mirror of https://github.com/alibaba/SREWorks.git
18660 lines
843 KiB
YAML
18660 lines
843 KiB
YAML
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/manager.yaml
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
labels:
|
|
control-plane: controller-manager
|
|
name: kruise-system
|
|
---
|
|
# Source: sreworks/templates/ext-namespace.yaml
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: sreworks-dataops
|
|
---
|
|
# Source: sreworks/templates/ext-namespace.yaml
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: sreworks-aiops
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kafka/templates/serviceaccount.yaml
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
name: sreworks-kafka
|
|
labels:
|
|
app.kubernetes.io/name: kafka
|
|
helm.sh/chart: kafka-14.0.3
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
app.kubernetes.io/component: kafka
|
|
automountServiceAccountToken: true
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/manager.yaml
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
name: kruise-manager
|
|
namespace: kruise-system
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/manager.yaml
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
name: kruise-daemon
|
|
namespace: kruise-system
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/minio/templates/serviceaccount.yaml
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
name: sreworks-minio
|
|
namespace: "sreworks"
|
|
labels:
|
|
app.kubernetes.io/name: minio
|
|
helm.sh/chart: minio-4.1.6
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
secrets:
|
|
- name: sreworks-minio
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/mysql/templates/serviceaccount.yaml
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
name: sreworks-mysql
|
|
namespace: sreworks
|
|
labels:
|
|
app.kubernetes.io/name: mysql
|
|
helm.sh/chart: mysql-8.2.3
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
annotations:
|
|
secrets:
|
|
- name: sreworks-mysql
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/openebs/templates/serviceaccount.yaml
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
name: sreworks-openebs
|
|
labels:
|
|
app: openebs
|
|
chart: openebs-3.1.0
|
|
release: sreworks
|
|
heritage: Helm
|
|
---
|
|
# Source: sreworks/charts/appmanager/templates/server-docker-secret.yaml
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: server-docker-secret
|
|
type: kubernetes.io/dockerconfigjson
|
|
data:
|
|
.dockerconfigjson: eyJhdXRocyI6eyJyZWdpc3RyeS5jbi16aGFuZ2ppYWtvdS5hbGl5dW5jcy5jb20iOnsiYXV0aCI6ImMzSmxkMjl5YTNNNmMzSmxkMjl5YTNORWIyTnJaWEl4TWpOeCJ9fX0=
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/manager.yaml
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: kruise-webhook-certs
|
|
namespace: kruise-system
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/minio/templates/secrets.yaml
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: sreworks-minio
|
|
namespace: "sreworks"
|
|
labels:
|
|
app.kubernetes.io/name: minio
|
|
helm.sh/chart: minio-4.1.6
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
type: Opaque
|
|
data:
|
|
access-key: "WG1penlUUktoZ1lUclZrSw=="
|
|
secret-key: "RGYyMjlndHdaNGJzc016SzIzVkpYcTl2ckdxcHhkSEE="
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/mysql/templates/secrets.yaml
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: sreworks-mysql
|
|
namespace: sreworks
|
|
labels:
|
|
app.kubernetes.io/name: mysql
|
|
helm.sh/chart: mysql-8.2.3
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
type: Opaque
|
|
data:
|
|
mysql-root-password: "Ykd1d3NBV1FNNks="
|
|
mysql-password: "ZHQ0b0JOeUVrNQ=="
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/redis/templates/secret.yaml
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: sreworks-redis
|
|
namespace: "sreworks"
|
|
labels:
|
|
app: redis
|
|
chart: redis-12.2.3
|
|
release: "sreworks"
|
|
heritage: "Helm"
|
|
type: Opaque
|
|
data:
|
|
redis-password: "c2lKRVVMbVFZUQ=="
|
|
---
|
|
# Source: sreworks/charts/appmanager/templates/server-configmap.yaml
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: sreworks-appmanager-server-configmap
|
|
data:
|
|
STORAGE_CLASS: "__STORAGE_CLASS__"
|
|
DB_HOST: "sreworks-mysql"
|
|
DB_PORT: "3306"
|
|
DB_USER: "root"
|
|
DB_PASSWORD: "bGuwsAWQM6K"
|
|
DB_NAME: "sreworks_appmanager"
|
|
APPMANAGER_DB_HOST: "sreworks-mysql"
|
|
APPMANAGER_DB_PORT: "3306"
|
|
APPMANAGER_DB_USER: "root"
|
|
APPMANAGER_DB_PASSWORD: "bGuwsAWQM6K"
|
|
APPMANAGER_DB_NAME: "sreworks_appmanager"
|
|
APPMANAGER_PACKAGE_DRIVER: "minio"
|
|
APPMANAGER_PACKAGE_ENDPOINT: "sreworks-minio:9000"
|
|
APPMANAGER_PACKAGE_ENDPOINT_PROTOCOL: "http://"
|
|
APPMANAGER_PACKAGE_ACCESS_KEY: "XmizyTRKhgYTrVkK"
|
|
APPMANAGER_PACKAGE_SECRET_KEY: "Df229gtwZ4bssMzK23VJXq9vrGqpxdHA"
|
|
APPMANAGER_PACKAGE_BUCKET_NAME: "abm-oxs-appmanager-daily"
|
|
APPMANAGER_DAG_BUCKET_NAME: "abm-oxs-appmanager-daily-dag"
|
|
APPMANAGER_REDIS_HOST: "sreworks-redis-master"
|
|
APPMANAGER_REDIS_PORT: "6379"
|
|
APPMANAGER_REDIS_DATABASE: "1"
|
|
APPMANAGER_REDIS_PASSWORD: "siJEULmQYQ"
|
|
APPMANAGER_ENV: "daily"
|
|
APPMANAGER_ROCKETMQ_NAMESRV_ENDPOINT: "sreworks-name-server-service:9876"
|
|
APPMANAGER_ACCESS_ID: "superuser"
|
|
APPMANAGER_ACCESS_SECRET: "yJfIYmjAiCL0ondV3kY7e5x6kVTpvC3h"
|
|
APPMANAGER_CLIENT_ID: "superclient"
|
|
APPMANAGER_CLIENT_SECRET: "stLCjCPKbWmki65DsAj2jPoeBLPimpJa"
|
|
APPMANAGER_JWT_SECRET_KEY: "3d8e06065426"
|
|
CLOUD_TYPE: "PaaS"
|
|
JVM_XMX: "512m"
|
|
DOCKER_HOST: "tcp://127.0.0.1:2375"
|
|
DOCKER_REGISTRY: "registry.cn-zhangjiakou.aliyuncs.com"
|
|
DOCKER_NAMESPACE: "builds"
|
|
REMOTE_DOCKER_DAEMON: "tcp://33.27.16.108:2375"
|
|
ENDPOINT_PAAS_APPMANAGER: sreworks-appmanager
|
|
ABM_CLUSTER: "DAILY"
|
|
COOKIE_DOMAIN: ""
|
|
HOME_URL: "__HOME_URL__"
|
|
NETWORK_PROTOCOL: "__HOME_URL__"
|
|
K8S_NAMESPACE: "sreworks"
|
|
KANIKO_IMAGE: "sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/kaniko-executor:latest"
|
|
ENABLE_KANIKO: "true"
|
|
K8S_DOCKER_SECRET: "server-docker-secret"
|
|
APPMANAGER_KAFKA_BROKERS: "sreworks-kafka"
|
|
APPMANAGER_KAFKA_DEFAULT_BROKER_PORT: "9092"
|
|
APPMANAGER_ENABLE_AUTH: "true"
|
|
ACCOUNT_SUPER_CLIENT_ID: "common"
|
|
ACCOUNT_SUPER_CLIENT_SECRET: "common-9efab2399c7c560b34de477b9aa0a465"
|
|
ACCOUNT_SUPER_ID: "admin"
|
|
ACCOUNT_SUPER_SECRET_KEY: "test-super-secret-key"
|
|
---
|
|
# Source: sreworks/charts/appmanager/templates/server-init-configmap.yaml
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: sreworks-appmanager-server-init-configmap
|
|
data:
|
|
DB_HOST: "sreworks-mysql"
|
|
DB_PORT: "3306"
|
|
DB_USER: "root"
|
|
DB_PASSWORD: "bGuwsAWQM6K"
|
|
DB_NAME: "sreworks_appmanager"
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kafka/templates/scripts-configmap.yaml
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: sreworks-kafka-scripts
|
|
labels:
|
|
app.kubernetes.io/name: kafka
|
|
helm.sh/chart: kafka-14.0.3
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
data:
|
|
setup.sh: |-
|
|
#!/bin/bash
|
|
|
|
ID="${MY_POD_NAME#"sreworks-kafka-"}"
|
|
if [[ -f "/bitnami/kafka/data/meta.properties" ]]; then
|
|
export KAFKA_CFG_BROKER_ID="$(grep "broker.id" /bitnami/kafka/data/meta.properties | awk -F '=' '{print $2}')"
|
|
else
|
|
export KAFKA_CFG_BROKER_ID="$((ID + 0))"
|
|
fi
|
|
|
|
exec /entrypoint.sh /run.sh
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/mysql/templates/primary/configmap.yaml
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: sreworks-mysql
|
|
namespace: sreworks
|
|
labels:
|
|
app.kubernetes.io/name: mysql
|
|
helm.sh/chart: mysql-8.2.3
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
app.kubernetes.io/component: primary
|
|
data:
|
|
my.cnf: |-
|
|
|
|
[mysqld]
|
|
default_authentication_plugin=mysql_native_password
|
|
skip-name-resolve
|
|
explicit_defaults_for_timestamp
|
|
basedir=/opt/bitnami/mysql
|
|
plugin_dir=/opt/bitnami/mysql/plugin
|
|
port=3306
|
|
socket=/opt/bitnami/mysql/tmp/mysql.sock
|
|
datadir=/bitnami/mysql/data
|
|
tmpdir=/opt/bitnami/mysql/tmp
|
|
max_allowed_packet=16M
|
|
bind-address=0.0.0.0
|
|
pid-file=/opt/bitnami/mysql/tmp/mysqld.pid
|
|
log-error=/opt/bitnami/mysql/logs/mysqld.log
|
|
character-set-server=UTF8
|
|
collation-server=utf8_general_ci
|
|
expire_logs_days=3
|
|
|
|
[client]
|
|
port=3306
|
|
socket=/opt/bitnami/mysql/tmp/mysql.sock
|
|
default-character-set=UTF8
|
|
plugin_dir=/opt/bitnami/mysql/plugin
|
|
|
|
[manager]
|
|
port=3306
|
|
socket=/opt/bitnami/mysql/tmp/mysql.sock
|
|
pid-file=/opt/bitnami/mysql/tmp/mysqld.pid
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/openebs/templates/ndm/cm-node-disk-manager.yaml
