                                  type:
2622
2623
2624
2625
2626
2627
                                    description: |-
                                      type indicates which kind of AppArmor profile will be applied.
                                      Valid options are:
                                        Localhost - a profile pre-loaded on the node.
                                        RuntimeDefault - the container runtime's default profile.
                                        Unconfined - no AppArmor enforcement.
2628
2629
2630
2631
2632
                                    type: string
                                required:
                                  - type
                                type: object
                              capabilities:
2633
2634
2635
2636
                                description: |-
                                  The capabilities to add/drop when running containers.
                                  Defaults to the default set of capabilities granted by the container runtime.
                                  Note that this field cannot be set when spec.os.name is windows.
2637
2638
                                properties:
                                  add:
2639
                                    description: Added capabilities
2640
                                    items:
2641
                                      description: Capability represent POSIX capabilities type
2642
                                      type: string
2643
2644
2645
                                    type: array
                                    x-kubernetes-list-type: atomic
                                  drop:
2646
                                    description: Removed capabilities
2647
                                    items:
2648
                                      description: Capability represent POSIX capabilities type
2649
2650
2651
2652
2653
                                      type: string
                                    type: array
                                    x-kubernetes-list-type: atomic
                                type: object
                              privileged:
2654
2655
2656
2657
2658
                                description: |-
                                  Run container in privileged mode.
                                  Processes in privileged containers are essentially equivalent to root on the host.
                                  Defaults to false.
                                  Note that this field cannot be set when spec.os.name is windows.
2659
2660
                                type: boolean
                              procMount:
2661
2662
2663
2664
2665
2666
                                description: |-
                                  procMount denotes the type of proc mount to use for the containers.
                                  The default value is Default which uses the container runtime defaults for
                                  readonly paths and masked paths.
                                  This requires the ProcMountType feature flag to be enabled.
                                  Note that this field cannot be set when spec.os.name is windows.
2667
2668
                                type: string
                              readOnlyRootFilesystem:
2669
2670
2671
2672
                                description: |-
                                  Whether this container has a read-only root filesystem.
                                  Default is false.
                                  Note that this field cannot be set when spec.os.name is windows.
2673
2674
                                type: boolean
                              runAsGroup:
2675
2676
2677
2678
2679
2680
                                description: |-
                                  The GID to run the entrypoint of the container process.
                                  Uses runtime default if unset.
                                  May also be set in PodSecurityContext.  If set in both SecurityContext and
                                  PodSecurityContext, the value specified in SecurityContext takes precedence.
                                  Note that this field cannot be set when spec.os.name is windows.
2681
2682
2683
                                format: int64
                                type: integer
                              runAsNonRoot:
2684
2685
2686
2687
2688
2689
2690
                                description: |-
                                  Indicates that the container must run as a non-root user.
                                  If true, the Kubelet will validate the image at runtime to ensure that it
                                  does not run as UID 0 (root) and fail to start the container if it does.
                                  If unset or false, no such validation will be performed.
                                  May also be set in PodSecurityContext.  If set in both SecurityContext and
                                  PodSecurityContext, the value specified in SecurityContext takes precedence.
2691
2692
                                type: boolean
                              runAsUser:
2693
2694
2695
2696
2697
2698
                                description: |-
                                  The UID to run the entrypoint of the container process.
                                  Defaults to user specified in image metadata if unspecified.
                                  May also be set in PodSecurityContext.  If set in both SecurityContext and
                                  PodSecurityContext, the value specified in SecurityContext takes precedence.
                                  Note that this field cannot be set when spec.os.name is windows.
2699
2700
2701
                                format: int64
                                type: integer
                              seLinuxOptions:
2702
2703
2704
2705
2706
2707
                                description: |-
                                  The SELinux context to be applied to the container.
                                  If unspecified, the container runtime will allocate a random SELinux context for each
                                  container.  May also be set in PodSecurityContext.  If set in both SecurityContext and
                                  PodSecurityContext, the value specified in SecurityContext takes precedence.
                                  Note that this field cannot be set when spec.os.name is windows.
2708
2709
                                properties:
                                  level:
2710
                                    description: Level is SELinux level label that applies to the container.
2711
2712
                                    type: string
                                  role:
2713
                                    description: Role is a SELinux role label that applies to the container.
2714
2715
                                    type: string
                                  type:
2716
                                    description: Type is a SELinux type label that applies to the container.
2717
2718
                                    type: string
                                  user:
2719
                                    description: User is a SELinux user label that applies to the container.
2720
2721
2722
                                    type: string
                                type: object
                              seccompProfile:
2723
2724
2725
2726
2727
                                description: |-
                                  The seccomp options to use by this container. If seccomp options are
                                  provided at both the pod & container level, the container options
                                  override the pod options.
                                  Note that this field cannot be set when spec.os.name is windows.
2728
2729
                                properties:
                                  localhostProfile:
2730
2731
2732
2733
2734
                                    description: |-
                                      localhostProfile indicates a profile defined in a file on the node should be used.
                                      The profile must be preconfigured on the node to work.
                                      Must be a descending path, relative to the kubelet's configured seccomp profile location.
                                      Must be set if type is "Localhost". Must NOT be set for any other type.
2735
2736
                                    type: string
                                  type:
2737
2738
2739
2740
2741
2742
2743
                                    description: |-
                                      type indicates which kind of seccomp profile will be applied.
                                      Valid options are:

                                      Localhost - a profile defined in a file on the node should be used.
                                      RuntimeDefault - the container runtime default profile should be used.
                                      Unconfined - no profile should be applied.
2744
2745
2746
2747
2748
                                    type: string
                                required:
                                  - type
                                type: object
                              windowsOptions:
2749
2750
2751
2752
2753
                                description: |-
                                  The Windows specific settings applied to all containers.
                                  If unspecified, the options from the PodSecurityContext will be used.
                                  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                  Note that this field cannot be set when spec.os.name is linux.
2754
2755
                                properties:
                                  gmsaCredentialSpec:
2756
2757
2758
2759
                                    description: |-
                                      GMSACredentialSpec is where the GMSA admission webhook
                                      (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the
                                      GMSA credential spec named by the GMSACredentialSpecName field.
2760
2761
                                    type: string
                                  gmsaCredentialSpecName:
2762
                                    description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
2763
2764
                                    type: string
                                  hostProcess:
2765
2766
2767
2768
2769
                                    description: |-
                                      HostProcess determines if a container should be run as a 'Host Process' container.
                                      All of a Pod's containers must have the same effective HostProcess value
                                      (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).
                                      In addition, if HostProcess is true then HostNetwork must also be set to true.
2770
2771
                                    type: boolean
                                  runAsUserName:
2772
2773
2774
2775
2776
                                    description: |-
                                      The UserName in Windows to run the entrypoint of the container process.
                                      Defaults to the user specified in image metadata if unspecified.
                                      May also be set in PodSecurityContext. If set in both SecurityContext and
                                      PodSecurityContext, the value specified in SecurityContext takes precedence.
2777
2778
2779
2780
                                    type: string
                                type: object
                            type: object
                          startupProbe:
2781
2782
2783
2784
2785
2786
2787
2788
                            description: |-
                              StartupProbe indicates that the Pod has successfully initialized.
                              If specified, no other probes are executed until this completes successfully.
                              If this probe fails, the Pod will be restarted, just as if the livenessProbe failed.
                              This can be used to provide different probe parameters at the beginning of a Pod's lifecycle,
                              when it might take a long time to load data or warm a cache, than during steady-state operation.
                              This cannot be updated.
                              More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
2789
2790
                            properties:
                              exec:
2791
                                description: Exec specifies a command to execute in the container.
2792
2793
                                properties:
                                  command:
2794
2795
2796
2797
2798
2799
                                    description: |-
                                      Command is the command line to execute inside the container, the working directory for the
                                      command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                      not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                      a shell, you need to explicitly call out to that shell.
                                      Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
2800
2801
2802
2803
2804
2805
                                    items:
                                      type: string
                                    type: array
                                    x-kubernetes-list-type: atomic
                                type: object
                              failureThreshold:
2806
2807
2808
                                description: |-
                                  Minimum consecutive failures for the probe to be considered failed after having succeeded.
                                  Defaults to 3. Minimum value is 1.
2809
2810
2811
                                format: int32
                                type: integer
                              grpc:
2812
                                description: GRPC specifies a GRPC HealthCheckRequest.
2813
2814
                                properties:
                                  port:
2815
                                    description: Port number of the gRPC service. Number must be in the range 1 to 65535.
2816
2817
2818
2819
                                    format: int32
                                    type: integer
                                  service:
                                    default: ""
2820
2821
2822
2823
2824
                                    description: |-
                                      Service is the name of the service to place in the gRPC HealthCheckRequest
                                      (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).

                                      If this is not specified, the default behavior is defined by gRPC.
2825
2826
2827
2828
2829
                                    type: string
                                required:
                                  - port
                                type: object
                              httpGet:
2830
                                description: HTTPGet specifies an HTTP GET request to perform.
2831
2832
                                properties:
                                  host:
2833
2834
2835
                                    description: |-
                                      Host name to connect to, defaults to the pod IP. You probably want to set
                                      "Host" in httpHeaders instead.
2836
2837
                                    type: string
                                  httpHeaders:
2838
                                    description: Custom headers to set in the request. HTTP allows repeated headers.
2839
                                    items:
2840
                                      description: HTTPHeader describes a custom header to be used in HTTP probes
2841
2842
                                      properties:
                                        name:
2843
2844
2845
                                          description: |-
                                            The header field name.
                                            This will be canonicalized upon output, so case-variant names will be understood as the same header.
2846
2847
                                          type: string
                                        value:
2848
                                          description: The header field value
2849
2850
2851
2852
                                          type: string
                                      required:
                                        - name
                                        - value
2853
                                      type: object
2854
2855
2856
                                    type: array
                                    x-kubernetes-list-type: atomic
                                  path:
2857
                                    description: Path to access on the HTTP server.
2858
                                    type: string
2859
2860
2861
2862
                                  port:
                                    anyOf:
                                      - type: integer
                                      - type: string
2863
2864
2865
2866
                                    description: |-
                                      Name or number of the port to access on the container.
                                      Number must be in the range 1 to 65535.
                                      Name must be an IANA_SVC_NAME.
2867
2868
                                    x-kubernetes-int-or-string: true
                                  scheme:
2869
2870
2871
                                    description: |-
                                      Scheme to use for connecting to the host.
                                      Defaults to HTTP.
2872
                                    type: string
2873
2874
2875
2876
                                required:
                                  - port
                                type: object
                              initialDelaySeconds:
2877
2878
2879
                                description: |-
                                  Number of seconds after the container has started before liveness probes are initiated.
                                  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
2880
2881
2882
                                format: int32
                                type: integer
                              periodSeconds:
2883
2884
2885
                                description: |-
                                  How often (in seconds) to perform the probe.
                                  Default to 10 seconds. Minimum value is 1.
2886
2887
2888
                                format: int32
                                type: integer
                              successThreshold:
2889
2890
2891
                                description: |-
                                  Minimum consecutive successes for the probe to be considered successful after having failed.
                                  Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
2892
2893
2894
                                format: int32
                                type: integer
                              tcpSocket:
2895
                                description: TCPSocket specifies a connection to a TCP port.
2896
2897
                                properties:
                                  host:
2898
                                    description: 'Optional: Host name to connect to, defaults to the pod IP.'
2899
                                    type: string
2900
2901
2902
2903
                                  port:
                                    anyOf:
                                      - type: integer
                                      - type: string
2904
2905
2906
2907
                                    description: |-
                                      Number or name of the port to access on the container.
                                      Number must be in the range 1 to 65535.
                                      Name must be an IANA_SVC_NAME.
2908
2909
2910
2911
2912
                                    x-kubernetes-int-or-string: true
                                required:
                                  - port
                                type: object
                              terminationGracePeriodSeconds:
2913
2914
2915
2916
2917
2918
2919
2920
2921
2922
2923
                                description: |-
                                  Optional duration in seconds the pod needs to terminate gracefully upon probe failure.
                                  The grace period is the duration in seconds after the processes running in the pod are sent
                                  a termination signal and the time when the processes are forcibly halted with a kill signal.
                                  Set this value longer than the expected cleanup time for your process.
                                  If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                                  value overrides the value provided by the pod spec.
                                  Value must be non-negative integer. The value zero indicates stop immediately via
                                  the kill signal (no opportunity to shut down).
                                  This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.
                                  Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
2924
2925
2926
                                format: int64
                                type: integer
                              timeoutSeconds:
2927
2928
2929
2930
                                description: |-
                                  Number of seconds after which the probe times out.
                                  Defaults to 1 second. Minimum value is 1.
                                  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
2931
2932
2933
2934
                                format: int32
                                type: integer
                            type: object
                          stdin:
2935
2936
2937
2938
                            description: |-
                              Whether this container should allocate a buffer for stdin in the container runtime. If this
                              is not set, reads from stdin in the container will always result in EOF.
                              Default is false.
2939
2940
                            type: boolean
                          stdinOnce:
2941
2942
2943
2944
2945
2946
2947
2948
                            description: |-
                              Whether the container runtime should close the stdin channel after it has been opened by
                              a single attach. When stdin is true the stdin stream will remain open across multiple attach
                              sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the
                              first client attaches to stdin, and then remains open and accepts data until the client disconnects,
                              at which time stdin is closed and remains closed until the container is restarted. If this
                              flag is false, a container processes that reads from stdin will never receive an EOF.
                              Default is false
2949
2950
                            type: boolean
                          terminationMessagePath:
2951
2952
2953
2954
2955
2956
2957
2958
                            description: |-
                              Optional: Path at which the file to which the container's termination message
                              will be written is mounted into the container's filesystem.
                              Message written is intended to be brief final status, such as an assertion failure message.
                              Will be truncated by the node if greater than 4096 bytes. The total message length across
                              all containers will be limited to 12kb.
                              Defaults to /dev/termination-log.
                              Cannot be updated.
2959
2960
                            type: string
                          terminationMessagePolicy:
2961
2962
2963
2964
2965
2966
2967
2968
                            description: |-
                              Indicate how the termination message should be populated. File will use the contents of
                              terminationMessagePath to populate the container status message on both success and failure.
                              FallbackToLogsOnError will use the last chunk of container log output if the termination
                              message file is empty and the container exited with an error.
                              The log output is limited to 2048 bytes or 80 lines, whichever is smaller.
                              Defaults to File.
                              Cannot be updated.
2969
2970
                            type: string
                          tty:
2971
2972
2973
                            description: |-
                              Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.
                              Default is false.
2974
2975
                            type: boolean
                          volumeDevices:
2976
                            description: volumeDevices is the list of block devices to be used by the container.
2977
                            items:
2978
                              description: volumeDevice describes a mapping of a raw block device within a container.
2979
                              properties:
2980
                                devicePath:
2981
                                  description: devicePath is the path inside of the container that the device will be mapped to.
2982
2983
                                  type: string
                                name:
2984
                                  description: name must match the name of a persistentVolumeClaim in the pod
2985
                                  type: string
2986
                              required:
2987
2988
                                - devicePath
                                - name
2989
2990
                              type: object
                            type: array
2991
2992
2993
2994
                            x-kubernetes-list-map-keys:
                              - devicePath
                            x-kubernetes-list-type: map
                          volumeMounts:
2995
2996
2997
                            description: |-
                              Pod volumes to mount into the container's filesystem.
                              Cannot be updated.
2998
                            items:
2999
                              description: VolumeMount describes a mounting of a Volume within a container.
3000
                              properties:
3001
                                mountPath:
3002
3003
3004
                                  description: |-
                                    Path within the container at which the volume should be mounted.  Must
                                    not contain ':'.
3005
3006
                                  type: string
                                mountPropagation:
3007
3008
3009
3010
3011
3012
3013
                                  description: |-
                                    mountPropagation determines how mounts are propagated from the host
                                    to container and the other way around.
                                    When not set, MountPropagationNone is used.
                                    This field is beta in 1.10.
                                    When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified
                                    (which defaults to None).
3014
3015
                                  type: string
                                name:
3016
                                  description: This must match the Name of a Volume.
3017
3018
                                  type: string
                                readOnly:
3019
3020
3021
                                  description: |-
                                    Mounted read-only if true, read-write otherwise (false or unspecified).
                                    Defaults to false.
3022
3023
                                  type: boolean
                                recursiveReadOnly:
3024
3025
3026
3027
3028
3029
3030
3031
3032
3033
3034
3035
3036
3037
3038
3039
3040
                                  description: |-
                                    RecursiveReadOnly specifies whether read-only mounts should be handled
                                    recursively.

                                    If ReadOnly is false, this field has no meaning and must be unspecified.

                                    If ReadOnly is true, and this field is set to Disabled, the mount is not made
                                    recursively read-only.  If this field is set to IfPossible, the mount is made
                                    recursively read-only, if it is supported by the container runtime.  If this
                                    field is set to Enabled, the mount is made recursively read-only if it is
                                    supported by the container runtime, otherwise the pod will not be started and
                                    an error will be generated to indicate the reason.

                                    If this field is set to IfPossible or Enabled, MountPropagation must be set to
                                    None (or be unspecified, which defaults to None).

                                    If this field is not specified, it is treated as an equivalent of Disabled.
3041
3042
                                  type: string
                                subPath:
3043
3044
3045
                                  description: |-
                                    Path within the volume from which the container's volume should be mounted.
                                    Defaults to "" (volume's root).
3046
3047
                                  type: string
                                subPathExpr:
3048
3049
3050
3051
3052
                                  description: |-
                                    Expanded path within the volume from which the container's volume should be mounted.
                                    Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.
                                    Defaults to "" (volume's root).
                                    SubPathExpr and SubPath are mutually exclusive.
3053
3054
                                  type: string
                              required:
3055
3056
                                - mountPath
                                - name
3057
3058
                              type: object
                            type: array
3059
3060
3061
3062
                            x-kubernetes-list-map-keys:
                              - mountPath
                            x-kubernetes-list-type: map
                          workingDir:
3063
3064
3065
3066
3067
                            description: |-
                              Container's working directory.
                              If not specified, the container runtime's default will be used, which
                              might be configured in the container image.
                              Cannot be updated.
3068
3069
3070
                            type: string
                        required:
                          - name
3071
                        type: object
3072
                      type: array
3073
3074
3075
3076
                      x-kubernetes-list-map-keys:
                        - name
                      x-kubernetes-list-type: map
                    dnsConfig:
3077
3078
3079
3080
                      description: |-
                        Specifies the DNS parameters of a pod.
                        Parameters specified here will be merged to the generated DNS
                        configuration based on DNSPolicy.
3081
                      properties:
3082
                        nameservers:
3083
3084
3085
3086
                          description: |-
                            A list of DNS name server IP addresses.
                            This will be appended to the base nameservers generated from DNSPolicy.
                            Duplicated nameservers will be removed.
3087
3088
3089
3090
                          items:
                            type: string
                          type: array
                          x-kubernetes-list-type: atomic
3091
                        options:
3092
3093
3094
3095
3096
                          description: |-
                            A list of DNS resolver options.
                            This will be merged with the base options generated from DNSPolicy.
                            Duplicated entries will be removed. Resolution options given in Options
                            will override those that appear in the base DNSPolicy.
3097
                          items:
3098
                            description: PodDNSConfigOption defines DNS resolver options of a pod.
3099
3100
                            properties:
                              name:
3101
3102
3103
                                description: |-
                                  Name is this DNS resolver option's name.
                                  Required.
3104
3105
                                type: string
                              value:
3106
                                description: Value is this DNS resolver option's value.
3107
                                type: string
3108
3109
3110
3111
                            type: object
                          type: array
                          x-kubernetes-list-type: atomic
                        searches:
3112
3113
3114
3115
                          description: |-
                            A list of DNS search domains for host-name lookup.
                            This will be appended to the base search paths generated from DNSPolicy.
                            Duplicated search paths will be removed.
3116
3117
3118
3119
3120
3121
                          items:
                            type: string
                          type: array
                          x-kubernetes-list-type: atomic
                      type: object
                    dnsPolicy:
3122
3123
3124
3125
3126
3127
3128
                      description: |-
                        Set DNS policy for the pod.
                        Defaults to "ClusterFirst".
                        Valid values are 'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'.
                        DNS parameters given in DNSConfig will be merged with the policy selected with DNSPolicy.
                        To have DNS options set along with hostNetwork, you have to specify DNS policy
                        explicitly to 'ClusterFirstWithHostNet'.
3129
3130
                      type: string
                    enableServiceLinks:
3131
3132
3133
3134
                      description: |-
                        EnableServiceLinks indicates whether information about services should be injected into pod's
                        environment variables, matching the syntax of Docker links.
                        Optional: Defaults to true.
3135
3136
                      type: boolean
                    ephemeralContainers:
3137
3138
3139
3140
3141
                      description: |-
                        List of ephemeral containers run in this pod. Ephemeral containers may be run in an existing
                        pod to perform user-initiated actions such as debugging. This list cannot be specified when
                        creating a pod, and it cannot be modified by updating the pod spec. In order to add an
                        ephemeral container to an existing pod, use the pod's ephemeralcontainers subresource.
3142
                      items:
3143
3144
3145
3146
3147
3148
3149
3150
3151
                        description: |-
                          An EphemeralContainer is a temporary container that you may add to an existing Pod for
                          user-initiated activities such as debugging. Ephemeral containers have no resource or
                          scheduling guarantees, and they will not be restarted when they exit or when a Pod is
                          removed or restarted. The kubelet may evict a Pod if an ephemeral container causes the
                          Pod to exceed its resource allocation.

                          To add an ephemeral container, use the ephemeralcontainers subresource of an existing
                          Pod. Ephemeral containers may not be removed or restarted.
3152
3153
                        properties:
                          args:
3154
3155
3156
3157
3158
3159
3160
3161
3162
                            description: |-
                              Arguments to the entrypoint.
                              The image's CMD is used if this is not provided.
                              Variable references $(VAR_NAME) are expanded using the container's environment. If a variable
                              cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced
                              to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
                              produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless
                              of whether the variable exists or not. Cannot be updated.
                              More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
3163
3164
3165
3166
3167
                            items:
                              type: string
                            type: array
                            x-kubernetes-list-type: atomic
                          command:
3168
3169
3170
3171
3172
3173
3174
3175
3176
                            description: |-
                              Entrypoint array. Not executed within a shell.
                              The image's ENTRYPOINT is used if this is not provided.
                              Variable references $(VAR_NAME) are expanded using the container's environment. If a variable
                              cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced
                              to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
                              produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless
                              of whether the variable exists or not. Cannot be updated.
                              More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
3177
3178
3179
3180
3181
                            items:
                              type: string
                            type: array
                            x-kubernetes-list-type: atomic
                          env:
3182
3183
3184
                            description: |-
                              List of environment variables to set in the container.
                              Cannot be updated.
3185
                            items:
3186
                              description: EnvVar represents an environment variable present in a Container.
3187
3188
                              properties:
                                name:
3189
                                  description: Name of the environment variable. Must be a C_IDENTIFIER.
3190
3191
                                  type: string
                                value:
3192
3193
3194
3195
3196
3197
3198
3199
3200
3201
                                  description: |-
                                    Variable references $(VAR_NAME) are expanded
                                    using the previously defined environment variables in the container and
                                    any service environment variables. If a variable cannot be resolved,
                                    the reference in the input string will be unchanged. Double $$ are reduced
                                    to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.
                                    "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
                                    Escaped references will never be expanded, regardless of whether the variable
                                    exists or not.
                                    Defaults to "".
3202
3203
                                  type: string
                                valueFrom:
3204
                                  description: Source for the environment variable's value. Cannot be used if value is not empty.
3205
3206
                                  properties:
                                    configMapKeyRef:
3207
                                      description: Selects a key of a ConfigMap.
3208
3209
                                      properties:
                                        key:
3210
                                          description: The key to select.
3211
3212
3213
                                          type: string
                                        name:
                                          default: ""
3214
3215
3216
3217
3218
3219
                                          description: |-
                                            Name of the referent.
                                            This field is effectively required, but due to backwards compatibility is
                                            allowed to be empty. Instances of this type with an empty value here are
                                            almost certainly wrong.
                                            More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
3220
3221
                                          type: string
                                        optional:
3222
                                          description: Specify whether the ConfigMap or its key must be defined
3223
3224
3225
3226
3227
3228
                                          type: boolean
                                      required:
                                        - key
                                      type: object
                                      x-kubernetes-map-type: atomic
                                    fieldRef:
3229
3230
3231
                                      description: |-
                                        Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['<KEY>']`, `metadata.annotations['<KEY>']`,
                                        spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
3232
3233
                                      properties:
                                        apiVersion:
3234
                                          description: Version of the schema the FieldPath is written in terms of, defaults to "v1".
3235
3236
                                          type: string
                                        fieldPath:
3237
                                          description: Path of the field to select in the specified API version.
3238
3239
3240
3241
3242
3243
                                          type: string
                                      required:
                                        - fieldPath
                                      type: object
                                      x-kubernetes-map-type: atomic
                                    resourceFieldRef:
3244
3245
3246
                                      description: |-
                                        Selects a resource of the container: only resources limits and requests
                                        (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
3247
3248
                                      properties:
                                        containerName:
3249
                                          description: 'Container name: required for volumes, optional for env vars'
3250
3251
3252
3253
3254
                                          type: string
                                        divisor:
                                          anyOf:
                                            - type: integer
                                            - type: string
3255
                                          description: Specifies the output format of the exposed resources, defaults to "1"
3256
3257
3258
                                          pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                          x-kubernetes-int-or-string: true
                                        resource:
3259
                                          description: 'Required: resource to select'
3260
3261
3262
3263
3264
3265
                                          type: string
                                      required:
                                        - resource
                                      type: object
                                      x-kubernetes-map-type: atomic
                                    secretKeyRef:
3266
                                      description: Selects a key of a secret in the pod's namespace
3267
3268
                                      properties:
                                        key:
3269
                                          description: The key of the secret to select from.  Must be a valid secret key.
3270
3271
3272
                                          type: string
                                        name:
                                          default: ""
3273
3274
3275
3276
3277
3278
                                          description: |-
                                            Name of the referent.
                                            This field is effectively required, but due to backwards compatibility is
                                            allowed to be empty. Instances of this type with an empty value here are
                                            almost certainly wrong.
                                            More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
3279
3280
                                          type: string
                                        optional:
3281
                                          description: Specify whether the Secret or its key must be defined
3282
3283
3284
3285
3286
3287
3288
3289
3290
3291
3292
3293
3294
3295
                                          type: boolean
                                      required:
                                        - key
                                      type: object
                                      x-kubernetes-map-type: atomic
                                  type: object
                              required:
                                - name
                              type: object
                            type: array
                            x-kubernetes-list-map-keys:
                              - name
                            x-kubernetes-list-type: map
                          envFrom:
3296
3297
3298
3299
3300
3301
3302
                            description: |-
                              List of sources to populate environment variables in the container.
                              The keys defined within a source must be a C_IDENTIFIER. All invalid keys
                              will be reported as an event when the container is starting. When a key exists in multiple
                              sources, the value associated with the last source will take precedence.
                              Values defined by an Env with a duplicate key will take precedence.
                              Cannot be updated.
3303
                            items:
3304
                              description: EnvFromSource represents the source of a set of ConfigMaps or Secrets
3305
3306
                              properties:
                                configMapRef:
3307
                                  description: The ConfigMap to select from
3308
3309
3310
                                  properties:
                                    name:
                                      default: ""
3311
3312
3313
3314
3315
3316
                                      description: |-
                                        Name of the referent.
                                        This field is effectively required, but due to backwards compatibility is
                                        allowed to be empty. Instances of this type with an empty value here are
                                        almost certainly wrong.
                                        More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
3317
3318
                                      type: string
                                    optional:
3319
                                      description: Specify whether the ConfigMap must be defined
3320
3321
3322
3323
                                      type: boolean
                                  type: object
                                  x-kubernetes-map-type: atomic
                                prefix:
3324
                                  description: Optional text to prepend to the name of each environment variable. Must be a C_IDENTIFIER.
3325
3326
                                  type: string
                                secretRef:
3327
                                  description: The Secret to select from
3328
3329
3330
                                  properties:
                                    name:
                                      default: ""
3331
3332
3333
3334
3335
3336
                                      description: |-
                                        Name of the referent.
                                        This field is effectively required, but due to backwards compatibility is
                                        allowed to be empty. Instances of this type with an empty value here are
                                        almost certainly wrong.
                                        More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
3337
3338
                                      type: string
                                    optional:
3339
                                      description: Specify whether the Secret must be defined
3340
3341
3342
3343
3344
3345
3346
                                      type: boolean
                                  type: object
                                  x-kubernetes-map-type: atomic
                              type: object
                            type: array
                            x-kubernetes-list-type: atomic
                          image:
3347
3348
3349
                            description: |-
                              Container image name.
                              More info: https://kubernetes.io/docs/concepts/containers/images
3350
3351
                            type: string
                          imagePullPolicy:
3352
3353
3354
3355
3356
3357
                            description: |-
                              Image pull policy.
                              One of Always, Never, IfNotPresent.
                              Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.
                              Cannot be updated.
                              More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
3358
3359
                            type: string
                          lifecycle:
3360
                            description: Lifecycle is not allowed for ephemeral containers.
3361
3362
                            properties:
                              postStart:
3363
3364
3365
3366
3367
                                description: |-
                                  PostStart is called immediately after a container is created. If the handler fails,
                                  the container is terminated and restarted according to its restart policy.
                                  Other management of the container blocks until the hook completes.
                                  More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
3368
                                properties:
3369
                                  exec:
3370
                                    description: Exec specifies a command to execute in the container.
3371
                                    properties:
3372
                                      command:
3373
3374
3375
3376
3377
3378
                                        description: |-
                                          Command is the command line to execute inside the container, the working directory for the
                                          command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                          not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                          a shell, you need to explicitly call out to that shell.
                                          Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
3379
3380
3381
3382
3383
3384
                                        items:
                                          type: string
                                        type: array
                                        x-kubernetes-list-type: atomic
                                    type: object
                                  httpGet:
3385
                                    description: HTTPGet specifies an HTTP GET request to perform.
3386
3387
                                    properties:
                                      host:
3388
3389
3390
                                        description: |-
                                          Host name to connect to, defaults to the pod IP. You probably want to set
                                          "Host" in httpHeaders instead.
3391
                                        type: string
3392
                                      httpHeaders:
3393
                                        description: Custom headers to set in the request. HTTP allows repeated headers.
3394
                                        items:
3395
                                          description: HTTPHeader describes a custom header to be used in HTTP probes
3396
3397
                                          properties:
                                            name:
3398
3399
3400
                                              description: |-
                                                The header field name.
                                                This will be canonicalized upon output, so case-variant names will be understood as the same header.
3401
3402
                                              type: string
                                            value:
3403
                                              description: The header field value
3404
3405
3406
3407
3408
3409
3410
3411
                                              type: string
                                          required:
                                            - name
                                            - value
                                          type: object
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      path:
3412
                                        description: Path to access on the HTTP server.
3413
3414
3415
3416
3417
                                        type: string
                                      port:
                                        anyOf:
                                          - type: integer
                                          - type: string
3418
3419
3420
3421
                                        description: |-
                                          Name or number of the port to access on the container.
                                          Number must be in the range 1 to 65535.
                                          Name must be an IANA_SVC_NAME.
3422
3423
                                        x-kubernetes-int-or-string: true
                                      scheme:
3424
3425
3426
                                        description: |-
                                          Scheme to use for connecting to the host.
                                          Defaults to HTTP.
3427
3428
                                        type: string
                                    required:
3429
                                      - port
3430
                                    type: object
3431
                                  sleep:
3432
                                    description: Sleep represents a duration that the container should sleep.
3433
                                    properties:
3434
                                      seconds:
3435
                                        description: Seconds is the number of seconds to sleep.
3436
3437
                                        format: int64
                                        type: integer
3438
                                    required:
3439
                                      - seconds
3440
                                    type: object
3441
                                  tcpSocket:
3442
3443
3444
3445
                                    description: |-
                                      Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept
                                      for backward compatibility. There is no validation of this field and
                                      lifecycle hooks will fail at runtime when it is specified.
3446
                                    properties:
3447
                                      host:
3448
                                        description: 'Optional: Host name to connect to, defaults to the pod IP.'
3449
                                        type: string
3450
                                      port:
3451
                                        anyOf:
3452
3453
                                          - type: integer
                                          - type: string
3454
3455
3456
3457
                                        description: |-
                                          Number or name of the port to access on the container.
                                          Number must be in the range 1 to 65535.
                                          Name must be an IANA_SVC_NAME.
3458
3459
                                        x-kubernetes-int-or-string: true
                                    required:
3460
                                      - port
3461
                                    type: object
3462
3463
                                type: object
                              preStop:
3464
3465
3466
3467
3468
3469
3470
3471
3472
3473
                                description: |-
                                  PreStop is called immediately before a container is terminated due to an
                                  API request or management event such as liveness/startup probe failure,
                                  preemption, resource contention, etc. The handler is not called if the
                                  container crashes or exits. The Pod's termination grace period countdown begins before the
                                  PreStop hook is executed. Regardless of the outcome of the handler, the
                                  container will eventually terminate within the Pod's termination grace
                                  period (unless delayed by finalizers). Other management of the container blocks until the hook completes
                                  or until the termination grace period is reached.
                                  More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
3474
3475
                                properties:
                                  exec:
3476
                                    description: Exec specifies a command to execute in the container.
3477
                                    properties:
3478
                                      command:
3479
3480
3481
3482
3483
3484
                                        description: |-
                                          Command is the command line to execute inside the container, the working directory for the
                                          command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                          not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                          a shell, you need to explicitly call out to that shell.
                                          Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
3485
3486
3487
3488
3489
3490
                                        items:
                                          type: string
                                        type: array
                                        x-kubernetes-list-type: atomic
                                    type: object
                                  httpGet:
3491
                                    description: HTTPGet specifies an HTTP GET request to perform.
3492
3493
                                    properties:
                                      host:
3494
3495
3496
                                        description: |-
                                          Host name to connect to, defaults to the pod IP. You probably want to set
                                          "Host" in httpHeaders instead.
3497
                                        type: string
3498
                                      httpHeaders:
3499
                                        description: Custom headers to set in the request. HTTP allows repeated headers.
3500
                                        items:
3501
                                          description: HTTPHeader describes a custom header to be used in HTTP probes
3502
3503
                                          properties:
                                            name:
3504
3505
3506
                                              description: |-
                                                The header field name.
                                                This will be canonicalized upon output, so case-variant names will be understood as the same header.
3507
3508
                                              type: string
                                            value:
3509
                                              description: The header field value
3510
3511
3512
3513
3514
3515
3516
3517
                                              type: string
                                          required:
                                            - name
                                            - value
                                          type: object
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      path:
3518
                                        description: Path to access on the HTTP server.
3519
3520
3521
3522
3523
                                        type: string
                                      port:
                                        anyOf:
                                          - type: integer
                                          - type: string
3524
3525
3526
3527
                                        description: |-
                                          Name or number of the port to access on the container.
                                          Number must be in the range 1 to 65535.
                                          Name must be an IANA_SVC_NAME.
3528
3529
                                        x-kubernetes-int-or-string: true
                                      scheme:
3530
3531
3532
                                        description: |-
                                          Scheme to use for connecting to the host.
                                          Defaults to HTTP.
3533
3534
                                        type: string
                                    required:
3535
                                      - port
3536
                                    type: object
3537
                                  sleep:
3538
                                    description: Sleep represents a duration that the container should sleep.
3539
3540
                                    properties:
                                      seconds:
3541
                                        description: Seconds is the number of seconds to sleep.
3542
3543
3544
3545
3546
3547
                                        format: int64
                                        type: integer
                                    required:
                                      - seconds
                                    type: object
                                  tcpSocket:
3548
3549
3550
3551
                                    description: |-
                                      Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept
                                      for backward compatibility. There is no validation of this field and
                                      lifecycle hooks will fail at runtime when it is specified.
3552
3553
                                    properties:
                                      host:
3554
                                        description: 'Optional: Host name to connect to, defaults to the pod IP.'
3555
3556
3557
3558
3559
                                        type: string
                                      port:
                                        anyOf:
                                          - type: integer
                                          - type: string
3560
3561
3562
3563
                                        description: |-
                                          Number or name of the port to access on the container.
                                          Number must be in the range 1 to 65535.
                                          Name must be an IANA_SVC_NAME.
3564
3565
3566
3567
3568
3569
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - port
                                    type: object
                                type: object
                              stopSignal:
3570
3571
3572
3573
                                description: |-
                                  StopSignal defines which signal will be sent to a container when it is being stopped.
                                  If not specified, the default is defined by the container runtime in use.
                                  StopSignal can only be set for Pods with a non-empty .spec.os.name
3574
3575
3576
                                type: string
                            type: object
                          livenessProbe:
3577
                            description: Probes are not allowed for ephemeral containers.
3578
3579
                            properties:
                              exec:
3580
                                description: Exec specifies a command to execute in the container.
3581
3582
                                properties:
                                  command:
3583
3584
3585
3586
3587
3588
                                    description: |-
                                      Command is the command line to execute inside the container, the working directory for the
                                      command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                      not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                      a shell, you need to explicitly call out to that shell.
                                      Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
3589
3590
3591
3592
3593
3594
                                    items:
                                      type: string
                                    type: array
                                    x-kubernetes-list-type: atomic
                                type: object
                              failureThreshold:
3595
3596
3597
                                description: |-
                                  Minimum consecutive failures for the probe to be considered failed after having succeeded.
                                  Defaults to 3. Minimum value is 1.
3598
3599
3600
                                format: int32
                                type: integer
                              grpc:
3601
                                description: GRPC specifies a GRPC HealthCheckRequest.
3602
3603
                                properties:
                                  port:
3604
                                    description: Port number of the gRPC service. Number must be in the range 1 to 65535.
3605
3606
3607
                                    format: int32
                                    type: integer
                                  service:
3608
                                    default: ""
3609
3610
3611
3612
3613
                                    description: |-
                                      Service is the name of the service to place in the gRPC HealthCheckRequest
                                      (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).