|
|
# This is the node-disk-manager related config.
|
|
# It can be used to customize the disks probes and filters
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: sreworks-openebs-ndm-config
|
|
labels:
|
|
app: openebs
|
|
chart: openebs-3.1.0
|
|
release: sreworks
|
|
heritage: Helm
|
|
component: ndm-config
|
|
openebs.io/component-name: ndm-config
|
|
data:
|
|
# udev-probe is default or primary probe which should be enabled to run ndm
|
|
# filterconfigs contains configs of filters - in the form of include
|
|
# and exclude comma separated strings
|
|
node-disk-manager.config: |
|
|
probeconfigs:
|
|
- key: udev-probe
|
|
name: udev probe
|
|
state: true
|
|
- key: seachest-probe
|
|
name: seachest probe
|
|
state: false
|
|
- key: smart-probe
|
|
name: smart probe
|
|
state: true
|
|
filterconfigs:
|
|
- key: os-disk-exclude-filter
|
|
name: os disk exclude filter
|
|
state: true
|
|
exclude: "/,/etc/hosts,/boot"
|
|
- key: vendor-filter
|
|
name: vendor filter
|
|
state: true
|
|
include: ""
|
|
exclude: "CLOUDBYT,OpenEBS"
|
|
- key: path-filter
|
|
name: path filter
|
|
state: true
|
|
include: ""
|
|
exclude: "/dev/loop,/dev/fd0,/dev/sr0,/dev/ram,/dev/dm-,/dev/md,/dev/rbd,/dev/zd"
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/redis/templates/configmap-scripts.yaml
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: sreworks-redis-scripts
|
|
namespace: "sreworks"
|
|
labels:
|
|
app: redis
|
|
chart: redis-12.2.3
|
|
heritage: Helm
|
|
release: sreworks
|
|
data:
|
|
start-master.sh: |
|
|
#!/bin/bash
|
|
useradd redis
|
|
chown -R redis /data
|
|
if [[ -n $REDIS_PASSWORD_FILE ]]; then
|
|
password_aux=`cat ${REDIS_PASSWORD_FILE}`
|
|
export REDIS_PASSWORD=$password_aux
|
|
fi
|
|
if [[ ! -f /opt/bitnami/redis/etc/master.conf ]];then
|
|
cp /opt/bitnami/redis/mounted-etc/master.conf /opt/bitnami/redis/etc/master.conf
|
|
fi
|
|
if [[ ! -f /opt/bitnami/redis/etc/redis.conf ]];then
|
|
cp /opt/bitnami/redis/mounted-etc/redis.conf /opt/bitnami/redis/etc/redis.conf
|
|
fi
|
|
ARGS=("--port" "${REDIS_PORT}")
|
|
ARGS+=("--requirepass" "${REDIS_PASSWORD}")
|
|
ARGS+=("--masterauth" "${REDIS_PASSWORD}")
|
|
ARGS+=("--include" "/opt/bitnami/redis/etc/redis.conf")
|
|
ARGS+=("--include" "/opt/bitnami/redis/etc/master.conf")
|
|
exec /run.sh "${ARGS[@]}"
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/redis/templates/configmap.yaml
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: sreworks-redis
|
|
namespace: "sreworks"
|
|
labels:
|
|
app: redis
|
|
chart: redis-12.2.3
|
|
heritage: Helm
|
|
release: sreworks
|
|
data:
|
|
redis.conf: |-
|
|
# User-supplied configuration:
|
|
# Enable AOF https://redis.io/topics/persistence#append-only-file
|
|
appendonly yes
|
|
# Disable RDB persistence, AOF persistence already enabled.
|
|
save ""
|
|
master.conf: |-
|
|
dir /data
|
|
rename-command FLUSHDB ""
|
|
replica.conf: |-
|
|
dir /data
|
|
slave-read-only yes
|
|
rename-command FLUSHDB ""
|
|
rename-command FLUSHALL ""
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/redis/templates/health-configmap.yaml
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: sreworks-redis-health
|
|
namespace: "sreworks"
|
|
labels:
|
|
app: redis
|
|
chart: redis-12.2.3
|
|
heritage: Helm
|
|
release: sreworks
|
|
data:
|
|
ping_readiness_local.sh: |-
|
|
#!/bin/bash
|
|
export REDISCLI_AUTH="$REDIS_PASSWORD"
|
|
response=$(
|
|
timeout -s 3 $1 \
|
|
redis-cli \
|
|
-h localhost \
|
|
-p $REDIS_PORT \
|
|
ping
|
|
)
|
|
if [ "$response" != "PONG" ]; then
|
|
echo "$response"
|
|
exit 1
|
|
fi
|
|
ping_liveness_local.sh: |-
|
|
#!/bin/bash
|
|
export REDISCLI_AUTH="$REDIS_PASSWORD"
|
|
response=$(
|
|
timeout -s 3 $1 \
|
|
redis-cli \
|
|
-h localhost \
|
|
-p $REDIS_PORT \
|
|
ping
|
|
)
|
|
if [ "$response" != "PONG" ] && [ "$response" != "LOADING Redis is loading the dataset in memory" ]; then
|
|
echo "$response"
|
|
exit 1
|
|
fi
|
|
ping_readiness_master.sh: |-
|
|
#!/bin/bash
|
|
export REDISCLI_AUTH="$REDIS_MASTER_PASSWORD"
|
|
response=$(
|
|
timeout -s 3 $1 \
|
|
redis-cli \
|
|
-h $REDIS_MASTER_HOST \
|
|
-p $REDIS_MASTER_PORT_NUMBER \
|
|
ping
|
|
)
|
|
if [ "$response" != "PONG" ]; then
|
|
echo "$response"
|
|
exit 1
|
|
fi
|
|
ping_liveness_master.sh: |-
|
|
#!/bin/bash
|
|
export REDISCLI_AUTH="$REDIS_MASTER_PASSWORD"
|
|
response=$(
|
|
timeout -s 3 $1 \
|
|
redis-cli \
|
|
-h $REDIS_MASTER_HOST \
|
|
-p $REDIS_MASTER_PORT_NUMBER \
|
|
ping
|
|
)
|
|
if [ "$response" != "PONG" ] && [ "$response" != "LOADING Redis is loading the dataset in memory" ]; then
|
|
echo "$response"
|
|
exit 1
|
|
fi
|
|
ping_readiness_local_and_master.sh: |-
|
|
script_dir="$(dirname "$0")"
|
|
exit_status=0
|
|
"$script_dir/ping_readiness_local.sh" $1 || exit_status=$?
|
|
"$script_dir/ping_readiness_master.sh" $1 || exit_status=$?
|
|
exit $exit_status
|
|
ping_liveness_local_and_master.sh: |-
|
|
script_dir="$(dirname "$0")"
|
|
exit_status=0
|
|
"$script_dir/ping_liveness_local.sh" $1 || exit_status=$?
|
|
"$script_dir/ping_liveness_master.sh" $1 || exit_status=$?
|
|
exit $exit_status
|
|
---
|
|
# Source: sreworks/templates/init-build.yaml
|
|
apiVersion: v1
|
|
data:
|
|
core.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
sleep 999999999
|
|
|
|
saas-cluster.sh: |
|
|
|
|
|
|
set -e
|
|
set -x
|
|
|
|
envsubst < /root/saas/cluster/api/build.yaml.tpl > /root/saas/cluster/api/build.yaml
|
|
touch /root/saas/cluster/build.yaml
|
|
echo "" > /root/saas/cluster/build.yaml
|
|
cat /root/saas/cluster/ui/build.yaml >> /root/saas/cluster/build.yaml
|
|
echo "---" >> /root/saas/cluster/build.yaml
|
|
cat /root/saas/cluster/api/build.yaml >> /root/saas/cluster/build.yaml
|
|
cd /root/saas/cluster/
|
|
res=$(/root/swcli --config /swcli/swcli.yaml app-package build --app-id=cluster --tags="release=sreworks/x86_64" -j -d)
|
|
|
|
package_name=$(echo $res | python -c 'import sys;import json;print(json.loads(sys.stdin.read())["packageVersion"])')
|
|
/root/mc alias set sw http://${ENDPOINT_PAAS_MINIO} ${MINIO_ACCESS_KEY} ${MINIO_SECRET_KEY}
|
|
|
|
/root/mc share download sw/abm-oxs-appmanager-daily/apps/cluster/${package_name}.zip|grep 'Share'|awk '{print $2}'
|
|
|
|
|
|
saas-app.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sleep 999999999
|
|
|
|
|
|
saas-system.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sleep 999999999
|
|
|
|
reduce.py: |
|
|
import sys
|
|
import yaml
|
|
import json
|
|
|
|
def merge(a, b):
|
|
if b is None:
|
|
return a
|
|
if a is None:
|
|
return b
|
|
parameterValues = [x["name"] for x in a.get("spec").get("parameterValues")]
|
|
for p in b.get("spec").get("parameterValues"):
|
|
if p["name"] in parameterValues: continue
|
|
if p["name"] == "COMPONENT_NAME": continue
|
|
a["spec"]["parameterValues"].append(p)
|
|
a["spec"]["components"] += b["spec"]["components"]
|
|
return a
|
|
|
|
res = reduce(merge, [yaml.safe_load(raw) for raw in sys.stdin.read().strip().split("---")])
|
|
print(yaml.dump(res))
|
|
|
|
saas-dataops.sh: |
|
|
set -e
|
|
set -x
|
|
|
|
sleep 9999999999999999
|
|
|
|
saas-team.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sleep 9999999999999
|
|
|
|
saas-aiops.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sleep 9999999999999
|
|
|
|
|
|
|
|
saas-job.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sleep 9999999999999
|
|
|
|
|
|
saas-healing.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sleep 9999999999999
|
|
|
|
|
|
|
|
saas-health.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sleep 9999999999999
|
|
|
|
|
|
saas-ocenter.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sleep 9999999999999
|
|
|
|
saas-help.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sleep 9999999999999
|
|
|
|
|
|
saas-search.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sleep 9999999999999
|
|
|
|
|
|
saas-sleep.sh: |
|
|
sleep 999999999999
|
|
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: init-build
|
|
---
|
|
# Source: sreworks/templates/init-configmap.yaml
|
|
apiVersion: v1
|
|
data:
|
|
|
|
IMAGE_PUSH_REGISTRY: registry.cn-zhangjiakou.aliyuncs.com/builds
|
|
|
|
|
|
APK_REPO_DOMAIN: mirrors.tuna.tsinghua.edu.cn
|
|
MAVEN_IMAGE: sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/maven:3.8.3-adoptopenjdk-11
|
|
JRE8_IMAGE: sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/openjdk8:alpine-jre
|
|
JRE11_IMAGE: sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/openjdk:11.0.10-jre
|
|
MAVEN_SETTINGS_XML: https://sreworks.oss-cn-beijing.aliyuncs.com/resource/settings.xml
|
|
NODE_IMAGE: sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/node:14.20.0-alpine3.15
|
|
NODE_IMAGE2: sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/node:16.17-alpine
|
|
ALPINE_IMAGE: sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/alpine:latest
|
|
MIGRATE_IMAGE: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/sw-migrate:v1.2
|
|
POSTRUN_IMAGE: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/sw-postrun:v1.2
|
|
NPM_REGISTRY_URL: https://registry.npmmirror.com
|
|
JRE11_ALPINE_IMAGE: sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/openjdk11:alpine-jre
|
|
PYTHON_PIP: http://mirrors.aliyun.com/pypi/simple
|
|
PYTHON_PIP_DOMAIN: "mirrors.aliyun.com"
|
|
MINIO_CLIENT_URL: https://sreworks.oss-cn-beijing.aliyuncs.com/bin/mc-linux-amd64
|
|
PYTHON3_IMAGE: sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/python:3.9.12-alpine
|
|
BENTOML_IMAGE: sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/bentoml-model-server:0.13.1-py37
|
|
|
|
LOGSTASH_IMAGE: "sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/logstash"
|
|
LOGSTASH_IMAGE_TAG: "7.10.2"
|
|
GRAFANA_IMAGE: "sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/grafana"
|
|
GRAFANA_IMAGE_TAG: "7.5.3"
|
|
KIBANA_IMAGE: "sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/kibana"
|
|
KIBANA_IMAGE_TAG: "7.10.2"
|
|
ELASTICSEARCH_IMAGE: "sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/elasticsearch"
|
|
ELASTICSEARCH_IMAGE_TAG: "7.10.2-with-plugins"
|
|
ELASTICSEARCH_IMAGE: "sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/elasticsearch"
|
|
ELASTICSEARCH_IMAGE_TAG: "7.10.2-with-plugins"
|
|
SKYWALKING_OAP_IMAGE: "sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/skywalking-oap-server-utc-8"
|
|
SKYWALKING_OAP_IMAGE_TAG: "8.5.0-es7"
|
|
SKYWALKING_UI_IMAGE: "sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/skywalking-ui"
|
|
SKYWALKING_UI_IMAGE_TAG: "8.5.0"
|
|
BUSYBOX_IMAGE: "sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/busybox"
|
|
BUSYBOX_IMAGE_TAG: "1.30"
|
|
|
|
VVP_REPO: "sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror"
|
|
VVP_APPMANAGER_REPO: "vvp-appmanager"
|
|
VVP_APPMANAGER_IMAGE_TAG: "2.6.1"
|
|
VVP_UI_REPO: "vvp-ui"
|
|
VVP_UI_IMAGE_TAG: "2.6.1"
|
|
VVP_GATEWAY_REPO: "vvp-gateway"
|
|
VVP_GATEWAY_IMAGE_TAG: "2.6.1"
|
|
METRICBEAT_IMAGE: "sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/metricbeat"
|
|
METRICBEAT_IMAGE_TAG: "7.10.2"
|
|
FILEBEAT_IMAGE: "sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/filebeat"
|
|
FILEBEAT_IMAGE_TAG: "7.10.2"
|
|
MYSQL_REGISTRY: "sreworks-registry.cn-beijing.cr.aliyuncs.com"
|
|
MYSQL_REPO: "mirror/mysql"
|
|
MYSQL_IMAGE_TAG: "8.0.22-debian-10-r44"
|
|
|
|
SOURCE_BRANCH: "v1.2"
|
|
SOURCE_REPO: https://code.aliyun.com/sreworks_public/mirror.git
|
|
SOURCE_CI_ACCOUNT: ""
|
|
SOURCE_CI_TOKEN: ""
|
|
|
|
ZOOKEEPER_ENDPOINT: sreworks-zookeeper
|
|
ENDPOINT_PAAS_MINIO: "sreworks-minio.sreworks:9000"
|
|
APPMANAGER_ENDPOINT: sreworks-appmanager
|
|
KAFKA_ENDPOINT: sreworks-kafka.sreworks
|
|
AUTHPROXY_ENDPOINT: prod-flycore-paas-authproxy
|
|
REDIS_ENDPOINT: sreworks-redis-master.sreworks
|
|
REDIS_PASSWORD: "siJEULmQYQ"
|
|
|
|
APPMANAGER_USERNAME: superuser
|
|
APPMANAGER_PASSWORD: yJfIYmjAiCL0ondV3kY7e5x6kVTpvC3h
|
|
APPMANAGER_CLIENT_ID: superclient
|
|
APPMANAGER_CLIENT_SECRET: stLCjCPKbWmki65DsAj2jPoeBLPimpJa
|
|
|
|
MINIO_ACCESS_KEY: XmizyTRKhgYTrVkK
|
|
MINIO_SECRET_KEY: Df229gtwZ4bssMzK23VJXq9vrGqpxdHA
|
|
GLOBAL_STORAGE_CLASS: "__STORAGE_CLASS__"
|
|
|
|
ACCESS_MODE: __ACCESS_MODE__
|
|
NODE_PORT: ""
|
|
#APPMANAGER_SERVICE: sreworks-appmanager
|
|
CORE_STAGE_ID: prod
|
|
CORE_APP_ID: flycore
|
|
|
|
SAAS_STAGE_ID: prod
|
|
|
|
PLATFORM_NAME: SREWorks
|
|
PLATFORM_LOGO: /static/publicMedia/sreworks.png
|
|
|
|
NAMESPACE_DATAOPS: sreworks-dataops
|
|
NAMESPACE_AIOPS: sreworks-aiops
|
|
|
|
IMPORT_FRONTEND: "true"
|
|
IMAGE_BUILD_ENABLE: "false"
|
|
|
|
DATAOPS_DB_HOST: "prod-dataops-mysql.sreworks-dataops"
|
|
DATAOPS_DB_PASSWORD: "cb56b5is5e21_c359b42223"
|
|
DATAOPS_DB_PORT: "3306"
|
|
DATAOPS_DB_USER: "root"
|
|
GRAFANA_ADMIN_PASSWORD: "sreworks123456"
|
|
DATA_ES_HOST: "prod-dataops-elasticsearch-master.sreworks-dataops"
|
|
DATA_ES_PORT: "9200"
|
|
DATA_ES_USER: "elastic"
|
|
DATA_ES_PASSWORD: "sreworkses123."
|
|
|
|
DATA_PROM_HOST: "localhost"
|
|
DATA_PROM_PORT: "80"
|
|
|
|
ACCOUNT_SUPER_CLIENT_ID: common
|
|
ACCOUNT_SUPER_CLIENT_SECRET: common-9efab2399c7c560b34de477b9aa0a465
|
|
ACCOUNT_SUPER_ID: admin
|
|
ACCOUNT_SUPER_SECRET_KEY: test-super-secret-key
|
|
|
|
HOME_BUILD: "false"
|
|
ONLY_BASE: "false"
|
|
|
|
ADMIN_INIT_PASSWORD: "12345678"
|
|
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: init-configmap
|
|
---
|
|
# Source: sreworks/templates/init-run.yaml
|
|
apiVersion: v1
|
|
data:
|
|
core.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
cat /swcli/swcli.yaml
|
|
|
|
#cd /root
|
|
|
|
#if [ ! -d sreworks-flycore ]; then
|
|
# mkdir sreworks-flycore
|
|
#fi
|
|
#cd sreworks-flycore
|
|
|
|
cd /root/saas/swcore/api/core/
|
|
|
|
|
|
if [[ "$IMAGE_BUILD_ENABLE" == "true" ]] ; then
|
|
|
|
# build&launch paas
|
|
export NAMESPACE_ID=$(cat /run/secrets/kubernetes.io/serviceaccount/namespace)
|
|
envsubst < /root/saas/swcore/api/core/build.yaml.tpl > build.yaml
|
|
|
|
if [[ "$ACCESS_MODE" == "ingress" ]] ; then
|
|
envsubst < /root/saas/swcore/api/core/launch.yaml.tpl > launch.yaml
|
|
else
|
|
envsubst < /root/saas/swcore/api/core/launch-nodeport.yaml.tpl > launch.yaml
|
|
fi
|
|
|
|
cat build.yaml
|
|
cat launch.yaml
|
|
/root/swcli --config /swcli/swcli.yaml app-package oneflow --app-id=${CORE_APP_ID} --stage=prod --namespace=${NAMESPACE_ID} --tags="release=sreworks/x86_64" --arch=x86 --cluster=master --path=./launch.yaml --disable-dir-check
|
|
|
|
else
|
|
|
|
export NAMESPACE_ID=$(cat /run/secrets/kubernetes.io/serviceaccount/namespace)
|
|
|
|
if [[ "$ACCESS_MODE" == "ingress" ]] ; then
|
|
envsubst < /root/saas/swcore/api/core/launch.yaml.tpl > /root/saas/swcore/launch.yaml
|
|
else
|
|
envsubst < /root/saas/swcore/api/core/launch-nodeport.yaml.tpl > /root/saas/swcore/launch.yaml
|
|
fi
|
|
|
|
result=$(/root/swcli --config /swcli/swcli.yaml app-package import --app-id=${CORE_APP_ID} --filepath /root/saas/swcore/flycore.zip --print-only-app-package-id=true --reset-version=true)
|
|
/root/swcli --config /swcli/swcli.yaml deployment launch --app-id=${CORE_APP_ID} --stage=prod --namespace=${NAMESPACE_ID} --path /root/saas/swcore/launch.yaml --app-package-id $result --arch x86 --wait=true --cluster master
|
|
|
|
fi
|
|
|
|
|
|
if [[ "$IMPORT_FRONTEND" == "true" ]] ; then
|
|
|
|
sh /app/core-action-service-check.sh
|
|
|
|
# import&launch saas desktop
|
|
envsubst < /root/saas/desktop/build/launch-frontend.yaml.tpl > /root/saas/desktop/launch-frontend.yaml
|
|
envsubst < /root/saas/desktop/build/launch-frontend-dev.yaml.tpl > /root/saas/desktop/launch-frontend-dev.yaml
|
|
|
|
if [[ "$ONLY_BASE" == "true" ]] ; then
|
|
sed -i 's/searchConfig\\":true/searchConfig\\":false/g' saas/desktop/build/INTERNAL_ADDON_productopsv2.zip.dir/content.json
|
|
fi
|
|
|
|
python /app/pack.py --src /root/saas/desktop/build --dest /root/saas/desktop/build.zip
|
|
|
|
sh /app/import.sh desktop /root/saas/desktop/build.zip /root/saas/desktop/launch-frontend.yaml /root/saas/desktop/launch-frontend-dev.yaml
|
|
|
|
# import&launch saas swadmin
|
|
python /app/pack.py --src /root/saas/swadmin/build --dest /root/saas/swadmin/build.zip
|
|
envsubst < /root/saas/swadmin/build/launch-frontend.yaml.tpl > /root/saas/swadmin/launch-frontend.yaml
|
|
envsubst < /root/saas/swadmin/build/launch-frontend-dev.yaml.tpl > /root/saas/swadmin/launch-frontend-dev.yaml
|
|
|
|
sh /app/import.sh swadmin /root/saas/swadmin/build.zip /root/saas/swadmin/launch-frontend.yaml /root/saas/swadmin/launch-frontend-dev.yaml
|
|
|
|
# import&launch saas template
|
|
python /app/pack.py --src /root/saas/template/build --dest /root/saas/template/build.zip
|
|
envsubst < /root/saas/template/build/launch-frontend.yaml.tpl > /root/saas/template/launch-frontend.yaml
|
|
envsubst < /root/saas/template/build/launch-frontend-dev.yaml.tpl > /root/saas/template/launch-frontend-dev.yaml
|
|
|
|
sh /app/import.sh template /root/saas/template/build.zip /root/saas/template/launch-frontend.yaml /root/saas/template/launch-frontend-dev.yaml
|
|
|
|
|
|
fi
|
|
|
|
|
|
core-deploy-check.sh: |
|
|
while true
|
|
do
|
|
CORE=$(/root/swcli --config /swcli/swcli.yaml deployment list --app-id=${CORE_APP_ID} --page=1 --page-size=1 -j|awk -F 'deployStatus":"' '{print $2}'|awk -F '"' '{print $1}')
|
|
if [[ "$CORE" == "SUCCESS" ]] ; then
|
|
echo "check flycore deploy success!"