                                      If this is not specified, the default behavior is defined by gRPC.
3614
                                    type: string
3615
3616
                                required:
                                  - port
3617
                                type: object
3618
                              httpGet:
3619
                                description: HTTPGet specifies an HTTP GET request to perform.
3620
                                properties:
3621
                                  host:
3622
3623
3624
                                    description: |-
                                      Host name to connect to, defaults to the pod IP. You probably want to set
                                      "Host" in httpHeaders instead.
3625
3626
                                    type: string
                                  httpHeaders:
3627
                                    description: Custom headers to set in the request. HTTP allows repeated headers.
3628
                                    items:
3629
                                      description: HTTPHeader describes a custom header to be used in HTTP probes
3630
3631
                                      properties:
                                        name:
3632
3633
3634
                                          description: |-
                                            The header field name.
                                            This will be canonicalized upon output, so case-variant names will be understood as the same header.
3635
3636
                                          type: string
                                        value:
3637
                                          description: The header field value
3638
3639
3640
3641
3642
3643
3644
3645
                                          type: string
                                      required:
                                        - name
                                        - value
                                      type: object
                                    type: array
                                    x-kubernetes-list-type: atomic
                                  path:
3646
                                    description: Path to access on the HTTP server.
3647
3648
3649
3650
3651
                                    type: string
                                  port:
                                    anyOf:
                                      - type: integer
                                      - type: string
3652
3653
3654
3655
                                    description: |-
                                      Name or number of the port to access on the container.
                                      Number must be in the range 1 to 65535.
                                      Name must be an IANA_SVC_NAME.
3656
3657
                                    x-kubernetes-int-or-string: true
                                  scheme:
3658
3659
3660
                                    description: |-
                                      Scheme to use for connecting to the host.
                                      Defaults to HTTP.
3661
3662
3663
3664
3665
                                    type: string
                                required:
                                  - port
                                type: object
                              initialDelaySeconds:
3666
3667
3668
                                description: |-
                                  Number of seconds after the container has started before liveness probes are initiated.
                                  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
3669
3670
3671
                                format: int32
                                type: integer
                              periodSeconds:
3672
3673
3674
                                description: |-
                                  How often (in seconds) to perform the probe.
                                  Default to 10 seconds. Minimum value is 1.
3675
3676
3677
                                format: int32
                                type: integer
                              successThreshold:
3678
3679
3680
                                description: |-
                                  Minimum consecutive successes for the probe to be considered successful after having failed.
                                  Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
3681
3682
3683
                                format: int32
                                type: integer
                              tcpSocket:
3684
                                description: TCPSocket specifies a connection to a TCP port.
3685
3686
                                properties:
                                  host:
3687
                                    description: 'Optional: Host name to connect to, defaults to the pod IP.'
3688
3689
3690
3691
3692
                                    type: string
                                  port:
                                    anyOf:
                                      - type: integer
                                      - type: string
3693
3694
3695
3696
                                    description: |-
                                      Number or name of the port to access on the container.
                                      Number must be in the range 1 to 65535.
                                      Name must be an IANA_SVC_NAME.
3697
3698
3699
3700
3701
                                    x-kubernetes-int-or-string: true
                                required:
                                  - port
                                type: object
                              terminationGracePeriodSeconds:
3702
3703
3704
3705
3706
3707
3708
3709
3710
3711
3712
                                description: |-
                                  Optional duration in seconds the pod needs to terminate gracefully upon probe failure.
                                  The grace period is the duration in seconds after the processes running in the pod are sent
                                  a termination signal and the time when the processes are forcibly halted with a kill signal.
                                  Set this value longer than the expected cleanup time for your process.
                                  If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                                  value overrides the value provided by the pod spec.
                                  Value must be non-negative integer. The value zero indicates stop immediately via
                                  the kill signal (no opportunity to shut down).
                                  This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.
                                  Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
3713
3714
3715
                                format: int64
                                type: integer
                              timeoutSeconds:
3716
3717
3718
3719
                                description: |-
                                  Number of seconds after which the probe times out.
                                  Defaults to 1 second. Minimum value is 1.
                                  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
3720
3721
3722
3723
                                format: int32
                                type: integer
                            type: object
                          name:
3724
3725
3726
                            description: |-
                              Name of the ephemeral container specified as a DNS_LABEL.
                              This name must be unique among all containers, init containers and ephemeral containers.
3727
3728
                            type: string
                          ports:
3729
                            description: Ports are not allowed for ephemeral containers.
3730
                            items:
3731
                              description: ContainerPort represents a network port in a single container.
3732
3733
                              properties:
                                containerPort:
3734
3735
3736
                                  description: |-
                                    Number of port to expose on the pod's IP address.
                                    This must be a valid port number, 0 < x < 65536.
3737
3738
3739
                                  format: int32
                                  type: integer
                                hostIP:
3740
                                  description: What host IP to bind the external port to.
3741
3742
                                  type: string
                                hostPort:
3743
3744
3745
3746
3747
                                  description: |-
                                    Number of port to expose on the host.
                                    If specified, this must be a valid port number, 0 < x < 65536.
                                    If HostNetwork is specified, this must match ContainerPort.
                                    Most containers do not need this.
3748
3749
3750
                                  format: int32
                                  type: integer
                                name:
3751
3752
3753
3754
                                  description: |-
                                    If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
                                    named port in a pod must have a unique name. Name for the port that can be
                                    referred to by services.
3755
3756
3757
                                  type: string
                                protocol:
                                  default: TCP
3758
3759
3760
                                  description: |-
                                    Protocol for port. Must be UDP, TCP, or SCTP.
                                    Defaults to "TCP".
3761
3762
3763
3764
3765
3766
3767
3768
3769
3770
                                  type: string
                              required:
                                - containerPort
                              type: object
                            type: array
                            x-kubernetes-list-map-keys:
                              - containerPort
                              - protocol
                            x-kubernetes-list-type: map
                          readinessProbe:
3771
                            description: Probes are not allowed for ephemeral containers.
3772
3773
                            properties:
                              exec:
3774
                                description: Exec specifies a command to execute in the container.
3775
3776
                                properties:
                                  command:
3777
3778
3779
3780
3781
3782
                                    description: |-
                                      Command is the command line to execute inside the container, the working directory for the
                                      command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                      not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                      a shell, you need to explicitly call out to that shell.
                                      Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
3783
3784
3785
3786
3787
3788
                                    items:
                                      type: string
                                    type: array
                                    x-kubernetes-list-type: atomic
                                type: object
                              failureThreshold:
3789
3790
3791
                                description: |-
                                  Minimum consecutive failures for the probe to be considered failed after having succeeded.
                                  Defaults to 3. Minimum value is 1.
3792
3793
3794
                                format: int32
                                type: integer
                              grpc:
3795
                                description: GRPC specifies a GRPC HealthCheckRequest.
3796
3797
                                properties:
                                  port:
3798
                                    description: Port number of the gRPC service. Number must be in the range 1 to 65535.
3799
3800
3801
                                    format: int32
                                    type: integer
                                  service:
3802
                                    default: ""
3803
3804
3805
3806
3807
                                    description: |-
                                      Service is the name of the service to place in the gRPC HealthCheckRequest
                                      (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).

                                      If this is not specified, the default behavior is defined by gRPC.
3808
                                    type: string
3809
3810
                                required:
                                  - port
3811
                                type: object
3812
                              httpGet:
3813
                                description: HTTPGet specifies an HTTP GET request to perform.
3814
3815
                                properties:
                                  host:
3816
3817
3818
                                    description: |-
                                      Host name to connect to, defaults to the pod IP. You probably want to set
                                      "Host" in httpHeaders instead.
3819
3820
                                    type: string
                                  httpHeaders:
3821
                                    description: Custom headers to set in the request. HTTP allows repeated headers.
3822
                                    items:
3823
                                      description: HTTPHeader describes a custom header to be used in HTTP probes
3824
3825
                                      properties:
                                        name:
3826
3827
3828
                                          description: |-
                                            The header field name.
                                            This will be canonicalized upon output, so case-variant names will be understood as the same header.
3829
3830
                                          type: string
                                        value:
3831
                                          description: The header field value
3832
3833
3834
3835
3836
3837
3838
3839
                                          type: string
                                      required:
                                        - name
                                        - value
                                      type: object
                                    type: array
                                    x-kubernetes-list-type: atomic
                                  path:
3840
                                    description: Path to access on the HTTP server.
3841
3842
3843
3844
3845
                                    type: string
                                  port:
                                    anyOf:
                                      - type: integer
                                      - type: string
3846
3847
3848
3849
                                    description: |-
                                      Name or number of the port to access on the container.
                                      Number must be in the range 1 to 65535.
                                      Name must be an IANA_SVC_NAME.
3850
3851
                                    x-kubernetes-int-or-string: true
                                  scheme:
3852
3853
3854
                                    description: |-
                                      Scheme to use for connecting to the host.
                                      Defaults to HTTP.
3855
3856
3857
3858
3859
                                    type: string
                                required:
                                  - port
                                type: object
                              initialDelaySeconds:
3860
3861
3862
                                description: |-
                                  Number of seconds after the container has started before liveness probes are initiated.
                                  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
3863
3864
3865
                                format: int32
                                type: integer
                              periodSeconds:
3866
3867
3868
                                description: |-
                                  How often (in seconds) to perform the probe.
                                  Default to 10 seconds. Minimum value is 1.
3869
3870
3871
                                format: int32
                                type: integer
                              successThreshold:
3872
3873
3874
                                description: |-
                                  Minimum consecutive successes for the probe to be considered successful after having failed.
                                  Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
3875
3876
3877
                                format: int32
                                type: integer
                              tcpSocket:
3878
                                description: TCPSocket specifies a connection to a TCP port.
3879
3880
                                properties:
                                  host:
3881
                                    description: 'Optional: Host name to connect to, defaults to the pod IP.'
3882
3883
3884
3885
3886
                                    type: string
                                  port:
                                    anyOf:
                                      - type: integer
                                      - type: string
3887
3888
3889
3890
                                    description: |-
                                      Number or name of the port to access on the container.
                                      Number must be in the range 1 to 65535.
                                      Name must be an IANA_SVC_NAME.
3891
3892
3893
3894
3895
                                    x-kubernetes-int-or-string: true
                                required:
                                  - port
                                type: object
                              terminationGracePeriodSeconds:
3896
3897
3898
3899
3900
3901
3902
3903
3904
3905
3906
                                description: |-
                                  Optional duration in seconds the pod needs to terminate gracefully upon probe failure.
                                  The grace period is the duration in seconds after the processes running in the pod are sent
                                  a termination signal and the time when the processes are forcibly halted with a kill signal.
                                  Set this value longer than the expected cleanup time for your process.
                                  If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                                  value overrides the value provided by the pod spec.
                                  Value must be non-negative integer. The value zero indicates stop immediately via
                                  the kill signal (no opportunity to shut down).
                                  This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.
                                  Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
3907
3908
3909
                                format: int64
                                type: integer
                              timeoutSeconds:
3910
3911
3912
3913
                                description: |-
                                  Number of seconds after which the probe times out.
                                  Defaults to 1 second. Minimum value is 1.
                                  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
3914
3915
                                format: int32
                                type: integer
3916
                            type: object
3917
                          resizePolicy:
3918
                            description: Resources resize policy for the container.
3919
                            items:
3920
                              description: ContainerResizePolicy represents resource resize policy for the container.
3921
                              properties:
3922
                                resourceName:
3923
3924
3925
                                  description: |-
                                    Name of the resource to which this resource resize policy applies.
                                    Supported values: cpu, memory.
3926
3927
                                  type: string
                                restartPolicy:
3928
3929
3930
                                  description: |-
                                    Restart policy to apply when specified resource is resized.
                                    If not specified, it defaults to NotRequired.
3931
3932
3933
3934
3935
3936
3937
3938
                                  type: string
                              required:
                                - resourceName
                                - restartPolicy
                              type: object
                            type: array
                            x-kubernetes-list-type: atomic
                          resources:
3939
3940
3941
                            description: |-
                              Resources are not allowed for ephemeral containers. Ephemeral containers use spare resources
                              already allocated to the pod.
3942
3943
                            properties:
                              claims:
3944
3945
3946
3947
3948
3949
3950
3951
                                description: |-
                                  Claims lists the names of resources, defined in spec.resourceClaims,
                                  that are used by this container.

                                  This is an alpha field and requires enabling the
                                  DynamicResourceAllocation feature gate.

                                  This field is immutable. It can only be set for containers.
3952
                                items:
3953
                                  description: ResourceClaim references one entry in PodSpec.ResourceClaims.
3954
                                  properties:
3955
                                    name:
3956
3957
3958
3959
                                      description: |-
                                        Name must match the name of one entry in pod.spec.resourceClaims of
                                        the Pod where this field is used. It makes that resource available
                                        inside a container.
3960
                                      type: string
3961
                                    request:
3962
3963
3964
3965
                                      description: |-
                                        Request is the name chosen for a request in the referenced claim.
                                        If empty, everything from the claim is made available, otherwise
                                        only the result of this request.
3966
3967
                                      type: string
                                  required:
3968
                                    - name
3969
                                  type: object
3970
3971
3972
3973
3974
3975
                                type: array
                                x-kubernetes-list-map-keys:
                                  - name
                                x-kubernetes-list-type: map
                              limits:
                                additionalProperties:
3976
                                  anyOf:
3977
3978
                                    - type: integer
                                    - type: string
3979
                                  pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
3980
                                  x-kubernetes-int-or-string: true
3981
3982
3983
                                description: |-
                                  Limits describes the maximum amount of compute resources allowed.
                                  More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
3984
3985
3986
                                type: object
                              requests:
                                additionalProperties:
3987
                                  anyOf:
3988
3989
                                    - type: integer
                                    - type: string
3990
                                  pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
3991
                                  x-kubernetes-int-or-string: true
3992
3993
3994
3995
3996
                                description: |-
                                  Requests describes the minimum amount of compute resources required.
                                  If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
                                  otherwise to an implementation-defined value. Requests cannot exceed Limits.
                                  More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
3997
3998
3999
                                type: object
                            type: object
                          restartPolicy:
4000
4001
4002
4003
4004
                            description: |-
                              Restart policy for the container to manage the restart behavior of each
                              container within a pod.
                              This may only be set for init containers. You cannot set this field on
                              ephemeral containers.
4005
4006
                            type: string
                          securityContext:
4007
4008
4009
                            description: |-
                              Optional: SecurityContext defines the security options the ephemeral container should be run with.
                              If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.
4010
                            properties:
4011
                              allowPrivilegeEscalation:
4012
4013
4014
4015
4016
4017
4018
4019
                                description: |-
                                  AllowPrivilegeEscalation controls whether a process can gain more
                                  privileges than its parent process. This bool directly controls if
                                  the no_new_privs flag will be set on the container process.
                                  AllowPrivilegeEscalation is true always when the container is:
                                  1) run as Privileged
                                  2) has CAP_SYS_ADMIN
                                  Note that this field cannot be set when spec.os.name is windows.
4020
4021
                                type: boolean
                              appArmorProfile:
4022
4023
4024
4025
                                description: |-
                                  appArmorProfile is the AppArmor options to use by this container. If set, this profile
                                  overrides the pod's appArmorProfile.
                                  Note that this field cannot be set when spec.os.name is windows.
4026
4027
                                properties:
                                  localhostProfile:
4028
4029
4030
4031
4032
                                    description: |-
                                      localhostProfile indicates a profile loaded on the node that should be used.
                                      The profile must be preconfigured on the node to work.
                                      Must match the loaded name of the profile.
                                      Must be set if and only if type is "Localhost".
4033
4034
                                    type: string
                                  type:
4035
4036
4037
4038
4039
4040
                                    description: |-
                                      type indicates which kind of AppArmor profile will be applied.
                                      Valid options are:
                                        Localhost - a profile pre-loaded on the node.
                                        RuntimeDefault - the container runtime's default profile.
                                        Unconfined - no AppArmor enforcement.
4041
4042
4043
4044
4045
                                    type: string
                                required:
                                  - type
                                type: object
                              capabilities:
4046
4047
4048
4049
                                description: |-
                                  The capabilities to add/drop when running containers.
                                  Defaults to the default set of capabilities granted by the container runtime.
                                  Note that this field cannot be set when spec.os.name is windows.
4050
4051
                                properties:
                                  add:
4052
                                    description: Added capabilities
4053
                                    items:
4054
                                      description: Capability represent POSIX capabilities type
4055
4056
4057
4058
                                      type: string
                                    type: array
                                    x-kubernetes-list-type: atomic
                                  drop:
4059
                                    description: Removed capabilities
4060
                                    items:
4061
                                      description: Capability represent POSIX capabilities type
4062
4063
4064
4065
4066
                                      type: string
                                    type: array
                                    x-kubernetes-list-type: atomic
                                type: object
                              privileged:
4067
4068
4069
4070
4071
                                description: |-
                                  Run container in privileged mode.
                                  Processes in privileged containers are essentially equivalent to root on the host.
                                  Defaults to false.
                                  Note that this field cannot be set when spec.os.name is windows.
4072
4073
                                type: boolean
                              procMount:
4074
4075
4076
4077
4078
4079
                                description: |-
                                  procMount denotes the type of proc mount to use for the containers.
                                  The default value is Default which uses the container runtime defaults for
                                  readonly paths and masked paths.
                                  This requires the ProcMountType feature flag to be enabled.
                                  Note that this field cannot be set when spec.os.name is windows.
4080
                                type: string
4081
                              readOnlyRootFilesystem:
4082
4083
4084
4085
                                description: |-
                                  Whether this container has a read-only root filesystem.
                                  Default is false.
                                  Note that this field cannot be set when spec.os.name is windows.
4086
4087
                                type: boolean
                              runAsGroup:
4088
4089
4090
4091
4092
4093
                                description: |-
                                  The GID to run the entrypoint of the container process.
                                  Uses runtime default if unset.
                                  May also be set in PodSecurityContext.  If set in both SecurityContext and
                                  PodSecurityContext, the value specified in SecurityContext takes precedence.
                                  Note that this field cannot be set when spec.os.name is windows.
4094
                                format: int64
4095
                                type: integer
4096
                              runAsNonRoot:
4097
4098
4099
4100
4101
4102
4103
                                description: |-
                                  Indicates that the container must run as a non-root user.
                                  If true, the Kubelet will validate the image at runtime to ensure that it
                                  does not run as UID 0 (root) and fail to start the container if it does.
                                  If unset or false, no such validation will be performed.
                                  May also be set in PodSecurityContext.  If set in both SecurityContext and
                                  PodSecurityContext, the value specified in SecurityContext takes precedence.
4104
4105
                                type: boolean
                              runAsUser:
4106
4107
4108
4109
4110
4111
                                description: |-
                                  The UID to run the entrypoint of the container process.
                                  Defaults to user specified in image metadata if unspecified.
                                  May also be set in PodSecurityContext.  If set in both SecurityContext and
                                  PodSecurityContext, the value specified in SecurityContext takes precedence.
                                  Note that this field cannot be set when spec.os.name is windows.
4112
4113
4114
                                format: int64
                                type: integer
                              seLinuxOptions:
4115
4116
4117
4118
4119
4120
                                description: |-
                                  The SELinux context to be applied to the container.
                                  If unspecified, the container runtime will allocate a random SELinux context for each
                                  container.  May also be set in PodSecurityContext.  If set in both SecurityContext and
                                  PodSecurityContext, the value specified in SecurityContext takes precedence.
                                  Note that this field cannot be set when spec.os.name is windows.
4121
4122
                                properties:
                                  level:
4123
                                    description: Level is SELinux level label that applies to the container.
4124
4125
                                    type: string
                                  role:
4126
                                    description: Role is a SELinux role label that applies to the container.
4127
4128
                                    type: string
                                  type:
4129
                                    description: Type is a SELinux type label that applies to the container.
4130
4131
                                    type: string
                                  user:
4132
                                    description: User is a SELinux user label that applies to the container.
4133
4134
4135
                                    type: string
                                type: object
                              seccompProfile:
4136
4137
4138
4139
4140
                                description: |-
                                  The seccomp options to use by this container. If seccomp options are
                                  provided at both the pod & container level, the container options
                                  override the pod options.
                                  Note that this field cannot be set when spec.os.name is windows.
4141
4142
                                properties:
                                  localhostProfile:
4143
4144
4145
4146
4147
                                    description: |-
                                      localhostProfile indicates a profile defined in a file on the node should be used.
                                      The profile must be preconfigured on the node to work.
                                      Must be a descending path, relative to the kubelet's configured seccomp profile location.
                                      Must be set if type is "Localhost". Must NOT be set for any other type.
4148
4149
                                    type: string
                                  type:
4150
4151
4152
4153
4154
4155
4156
                                    description: |-
                                      type indicates which kind of seccomp profile will be applied.
                                      Valid options are:

                                      Localhost - a profile defined in a file on the node should be used.
                                      RuntimeDefault - the container runtime default profile should be used.
                                      Unconfined - no profile should be applied.
4157
4158
4159
4160
4161
                                    type: string
                                required:
                                  - type
                                type: object
                              windowsOptions:
4162
4163
4164
4165
4166
                                description: |-
                                  The Windows specific settings applied to all containers.
                                  If unspecified, the options from the PodSecurityContext will be used.
                                  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                  Note that this field cannot be set when spec.os.name is linux.
4167
4168
                                properties:
                                  gmsaCredentialSpec:
4169
4170
4171
4172
                                    description: |-
                                      GMSACredentialSpec is where the GMSA admission webhook
                                      (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the
                                      GMSA credential spec named by the GMSACredentialSpecName field.
4173
4174
                                    type: string
                                  gmsaCredentialSpecName:
4175
                                    description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
4176
4177
                                    type: string
                                  hostProcess:
4178
4179
4180
4181
4182
                                    description: |-
                                      HostProcess determines if a container should be run as a 'Host Process' container.
                                      All of a Pod's containers must have the same effective HostProcess value
                                      (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).
                                      In addition, if HostProcess is true then HostNetwork must also be set to true.
4183
4184
                                    type: boolean
                                  runAsUserName:
4185
4186
4187
4188
4189
                                    description: |-
                                      The UserName in Windows to run the entrypoint of the container process.
                                      Defaults to the user specified in image metadata if unspecified.
                                      May also be set in PodSecurityContext. If set in both SecurityContext and
                                      PodSecurityContext, the value specified in SecurityContext takes precedence.
4190
4191
                                    type: string
                                type: object
4192
                            type: object
4193
                          startupProbe:
4194
                            description: Probes are not allowed for ephemeral containers.
4195
4196
                            properties:
                              exec:
4197
                                description: Exec specifies a command to execute in the container.
4198
                                properties:
4199
                                  command:
4200
4201
4202
4203
4204
4205
                                    description: |-
                                      Command is the command line to execute inside the container, the working directory for the
                                      command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                      not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                      a shell, you need to explicitly call out to that shell.
                                      Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
4206
4207
4208
4209
4210
4211
                                    items:
                                      type: string
                                    type: array
                                    x-kubernetes-list-type: atomic
                                type: object
                              failureThreshold:
4212
4213
4214
                                description: |-
                                  Minimum consecutive failures for the probe to be considered failed after having succeeded.
                                  Defaults to 3. Minimum value is 1.
4215
4216
4217
                                format: int32
                                type: integer
                              grpc:
4218
                                description: GRPC specifies a GRPC HealthCheckRequest.
4219
4220
                                properties:
                                  port:
4221
                                    description: Port number of the gRPC service. Number must be in the range 1 to 65535.
4222
4223
4224
4225
                                    format: int32
                                    type: integer
                                  service:
                                    default: ""
4226
4227
4228
4229
4230
                                    description: |-
                                      Service is the name of the service to place in the gRPC HealthCheckRequest
                                      (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).

                                      If this is not specified, the default behavior is defined by gRPC.
4231
                                    type: string
4232
4233
4234
4235
                                required:
                                  - port
                                type: object
                              httpGet:
4236
                                description: HTTPGet specifies an HTTP GET request to perform.
4237
4238
                                properties:
                                  host:
4239
4240
4241
                                    description: |-
                                      Host name to connect to, defaults to the pod IP. You probably want to set
                                      "Host" in httpHeaders instead.
4242
4243
                                    type: string
                                  httpHeaders:
4244
                                    description: Custom headers to set in the request. HTTP allows repeated headers.
4245
                                    items:
4246
                                      description: HTTPHeader describes a custom header to be used in HTTP probes
4247
4248
                                      properties:
                                        name:
4249
4250
4251
                                          description: |-
                                            The header field name.
                                            This will be canonicalized upon output, so case-variant names will be understood as the same header.
4252
4253
                                          type: string
                                        value:
4254
                                          description: The header field value
4255
4256
4257
4258
4259
4260
4261
4262
                                          type: string
                                      required:
                                        - name
                                        - value
                                      type: object
                                    type: array
                                    x-kubernetes-list-type: atomic
                                  path:
4263
                                    description: Path to access on the HTTP server.
4264
4265
4266
4267
4268
                                    type: string
                                  port:
                                    anyOf:
                                      - type: integer
                                      - type: string
4269
4270
4271
4272
                                    description: |-
                                      Name or number of the port to access on the container.
                                      Number must be in the range 1 to 65535.
                                      Name must be an IANA_SVC_NAME.
4273
4274
                                    x-kubernetes-int-or-string: true
                                  scheme:
4275
4276
4277
                                    description: |-
                                      Scheme to use for connecting to the host.
                                      Defaults to HTTP.
4278
4279
                                    type: string
                                required:
4280
                                  - port
4281
                                type: object
4282
                              initialDelaySeconds:
4283
4284
4285
                                description: |-
                                  Number of seconds after the container has started before liveness probes are initiated.
                                  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
4286
4287
4288
                                format: int32
                                type: integer
                              periodSeconds:
4289
4290
4291
                                description: |-
                                  How often (in seconds) to perform the probe.
                                  Default to 10 seconds. Minimum value is 1.
4292
4293
4294
                                format: int32
                                type: integer
                              successThreshold:
4295
4296
4297
                                description: |-
                                  Minimum consecutive successes for the probe to be considered successful after having failed.
                                  Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
4298
4299
4300
                                format: int32
                                type: integer
                              tcpSocket:
4301
                                description: TCPSocket specifies a connection to a TCP port.
4302
4303
                                properties:
                                  host:
4304
                                    description: 'Optional: Host name to connect to, defaults to the pod IP.'
4305
4306
4307
4308
4309
                                    type: string
                                  port:
                                    anyOf:
                                      - type: integer
                                      - type: string
4310
4311
4312
4313
                                    description: |-
                                      Number or name of the port to access on the container.
                                      Number must be in the range 1 to 65535.
                                      Name must be an IANA_SVC_NAME.
4314
4315
4316
4317
4318
                                    x-kubernetes-int-or-string: true
                                required:
                                  - port
                                type: object
                              terminationGracePeriodSeconds:
4319
4320
4321
4322
4323
4324
4325
4326
4327
4328
4329
                                description: |-
                                  Optional duration in seconds the pod needs to terminate gracefully upon probe failure.
                                  The grace period is the duration in seconds after the processes running in the pod are sent
                                  a termination signal and the time when the processes are forcibly halted with a kill signal.
                                  Set this value longer than the expected cleanup time for your process.
                                  If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                                  value overrides the value provided by the pod spec.
                                  Value must be non-negative integer. The value zero indicates stop immediately via
                                  the kill signal (no opportunity to shut down).
                                  This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.
                                  Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
4330
4331
4332
                                format: int64
                                type: integer
                              timeoutSeconds:
4333
4334
4335
4336
                                description: |-
                                  Number of seconds after which the probe times out.
                                  Defaults to 1 second. Minimum value is 1.
                                  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
4337
4338
4339
4340
                                format: int32
                                type: integer
                            type: object
                          stdin:
4341
4342
4343
4344
                            description: |-
                              Whether this container should allocate a buffer for stdin in the container runtime. If this
                              is not set, reads from stdin in the container will always result in EOF.
                              Default is false.
4345
4346
                            type: boolean
                          stdinOnce:
4347
4348
4349
4350
4351
4352
4353
4354
                            description: |-
                              Whether the container runtime should close the stdin channel after it has been opened by
                              a single attach. When stdin is true the stdin stream will remain open across multiple attach
                              sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the
                              first client attaches to stdin, and then remains open and accepts data until the client disconnects,
                              at which time stdin is closed and remains closed until the container is restarted. If this
                              flag is false, a container processes that reads from stdin will never receive an EOF.
                              Default is false
4355
4356
                            type: boolean
                          targetContainerName:
4357
4358
4359
4360
4361
4362
4363
                            description: |-
                              If set, the name of the container from PodSpec that this ephemeral container targets.
                              The ephemeral container will be run in the namespaces (IPC, PID, etc) of this container.
                              If not set then the ephemeral container uses the namespaces configured in the Pod spec.

                              The container runtime must implement support for this feature. If the runtime does not
                              support namespace targeting then the result of setting this field is undefined.
4364
4365
                            type: string
                          terminationMessagePath:
4366
4367
4368
4369
4370
4371
4372
4373
                            description: |-
                              Optional: Path at which the file to which the container's termination message
                              will be written is mounted into the container's filesystem.
                              Message written is intended to be brief final status, such as an assertion failure message.
                              Will be truncated by the node if greater than 4096 bytes. The total message length across
                              all containers will be limited to 12kb.
                              Defaults to /dev/termination-log.
                              Cannot be updated.
4374
4375
                            type: string
                          terminationMessagePolicy:
4376
4377
4378
4379
4380
4381
4382
4383
                            description: |-
                              Indicate how the termination message should be populated. File will use the contents of
                              terminationMessagePath to populate the container status message on both success and failure.
                              FallbackToLogsOnError will use the last chunk of container log output if the termination
                              message file is empty and the container exited with an error.
                              The log output is limited to 2048 bytes or 80 lines, whichever is smaller.
                              Defaults to File.
                              Cannot be updated.
4384
4385
                            type: string
                          tty:
4386
4387
4388
                            description: |-
                              Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.
                              Default is false.
4389
4390
                            type: boolean
                          volumeDevices:
4391
                            description: volumeDevices is the list of block devices to be used by the container.
4392
                            items:
4393
                              description: volumeDevice describes a mapping of a raw block device within a container.
4394
                              properties:
4395
                                devicePath:
4396
                                  description: devicePath is the path inside of the container that the device will be mapped to.
4397
                                  type: string
4398
                                name:
4399
                                  description: name must match the name of a persistentVolumeClaim in the pod
4400
4401
                                  type: string
                              required:
4402
4403
                                - devicePath
                                - name
4404
                              type: object
4405
4406
4407
4408
4409
                            type: array
                            x-kubernetes-list-map-keys:
                              - devicePath
                            x-kubernetes-list-type: map
                          volumeMounts:
4410
4411
4412
                            description: |-
                              Pod volumes to mount into the container's filesystem. Subpath mounts are not allowed for ephemeral containers.
                              Cannot be updated.
4413
                            items:
4414
                              description: VolumeMount describes a mounting of a Volume within a container.
4415
                              properties:
4416
                                mountPath:
4417
4418
4419
                                  description: |-
                                    Path within the container at which the volume should be mounted.  Must
                                    not contain ':'.
4420
                                  type: string
4421
                                mountPropagation:
4422
4423
4424
4425
4426
4427
4428
                                  description: |-
                                    mountPropagation determines how mounts are propagated from the host
                                    to container and the other way around.
                                    When not set, MountPropagationNone is used.
                                    This field is beta in 1.10.
                                    When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified
                                    (which defaults to None).
4429
                                  type: string
4430
                                name:
4431
                                  description: This must match the Name of a Volume.
4432
                                  type: string
4433
                                readOnly:
4434
4435
4436
                                  description: |-
                                    Mounted read-only if true, read-write otherwise (false or unspecified).
                                    Defaults to false.
4437
4438
                                  type: boolean
                                recursiveReadOnly:
4439
4440
4441
4442
4443
4444
4445
4446
4447
4448
4449
4450
4451
4452
4453
4454
4455
                                  description: |-
                                    RecursiveReadOnly specifies whether read-only mounts should be handled
                                    recursively.

                                    If ReadOnly is false, this field has no meaning and must be unspecified.

                                    If ReadOnly is true, and this field is set to Disabled, the mount is not made
                                    recursively read-only.  If this field is set to IfPossible, the mount is made
                                    recursively read-only, if it is supported by the container runtime.  If this
                                    field is set to Enabled, the mount is made recursively read-only if it is
                                    supported by the container runtime, otherwise the pod will not be started and
                                    an error will be generated to indicate the reason.

                                    If this field is set to IfPossible or Enabled, MountPropagation must be set to
                                    None (or be unspecified, which defaults to None).