|
|
break
|
|
else
|
|
echo "wait flycore deploy, current: "$CORE
|
|
sleep 5
|
|
fi
|
|
done
|
|
|
|
core-action-service-check.sh: |
|
|
while true
|
|
do
|
|
curl prod-flycore-paas-action
|
|
if [[ "$?" == "0" ]]; then
|
|
echo "action service is ok"
|
|
break
|
|
else
|
|
echo "wait action service ready"
|
|
sleep 5
|
|
fi
|
|
done
|
|
|
|
saas-cluster.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
cd /root
|
|
|
|
sh /app/core-deploy-check.sh
|
|
|
|
# build&launch cluster api
|
|
export NAMESPACE_ID=$(cat /run/secrets/kubernetes.io/serviceaccount/namespace)
|
|
envsubst < /root/saas/cluster/api/build.yaml.tpl > /root/saas/cluster/api/build.yaml
|
|
envsubst < /root/saas/cluster/build/launch.yaml.tpl > /root/saas/cluster/launch.yaml
|
|
envsubst < /root/saas/cluster/build/launch-backend.yaml.tpl > /root/saas/cluster/launch-backend.yaml
|
|
envsubst < /root/saas/cluster/build/launch-frontend.yaml.tpl > /root/saas/cluster/launch-frontend.yaml
|
|
envsubst < /root/saas/cluster/build/launch-frontend-dev.yaml.tpl > /root/saas/cluster/launch-frontend-dev.yaml
|
|
python /app/pack.py --src /root/saas/cluster/build --dest /root/saas/cluster/build.zip
|
|
|
|
|
|
if [[ "$IMAGE_BUILD_ENABLE" == "true" ]] ; then
|
|
|
|
cd /root/saas/cluster/api/
|
|
/root/swcli --config /swcli/swcli.yaml app-package oneflow --app-id=cluster --stage=prod --namespace=${NAMESPACE_ID} --tags="release=sreworks/x86_64" --arch=x86 --cluster=master --path=../launch-backend.yaml --disable-dir-check
|
|
|
|
# wait flycore
|
|
if [[ "$IMPORT_FRONTEND" == "true" ]] ; then
|
|
|
|
sh /app/import.sh cluster /root/saas/cluster/build.zip /root/saas/cluster/launch-frontend.yaml /root/saas/cluster/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
|
|
else
|
|
|
|
sh /app/import.sh cluster /root/saas/cluster/build.zip /root/saas/cluster/launch.yaml /root/saas/cluster/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
|
|
saas-app.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sh /app/core-deploy-check.sh
|
|
|
|
cd /root
|
|
|
|
export NAMESPACE_ID=$(cat /run/secrets/kubernetes.io/serviceaccount/namespace)
|
|
envsubst < /root/saas/app/api/build.yaml.tpl > /root/saas/app/api/build.yaml
|
|
envsubst < /root/saas/app/build/launch.yaml.tpl > /root/saas/app/launch.yaml
|
|
envsubst < /root/saas/app/build/launch-backend.yaml.tpl > /root/saas/app/launch-backend.yaml
|
|
envsubst < /root/saas/app/build/launch-frontend.yaml.tpl > /root/saas/app/launch-frontend.yaml
|
|
envsubst < /root/saas/app/build/launch-frontend-dev.yaml.tpl > /root/saas/app/launch-frontend-dev.yaml
|
|
python /app/pack.py --src /root/saas/app/build --dest /root/saas/app/build.zip
|
|
|
|
|
|
if [[ "$IMAGE_BUILD_ENABLE" == "true" ]] ; then
|
|
|
|
cd /root/saas/app/api/
|
|
/root/swcli --config /swcli/swcli.yaml app-package oneflow --app-id=app --stage=prod --namespace=${NAMESPACE_ID} --tags="release=sreworks/x86_64" --arch=x86 --cluster=master --path=../launch-backend.yaml --disable-dir-check
|
|
|
|
if [[ "$IMPORT_FRONTEND" == "true" ]] ; then
|
|
|
|
sh /app/import.sh app /root/saas/app/build.zip /root/saas/app/launch-frontend.yaml /root/saas/app/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
|
|
else
|
|
|
|
sh /app/import.sh app /root/saas/app/build.zip /root/saas/app/launch.yaml /root/saas/app/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
|
|
saas-system.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sh /app/core-deploy-check.sh
|
|
|
|
cd /root
|
|
export NAMESPACE_ID=$(cat /run/secrets/kubernetes.io/serviceaccount/namespace)
|
|
|
|
export NAMESPACE_ID=$(cat /run/secrets/kubernetes.io/serviceaccount/namespace)
|
|
envsubst < /root/saas/system/api/build.yaml.tpl > /root/saas/system/api/build.yaml
|
|
envsubst < /root/saas/system/build/launch.yaml.tpl > /root/saas/system/launch.yaml
|
|
envsubst < /root/saas/system/build/launch-backend.yaml.tpl > /root/saas/system/launch-backend.yaml
|
|
envsubst < /root/saas/system/build/launch-frontend.yaml.tpl > /root/saas/system/launch-frontend.yaml
|
|
envsubst < /root/saas/system/build/launch-frontend-dev.yaml.tpl > /root/saas/system/launch-frontend-dev.yaml
|
|
python /app/pack.py --src /root/saas/system/build --dest /root/saas/system/build.zip
|
|
|
|
if [[ "$IMAGE_BUILD_ENABLE" == "true" ]] ; then
|
|
|
|
cd /root/saas/system/api/
|
|
/root/swcli --config /swcli/swcli.yaml app-package oneflow --app-id=system --stage=prod --namespace=${NAMESPACE_ID} --tags="release=sreworks/x86_64" --arch=x86 --cluster=master --path=../launch-backend.yaml --disable-dir-check
|
|
|
|
if [[ "$IMPORT_FRONTEND" == "true" ]] ; then
|
|
|
|
sh /app/import.sh system /root/saas/system/build.zip /root/saas/system/launch-frontend.yaml /root/saas/system/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
|
|
else
|
|
|
|
sh /app/import.sh system /root/saas/system/build.zip /root/saas/system/launch.yaml /root/saas/system/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
|
|
|
|
saas-upload.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sh /app/core-deploy-check.sh
|
|
|
|
cd /root
|
|
export NAMESPACE_ID=$(cat /run/secrets/kubernetes.io/serviceaccount/namespace)
|
|
envsubst < /root/saas/upload/api/build.yaml.tpl > /root/saas/upload/api/build.yaml
|
|
envsubst < /root/saas/upload/build/launch.yaml.tpl > /root/saas/upload/launch.yaml
|
|
envsubst < /root/saas/upload/build/launch-backend.yaml.tpl > /root/saas/upload/launch-backend.yaml
|
|
envsubst < /root/saas/upload/build/launch-frontend.yaml.tpl > /root/saas/upload/launch-frontend.yaml
|
|
envsubst < /root/saas/upload/build/launch-frontend-dev.yaml.tpl > /root/saas/upload/launch-frontend-dev.yaml
|
|
python /app/pack.py --src /root/saas/upload/build --dest /root/saas/upload/build.zip
|
|
|
|
if [[ "$IMAGE_BUILD_ENABLE" == "true" ]] ; then
|
|
|
|
cd /root/saas/upload/api/
|
|
/root/swcli --config /swcli/swcli.yaml app-package oneflow --app-id=upload --stage=prod --namespace=${NAMESPACE_ID} --tags="release=sreworks/x86_64" --arch=x86 --cluster=master --path=../launch-backend.yaml --disable-dir-check
|
|
|
|
if [[ "$IMPORT_FRONTEND" == "true" ]] ; then
|
|
|
|
sh /app/import.sh upload /root/saas/upload/build.zip /root/saas/upload/launch-frontend.yaml /root/saas/upload/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
|
|
else
|
|
|
|
sh /app/import.sh upload /root/saas/upload/build.zip /root/saas/upload/launch.yaml /root/saas/upload/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
|
|
|
|
import.sh: |
|
|
|
|
sh /app/core-action-service-check.sh
|
|
|
|
result=$(/root/swcli --config /swcli/swcli.yaml app-package import --app-id $1 --filepath $2 --print-only-app-package-id=true --reset-version=true)
|
|
|
|
/root/swcli --config /swcli/swcli.yaml deployment launch --namespace ${NAMESPACE_ID} --stage prod --app-id $1 --path $3 --app-package-id $result --arch x86 --wait=true --cluster master
|
|
/root/swcli --config /swcli/swcli.yaml deployment launch --namespace ${NAMESPACE_ID} --stage dev --app-id $1 --path $4 --app-package-id $result --arch x86 --wait=true --cluster master
|
|
|
|
|
|
reduce.py: |
|
|
import sys
|
|
import yaml
|
|
import json
|
|
from functools import reduce
|
|
|
|
def merge(a, b):
|
|
if b is None:
|
|
return a
|
|
if a is None:
|
|
return b
|
|
parameterValues = [x["name"] for x in a.get("spec").get("parameterValues")]
|
|
for p in b.get("spec",{}).get("parameterValues",[]):
|
|
if p["name"] in parameterValues: continue
|
|
if p["name"] == "COMPONENT_NAME": continue
|
|
a["spec"]["parameterValues"].append(p)
|
|
a["spec"]["components"] += b["spec"]["components"]
|
|
return a
|
|
|
|
res = reduce(merge, [yaml.safe_load(raw) for raw in sys.stdin.read().strip().split("---")])
|
|
print(yaml.dump(res))
|
|
|
|
pack.py: |
|
|
import shutil
|
|
import tempfile
|
|
import os
|
|
import argparse
|
|
|
|
parser = argparse.ArgumentParser(description='package tool')
|
|
parser.add_argument("-s",'--src', type=str, dest="src", required=True)
|
|
parser.add_argument("-d",'--dest', type=str, dest="dest", required=True)
|
|
args = parser.parse_args()
|
|
|
|
packagePath = tempfile.mkdtemp()
|
|
targetPath = packagePath + "/target"
|
|
|
|
shutil.copytree(args.src, targetPath)
|
|
|
|
for path in os.listdir(targetPath):
|
|
if path.endswith(".zip.dir"):
|
|
shutil.make_archive(targetPath + "/" + path.split(".zip")[0], 'zip', targetPath + "/" + path)
|
|
shutil.rmtree(targetPath + "/" + path)
|
|
|
|
|
|
shutil.make_archive(args.dest.split(".zip")[0], 'zip', targetPath + "/")
|
|
|
|
|
|
saas-dataops.sh: |
|
|
set -e
|
|
set -x
|
|
|
|
sh /app/core-deploy-check.sh
|
|
|
|
cd /root
|
|
export NAMESPACE_ID=${NAMESPACE_DATAOPS}
|
|
export NODE_NAME='$''{''NODE_NAME''}'
|
|
export NODE_IP='$''{''NODE_IP''}'
|
|
|
|
echo "" > tmp-merge-build.yaml
|
|
echo "" > tmp-merge-launch.yaml
|
|
|
|
split(){
|
|
cat tmp-build.yaml >> tmp-merge-build.yaml
|
|
cat tmp-launch.yaml >> tmp-merge-launch.yaml
|
|
echo "---" >> tmp-merge-build.yaml
|
|
echo "---" >> tmp-merge-launch.yaml
|
|
}
|
|
|
|
|
|
# mysql地址如果从外部传入就不拉起mysql
|
|
if [[ "$DATAOPS_DB_HOST" == "prod-dataops-mysql.sreworks-dataops" ]]
|
|
then
|
|
envsubst < /root/saas/dataops/api/mysql/build.yaml.tpl > tmp-build.yaml
|
|
envsubst < /root/saas/dataops/api/mysql/launch.yaml.tpl > tmp-launch.yaml
|
|
split
|
|
fi
|
|
|
|
if [[ "$DATA_ES_HOST" == "prod-dataops-elasticsearch-master.sreworks-dataops" ]]
|
|
then
|
|
envsubst < /root/saas/dataops/api/elasticsearch/build.yaml.tpl > tmp-build.yaml
|
|
envsubst < /root/saas/dataops/api/elasticsearch/launch.yaml.tpl > tmp-launch.yaml
|
|
split
|
|
fi
|
|
|
|
|
|
envsubst < /root/saas/dataops/api/grafana/build.yaml.tpl > tmp-build.yaml
|
|