                                    If this field is not specified, it is treated as an equivalent of Disabled.
4456
                                  type: string
4457
                                subPath:
4458
4459
4460
                                  description: |-
                                    Path within the volume from which the container's volume should be mounted.
                                    Defaults to "" (volume's root).
4461
                                  type: string
4462
                                subPathExpr:
4463
4464
4465
4466
4467
                                  description: |-
                                    Expanded path within the volume from which the container's volume should be mounted.
                                    Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.
                                    Defaults to "" (volume's root).
                                    SubPathExpr and SubPath are mutually exclusive.
4468
4469
                                  type: string
                              required:
4470
4471
                                - mountPath
                                - name
4472
                              type: object
4473
4474
4475
4476
4477
                            type: array
                            x-kubernetes-list-map-keys:
                              - mountPath
                            x-kubernetes-list-type: map
                          workingDir:
4478
4479
4480
4481
4482
                            description: |-
                              Container's working directory.
                              If not specified, the container runtime's default will be used, which
                              might be configured in the container image.
                              Cannot be updated.
4483
4484
4485
4486
4487
4488
4489
4490
4491
                            type: string
                        required:
                          - name
                        type: object
                      type: array
                      x-kubernetes-list-map-keys:
                        - name
                      x-kubernetes-list-type: map
                    hostAliases:
4492
4493
4494
                      description: |-
                        HostAliases is an optional list of hosts and IPs that will be injected into the pod's hosts
                        file if specified.
4495
                      items:
4496
4497
4498
                        description: |-
                          HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the
                          pod's hosts file.
4499
4500
                        properties:
                          hostnames:
4501
                            description: Hostnames for the above IP address.
4502
4503
4504
4505
4506
                            items:
                              type: string
                            type: array
                            x-kubernetes-list-type: atomic
                          ip:
4507
                            description: IP address of the host file entry.
4508
4509
4510
4511
4512
4513
4514
4515
4516
                            type: string
                        required:
                          - ip
                        type: object
                      type: array
                      x-kubernetes-list-map-keys:
                        - ip
                      x-kubernetes-list-type: map
                    hostIPC:
4517
4518
4519
                      description: |-
                        Use the host's ipc namespace.
                        Optional: Default to false.
4520
4521
                      type: boolean
                    hostNetwork:
4522
4523
4524
4525
                      description: |-
                        Host networking requested for this pod. Use the host's network namespace.
                        If this option is set, the ports that will be used must be specified.
                        Default to false.
4526
4527
                      type: boolean
                    hostPID:
4528
4529
4530
                      description: |-
                        Use the host's pid namespace.
                        Optional: Default to false.
4531
4532
                      type: boolean
                    hostUsers:
4533
4534
4535
4536
4537
4538
4539
4540
4541
4542
                      description: |-
                        Use the host's user namespace.
                        Optional: Default to true.
                        If set to true or not present, the pod will be run in the host user namespace, useful
                        for when the pod needs a feature only available to the host user namespace, such as
                        loading a kernel module with CAP_SYS_MODULE.
                        When set to false, a new userns is created for the pod. Setting false is useful for
                        mitigating container breakout vulnerabilities even allowing users to run their
                        containers as root without actually having root privileges on the host.
                        This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
4543
4544
                      type: boolean
                    hostname:
4545
4546
4547
                      description: |-
                        Specifies the hostname of the Pod
                        If not specified, the pod's hostname will be set to a system-defined value.
4548
4549
                      type: string
                    imagePullSecrets:
4550
4551
4552
4553
                      description: |-
                        ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec.
                        If specified, these secrets will be passed to individual puller implementations for them to use.
                        More info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod
4554
                      items:
4555
4556
4557
                        description: |-
                          LocalObjectReference contains enough information to let you locate the
                          referenced object inside the same namespace.
4558
4559
4560
                        properties:
                          name:
                            default: ""
4561
4562
4563
4564
4565
4566
                            description: |-
                              Name of the referent.
                              This field is effectively required, but due to backwards compatibility is
                              allowed to be empty. Instances of this type with an empty value here are
                              almost certainly wrong.
                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
4567
4568
4569
4570
4571
4572
4573
4574
                            type: string
                        type: object
                        x-kubernetes-map-type: atomic
                      type: array
                      x-kubernetes-list-map-keys:
                        - name
                      x-kubernetes-list-type: map
                    initContainers:
4575
4576
4577
4578
4579
4580
4581
4582
4583
4584
4585
4586
4587
4588
                      description: |-
                        List of initialization containers belonging to the pod.
                        Init containers are executed in order prior to containers being started. If any
                        init container fails, the pod is considered to have failed and is handled according
                        to its restartPolicy. The name for an init container or normal container must be
                        unique among all containers.
                        Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes.
                        The resourceRequirements of an init container are taken into account during scheduling
                        by finding the highest request/limit for each resource type, and then using the max of
                        that value or the sum of the normal containers. Limits are applied to init containers
                        in a similar fashion.
                        Init containers cannot currently be added or removed.
                        Cannot be updated.
                        More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
4589
                      items:
4590
                        description: A single application container that you want to run within a pod.
4591
4592
                        properties:
                          args:
4593
4594
4595
4596
4597
4598
4599
4600
4601
                            description: |-
                              Arguments to the entrypoint.
                              The container image's CMD is used if this is not provided.
                              Variable references $(VAR_NAME) are expanded using the container's environment. If a variable
                              cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced
                              to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
                              produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless
                              of whether the variable exists or not. Cannot be updated.
                              More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
4602
4603
4604
4605
4606
                            items:
                              type: string
                            type: array
                            x-kubernetes-list-type: atomic
                          command:
4607
4608
4609
4610
4611
4612
4613
4614
4615
                            description: |-
                              Entrypoint array. Not executed within a shell.
                              The container image's ENTRYPOINT is used if this is not provided.
                              Variable references $(VAR_NAME) are expanded using the container's environment. If a variable
                              cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced
                              to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
                              produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless
                              of whether the variable exists or not. Cannot be updated.
                              More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
4616
4617
4618
4619
4620
                            items:
                              type: string
                            type: array
                            x-kubernetes-list-type: atomic
                          env:
4621
4622
4623
                            description: |-
                              List of environment variables to set in the container.
                              Cannot be updated.
4624
                            items:
4625
                              description: EnvVar represents an environment variable present in a Container.
4626
                              properties:
4627
                                name:
4628
                                  description: Name of the environment variable. Must be a C_IDENTIFIER.
4629
                                  type: string
4630
                                value:
4631
4632
4633
4634
4635
4636
4637
4638
4639
4640
                                  description: |-
                                    Variable references $(VAR_NAME) are expanded
                                    using the previously defined environment variables in the container and
                                    any service environment variables. If a variable cannot be resolved,
                                    the reference in the input string will be unchanged. Double $$ are reduced
                                    to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.
                                    "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
                                    Escaped references will never be expanded, regardless of whether the variable
                                    exists or not.
                                    Defaults to "".
4641
                                  type: string
4642
                                valueFrom:
4643
                                  description: Source for the environment variable's value. Cannot be used if value is not empty.
4644
4645
                                  properties:
                                    configMapKeyRef:
4646
                                      description: Selects a key of a ConfigMap.
4647
4648
                                      properties:
                                        key:
4649
                                          description: The key to select.
4650
4651
4652
                                          type: string
                                        name:
                                          default: ""
4653
4654
4655
4656
4657
4658
                                          description: |-
                                            Name of the referent.
                                            This field is effectively required, but due to backwards compatibility is
                                            allowed to be empty. Instances of this type with an empty value here are
                                            almost certainly wrong.
                                            More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
4659
4660
                                          type: string
                                        optional:
4661
                                          description: Specify whether the ConfigMap or its key must be defined
4662
4663
4664
4665
4666
4667
                                          type: boolean
                                      required:
                                        - key
                                      type: object
                                      x-kubernetes-map-type: atomic
                                    fieldRef:
4668
4669
4670
                                      description: |-
                                        Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['<KEY>']`, `metadata.annotations['<KEY>']`,
                                        spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
4671
4672
                                      properties:
                                        apiVersion:
4673
                                          description: Version of the schema the FieldPath is written in terms of, defaults to "v1".
4674
4675
                                          type: string
                                        fieldPath:
4676
                                          description: Path of the field to select in the specified API version.
4677
4678
4679
4680
4681
4682
                                          type: string
                                      required:
                                        - fieldPath
                                      type: object
                                      x-kubernetes-map-type: atomic
                                    resourceFieldRef:
4683
4684
4685
                                      description: |-
                                        Selects a resource of the container: only resources limits and requests
                                        (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
4686
4687
                                      properties:
                                        containerName:
4688
                                          description: 'Container name: required for volumes, optional for env vars'
4689
4690
4691
4692
4693
                                          type: string
                                        divisor:
                                          anyOf:
                                            - type: integer
                                            - type: string
4694
                                          description: Specifies the output format of the exposed resources, defaults to "1"
4695
4696
4697
                                          pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                          x-kubernetes-int-or-string: true
                                        resource:
4698
                                          description: 'Required: resource to select'
4699
4700
4701
4702
4703
4704
                                          type: string
                                      required:
                                        - resource
                                      type: object
                                      x-kubernetes-map-type: atomic
                                    secretKeyRef:
4705
                                      description: Selects a key of a secret in the pod's namespace
4706
4707
                                      properties:
                                        key:
4708
                                          description: The key of the secret to select from.  Must be a valid secret key.
4709
4710
4711
                                          type: string
                                        name:
                                          default: ""
4712
4713
4714
4715
4716
4717
                                          description: |-
                                            Name of the referent.
                                            This field is effectively required, but due to backwards compatibility is
                                            allowed to be empty. Instances of this type with an empty value here are
                                            almost certainly wrong.
                                            More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
4718
4719
                                          type: string
                                        optional:
4720
                                          description: Specify whether the Secret or its key must be defined
4721
4722
4723
4724
4725
4726
                                          type: boolean
                                      required:
                                        - key
                                      type: object
                                      x-kubernetes-map-type: atomic
                                  type: object
4727
                              required:
4728
                                - name
4729
                              type: object
4730
4731
4732
4733
4734
                            type: array
                            x-kubernetes-list-map-keys:
                              - name
                            x-kubernetes-list-type: map
                          envFrom:
4735
4736
4737
4738
4739
4740
4741
                            description: |-
                              List of sources to populate environment variables in the container.
                              The keys defined within a source must be a C_IDENTIFIER. All invalid keys
                              will be reported as an event when the container is starting. When a key exists in multiple
                              sources, the value associated with the last source will take precedence.
                              Values defined by an Env with a duplicate key will take precedence.
                              Cannot be updated.
4742
                            items:
4743
                              description: EnvFromSource represents the source of a set of ConfigMaps or Secrets
4744
                              properties:
4745
                                configMapRef:
4746
                                  description: The ConfigMap to select from
4747
4748
4749
                                  properties:
                                    name:
                                      default: ""
4750
4751
4752
4753
4754
4755
                                      description: |-
                                        Name of the referent.
                                        This field is effectively required, but due to backwards compatibility is
                                        allowed to be empty. Instances of this type with an empty value here are
                                        almost certainly wrong.
                                        More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
4756
4757
                                      type: string
                                    optional:
4758
                                      description: Specify whether the ConfigMap must be defined
4759
4760
4761
4762
                                      type: boolean
                                  type: object
                                  x-kubernetes-map-type: atomic
                                prefix:
4763
                                  description: Optional text to prepend to the name of each environment variable. Must be a C_IDENTIFIER.
4764
                                  type: string
4765
                                secretRef:
4766
                                  description: The Secret to select from
4767
4768
4769
                                  properties:
                                    name:
                                      default: ""
4770
4771
4772
4773
4774
4775
                                      description: |-
                                        Name of the referent.
                                        This field is effectively required, but due to backwards compatibility is
                                        allowed to be empty. Instances of this type with an empty value here are
                                        almost certainly wrong.
                                        More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
4776
4777
                                      type: string
                                    optional:
4778
                                      description: Specify whether the Secret must be defined
4779
4780
4781
4782
4783
4784
4785
                                      type: boolean
                                  type: object
                                  x-kubernetes-map-type: atomic
                              type: object
                            type: array
                            x-kubernetes-list-type: atomic
                          image:
4786
4787
4788
4789
4790
                            description: |-
                              Container image name.
                              More info: https://kubernetes.io/docs/concepts/containers/images
                              This field is optional to allow higher level config management to default or override
                              container images in workload controllers like Deployments and StatefulSets.
4791
4792
                            type: string
                          imagePullPolicy:
4793
4794
4795
4796
4797
4798
                            description: |-
                              Image pull policy.
                              One of Always, Never, IfNotPresent.
                              Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.
                              Cannot be updated.
                              More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
4799
4800
                            type: string
                          lifecycle:
4801
4802
4803
                            description: |-
                              Actions that the management system should take in response to container lifecycle events.
                              Cannot be updated.
4804
4805
                            properties:
                              postStart:
4806
4807
4808
4809
4810
                                description: |-
                                  PostStart is called immediately after a container is created. If the handler fails,
                                  the container is terminated and restarted according to its restart policy.
                                  Other management of the container blocks until the hook completes.
                                  More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
4811
4812
                                properties:
                                  exec:
4813
                                    description: Exec specifies a command to execute in the container.
4814
                                    properties:
4815
                                      command:
4816
4817
4818
4819
4820
4821
                                        description: |-
                                          Command is the command line to execute inside the container, the working directory for the
                                          command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                          not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                          a shell, you need to explicitly call out to that shell.
                                          Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
4822
4823
4824
4825
4826
4827
                                        items:
                                          type: string
                                        type: array
                                        x-kubernetes-list-type: atomic
                                    type: object
                                  httpGet:
4828
                                    description: HTTPGet specifies an HTTP GET request to perform.
4829
4830
                                    properties:
                                      host:
4831
4832
4833
                                        description: |-
                                          Host name to connect to, defaults to the pod IP. You probably want to set
                                          "Host" in httpHeaders instead.
4834
                                        type: string
4835
                                      httpHeaders:
4836
                                        description: Custom headers to set in the request. HTTP allows repeated headers.
4837
                                        items:
4838
                                          description: HTTPHeader describes a custom header to be used in HTTP probes
4839
4840
                                          properties:
                                            name:
4841
4842
4843
                                              description: |-
                                                The header field name.
                                                This will be canonicalized upon output, so case-variant names will be understood as the same header.
4844
4845
                                              type: string
                                            value:
4846
                                              description: The header field value
4847
4848
4849
4850
4851
4852
4853
4854
                                              type: string
                                          required:
                                            - name
                                            - value
                                          type: object
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      path:
4855
                                        description: Path to access on the HTTP server.
4856
4857
4858
4859
4860
                                        type: string
                                      port:
                                        anyOf:
                                          - type: integer
                                          - type: string
4861
4862
4863
4864
                                        description: |-
                                          Name or number of the port to access on the container.
                                          Number must be in the range 1 to 65535.
                                          Name must be an IANA_SVC_NAME.
4865
4866
                                        x-kubernetes-int-or-string: true
                                      scheme:
4867
4868
4869
                                        description: |-
                                          Scheme to use for connecting to the host.
                                          Defaults to HTTP.
4870
4871
                                        type: string
                                    required:
4872
                                      - port
4873
                                    type: object
4874
                                  sleep:
4875
                                    description: Sleep represents a duration that the container should sleep.
4876
4877
                                    properties:
                                      seconds:
4878
                                        description: Seconds is the number of seconds to sleep.
4879
4880
4881
4882
4883
4884
                                        format: int64
                                        type: integer
                                    required:
                                      - seconds
                                    type: object
                                  tcpSocket:
4885
4886
4887
4888
                                    description: |-
                                      Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept
                                      for backward compatibility. There is no validation of this field and
                                      lifecycle hooks will fail at runtime when it is specified.
4889
4890
                                    properties:
                                      host:
4891
                                        description: 'Optional: Host name to connect to, defaults to the pod IP.'
4892
4893
4894
4895
4896
                                        type: string
                                      port:
                                        anyOf:
                                          - type: integer
                                          - type: string
4897
4898
4899
4900
                                        description: |-
                                          Number or name of the port to access on the container.
                                          Number must be in the range 1 to 65535.
                                          Name must be an IANA_SVC_NAME.
4901
4902
4903
4904
4905
4906
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - port
                                    type: object
                                type: object
                              preStop:
4907
4908
4909
4910
4911
4912
4913
4914
4915
4916
                                description: |-
                                  PreStop is called immediately before a container is terminated due to an
                                  API request or management event such as liveness/startup probe failure,
                                  preemption, resource contention, etc. The handler is not called if the
                                  container crashes or exits. The Pod's termination grace period countdown begins before the
                                  PreStop hook is executed. Regardless of the outcome of the handler, the
                                  container will eventually terminate within the Pod's termination grace
                                  period (unless delayed by finalizers). Other management of the container blocks until the hook completes
                                  or until the termination grace period is reached.
                                  More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
4917
4918
                                properties:
                                  exec:
4919
                                    description: Exec specifies a command to execute in the container.
4920
4921
                                    properties:
                                      command:
4922
4923
4924
4925
4926
4927
                                        description: |-
                                          Command is the command line to execute inside the container, the working directory for the
                                          command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                          not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                          a shell, you need to explicitly call out to that shell.
                                          Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
4928
4929
4930
4931
4932
4933
                                        items:
                                          type: string
                                        type: array
                                        x-kubernetes-list-type: atomic
                                    type: object
                                  httpGet:
4934
                                    description: HTTPGet specifies an HTTP GET request to perform.
4935
4936
                                    properties:
                                      host:
4937
4938
4939
                                        description: |-
                                          Host name to connect to, defaults to the pod IP. You probably want to set
                                          "Host" in httpHeaders instead.
4940
4941
                                        type: string
                                      httpHeaders:
4942
                                        description: Custom headers to set in the request. HTTP allows repeated headers.
4943
                                        items:
4944
                                          description: HTTPHeader describes a custom header to be used in HTTP probes
4945
4946
                                          properties:
                                            name:
4947
4948
4949
                                              description: |-
                                                The header field name.
                                                This will be canonicalized upon output, so case-variant names will be understood as the same header.
4950
4951
                                              type: string
                                            value:
4952
                                              description: The header field value
4953
4954
4955
4956
4957
4958
4959
4960
                                              type: string
                                          required:
                                            - name
                                            - value
                                          type: object
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      path:
4961
                                        description: Path to access on the HTTP server.
4962
4963
4964
4965
4966
                                        type: string
                                      port:
                                        anyOf:
                                          - type: integer
                                          - type: string
4967
4968
4969
4970
                                        description: |-
                                          Name or number of the port to access on the container.
                                          Number must be in the range 1 to 65535.
                                          Name must be an IANA_SVC_NAME.
4971
4972
                                        x-kubernetes-int-or-string: true
                                      scheme:
4973
4974
4975
                                        description: |-
                                          Scheme to use for connecting to the host.
                                          Defaults to HTTP.
4976
4977
4978
4979
4980
                                        type: string
                                    required:
                                      - port
                                    type: object
                                  sleep:
4981
                                    description: Sleep represents a duration that the container should sleep.
4982
4983
                                    properties:
                                      seconds:
4984
                                        description: Seconds is the number of seconds to sleep.
4985
4986
4987
4988
4989
4990
                                        format: int64
                                        type: integer
                                    required:
                                      - seconds
                                    type: object
                                  tcpSocket:
4991
4992
4993
4994
                                    description: |-
                                      Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept
                                      for backward compatibility. There is no validation of this field and
                                      lifecycle hooks will fail at runtime when it is specified.
4995
4996
                                    properties:
                                      host:
4997
                                        description: 'Optional: Host name to connect to, defaults to the pod IP.'
4998
4999
5000
5001
5002
                                        type: string
                                      port:
                                        anyOf:
                                          - type: integer
                                          - type: string
5003
5004
5005
5006
                                        description: |-
                                          Number or name of the port to access on the container.
                                          Number must be in the range 1 to 65535.
                                          Name must be an IANA_SVC_NAME.
5007
5008
5009
5010
5011
5012
                                        x-kubernetes-int-or-string: true
                                    required:
                                      - port
                                    type: object
                                type: object
                              stopSignal:
5013
5014
5015
5016
                                description: |-
                                  StopSignal defines which signal will be sent to a container when it is being stopped.
                                  If not specified, the default is defined by the container runtime in use.
                                  StopSignal can only be set for Pods with a non-empty .spec.os.name
5017
5018
5019
                                type: string
                            type: object
                          livenessProbe:
5020
5021
5022
5023
5024
                            description: |-
                              Periodic probe of container liveness.
                              Container will be restarted if the probe fails.
                              Cannot be updated.
                              More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
5025
5026
                            properties:
                              exec:
5027
                                description: Exec specifies a command to execute in the container.
5028
5029
                                properties:
                                  command:
5030
5031
5032
5033
5034
5035
                                    description: |-
                                      Command is the command line to execute inside the container, the working directory for the
                                      command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                      not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                      a shell, you need to explicitly call out to that shell.
                                      Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
5036
5037
5038
5039
5040
5041
                                    items:
                                      type: string
                                    type: array
                                    x-kubernetes-list-type: atomic
                                type: object
                              failureThreshold:
5042
5043
5044
                                description: |-
                                  Minimum consecutive failures for the probe to be considered failed after having succeeded.
                                  Defaults to 3. Minimum value is 1.
5045
5046
5047
                                format: int32
                                type: integer
                              grpc:
5048
                                description: GRPC specifies a GRPC HealthCheckRequest.
5049
5050
                                properties:
                                  port:
5051
                                    description: Port number of the gRPC service. Number must be in the range 1 to 65535.
5052
5053
5054
5055
                                    format: int32
                                    type: integer
                                  service:
                                    default: ""
5056
5057
5058
5059
5060
                                    description: |-
                                      Service is the name of the service to place in the gRPC HealthCheckRequest
                                      (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).

                                      If this is not specified, the default behavior is defined by gRPC.
5061
5062
5063
5064
5065
                                    type: string
                                required:
                                  - port
                                type: object
                              httpGet:
5066
                                description: HTTPGet specifies an HTTP GET request to perform.
5067
5068
                                properties:
                                  host:
5069
5070
5071
                                    description: |-
                                      Host name to connect to, defaults to the pod IP. You probably want to set
                                      "Host" in httpHeaders instead.
5072
5073
                                    type: string
                                  httpHeaders:
5074
                                    description: Custom headers to set in the request. HTTP allows repeated headers.
5075
                                    items:
5076
                                      description: HTTPHeader describes a custom header to be used in HTTP probes
5077
5078
                                      properties:
                                        name:
5079
5080
5081
                                          description: |-
                                            The header field name.
                                            This will be canonicalized upon output, so case-variant names will be understood as the same header.
5082
5083
                                          type: string
                                        value:
5084
                                          description: The header field value
5085
5086
5087
5088
5089
5090
5091
5092
                                          type: string
                                      required:
                                        - name
                                        - value
                                      type: object
                                    type: array
                                    x-kubernetes-list-type: atomic
                                  path:
5093
                                    description: Path to access on the HTTP server.
5094
5095
5096
5097
5098
                                    type: string
                                  port:
                                    anyOf:
                                      - type: integer
                                      - type: string
5099
5100
5101
5102
                                    description: |-
                                      Name or number of the port to access on the container.
                                      Number must be in the range 1 to 65535.
                                      Name must be an IANA_SVC_NAME.
5103
5104
                                    x-kubernetes-int-or-string: true
                                  scheme:
5105
5106
5107
                                    description: |-
                                      Scheme to use for connecting to the host.
                                      Defaults to HTTP.
5108
5109
5110
5111
5112
                                    type: string
                                required:
                                  - port
                                type: object
                              initialDelaySeconds:
5113
5114
5115
                                description: |-
                                  Number of seconds after the container has started before liveness probes are initiated.
                                  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
5116
5117
5118
                                format: int32
                                type: integer
                              periodSeconds:
5119
5120
5121
                                description: |-
                                  How often (in seconds) to perform the probe.
                                  Default to 10 seconds. Minimum value is 1.
5122
5123
5124
                                format: int32
                                type: integer
                              successThreshold:
5125
5126
5127
                                description: |-
                                  Minimum consecutive successes for the probe to be considered successful after having failed.
                                  Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
5128
5129
5130
                                format: int32
                                type: integer
                              tcpSocket:
5131
                                description: TCPSocket specifies a connection to a TCP port.
5132
5133
                                properties:
                                  host:
5134
                                    description: 'Optional: Host name to connect to, defaults to the pod IP.'
5135
5136
5137
5138
5139
                                    type: string
                                  port:
                                    anyOf:
                                      - type: integer
                                      - type: string
5140
5141
5142
5143
                                    description: |-
                                      Number or name of the port to access on the container.
                                      Number must be in the range 1 to 65535.
                                      Name must be an IANA_SVC_NAME.
5144
5145
5146
5147
5148
                                    x-kubernetes-int-or-string: true
                                required:
                                  - port
                                type: object
                              terminationGracePeriodSeconds:
5149
5150
5151
5152
5153
5154
5155
5156
5157
5158
5159
                                description: |-
                                  Optional duration in seconds the pod needs to terminate gracefully upon probe failure.
                                  The grace period is the duration in seconds after the processes running in the pod are sent
                                  a termination signal and the time when the processes are forcibly halted with a kill signal.
                                  Set this value longer than the expected cleanup time for your process.
                                  If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                                  value overrides the value provided by the pod spec.
                                  Value must be non-negative integer. The value zero indicates stop immediately via
                                  the kill signal (no opportunity to shut down).
                                  This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.
                                  Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
5160
5161
5162
                                format: int64
                                type: integer
                              timeoutSeconds:
5163
5164
5165
5166
                                description: |-
                                  Number of seconds after which the probe times out.
                                  Defaults to 1 second. Minimum value is 1.
                                  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
5167
5168
5169
5170
                                format: int32
                                type: integer
                            type: object
                          name:
5171
5172
5173
5174
                            description: |-
                              Name of the container specified as a DNS_LABEL.
                              Each container in a pod must have a unique name (DNS_LABEL).
                              Cannot be updated.
5175
5176
                            type: string
                          ports:
5177
5178
5179
5180
5181
5182
5183
5184
                            description: |-
                              List of ports to expose from the container. Not specifying a port here
                              DOES NOT prevent that port from being exposed. Any port which is
                              listening on the default "0.0.0.0" address inside a container will be
                              accessible from the network.
                              Modifying this array with strategic merge patch may corrupt the data.
                              For more information See https://github.com/kubernetes/kubernetes/issues/108255.
                              Cannot be updated.
5185
                            items:
5186
                              description: ContainerPort represents a network port in a single container.
5187
5188
                              properties:
                                containerPort:
5189
5190
5191
                                  description: |-
                                    Number of port to expose on the pod's IP address.
                                    This must be a valid port number, 0 < x < 65536.
5192
5193
5194
                                  format: int32
                                  type: integer
                                hostIP:
5195
                                  description: What host IP to bind the external port to.
5196
                                  type: string
5197
                                hostPort:
5198
5199
5200
5201
5202
                                  description: |-
                                    Number of port to expose on the host.
                                    If specified, this must be a valid port number, 0 < x < 65536.
                                    If HostNetwork is specified, this must match ContainerPort.
                                    Most containers do not need this.
5203
5204
5205
                                  format: int32
                                  type: integer
                                name:
5206
5207
5208
5209
                                  description: |-
                                    If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
                                    named port in a pod must have a unique name. Name for the port that can be
                                    referred to by services.
5210
                                  type: string
5211
5212
                                protocol:
                                  default: TCP
5213
5214
5215
                                  description: |-
                                    Protocol for port. Must be UDP, TCP, or SCTP.
                                    Defaults to "TCP".
5216
5217
                                  type: string
                              required:
5218
                                - containerPort
5219
                              type: object
5220
5221
5222
5223
5224
5225
                            type: array
                            x-kubernetes-list-map-keys:
                              - containerPort
                              - protocol
                            x-kubernetes-list-type: map
                          readinessProbe:
5226
5227
5228
5229
5230
                            description: |-
                              Periodic probe of container service readiness.
                              Container will be removed from service endpoints if the probe fails.
                              Cannot be updated.
                              More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
5231
5232
                            properties:
                              exec:
5233
                                description: Exec specifies a command to execute in the container.
5234
5235
                                properties:
                                  command:
5236
5237
5238
5239
5240
5241
                                    description: |-
                                      Command is the command line to execute inside the container, the working directory for the
                                      command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                      not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                      a shell, you need to explicitly call out to that shell.
                                      Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
5242
5243
5244
5245
5246
5247
                                    items:
                                      type: string
                                    type: array
                                    x-kubernetes-list-type: atomic
                                type: object
                              failureThreshold:
5248
5249
5250
                                description: |-
                                  Minimum consecutive failures for the probe to be considered failed after having succeeded.
                                  Defaults to 3. Minimum value is 1.
5251
5252
5253
                                format: int32
                                type: integer
                              grpc:
5254
                                description: GRPC specifies a GRPC HealthCheckRequest.
5255
5256
                                properties:
                                  port:
5257
                                    description: Port number of the gRPC service. Number must be in the range 1 to 65535.
5258
5259
5260
5261
                                    format: int32
                                    type: integer
                                  service:
                                    default: ""
5262
5263
5264
5265
5266
                                    description: |-
                                      Service is the name of the service to place in the gRPC HealthCheckRequest
                                      (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).

                                      If this is not specified, the default behavior is defined by gRPC.
5267
5268
5269
5270
5271
                                    type: string
                                required:
                                  - port
                                type: object
                              httpGet:
5272
                                description: HTTPGet specifies an HTTP GET request to perform.
5273
5274
                                properties:
                                  host:
5275
5276
5277
                                    description: |-
                                      Host name to connect to, defaults to the pod IP. You probably want to set
                                      "Host" in httpHeaders instead.
5278
5279
                                    type: string
                                  httpHeaders:
5280
                                    description: Custom headers to set in the request. HTTP allows repeated headers.
5281
                                    items:
5282
                                      description: HTTPHeader describes a custom header to be used in HTTP probes
5283
5284
                                      properties:
                                        name:
5285
5286
5287
                                          description: |-
                                            The header field name.
                                            This will be canonicalized upon output, so case-variant names will be understood as the same header.
5288
5289
                                          type: string
                                        value:
5290
                                          description: The header field value
5291
5292
5293
5294
5295
5296
5297
5298
                                          type: string
                                      required:
                                        - name
                                        - value
                                      type: object
                                    type: array
                                    x-kubernetes-list-type: atomic
                                  path:
5299
                                    description: Path to access on the HTTP server.
5300
5301
5302
5303
5304
                                    type: string
                                  port:
                                    anyOf:
                                      - type: integer
                                      - type: string
5305
5306
5307
5308
                                    description: |-
                                      Name or number of the port to access on the container.
                                      Number must be in the range 1 to 65535.
                                      Name must be an IANA_SVC_NAME.
5309
5310
                                    x-kubernetes-int-or-string: true
                                  scheme:
5311
5312
5313
                                    description: |-
                                      Scheme to use for connecting to the host.
                                      Defaults to HTTP.
5314
5315
5316
5317
5318
                                    type: string
                                required:
                                  - port
                                type: object
                              initialDelaySeconds:
5319
5320
5321
                                description: |-
                                  Number of seconds after the container has started before liveness probes are initiated.
                                  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
5322
5323
5324
                                format: int32
                                type: integer
                              periodSeconds:
5325
5326
5327
                                description: |-
                                  How often (in seconds) to perform the probe.
                                  Default to 10 seconds. Minimum value is 1.
5328
5329
5330
                                format: int32
                                type: integer
                              successThreshold:
5331
5332
5333
                                description: |-
                                  Minimum consecutive successes for the probe to be considered successful after having failed.
                                  Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
5334
5335
5336
                                format: int32
                                type: integer
                              tcpSocket:
5337
                                description: TCPSocket specifies a connection to a TCP port.
5338
5339
                                properties:
                                  host:
5340
                                    description: 'Optional: Host name to connect to, defaults to the pod IP.'
5341
5342
5343
5344
5345
                                    type: string
                                  port:
                                    anyOf:
                                      - type: integer
                                      - type: string
5346
5347
5348
5349
                                    description: |-
                                      Number or name of the port to access on the container.
                                      Number must be in the range 1 to 65535.
                                      Name must be an IANA_SVC_NAME.
5350
5351
5352
5353
5354
                                    x-kubernetes-int-or-string: true
                                required:
                                  - port
                                type: object
                              terminationGracePeriodSeconds:
5355
5356
5357
5358
5359
5360
5361
5362
5363
5364
5365
                                description: |-
                                  Optional duration in seconds the pod needs to terminate gracefully upon probe failure.
                                  The grace period is the duration in seconds after the processes running in the pod are sent
                                  a termination signal and the time when the processes are forcibly halted with a kill signal.
                                  Set this value longer than the expected cleanup time for your process.
                                  If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                                  value overrides the value provided by the pod spec.
                                  Value must be non-negative integer. The value zero indicates stop immediately via
                                  the kill signal (no opportunity to shut down).
                                  This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.
                                  Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
5366
5367
5368
                                format: int64
                                type: integer
                              timeoutSeconds:
5369
5370
5371
5372
                                description: |-
                                  Number of seconds after which the probe times out.
                                  Defaults to 1 second. Minimum value is 1.
                                  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
5373
5374
5375
5376
                                format: int32
                                type: integer
                            type: object
                          resizePolicy:
5377
                            description: Resources resize policy for the container.
5378
                            items:
5379
                              description: ContainerResizePolicy represents resource resize policy for the container.
5380
5381
                              properties:
                                resourceName:
5382
5383
5384
                                  description: |-
                                    Name of the resource to which this resource resize policy applies.
                                    Supported values: cpu, memory.
5385
5386
                                  type: string
                                restartPolicy:
5387
5388
5389
                                  description: |-
                                    Restart policy to apply when specified resource is resized.
                                    If not specified, it defaults to NotRequired.
5390
5391
5392
5393
5394
5395
5396
5397
                                  type: string
                              required:
                                - resourceName
                                - restartPolicy
                              type: object
                            type: array
                            x-kubernetes-list-type: atomic
                          resources:
5398
5399
5400
5401
                            description: |-
                              Compute Resources required by this container.
                              Cannot be updated.
                              More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
5402
5403
                            properties:
                              claims:
5404
5405
5406
5407
5408
5409
5410
5411
                                description: |-
                                  Claims lists the names of resources, defined in spec.resourceClaims,
                                  that are used by this container.

                                  This is an alpha field and requires enabling the
                                  DynamicResourceAllocation feature gate.

                                  This field is immutable. It can only be set for containers.
5412
                                items:
5413
                                  description: ResourceClaim references one entry in PodSpec.ResourceClaims.
5414
5415
                                  properties:
                                    name:
5416
5417
5418
5419
                                      description: |-
                                        Name must match the name of one entry in pod.spec.resourceClaims of
                                        the Pod where this field is used. It makes that resource available
                                        inside a container.
5420
5421
                                      type: string
                                    request:
5422
5423
5424
5425
                                      description: |-
                                        Request is the name chosen for a request in the referenced claim.
                                        If empty, everything from the claim is made available, otherwise
                                        only the result of this request.
5426
5427
5428
5429
5430
5431
5432
5433
5434
5435
5436
5437
5438
5439
5440
                                      type: string
                                  required:
                                    - name
                                  type: object
                                type: array
                                x-kubernetes-list-map-keys:
                                  - name
                                x-kubernetes-list-type: map
                              limits:
                                additionalProperties:
                                  anyOf:
                                    - type: integer
                                    - type: string
                                  pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                  x-kubernetes-int-or-string: true
5441
5442
5443
                                description: |-
                                  Limits describes the maximum amount of compute resources allowed.
                                  More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
5444
5445
5446
5447
5448
5449
5450
5451
                                type: object
                              requests:
                                additionalProperties:
                                  anyOf:
                                    - type: integer
                                    - type: string
                                  pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                  x-kubernetes-int-or-string: true
5452
5453
5454
5455
5456
                                description: |-
                                  Requests describes the minimum amount of compute resources required.
                                  If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
                                  otherwise to an implementation-defined value. Requests cannot exceed Limits.
                                  More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
5457
5458
5459
                                type: object
                            type: object
                          restartPolicy:
5460
5461
5462
5463
5464
5465
5466
5467
5468
5469
5470
5471
5472
5473
5474
5475
                            description: |-
                              RestartPolicy defines the restart behavior of individual containers in a pod.
                              This field may only be set for init containers, and the only allowed value is "Always".
                              For non-init containers or when this field is not specified,
                              the restart behavior is defined by the Pod's restart policy and the container type.
                              Setting the RestartPolicy as "Always" for the init container will have the following effect:
                              this init container will be continually restarted on
                              exit until all regular containers have terminated. Once all regular
                              containers have completed, all init containers with restartPolicy "Always"
                              will be shut down. This lifecycle differs from normal init containers and
                              is often referred to as a "sidecar" container. Although this init
                              container still starts in the init container sequence, it does not wait
                              for the container to complete before proceeding to the next init
                              container. Instead, the next init container starts immediately after this
                              init container is started, or after any startupProbe has successfully
                              completed.
5476
5477
                            type: string
                          securityContext:
5478
5479
5480
5481
                            description: |-
                              SecurityContext defines the security options the container should be run with.
                              If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.
                              More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
5482
5483
                            properties:
                              allowPrivilegeEscalation:
5484
5485
5486
5487
5488
5489
5490
5491
                                description: |-
                                  AllowPrivilegeEscalation controls whether a process can gain more
                                  privileges than its parent process. This bool directly controls if
                                  the no_new_privs flag will be set on the container process.
                                  AllowPrivilegeEscalation is true always when the container is:
                                  1) run as Privileged
                                  2) has CAP_SYS_ADMIN
                                  Note that this field cannot be set when spec.os.name is windows.
5492
5493
                                type: boolean
                              appArmorProfile:
5494
5495
5496
5497
                                description: |-
                                  appArmorProfile is the AppArmor options to use by this container. If set, this profile
                                  overrides the pod's appArmorProfile.
                                  Note that this field cannot be set when spec.os.name is windows.
5498
5499
                                properties:
                                  localhostProfile:
5500
5501
5502
5503
5504
                                    description: |-
                                      localhostProfile indicates a profile loaded on the node that should be used.
                                      The profile must be preconfigured on the node to work.
                                      Must match the loaded name of the profile.
                                      Must be set if and only if type is "Localhost".
5505
5506
                                    type: string
                                  type:
5507
5508
5509
5510
5511
5512
                                    description: |-
                                      type indicates which kind of AppArmor profile will be applied.
                                      Valid options are:
                                        Localhost - a profile pre-loaded on the node.
                                        RuntimeDefault - the container runtime's default profile.
                                        Unconfined - no AppArmor enforcement.
5513
5514
5515
5516
5517
                                    type: string
                                required:
                                  - type
                                type: object
                              capabilities:
5518
5519
5520
5521
                                description: |-
                                  The capabilities to add/drop when running containers.
                                  Defaults to the default set of capabilities granted by the container runtime.
                                  Note that this field cannot be set when spec.os.name is windows.
5522
5523
                                properties:
                                  add:
5524
                                    description: Added capabilities
5525
                                    items:
5526
                                      description: Capability represent POSIX capabilities type
5527
5528
5529
5530
                                      type: string
                                    type: array
                                    x-kubernetes-list-type: atomic
                                  drop:
5531
                                    description: Removed capabilities
5532
                                    items:
5533
                                      description: Capability represent POSIX capabilities type
5534
5535
5536
5537
5538
                                      type: string
                                    type: array
                                    x-kubernetes-list-type: atomic
                                type: object
                              privileged:
5539
5540
5541
5542
5543
                                description: |-
                                  Run container in privileged mode.
                                  Processes in privileged containers are essentially equivalent to root on the host.
                                  Defaults to false.
                                  Note that this field cannot be set when spec.os.name is windows.
5544
5545
                                type: boolean
                              procMount:
5546
5547
5548
5549
5550
5551
                                description: |-
                                  procMount denotes the type of proc mount to use for the containers.
                                  The default value is Default which uses the container runtime defaults for
                                  readonly paths and masked paths.
                                  This requires the ProcMountType feature flag to be enabled.
                                  Note that this field cannot be set when spec.os.name is windows.
5552
5553
                                type: string
                              readOnlyRootFilesystem:
5554
5555
5556
5557
                                description: |-
                                  Whether this container has a read-only root filesystem.
                                  Default is false.
                                  Note that this field cannot be set when spec.os.name is windows.
5558
5559
                                type: boolean
                              runAsGroup:
5560
5561
5562
5563
5564
5565
                                description: |-
                                  The GID to run the entrypoint of the container process.
                                  Uses runtime default if unset.
                                  May also be set in PodSecurityContext.  If set in both SecurityContext and
                                  PodSecurityContext, the value specified in SecurityContext takes precedence.
                                  Note that this field cannot be set when spec.os.name is windows.
5566
5567
5568
                                format: int64
                                type: integer
                              runAsNonRoot:
5569
5570
5571
5572
5573
5574
5575
                                description: |-
                                  Indicates that the container must run as a non-root user.
                                  If true, the Kubelet will validate the image at runtime to ensure that it
                                  does not run as UID 0 (root) and fail to start the container if it does.
                                  If unset or false, no such validation will be performed.
                                  May also be set in PodSecurityContext.  If set in both SecurityContext and
                                  PodSecurityContext, the value specified in SecurityContext takes precedence.
5576
5577
                                type: boolean
                              runAsUser:
5578
5579
5580
5581
5582
5583
                                description: |-
                                  The UID to run the entrypoint of the container process.
                                  Defaults to user specified in image metadata if unspecified.
                                  May also be set in PodSecurityContext.  If set in both SecurityContext and
                                  PodSecurityContext, the value specified in SecurityContext takes precedence.
                                  Note that this field cannot be set when spec.os.name is windows.
5584
5585
5586
                                format: int64
                                type: integer
                              seLinuxOptions:
5587
5588
5589
5590
5591
5592
                                description: |-
                                  The SELinux context to be applied to the container.
                                  If unspecified, the container runtime will allocate a random SELinux context for each
                                  container.  May also be set in PodSecurityContext.  If set in both SecurityContext and
                                  PodSecurityContext, the value specified in SecurityContext takes precedence.
                                  Note that this field cannot be set when spec.os.name is windows.
5593
5594
                                properties:
                                  level:
5595
                                    description: Level is SELinux level label that applies to the container.
5596
5597
                                    type: string
                                  role:
5598
                                    description: Role is a SELinux role label that applies to the container.
5599
5600
                                    type: string
                                  type:
5601
                                    description: Type is a SELinux type label that applies to the container.
5602
5603
                                    type: string
                                  user:
5604
                                    description: User is a SELinux user label that applies to the container.
5605
5606
5607
                                    type: string
                                type: object
                              seccompProfile:
5608
5609
5610
5611
5612
                                description: |-
                                  The seccomp options to use by this container. If seccomp options are
                                  provided at both the pod & container level, the container options
                                  override the pod options.
                                  Note that this field cannot be set when spec.os.name is windows.
5613
5614
                                properties:
                                  localhostProfile:
5615
5616
5617
5618
5619
                                    description: |-
                                      localhostProfile indicates a profile defined in a file on the node should be used.
                                      The profile must be preconfigured on the node to work.
                                      Must be a descending path, relative to the kubelet's configured seccomp profile location.
                                      Must be set if type is "Localhost". Must NOT be set for any other type.
5620
5621
                                    type: string
                                  type:
5622
5623
5624
5625
5626
5627
5628
                                    description: |-
                                      type indicates which kind of seccomp profile will be applied.
                                      Valid options are:

                                      Localhost - a profile defined in a file on the node should be used.
                                      RuntimeDefault - the container runtime default profile should be used.
                                      Unconfined - no profile should be applied.
5629
5630
5631
5632
5633
                                    type: string
                                required:
                                  - type
                                type: object
                              windowsOptions:
5634
5635
5636
5637
5638
                                description: |-
                                  The Windows specific settings applied to all containers.
                                  If unspecified, the options from the PodSecurityContext will be used.
                                  If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                  Note that this field cannot be set when spec.os.name is linux.
5639
5640
                                properties:
                                  gmsaCredentialSpec:
5641
5642
5643
5644
                                    description: |-
                                      GMSACredentialSpec is where the GMSA admission webhook
                                      (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the
                                      GMSA credential spec named by the GMSACredentialSpecName field.
5645
5646
                                    type: string
                                  gmsaCredentialSpecName:
5647
                                    description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
5648
5649
                                    type: string
                                  hostProcess:
5650
5651
5652
5653
5654
                                    description: |-
                                      HostProcess determines if a container should be run as a 'Host Process' container.
                                      All of a Pod's containers must have the same effective HostProcess value
                                      (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).
                                      In addition, if HostProcess is true then HostNetwork must also be set to true.
5655
5656
                                    type: boolean
                                  runAsUserName:
5657
5658
5659
5660
5661
                                    description: |-
                                      The UserName in Windows to run the entrypoint of the container process.
                                      Defaults to the user specified in image metadata if unspecified.
                                      May also be set in PodSecurityContext. If set in both SecurityContext and
                                      PodSecurityContext, the value specified in SecurityContext takes precedence.
5662
5663
5664
5665
                                    type: string
                                type: object
                            type: object
                          startupProbe:
5666
5667
5668
5669
5670
5671
5672
5673
                            description: |-
                              StartupProbe indicates that the Pod has successfully initialized.
                              If specified, no other probes are executed until this completes successfully.
                              If this probe fails, the Pod will be restarted, just as if the livenessProbe failed.
                              This can be used to provide different probe parameters at the beginning of a Pod's lifecycle,
                              when it might take a long time to load data or warm a cache, than during steady-state operation.
                              This cannot be updated.
                              More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
5674
5675
                            properties:
                              exec:
5676
                                description: Exec specifies a command to execute in the container.
5677
5678
                                properties:
                                  command:
5679
5680
5681
5682
5683
5684
                                    description: |-
                                      Command is the command line to execute inside the container, the working directory for the
                                      command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                      not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                      a shell, you need to explicitly call out to that shell.
                                      Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
5685
5686
5687
5688
5689
5690
                                    items:
                                      type: string
                                    type: array
                                    x-kubernetes-list-type: atomic
                                type: object
                              failureThreshold:
5691
5692
5693
                                description: |-
                                  Minimum consecutive failures for the probe to be considered failed after having succeeded.
                                  Defaults to 3. Minimum value is 1.
5694
5695
5696
                                format: int32
                                type: integer
                              grpc:
5697
                                description: GRPC specifies a GRPC HealthCheckRequest.
5698
5699
                                properties:
                                  port:
5700
                                    description: Port number of the gRPC service. Number must be in the range 1 to 65535.
5701
5702
5703
5704
                                    format: int32
                                    type: integer
                                  service:
                                    default: ""
5705
5706
5707
5708
5709
                                    description: |-
                                      Service is the name of the service to place in the gRPC HealthCheckRequest
                                      (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).

                                      If this is not specified, the default behavior is defined by gRPC.
5710
5711
5712
5713
5714
                                    type: string
                                required:
                                  - port
                                type: object
                              httpGet:
5715
                                description: HTTPGet specifies an HTTP GET request to perform.
5716
5717
                                properties:
                                  host:
5718
5719
5720
                                    description: |-
                                      Host name to connect to, defaults to the pod IP. You probably want to set
                                      "Host" in httpHeaders instead.
5721
5722
                                    type: string
                                  httpHeaders:
5723
                                    description: Custom headers to set in the request. HTTP allows repeated headers.
5724
                                    items:
5725
                                      description: HTTPHeader describes a custom header to be used in HTTP probes
5726
5727
                                      properties:
                                        name:
5728
5729
5730
                                          description: |-
                                            The header field name.
                                            This will be canonicalized upon output, so case-variant names will be understood as the same header.
5731
5732
                                          type: string
                                        value:
5733
                                          description: The header field value
5734
5735
5736
5737
5738
5739
5740
5741
                                          type: string
                                      required:
                                        - name
                                        - value
                                      type: object
                                    type: array
                                    x-kubernetes-list-type: atomic
                                  path:
5742
                                    description: Path to access on the HTTP server.
5743
5744
5745
5746
5747
                                    type: string
                                  port:
                                    anyOf:
                                      - type: integer
                                      - type: string
5748
5749
5750
5751
                                    description: |-
                                      Name or number of the port to access on the container.
                                      Number must be in the range 1 to 65535.
                                      Name must be an IANA_SVC_NAME.
5752
5753
                                    x-kubernetes-int-or-string: true
                                  scheme:
5754
5755
5756
                                    description: |-
                                      Scheme to use for connecting to the host.
                                      Defaults to HTTP.
5757
5758
5759
5760
5761
                                    type: string
                                required:
                                  - port
                                type: object
                              initialDelaySeconds:
5762
5763
5764
                                description: |-
                                  Number of seconds after the container has started before liveness probes are initiated.
                                  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
5765
5766
5767
                                format: int32
                                type: integer
                              periodSeconds:
5768
5769
5770
                                description: |-
                                  How often (in seconds) to perform the probe.
                                  Default to 10 seconds. Minimum value is 1.
5771
5772
5773
                                format: int32
                                type: integer
                              successThreshold:
5774
5775
5776
                                description: |-
                                  Minimum consecutive successes for the probe to be considered successful after having failed.
                                  Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
5777
5778
5779
                                format: int32
                                type: integer
                              tcpSocket:
5780
                                description: TCPSocket specifies a connection to a TCP port.
5781
5782
                                properties:
                                  host:
5783
                                    description: 'Optional: Host name to connect to, defaults to the pod IP.'
5784
5785
5786
5787
5788
                                    type: string
                                  port:
                                    anyOf:
                                      - type: integer
                                      - type: string
5789
5790
5791
5792
                                    description: |-
                                      Number or name of the port to access on the container.
                                      Number must be in the range 1 to 65535.
                                      Name must be an IANA_SVC_NAME.
5793
5794
5795
5796
5797
                                    x-kubernetes-int-or-string: true
                                required:
                                  - port
                                type: object
                              terminationGracePeriodSeconds:
5798
5799
5800
5801
5802
5803
5804
5805
5806
5807
5808
                                description: |-
                                  Optional duration in seconds the pod needs to terminate gracefully upon probe failure.
                                  The grace period is the duration in seconds after the processes running in the pod are sent
                                  a termination signal and the time when the processes are forcibly halted with a kill signal.
                                  Set this value longer than the expected cleanup time for your process.
                                  If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                                  value overrides the value provided by the pod spec.
                                  Value must be non-negative integer. The value zero indicates stop immediately via
                                  the kill signal (no opportunity to shut down).
                                  This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.
                                  Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
5809
5810
5811
                                format: int64
                                type: integer
                              timeoutSeconds:
5812
5813
5814
5815
                                description: |-
                                  Number of seconds after which the probe times out.
                                  Defaults to 1 second. Minimum value is 1.
                                  More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
5816
5817
5818
5819
                                format: int32
                                type: integer
                            type: object
                          stdin:
5820
5821
5822
5823
                            description: |-
                              Whether this container should allocate a buffer for stdin in the container runtime. If this
                              is not set, reads from stdin in the container will always result in EOF.
                              Default is false.
5824
5825
                            type: boolean
                          stdinOnce:
5826
5827
5828
5829
5830
5831
5832
5833
                            description: |-
                              Whether the container runtime should close the stdin channel after it has been opened by
                              a single attach. When stdin is true the stdin stream will remain open across multiple attach
                              sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the
                              first client attaches to stdin, and then remains open and accepts data until the client disconnects,
                              at which time stdin is closed and remains closed until the container is restarted. If this
                              flag is false, a container processes that reads from stdin will never receive an EOF.
                              Default is false
5834
5835
                            type: boolean
                          terminationMessagePath:
5836
5837
5838
5839
5840
5841
5842
5843
                            description: |-
                              Optional: Path at which the file to which the container's termination message
                              will be written is mounted into the container's filesystem.
                              Message written is intended to be brief final status, such as an assertion failure message.
                              Will be truncated by the node if greater than 4096 bytes. The total message length across
                              all containers will be limited to 12kb.
                              Defaults to /dev/termination-log.
                              Cannot be updated.
5844
5845
                            type: string
                          terminationMessagePolicy:
5846
5847
5848
5849
5850
5851
5852
5853
                            description: |-
                              Indicate how the termination message should be populated. File will use the contents of
                              terminationMessagePath to populate the container status message on both success and failure.
                              FallbackToLogsOnError will use the last chunk of container log output if the termination
                              message file is empty and the container exited with an error.
                              The log output is limited to 2048 bytes or 80 lines, whichever is smaller.
                              Defaults to File.
                              Cannot be updated.
5854
5855
                            type: string
                          tty:
5856
5857
5858
                            description: |-
                              Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.
                              Default is false.
5859
5860
                            type: boolean
                          volumeDevices:
5861
                            description: volumeDevices is the list of block devices to be used by the container.
5862
                            items:
5863
                              description: volumeDevice describes a mapping of a raw block device within a container.
5864
5865
                              properties:
                                devicePath:
5866
                                  description: devicePath is the path inside of the container that the device will be mapped to.
5867
5868
                                  type: string
                                name:
5869
                                  description: name must match the name of a persistentVolumeClaim in the pod
5870
5871
5872
5873
5874
5875
5876
5877
5878
5879
                                  type: string
                              required:
                                - devicePath
                                - name
                              type: object
                            type: array
                            x-kubernetes-list-map-keys:
                              - devicePath
                            x-kubernetes-list-type: map
                          volumeMounts:
5880
5881
5882
                            description: |-
                              Pod volumes to mount into the container's filesystem.
                              Cannot be updated.
5883
                            items:
5884
                              description: VolumeMount describes a mounting of a Volume within a container.
5885
5886
                              properties:
                                mountPath:
5887
5888
5889
                                  description: |-
                                    Path within the container at which the volume should be mounted.  Must
                                    not contain ':'.
5890
5891
                                  type: string
                                mountPropagation:
5892
5893
5894
5895
5896
5897
5898
                                  description: |-
                                    mountPropagation determines how mounts are propagated from the host
                                    to container and the other way around.
                                    When not set, MountPropagationNone is used.
                                    This field is beta in 1.10.
                                    When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified
                                    (which defaults to None).
5899
5900
                                  type: string
                                name:
5901
                                  description: This must match the Name of a Volume.
5902
5903
                                  type: string
                                readOnly:
5904
5905
5906
                                  description: |-
                                    Mounted read-only if true, read-write otherwise (false or unspecified).
                                    Defaults to false.
5907
5908
                                  type: boolean
                                recursiveReadOnly:
5909
5910
5911
5912
5913
5914
5915
5916
5917
5918
5919
5920
5921
5922
5923
5924
5925
                                  description: |-
                                    RecursiveReadOnly specifies whether read-only mounts should be handled
                                    recursively.

                                    If ReadOnly is false, this field has no meaning and must be unspecified.

                                    If ReadOnly is true, and this field is set to Disabled, the mount is not made
                                    recursively read-only.  If this field is set to IfPossible, the mount is made
                                    recursively read-only, if it is supported by the container runtime.  If this
                                    field is set to Enabled, the mount is made recursively read-only if it is
                                    supported by the container runtime, otherwise the pod will not be started and
                                    an error will be generated to indicate the reason.

                                    If this field is set to IfPossible or Enabled, MountPropagation must be set to
                                    None (or be unspecified, which defaults to None).

                                    If this field is not specified, it is treated as an equivalent of Disabled.
5926
5927
                                  type: string
                                subPath:
5928
5929
5930
                                  description: |-
                                    Path within the volume from which the container's volume should be mounted.
                                    Defaults to "" (volume's root).
5931
5932
                                  type: string
                                subPathExpr:
5933
5934
5935
5936
5937
                                  description: |-
                                    Expanded path within the volume from which the container's volume should be mounted.
                                    Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.
                                    Defaults to "" (volume's root).
                                    SubPathExpr and SubPath are mutually exclusive.
5938
5939
5940
5941
5942
5943
5944
5945
5946
5947
                                  type: string
                              required:
                                - mountPath
                                - name
                              type: object
                            type: array
                            x-kubernetes-list-map-keys:
                              - mountPath
                            x-kubernetes-list-type: map
                          workingDir:
5948
5949
5950
5951
5952
                            description: |-
                              Container's working directory.
                              If not specified, the container runtime's default will be used, which
                              might be configured in the container image.
                              Cannot be updated.
5953
5954
5955
5956
5957
5958
5959
5960
5961
                            type: string
                        required:
                          - name
                        type: object
                      type: array
                      x-kubernetes-list-map-keys:
                        - name
                      x-kubernetes-list-type: map
                    mainContainer:
5962
                      description: A single application container that you want to run within a pod.
5963
5964
                      properties:
                        args:
5965
5966
5967
5968
5969
5970
5971
5972
5973
                          description: |-
                            Arguments to the entrypoint.
                            The container image's CMD is used if this is not provided.
                            Variable references $(VAR_NAME) are expanded using the container's environment. If a variable
                            cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced
                            to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
                            produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless
                            of whether the variable exists or not. Cannot be updated.
                            More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
5974
5975
5976
5977
5978
                          items:
                            type: string
                          type: array
                          x-kubernetes-list-type: atomic
                        command:
5979
5980
5981
5982
5983
5984
5985
5986
5987
                          description: |-
                            Entrypoint array. Not executed within a shell.
                            The container image's ENTRYPOINT is used if this is not provided.
                            Variable references $(VAR_NAME) are expanded using the container's environment. If a variable
                            cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced
                            to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
                            produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless
                            of whether the variable exists or not. Cannot be updated.
                            More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
5988
5989
5990
5991
5992
                          items:
                            type: string
                          type: array
                          x-kubernetes-list-type: atomic
                        env:
5993
5994
5995
                          description: |-
                            List of environment variables to set in the container.
                            Cannot be updated.
5996
                          items:
5997
                            description: EnvVar represents an environment variable present in a Container.
5998
5999
                            properties:
                              name:
6000
                                description: Name of the environment variable. Must be a C_IDENTIFIER.
6001
6002
                                type: string
                              value:
6003
6004
6005
6006
6007
6008
6009
6010
6011
6012
                                description: |-
                                  Variable references $(VAR_NAME) are expanded
                                  using the previously defined environment variables in the container and
                                  any service environment variables. If a variable cannot be resolved,
                                  the reference in the input string will be unchanged. Double $$ are reduced
                                  to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.
                                  "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
                                  Escaped references will never be expanded, regardless of whether the variable
                                  exists or not.
                                  Defaults to "".
6013
6014
                                type: string
                              valueFrom:
6015
                                description: Source for the environment variable's value. Cannot be used if value is not empty.
6016
6017
                                properties:
                                  configMapKeyRef:
6018
                                    description: Selects a key of a ConfigMap.
6019
6020
                                    properties:
                                      key:
6021
                                        description: The key to select.
6022
6023
6024
                                        type: string
                                      name:
                                        default: ""
6025
6026
6027
6028
6029
6030
                                        description: |-
                                          Name of the referent.
                                          This field is effectively required, but due to backwards compatibility is
                                          allowed to be empty. Instances of this type with an empty value here are
                                          almost certainly wrong.
                                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
6031
6032
                                        type: string
                                      optional:
6033
                                        description: Specify whether the ConfigMap or its key must be defined
6034
6035
6036
6037
6038
6039
                                        type: boolean
                                    required:
                                      - key
                                    type: object
                                    x-kubernetes-map-type: atomic
                                  fieldRef:
6040
6041
6042
                                    description: |-
                                      Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['<KEY>']`, `metadata.annotations['<KEY>']`,
                                      spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
6043
6044
                                    properties:
                                      apiVersion:
6045
                                        description: Version of the schema the FieldPath is written in terms of, defaults to "v1".
6046
6047
                                        type: string
                                      fieldPath:
6048
                                        description: Path of the field to select in the specified API version.
6049
6050
6051
6052
6053
6054
                                        type: string
                                    required:
                                      - fieldPath
                                    type: object
                                    x-kubernetes-map-type: atomic
                                  resourceFieldRef:
6055
6056
6057
                                    description: |-
                                      Selects a resource of the container: only resources limits and requests
                                      (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
6058
6059
                                    properties:
                                      containerName:
6060
                                        description: 'Container name: required for volumes, optional for env vars'
6061
6062
6063
6064
6065
                                        type: string
                                      divisor:
                                        anyOf:
                                          - type: integer
                                          - type: string
6066
                                        description: Specifies the output format of the exposed resources, defaults to "1"
6067
6068
6069
                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                        x-kubernetes-int-or-string: true
                                      resource:
6070
                                        description: 'Required: resource to select'
6071
6072
6073
6074
6075
6076
                                        type: string
                                    required:
                                      - resource
                                    type: object
                                    x-kubernetes-map-type: atomic
                                  secretKeyRef:
6077
                                    description: Selects a key of a secret in the pod's namespace
6078
6079
                                    properties:
                                      key:
6080
                                        description: The key of the secret to select from.  Must be a valid secret key.
6081
6082
6083
                                        type: string
                                      name:
                                        default: ""
6084
6085
6086
6087
6088
6089
                                        description: |-
                                          Name of the referent.
                                          This field is effectively required, but due to backwards compatibility is
                                          allowed to be empty. Instances of this type with an empty value here are
                                          almost certainly wrong.
                                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
6090
6091
                                        type: string
                                      optional:
6092
                                        description: Specify whether the Secret or its key must be defined
6093
6094
6095
6096
6097
6098
6099
6100
6101
6102
6103
6104
6105
6106
                                        type: boolean
                                    required:
                                      - key
                                    type: object
                                    x-kubernetes-map-type: atomic
                                type: object
                            required:
                              - name
                            type: object
                          type: array
                          x-kubernetes-list-map-keys:
                            - name
                          x-kubernetes-list-type: map
                        envFrom:
6107
6108
6109
6110
6111
6112
6113
                          description: |-
                            List of sources to populate environment variables in the container.
                            The keys defined within a source must be a C_IDENTIFIER. All invalid keys
                            will be reported as an event when the container is starting. When a key exists in multiple
                            sources, the value associated with the last source will take precedence.
                            Values defined by an Env with a duplicate key will take precedence.
                            Cannot be updated.
6114
                          items:
6115
                            description: EnvFromSource represents the source of a set of ConfigMaps or Secrets
6116
6117
                            properties:
                              configMapRef:
6118
                                description: The ConfigMap to select from
6119
6120
6121
                                properties:
                                  name:
                                    default: ""
6122
6123
6124
6125
6126
6127
                                    description: |-
                                      Name of the referent.
                                      This field is effectively required, but due to backwards compatibility is
                                      allowed to be empty. Instances of this type with an empty value here are
                                      almost certainly wrong.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
6128
6129
                                    type: string
                                  optional:
6130
                                    description: Specify whether the ConfigMap must be defined
6131
6132
6133
6134
                                    type: boolean
                                type: object
                                x-kubernetes-map-type: atomic
                              prefix:
6135
                                description: Optional text to prepend to the name of each environment variable. Must be a C_IDENTIFIER.
6136
6137
                                type: string
                              secretRef:
6138
                                description: The Secret to select from
6139
6140
6141
                                properties:
                                  name:
                                    default: ""
6142
6143
6144
6145
6146
6147
                                    description: |-
                                      Name of the referent.
                                      This field is effectively required, but due to backwards compatibility is
                                      allowed to be empty. Instances of this type with an empty value here are
                                      almost certainly wrong.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
6148
6149
                                    type: string
                                  optional:
6150
                                    description: Specify whether the Secret must be defined
6151
6152
6153
6154
6155
6156
6157
                                    type: boolean
                                type: object
                                x-kubernetes-map-type: atomic
                            type: object
                          type: array
                          x-kubernetes-list-type: atomic
                        image:
6158
6159
6160
6161
6162
                          description: |-
                            Container image name.
                            More info: https://kubernetes.io/docs/concepts/containers/images
                            This field is optional to allow higher level config management to default or override
                            container images in workload controllers like Deployments and StatefulSets.
6163
6164
                          type: string
                        imagePullPolicy:
6165
6166
6167
6168
6169
6170
                          description: |-
                            Image pull policy.
                            One of Always, Never, IfNotPresent.
                            Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.
                            Cannot be updated.
                            More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
6171
6172
                          type: string
                        lifecycle:
6173
6174
6175
                          description: |-
                            Actions that the management system should take in response to container lifecycle events.
                            Cannot be updated.
6176
6177
                          properties:
                            postStart:
6178
6179
6180
6181
6182
                              description: |-
                                PostStart is called immediately after a container is created. If the handler fails,
                                the container is terminated and restarted according to its restart policy.
                                Other management of the container blocks until the hook completes.
                                More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
6183
6184
                              properties:
                                exec:
6185
                                  description: Exec specifies a command to execute in the container.
6186
6187
                                  properties:
                                    command:
6188
6189
6190
6191
6192
6193
                                      description: |-
                                        Command is the command line to execute inside the container, the working directory for the
                                        command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                        not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                        a shell, you need to explicitly call out to that shell.
                                        Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
6194
6195
6196
6197
6198
6199
                                      items:
                                        type: string
                                      type: array
                                      x-kubernetes-list-type: atomic
                                  type: object
                                httpGet:
6200
                                  description: HTTPGet specifies an HTTP GET request to perform.
6201
6202
                                  properties:
                                    host:
6203
6204
6205
                                      description: |-
                                        Host name to connect to, defaults to the pod IP. You probably want to set
                                        "Host" in httpHeaders instead.
6206
6207
                                      type: string
                                    httpHeaders:
6208
                                      description: Custom headers to set in the request. HTTP allows repeated headers.
6209
                                      items:
6210
                                        description: HTTPHeader describes a custom header to be used in HTTP probes
6211
6212
                                        properties:
                                          name:
6213
6214
6215
                                            description: |-
                                              The header field name.
                                              This will be canonicalized upon output, so case-variant names will be understood as the same header.
6216
6217
                                            type: string
                                          value:
6218
                                            description: The header field value
6219
6220
6221
6222
6223
6224
6225
6226
                                            type: string
                                        required:
                                          - name
                                          - value
                                        type: object
                                      type: array
                                      x-kubernetes-list-type: atomic
                                    path:
6227
                                      description: Path to access on the HTTP server.
6228
6229
6230
6231
6232
                                      type: string
                                    port:
                                      anyOf:
                                        - type: integer
                                        - type: string
6233
6234
6235
6236
                                      description: |-
                                        Name or number of the port to access on the container.
                                        Number must be in the range 1 to 65535.
                                        Name must be an IANA_SVC_NAME.
6237
6238
                                      x-kubernetes-int-or-string: true
                                    scheme:
6239
6240
6241
                                      description: |-
                                        Scheme to use for connecting to the host.
                                        Defaults to HTTP.
6242
6243
6244
6245
6246
                                      type: string
                                  required:
                                    - port
                                  type: object
                                sleep:
6247
                                  description: Sleep represents a duration that the container should sleep.
6248
6249
                                  properties:
                                    seconds:
6250
                                      description: Seconds is the number of seconds to sleep.
6251
6252
6253
6254
6255
6256
                                      format: int64
                                      type: integer
                                  required:
                                    - seconds
                                  type: object
                                tcpSocket:
6257
6258
6259
6260
                                  description: |-
                                    Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept
                                    for backward compatibility. There is no validation of this field and
                                    lifecycle hooks will fail at runtime when it is specified.
6261
6262
                                  properties:
                                    host:
6263
                                      description: 'Optional: Host name to connect to, defaults to the pod IP.'
6264
6265
6266
6267
6268
                                      type: string
                                    port:
                                      anyOf:
                                        - type: integer
                                        - type: string
6269
6270
6271
6272
                                      description: |-
                                        Number or name of the port to access on the container.
                                        Number must be in the range 1 to 65535.
                                        Name must be an IANA_SVC_NAME.
6273
6274
6275
6276
6277
6278
                                      x-kubernetes-int-or-string: true
                                  required:
                                    - port
                                  type: object
                              type: object
                            preStop:
6279
6280
6281
6282
6283
6284
6285
6286
6287
6288
                              description: |-
                                PreStop is called immediately before a container is terminated due to an
                                API request or management event such as liveness/startup probe failure,
                                preemption, resource contention, etc. The handler is not called if the
                                container crashes or exits. The Pod's termination grace period countdown begins before the
                                PreStop hook is executed. Regardless of the outcome of the handler, the
                                container will eventually terminate within the Pod's termination grace
                                period (unless delayed by finalizers). Other management of the container blocks until the hook completes
                                or until the termination grace period is reached.
                                More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
6289
6290
                              properties:
                                exec:
6291
                                  description: Exec specifies a command to execute in the container.
6292
6293
                                  properties:
                                    command:
6294
6295
6296
6297
6298
6299
                                      description: |-
                                        Command is the command line to execute inside the container, the working directory for the
                                        command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                        not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                        a shell, you need to explicitly call out to that shell.
                                        Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
6300
6301
6302
6303
6304
6305
                                      items:
                                        type: string
                                      type: array
                                      x-kubernetes-list-type: atomic
                                  type: object
                                httpGet:
6306
                                  description: HTTPGet specifies an HTTP GET request to perform.
6307
6308
                                  properties:
                                    host:
6309
6310
6311
                                      description: |-
                                        Host name to connect to, defaults to the pod IP. You probably want to set
                                        "Host" in httpHeaders instead.
6312
6313
                                      type: string
                                    httpHeaders:
6314
                                      description: Custom headers to set in the request. HTTP allows repeated headers.
6315
                                      items:
6316
                                        description: HTTPHeader describes a custom header to be used in HTTP probes
6317
6318
                                        properties:
                                          name:
6319
6320
6321
                                            description: |-
                                              The header field name.
                                              This will be canonicalized upon output, so case-variant names will be understood as the same header.
6322
6323
                                            type: string
                                          value:
6324
                                            description: The header field value
6325
6326
6327
6328
6329
6330
6331
6332
                                            type: string
                                        required:
                                          - name
                                          - value
                                        type: object
                                      type: array
                                      x-kubernetes-list-type: atomic
                                    path:
6333
                                      description: Path to access on the HTTP server.
6334
6335
6336
6337
6338
                                      type: string
                                    port:
                                      anyOf:
                                        - type: integer
                                        - type: string
6339
6340
6341
6342
                                      description: |-
                                        Name or number of the port to access on the container.
                                        Number must be in the range 1 to 65535.
                                        Name must be an IANA_SVC_NAME.
6343
6344
                                      x-kubernetes-int-or-string: true
                                    scheme:
6345
6346
6347
                                      description: |-
                                        Scheme to use for connecting to the host.
                                        Defaults to HTTP.
6348
6349
6350
6351
6352
                                      type: string
                                  required:
                                    - port
                                  type: object
                                sleep:
6353
                                  description: Sleep represents a duration that the container should sleep.
6354
6355
                                  properties:
                                    seconds:
6356
                                      description: Seconds is the number of seconds to sleep.
6357
6358
6359
6360
6361
6362
                                      format: int64
                                      type: integer
                                  required:
                                    - seconds
                                  type: object
                                tcpSocket:
6363
6364
6365
6366
                                  description: |-
                                    Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept
                                    for backward compatibility. There is no validation of this field and
                                    lifecycle hooks will fail at runtime when it is specified.
6367
6368
                                  properties:
                                    host:
6369
                                      description: 'Optional: Host name to connect to, defaults to the pod IP.'
6370
6371
6372
6373
6374
                                      type: string
                                    port:
                                      anyOf:
                                        - type: integer
                                        - type: string
6375
6376
6377
6378
                                      description: |-
                                        Number or name of the port to access on the container.
                                        Number must be in the range 1 to 65535.
                                        Name must be an IANA_SVC_NAME.
6379
6380
6381
6382
6383
6384
                                      x-kubernetes-int-or-string: true
                                  required:
                                    - port
                                  type: object
                              type: object
                            stopSignal:
6385
6386
6387
6388
                              description: |-
                                StopSignal defines which signal will be sent to a container when it is being stopped.
                                If not specified, the default is defined by the container runtime in use.
                                StopSignal can only be set for Pods with a non-empty .spec.os.name
6389
6390
6391
                              type: string
                          type: object
                        livenessProbe:
6392
6393
6394
6395
6396
                          description: |-
                            Periodic probe of container liveness.
                            Container will be restarted if the probe fails.
                            Cannot be updated.
                            More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
6397
6398
                          properties:
                            exec:
6399
                              description: Exec specifies a command to execute in the container.
6400
6401
                              properties:
                                command:
6402
6403
6404
6405
6406
6407
                                  description: |-
                                    Command is the command line to execute inside the container, the working directory for the
                                    command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                    not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                    a shell, you need to explicitly call out to that shell.
                                    Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
6408
6409
6410
6411
6412
6413
                                  items:
                                    type: string
                                  type: array
                                  x-kubernetes-list-type: atomic
                              type: object
                            failureThreshold:
6414
6415
6416
                              description: |-
                                Minimum consecutive failures for the probe to be considered failed after having succeeded.
                                Defaults to 3. Minimum value is 1.
6417
6418
6419
                              format: int32
                              type: integer
                            grpc:
6420
                              description: GRPC specifies a GRPC HealthCheckRequest.
6421
6422
                              properties:
                                port:
6423
                                  description: Port number of the gRPC service. Number must be in the range 1 to 65535.
6424
6425
6426
6427
                                  format: int32
                                  type: integer
                                service:
                                  default: ""
6428
6429
6430
6431
6432
                                  description: |-
                                    Service is the name of the service to place in the gRPC HealthCheckRequest
                                    (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).

                                    If this is not specified, the default behavior is defined by gRPC.
6433
6434
6435
6436
6437
                                  type: string
                              required:
                                - port
                              type: object
                            httpGet:
6438
                              description: HTTPGet specifies an HTTP GET request to perform.
6439
6440
                              properties:
                                host:
6441
6442
6443
                                  description: |-
                                    Host name to connect to, defaults to the pod IP. You probably want to set
                                    "Host" in httpHeaders instead.
6444
6445
                                  type: string
                                httpHeaders:
6446
                                  description: Custom headers to set in the request. HTTP allows repeated headers.
6447
                                  items:
6448
                                    description: HTTPHeader describes a custom header to be used in HTTP probes
6449
6450
                                    properties:
                                      name:
6451
6452
6453
                                        description: |-
                                          The header field name.
                                          This will be canonicalized upon output, so case-variant names will be understood as the same header.
6454
6455
                                        type: string
                                      value:
6456
                                        description: The header field value
6457
6458
6459
6460
6461
6462
6463
6464
                                        type: string
                                    required:
                                      - name
                                      - value
                                    type: object
                                  type: array
                                  x-kubernetes-list-type: atomic
                                path:
6465
                                  description: Path to access on the HTTP server.
6466
6467
6468
6469
6470
                                  type: string
                                port:
                                  anyOf:
                                    - type: integer
                                    - type: string
6471
6472
6473
6474
                                  description: |-
                                    Name or number of the port to access on the container.
                                    Number must be in the range 1 to 65535.
                                    Name must be an IANA_SVC_NAME.
6475
6476
                                  x-kubernetes-int-or-string: true
                                scheme:
6477
6478
6479
                                  description: |-
                                    Scheme to use for connecting to the host.
                                    Defaults to HTTP.
6480
6481
6482
6483
6484
                                  type: string
                              required:
                                - port
                              type: object
                            initialDelaySeconds:
6485
6486
6487
                              description: |-
                                Number of seconds after the container has started before liveness probes are initiated.
                                More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
6488
6489
6490
                              format: int32
                              type: integer
                            periodSeconds:
6491
6492
6493
                              description: |-
                                How often (in seconds) to perform the probe.
                                Default to 10 seconds. Minimum value is 1.
6494
6495
6496
                              format: int32
                              type: integer
                            successThreshold:
6497
6498
6499
                              description: |-
                                Minimum consecutive successes for the probe to be considered successful after having failed.
                                Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
6500
6501
6502
                              format: int32
                              type: integer
                            tcpSocket:
6503
                              description: TCPSocket specifies a connection to a TCP port.
6504
6505
                              properties:
                                host:
6506
                                  description: 'Optional: Host name to connect to, defaults to the pod IP.'
6507
6508
6509
6510
6511
                                  type: string
                                port:
                                  anyOf:
                                    - type: integer
                                    - type: string
6512
6513
6514
6515
                                  description: |-
                                    Number or name of the port to access on the container.
                                    Number must be in the range 1 to 65535.
                                    Name must be an IANA_SVC_NAME.
6516
6517
6518
6519
6520
                                  x-kubernetes-int-or-string: true
                              required:
                                - port
                              type: object
                            terminationGracePeriodSeconds:
6521
6522
6523
6524
6525
6526
6527
6528
6529
6530
6531
                              description: |-
                                Optional duration in seconds the pod needs to terminate gracefully upon probe failure.
                                The grace period is the duration in seconds after the processes running in the pod are sent
                                a termination signal and the time when the processes are forcibly halted with a kill signal.
                                Set this value longer than the expected cleanup time for your process.
                                If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                                value overrides the value provided by the pod spec.
                                Value must be non-negative integer. The value zero indicates stop immediately via
                                the kill signal (no opportunity to shut down).
                                This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.
                                Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
6532
6533
6534
                              format: int64
                              type: integer
                            timeoutSeconds:
6535
6536
6537
6538
                              description: |-
                                Number of seconds after which the probe times out.
                                Defaults to 1 second. Minimum value is 1.
                                More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
6539
6540
6541
6542
                              format: int32
                              type: integer
                          type: object
                        name:
6543
6544
6545
6546
                          description: |-
                            Name of the container specified as a DNS_LABEL.
                            Each container in a pod must have a unique name (DNS_LABEL).
                            Cannot be updated.
6547
6548
                          type: string
                        ports:
6549
6550
6551
6552
6553
6554
6555
6556
                          description: |-
                            List of ports to expose from the container. Not specifying a port here
                            DOES NOT prevent that port from being exposed. Any port which is
                            listening on the default "0.0.0.0" address inside a container will be
                            accessible from the network.
                            Modifying this array with strategic merge patch may corrupt the data.
                            For more information See https://github.com/kubernetes/kubernetes/issues/108255.
                            Cannot be updated.
6557
                          items:
6558
                            description: ContainerPort represents a network port in a single container.
6559
6560
                            properties:
                              containerPort:
6561
6562
6563
                                description: |-
                                  Number of port to expose on the pod's IP address.
                                  This must be a valid port number, 0 < x < 65536.
6564
6565
6566
                                format: int32
                                type: integer
                              hostIP:
6567
                                description: What host IP to bind the external port to.
6568
6569
                                type: string
                              hostPort:
6570
6571
6572
6573
6574
                                description: |-
                                  Number of port to expose on the host.
                                  If specified, this must be a valid port number, 0 < x < 65536.
                                  If HostNetwork is specified, this must match ContainerPort.
                                  Most containers do not need this.
6575
6576
6577
                                format: int32
                                type: integer
                              name:
6578
6579
6580
6581
                                description: |-
                                  If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
                                  named port in a pod must have a unique name. Name for the port that can be
                                  referred to by services.
6582
6583
6584
                                type: string
                              protocol:
                                default: TCP
6585
6586
6587
                                description: |-
                                  Protocol for port. Must be UDP, TCP, or SCTP.
                                  Defaults to "TCP".
6588
6589
6590
6591
6592
6593
6594
6595
6596
6597
                                type: string
                            required:
                              - containerPort
                            type: object
                          type: array
                          x-kubernetes-list-map-keys:
                            - containerPort
                            - protocol
                          x-kubernetes-list-type: map
                        readinessProbe:
6598
6599
6600
6601
6602
                          description: |-
                            Periodic probe of container service readiness.
                            Container will be removed from service endpoints if the probe fails.
                            Cannot be updated.
                            More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
6603
6604
                          properties:
                            exec:
6605
                              description: Exec specifies a command to execute in the container.
6606
6607
                              properties:
                                command:
6608
6609
6610
6611
6612
6613
                                  description: |-
                                    Command is the command line to execute inside the container, the working directory for the
                                    command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                    not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                    a shell, you need to explicitly call out to that shell.
                                    Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
6614
6615
6616
6617
6618
6619
                                  items:
                                    type: string
                                  type: array
                                  x-kubernetes-list-type: atomic
                              type: object
                            failureThreshold:
6620
6621
6622
                              description: |-
                                Minimum consecutive failures for the probe to be considered failed after having succeeded.
                                Defaults to 3. Minimum value is 1.
6623
6624
6625
                              format: int32
                              type: integer
                            grpc:
6626
                              description: GRPC specifies a GRPC HealthCheckRequest.
6627
6628
                              properties:
                                port:
6629
                                  description: Port number of the gRPC service. Number must be in the range 1 to 65535.
6630
6631
6632
6633
                                  format: int32
                                  type: integer
                                service:
                                  default: ""
6634
6635
6636
6637
6638
                                  description: |-
                                    Service is the name of the service to place in the gRPC HealthCheckRequest
                                    (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).