envsubst < /root/saas/dataops/api/grafana/launch.yaml.tpl > tmp-launch.yaml
|
|
split
|
|
|
|
envsubst < /root/saas/dataops/api/kibana/build.yaml.tpl > tmp-build.yaml
|
|
envsubst < /root/saas/dataops/api/kibana/launch.yaml.tpl > tmp-launch.yaml
|
|
split
|
|
|
|
envsubst < /root/saas/dataops/api/metricbeat/build.yaml.tpl > tmp-build.yaml
|
|
envsubst < /root/saas/dataops/api/metricbeat/launch.yaml.tpl > tmp-launch.yaml
|
|
split
|
|
|
|
envsubst < /root/saas/dataops/api/filebeat/build.yaml.tpl > tmp-build.yaml
|
|
envsubst < /root/saas/dataops/api/filebeat/launch.yaml.tpl > tmp-launch.yaml
|
|
split
|
|
|
|
envsubst < /root/saas/dataops/api/skywalking/build.yaml.tpl > tmp-build.yaml
|
|
envsubst < /root/saas/dataops/api/skywalking/launch.yaml.tpl > tmp-launch.yaml
|
|
split
|
|
|
|
envsubst < /root/saas/dataops/api/prometheus/build.yaml.tpl > tmp-build.yaml
|
|
envsubst < /root/saas/dataops/api/prometheus/launch.yaml.tpl > tmp-launch.yaml
|
|
split
|
|
|
|
#envsubst < /root/saas/dataops/api/mongodb/build.yaml.tpl > tmp-build.yaml
|
|
#envsubst < /root/saas/dataops/api/mongodb/launch.yaml.tpl > tmp-launch.yaml
|
|
#split
|
|
|
|
envsubst < /root/saas/dataops/api/ververica-platform/build.yaml.tpl > tmp-build.yaml
|
|
envsubst < /root/saas/dataops/api/ververica-platform/launch.yaml.tpl > tmp-launch.yaml
|
|
split
|
|
|
|
envsubst < /root/saas/dataops/api/logstash/build.yaml.tpl > tmp-build.yaml
|
|
envsubst < /root/saas/dataops/api/logstash/launch.yaml.tpl > tmp-launch.yaml
|
|
split
|
|
|
|
envsubst < /root/saas/dataops/api/build.yaml.tpl > tmp-build.yaml
|
|
envsubst < /root/saas/dataops/api/launch.yaml.tpl > tmp-launch.yaml
|
|
split
|
|
|
|
cat tmp-merge-build.yaml | python -c 'import sys;print("\n---\n".join([raw.strip() for raw in sys.stdin.read().strip().split("---") if raw.strip()]))' > merge-build.yaml
|
|
cat tmp-merge-launch.yaml | python /app/reduce.py > merge-launch.yaml
|
|
|
|
mv merge-build.yaml build.yaml
|
|
|
|
envsubst < /root/saas/dataops/ui/data/launch-v2.yaml.tpl > /root/saas/dataops/ui/data/launch.yaml
|
|
envsubst < /root/saas/dataops/ui/data/launch-v2-dev.yaml.tpl > /root/saas/dataops/ui/data/launch-dev.yaml
|
|
|
|
if [[ "$IMAGE_BUILD_ENABLE" == "true" ]] ; then
|
|
/root/swcli --config /swcli/swcli.yaml app-package oneflow --stage=prod --app-id=dataops --namespace=${NAMESPACE_ID} --tags="release=sreworks/x86_64" --arch=x86 --cluster=master --path=./merge-launch.yaml --disable-dir-check
|
|
|
|
if [[ "$IMPORT_FRONTEND" == "true" ]] ; then
|
|
|
|
result=$(/root/swcli --config /swcli/swcli.yaml app-package import --app-id dataops --filepath /root/saas/dataops/ui/data/data-auto.zip --print-only-app-package-id=true --reset-version=true)
|
|
|
|
/root/swcli --config /swcli/swcli.yaml deployment launch --namespace ${NAMESPACE_ID} --stage prod --app-id dataops --path /root/saas/dataops/ui/data/launch.yaml --app-package-id $result --arch x86 --wait=true --cluster master
|
|
/root/swcli --config /swcli/swcli.yaml deployment launch --namespace ${NAMESPACE_ID} --stage dev --app-id dataops --path /root/saas/dataops/ui/data/launch-dev.yaml --app-package-id $result --arch x86 --wait=true --cluster master
|
|
fi
|
|
else
|
|
cd /root/saas/dataops/
|
|
|
|
sh /app/core-action-service-check.sh
|
|
|
|
echo "" > merge-launch.yaml
|
|
cat /root/merge-launch.yaml >> merge-launch.yaml
|
|
echo "---" >> merge-launch.yaml
|
|
cat /root/saas/dataops/ui/data/launch.yaml >> merge-launch.yaml
|
|
cat merge-launch.yaml | python /app/reduce.py > launch.yaml
|
|
|
|
result=$(/root/swcli --config /swcli/swcli.yaml app-package import --app-id dataops --filepath /root/saas/dataops/data.zip --print-only-app-package-id=true --reset-version=true)
|
|
|
|
/root/swcli --config /swcli/swcli.yaml deployment launch --namespace ${NAMESPACE_ID} --stage prod --app-id dataops --path /root/saas/dataops/launch.yaml --app-package-id $result --arch x86 --wait=true --cluster master
|
|
/root/swcli --config /swcli/swcli.yaml deployment launch --namespace ${NAMESPACE_ID} --stage dev --app-id dataops --path /root/saas/dataops/ui/data/launch-dev.yaml --app-package-id $result --arch x86 --wait=true --cluster master
|
|
|
|
fi
|
|
|
|
saas-team.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sh /app/core-deploy-check.sh
|
|
|
|
cd /root
|
|
|
|
export NAMESPACE_ID=$(cat /run/secrets/kubernetes.io/serviceaccount/namespace)
|
|
envsubst < /root/saas/team/api/build.yaml.tpl > /root/saas/team/api/build.yaml
|
|
envsubst < /root/saas/team/build/launch.yaml.tpl > /root/saas/team/launch.yaml
|
|
envsubst < /root/saas/team/build/launch-backend.yaml.tpl > /root/saas/team/launch-backend.yaml
|
|
envsubst < /root/saas/team/build/launch-frontend.yaml.tpl > /root/saas/team/launch-frontend.yaml
|
|
envsubst < /root/saas/team/build/launch-frontend-dev.yaml.tpl > /root/saas/team/launch-frontend-dev.yaml
|
|
python /app/pack.py --src /root/saas/team/build --dest /root/saas/team/build.zip
|
|
|
|
|
|
if [[ "$IMAGE_BUILD_ENABLE" == "true" ]] ; then
|
|
|
|
cd /root/saas/team/api/
|
|
/root/swcli --config /swcli/swcli.yaml app-package oneflow --stage=prod --namespace=${NAMESPACE_ID} --app-id=team --tags="release=sreworks/x86_64" --arch=x86 --cluster=master --path=../launch-backend.yaml --disable-dir-check
|
|
|
|
if [[ "$IMPORT_FRONTEND" == "true" ]] ; then
|
|
|
|
sh /app/import.sh team /root/saas/team/build.zip /root/saas/team/launch-frontend.yaml /root/saas/team/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
else
|
|
|
|
sh /app/import.sh team /root/saas/team/build.zip /root/saas/team/launch.yaml /root/saas/team/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
|
|
|
|
saas-aiops.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
cd /root
|
|
sh /app/core-deploy-check.sh
|
|
export NAMESPACE_ID=${NAMESPACE_AIOPS}
|
|
|
|
if [[ "$DATAOPS_DB_HOST" == "default-mysql" ]]
|
|
then
|
|
DATAOPS_DB_HOST='\{\{ Global.STAGE_ID \}\}-\{\{ Global.APP_ID \}\}-mysql.sreworks-dataops'
|
|
export DATAOPS_DB_HOST=$(echo $DATAOPS_DB_HOST|sed 's/\\//g')
|
|
fi
|
|
|
|
envsubst < /root/saas/aiops/api/build.yaml.tpl > /root/saas/aiops/api/build.yaml
|
|
envsubst < /root/saas/aiops/build/launch.yaml.tpl > /root/saas/aiops/launch.yaml
|
|
envsubst < /root/saas/aiops/build/launch-backend.yaml.tpl > /root/saas/aiops/launch-backend.yaml
|
|
envsubst < /root/saas/aiops/build/launch-frontend.yaml.tpl > /root/saas/aiops/launch-frontend.yaml
|
|
envsubst < /root/saas/aiops/build/launch-frontend-dev.yaml.tpl > /root/saas/aiops/launch-frontend-dev.yaml
|
|
python /app/pack.py --src /root/saas/aiops/build --dest /root/saas/aiops/build.zip
|
|
|
|
if [[ "$IMAGE_BUILD_ENABLE" == "true" ]] ; then
|
|
|
|
cd /root/saas/aiops/api/
|
|
/root/swcli --config /swcli/swcli.yaml app-package oneflow --app-id=aiops --stage=prod --namespace=${NAMESPACE_ID} --tags="release=sreworks/x86_64" --arch=x86 --cluster=master --path=../launch-backend.yaml --disable-dir-check
|
|
|
|
if [[ "$IMPORT_FRONTEND" == "true" ]] ; then
|
|
|
|
sh /app/import.sh aiops /root/saas/aiops/build.zip /root/saas/aiops/launch-frontend.yaml /root/saas/aiops/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
|
|
else
|
|
|
|
sh /app/import.sh aiops /root/saas/aiops/build.zip /root/saas/aiops/launch.yaml /root/saas/aiops/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
|
|
|
|
saas-job.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sh /app/core-deploy-check.sh
|
|
|
|
cd /root
|
|
|
|
# build&launch cluster api
|
|
export NAMESPACE_ID=$(cat /run/secrets/kubernetes.io/serviceaccount/namespace)
|
|
envsubst < /root/saas/job/api/build.yaml.tpl > /root/saas/job/api/build.yaml
|
|
envsubst < /root/saas/job/build/launch.yaml.tpl > /root/saas/job/launch.yaml
|
|
envsubst < /root/saas/job/build/launch-backend.yaml.tpl > /root/saas/job/launch-backend.yaml
|
|
envsubst < /root/saas/job/build/launch-frontend.yaml.tpl > /root/saas/job/launch-frontend.yaml
|
|
envsubst < /root/saas/job/build/launch-frontend-dev.yaml.tpl > /root/saas/job/launch-frontend-dev.yaml
|
|
python /app/pack.py --src /root/saas/job/build --dest /root/saas/job/build.zip
|
|
|
|
if [[ "$IMAGE_BUILD_ENABLE" == "true" ]] ; then
|
|
|
|
cd /root/saas/job/api/
|
|
/root/swcli --config /swcli/swcli.yaml app-package oneflow --app-id=job --stage=prod --namespace=${NAMESPACE_ID} --tags="release=sreworks/x86_64" --arch=x86 --cluster=master --path=../launch-backend.yaml --disable-dir-check
|
|
|
|
if [[ "$IMPORT_FRONTEND" == "true" ]] ; then
|
|
|
|
sh /app/import.sh job /root/saas/job/build.zip /root/saas/job/launch-frontend.yaml /root/saas/job/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
|
|
else
|
|
|
|
sh /app/import.sh job /root/saas/job/build.zip /root/saas/job/launch.yaml /root/saas/job/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
|
|
|
|
saas-healing.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sh /app/core-deploy-check.sh
|
|
|
|
cd /root
|
|
|
|
export NAMESPACE_ID=$(cat /run/secrets/kubernetes.io/serviceaccount/namespace)
|
|
|
|
if [[ "$IMPORT_FRONTEND" == "true" ]] ; then
|
|
|
|
envsubst < /root/saas/healing/build/launch-frontend.yaml.tpl > /root/saas/healing/launch-frontend.yaml
|
|
envsubst < /root/saas/healing/build/launch-frontend-dev.yaml.tpl > /root/saas/healing/launch-frontend-dev.yaml
|
|
python /app/pack.py --src /root/saas/healing/build --dest /root/saas/healing/build.zip
|
|
|
|
sh /app/import.sh healing /root/saas/healing/build.zip /root/saas/healing/launch-frontend.yaml /root/saas/healing/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
|
|
saas-health.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sh /app/core-deploy-check.sh
|
|
|
|
cd /root
|
|
|
|
export NAMESPACE_ID=$(cat /run/secrets/kubernetes.io/serviceaccount/namespace)