                                    If this is not specified, the default behavior is defined by gRPC.
6639
6640
6641
6642
6643
                                  type: string
                              required:
                                - port
                              type: object
                            httpGet:
6644
                              description: HTTPGet specifies an HTTP GET request to perform.
6645
6646
                              properties:
                                host:
6647
6648
6649
                                  description: |-
                                    Host name to connect to, defaults to the pod IP. You probably want to set
                                    "Host" in httpHeaders instead.
6650
6651
                                  type: string
                                httpHeaders:
6652
                                  description: Custom headers to set in the request. HTTP allows repeated headers.
6653
                                  items:
6654
                                    description: HTTPHeader describes a custom header to be used in HTTP probes
6655
6656
                                    properties:
                                      name:
6657
6658
6659
                                        description: |-
                                          The header field name.
                                          This will be canonicalized upon output, so case-variant names will be understood as the same header.
6660
6661
                                        type: string
                                      value:
6662
                                        description: The header field value
6663
6664
6665
6666
6667
6668
6669
6670
                                        type: string
                                    required:
                                      - name
                                      - value
                                    type: object
                                  type: array
                                  x-kubernetes-list-type: atomic
                                path:
6671
                                  description: Path to access on the HTTP server.
6672
6673
6674
6675
6676
                                  type: string
                                port:
                                  anyOf:
                                    - type: integer
                                    - type: string
6677
6678
6679
6680
                                  description: |-
                                    Name or number of the port to access on the container.
                                    Number must be in the range 1 to 65535.
                                    Name must be an IANA_SVC_NAME.
6681
6682
                                  x-kubernetes-int-or-string: true
                                scheme:
6683
6684
6685
                                  description: |-
                                    Scheme to use for connecting to the host.
                                    Defaults to HTTP.
6686
6687
6688
6689
6690
                                  type: string
                              required:
                                - port
                              type: object
                            initialDelaySeconds:
6691
6692
6693
                              description: |-
                                Number of seconds after the container has started before liveness probes are initiated.
                                More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
6694
6695
6696
                              format: int32
                              type: integer
                            periodSeconds:
6697
6698
6699
                              description: |-
                                How often (in seconds) to perform the probe.
                                Default to 10 seconds. Minimum value is 1.
6700
6701
6702
                              format: int32
                              type: integer
                            successThreshold:
6703
6704
6705
                              description: |-
                                Minimum consecutive successes for the probe to be considered successful after having failed.
                                Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
6706
6707
6708
                              format: int32
                              type: integer
                            tcpSocket:
6709
                              description: TCPSocket specifies a connection to a TCP port.
6710
6711
                              properties:
                                host:
6712
                                  description: 'Optional: Host name to connect to, defaults to the pod IP.'
6713
6714
6715
6716
6717
                                  type: string
                                port:
                                  anyOf:
                                    - type: integer
                                    - type: string
6718
6719
6720
6721
                                  description: |-
                                    Number or name of the port to access on the container.
                                    Number must be in the range 1 to 65535.
                                    Name must be an IANA_SVC_NAME.
6722
6723
6724
6725
6726
                                  x-kubernetes-int-or-string: true
                              required:
                                - port
                              type: object
                            terminationGracePeriodSeconds:
6727
6728
6729
6730
6731
6732
6733
6734
6735
6736
6737
                              description: |-
                                Optional duration in seconds the pod needs to terminate gracefully upon probe failure.
                                The grace period is the duration in seconds after the processes running in the pod are sent
                                a termination signal and the time when the processes are forcibly halted with a kill signal.
                                Set this value longer than the expected cleanup time for your process.
                                If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                                value overrides the value provided by the pod spec.
                                Value must be non-negative integer. The value zero indicates stop immediately via
                                the kill signal (no opportunity to shut down).
                                This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.
                                Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
6738
6739
6740
                              format: int64
                              type: integer
                            timeoutSeconds:
6741
6742
6743
6744
                              description: |-
                                Number of seconds after which the probe times out.
                                Defaults to 1 second. Minimum value is 1.
                                More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
6745
6746
6747
6748
                              format: int32
                              type: integer
                          type: object
                        resizePolicy:
6749
                          description: Resources resize policy for the container.
6750
                          items:
6751
                            description: ContainerResizePolicy represents resource resize policy for the container.
6752
6753
                            properties:
                              resourceName:
6754
6755
6756
                                description: |-
                                  Name of the resource to which this resource resize policy applies.
                                  Supported values: cpu, memory.
6757
6758
                                type: string
                              restartPolicy:
6759
6760
6761
                                description: |-
                                  Restart policy to apply when specified resource is resized.
                                  If not specified, it defaults to NotRequired.
6762
6763
6764
6765
6766
6767
6768
6769
                                type: string
                            required:
                              - resourceName
                              - restartPolicy
                            type: object
                          type: array
                          x-kubernetes-list-type: atomic
                        resources:
6770
6771
6772
6773
                          description: |-
                            Compute Resources required by this container.
                            Cannot be updated.
                            More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
6774
6775
                          properties:
                            claims:
6776
6777
6778
6779
6780
6781
6782
6783
                              description: |-
                                Claims lists the names of resources, defined in spec.resourceClaims,
                                that are used by this container.

                                This is an alpha field and requires enabling the
                                DynamicResourceAllocation feature gate.

                                This field is immutable. It can only be set for containers.
6784
                              items:
6785
                                description: ResourceClaim references one entry in PodSpec.ResourceClaims.
6786
6787
                                properties:
                                  name:
6788
6789
6790
6791
                                    description: |-
                                      Name must match the name of one entry in pod.spec.resourceClaims of
                                      the Pod where this field is used. It makes that resource available
                                      inside a container.
6792
6793
                                    type: string
                                  request:
6794
6795
6796
6797
                                    description: |-
                                      Request is the name chosen for a request in the referenced claim.
                                      If empty, everything from the claim is made available, otherwise
                                      only the result of this request.
6798
6799
6800
6801
6802
6803
6804
6805
6806
6807
6808
6809
6810
6811
6812
                                    type: string
                                required:
                                  - name
                                type: object
                              type: array
                              x-kubernetes-list-map-keys:
                                - name
                              x-kubernetes-list-type: map
                            limits:
                              additionalProperties:
                                anyOf:
                                  - type: integer
                                  - type: string
                                pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                x-kubernetes-int-or-string: true
6813
6814
6815
                              description: |-
                                Limits describes the maximum amount of compute resources allowed.
                                More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
6816
6817
6818
6819
6820
6821
6822
6823
                              type: object
                            requests:
                              additionalProperties:
                                anyOf:
                                  - type: integer
                                  - type: string
                                pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                x-kubernetes-int-or-string: true
6824
6825
6826
6827
6828
                              description: |-
                                Requests describes the minimum amount of compute resources required.
                                If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
                                otherwise to an implementation-defined value. Requests cannot exceed Limits.
                                More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
6829
6830
6831
                              type: object
                          type: object
                        restartPolicy:
6832
6833
6834
6835
6836
6837
6838
6839
6840
6841
6842
6843
6844
6845
6846
6847
                          description: |-
                            RestartPolicy defines the restart behavior of individual containers in a pod.
                            This field may only be set for init containers, and the only allowed value is "Always".
                            For non-init containers or when this field is not specified,
                            the restart behavior is defined by the Pod's restart policy and the container type.
                            Setting the RestartPolicy as "Always" for the init container will have the following effect:
                            this init container will be continually restarted on
                            exit until all regular containers have terminated. Once all regular
                            containers have completed, all init containers with restartPolicy "Always"
                            will be shut down. This lifecycle differs from normal init containers and
                            is often referred to as a "sidecar" container. Although this init
                            container still starts in the init container sequence, it does not wait
                            for the container to complete before proceeding to the next init
                            container. Instead, the next init container starts immediately after this
                            init container is started, or after any startupProbe has successfully
                            completed.
6848
6849
                          type: string
                        securityContext:
6850
6851
6852
6853
                          description: |-
                            SecurityContext defines the security options the container should be run with.
                            If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.
                            More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
6854
6855
                          properties:
                            allowPrivilegeEscalation:
6856
6857
6858
6859
6860
6861
6862
6863
                              description: |-
                                AllowPrivilegeEscalation controls whether a process can gain more
                                privileges than its parent process. This bool directly controls if
                                the no_new_privs flag will be set on the container process.
                                AllowPrivilegeEscalation is true always when the container is:
                                1) run as Privileged
                                2) has CAP_SYS_ADMIN
                                Note that this field cannot be set when spec.os.name is windows.
6864
6865
                              type: boolean
                            appArmorProfile:
6866
6867
6868
6869
                              description: |-
                                appArmorProfile is the AppArmor options to use by this container. If set, this profile
                                overrides the pod's appArmorProfile.
                                Note that this field cannot be set when spec.os.name is windows.
6870
6871
                              properties:
                                localhostProfile:
6872
6873
6874
6875
6876
                                  description: |-
                                    localhostProfile indicates a profile loaded on the node that should be used.
                                    The profile must be preconfigured on the node to work.
                                    Must match the loaded name of the profile.
                                    Must be set if and only if type is "Localhost".
6877
6878
                                  type: string
                                type:
6879
6880
6881
6882
6883
6884
                                  description: |-
                                    type indicates which kind of AppArmor profile will be applied.
                                    Valid options are:
                                      Localhost - a profile pre-loaded on the node.
                                      RuntimeDefault - the container runtime's default profile.
                                      Unconfined - no AppArmor enforcement.
6885
6886
6887
6888
6889
                                  type: string
                              required:
                                - type
                              type: object
                            capabilities:
6890
6891
6892
6893
                              description: |-
                                The capabilities to add/drop when running containers.
                                Defaults to the default set of capabilities granted by the container runtime.
                                Note that this field cannot be set when spec.os.name is windows.
6894
6895
                              properties:
                                add:
6896
                                  description: Added capabilities
6897
                                  items:
6898
                                    description: Capability represent POSIX capabilities type
6899
6900
6901
6902
                                    type: string
                                  type: array
                                  x-kubernetes-list-type: atomic
                                drop:
6903
                                  description: Removed capabilities
6904
                                  items:
6905
                                    description: Capability represent POSIX capabilities type
6906
6907
6908
6909
6910
                                    type: string
                                  type: array
                                  x-kubernetes-list-type: atomic
                              type: object
                            privileged:
6911
6912
6913
6914
6915
                              description: |-
                                Run container in privileged mode.
                                Processes in privileged containers are essentially equivalent to root on the host.
                                Defaults to false.
                                Note that this field cannot be set when spec.os.name is windows.
6916
6917
                              type: boolean
                            procMount:
6918
6919
6920
6921
6922
6923
                              description: |-
                                procMount denotes the type of proc mount to use for the containers.
                                The default value is Default which uses the container runtime defaults for
                                readonly paths and masked paths.
                                This requires the ProcMountType feature flag to be enabled.
                                Note that this field cannot be set when spec.os.name is windows.
6924
6925
                              type: string
                            readOnlyRootFilesystem:
6926
6927
6928
6929
                              description: |-
                                Whether this container has a read-only root filesystem.
                                Default is false.
                                Note that this field cannot be set when spec.os.name is windows.
6930
6931
                              type: boolean
                            runAsGroup:
6932
6933
6934
6935
6936
6937
                              description: |-
                                The GID to run the entrypoint of the container process.
                                Uses runtime default if unset.
                                May also be set in PodSecurityContext.  If set in both SecurityContext and
                                PodSecurityContext, the value specified in SecurityContext takes precedence.
                                Note that this field cannot be set when spec.os.name is windows.
6938
6939
6940
                              format: int64
                              type: integer
                            runAsNonRoot:
6941
6942
6943
6944
6945
6946
6947
                              description: |-
                                Indicates that the container must run as a non-root user.
                                If true, the Kubelet will validate the image at runtime to ensure that it
                                does not run as UID 0 (root) and fail to start the container if it does.
                                If unset or false, no such validation will be performed.
                                May also be set in PodSecurityContext.  If set in both SecurityContext and
                                PodSecurityContext, the value specified in SecurityContext takes precedence.
6948
6949
                              type: boolean
                            runAsUser:
6950
6951
6952
6953
6954
6955
                              description: |-
                                The UID to run the entrypoint of the container process.
                                Defaults to user specified in image metadata if unspecified.
                                May also be set in PodSecurityContext.  If set in both SecurityContext and
                                PodSecurityContext, the value specified in SecurityContext takes precedence.
                                Note that this field cannot be set when spec.os.name is windows.
6956
6957
6958
                              format: int64
                              type: integer
                            seLinuxOptions:
6959
6960
6961
6962
6963
6964
                              description: |-
                                The SELinux context to be applied to the container.
                                If unspecified, the container runtime will allocate a random SELinux context for each
                                container.  May also be set in PodSecurityContext.  If set in both SecurityContext and
                                PodSecurityContext, the value specified in SecurityContext takes precedence.
                                Note that this field cannot be set when spec.os.name is windows.
6965
6966
                              properties:
                                level:
6967
                                  description: Level is SELinux level label that applies to the container.
6968
6969
                                  type: string
                                role:
6970
                                  description: Role is a SELinux role label that applies to the container.
6971
6972
                                  type: string
                                type:
6973
                                  description: Type is a SELinux type label that applies to the container.
6974
6975
                                  type: string
                                user:
6976
                                  description: User is a SELinux user label that applies to the container.
6977
6978
6979
                                  type: string
                              type: object
                            seccompProfile:
6980
6981
6982
6983
6984
                              description: |-
                                The seccomp options to use by this container. If seccomp options are
                                provided at both the pod & container level, the container options
                                override the pod options.
                                Note that this field cannot be set when spec.os.name is windows.
6985
6986
                              properties:
                                localhostProfile:
6987
6988
6989
6990
6991
                                  description: |-
                                    localhostProfile indicates a profile defined in a file on the node should be used.
                                    The profile must be preconfigured on the node to work.
                                    Must be a descending path, relative to the kubelet's configured seccomp profile location.
                                    Must be set if type is "Localhost". Must NOT be set for any other type.
6992
6993
                                  type: string
                                type:
6994
6995
6996
6997
6998
6999
7000
                                  description: |-
                                    type indicates which kind of seccomp profile will be applied.
                                    Valid options are:

                                    Localhost - a profile defined in a file on the node should be used.
                                    RuntimeDefault - the container runtime default profile should be used.
                                    Unconfined - no profile should be applied.
7001
7002
7003
7004
7005
                                  type: string
                              required:
                                - type
                              type: object
                            windowsOptions:
7006
7007
7008
7009
7010
                              description: |-
                                The Windows specific settings applied to all containers.
                                If unspecified, the options from the PodSecurityContext will be used.
                                If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                                Note that this field cannot be set when spec.os.name is linux.
7011
7012
                              properties:
                                gmsaCredentialSpec:
7013
7014
7015
7016
                                  description: |-
                                    GMSACredentialSpec is where the GMSA admission webhook
                                    (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the
                                    GMSA credential spec named by the GMSACredentialSpecName field.
7017
7018
                                  type: string
                                gmsaCredentialSpecName:
7019
                                  description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
7020
7021
                                  type: string
                                hostProcess:
7022
7023
7024
7025
7026
                                  description: |-
                                    HostProcess determines if a container should be run as a 'Host Process' container.
                                    All of a Pod's containers must have the same effective HostProcess value
                                    (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).
                                    In addition, if HostProcess is true then HostNetwork must also be set to true.
7027
7028
                                  type: boolean
                                runAsUserName:
7029
7030
7031
7032
7033
                                  description: |-
                                    The UserName in Windows to run the entrypoint of the container process.
                                    Defaults to the user specified in image metadata if unspecified.
                                    May also be set in PodSecurityContext. If set in both SecurityContext and
                                    PodSecurityContext, the value specified in SecurityContext takes precedence.
7034
7035
7036
7037
                                  type: string
                              type: object
                          type: object
                        startupProbe:
7038
7039
7040
7041
7042
7043
7044
7045
                          description: |-
                            StartupProbe indicates that the Pod has successfully initialized.
                            If specified, no other probes are executed until this completes successfully.
                            If this probe fails, the Pod will be restarted, just as if the livenessProbe failed.
                            This can be used to provide different probe parameters at the beginning of a Pod's lifecycle,
                            when it might take a long time to load data or warm a cache, than during steady-state operation.
                            This cannot be updated.
                            More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
7046
7047
                          properties:
                            exec:
7048
                              description: Exec specifies a command to execute in the container.
7049
7050
                              properties:
                                command:
7051
7052
7053
7054
7055
7056
                                  description: |-
                                    Command is the command line to execute inside the container, the working directory for the
                                    command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                                    not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                                    a shell, you need to explicitly call out to that shell.
                                    Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
7057
7058
7059
7060
7061
7062
                                  items:
                                    type: string
                                  type: array
                                  x-kubernetes-list-type: atomic
                              type: object
                            failureThreshold:
7063
7064
7065
                              description: |-
                                Minimum consecutive failures for the probe to be considered failed after having succeeded.
                                Defaults to 3. Minimum value is 1.
7066
7067
7068
                              format: int32
                              type: integer
                            grpc:
7069
                              description: GRPC specifies a GRPC HealthCheckRequest.
7070
7071
                              properties:
                                port:
7072
                                  description: Port number of the gRPC service. Number must be in the range 1 to 65535.
7073
7074
7075
7076
                                  format: int32
                                  type: integer
                                service:
                                  default: ""
7077
7078
7079
7080
7081
                                  description: |-
                                    Service is the name of the service to place in the gRPC HealthCheckRequest
                                    (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).

                                    If this is not specified, the default behavior is defined by gRPC.
7082
7083
7084
7085
7086
                                  type: string
                              required:
                                - port
                              type: object
                            httpGet:
7087
                              description: HTTPGet specifies an HTTP GET request to perform.
7088
7089
                              properties:
                                host:
7090
7091
7092
                                  description: |-
                                    Host name to connect to, defaults to the pod IP. You probably want to set
                                    "Host" in httpHeaders instead.
7093
7094
                                  type: string
                                httpHeaders:
7095
                                  description: Custom headers to set in the request. HTTP allows repeated headers.
7096
                                  items:
7097
                                    description: HTTPHeader describes a custom header to be used in HTTP probes
7098
7099
                                    properties:
                                      name:
7100
7101
7102
                                        description: |-
                                          The header field name.
                                          This will be canonicalized upon output, so case-variant names will be understood as the same header.
7103
7104
                                        type: string
                                      value:
7105
                                        description: The header field value
7106
7107
7108
7109
7110
7111
7112
7113
                                        type: string
                                    required:
                                      - name
                                      - value
                                    type: object
                                  type: array
                                  x-kubernetes-list-type: atomic
                                path:
7114
                                  description: Path to access on the HTTP server.
7115
7116
7117
7118
7119
                                  type: string
                                port:
                                  anyOf:
                                    - type: integer
                                    - type: string
7120
7121
7122
7123
                                  description: |-
                                    Name or number of the port to access on the container.
                                    Number must be in the range 1 to 65535.
                                    Name must be an IANA_SVC_NAME.
7124
7125
                                  x-kubernetes-int-or-string: true
                                scheme:
7126
7127
7128
                                  description: |-
                                    Scheme to use for connecting to the host.
                                    Defaults to HTTP.
7129
7130
7131
7132
7133
                                  type: string
                              required:
                                - port
                              type: object
                            initialDelaySeconds:
7134
7135
7136
                              description: |-
                                Number of seconds after the container has started before liveness probes are initiated.
                                More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
7137
7138
7139
                              format: int32
                              type: integer
                            periodSeconds:
7140
7141
7142
                              description: |-
                                How often (in seconds) to perform the probe.
                                Default to 10 seconds. Minimum value is 1.
7143
7144
7145
                              format: int32
                              type: integer
                            successThreshold:
7146
7147
7148
                              description: |-
                                Minimum consecutive successes for the probe to be considered successful after having failed.
                                Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
7149
7150
7151
                              format: int32
                              type: integer
                            tcpSocket:
7152
                              description: TCPSocket specifies a connection to a TCP port.
7153
7154
                              properties:
                                host:
7155
                                  description: 'Optional: Host name to connect to, defaults to the pod IP.'
7156
7157
7158
7159
7160
                                  type: string
                                port:
                                  anyOf:
                                    - type: integer
                                    - type: string
7161
7162
7163
7164
                                  description: |-
                                    Number or name of the port to access on the container.
                                    Number must be in the range 1 to 65535.
                                    Name must be an IANA_SVC_NAME.
7165
7166
7167
7168
7169
                                  x-kubernetes-int-or-string: true
                              required:
                                - port
                              type: object
                            terminationGracePeriodSeconds:
7170
7171
7172
7173
7174
7175
7176
7177
7178
7179
7180
                              description: |-
                                Optional duration in seconds the pod needs to terminate gracefully upon probe failure.
                                The grace period is the duration in seconds after the processes running in the pod are sent
                                a termination signal and the time when the processes are forcibly halted with a kill signal.
                                Set this value longer than the expected cleanup time for your process.
                                If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                                value overrides the value provided by the pod spec.
                                Value must be non-negative integer. The value zero indicates stop immediately via
                                the kill signal (no opportunity to shut down).
                                This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.
                                Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
7181
7182
7183
                              format: int64
                              type: integer
                            timeoutSeconds:
7184
7185
7186
7187
                              description: |-
                                Number of seconds after which the probe times out.
                                Defaults to 1 second. Minimum value is 1.
                                More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
7188
7189
7190
7191
                              format: int32
                              type: integer
                          type: object
                        stdin:
7192
7193
7194
7195
                          description: |-
                            Whether this container should allocate a buffer for stdin in the container runtime. If this
                            is not set, reads from stdin in the container will always result in EOF.
                            Default is false.
7196
7197
                          type: boolean
                        stdinOnce:
7198
7199
7200
7201
7202
7203
7204
7205
                          description: |-
                            Whether the container runtime should close the stdin channel after it has been opened by
                            a single attach. When stdin is true the stdin stream will remain open across multiple attach
                            sessions. If stdinOnce is set to true, stdin is opened on container start, is empty until the
                            first client attaches to stdin, and then remains open and accepts data until the client disconnects,
                            at which time stdin is closed and remains closed until the container is restarted. If this
                            flag is false, a container processes that reads from stdin will never receive an EOF.
                            Default is false
7206
7207
                          type: boolean
                        terminationMessagePath:
7208
7209
7210
7211
7212
7213
7214
7215
                          description: |-
                            Optional: Path at which the file to which the container's termination message
                            will be written is mounted into the container's filesystem.
                            Message written is intended to be brief final status, such as an assertion failure message.
                            Will be truncated by the node if greater than 4096 bytes. The total message length across
                            all containers will be limited to 12kb.
                            Defaults to /dev/termination-log.
                            Cannot be updated.
7216
7217
                          type: string
                        terminationMessagePolicy:
7218
7219
7220
7221
7222
7223
7224
7225
                          description: |-
                            Indicate how the termination message should be populated. File will use the contents of
                            terminationMessagePath to populate the container status message on both success and failure.
                            FallbackToLogsOnError will use the last chunk of container log output if the termination
                            message file is empty and the container exited with an error.
                            The log output is limited to 2048 bytes or 80 lines, whichever is smaller.
                            Defaults to File.
                            Cannot be updated.
7226
7227
                          type: string
                        tty:
7228
7229
7230
                          description: |-
                            Whether this container should allocate a TTY for itself, also requires 'stdin' to be true.
                            Default is false.
7231
7232
                          type: boolean
                        volumeDevices:
7233
                          description: volumeDevices is the list of block devices to be used by the container.
7234
                          items:
7235
                            description: volumeDevice describes a mapping of a raw block device within a container.
7236
7237
                            properties:
                              devicePath:
7238
                                description: devicePath is the path inside of the container that the device will be mapped to.
7239
7240
                                type: string
                              name:
7241
                                description: name must match the name of a persistentVolumeClaim in the pod
7242
7243
7244
7245
7246
7247
7248
7249
7250
7251
                                type: string
                            required:
                              - devicePath
                              - name
                            type: object
                          type: array
                          x-kubernetes-list-map-keys:
                            - devicePath
                          x-kubernetes-list-type: map
                        volumeMounts:
7252
7253
7254
                          description: |-
                            Pod volumes to mount into the container's filesystem.
                            Cannot be updated.
7255
                          items:
7256
                            description: VolumeMount describes a mounting of a Volume within a container.
7257
7258
                            properties:
                              mountPath:
7259
7260
7261
                                description: |-
                                  Path within the container at which the volume should be mounted.  Must
                                  not contain ':'.
7262
7263
                                type: string
                              mountPropagation:
7264
7265
7266
7267
7268
7269
7270
                                description: |-
                                  mountPropagation determines how mounts are propagated from the host
                                  to container and the other way around.
                                  When not set, MountPropagationNone is used.
                                  This field is beta in 1.10.
                                  When RecursiveReadOnly is set to IfPossible or to Enabled, MountPropagation must be None or unspecified
                                  (which defaults to None).
7271
7272
                                type: string
                              name:
7273
                                description: This must match the Name of a Volume.
7274
7275
                                type: string
                              readOnly:
7276
7277
7278
                                description: |-
                                  Mounted read-only if true, read-write otherwise (false or unspecified).
                                  Defaults to false.
7279
7280
                                type: boolean
                              recursiveReadOnly:
7281
7282
7283
7284
7285
7286
7287
7288
7289
7290
7291
7292
7293
7294
7295
7296
7297
                                description: |-
                                  RecursiveReadOnly specifies whether read-only mounts should be handled
                                  recursively.

                                  If ReadOnly is false, this field has no meaning and must be unspecified.

                                  If ReadOnly is true, and this field is set to Disabled, the mount is not made
                                  recursively read-only.  If this field is set to IfPossible, the mount is made
                                  recursively read-only, if it is supported by the container runtime.  If this
                                  field is set to Enabled, the mount is made recursively read-only if it is
                                  supported by the container runtime, otherwise the pod will not be started and
                                  an error will be generated to indicate the reason.

                                  If this field is set to IfPossible or Enabled, MountPropagation must be set to
                                  None (or be unspecified, which defaults to None).

                                  If this field is not specified, it is treated as an equivalent of Disabled.
7298
7299
                                type: string
                              subPath:
7300
7301
7302
                                description: |-
                                  Path within the volume from which the container's volume should be mounted.
                                  Defaults to "" (volume's root).
7303
7304
                                type: string
                              subPathExpr:
7305
7306
7307
7308
7309
                                description: |-
                                  Expanded path within the volume from which the container's volume should be mounted.
                                  Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container's environment.
                                  Defaults to "" (volume's root).
                                  SubPathExpr and SubPath are mutually exclusive.
7310
7311
7312
7313
7314
7315
7316
7317
7318
7319
                                type: string
                            required:
                              - mountPath
                              - name
                            type: object
                          type: array
                          x-kubernetes-list-map-keys:
                            - mountPath
                          x-kubernetes-list-type: map
                        workingDir:
7320
7321
7322
7323
7324
                          description: |-
                            Container's working directory.
                            If not specified, the container runtime's default will be used, which
                            might be configured in the container image.
                            Cannot be updated.
7325
7326
7327
7328
                          type: string
                      required: []
                      type: object
                    nodeName:
7329
7330
7331
7332
7333
7334
                      description: |-
                        NodeName indicates in which node this pod is scheduled.
                        If empty, this pod is a candidate for scheduling by the scheduler defined in schedulerName.
                        Once this field is set, the kubelet for this node becomes responsible for the lifecycle of this pod.
                        This field should not be used to express a desire for the pod to be scheduled on a specific node.
                        https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodename
7335
7336
7337
7338
                      type: string
                    nodeSelector:
                      additionalProperties:
                        type: string
7339
7340
7341
7342
                      description: |-
                        NodeSelector is a selector which must be true for the pod to fit on a node.
                        Selector which must match a node's labels for the pod to be scheduled on that node.
                        More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
7343
7344
7345
                      type: object
                      x-kubernetes-map-type: atomic
                    os:
7346
7347
7348
7349
7350
7351
7352
7353
7354
7355
7356
7357
7358
7359
7360
7361
7362
7363
7364
7365
7366
7367
7368
7369
7370
7371
7372
7373
7374
7375
7376
7377
                      description: |-
                        Specifies the OS of the containers in the pod.
                        Some pod and container fields are restricted if this is set.

                        If the OS field is set to linux, the following fields must be unset:
                        -securityContext.windowsOptions

                        If the OS field is set to windows, following fields must be unset:
                        - spec.hostPID
                        - spec.hostIPC
                        - spec.hostUsers
                        - spec.securityContext.appArmorProfile
                        - spec.securityContext.seLinuxOptions
                        - spec.securityContext.seccompProfile
                        - spec.securityContext.fsGroup
                        - spec.securityContext.fsGroupChangePolicy
                        - spec.securityContext.sysctls
                        - spec.shareProcessNamespace
                        - spec.securityContext.runAsUser
                        - spec.securityContext.runAsGroup
                        - spec.securityContext.supplementalGroups
                        - spec.securityContext.supplementalGroupsPolicy
                        - spec.containers[*].securityContext.appArmorProfile
                        - spec.containers[*].securityContext.seLinuxOptions
                        - spec.containers[*].securityContext.seccompProfile
                        - spec.containers[*].securityContext.capabilities
                        - spec.containers[*].securityContext.readOnlyRootFilesystem
                        - spec.containers[*].securityContext.privileged
                        - spec.containers[*].securityContext.allowPrivilegeEscalation
                        - spec.containers[*].securityContext.procMount
                        - spec.containers[*].securityContext.runAsUser
                        - spec.containers[*].securityContext.runAsGroup
7378
7379
                      properties:
                        name:
7380
7381
7382
7383
7384
                          description: |-
                            Name is the name of the operating system. The currently supported values are linux and windows.
                            Additional value may be defined in future and can be one of:
                            https://github.com/opencontainers/runtime-spec/blob/master/config.md#platform-specific-configuration
                            Clients should expect to handle additional values and treat unrecognized values in this field as os: null
7385
7386
7387
7388
7389
7390
7391
7392
7393
7394
7395
                          type: string
                      required:
                        - name
                      type: object
                    overhead:
                      additionalProperties:
                        anyOf:
                          - type: integer
                          - type: string
                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                        x-kubernetes-int-or-string: true
7396
7397
7398
7399
7400
7401
7402
7403
                      description: |-
                        Overhead represents the resource overhead associated with running a pod for a given RuntimeClass.
                        This field will be autopopulated at admission time by the RuntimeClass admission controller. If
                        the RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests.
                        The RuntimeClass admission controller will reject Pod create requests which have the overhead already
                        set. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the value
                        defined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero.
                        More info: https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md
7404
7405
                      type: object
                    preemptionPolicy:
7406
7407
7408
7409
                      description: |-
                        PreemptionPolicy is the Policy for preempting pods with lower priority.
                        One of Never, PreemptLowerPriority.
                        Defaults to PreemptLowerPriority if unset.
7410
7411
                      type: string
                    priority:
7412
7413
7414
7415
7416
7417
                      description: |-
                        The priority value. Various system components use this field to find the
                        priority of the pod. When Priority Admission Controller is enabled, it
                        prevents users from setting this field. The admission controller populates
                        this field from PriorityClassName.
                        The higher the value, the higher the priority.
7418
7419
7420
                      format: int32
                      type: integer
                    priorityClassName:
7421
7422
7423
7424
7425
7426
7427
                      description: |-
                        If specified, indicates the pod's priority. "system-node-critical" and
                        "system-cluster-critical" are two special keywords which indicate the
                        highest priorities with the former being the highest priority. Any other
                        name must be defined by creating a PriorityClass object with that name.
                        If not specified, the pod priority will be default or zero if there is no
                        default.
7428
7429
                      type: string
                    readinessGates:
7430
7431
7432
7433
7434
                      description: |-
                        If specified, all readiness gates will be evaluated for pod readiness.
                        A pod is ready when all its containers are ready AND
                        all conditions specified in the readiness gates have status equal to "True"
                        More info: https://git.k8s.io/enhancements/keps/sig-network/580-pod-readiness-gates
7435
                      items:
7436
                        description: PodReadinessGate contains the reference to a pod condition
7437
7438
                        properties:
                          conditionType:
7439
                            description: ConditionType refers to a condition in the pod's condition list with matching type.
7440
7441
7442
7443
7444
7445
7446
                            type: string
                        required:
                          - conditionType
                        type: object
                      type: array
                      x-kubernetes-list-type: atomic
                    resourceClaims:
7447
7448
7449
7450
7451
7452
7453
7454
7455
7456
                      description: |-
                        ResourceClaims defines which ResourceClaims must be allocated
                        and reserved before the Pod is allowed to start. The resources
                        will be made available to those containers which consume them
                        by name.

                        This is an alpha field and requires enabling the
                        DynamicResourceAllocation feature gate.

                        This field is immutable.
7457
                      items:
7458
7459
7460
7461
7462
7463
7464
                        description: |-
                          PodResourceClaim references exactly one ResourceClaim, either directly
                          or by naming a ResourceClaimTemplate which is then turned into a ResourceClaim
                          for the pod.

                          It adds a name to it that uniquely identifies the ResourceClaim inside the Pod.
                          Containers that need access to the ResourceClaim reference it with this name.
7465
7466
                        properties:
                          name:
7467
7468
7469
                            description: |-
                              Name uniquely identifies this resource claim inside the pod.
                              This must be a DNS_LABEL.
7470
7471
                            type: string
                          resourceClaimName:
7472
7473
7474
7475
7476
7477
                            description: |-
                              ResourceClaimName is the name of a ResourceClaim object in the same
                              namespace as this pod.

                              Exactly one of ResourceClaimName and ResourceClaimTemplateName must
                              be set.
7478
7479
                            type: string
                          resourceClaimTemplateName:
7480
7481
7482
7483
7484
7485
7486
7487
7488
7489
7490
7491
7492
7493
7494
7495
                            description: |-
                              ResourceClaimTemplateName is the name of a ResourceClaimTemplate
                              object in the same namespace as this pod.

                              The template will be used to create a new ResourceClaim, which will
                              be bound to this pod. When this pod is deleted, the ResourceClaim
                              will also be deleted. The pod name and resource name, along with a
                              generated component, will be used to form a unique name for the
                              ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.

                              This field is immutable and no changes will be made to the
                              corresponding ResourceClaim by the control plane after creating the
                              ResourceClaim.

                              Exactly one of ResourceClaimName and ResourceClaimTemplateName must
                              be set.
7496
7497
7498
7499
7500
7501
7502
7503
7504
                            type: string
                        required:
                          - name
                        type: object
                      type: array
                      x-kubernetes-list-map-keys:
                        - name
                      x-kubernetes-list-type: map
                    resources:
7505
7506
7507
7508
7509
7510
7511
7512
7513
7514
                      description: |-
                        Resources is the total amount of CPU and Memory resources required by all
                        containers in the pod. It supports specifying Requests and Limits for
                        "cpu" and "memory" resource names only. ResourceClaims are not supported.