|
|
export VERSION_CHECK=$(python /app/version_check.py /root/saas/health/build)
|
|
|
|
if [[ "$DATAOPS_DB_HOST" == "default-mysql" ]]
|
|
then
|
|
DATAOPS_DB_HOST='\{\{ Global.STAGE_ID \}\}-\{\{ Global.APP_ID \}\}-mysql.sreworks-dataops'
|
|
export DATAOPS_DB_HOST=$(echo $DATAOPS_DB_HOST|sed 's/\\//g')
|
|
fi
|
|
|
|
envsubst < /root/saas/health/api/build.yaml.tpl > /root/saas/health/api/build.yaml
|
|
envsubst < /root/saas/health/build/launch.yaml.tpl > /root/saas/health/launch.yaml
|
|
envsubst < /root/saas/health/build/launch-backend.yaml.tpl > /root/saas/health/launch-backend.yaml
|
|
envsubst < /root/saas/health/build/launch-frontend.yaml.tpl > /root/saas/health/launch-frontend.yaml
|
|
envsubst < /root/saas/health/build/launch-frontend-dev.yaml.tpl > /root/saas/health/launch-frontend-dev.yaml
|
|
python /app/pack.py --src /root/saas/health/build --dest /root/saas/health/build.zip
|
|
|
|
|
|
if [[ "$IMAGE_BUILD_ENABLE" == "true" ]] ; then
|
|
|
|
cd /root/saas/health/api/
|
|
/root/swcli --config /swcli/swcli.yaml app-package oneflow --app-id=health --stage=prod --namespace=${NAMESPACE_ID} --tags="release=sreworks/x86_64" --arch=x86 --cluster=master --path=../launch-backend.yaml --disable-dir-check
|
|
|
|
if [[ "$IMPORT_FRONTEND" == "true" ]] ; then
|
|
|
|
sh /app/import.sh health /root/saas/health/build.zip /root/saas/health/launch-frontend.yaml /root/saas/health/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
|
|
elif [[ "$VERSION_CHECK" == "NEED UPDATE" ]] ; then
|
|
|
|
sh /app/import.sh health /root/saas/health/build.zip /root/saas/health/launch.yaml /root/saas/health/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
|
|
|
|
|
|
saas-ocenter.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sh /app/core-deploy-check.sh
|
|
|
|
cd /root
|
|
|
|
export NAMESPACE_ID=$(cat /run/secrets/kubernetes.io/serviceaccount/namespace)
|
|
export VERSION_CHECK=$(python /app/version_check.py /root/saas/ocenter/build)
|
|
|
|
if [[ "$IMPORT_FRONTEND" == "true" && "$VERSION_CHECK" == "NEED UPDATE" ]] ; then
|
|
|
|
|
|
envsubst < /root/saas/ocenter/build/launch-frontend.yaml.tpl > /root/saas/ocenter/launch-frontend.yaml
|
|
envsubst < /root/saas/ocenter/build/launch-frontend-dev.yaml.tpl > /root/saas/ocenter/launch-frontend-dev.yaml
|
|
python /app/pack.py --src /root/saas/ocenter/build --dest /root/saas/ocenter/build.zip
|
|
|
|
sh /app/import.sh ocenter /root/saas/ocenter/build.zip /root/saas/health/launch.yaml /root/saas/ocenter/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
|
|
saas-help.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sh /app/core-deploy-check.sh
|
|
|
|
cd /root
|
|
|
|
export NAMESPACE_ID=$(cat /run/secrets/kubernetes.io/serviceaccount/namespace)
|
|
export VERSION_CHECK=$(python /app/version_check.py /root/saas/help/build)
|
|
|
|
if [[ "$IMPORT_FRONTEND" == "true" && "$VERSION_CHECK" == "NEED UPDATE" ]] ; then
|
|
|
|
|
|
python /app/pack.py --src /root/saas/help/build --dest /root/saas/help/build.zip
|
|
envsubst < /root/saas/job/build/launch-frontend.yaml.tpl > /root/saas/help/launch-frontend.yaml
|
|
envsubst < /root/saas/job/build/launch-frontend-dev.yaml.tpl > /root/saas/help/launch-frontend-dev.yaml
|
|
|
|
sh /app/import.sh help /root/saas/help/build.zip /root/saas/help/launch-frontend.yaml /root/saas/help/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
|
|
|
|
saas-search.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sh /app/core-deploy-check.sh
|
|
|
|
cd /root
|
|
|
|
# build&launch search api
|
|
export NAMESPACE_ID=$(cat /run/secrets/kubernetes.io/serviceaccount/namespace)
|
|
export VERSION_CHECK=$(python /app/version_check.py /root/saas/search/build)
|
|
envsubst < /root/saas/search/api/build.yaml.tpl > /root/saas/search/api/build.yaml
|
|
envsubst < /root/saas/search/build/launch.yaml.tpl > /root/saas/search/launch.yaml
|
|
envsubst < /root/saas/search/build/launch-backend.yaml.tpl > /root/saas/search/launch-backend.yaml
|
|
envsubst < /root/saas/search/build/launch-frontend.yaml.tpl > /root/saas/search/launch-frontend.yaml
|
|
envsubst < /root/saas/search/build/launch-frontend-dev.yaml.tpl > /root/saas/search/launch-frontend-dev.yaml
|
|
python /app/pack.py --src /root/saas/search/build --dest /root/saas/search/build.zip
|
|
|
|
if [[ "$IMAGE_BUILD_ENABLE" == "true" ]] ; then
|
|
|
|
cd /root/saas/search/api/
|
|
/root/swcli --config /swcli/swcli.yaml app-package oneflow --app-id=search --stage=prod --namespace=${NAMESPACE_ID} --tags="release=sreworks/x86_64" --arch=x86 --cluster=master --path=../launch-backend.yaml --disable-dir-check
|
|
|
|
if [[ "$IMPORT_FRONTEND" == "true" ]] ; then
|
|
|
|
sh /app/import.sh search /root/saas/search/build.zip /root/saas/search/launch-frontend.yaml /root/saas/search/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
|
|
elif [[ "$VERSION_CHECK" == "NEED UPDATE" ]] ; then
|
|
|
|
sh /app/import.sh search /root/saas/search/build.zip /root/saas/search/launch.yaml /root/saas/search/launch-frontend-dev.yaml
|
|
|
|
fi
|
|
|
|
|
|
|
|
saas-dataops-grafana-import.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
cd /root
|
|
|
|
until $(curl --silent --fail --show-error --output /dev/null http://admin:${GRAFANA_ADMIN_PASSWORD}@${SAAS_STAGE_ID}-dataops-grafana.${NAMESPACE_DATAOPS}/api/datasources); do
|
|
printf '.' ; sleep 1 ;
|
|
done ;
|
|
|
|
|
|
for file in /root/saas/dataops/ui/grafana/datasource/*.json ; do
|
|
if [ -e "$file" ] ; then
|
|
echo "importing $file" &&
|
|
curl --silent --fail --show-error \
|
|
--request POST http://admin:${GRAFANA_ADMIN_PASSWORD}@${SAAS_STAGE_ID}-dataops-grafana.${NAMESPACE_DATAOPS}/api/datasources \
|
|
--header "Content-Type: application/json" \
|
|
--data-binary "@$file" ;
|
|
echo "" ;
|
|
fi
|
|
done ;
|
|
|
|
for file in /root/saas/dataops/ui/grafana/dashboard/*.json ; do
|
|
if [ -e "$file" ] ; then
|
|
echo "importing $file" &&
|
|
curl --silent --fail --show-error \
|
|
--request POST http://admin:${GRAFANA_ADMIN_PASSWORD}@${SAAS_STAGE_ID}-dataops-grafana.${NAMESPACE_DATAOPS}/api/dashboards/import \
|
|
--header "Content-Type: application/json" \
|
|
--data-binary "@$file" ;
|
|
echo "" ;
|
|
fi
|
|
done
|
|
|
|
|
|
saas-demoapp.sh: |
|
|
|
|
set -e
|
|
set -x
|
|
|
|
sh /app/core-deploy-check.sh
|
|
|
|
cd /root/saas/app/
|
|
checkDemoApp=$(python /root/saas/app/initDemoApp.py)
|
|
echo $checkDemoApp
|
|
if [[ "$checkDemoApp" == "NO" ]] ; then
|
|
result=$(/root/swcli --config /swcli/swcli.yaml app-package import --app-id sreworks1 --filepath /root/saas/app/demoApp.zip --print-only-app-package-id=true --reset-version=true)
|
|
/root/swcli --config /swcli/swcli.yaml deployment launch --namespace sreworks --stage prod --app-id sreworks1 --path /root/saas/app/launch-demoApp.yaml --app-package-id $result --arch x86 --wait=true --cluster master
|
|
fi
|
|
|
|
version_check.py: |
|
|
|
|
import sys
|
|
import os
|
|
import yaml
|
|
from oauthlib.oauth2 import LegacyApplicationClient
|
|
from requests_oauthlib import OAuth2Session
|
|
from distutils.version import StrictVersion
|
|
|
|
ENDPOINT = 'http://sreworks-appmanager'
|
|
CLIENT_ID = os.getenv('APPMANAGER_CLIENT_ID')
|
|
CLIENT_SECRET = os.getenv('APPMANAGER_CLIENT_SECRET')
|
|
USERNAME = os.getenv('APPMANAGER_USERNAME')
|
|
PASSWORD = os.getenv('APPMANAGER_PASSWORD')
|
|
|
|
class AppManagerClient(object):
|
|
|
|
def __init__(self, endpoint, client_id, client_secret, username, password):
|
|
os.environ.setdefault('OAUTHLIB_INSECURE_TRANSPORT', '1')
|
|
self._endpoint = endpoint
|
|
self._client_id = client_id
|
|
self._client_secret = client_secret
|
|
self._username = username
|
|
self._password = password
|
|
self._token = self._fetch_token()
|
|
|
|
@property
|
|
def client(self):
|
|
return OAuth2Session(self._client_id, token=self._token)
|
|
|
|
def _fetch_token(self):
|
|
oauth = OAuth2Session(client=LegacyApplicationClient(client_id=CLIENT_ID))
|
|
return oauth.fetch_token(
|
|
token_url=os.path.join(ENDPOINT, 'oauth/token'),
|
|
username=self._username,
|
|
password=self._password,
|
|
client_id=self._client_id,
|
|
client_secret=self._client_secret
|
|
)
|
|
|
|
appBuildPath = sys.argv[1]
|
|
|
|
f = open(appBuildPath + "/meta.yaml", 'r')
|
|
metaData = yaml.safe_load(f.read())
|
|
f.close()
|
|
|
|
appId = metaData["appId"]
|
|
baselineVersion = metaData["packageVersion"].split("+")[0]
|
|
|
|
appmanagerClient = AppManagerClient(ENDPOINT, CLIENT_ID, CLIENT_SECRET, USERNAME, PASSWORD)
|
|
res = appmanagerClient.client.get(ENDPOINT + "/realtime/app-instances?appId=" + appId + "&stageId=prod")
|
|
items = res.json()["data"].get("items", [])
|
|
if len(items) == 0:
|
|
print("NEED UPDATE")
|
|
sys.exit(0)
|
|
|
|
for item in items:
|
|
if StrictVersion(baselineVersion) > StrictVersion(item["simpleVersion"]):
|
|
print("NEED UPDATE")
|
|
sys.exit(0)
|
|
|
|
if StrictVersion(baselineVersion) == StrictVersion(item["simpleVersion"]) and item["status"] not in ["RUNNING","PENDING"]:
|
|
print("NEED UPDATE")
|
|
sys.exit(0)
|
|
|
|
|
|
print("NO UPDATE")
|
|
sys.exit(0)
|
|
|
|
saas-sleep.sh: |
|
|
sleep 999999999999
|
|
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: init-run
|
|
---
|
|
# Source: sreworks/templates/swcli.yaml
|
|
apiVersion: v1
|
|
data:
|
|
swcli.yaml: |
|
|
|
|
endpoint: http://sreworks-appmanager
|
|
username: superuser
|
|
password: yJfIYmjAiCL0ondV3kY7e5x6kVTpvC3h
|
|
client-id: superclient
|
|
client-secret: stLCjCPKbWmki65DsAj2jPoeBLPimpJa
|
|
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: init-swcli
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/openebs/templates/localprovisioner/hostpath-class.yaml