                        This field enables fine-grained control over resource allocation for the
                        entire pod, allowing resource sharing among containers in a pod.

                        This is an alpha field and requires enabling the PodLevelResources feature
                        gate.
7515
7516
                      properties:
                        claims:
7517
7518
7519
7520
7521
7522
7523
7524
                          description: |-
                            Claims lists the names of resources, defined in spec.resourceClaims,
                            that are used by this container.

                            This is an alpha field and requires enabling the
                            DynamicResourceAllocation feature gate.

                            This field is immutable. It can only be set for containers.
7525
                          items:
7526
                            description: ResourceClaim references one entry in PodSpec.ResourceClaims.
7527
7528
                            properties:
                              name:
7529
7530
7531
7532
                                description: |-
                                  Name must match the name of one entry in pod.spec.resourceClaims of
                                  the Pod where this field is used. It makes that resource available
                                  inside a container.
7533
7534
                                type: string
                              request:
7535
7536
7537
7538
                                description: |-
                                  Request is the name chosen for a request in the referenced claim.
                                  If empty, everything from the claim is made available, otherwise
                                  only the result of this request.
7539
7540
7541
7542
7543
7544
7545
7546
7547
7548
7549
7550
7551
7552
7553
                                type: string
                            required:
                              - name
                            type: object
                          type: array
                          x-kubernetes-list-map-keys:
                            - name
                          x-kubernetes-list-type: map
                        limits:
                          additionalProperties:
                            anyOf:
                              - type: integer
                              - type: string
                            pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                            x-kubernetes-int-or-string: true
7554
7555
7556
                          description: |-
                            Limits describes the maximum amount of compute resources allowed.
                            More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
7557
7558
7559
7560
7561
7562
7563
7564
                          type: object
                        requests:
                          additionalProperties:
                            anyOf:
                              - type: integer
                              - type: string
                            pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                            x-kubernetes-int-or-string: true
7565
7566
7567
7568
7569
                          description: |-
                            Requests describes the minimum amount of compute resources required.
                            If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
                            otherwise to an implementation-defined value. Requests cannot exceed Limits.
                            More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
7570
7571
7572
                          type: object
                      type: object
                    restartPolicy:
7573
7574
7575
7576
7577
                      description: |-
                        Restart policy for all containers within the pod.
                        One of Always, OnFailure, Never. In some contexts, only a subset of those values may be permitted.
                        Default to Always.
                        More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy
7578
7579
                      type: string
                    runtimeClassName:
7580
7581
7582
7583
7584
7585
                      description: |-
                        RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be used
                        to run this pod.  If no RuntimeClass resource matches the named class, the pod will not be run.
                        If unset or empty, the "legacy" RuntimeClass will be used, which is an implicit class with an
                        empty definition that uses the default runtime handler.
                        More info: https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class
7586
7587
                      type: string
                    schedulerName:
7588
7589
7590
                      description: |-
                        If specified, the pod will be dispatched by specified scheduler.
                        If not specified, the pod will be dispatched by default scheduler.
7591
7592
                      type: string
                    schedulingGates:
7593
7594
7595
7596
7597
7598
                      description: |-
                        SchedulingGates is an opaque list of values that if specified will block scheduling the pod.
                        If schedulingGates is not empty, the pod will stay in the SchedulingGated state and the
                        scheduler will not attempt to schedule the pod.

                        SchedulingGates can only be set at pod creation time, and be removed only afterwards.
7599
                      items:
7600
                        description: PodSchedulingGate is associated to a Pod to guard its scheduling.
7601
7602
                        properties:
                          name:
7603
7604
7605
                            description: |-
                              Name of the scheduling gate.
                              Each scheduling gate must have a unique name field.
7606
7607
7608
7609
7610
7611
7612
7613
7614
                            type: string
                        required:
                          - name
                        type: object
                      type: array
                      x-kubernetes-list-map-keys:
                        - name
                      x-kubernetes-list-type: map
                    securityContext:
7615
7616
7617
                      description: |-
                        SecurityContext holds pod-level security attributes and common container settings.
                        Optional: Defaults to empty.  See type description for default values of each field.
7618
7619
                      properties:
                        appArmorProfile:
7620
7621
7622
                          description: |-
                            appArmorProfile is the AppArmor options to use by the containers in this pod.
                            Note that this field cannot be set when spec.os.name is windows.
7623
7624
                          properties:
                            localhostProfile:
7625
7626
7627
7628
7629
                              description: |-
                                localhostProfile indicates a profile loaded on the node that should be used.
                                The profile must be preconfigured on the node to work.
                                Must match the loaded name of the profile.
                                Must be set if and only if type is "Localhost".
7630
7631
                              type: string
                            type:
7632
7633
7634
7635
7636
7637
                              description: |-
                                type indicates which kind of AppArmor profile will be applied.
                                Valid options are:
                                  Localhost - a profile pre-loaded on the node.
                                  RuntimeDefault - the container runtime's default profile.
                                  Unconfined - no AppArmor enforcement.
7638
7639
7640
7641
7642
                              type: string
                          required:
                            - type
                          type: object
                        fsGroup:
7643
7644
7645
7646
7647
7648
7649
7650
7651
7652
7653
                          description: |-
                            A special supplemental group that applies to all containers in a pod.
                            Some volume types allow the Kubelet to change the ownership of that volume
                            to be owned by the pod:

                            1. The owning GID will be the FSGroup
                            2. The setgid bit is set (new files created in the volume will be owned by FSGroup)
                            3. The permission bits are OR'd with rw-rw----

                            If unset, the Kubelet will not modify the ownership and permissions of any volume.
                            Note that this field cannot be set when spec.os.name is windows.
7654
7655
7656
                          format: int64
                          type: integer
                        fsGroupChangePolicy:
7657
7658
7659
7660
7661
7662
7663
7664
                          description: |-
                            fsGroupChangePolicy defines behavior of changing ownership and permission of the volume
                            before being exposed inside Pod. This field will only apply to
                            volume types which support fsGroup based ownership(and permissions).
                            It will have no effect on ephemeral volume types such as: secret, configmaps
                            and emptydir.
                            Valid values are "OnRootMismatch" and "Always". If not specified, "Always" is used.
                            Note that this field cannot be set when spec.os.name is windows.
7665
7666
                          type: string
                        runAsGroup:
7667
7668
7669
7670
7671
7672
7673
                          description: |-
                            The GID to run the entrypoint of the container process.
                            Uses runtime default if unset.
                            May also be set in SecurityContext.  If set in both SecurityContext and
                            PodSecurityContext, the value specified in SecurityContext takes precedence
                            for that container.
                            Note that this field cannot be set when spec.os.name is windows.
7674
7675
7676
                          format: int64
                          type: integer
                        runAsNonRoot:
7677
7678
7679
7680
7681
7682
7683
                          description: |-
                            Indicates that the container must run as a non-root user.
                            If true, the Kubelet will validate the image at runtime to ensure that it
                            does not run as UID 0 (root) and fail to start the container if it does.
                            If unset or false, no such validation will be performed.
                            May also be set in SecurityContext.  If set in both SecurityContext and
                            PodSecurityContext, the value specified in SecurityContext takes precedence.
7684
7685
                          type: boolean
                        runAsUser:
7686
7687
7688
7689
7690
7691
7692
                          description: |-
                            The UID to run the entrypoint of the container process.
                            Defaults to user specified in image metadata if unspecified.
                            May also be set in SecurityContext.  If set in both SecurityContext and
                            PodSecurityContext, the value specified in SecurityContext takes precedence
                            for that container.
                            Note that this field cannot be set when spec.os.name is windows.
7693
7694
7695
                          format: int64
                          type: integer
                        seLinuxChangePolicy:
7696
7697
7698
7699
7700
7701
7702
7703
7704
7705
7706
7707
7708
7709
7710
7711
7712
7713
7714
7715
7716
7717
7718
7719
                          description: |-
                            seLinuxChangePolicy defines how the container's SELinux label is applied to all volumes used by the Pod.
                            It has no effect on nodes that do not support SELinux or to volumes does not support SELinux.
                            Valid values are "MountOption" and "Recursive".

                            "Recursive" means relabeling of all files on all Pod volumes by the container runtime.
                            This may be slow for large volumes, but allows mixing privileged and unprivileged Pods sharing the same volume on the same node.

                            "MountOption" mounts all eligible Pod volumes with `-o context` mount option.
                            This requires all Pods that share the same volume to use the same SELinux label.
                            It is not possible to share the same volume among privileged and unprivileged Pods.
                            Eligible volumes are in-tree FibreChannel and iSCSI volumes, and all CSI volumes
                            whose CSI driver announces SELinux support by setting spec.seLinuxMount: true in their
                            CSIDriver instance. Other volumes are always re-labelled recursively.
                            "MountOption" value is allowed only when SELinuxMount feature gate is enabled.

                            If not specified and SELinuxMount feature gate is enabled, "MountOption" is used.
                            If not specified and SELinuxMount feature gate is disabled, "MountOption" is used for ReadWriteOncePod volumes
                            and "Recursive" for all other volumes.

                            This field affects only Pods that have SELinux label set, either in PodSecurityContext or in SecurityContext of all containers.

                            All Pods that use the same volume should use the same seLinuxChangePolicy, otherwise some pods can get stuck in ContainerCreating state.
                            Note that this field cannot be set when spec.os.name is windows.
7720
7721
                          type: string
                        seLinuxOptions:
7722
7723
7724
7725
7726
7727
7728
                          description: |-
                            The SELinux context to be applied to all containers.
                            If unspecified, the container runtime will allocate a random SELinux context for each
                            container.  May also be set in SecurityContext.  If set in
                            both SecurityContext and PodSecurityContext, the value specified in SecurityContext
                            takes precedence for that container.
                            Note that this field cannot be set when spec.os.name is windows.
7729
7730
                          properties:
                            level:
7731
                              description: Level is SELinux level label that applies to the container.
7732
7733
                              type: string
                            role:
7734
                              description: Role is a SELinux role label that applies to the container.
7735
7736
                              type: string
                            type:
7737
                              description: Type is a SELinux type label that applies to the container.
7738
7739
                              type: string
                            user:
7740
                              description: User is a SELinux user label that applies to the container.
7741
7742
7743
                              type: string
                          type: object
                        seccompProfile:
7744
7745
7746
                          description: |-
                            The seccomp options to use by the containers in this pod.
                            Note that this field cannot be set when spec.os.name is windows.
7747
7748
                          properties:
                            localhostProfile:
7749
7750
7751
7752
7753
                              description: |-
                                localhostProfile indicates a profile defined in a file on the node should be used.
                                The profile must be preconfigured on the node to work.
                                Must be a descending path, relative to the kubelet's configured seccomp profile location.
                                Must be set if type is "Localhost". Must NOT be set for any other type.
7754
7755
                              type: string
                            type:
7756
7757
7758
7759
7760
7761
7762
                              description: |-
                                type indicates which kind of seccomp profile will be applied.
                                Valid options are:

                                Localhost - a profile defined in a file on the node should be used.
                                RuntimeDefault - the container runtime default profile should be used.
                                Unconfined - no profile should be applied.
7763
7764
7765
7766
7767
                              type: string
                          required:
                            - type
                          type: object
                        supplementalGroups:
7768
7769
7770
7771
7772
7773
7774
7775
7776
7777
                          description: |-
                            A list of groups applied to the first process run in each container, in
                            addition to the container's primary GID and fsGroup (if specified).  If
                            the SupplementalGroupsPolicy feature is enabled, the
                            supplementalGroupsPolicy field determines whether these are in addition
                            to or instead of any group memberships defined in the container image.
                            If unspecified, no additional groups are added, though group memberships
                            defined in the container image may still be used, depending on the
                            supplementalGroupsPolicy field.
                            Note that this field cannot be set when spec.os.name is windows.
7778
7779
7780
7781
7782
7783
                          items:
                            format: int64
                            type: integer
                          type: array
                          x-kubernetes-list-type: atomic
                        supplementalGroupsPolicy:
7784
7785
7786
7787
7788
7789
                          description: |-
                            Defines how supplemental groups of the first container processes are calculated.
                            Valid values are "Merge" and "Strict". If not specified, "Merge" is used.
                            (Alpha) Using the field requires the SupplementalGroupsPolicy feature gate to be enabled
                            and the container runtime must implement support for this feature.
                            Note that this field cannot be set when spec.os.name is windows.
7790
7791
                          type: string
                        sysctls:
7792
7793
7794
7795
                          description: |-
                            Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported
                            sysctls (by the container runtime) might fail to launch.
                            Note that this field cannot be set when spec.os.name is windows.
7796
                          items:
7797
                            description: Sysctl defines a kernel parameter to be set
7798
7799
                            properties:
                              name:
7800
                                description: Name of a property to set
7801
7802
                                type: string
                              value:
7803
                                description: Value of a property to set
7804
7805
7806
7807
7808
7809
7810
7811
                                type: string
                            required:
                              - name
                              - value
                            type: object
                          type: array
                          x-kubernetes-list-type: atomic
                        windowsOptions:
7812
7813
7814
7815
7816
                          description: |-
                            The Windows specific settings applied to all containers.
                            If unspecified, the options within a container's SecurityContext will be used.
                            If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
                            Note that this field cannot be set when spec.os.name is linux.
7817
7818
                          properties:
                            gmsaCredentialSpec:
7819
7820
7821
7822
                              description: |-
                                GMSACredentialSpec is where the GMSA admission webhook
                                (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of the
                                GMSA credential spec named by the GMSACredentialSpecName field.
7823
7824
                              type: string
                            gmsaCredentialSpecName:
7825
                              description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
7826
7827
                              type: string
                            hostProcess:
7828
7829
7830
7831
7832
                              description: |-
                                HostProcess determines if a container should be run as a 'Host Process' container.
                                All of a Pod's containers must have the same effective HostProcess value
                                (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers).
                                In addition, if HostProcess is true then HostNetwork must also be set to true.
7833
7834
                              type: boolean
                            runAsUserName:
7835
7836
7837
7838
7839
                              description: |-
                                The UserName in Windows to run the entrypoint of the container process.
                                Defaults to the user specified in image metadata if unspecified.
                                May also be set in PodSecurityContext. If set in both SecurityContext and
                                PodSecurityContext, the value specified in SecurityContext takes precedence.
7840
7841
7842
7843
                              type: string
                          type: object
                      type: object
                    serviceAccount:
7844
7845
7846
                      description: |-
                        DeprecatedServiceAccount is a deprecated alias for ServiceAccountName.
                        Deprecated: Use serviceAccountName instead.
7847
7848
                      type: string
                    serviceAccountName:
7849
7850
7851
                      description: |-
                        ServiceAccountName is the name of the ServiceAccount to use to run this pod.
                        More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
7852
7853
                      type: string
                    setHostnameAsFQDN:
7854
7855
7856
7857
7858
7859
                      description: |-
                        If true the pod's hostname will be configured as the pod's FQDN, rather than the leaf name (the default).
                        In Linux containers, this means setting the FQDN in the hostname field of the kernel (the nodename field of struct utsname).
                        In Windows containers, this means setting the registry value of hostname for the registry key HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters to FQDN.
                        If a pod does not have FQDN, this has no effect.
                        Default to false.
7860
7861
                      type: boolean
                    shareProcessNamespace:
7862
7863
7864
7865
7866
7867
                      description: |-
                        Share a single process namespace between all of the containers in a pod.
                        When this is set containers will be able to view and signal processes from other containers
                        in the same pod, and the first process in each container will not be assigned PID 1.
                        HostPID and ShareProcessNamespace cannot both be set.
                        Optional: Default to false.
7868
7869
                      type: boolean
                    subdomain:
7870
7871
7872
                      description: |-
                        If specified, the fully qualified Pod hostname will be "<hostname>.<subdomain>.<pod namespace>.svc.<cluster domain>".
                        If not specified, the pod will not have a domainname at all.
7873
7874
                      type: string
                    terminationGracePeriodSeconds:
7875
7876
7877
7878
7879
7880
7881
7882
7883
                      description: |-
                        Optional duration in seconds the pod needs to terminate gracefully. May be decreased in delete request.
                        Value must be non-negative integer. The value zero indicates stop immediately via
                        the kill signal (no opportunity to shut down).
                        If this value is nil, the default grace period will be used instead.
                        The grace period is the duration in seconds after the processes running in the pod are sent
                        a termination signal and the time when the processes are forcibly halted with a kill signal.
                        Set this value longer than the expected cleanup time for your process.
                        Defaults to 30 seconds.
7884
7885
7886
                      format: int64
                      type: integer
                    tolerations:
7887
                      description: If specified, the pod's tolerations.
7888
                      items:
7889
7890
7891
                        description: |-
                          The pod this Toleration is attached to tolerates any taint that matches
                          the triple <key,value,effect> using the matching operator <operator>.
7892
7893
                        properties:
                          effect:
7894
7895
7896
                            description: |-
                              Effect indicates the taint effect to match. Empty means match all taint effects.
                              When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
7897
7898
                            type: string
                          key:
7899
7900
7901
                            description: |-
                              Key is the taint key that the toleration applies to. Empty means match all taint keys.
                              If the key is empty, operator must be Exists; this combination means to match all values and all keys.
7902
7903
                            type: string
                          operator:
7904
7905
7906
7907
7908
                            description: |-
                              Operator represents a key's relationship to the value.
                              Valid operators are Exists and Equal. Defaults to Equal.
                              Exists is equivalent to wildcard for value, so that a pod can
                              tolerate all taints of a particular category.
7909
7910
                            type: string
                          tolerationSeconds:
7911
7912
7913
7914
7915
                            description: |-
                              TolerationSeconds represents the period of time the toleration (which must be
                              of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,
                              it is not set, which means tolerate the taint forever (do not evict). Zero and
                              negative values will be treated as 0 (evict immediately) by the system.
7916
7917
7918
                            format: int64
                            type: integer
                          value:
7919
7920
7921
                            description: |-
                              Value is the taint value the toleration matches to.
                              If the operator is Exists, the value should be empty, otherwise just a regular string.
7922
7923
7924
7925
7926
                            type: string
                        type: object
                      type: array
                      x-kubernetes-list-type: atomic
                    topologySpreadConstraints:
7927
7928
7929
7930
                      description: |-
                        TopologySpreadConstraints describes how a group of pods ought to spread across topology
                        domains. Scheduler will schedule pods in a way which abides by the constraints.
                        All topologySpreadConstraints are ANDed.
7931
                      items:
7932
                        description: TopologySpreadConstraint specifies how to spread matching pods among the given topology.
7933
7934
                        properties:
                          labelSelector:
7935
7936
7937
7938
                            description: |-
                              LabelSelector is used to find matching pods.
                              Pods that match this label selector are counted to determine the number of pods
                              in their corresponding topology domain.
7939
7940
                            properties:
                              matchExpressions:
7941
                                description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
7942
                                items:
7943
7944
7945
                                  description: |-
                                    A label selector requirement is a selector that contains values, a key, and an operator that
                                    relates the key and values.
7946
7947
                                  properties:
                                    key:
7948
                                      description: key is the label key that the selector applies to.
7949
7950
                                      type: string
                                    operator:
7951
7952
7953
                                      description: |-
                                        operator represents a key's relationship to a set of values.
                                        Valid operators are In, NotIn, Exists and DoesNotExist.
7954
7955
                                      type: string
                                    values:
7956
7957
7958
7959
7960
                                      description: |-
                                        values is an array of string values. If the operator is In or NotIn,
                                        the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                        the values array must be empty. This array is replaced during a strategic
                                        merge patch.
7961
7962
7963
7964
7965
7966
7967
7968
7969
7970
7971
7972
7973
                                      items:
                                        type: string
                                      type: array
                                      x-kubernetes-list-type: atomic
                                  required:
                                    - key
                                    - operator
                                  type: object
                                type: array
                                x-kubernetes-list-type: atomic
                              matchLabels:
                                additionalProperties:
                                  type: string
7974
7975
7976
7977
                                description: |-
                                  matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                  map is equivalent to an element of matchExpressions, whose key field is "key", the
                                  operator is "In", and the values array contains only "value". The requirements are ANDed.
7978
7979
7980
7981
                                type: object
                            type: object
                            x-kubernetes-map-type: atomic
                          matchLabelKeys:
7982
7983
7984
7985
7986
7987
7988
7989
7990
7991
7992
                            description: |-
                              MatchLabelKeys is a set of pod label keys to select the pods over which
                              spreading will be calculated. The keys are used to lookup values from the
                              incoming pod labels, those key-value labels are ANDed with labelSelector
                              to select the group of existing pods over which spreading will be calculated
                              for the incoming pod. The same key is forbidden to exist in both MatchLabelKeys and LabelSelector.
                              MatchLabelKeys cannot be set when LabelSelector isn't set.
                              Keys that don't exist in the incoming pod labels will
                              be ignored. A null or empty list means only match against labelSelector.

                              This is a beta field and requires the MatchLabelKeysInPodTopologySpread feature gate to be enabled (enabled by default).
7993
7994
7995
7996
7997
                            items:
                              type: string
                            type: array
                            x-kubernetes-list-type: atomic
                          maxSkew:
7998
7999
8000
8001
8002
8003
8004
8005
8006
8007
8008
8009
8010
8011
8012
8013
8014
8015
                            description: |-
                              MaxSkew describes the degree to which pods may be unevenly distributed.
                              When `whenUnsatisfiable=DoNotSchedule`, it is the maximum permitted difference
                              between the number of matching pods in the target topology and the global minimum.
                              The global minimum is the minimum number of matching pods in an eligible domain
                              or zero if the number of eligible domains is less than MinDomains.
                              For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same
                              labelSelector spread as 2/2/1:
                              In this case, the global minimum is 1.
                              | zone1 | zone2 | zone3 |
                              |  P P  |  P P  |   P   |
                              - if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 2/2/2;
                              scheduling it onto zone1(zone2) would make the ActualSkew(3-1) on zone1(zone2)
                              violate MaxSkew(1).
                              - if MaxSkew is 2, incoming pod can be scheduled onto any zone.
                              When `whenUnsatisfiable=ScheduleAnyway`, it is used to give higher precedence
                              to topologies that satisfy it.
                              It's a required field. Default value is 1 and 0 is not allowed.
8016
8017
8018
                            format: int32
                            type: integer
                          minDomains:
8019
8020
8021
8022
8023
8024
8025
8026
8027
8028
8029
8030
8031
8032
8033
8034
8035
8036
8037
8038
                            description: |-
                              MinDomains indicates a minimum number of eligible domains.
                              When the number of eligible domains with matching topology keys is less than minDomains,
                              Pod Topology Spread treats "global minimum" as 0, and then the calculation of Skew is performed.
                              And when the number of eligible domains with matching topology keys equals or greater than minDomains,
                              this value has no effect on scheduling.
                              As a result, when the number of eligible domains is less than minDomains,
                              scheduler won't schedule more than maxSkew Pods to those domains.
                              If value is nil, the constraint behaves as if MinDomains is equal to 1.
                              Valid values are integers greater than 0.
                              When value is not nil, WhenUnsatisfiable must be DoNotSchedule.

                              For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the same
                              labelSelector spread as 2/2/2:
                              | zone1 | zone2 | zone3 |
                              |  P P  |  P P  |  P P  |
                              The number of domains is less than 5(MinDomains), so "global minimum" is treated as 0.
                              In this situation, new pod with the same labelSelector cannot be scheduled,
                              because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones,
                              it will violate MaxSkew.
8039
8040
8041
                            format: int32
                            type: integer
                          nodeAffinityPolicy:
8042
8043
8044
8045
8046
8047
8048
                            description: |-
                              NodeAffinityPolicy indicates how we will treat Pod's nodeAffinity/nodeSelector
                              when calculating pod topology spread skew. Options are:
                              - Honor: only nodes matching nodeAffinity/nodeSelector are included in the calculations.
                              - Ignore: nodeAffinity/nodeSelector are ignored. All nodes are included in the calculations.

                              If this value is nil, the behavior is equivalent to the Honor policy.
8049
8050
                            type: string
                          nodeTaintsPolicy:
8051
8052
8053
8054
8055
8056
8057
8058
                            description: |-
                              NodeTaintsPolicy indicates how we will treat node taints when calculating
                              pod topology spread skew. Options are:
                              - Honor: nodes without taints, along with tainted nodes for which the incoming pod
                              has a toleration, are included.
                              - Ignore: node taints are ignored. All nodes are included.

                              If this value is nil, the behavior is equivalent to the Ignore policy.
8059
8060
                            type: string
                          topologyKey:
8061
8062
8063
8064
8065
8066
8067
8068
8069
8070
8071
                            description: |-
                              TopologyKey is the key of node labels. Nodes that have a label with this key
                              and identical values are considered to be in the same topology.
                              We consider each <key, value> as a "bucket", and try to put balanced number
                              of pods into each bucket.
                              We define a domain as a particular instance of a topology.
                              Also, we define an eligible domain as a domain whose nodes meet the requirements of
                              nodeAffinityPolicy and nodeTaintsPolicy.
                              e.g. If TopologyKey is "kubernetes.io/hostname", each Node is a domain of that topology.
                              And, if TopologyKey is "topology.kubernetes.io/zone", each zone is a domain of that topology.
                              It's a required field.
8072
8073
                            type: string
                          whenUnsatisfiable:
8074
8075
8076
8077
8078
8079
8080
8081
8082
8083
8084
8085
8086
8087
8088
8089
8090
8091
8092
                            description: |-
                              WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy
                              the spread constraint.
                              - DoNotSchedule (default) tells the scheduler not to schedule it.
                              - ScheduleAnyway tells the scheduler to schedule the pod in any location,
                                but giving higher precedence to topologies that would help reduce the
                                skew.
                              A constraint is considered "Unsatisfiable" for an incoming pod
                              if and only if every possible node assignment for that pod would violate
                              "MaxSkew" on some topology.
                              For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same
                              labelSelector spread as 3/1/1:
                              | zone1 | zone2 | zone3 |
                              | P P P |   P   |   P   |
                              If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduled
                              to zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies
                              MaxSkew(1). In other words, the cluster can still be imbalanced, but scheduler
                              won't make it *more* imbalanced.
                              It's a required field.
8093
8094
8095
8096
8097
8098
8099
8100
8101
8102
8103
8104
                            type: string
                        required:
                          - maxSkew
                          - topologyKey
                          - whenUnsatisfiable
                        type: object
                      type: array
                      x-kubernetes-list-map-keys:
                        - topologyKey
                        - whenUnsatisfiable
                      x-kubernetes-list-type: map
                    volumes:
8105
8106
8107
                      description: |-
                        List of volumes that can be mounted by containers belonging to the pod.
                        More info: https://kubernetes.io/docs/concepts/storage/volumes
8108
                      items:
8109
                        description: Volume represents a named volume in a pod that may be accessed by any container in the pod.
8110
8111
                        properties:
                          awsElasticBlockStore:
8112
8113
8114
8115
8116
8117
                            description: |-
                              awsElasticBlockStore represents an AWS Disk resource that is attached to a
                              kubelet's host machine and then exposed to the pod.
                              Deprecated: AWSElasticBlockStore is deprecated. All operations for the in-tree
                              awsElasticBlockStore type are redirected to the ebs.csi.aws.com CSI driver.
                              More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
8118
8119
                            properties:
                              fsType:
8120
8121
8122
8123
8124
                                description: |-
                                  fsType is the filesystem type of the volume that you want to mount.
                                  Tip: Ensure that the filesystem type is supported by the host operating system.
                                  Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
8125
8126
                                type: string
                              partition:
8127
8128
8129
8130
8131
                                description: |-
                                  partition is the partition in the volume that you want to mount.
                                  If omitted, the default is to mount by volume name.
                                  Examples: For volume /dev/sda1, you specify the partition as "1".
                                  Similarly, the volume partition for /dev/sda is "0" (or you can leave the property empty).
8132
8133
8134
                                format: int32
                                type: integer
                              readOnly:
8135
8136
8137
                                description: |-
                                  readOnly value true will force the readOnly setting in VolumeMounts.
                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
8138
8139
                                type: boolean
                              volumeID:
8140
8141
8142
                                description: |-
                                  volumeID is unique ID of the persistent disk resource in AWS (Amazon EBS volume).
                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
8143
8144
8145
8146
8147
                                type: string
                            required:
                              - volumeID
                            type: object
                          azureDisk:
8148
8149
8150
8151
                            description: |-
                              azureDisk represents an Azure Data Disk mount on the host and bind mount to the pod.
                              Deprecated: AzureDisk is deprecated. All operations for the in-tree azureDisk type
                              are redirected to the disk.csi.azure.com CSI driver.
8152
8153
                            properties:
                              cachingMode:
8154
                                description: 'cachingMode is the Host Caching mode: None, Read Only, Read Write.'
8155
8156
                                type: string
                              diskName:
8157
                                description: diskName is the Name of the data disk in the blob storage
8158
8159
                                type: string
                              diskURI:
8160
                                description: diskURI is the URI of data disk in the blob storage
8161
8162
8163
                                type: string
                              fsType:
                                default: ext4
8164
8165
8166
8167
                                description: |-
                                  fsType is Filesystem type to mount.
                                  Must be a filesystem type supported by the host operating system.
                                  Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
8168
8169
                                type: string
                              kind:
8170
                                description: 'kind expected values are Shared: multiple blob disks per storage account  Dedicated: single blob disk per storage account  Managed: azure managed data disk (only in managed availability set). defaults to shared'
8171
8172
8173
                                type: string
                              readOnly:
                                default: false
8174
8175
8176
                                description: |-
                                  readOnly Defaults to false (read/write). ReadOnly here will force
                                  the ReadOnly setting in VolumeMounts.
8177
8178
8179
8180
8181
8182
                                type: boolean
                            required:
                              - diskName
                              - diskURI
                            type: object
                          azureFile:
8183
8184
8185
8186
                            description: |-
                              azureFile represents an Azure File Service mount on the host and bind mount to the pod.
                              Deprecated: AzureFile is deprecated. All operations for the in-tree azureFile type
                              are redirected to the file.csi.azure.com CSI driver.
8187
8188
                            properties:
                              readOnly:
8189
8190
8191
                                description: |-
                                  readOnly defaults to false (read/write). ReadOnly here will force
                                  the ReadOnly setting in VolumeMounts.
8192
8193
                                type: boolean
                              secretName:
8194
                                description: secretName is the  name of secret that contains Azure Storage Account Name and Key
8195
8196
                                type: string
                              shareName:
8197
                                description: shareName is the azure share Name
8198
8199
8200
8201
8202
8203
                                type: string
                            required:
                              - secretName
                              - shareName
                            type: object
                          cephfs:
8204
8205
8206
                            description: |-
                              cephFS represents a Ceph FS mount on the host that shares a pod's lifetime.
                              Deprecated: CephFS is deprecated and the in-tree cephfs type is no longer supported.
8207
8208
                            properties:
                              monitors:
8209
8210
8211
                                description: |-
                                  monitors is Required: Monitors is a collection of Ceph monitors
                                  More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
8212
8213
8214
8215
8216
                                items:
                                  type: string
                                type: array
                                x-kubernetes-list-type: atomic
                              path:
8217
                                description: 'path is Optional: Used as the mounted root, rather than the full Ceph tree, default is /'
8218
8219
                                type: string
                              readOnly:
8220
8221
8222
8223
                                description: |-
                                  readOnly is Optional: Defaults to false (read/write). ReadOnly here will force
                                  the ReadOnly setting in VolumeMounts.
                                  More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
8224
8225
                                type: boolean
                              secretFile:
8226
8227
8228
                                description: |-
                                  secretFile is Optional: SecretFile is the path to key ring for User, default is /etc/ceph/user.secret
                                  More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
8229
8230
                                type: string
                              secretRef:
8231
8232
8233
                                description: |-
                                  secretRef is Optional: SecretRef is reference to the authentication secret for User, default is empty.
                                  More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
8234
8235
8236
                                properties:
                                  name:
                                    default: ""
8237
8238
8239
8240
8241
8242
                                    description: |-
                                      Name of the referent.
                                      This field is effectively required, but due to backwards compatibility is
                                      allowed to be empty. Instances of this type with an empty value here are
                                      almost certainly wrong.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
8243
8244
8245
8246
                                    type: string
                                type: object
                                x-kubernetes-map-type: atomic
                              user:
8247
8248
8249
                                description: |-
                                  user is optional: User is the rados user name, default is admin
                                  More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
8250
8251
8252
8253
8254
                                type: string
                            required:
                              - monitors
                            type: object
                          cinder:
8255
8256
8257
8258
8259
                            description: |-
                              cinder represents a cinder volume attached and mounted on kubelets host machine.
                              Deprecated: Cinder is deprecated. All operations for the in-tree cinder type
                              are redirected to the cinder.csi.openstack.org CSI driver.
                              More info: https://examples.k8s.io/mysql-cinder-pd/README.md
8260
8261
                            properties:
                              fsType:
8262
8263
8264
8265
8266
                                description: |-
                                  fsType is the filesystem type to mount.
                                  Must be a filesystem type supported by the host operating system.
                                  Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
                                  More info: https://examples.k8s.io/mysql-cinder-pd/README.md
8267
8268
                                type: string
                              readOnly:
8269
8270
8271
8272
                                description: |-
                                  readOnly defaults to false (read/write). ReadOnly here will force
                                  the ReadOnly setting in VolumeMounts.
                                  More info: https://examples.k8s.io/mysql-cinder-pd/README.md
8273
8274
                                type: boolean
                              secretRef:
8275
8276
8277
                                description: |-
                                  secretRef is optional: points to a secret object containing parameters used to connect
                                  to OpenStack.
8278
8279
8280
                                properties:
                                  name:
                                    default: ""
8281
8282
8283
8284
8285
8286
                                    description: |-
                                      Name of the referent.
                                      This field is effectively required, but due to backwards compatibility is
                                      allowed to be empty. Instances of this type with an empty value here are
                                      almost certainly wrong.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
8287
8288
8289
8290
                                    type: string
                                type: object
                                x-kubernetes-map-type: atomic
                              volumeID:
8291
8292
8293
                                description: |-
                                  volumeID used to identify the volume in cinder.
                                  More info: https://examples.k8s.io/mysql-cinder-pd/README.md
8294
8295
8296
8297
8298
                                type: string
                            required:
                              - volumeID
                            type: object
                          configMap:
8299
                            description: configMap represents a configMap that should populate this volume
8300
8301
                            properties:
                              defaultMode:
8302
8303
8304
8305
8306
8307
8308
8309
                                description: |-
                                  defaultMode is optional: mode bits used to set permissions on created files by default.
                                  Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.
                                  YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.
                                  Defaults to 0644.
                                  Directories within the path are not affected by this setting.
                                  This might be in conflict with other options that affect the file
                                  mode, like fsGroup, and the result can be other mode bits set.
8310
8311
8312
                                format: int32
                                type: integer
                              items:
8313
8314
8315
8316
8317
8318
8319
8320
                                description: |-
                                  items if unspecified, each key-value pair in the Data field of the referenced
                                  ConfigMap will be projected into the volume as a file whose name is the
                                  key and content is the value. If specified, the listed keys will be
                                  projected into the specified paths, and unlisted keys will not be
                                  present. If a key is specified which is not present in the ConfigMap,
                                  the volume setup will error unless it is marked optional. Paths must be
                                  relative and may not contain the '..' path or start with '..'.
8321
                                items:
8322
                                  description: Maps a string key to a path within a volume.
8323
8324
                                  properties:
                                    key:
8325
                                      description: key is the key to project.
8326
8327
                                      type: string
                                    mode:
8328
8329
8330
8331
8332
8333
8334
                                      description: |-
                                        mode is Optional: mode bits used to set permissions on this file.
                                        Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.
                                        YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.
                                        If not specified, the volume defaultMode will be used.
                                        This might be in conflict with other options that affect the file
                                        mode, like fsGroup, and the result can be other mode bits set.
8335
8336
8337
                                      format: int32
                                      type: integer
                                    path:
8338
8339
8340
8341
8342
                                      description: |-
                                        path is the relative path of the file to map the key to.
                                        May not be an absolute path.
                                        May not contain the path element '..'.
                                        May not start with the string '..'.
8343
8344
8345
8346
8347
8348
8349
8350
8351
                                      type: string
                                  required:
                                    - key
                                    - path
                                  type: object
                                type: array
                                x-kubernetes-list-type: atomic
                              name:
                                default: ""
8352
8353
8354
8355
8356
8357
                                description: |-
                                  Name of the referent.
                                  This field is effectively required, but due to backwards compatibility is
                                  allowed to be empty. Instances of this type with an empty value here are
                                  almost certainly wrong.
                                  More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
8358
8359
                                type: string
                              optional:
8360
                                description: optional specify whether the ConfigMap or its keys must be defined
8361
8362
8363
8364
                                type: boolean
                            type: object
                            x-kubernetes-map-type: atomic
                          csi:
8365
                            description: csi (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers.
8366
8367
                            properties:
                              driver:
8368
8369
8370
                                description: |-
                                  driver is the name of the CSI driver that handles this volume.
                                  Consult with your admin for the correct name as registered in the cluster.
8371
8372
                                type: string
                              fsType:
8373
8374
8375
8376
                                description: |-
                                  fsType to mount. Ex. "ext4", "xfs", "ntfs".
                                  If not provided, the empty value is passed to the associated CSI driver
                                  which will determine the default filesystem to apply.
8377
8378
                                type: string
                              nodePublishSecretRef:
8379
8380
8381
8382
8383
8384
                                description: |-
                                  nodePublishSecretRef is a reference to the secret object containing
                                  sensitive information to pass to the CSI driver to complete the CSI
                                  NodePublishVolume and NodeUnpublishVolume calls.
                                  This field is optional, and  may be empty if no secret is required. If the
                                  secret object contains more than one secret, all secret references are passed.
8385
8386
8387
                                properties:
                                  name:
                                    default: ""
8388
8389
8390
8391
8392
8393
                                    description: |-
                                      Name of the referent.
                                      This field is effectively required, but due to backwards compatibility is
                                      allowed to be empty. Instances of this type with an empty value here are
                                      almost certainly wrong.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
8394
8395
8396
8397
                                    type: string
                                type: object
                                x-kubernetes-map-type: atomic
                              readOnly:
8398
8399
8400
                                description: |-
                                  readOnly specifies a read-only configuration for the volume.
                                  Defaults to false (read/write).
8401
8402
8403
8404
                                type: boolean
                              volumeAttributes:
                                additionalProperties:
                                  type: string
8405
8406
8407
                                description: |-
                                  volumeAttributes stores driver-specific properties that are passed to the CSI
                                  driver. Consult your driver's documentation for supported values.
8408
8409
8410
8411
8412
                                type: object
                            required:
                              - driver
                            type: object
                          downwardAPI:
8413
                            description: downwardAPI represents downward API about the pod that should populate this volume
8414
8415
                            properties:
                              defaultMode:
8416
8417
8418
8419
8420
8421
8422
8423
8424
                                description: |-
                                  Optional: mode bits to use on created files by default. Must be a
                                  Optional: mode bits used to set permissions on created files by default.
                                  Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.
                                  YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.
                                  Defaults to 0644.
                                  Directories within the path are not affected by this setting.
                                  This might be in conflict with other options that affect the file
                                  mode, like fsGroup, and the result can be other mode bits set.
8425
8426
8427
                                format: int32
                                type: integer
                              items:
8428
                                description: Items is a list of downward API volume file
8429
                                items:
8430
                                  description: DownwardAPIVolumeFile represents information to create the file containing the pod field
8431
8432
                                  properties:
                                    fieldRef:
8433
                                      description: 'Required: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.'
8434
8435
                                      properties:
                                        apiVersion:
8436
                                          description: Version of the schema the FieldPath is written in terms of, defaults to "v1".
8437
8438
                                          type: string
                                        fieldPath:
8439
                                          description: Path of the field to select in the specified API version.
8440
8441
8442
8443
8444
8445
                                          type: string
                                      required:
                                        - fieldPath
                                      type: object
                                      x-kubernetes-map-type: atomic
                                    mode:
8446
8447
8448
8449
8450
8451
8452
                                      description: |-
                                        Optional: mode bits used to set permissions on this file, must be an octal value
                                        between 0000 and 0777 or a decimal value between 0 and 511.
                                        YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.
                                        If not specified, the volume defaultMode will be used.
                                        This might be in conflict with other options that affect the file
                                        mode, like fsGroup, and the result can be other mode bits set.
8453
8454
8455
                                      format: int32
                                      type: integer
                                    path:
8456
                                      description: 'Required: Path is  the relative path name of the file to be created. Must not be absolute or contain the ''..'' path. Must be utf-8 encoded. The first item of the relative path must not start with ''..'''
8457
8458
                                      type: string
                                    resourceFieldRef:
8459
8460
8461
                                      description: |-
                                        Selects a resource of the container: only resources limits and requests
                                        (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
8462
8463
                                      properties:
                                        containerName:
8464
                                          description: 'Container name: required for volumes, optional for env vars'
8465
8466
8467
8468
8469
                                          type: string
                                        divisor:
                                          anyOf:
                                            - type: integer
                                            - type: string
8470
                                          description: Specifies the output format of the exposed resources, defaults to "1"
8471
8472
8473
                                          pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                          x-kubernetes-int-or-string: true
                                        resource:
8474
                                          description: 'Required: resource to select'
8475
8476
8477
8478
8479
8480
8481
8482
8483
8484
8485
8486
                                          type: string
                                      required:
                                        - resource
                                      type: object
                                      x-kubernetes-map-type: atomic
                                  required:
                                    - path
                                  type: object
                                type: array
                                x-kubernetes-list-type: atomic
                            type: object
                          emptyDir:
8487
8488
8489
                            description: |-
                              emptyDir represents a temporary directory that shares a pod's lifetime.
                              More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
8490
8491
                            properties:
                              medium:
8492
8493
8494
8495
8496
                                description: |-
                                  medium represents what type of storage medium should back this directory.
                                  The default is "" which means to use the node's default medium.
                                  Must be an empty string (default) or Memory.
                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
8497
8498
8499
8500
8501
                                type: string
                              sizeLimit:
                                anyOf:
                                  - type: integer
                                  - type: string
8502
8503
8504
8505
8506
8507
8508
                                description: |-
                                  sizeLimit is the total amount of local storage required for this EmptyDir volume.
                                  The size limit is also applicable for memory medium.
                                  The maximum usage on memory medium EmptyDir would be the minimum value between
                                  the SizeLimit specified here and the sum of memory limits of all containers in a pod.
                                  The default is nil which means that the limit is undefined.
                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
8509
8510
8511
8512
                                pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                x-kubernetes-int-or-string: true
                            type: object
                          ephemeral:
8513
8514
8515
8516
8517
8518
8519
8520
8521
8522
8523
8524
8525
8526
8527
8528
8529
8530
8531
8532
8533
8534
8535
8536
8537
                            description: |-
                              ephemeral represents a volume that is handled by a cluster storage driver.
                              The volume's lifecycle is tied to the pod that defines it - it will be created before the pod starts,
                              and deleted when the pod is removed.