|
|
# The second operand in the AND operation can be removed
|
|
# when enableHostpathClass is deprecated.
|
|
apiVersion: storage.k8s.io/v1
|
|
kind: StorageClass
|
|
metadata:
|
|
name: sreworks-hostpath
|
|
annotations:
|
|
openebs.io/cas-type: local
|
|
cas.openebs.io/config: |
|
|
- name: StorageType
|
|
value: "hostpath"
|
|
- name: BasePath
|
|
value: "/var/openebs/local"
|
|
provisioner: openebs.io/local
|
|
volumeBindingMode: WaitForFirstConsumer
|
|
reclaimPolicy: Delete
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/minio/templates/pvc-standalone.yaml
|
|
kind: PersistentVolumeClaim
|
|
apiVersion: v1
|
|
metadata:
|
|
name: sreworks-minio
|
|
namespace: "sreworks"
|
|
labels:
|
|
app.kubernetes.io/name: minio
|
|
helm.sh/chart: minio-4.1.6
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
spec:
|
|
accessModes:
|
|
- "ReadWriteOnce"
|
|
resources:
|
|
requests:
|
|
storage: "20Gi"
|
|
storageClassName: __STORAGE_CLASS__
|
|
---
|
|
# Source: sreworks/charts/appmanager/templates/operator-crd-applications.yaml
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
annotations:
|
|
controller-gen.kubebuilder.io/version: v0.5.0
|
|
creationTimestamp: null
|
|
name: applications.apps.abm.io
|
|
spec:
|
|
group: apps.abm.io
|
|
names:
|
|
kind: Application
|
|
listKind: ApplicationList
|
|
plural: applications
|
|
singular: application
|
|
scope: Namespaced
|
|
versions:
|
|
- name: v1
|
|
schema:
|
|
openAPIV3Schema:
|
|
description: Application is the Schema for the applications API
|
|
properties:
|
|
apiVersion:
|
|
description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
|
type: string
|
|
kind:
|
|
description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
description: ApplicationSpec defines the desired state of Application
|
|
type: object
|
|
status:
|
|
description: ApplicationStatus defines the observed state of Application
|
|
properties:
|
|
condition:
|
|
type: string
|
|
conditions:
|
|
items:
|
|
description: "Condition contains details for one aspect of the current state of this API Resource. --- This struct is intended for direct use as an array at the field path .status.conditions. For example, type FooStatus struct{ // Represents the observations of a foo's current state. // Known .status.conditions.type are: \"Available\", \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge // +listType=map // +listMapKey=type Conditions []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
|
|
properties:
|
|
lastTransitionTime:
|
|
description: lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
|
|
format: date-time
|
|
type: string
|
|
message:
|
|
description: message is a human readable message indicating details about the transition. This may be an empty string.
|
|
maxLength: 32768
|
|
type: string
|
|
observedGeneration:
|
|
description: observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance.
|
|
format: int64
|
|
minimum: 0
|
|
type: integer
|
|
reason:
|
|
description: reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty.
|
|
maxLength: 1024
|
|
minLength: 1
|
|
pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
|
|
type: string
|
|
status:
|
|
description: status of the condition, one of True, False, Unknown.
|
|
enum:
|
|
- "True"
|
|
- "False"
|
|
- Unknown
|
|
type: string
|
|
type:
|
|
description: type of condition in CamelCase or in foo.example.com/CamelCase. --- Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be useful (see .node.status.conditions), the ability to deconflict is important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
|
|
maxLength: 316
|
|
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
|
|
type: string
|
|
required:
|
|
- lastTransitionTime
|
|
- message
|
|
- reason
|
|
- status
|
|
- type
|
|
type: object
|
|
type: array
|
|
x-kubernetes-list-map-keys:
|
|
- type
|
|
x-kubernetes-list-type: map
|
|
type: object
|
|
type: object
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
status:
|
|
acceptedNames:
|
|
kind: ""
|
|
plural: ""
|
|
conditions: []
|
|
storedVersions: []
|
|
---
|
|
# Source: sreworks/charts/appmanager/templates/operator-crd-jobs.yaml
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
annotations:
|
|
controller-gen.kubebuilder.io/version: v0.5.0
|
|
creationTimestamp: null
|
|
name: jobs.apps.abm.io
|
|
spec:
|
|
group: apps.abm.io
|
|
names:
|
|
kind: Job
|
|
listKind: JobList
|
|
plural: jobs
|
|
singular: job
|
|
scope: Namespaced
|
|
versions:
|
|
- name: v1
|
|
schema:
|
|
openAPIV3Schema:
|
|
properties:
|
|
apiVersion:
|
|
type: string
|
|
kind:
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
properties:
|
|
BackoffLimit:
|
|
format: int32
|
|
minimum: 0
|
|
type: integer
|
|
affinity:
|
|
properties:
|
|
nodeAffinity:
|
|
properties:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
items:
|
|
properties:
|
|
preference:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchFields:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
type: object
|
|
weight:
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- preference
|
|
- weight
|
|
type: object
|
|
type: array
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
properties:
|
|
nodeSelectorTerms:
|
|
items:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchFields:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
type: object
|
|
type: array
|
|
required:
|
|
- nodeSelectorTerms
|
|
type: object
|
|
type: object
|
|
podAffinity:
|
|
properties:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
items:
|
|
properties:
|
|
podAffinityTerm:
|
|
properties:
|
|
labelSelector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
namespaces:
|
|
items:
|
|
type: string
|
|
type: array
|
|
topologyKey:
|
|
type: string
|
|
required:
|
|
- topologyKey
|
|
type: object
|
|
weight:
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- podAffinityTerm
|
|
- weight
|
|
type: object
|
|
type: array
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
items:
|
|
properties:
|
|
labelSelector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
namespaces:
|
|
items:
|
|
type: string
|
|
type: array
|
|
topologyKey:
|
|
type: string
|
|
required:
|
|
- topologyKey
|
|
type: object
|
|
type: array
|
|
type: object
|
|
podAntiAffinity:
|
|
properties:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
items:
|
|
properties:
|
|
podAffinityTerm:
|
|
properties:
|
|
labelSelector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
namespaces:
|
|
items:
|
|
type: string
|
|
type: array
|
|
topologyKey:
|
|
type: string
|
|
required:
|
|
- topologyKey
|
|
type: object
|
|
weight:
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- podAffinityTerm
|
|
- weight
|
|
type: object
|
|
type: array
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
items:
|
|
properties:
|
|
labelSelector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
namespaces:
|
|
items:
|
|
type: string
|
|
type: array
|
|
topologyKey:
|
|
type: string
|
|
required:
|
|
- topologyKey
|
|
type: object
|
|
type: array
|
|
type: object
|
|
type: object
|
|
env:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
failedJobsHistoryLimit:
|
|
format: int32
|
|
minimum: 0
|
|
type: integer
|
|
job:
|
|
properties:
|
|
args:
|
|
items:
|
|
type: string
|
|
type: array
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
env:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
valueFrom:
|
|
properties:
|
|
configMapKeyRef:
|
|
properties:
|
|
key:
|
|
type: string
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
required:
|
|
- key
|
|
type: object
|
|
fieldRef:
|
|
properties:
|
|
apiVersion:
|
|
type: string
|
|
fieldPath:
|
|
type: string
|
|
required:
|
|
- fieldPath
|
|
type: object
|
|
resourceFieldRef:
|
|
properties:
|
|
containerName:
|
|
type: string
|
|
divisor:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
resource:
|
|
type: string
|
|
required:
|
|
- resource
|
|
type: object
|
|
secretKeyRef:
|
|
properties:
|
|
key:
|
|
type: string
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
required:
|
|
- key
|
|
type: object
|
|
type: object
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
envFrom:
|
|
items:
|
|
properties:
|
|
configMapRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
prefix:
|
|
type: string
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
type: object
|
|
type: array
|
|
image:
|
|
type: string
|
|
imagePullPolicy:
|
|
type: string
|
|
lifecycle:
|
|
properties:
|
|
postStart:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
type: object
|
|
preStop:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
type: object
|
|
type: object
|
|
livenessProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
name:
|
|
type: string
|
|
ports:
|
|
items:
|
|
properties:
|
|
containerPort:
|
|
format: int32
|
|
type: integer
|
|
hostIP:
|
|
type: string
|
|
hostPort:
|
|
format: int32
|
|
type: integer
|
|
name:
|
|
type: string
|
|
protocol:
|
|
default: TCP
|
|
type: string
|
|
required:
|
|
- containerPort
|
|
type: object
|
|
type: array
|
|
x-kubernetes-list-map-keys:
|
|
- containerPort
|
|
- protocol
|
|
x-kubernetes-list-type: map
|
|
readinessProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
resources:
|
|
properties:
|
|
limits:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
requests:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
type: object
|
|
securityContext:
|
|
properties:
|
|
allowPrivilegeEscalation:
|
|
type: boolean
|
|
capabilities:
|
|
properties:
|
|
add:
|
|
items:
|
|
type: string
|
|
type: array
|
|
drop:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
privileged:
|
|
type: boolean
|
|
procMount:
|
|
type: string