                              Use this if:
                              a) the volume is only needed while the pod runs,
                              b) features of normal volumes like restoring from snapshot or capacity
                                 tracking are needed,
                              c) the storage driver is specified through a storage class, and
                              d) the storage driver supports dynamic volume provisioning through
                                 a PersistentVolumeClaim (see EphemeralVolumeSource for more
                                 information on the connection between this volume type
                                 and PersistentVolumeClaim).

                              Use PersistentVolumeClaim or one of the vendor-specific
                              APIs for volumes that persist for longer than the lifecycle
                              of an individual pod.

                              Use CSI for light-weight local ephemeral volumes if the CSI driver is meant to
                              be used that way - see the documentation of the driver for
                              more information.

                              A pod can use both types of ephemeral volumes and
                              persistent volumes at the same time.
8538
8539
                            properties:
                              volumeClaimTemplate:
8540
8541
8542
8543
8544
8545
8546
8547
8548
8549
8550
8551
8552
8553
8554
8555
8556
8557
8558
8559
8560
8561
                                description: |-
                                  Will be used to create a stand-alone PVC to provision the volume.
                                  The pod in which this EphemeralVolumeSource is embedded will be the
                                  owner of the PVC, i.e. the PVC will be deleted together with the
                                  pod.  The name of the PVC will be `<pod name>-<volume name>` where
                                  `<volume name>` is the name from the `PodSpec.Volumes` array
                                  entry. Pod validation will reject the pod if the concatenated name
                                  is not valid for a PVC (for example, too long).

                                  An existing PVC with that name that is not owned by the pod
                                  will *not* be used for the pod to avoid using an unrelated
                                  volume by mistake. Starting the pod is then blocked until
                                  the unrelated PVC is removed. If such a pre-created PVC is
                                  meant to be used by the pod, the PVC has to updated with an
                                  owner reference to the pod once the pod exists. Normally
                                  this should not be necessary, but it may be useful when
                                  manually reconstructing a broken cluster.

                                  This field is read-only and no changes will be made by Kubernetes
                                  to the PVC after it has been created.

                                  Required, must not be nil.
8562
8563
                                properties:
                                  metadata:
8564
8565
8566
8567
                                    description: |-
                                      May contain labels and annotations that will be copied into the PVC
                                      when creating it. No other fields are allowed and will be rejected during
                                      validation.
8568
8569
                                    type: object
                                  spec:
8570
8571
8572
8573
8574
                                    description: |-
                                      The specification for the PersistentVolumeClaim. The entire content is
                                      copied unchanged into the PVC that gets created from this
                                      template. The same fields as in a PersistentVolumeClaim
                                      are also valid here.
8575
8576
                                    properties:
                                      accessModes:
8577
8578
8579
                                        description: |-
                                          accessModes contains the desired access modes the volume should have.
                                          More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
8580
8581
8582
8583
8584
                                        items:
                                          type: string
                                        type: array
                                        x-kubernetes-list-type: atomic
                                      dataSource:
8585
8586
8587
8588
8589
8590
8591
8592
8593
                                        description: |-
                                          dataSource field can be used to specify either:
                                          * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)
                                          * An existing PVC (PersistentVolumeClaim)
                                          If the provisioner or an external controller can support the specified data source,
                                          it will create a new volume based on the contents of the specified data source.
                                          When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef,
                                          and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified.
                                          If the namespace is specified, then dataSourceRef will not be copied to dataSource.
8594
8595
                                        properties:
                                          apiGroup:
8596
8597
8598
8599
                                            description: |-
                                              APIGroup is the group for the resource being referenced.
                                              If APIGroup is not specified, the specified Kind must be in the core API group.
                                              For any other third-party types, APIGroup is required.
8600
8601
                                            type: string
                                          kind:
8602
                                            description: Kind is the type of resource being referenced
8603
8604
                                            type: string
                                          name:
8605
                                            description: Name is the name of resource being referenced
8606
8607
8608
8609
8610
8611
8612
                                            type: string
                                        required:
                                          - kind
                                          - name
                                        type: object
                                        x-kubernetes-map-type: atomic
                                      dataSourceRef:
8613
8614
8615
8616
8617
8618
8619
8620
8621
8622
8623
8624
8625
8626
8627
8628
8629
8630
8631
8632
8633
8634
8635
8636
                                        description: |-
                                          dataSourceRef specifies the object from which to populate the volume with data, if a non-empty
                                          volume is desired. This may be any object from a non-empty API group (non
                                          core object) or a PersistentVolumeClaim object.
                                          When this field is specified, volume binding will only succeed if the type of
                                          the specified object matches some installed volume populator or dynamic
                                          provisioner.
                                          This field will replace the functionality of the dataSource field and as such
                                          if both fields are non-empty, they must have the same value. For backwards
                                          compatibility, when namespace isn't specified in dataSourceRef,
                                          both fields (dataSource and dataSourceRef) will be set to the same
                                          value automatically if one of them is empty and the other is non-empty.
                                          When namespace is specified in dataSourceRef,
                                          dataSource isn't set to the same value and must be empty.
                                          There are three important differences between dataSource and dataSourceRef:
                                          * While dataSource only allows two specific types of objects, dataSourceRef
                                            allows any non-core object, as well as PersistentVolumeClaim objects.
                                          * While dataSource ignores disallowed values (dropping them), dataSourceRef
                                            preserves all values, and generates an error if a disallowed value is
                                            specified.
                                          * While dataSource only allows local objects, dataSourceRef allows objects
                                            in any namespaces.
                                          (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled.
                                          (Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
8637
8638
                                        properties:
                                          apiGroup:
8639
8640
8641
8642
                                            description: |-
                                              APIGroup is the group for the resource being referenced.
                                              If APIGroup is not specified, the specified Kind must be in the core API group.
                                              For any other third-party types, APIGroup is required.
8643
8644
                                            type: string
                                          kind:
8645
                                            description: Kind is the type of resource being referenced
8646
8647
                                            type: string
                                          name:
8648
                                            description: Name is the name of resource being referenced
8649
8650
                                            type: string
                                          namespace:
8651
8652
8653
8654
                                            description: |-
                                              Namespace is the namespace of resource being referenced
                                              Note that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace's owner to accept the reference. See the ReferenceGrant documentation for details.
                                              (Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
8655
8656
8657
8658
8659
8660
                                            type: string
                                        required:
                                          - kind
                                          - name
                                        type: object
                                      resources:
8661
8662
8663
8664
8665
8666
                                        description: |-
                                          resources represents the minimum resources the volume should have.
                                          If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements
                                          that are lower than previous value but must still be higher than capacity recorded in the
                                          status field of the claim.
                                          More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
8667
8668
8669
8670
8671
8672
8673
8674
                                        properties:
                                          limits:
                                            additionalProperties:
                                              anyOf:
                                                - type: integer
                                                - type: string
                                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                              x-kubernetes-int-or-string: true
8675
8676
8677
                                            description: |-
                                              Limits describes the maximum amount of compute resources allowed.
                                              More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
8678
8679
8680
8681
8682
8683
8684
8685
                                            type: object
                                          requests:
                                            additionalProperties:
                                              anyOf:
                                                - type: integer
                                                - type: string
                                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                              x-kubernetes-int-or-string: true
8686
8687
8688
8689
8690
                                            description: |-
                                              Requests describes the minimum amount of compute resources required.
                                              If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
                                              otherwise to an implementation-defined value. Requests cannot exceed Limits.
                                              More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
8691
8692
8693
                                            type: object
                                        type: object
                                      selector:
8694
                                        description: selector is a label query over volumes to consider for binding.
8695
8696
                                        properties:
                                          matchExpressions:
8697
                                            description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
8698
                                            items:
8699
8700
8701
                                              description: |-
                                                A label selector requirement is a selector that contains values, a key, and an operator that
                                                relates the key and values.
8702
8703
                                              properties:
                                                key:
8704
                                                  description: key is the label key that the selector applies to.
8705
8706
                                                  type: string
                                                operator:
8707
8708
8709
                                                  description: |-
                                                    operator represents a key's relationship to a set of values.
                                                    Valid operators are In, NotIn, Exists and DoesNotExist.
8710
8711
                                                  type: string
                                                values:
8712
8713
8714
8715
8716
                                                  description: |-
                                                    values is an array of string values. If the operator is In or NotIn,
                                                    the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                    the values array must be empty. This array is replaced during a strategic
                                                    merge patch.
8717
8718
8719
8720
8721
8722
8723
8724
8725
8726
8727
8728
8729
                                                  items:
                                                    type: string
                                                  type: array
                                                  x-kubernetes-list-type: atomic
                                              required:
                                                - key
                                                - operator
                                              type: object
                                            type: array
                                            x-kubernetes-list-type: atomic
                                          matchLabels:
                                            additionalProperties:
                                              type: string
8730
8731
8732
8733
                                            description: |-
                                              matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                              map is equivalent to an element of matchExpressions, whose key field is "key", the
                                              operator is "In", and the values array contains only "value". The requirements are ANDed.
8734
8735
8736
8737
                                            type: object
                                        type: object
                                        x-kubernetes-map-type: atomic
                                      storageClassName:
8738
8739
8740
                                        description: |-
                                          storageClassName is the name of the StorageClass required by the claim.
                                          More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
8741
8742
                                        type: string
                                      volumeAttributesClassName:
8743
8744
8745
8746
8747
8748
8749
8750
8751
8752
8753
8754
8755
                                        description: |-
                                          volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim.
                                          If specified, the CSI driver will create or update the volume with the attributes defined
                                          in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName,
                                          it can be changed after the claim is created. An empty string value means that no VolumeAttributesClass
                                          will be applied to the claim but it's not allowed to reset this field to empty string once it is set.
                                          If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClass
                                          will be set by the persistentvolume controller if it exists.
                                          If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be
                                          set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource
                                          exists.
                                          More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/
                                          (Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).
8756
8757
                                        type: string
                                      volumeMode:
8758
8759
8760
                                        description: |-
                                          volumeMode defines what type of volume is required by the claim.
                                          Value of Filesystem is implied when not included in claim spec.
8761
8762
                                        type: string
                                      volumeName:
8763
                                        description: volumeName is the binding reference to the PersistentVolume backing this claim.
8764
8765
8766
8767
8768
8769
8770
                                        type: string
                                    type: object
                                required:
                                  - spec
                                type: object
                            type: object
                          fc:
8771
                            description: fc represents a Fibre Channel resource that is attached to a kubelet's host machine and then exposed to the pod.
8772
8773
                            properties:
                              fsType:
8774
8775
8776
8777
                                description: |-
                                  fsType is the filesystem type to mount.
                                  Must be a filesystem type supported by the host operating system.
                                  Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
8778
8779
                                type: string
                              lun:
8780
                                description: 'lun is Optional: FC target lun number'
8781
8782
8783
                                format: int32
                                type: integer
                              readOnly:
8784
8785
8786
                                description: |-
                                  readOnly is Optional: Defaults to false (read/write). ReadOnly here will force
                                  the ReadOnly setting in VolumeMounts.
8787
8788
                                type: boolean
                              targetWWNs:
8789
                                description: 'targetWWNs is Optional: FC target worldwide names (WWNs)'
8790
8791
8792
8793
8794
                                items:
                                  type: string
                                type: array
                                x-kubernetes-list-type: atomic
                              wwids:
8795
8796
8797
                                description: |-
                                  wwids Optional: FC volume world wide identifiers (wwids)
                                  Either wwids or combination of targetWWNs and lun must be set, but not both simultaneously.
8798
8799
8800
8801
8802
8803
                                items:
                                  type: string
                                type: array
                                x-kubernetes-list-type: atomic
                            type: object
                          flexVolume:
8804
8805
8806
8807
                            description: |-
                              flexVolume represents a generic volume resource that is
                              provisioned/attached using an exec based plugin.
                              Deprecated: FlexVolume is deprecated. Consider using a CSIDriver instead.
8808
8809
                            properties:
                              driver:
8810
                                description: driver is the name of the driver to use for this volume.
8811
8812
                                type: string
                              fsType:
8813
8814
8815
8816
                                description: |-
                                  fsType is the filesystem type to mount.
                                  Must be a filesystem type supported by the host operating system.
                                  Ex. "ext4", "xfs", "ntfs". The default filesystem depends on FlexVolume script.
8817
8818
8819
8820
                                type: string
                              options:
                                additionalProperties:
                                  type: string
8821
                                description: 'options is Optional: this field holds extra command options if any.'
8822
8823
                                type: object
                              readOnly:
8824
8825
8826
                                description: |-
                                  readOnly is Optional: defaults to false (read/write). ReadOnly here will force
                                  the ReadOnly setting in VolumeMounts.
8827
8828
                                type: boolean
                              secretRef:
8829
8830
8831
8832
8833
8834
                                description: |-
                                  secretRef is Optional: secretRef is reference to the secret object containing
                                  sensitive information to pass to the plugin scripts. This may be
                                  empty if no secret object is specified. If the secret object
                                  contains more than one secret, all secrets are passed to the plugin
                                  scripts.
8835
8836
8837
                                properties:
                                  name:
                                    default: ""
8838
8839
8840
8841
8842
8843
                                    description: |-
                                      Name of the referent.
                                      This field is effectively required, but due to backwards compatibility is
                                      allowed to be empty. Instances of this type with an empty value here are
                                      almost certainly wrong.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
8844
8845
8846
8847
8848
8849
8850
                                    type: string
                                type: object
                                x-kubernetes-map-type: atomic
                            required:
                              - driver
                            type: object
                          flocker:
8851
8852
8853
                            description: |-
                              flocker represents a Flocker volume attached to a kubelet's host machine. This depends on the Flocker control service being running.
                              Deprecated: Flocker is deprecated and the in-tree flocker type is no longer supported.
8854
8855
                            properties:
                              datasetName:
8856
8857
8858
                                description: |-
                                  datasetName is Name of the dataset stored as metadata -> name on the dataset for Flocker
                                  should be considered as deprecated
8859
8860
                                type: string
                              datasetUUID:
8861
                                description: datasetUUID is the UUID of the dataset. This is unique identifier of a Flocker dataset
8862
8863
8864
                                type: string
                            type: object
                          gcePersistentDisk:
8865
8866
8867
8868
8869
8870
                            description: |-
                              gcePersistentDisk represents a GCE Disk resource that is attached to a
                              kubelet's host machine and then exposed to the pod.
                              Deprecated: GCEPersistentDisk is deprecated. All operations for the in-tree
                              gcePersistentDisk type are redirected to the pd.csi.storage.gke.io CSI driver.
                              More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
8871
8872
                            properties:
                              fsType:
8873
8874
8875
8876
8877
                                description: |-
                                  fsType is filesystem type of the volume that you want to mount.
                                  Tip: Ensure that the filesystem type is supported by the host operating system.
                                  Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
8878
8879
                                type: string
                              partition:
8880
8881
8882
8883
8884
8885
                                description: |-
                                  partition is the partition in the volume that you want to mount.
                                  If omitted, the default is to mount by volume name.
                                  Examples: For volume /dev/sda1, you specify the partition as "1".
                                  Similarly, the volume partition for /dev/sda is "0" (or you can leave the property empty).
                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
8886
8887
8888
                                format: int32
                                type: integer
                              pdName:
8889
8890
8891
                                description: |-
                                  pdName is unique name of the PD resource in GCE. Used to identify the disk in GCE.
                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
8892
8893
                                type: string
                              readOnly:
8894
8895
8896
8897
                                description: |-
                                  readOnly here will force the ReadOnly setting in VolumeMounts.
                                  Defaults to false.
                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
8898
8899
8900
8901
8902
                                type: boolean
                            required:
                              - pdName
                            type: object
                          gitRepo:
8903
8904
8905
8906
8907
                            description: |-
                              gitRepo represents a git repository at a particular revision.
                              Deprecated: GitRepo is deprecated. To provision a container with a git repo, mount an
                              EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir
                              into the Pod's container.
8908
8909
                            properties:
                              directory:
8910
8911
8912
8913
8914
                                description: |-
                                  directory is the target directory name.
                                  Must not contain or start with '..'.  If '.' is supplied, the volume directory will be the
                                  git repository.  Otherwise, if specified, the volume will contain the git repository in
                                  the subdirectory with the given name.
8915
8916
                                type: string
                              repository:
8917
                                description: repository is the URL
8918
8919
                                type: string
                              revision:
8920
                                description: revision is the commit hash for the specified revision.
8921
8922
8923
8924
8925
                                type: string
                            required:
                              - repository
                            type: object
                          glusterfs:
8926
8927
8928
8929
                            description: |-
                              glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime.
                              Deprecated: Glusterfs is deprecated and the in-tree glusterfs type is no longer supported.
                              More info: https://examples.k8s.io/volumes/glusterfs/README.md
8930
8931
                            properties:
                              endpoints:
8932
8933
8934
                                description: |-
                                  endpoints is the endpoint name that details Glusterfs topology.
                                  More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
8935
8936
                                type: string
                              path:
8937
8938
8939
                                description: |-
                                  path is the Glusterfs volume path.
                                  More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
8940
8941
                                type: string
                              readOnly:
8942
8943
8944
8945
                                description: |-
                                  readOnly here will force the Glusterfs volume to be mounted with read-only permissions.
                                  Defaults to false.
                                  More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
8946
8947
8948
8949
8950
8951
                                type: boolean
                            required:
                              - endpoints
                              - path
                            type: object
                          hostPath:
8952
8953
8954
8955
8956
8957
                            description: |-
                              hostPath represents a pre-existing file or directory on the host
                              machine that is directly exposed to the container. This is generally
                              used for system agents or other privileged things that are allowed
                              to see the host machine. Most containers will NOT need this.
                              More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
8958
8959
                            properties:
                              path:
8960
8961
8962
8963
                                description: |-
                                  path of the directory on the host.
                                  If the path is a symlink, it will follow the link to the real path.
                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
8964
8965
                                type: string
                              type:
8966
8967
8968
8969
                                description: |-
                                  type for HostPath Volume
                                  Defaults to ""
                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
8970
8971
8972
8973
8974
                                type: string
                            required:
                              - path
                            type: object
                          image:
8975
8976
8977
8978
8979
8980
8981
8982
8983
8984
8985
8986
8987
8988
8989
                            description: |-
                              image represents an OCI object (a container image or artifact) pulled and mounted on the kubelet's host machine.
                              The volume is resolved at pod startup depending on which PullPolicy value is provided:

                              - Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails.
                              - Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn't present.
                              - IfNotPresent: the kubelet pulls if the reference isn't already present on disk. Container creation will fail if the reference isn't present and the pull fails.

                              The volume gets re-resolved if the pod gets deleted and recreated, which means that new remote content will become available on pod recreation.
                              A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
                              The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
                              The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
                              The volume will be mounted read-only (ro) and non-executable files (noexec).
                              Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
                              The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
8990
8991
                            properties:
                              pullPolicy:
8992
8993
8994
8995
8996
8997
                                description: |-
                                  Policy for pulling OCI objects. Possible values are:
                                  Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails.
                                  Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn't present.
                                  IfNotPresent: the kubelet pulls if the reference isn't already present on disk. Container creation will fail if the reference isn't present and the pull fails.
                                  Defaults to Always if :latest tag is specified, or IfNotPresent otherwise.
8998
8999
                                type: string
                              reference:
9000
9001
9002
9003
9004
9005
9006
                                description: |-
                                  Required: Image or artifact reference to be used.
                                  Behaves in the same way as pod.spec.containers[*].image.
                                  Pull secrets will be assembled in the same way as for the container image by looking up node credentials, SA image pull secrets, and pod spec image pull secrets.
                                  More info: https://kubernetes.io/docs/concepts/containers/images
                                  This field is optional to allow higher level config management to default or override
                                  container images in workload controllers like Deployments and StatefulSets.
9007
9008
9009
                                type: string
                            type: object
                          iscsi:
9010
9011
9012
9013
                            description: |-
                              iscsi represents an ISCSI Disk resource that is attached to a
                              kubelet's host machine and then exposed to the pod.
                              More info: https://examples.k8s.io/volumes/iscsi/README.md
9014
9015
                            properties:
                              chapAuthDiscovery:
9016
                                description: chapAuthDiscovery defines whether support iSCSI Discovery CHAP authentication
9017
9018
                                type: boolean
                              chapAuthSession:
9019
                                description: chapAuthSession defines whether support iSCSI Session CHAP authentication
9020
9021
                                type: boolean
                              fsType:
9022
9023
9024
9025
9026
                                description: |-
                                  fsType is the filesystem type of the volume that you want to mount.
                                  Tip: Ensure that the filesystem type is supported by the host operating system.
                                  Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
9027
9028
                                type: string
                              initiatorName:
9029
9030
9031
9032
                                description: |-
                                  initiatorName is the custom iSCSI Initiator Name.
                                  If initiatorName is specified with iscsiInterface simultaneously, new iSCSI interface
                                  <target portal>:<volume name> will be created for the connection.
9033
9034
                                type: string
                              iqn:
9035
                                description: iqn is the target iSCSI Qualified Name.
9036
9037
9038
                                type: string
                              iscsiInterface:
                                default: default
9039
9040
9041
                                description: |-
                                  iscsiInterface is the interface Name that uses an iSCSI transport.
                                  Defaults to 'default' (tcp).
9042
9043
                                type: string
                              lun:
9044
                                description: lun represents iSCSI Target Lun number.
9045
9046
9047
                                format: int32
                                type: integer
                              portals:
9048
9049
9050
                                description: |-
                                  portals is the iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the port
                                  is other than default (typically TCP ports 860 and 3260).
9051
9052
9053
9054
9055
                                items:
                                  type: string
                                type: array
                                x-kubernetes-list-type: atomic
                              readOnly:
9056
9057
9058
                                description: |-
                                  readOnly here will force the ReadOnly setting in VolumeMounts.
                                  Defaults to false.
9059
9060
                                type: boolean
                              secretRef:
9061
                                description: secretRef is the CHAP Secret for iSCSI target and initiator authentication
9062
9063
9064
                                properties:
                                  name:
                                    default: ""
9065
9066
9067
9068
9069
9070
                                    description: |-
                                      Name of the referent.
                                      This field is effectively required, but due to backwards compatibility is
                                      allowed to be empty. Instances of this type with an empty value here are
                                      almost certainly wrong.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
9071
9072
9073
9074
                                    type: string
                                type: object
                                x-kubernetes-map-type: atomic
                              targetPortal:
9075
9076
9077
                                description: |-
                                  targetPortal is iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port
                                  is other than default (typically TCP ports 860 and 3260).
9078
9079
9080
9081
9082
9083
9084
                                type: string
                            required:
                              - iqn
                              - lun
                              - targetPortal
                            type: object
                          name:
9085
9086
9087
9088
                            description: |-
                              name of the volume.
                              Must be a DNS_LABEL and unique within the pod.
                              More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
9089
9090
                            type: string
                          nfs:
9091
9092
9093
                            description: |-
                              nfs represents an NFS mount on the host that shares a pod's lifetime
                              More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
9094
                            properties:
9095
                              path:
9096
9097
9098
                                description: |-
                                  path that is exported by the NFS server.
                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
9099
                                type: string
9100
                              readOnly:
9101
9102
9103
9104
                                description: |-
                                  readOnly here will force the NFS export to be mounted with read-only permissions.
                                  Defaults to false.
                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
9105
9106
                                type: boolean
                              server:
9107
9108
9109
                                description: |-
                                  server is the hostname or IP address of the NFS server.
                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
9110
9111
                                type: string
                            required:
9112
9113
                              - path
                              - server
9114
                            type: object
9115
                          persistentVolumeClaim:
9116
9117
9118
9119
                            description: |-
                              persistentVolumeClaimVolumeSource represents a reference to a
                              PersistentVolumeClaim in the same namespace.
                              More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
9120
                            properties:
9121
                              claimName:
9122
9123
9124
                                description: |-
                                  claimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume.
                                  More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
9125
                                type: string
9126
                              readOnly:
9127
9128
9129
                                description: |-
                                  readOnly Will force the ReadOnly setting in VolumeMounts.
                                  Default false.
9130
9131
9132
9133
9134
                                type: boolean
                            required:
                              - claimName
                            type: object
                          photonPersistentDisk:
9135
9136
9137
                            description: |-
                              photonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine.
                              Deprecated: PhotonPersistentDisk is deprecated and the in-tree photonPersistentDisk type is no longer supported.
9138
9139
                            properties:
                              fsType:
9140
9141
9142
9143
                                description: |-
                                  fsType is the filesystem type to mount.
                                  Must be a filesystem type supported by the host operating system.
                                  Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
9144
                                type: string
9145
                              pdID:
9146
                                description: pdID is the ID that identifies Photon Controller persistent disk
9147
9148
9149
9150
9151
                                type: string
                            required:
                              - pdID
                            type: object
                          portworxVolume:
9152
9153
9154
9155
9156
                            description: |-
                              portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
                              Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
                              are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
                              is on.
9157
9158
                            properties:
                              fsType:
9159
9160
9161
9162
                                description: |-
                                  fSType represents the filesystem type to mount
                                  Must be a filesystem type supported by the host operating system.
                                  Ex. "ext4", "xfs". Implicitly inferred to be "ext4" if unspecified.
9163
                                type: string
9164
                              readOnly:
9165
9166
9167
                                description: |-
                                  readOnly defaults to false (read/write). ReadOnly here will force
                                  the ReadOnly setting in VolumeMounts.
9168
                                type: boolean
9169
                              volumeID:
9170
                                description: volumeID uniquely identifies a Portworx volume
9171
                                type: string
9172
9173
9174
9175
                            required:
                              - volumeID
                            type: object
                          projected:
9176
                            description: projected items for all in one resources secrets, configmaps, and downward API
9177
9178
                            properties:
                              defaultMode:
9179
9180
9181
9182
9183
9184
9185
                                description: |-
                                  defaultMode are the mode bits used to set permissions on created files by default.
                                  Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.
                                  YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.
                                  Directories within the path are not affected by this setting.
                                  This might be in conflict with other options that affect the file
                                  mode, like fsGroup, and the result can be other mode bits set.
9186
9187
9188
                                format: int32
                                type: integer
                              sources:
9189
9190
9191
                                description: |-
                                  sources is the list of volume projections. Each entry in this list
                                  handles one source.
9192
                                items:
9193
9194
9195
                                  description: |-
                                    Projection that may be projected along with other supported volume types.
                                    Exactly one of these fields must be set.
9196
9197
                                  properties:
                                    clusterTrustBundle:
9198
9199
9200
9201
9202
9203
9204
9205
9206
9207
9208
9209
9210
9211
                                      description: |-
                                        ClusterTrustBundle allows a pod to access the `.spec.trustBundle` field
                                        of ClusterTrustBundle objects in an auto-updating file.

                                        Alpha, gated by the ClusterTrustBundleProjection feature gate.

                                        ClusterTrustBundle objects can either be selected by name, or by the
                                        combination of signer name and a label selector.

                                        Kubelet performs aggressive normalization of the PEM contents written
                                        into the pod filesystem.  Esoteric PEM features such as inter-block
                                        comments and block headers are stripped.  Certificates are deduplicated.
                                        The ordering of certificates within the file is arbitrary, and Kubelet
                                        may change the order over time.
9212
9213
                                      properties:
                                        labelSelector:
9214
9215
9216
9217
9218
                                          description: |-
                                            Select all ClusterTrustBundles that match this label selector.  Only has
                                            effect if signerName is set.  Mutually-exclusive with name.  If unset,
                                            interpreted as "match nothing".  If set but empty, interpreted as "match
                                            everything".
9219
9220
                                          properties:
                                            matchExpressions:
9221
                                              description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
9222
                                              items:
9223
9224
9225
                                                description: |-
                                                  A label selector requirement is a selector that contains values, a key, and an operator that
                                                  relates the key and values.
9226
9227
                                                properties:
                                                  key:
9228
                                                    description: key is the label key that the selector applies to.
9229
9230
                                                    type: string
                                                  operator:
9231
9232
9233
                                                    description: |-
                                                      operator represents a key's relationship to a set of values.
                                                      Valid operators are In, NotIn, Exists and DoesNotExist.
9234
9235
                                                    type: string
                                                  values:
9236
9237
9238
9239
9240
                                                    description: |-
                                                      values is an array of string values. If the operator is In or NotIn,
                                                      the values array must be non-empty. If the operator is Exists or DoesNotExist,
                                                      the values array must be empty. This array is replaced during a strategic
                                                      merge patch.
9241
9242
9243
9244
9245
9246
9247
9248
9249
9250
9251
9252
9253
                                                    items:
                                                      type: string
                                                    type: array
                                                    x-kubernetes-list-type: atomic
                                                required:
                                                  - key
                                                  - operator
                                                type: object
                                              type: array
                                              x-kubernetes-list-type: atomic
                                            matchLabels:
                                              additionalProperties:
                                                type: string
9254
9255
9256
9257
                                              description: |-
                                                matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
                                                map is equivalent to an element of matchExpressions, whose key field is "key", the
                                                operator is "In", and the values array contains only "value". The requirements are ANDed.
9258
9259
9260
9261
                                              type: object
                                          type: object
                                          x-kubernetes-map-type: atomic
                                        name:
9262
9263
9264
                                          description: |-
                                            Select a single ClusterTrustBundle by object name.  Mutually-exclusive
                                            with signerName and labelSelector.
9265
9266
                                          type: string
                                        optional:
9267
9268
9269
9270
9271
9272
                                          description: |-
                                            If true, don't block pod startup if the referenced ClusterTrustBundle(s)
                                            aren't available.  If using name, then the named ClusterTrustBundle is
                                            allowed not to exist.  If using signerName, then the combination of
                                            signerName and labelSelector is allowed to match zero
                                            ClusterTrustBundles.
9273
9274
                                          type: boolean
                                        path:
9275
                                          description: Relative path from the volume root to write the bundle.
9276
9277
                                          type: string
                                        signerName:
9278
9279
9280
9281
                                          description: |-
                                            Select all ClusterTrustBundles that match this signer name.
                                            Mutually-exclusive with name.  The contents of all selected
                                            ClusterTrustBundles will be unified and deduplicated.
9282
9283
9284
9285
9286
                                          type: string
                                      required:
                                        - path
                                      type: object
                                    configMap:
9287
                                      description: configMap information about the configMap data to project
9288
9289
                                      properties:
                                        items:
9290
9291
9292
9293
9294
9295
9296
9297
                                          description: |-
                                            items if unspecified, each key-value pair in the Data field of the referenced
                                            ConfigMap will be projected into the volume as a file whose name is the
                                            key and content is the value. If specified, the listed keys will be
                                            projected into the specified paths, and unlisted keys will not be
                                            present. If a key is specified which is not present in the ConfigMap,
                                            the volume setup will error unless it is marked optional. Paths must be
                                            relative and may not contain the '..' path or start with '..'.
9298
                                          items:
9299
                                            description: Maps a string key to a path within a volume.
9300
9301
                                            properties:
                                              key:
9302
                                                description: key is the key to project.
9303
9304
                                                type: string
                                              mode:
9305
9306
9307
9308
9309
9310
9311
                                                description: |-
                                                  mode is Optional: mode bits used to set permissions on this file.
                                                  Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.
                                                  YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.
                                                  If not specified, the volume defaultMode will be used.
                                                  This might be in conflict with other options that affect the file
                                                  mode, like fsGroup, and the result can be other mode bits set.
9312
9313
9314
                                                format: int32
                                                type: integer
                                              path:
9315
9316
9317
9318
9319
                                                description: |-
                                                  path is the relative path of the file to map the key to.
                                                  May not be an absolute path.
                                                  May not contain the path element '..'.
                                                  May not start with the string '..'.
9320
9321
9322
9323
9324
9325
9326
9327
9328
                                                type: string
                                            required:
                                              - key
                                              - path
                                            type: object
                                          type: array
                                          x-kubernetes-list-type: atomic
                                        name:
                                          default: ""
9329
9330
9331
9332
9333
9334
                                          description: |-
                                            Name of the referent.
                                            This field is effectively required, but due to backwards compatibility is
                                            allowed to be empty. Instances of this type with an empty value here are
                                            almost certainly wrong.
                                            More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
9335
9336
                                          type: string
                                        optional:
9337
                                          description: optional specify whether the ConfigMap or its keys must be defined
9338
9339
9340
9341
                                          type: boolean
                                      type: object
                                      x-kubernetes-map-type: atomic
                                    downwardAPI:
9342
                                      description: downwardAPI information about the downwardAPI data to project
9343
9344
                                      properties:
                                        items:
9345
                                          description: Items is a list of DownwardAPIVolume file
9346
                                          items:
9347
                                            description: DownwardAPIVolumeFile represents information to create the file containing the pod field
9348
9349
                                            properties:
                                              fieldRef:
9350
                                                description: 'Required: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.'
9351
9352
                                                properties:
                                                  apiVersion:
9353
                                                    description: Version of the schema the FieldPath is written in terms of, defaults to "v1".
9354
9355
                                                    type: string
                                                  fieldPath:
9356
                                                    description: Path of the field to select in the specified API version.
9357
9358
9359
9360
9361
9362
                                                    type: string
                                                required:
                                                  - fieldPath
                                                type: object
                                                x-kubernetes-map-type: atomic
                                              mode:
9363
9364
9365
9366
9367
9368
9369
                                                description: |-
                                                  Optional: mode bits used to set permissions on this file, must be an octal value
                                                  between 0000 and 0777 or a decimal value between 0 and 511.
                                                  YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.
                                                  If not specified, the volume defaultMode will be used.
                                                  This might be in conflict with other options that affect the file
                                                  mode, like fsGroup, and the result can be other mode bits set.
9370
9371
9372
                                                format: int32
                                                type: integer
                                              path:
9373
                                                description: 'Required: Path is  the relative path name of the file to be created. Must not be absolute or contain the ''..'' path. Must be utf-8 encoded. The first item of the relative path must not start with ''..'''
9374
9375
                                                type: string
                                              resourceFieldRef:
9376
9377
9378
                                                description: |-
                                                  Selects a resource of the container: only resources limits and requests
                                                  (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.
9379
9380
                                                properties:
                                                  containerName:
9381
                                                    description: 'Container name: required for volumes, optional for env vars'
9382
9383
9384
9385
9386
                                                    type: string
                                                  divisor:
                                                    anyOf:
                                                      - type: integer
                                                      - type: string
9387
                                                    description: Specifies the output format of the exposed resources, defaults to "1"
9388
9389
9390
                                                    pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                                                    x-kubernetes-int-or-string: true
                                                  resource:
9391
                                                    description: 'Required: resource to select'
9392
9393
9394
9395
9396
9397
9398
9399
9400
9401
9402
9403
                                                    type: string
                                                required:
                                                  - resource
                                                type: object
                                                x-kubernetes-map-type: atomic
                                            required:
                                              - path
                                            type: object
                                          type: array
                                          x-kubernetes-list-type: atomic
                                      type: object
                                    secret:
9404
                                      description: secret information about the secret data to project
9405
9406
                                      properties:
                                        items:
9407
9408
9409
9410
9411
9412
9413
9414
                                          description: |-
                                            items if unspecified, each key-value pair in the Data field of the referenced
                                            Secret will be projected into the volume as a file whose name is the
                                            key and content is the value. If specified, the listed keys will be
                                            projected into the specified paths, and unlisted keys will not be
                                            present. If a key is specified which is not present in the Secret,
                                            the volume setup will error unless it is marked optional. Paths must be
                                            relative and may not contain the '..' path or start with '..'.
9415
                                          items:
9416
                                            description: Maps a string key to a path within a volume.
9417
9418
                                            properties:
                                              key:
9419
                                                description: key is the key to project.
9420
9421
                                                type: string
                                              mode:
9422
9423
9424
9425
9426
9427
9428
                                                description: |-
                                                  mode is Optional: mode bits used to set permissions on this file.
                                                  Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.
                                                  YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.
                                                  If not specified, the volume defaultMode will be used.
                                                  This might be in conflict with other options that affect the file
                                                  mode, like fsGroup, and the result can be other mode bits set.
9429
9430
9431
                                                format: int32
                                                type: integer
                                              path:
9432
9433
9434
9435
9436
                                                description: |-
                                                  path is the relative path of the file to map the key to.
                                                  May not be an absolute path.
                                                  May not contain the path element '..'.
                                                  May not start with the string '..'.
9437
9438
9439
9440
9441
9442
9443
9444
9445
                                                type: string
                                            required:
                                              - key
                                              - path
                                            type: object
                                          type: array
                                          x-kubernetes-list-type: atomic
                                        name:
                                          default: ""
9446
9447
9448
9449
9450
9451
                                          description: |-
                                            Name of the referent.
                                            This field is effectively required, but due to backwards compatibility is
                                            allowed to be empty. Instances of this type with an empty value here are
                                            almost certainly wrong.
                                            More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
9452
9453
                                          type: string
                                        optional:
9454
                                          description: optional field specify whether the Secret or its key must be defined
9455
9456
9457
9458
                                          type: boolean
                                      type: object
                                      x-kubernetes-map-type: atomic
                                    serviceAccountToken:
9459
                                      description: serviceAccountToken is information about the serviceAccountToken data to project
9460
9461
                                      properties:
                                        audience:
9462
9463
9464
9465
9466
                                          description: |-
                                            audience is the intended audience of the token. A recipient of a token
                                            must identify itself with an identifier specified in the audience of the
                                            token, and otherwise should reject the token. The audience defaults to the
                                            identifier of the apiserver.
9467
9468
                                          type: string
                                        expirationSeconds:
9469
9470
9471
9472
9473
9474
9475
                                          description: |-
                                            expirationSeconds is the requested duration of validity of the service
                                            account token. As the token approaches expiration, the kubelet volume
                                            plugin will proactively rotate the service account token. The kubelet will
                                            start trying to rotate the token if the token is older than 80 percent of
                                            its time to live or if the token is older than 24 hours.Defaults to 1 hour
                                            and must be at least 10 minutes.
9476
9477
9478
                                          format: int64
                                          type: integer
                                        path:
9479
9480
9481
                                          description: |-
                                            path is the path relative to the mount point of the file to project the
                                            token into.
9482
9483
9484
9485
9486
9487
9488
9489
9490
                                          type: string
                                      required:
                                        - path
                                      type: object
                                  type: object
                                type: array
                                x-kubernetes-list-type: atomic
                            type: object
                          quobyte:
9491
9492
9493
                            description: |-
                              quobyte represents a Quobyte mount on the host that shares a pod's lifetime.
                              Deprecated: Quobyte is deprecated and the in-tree quobyte type is no longer supported.
9494
9495
                            properties:
                              group:
9496
9497
9498
                                description: |-
                                  group to map volume access to
                                  Default is no group
9499
                                type: string
9500
                              readOnly:
9501
9502
9503
                                description: |-
                                  readOnly here will force the Quobyte volume to be mounted with read-only permissions.
                                  Defaults to false.
9504
9505
                                type: boolean
                              registry:
9506
9507
9508
9509
                                description: |-
                                  registry represents a single or multiple Quobyte Registry services
                                  specified as a string as host:port pair (multiple entries are separated with commas)
                                  which acts as the central registry for volumes
9510
9511
                                type: string
                              tenant:
9512
9513
9514
                                description: |-
                                  tenant owning the given Quobyte volume in the Backend
                                  Used with dynamically provisioned Quobyte volumes, value is set by the plugin
9515
9516
                                type: string
                              user:
9517
9518
9519
                                description: |-
                                  user to map volume access to
                                  Defaults to serivceaccount user
9520
9521
                                type: string
                              volume:
9522
                                description: volume is a string that references an already created Quobyte volume by name.
9523
9524
                                type: string
                            required:
9525
9526
                              - registry
                              - volume
9527
                            type: object
9528
                          rbd:
9529
9530
9531
9532
                            description: |-
                              rbd represents a Rados Block Device mount on the host that shares a pod's lifetime.
                              Deprecated: RBD is deprecated and the in-tree rbd type is no longer supported.
                              More info: https://examples.k8s.io/volumes/rbd/README.md
9533
                            properties:
9534
                              fsType:
9535
9536
9537
9538
9539
                                description: |-
                                  fsType is the filesystem type of the volume that you want to mount.
                                  Tip: Ensure that the filesystem type is supported by the host operating system.
                                  Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd
9540
9541
                                type: string
                              image:
9542
9543
9544
                                description: |-
                                  image is the rados image name.
                                  More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
9545
9546
9547
                                type: string
                              keyring:
                                default: /etc/ceph/keyring
9548
9549
9550
9551
                                description: |-
                                  keyring is the path to key ring for RBDUser.
                                  Default is /etc/ceph/keyring.
                                  More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
9552
9553
                                type: string
                              monitors:
9554
9555
9556
                                description: |-
                                  monitors is a collection of Ceph monitors.
                                  More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
9557
9558
9559
9560
9561
9562
                                items:
                                  type: string
                                type: array
                                x-kubernetes-list-type: atomic
                              pool:
                                default: rbd
9563
9564
9565
9566
                                description: |-
                                  pool is the rados pool name.
                                  Default is rbd.
                                  More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
9567
9568
                                type: string
                              readOnly:
9569
9570
9571
9572
                                description: |-
                                  readOnly here will force the ReadOnly setting in VolumeMounts.
                                  Defaults to false.
                                  More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
9573
9574
                                type: boolean
                              secretRef:
9575
9576
9577
9578
9579
                                description: |-
                                  secretRef is name of the authentication secret for RBDUser. If provided
                                  overrides keyring.
                                  Default is nil.
                                  More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
9580
9581
9582
                                properties:
                                  name:
                                    default: ""
9583
9584
9585
9586
9587
9588
                                    description: |-
                                      Name of the referent.
                                      This field is effectively required, but due to backwards compatibility is
                                      allowed to be empty. Instances of this type with an empty value here are
                                      almost certainly wrong.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
9589
9590
9591
9592
9593
                                    type: string
                                type: object
                                x-kubernetes-map-type: atomic
                              user:
                                default: admin
9594
9595
9596
9597
                                description: |-
                                  user is the rados user name.
                                  Default is admin.
                                  More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
9598
9599
9600
9601
9602
9603
                                type: string
                            required:
                              - image
                              - monitors
                            type: object
                          scaleIO:
9604
9605
9606
                            description: |-
                              scaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes.
                              Deprecated: ScaleIO is deprecated and the in-tree scaleIO type is no longer supported.
9607
9608
9609
                            properties:
                              fsType:
                                default: xfs
9610
9611
9612
9613
9614
                                description: |-
                                  fsType is the filesystem type to mount.
                                  Must be a filesystem type supported by the host operating system.
                                  Ex. "ext4", "xfs", "ntfs".
                                  Default is "xfs".
9615
9616
                                type: string
                              gateway:
9617
                                description: gateway is the host address of the ScaleIO API Gateway.
9618
9619
                                type: string
                              protectionDomain:
9620
                                description: protectionDomain is the name of the ScaleIO Protection Domain for the configured storage.
9621
9622
                                type: string
                              readOnly:
9623
9624
9625
                                description: |-
                                  readOnly Defaults to false (read/write). ReadOnly here will force
                                  the ReadOnly setting in VolumeMounts.
9626
9627
                                type: boolean
                              secretRef:
9628
9629
9630
                                description: |-
                                  secretRef references to the secret for ScaleIO user and other
                                  sensitive information. If this is not provided, Login operation will fail.
9631
9632
9633
                                properties:
                                  name:
                                    default: ""
9634
9635
9636
9637
9638
9639
                                    description: |-
                                      Name of the referent.
                                      This field is effectively required, but due to backwards compatibility is
                                      allowed to be empty. Instances of this type with an empty value here are
                                      almost certainly wrong.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
9640
9641
9642
9643
                                    type: string
                                type: object
                                x-kubernetes-map-type: atomic
                              sslEnabled:
9644
                                description: sslEnabled Flag enable/disable SSL communication with Gateway, default false
9645
9646
9647
                                type: boolean
                              storageMode:
                                default: ThinProvisioned
9648
9649
9650
                                description: |-
                                  storageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned.
                                  Default is ThinProvisioned.
9651
9652
                                type: string
                              storagePool:
9653
                                description: storagePool is the ScaleIO Storage Pool associated with the protection domain.
9654
9655
                                type: string
                              system:
9656
                                description: system is the name of the storage system as configured in ScaleIO.
9657
9658
                                type: string
                              volumeName:
9659
9660
9661
                                description: |-
                                  volumeName is the name of a volume already created in the ScaleIO system
                                  that is associated with this volume source.
9662
9663
9664
9665
9666
9667
9668
                                type: string
                            required:
                              - gateway
                              - secretRef
                              - system
                            type: object
                          secret:
9669
9670
9671
                            description: |-
                              secret represents a secret that should populate this volume.
                              More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
9672
9673
                            properties:
                              defaultMode:
9674
9675
9676
9677
9678
9679
9680
9681
                                description: |-
                                  defaultMode is Optional: mode bits used to set permissions on created files by default.
                                  Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.
                                  YAML accepts both octal and decimal values, JSON requires decimal values
                                  for mode bits. Defaults to 0644.
                                  Directories within the path are not affected by this setting.
                                  This might be in conflict with other options that affect the file
                                  mode, like fsGroup, and the result can be other mode bits set.
9682
9683
9684
                                format: int32
                                type: integer
                              items:
9685
9686
9687
9688
9689
9690
9691
9692
                                description: |-
                                  items If unspecified, each key-value pair in the Data field of the referenced
                                  Secret will be projected into the volume as a file whose name is the
                                  key and content is the value. If specified, the listed keys will be
                                  projected into the specified paths, and unlisted keys will not be
                                  present. If a key is specified which is not present in the Secret,
                                  the volume setup will error unless it is marked optional. Paths must be
                                  relative and may not contain the '..' path or start with '..'.
9693
                                items:
9694
                                  description: Maps a string key to a path within a volume.
9695
                                  properties:
9696
                                    key:
9697
                                      description: key is the key to project.
9698
                                      type: string
9699
                                    mode:
9700
9701
9702
9703
9704
9705
9706
                                      description: |-
                                        mode is Optional: mode bits used to set permissions on this file.
                                        Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.
                                        YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.
                                        If not specified, the volume defaultMode will be used.
                                        This might be in conflict with other options that affect the file
                                        mode, like fsGroup, and the result can be other mode bits set.
9707
9708
9709
                                      format: int32
                                      type: integer
                                    path:
9710
9711
9712
9713
9714
                                      description: |-
                                        path is the relative path of the file to map the key to.
                                        May not be an absolute path.
                                        May not contain the path element '..'.
                                        May not start with the string '..'.
9715
9716
                                      type: string
                                  required:
9717
                                    - key
9718
                                    - path
9719
9720
9721
                                  type: object
                                type: array
                                x-kubernetes-list-type: atomic
9722
                              optional:
9723
                                description: optional field specify whether the Secret or its keys must be defined
9724
9725
                                type: boolean
                              secretName:
9726
9727
9728
                                description: |-
                                  secretName is the name of the secret in the pod's namespace to use.
                                  More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
9729
9730
9731
                                type: string
                            type: object
                          storageos:
9732
9733
9734
                            description: |-
                              storageOS represents a StorageOS volume attached and mounted on Kubernetes nodes.
                              Deprecated: StorageOS is deprecated and the in-tree storageos type is no longer supported.
9735
9736
                            properties:
                              fsType:
9737
9738
9739
9740
                                description: |-
                                  fsType is the filesystem type to mount.
                                  Must be a filesystem type supported by the host operating system.
                                  Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
9741
9742
                                type: string
                              readOnly:
9743
9744
9745
                                description: |-
                                  readOnly defaults to false (read/write). ReadOnly here will force
                                  the ReadOnly setting in VolumeMounts.
9746
9747
                                type: boolean
                              secretRef:
9748
9749
9750
                                description: |-
                                  secretRef specifies the secret to use for obtaining the StorageOS API
                                  credentials.  If not specified, default values will be attempted.
9751
9752
9753
                                properties:
                                  name:
                                    default: ""
9754
9755
9756
9757
9758
9759
                                    description: |-
                                      Name of the referent.
                                      This field is effectively required, but due to backwards compatibility is
                                      allowed to be empty. Instances of this type with an empty value here are
                                      almost certainly wrong.
                                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
9760
                                    type: string
9761
                                type: object
9762
9763
                                x-kubernetes-map-type: atomic
                              volumeName:
9764
9765
9766
                                description: |-
                                  volumeName is the human-readable name of the StorageOS volume.  Volume
                                  names are only unique within a namespace.
9767
9768
                                type: string
                              volumeNamespace:
9769
9770
9771
9772
9773
9774
9775
                                description: |-
                                  volumeNamespace specifies the scope of the volume within StorageOS.  If no
                                  namespace is specified then the Pod's namespace will be used.  This allows the
                                  Kubernetes name scoping to be mirrored within StorageOS for tighter integration.
                                  Set VolumeName to any name to override the default behaviour.
                                  Set to "default" if you are not using namespaces within StorageOS.
                                  Namespaces that do not pre-exist within StorageOS will be created.
9776
9777
9778
                                type: string
                            type: object
                          vsphereVolume:
9779
9780
9781
9782
                            description: |-
                              vsphereVolume represents a vSphere volume attached and mounted on kubelets host machine.
                              Deprecated: VsphereVolume is deprecated. All operations for the in-tree vsphereVolume type
                              are redirected to the csi.vsphere.vmware.com CSI driver.
9783
9784
                            properties:
                              fsType:
9785
9786
9787
9788
                                description: |-
                                  fsType is filesystem type to mount.
                                  Must be a filesystem type supported by the host operating system.
                                  Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
9789
9790
                                type: string
                              storagePolicyID:
9791
                                description: storagePolicyID is the storage Policy Based Management (SPBM) profile ID associated with the StoragePolicyName.
9792
9793
                                type: string
                              storagePolicyName:
9794
                                description: storagePolicyName is the storage Policy Based Management (SPBM) profile name.
9795
9796
                                type: string
                              volumePath:
9797
                                description: volumePath is the path that identifies vSphere volume vmdk
9798
9799
9800
                                type: string
                            required:
                              - volumePath
9801
                            type: object
9802
                        required:
9803
                          - name
9804
                        type: object
9805
                      type: array
9806
9807
9808
                      x-kubernetes-list-map-keys:
                        - name
                      x-kubernetes-list-type: map
9809
                  required: []
9810
9811
                  type: object
                ingress:
9812
                  description: Ingress config to expose the component outside the cluster (or through a service mesh).
9813
9814
9815
                  properties:
                    annotations:
                      additionalProperties:
9816
                        type: string
9817
                      description: Annotations to set on the generated Ingress/VirtualService resources.
9818
9819
                      type: object
                    enabled:
9820
                      description: Enabled exposes the component through an ingress or virtual service when true.
9821
9822
                      type: boolean
                    host:
9823
                      description: Host is the base host name to route external traffic to this component.
9824
9825
                      type: string
                    hostPrefix:
9826
                      description: HostPrefix is an optional prefix added before the host.
9827
9828
                      type: string
                    hostSuffix:
9829
                      description: HostSuffix is an optional suffix appended after the host.
9830
9831
                      type: string
                    ingressControllerClassName:
9832
                      description: IngressControllerClassName selects the ingress controller class (e.g., "nginx").
9833
9834
9835
                      type: string
                    labels:
                      additionalProperties:
9836
                        type: string
9837
                      description: Labels to set on the generated Ingress/VirtualService resources.
9838
9839
                      type: object
                    tls:
9840
                      description: TLS holds the TLS configuration used by the Ingress/VirtualService.
9841
9842
                      properties:
                        secretName:
9843
                          description: SecretName is the name of a Kubernetes Secret containing the TLS certificate and key.
9844
9845
9846
                          type: string
                      type: object
                    useVirtualService:
9847
                      description: UseVirtualService indicates whether to configure a service-mesh VirtualService instead of a standard Ingress.
9848
9849
                      type: boolean
                    virtualServiceGateway:
9850
                      description: VirtualServiceGateway optionally specifies the gateway name to attach the VirtualService to.
9851
                      type: string
9852
9853
9854
                  type: object
                labels:
                  additionalProperties:
9855
                    type: string
9856
                  description: Labels to add to generated Kubernetes resources for this component.
9857
9858
                  type: object
                livenessProbe:
9859
                  description: LivenessProbe to detect and restart unhealthy containers.
9860
9861
                  properties:
                    exec:
9862
                      description: Exec specifies a command to execute in the container.
9863
9864
                      properties:
                        command:
9865
9866
9867
9868
9869
9870
                          description: |-
                            Command is the command line to execute inside the container, the working directory for the
                            command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                            not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                            a shell, you need to explicitly call out to that shell.
                            Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
9871
9872
9873
9874
9875
9876
                          items:
                            type: string
                          type: array
                          x-kubernetes-list-type: atomic
                      type: object
                    failureThreshold:
9877
9878
9879
                      description: |-
                        Minimum consecutive failures for the probe to be considered failed after having succeeded.
                        Defaults to 3. Minimum value is 1.
9880
9881
9882
                      format: int32
                      type: integer
                    grpc:
9883
                      description: GRPC specifies a GRPC HealthCheckRequest.
9884
                      properties:
9885
                        port:
9886
                          description: Port number of the gRPC service. Number must be in the range 1 to 65535.
9887
9888
9889
9890
                          format: int32
                          type: integer
                        service:
                          default: ""
9891
9892
9893
9894
9895
                          description: |-
                            Service is the name of the service to place in the gRPC HealthCheckRequest
                            (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).

                            If this is not specified, the default behavior is defined by gRPC.
9896
                          type: string
9897
9898
9899
9900
                      required:
                        - port
                      type: object
                    httpGet:
9901
                      description: HTTPGet specifies an HTTP GET request to perform.
9902
9903
                      properties:
                        host:
9904
9905
9906
                          description: |-
                            Host name to connect to, defaults to the pod IP. You probably want to set
                            "Host" in httpHeaders instead.
9907
                          type: string
9908
                        httpHeaders:
9909
                          description: Custom headers to set in the request. HTTP allows repeated headers.
9910
                          items:
9911
                            description: HTTPHeader describes a custom header to be used in HTTP probes
9912
9913
                            properties:
                              name:
9914
9915
9916
                                description: |-
                                  The header field name.
                                  This will be canonicalized upon output, so case-variant names will be understood as the same header.
9917
9918
                                type: string
                              value:
9919
                                description: The header field value
9920
9921
9922
9923
9924
9925
9926
9927
                                type: string
                            required:
                              - name
                              - value
                            type: object
                          type: array
                          x-kubernetes-list-type: atomic
                        path:
9928
                          description: Path to access on the HTTP server.
9929
                          type: string
9930
9931
9932
9933
                        port:
                          anyOf:
                            - type: integer
                            - type: string
9934
9935
9936
9937
                          description: |-
                            Name or number of the port to access on the container.
                            Number must be in the range 1 to 65535.
                            Name must be an IANA_SVC_NAME.
9938
9939
                          x-kubernetes-int-or-string: true
                        scheme:
9940
9941
9942
                          description: |-
                            Scheme to use for connecting to the host.
                            Defaults to HTTP.
9943
                          type: string
9944
9945
                      required:
                        - port
9946
                      type: object
9947
                    initialDelaySeconds:
9948
9949
9950
                      description: |-
                        Number of seconds after the container has started before liveness probes are initiated.
                        More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
9951
9952
9953
                      format: int32
                      type: integer
                    periodSeconds:
9954
9955
9956
                      description: |-
                        How often (in seconds) to perform the probe.
                        Default to 10 seconds. Minimum value is 1.
9957
9958
9959
                      format: int32
                      type: integer
                    successThreshold:
9960
9961
9962
                      description: |-
                        Minimum consecutive successes for the probe to be considered successful after having failed.
                        Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
9963
9964
9965
                      format: int32
                      type: integer
                    tcpSocket:
9966
                      description: TCPSocket specifies a connection to a TCP port.
9967
                      properties:
9968
                        host:
9969
                          description: 'Optional: Host name to connect to, defaults to the pod IP.'
9970
9971
9972
9973
9974
                          type: string
                        port:
                          anyOf:
                            - type: integer
                            - type: string
9975
9976
9977
9978
                          description: |-
                            Number or name of the port to access on the container.
                            Number must be in the range 1 to 65535.
                            Name must be an IANA_SVC_NAME.
9979
9980
9981
9982
9983
                          x-kubernetes-int-or-string: true
                      required:
                        - port
                      type: object
                    terminationGracePeriodSeconds:
9984
9985
9986
9987
9988
9989
9990
9991
9992
9993
9994
                      description: |-
                        Optional duration in seconds the pod needs to terminate gracefully upon probe failure.
                        The grace period is the duration in seconds after the processes running in the pod are sent
                        a termination signal and the time when the processes are forcibly halted with a kill signal.
                        Set this value longer than the expected cleanup time for your process.
                        If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                        value overrides the value provided by the pod spec.
                        Value must be non-negative integer. The value zero indicates stop immediately via
                        the kill signal (no opportunity to shut down).
                        This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.
                        Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
9995
9996
9997
                      format: int64
                      type: integer
                    timeoutSeconds:
9998
9999
10000
10001
                      description: |-
                        Number of seconds after which the probe times out.
                        Defaults to 1 second. Minimum value is 1.
                        More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
10002
10003
10004
                      format: int32
                      type: integer
                  type: object
10005
10006
10007
10008
10009
10010
10011
10012
10013
10014
10015
10016
10017
10018
10019
                multinode:
                  description: Multinode is the configuration for multinode components.
                  properties:
                    nodeCount:
                      default: 2
                      description: |-
                        Indicates the number of nodes to deploy for multinode components.
                        Total number of GPUs is NumberOfNodes * GPU limit.
                        Must be greater than 1.
                      format: int32
                      minimum: 2
                      type: integer
                  required:
                    - nodeCount
                  type: object
10020
                readinessProbe:
10021
                  description: ReadinessProbe to signal when the container is ready to receive traffic.
10022
10023
                  properties:
                    exec:
10024
                      description: Exec specifies a command to execute in the container.
10025
10026
                      properties:
                        command:
10027
10028
10029
10030
10031
10032
                          description: |-
                            Command is the command line to execute inside the container, the working directory for the
                            command  is root ('/') in the container's filesystem. The command is simply exec'd, it is
                            not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use
                            a shell, you need to explicitly call out to that shell.
                            Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
10033
10034
10035
10036
                          items:
                            type: string
                          type: array
                          x-kubernetes-list-type: atomic
10037
10038
                      type: object
                    failureThreshold:
10039
10040
10041
                      description: |-
                        Minimum consecutive failures for the probe to be considered failed after having succeeded.
                        Defaults to 3. Minimum value is 1.
10042
10043
10044
                      format: int32
                      type: integer
                    grpc:
10045
                      description: GRPC specifies a GRPC HealthCheckRequest.
10046
10047
                      properties:
                        port:
10048
                          description: Port number of the gRPC service. Number must be in the range 1 to 65535.
10049
10050
                          format: int32
                          type: integer
10051
10052
                        service:
                          default: ""
10053
10054
10055
10056
10057
                          description: |-
                            Service is the name of the service to place in the gRPC HealthCheckRequest
                            (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).

                            If this is not specified, the default behavior is defined by gRPC.
10058
                          type: string
10059
10060
10061
10062
                      required:
                        - port
                      type: object
                    httpGet:
10063
                      description: HTTPGet specifies an HTTP GET request to perform.
10064
10065
                      properties:
                        host:
10066
10067
10068
                          description: |-
                            Host name to connect to, defaults to the pod IP. You probably want to set
                            "Host" in httpHeaders instead.
10069
                          type: string
10070
                        httpHeaders:
10071
                          description: Custom headers to set in the request. HTTP allows repeated headers.
10072
                          items:
10073
                            description: HTTPHeader describes a custom header to be used in HTTP probes
10074
10075
                            properties:
                              name:
10076
10077
10078
                                description: |-
                                  The header field name.
                                  This will be canonicalized upon output, so case-variant names will be understood as the same header.
10079
10080
                                type: string
                              value:
10081
                                description: The header field value
10082
10083
10084
10085
10086
10087
10088
10089
                                type: string
                            required:
                              - name
                              - value
                            type: object
                          type: array
                          x-kubernetes-list-type: atomic
                        path:
10090
                          description: Path to access on the HTTP server.
10091
                          type: string
10092
10093
10094
10095
                        port:
                          anyOf:
                            - type: integer
                            - type: string
10096
10097
10098
10099
                          description: |-
                            Name or number of the port to access on the container.
                            Number must be in the range 1 to 65535.
                            Name must be an IANA_SVC_NAME.
10100
10101
                          x-kubernetes-int-or-string: true
                        scheme:
10102
10103
10104
                          description: |-
                            Scheme to use for connecting to the host.
                            Defaults to HTTP.
10105
10106
                          type: string
                      required:
10107
                        - port
10108
                      type: object
10109
                    initialDelaySeconds:
10110
10111
10112
                      description: |-
                        Number of seconds after the container has started before liveness probes are initiated.
                        More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
10113
10114
10115
                      format: int32
                      type: integer
                    periodSeconds:
10116
10117
10118
                      description: |-
                        How often (in seconds) to perform the probe.
                        Default to 10 seconds. Minimum value is 1.
10119
10120
10121
                      format: int32
                      type: integer
                    successThreshold:
10122
10123
10124
                      description: |-
                        Minimum consecutive successes for the probe to be considered successful after having failed.
                        Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1.
10125
10126
10127
                      format: int32
                      type: integer
                    tcpSocket:
10128
                      description: TCPSocket specifies a connection to a TCP port.
10129
10130
                      properties:
                        host:
10131
                          description: 'Optional: Host name to connect to, defaults to the pod IP.'
10132
                          type: string
10133
10134
10135
10136
                        port:
                          anyOf:
                            - type: integer
                            - type: string
10137
10138
10139
10140
                          description: |-
                            Number or name of the port to access on the container.
                            Number must be in the range 1 to 65535.
                            Name must be an IANA_SVC_NAME.
10141
10142
10143
10144
10145
                          x-kubernetes-int-or-string: true
                      required:
                        - port
                      type: object
                    terminationGracePeriodSeconds:
10146
10147
10148
10149
10150
10151
10152
10153
10154
10155
10156
                      description: |-
                        Optional duration in seconds the pod needs to terminate gracefully upon probe failure.
                        The grace period is the duration in seconds after the processes running in the pod are sent
                        a termination signal and the time when the processes are forcibly halted with a kill signal.
                        Set this value longer than the expected cleanup time for your process.
                        If this value is nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                        value overrides the value provided by the pod spec.
                        Value must be non-negative integer. The value zero indicates stop immediately via
                        the kill signal (no opportunity to shut down).
                        This is a beta field and requires enabling ProbeTerminationGracePeriod feature gate.
                        Minimum value is 1. spec.terminationGracePeriodSeconds is used if unset.
10157
10158
10159
                      format: int64
                      type: integer
                    timeoutSeconds:
10160
10161
10162
10163
                      description: |-
                        Number of seconds after which the probe times out.
                        Defaults to 1 second. Minimum value is 1.
                        More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
10164
10165
10166
10167
                      format: int32
                      type: integer
                  type: object
                replicas:
10168
                  description: Replicas is the desired number of Pods for this component when autoscaling is not used.
10169
10170
10171
                  format: int32
                  type: integer
                resources:
10172
10173
10174
                  description: |-
                    Resources requested and limits for this component, including CPU, memory,
                    GPUs/devices, and any runtime-specific resources.
10175
10176
10177
10178
10179
10180
10181
10182
                  properties:
                    limits:
                      properties:
                        cpu:
                          type: string
                        custom:
                          additionalProperties:
                            type: string
10183
                          type: object
10184
                        gpu:
10185
10186
10187
                          description: |-
                            Indicates the number of GPUs to request.
                            total number of GPUs is NumberOfNodes * GPU in case of multinode deployment.
10188
                          type: string
10189
10190
10191
10192
10193
10194
10195
10196
10197
10198
                        memory:
                          type: string
                      type: object
                    requests:
                      properties:
                        cpu:
                          type: string
                        custom:
                          additionalProperties:
                            type: string
10199
                          type: object
10200
                        gpu:
10201
10202
10203
                          description: |-
                            Indicates the number of GPUs to request.
                            total number of GPUs is NumberOfNodes * GPU in case of multinode deployment.
10204
                          type: string
10205
10206
10207
10208
10209
                        memory:
                          type: string
                      type: object
                  type: object
                serviceName:
10210
                  description: The name of the component
10211
                  type: string
10212
10213
10214
10215
10216
10217
10218
10219
10220
10221
10222
10223
                sharedMemory:
                  description: SharedMemory controls the tmpfs mounted at /dev/shm (enable/disable and size).
                  properties:
                    disabled:
                      type: boolean
                    size:
                      anyOf:
                        - type: integer
                        - type: string
                      pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
                      x-kubernetes-int-or-string: true
                  type: object
10224
10225
10226
                subComponentType:
                  description: SubComponentType indicates the sub-role of this component (for example, "prefill").
                  type: string
10227
10228
10229
10230
10231
10232
10233
10234
10235
10236
10237
10238
10239
10240
10241
10242
10243
10244
10245
10246
10247
10248
10249
10250
                volumeMounts:
                  description: VolumeMounts references PVCs defined at the top level for volumes to be mounted by the component.
                  items:
                    description: VolumeMount references a PVC defined at the top level for volumes to be mounted by the component
                    properties:
                      mountPoint:
                        description: |-
                          MountPoint specifies where to mount the volume.
                          If useAsCompilationCache is true and mountPoint is not specified,
                          a backend-specific default will be used.
                        type: string
                      name:
                        description: Name references a PVC name defined in the top-level PVCs map
                        type: string
                      useAsCompilationCache:
                        default: false
                        description: |-
                          UseAsCompilationCache indicates this volume should be used as a compilation cache.
                          When true, backend-specific environment variables will be set and default mount points may be used.
                        type: boolean
                    required:
                      - name
                    type: object
                  type: array
10251
10252
              type: object
            status:
10253
              description: Status reflects the current observed state of the component deployment.
10254
10255
              properties:
                conditions:
10256
10257
10258
10259
10260
                  description: |-
                    INSERT ADDITIONAL STATUS FIELD - define observed state of cluster
                    Important: Run "make" to regenerate code after modifying this file
                    Conditions captures the latest observed state of the component (including
                    availability and readiness) using standard Kubernetes condition types.
10261
                  items:
10262
                    description: Condition contains details for one aspect of the current state of this API Resource.
10263
10264
                    properties:
                      lastTransitionTime:
10265
10266
10267
                        description: |-
                          lastTransitionTime is the last time the condition transitioned from one status to another.
                          This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
10268
                        format: date-time
10269
                        type: string
10270
                      message:
10271
10272
10273
                        description: |-
                          message is a human readable message indicating details about the transition.
                          This may be an empty string.
10274
                        maxLength: 32768
10275
                        type: string
10276
                      observedGeneration:
10277
10278
10279
10280
                        description: |-
                          observedGeneration represents the .metadata.generation that the condition was set based upon.
                          For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
                          with respect to the current state of the instance.
10281
10282
10283
10284
                        format: int64
                        minimum: 0
                        type: integer
                      reason:
10285
10286
10287
10288
10289
10290
                        description: |-
                          reason contains a programmatic identifier indicating the reason for the condition's last transition.
                          Producers of specific condition types may define expected values and meanings for this field,
                          and whether the values are considered a guaranteed API.
                          The value should be a CamelCase string.
                          This field may not be empty.
10291
10292
10293
                        maxLength: 1024
                        minLength: 1
                        pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
10294
                        type: string
10295
                      status:
10296
                        description: status of the condition, one of True, False, Unknown.
10297
10298
10299
10300
                        enum:
                          - "True"
                          - "False"
                          - Unknown
10301
                        type: string
10302
                      type:
10303
                        description: type of condition in CamelCase or in foo.example.com/CamelCase.
10304
10305
                        maxLength: 316
                        pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
10306
                        type: string
10307
10308
10309
10310
10311
10312
                    required:
                      - lastTransitionTime
                      - message
                      - reason
                      - status
                      - type
10313
                    type: object
10314
10315
10316
10317
                  type: array
                podSelector:
                  additionalProperties:
                    type: string
10318
10319
10320
                  description: |-
                    PodSelector contains the labels that can be used to select Pods belonging to
                    this component deployment.
10321
                  type: object
10322
10323
10324
10325
10326
10327
10328
10329
              required:
                - conditions
              type: object
          type: object
      served: true
      storage: true
      subresources:
        status: {}