|
|
readOnlyRootFilesystem:
|
|
type: boolean
|
|
runAsGroup:
|
|
format: int64
|
|
type: integer
|
|
runAsNonRoot:
|
|
type: boolean
|
|
runAsUser:
|
|
format: int64
|
|
type: integer
|
|
seLinuxOptions:
|
|
properties:
|
|
level:
|
|
type: string
|
|
role:
|
|
type: string
|
|
type:
|
|
type: string
|
|
user:
|
|
type: string
|
|
type: object
|
|
seccompProfile:
|
|
properties:
|
|
localhostProfile:
|
|
type: string
|
|
type:
|
|
type: string
|
|
required:
|
|
- type
|
|
type: object
|
|
windowsOptions:
|
|
properties:
|
|
gmsaCredentialSpec:
|
|
type: string
|
|
gmsaCredentialSpecName:
|
|
type: string
|
|
runAsUserName:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
startupProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
stdin:
|
|
type: boolean
|
|
stdinOnce:
|
|
type: boolean
|
|
terminationMessagePath:
|
|
type: string
|
|
terminationMessagePolicy:
|
|
type: string
|
|
tty:
|
|
type: boolean
|
|
volumeDevices:
|
|
items:
|
|
properties:
|
|
devicePath:
|
|
type: string
|
|
name:
|
|
type: string
|
|
required:
|
|
- devicePath
|
|
- name
|
|
type: object
|
|
type: array
|
|
volumeMounts:
|
|
items:
|
|
properties:
|
|
mountPath:
|
|
type: string
|
|
mountPropagation:
|
|
type: string
|
|
name:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
subPath:
|
|
type: string
|
|
subPathExpr:
|
|
type: string
|
|
required:
|
|
- mountPath
|
|
- name
|
|
type: object
|
|
type: array
|
|
workingDir:
|
|
type: string
|
|
required:
|
|
- name
|
|
type: object
|
|
successfulJobsHistoryLimit:
|
|
format: int32
|
|
minimum: 0
|
|
type: integer
|
|
tolerations:
|
|
items:
|
|
properties:
|
|
effect:
|
|
type: string
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
tolerationSeconds:
|
|
format: int64
|
|
type: integer
|
|
value:
|
|
type: string
|
|
type: object
|
|
type: array
|
|
type: object
|
|
status:
|
|
type: object
|
|
type: object
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
status:
|
|
acceptedNames:
|
|
kind: ''
|
|
plural: ''
|
|
conditions: []
|
|
storedVersions: []
|
|
---
|
|
# Source: sreworks/charts/appmanager/templates/operator-crd-microservices.yaml
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
annotations:
|
|
controller-gen.kubebuilder.io/version: v0.5.0
|
|
creationTimestamp: null
|
|
name: microservices.apps.abm.io
|
|
spec:
|
|
group: apps.abm.io
|
|
names:
|
|
kind: Microservice
|
|
listKind: MicroserviceList
|
|
plural: microservices
|
|
singular: microservice
|
|
scope: Namespaced
|
|
versions:
|
|
- name: v1
|
|
schema:
|
|
openAPIV3Schema:
|
|
properties:
|
|
apiVersion:
|
|
type: string
|
|
kind:
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
properties:
|
|
advancedStatefulSet:
|
|
properties:
|
|
podManagementPolicy:
|
|
type: string
|
|
replicas:
|
|
format: int32
|
|
type: integer
|
|
revisionHistoryLimit:
|
|
format: int32
|
|
type: integer
|
|
selector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
serviceName:
|
|
type: string
|
|
template:
|
|
properties:
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
properties:
|
|
activeDeadlineSeconds:
|
|
format: int64
|
|
type: integer
|
|
affinity:
|
|
properties:
|
|
nodeAffinity:
|
|
properties:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
items:
|
|
properties:
|
|
preference:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchFields:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
type: object
|
|
weight:
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- preference
|
|
- weight
|
|
type: object
|
|
type: array
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
properties:
|
|
nodeSelectorTerms:
|
|
items:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchFields:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
type: object
|
|
type: array
|
|
required:
|
|
- nodeSelectorTerms
|
|
type: object
|
|
type: object
|
|
podAffinity:
|
|
properties:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
items:
|
|
properties:
|
|
podAffinityTerm:
|
|
properties:
|
|
labelSelector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
namespaces:
|
|
items:
|
|
type: string
|
|
type: array
|
|
topologyKey:
|
|
type: string
|
|
required:
|
|
- topologyKey
|
|
type: object
|
|
weight:
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- podAffinityTerm
|
|
- weight
|
|
type: object
|
|
type: array
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
items:
|
|
properties:
|
|
labelSelector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
namespaces:
|
|
items:
|
|
type: string
|
|
type: array
|
|
topologyKey:
|
|
type: string
|
|
required:
|
|
- topologyKey
|
|
type: object
|
|
type: array
|
|
type: object
|
|
podAntiAffinity:
|
|
properties:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
items:
|
|
properties:
|
|
podAffinityTerm:
|
|
properties:
|
|
labelSelector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
namespaces:
|
|
items:
|
|
type: string
|
|
type: array
|
|
topologyKey:
|
|
type: string
|
|
required:
|
|
- topologyKey
|
|
type: object
|
|
weight:
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- podAffinityTerm
|
|
- weight
|
|
type: object
|
|
type: array
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
items:
|
|
properties:
|
|
labelSelector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
namespaces:
|
|
items:
|
|
type: string
|
|
type: array
|
|
topologyKey:
|
|
type: string
|
|
required:
|
|
- topologyKey
|
|
type: object
|
|
type: array
|
|
type: object
|
|
type: object
|
|
automountServiceAccountToken:
|
|
type: boolean
|
|
containers:
|
|
items:
|
|
properties:
|
|
args:
|
|
items:
|
|
type: string
|
|
type: array
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
env:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
valueFrom:
|
|
properties:
|
|
configMapKeyRef:
|
|
properties:
|
|
key:
|
|
type: string
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
required:
|
|
- key
|
|
type: object
|
|
fieldRef:
|
|
properties:
|
|
apiVersion:
|
|
type: string
|
|
fieldPath:
|
|
type: string
|
|
required:
|
|
- fieldPath
|
|
type: object
|
|
resourceFieldRef:
|
|
properties:
|
|
containerName:
|
|
type: string
|
|
divisor:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
resource:
|
|
type: string
|
|
required:
|
|
- resource
|
|
type: object
|
|
secretKeyRef:
|
|
properties:
|
|
key:
|
|
type: string
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
required:
|
|
- key
|
|
type: object
|
|
type: object
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
envFrom:
|
|
items:
|
|
properties:
|
|
configMapRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
prefix:
|
|
type: string
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
type: object
|
|
type: array
|
|
image:
|
|
type: string
|
|
imagePullPolicy:
|
|
type: string
|
|
lifecycle:
|
|
properties:
|
|
postStart:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
type: object
|
|
preStop:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
type: object
|
|
type: object
|
|
livenessProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
name:
|
|
type: string
|
|
ports:
|
|
items:
|
|
properties:
|
|
containerPort:
|
|
format: int32
|
|
type: integer
|
|
hostIP:
|
|
type: string
|
|
hostPort:
|
|
format: int32
|
|
type: integer
|
|
name:
|
|
type: string
|
|
protocol:
|
|
default: TCP
|
|
type: string
|
|
required:
|
|
- containerPort
|
|
type: object
|
|
type: array
|
|
x-kubernetes-list-map-keys:
|
|
- containerPort
|
|
- protocol
|
|
x-kubernetes-list-type: map
|
|
readinessProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
resources:
|
|
properties:
|
|
limits:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
requests:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
type: object
|
|
securityContext:
|
|
properties:
|
|
allowPrivilegeEscalation:
|
|
type: boolean
|
|
capabilities:
|
|
properties:
|
|
add:
|
|
items:
|
|
type: string
|
|
type: array
|
|
drop:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
privileged:
|
|
type: boolean
|
|
procMount:
|
|
type: string
|
|
readOnlyRootFilesystem:
|
|
type: boolean
|
|
runAsGroup:
|
|
format: int64
|
|
type: integer
|
|
runAsNonRoot:
|
|
type: boolean
|
|
runAsUser:
|
|
format: int64
|
|
type: integer
|
|
seLinuxOptions:
|
|
properties:
|
|
level:
|
|
type: string
|
|
role:
|
|
type: string
|
|
type:
|
|
type: string
|
|
user:
|
|
type: string
|
|
type: object
|
|
seccompProfile:
|
|
properties:
|
|
localhostProfile:
|
|
type: string
|
|
type:
|
|
type: string
|
|
required:
|
|
- type
|
|
type: object
|
|
windowsOptions:
|
|
properties:
|
|
gmsaCredentialSpec:
|
|
type: string
|
|
gmsaCredentialSpecName:
|
|
type: string
|
|
runAsUserName:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
startupProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
stdin:
|
|
type: boolean
|
|
stdinOnce:
|
|
type: boolean
|
|
terminationMessagePath:
|
|
type: string
|
|
terminationMessagePolicy:
|
|
type: string
|
|
tty:
|
|
type: boolean
|
|
volumeDevices:
|
|
items:
|
|
properties:
|
|
devicePath:
|
|
type: string
|
|
name:
|
|
type: string
|
|
required:
|
|
- devicePath
|
|
- name
|
|
type: object
|
|
type: array
|
|
volumeMounts:
|
|
items:
|
|
properties:
|
|
mountPath:
|
|
type: string
|
|
mountPropagation:
|
|
type: string
|
|
name:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
subPath:
|
|
type: string
|
|
subPathExpr:
|
|
type: string
|
|
required:
|
|
- mountPath
|
|
- name
|
|
type: object
|
|
type: array
|
|
workingDir:
|
|
type: string
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
dnsConfig:
|
|
properties:
|
|
nameservers:
|
|
items:
|
|
type: string
|
|
type: array
|
|
options:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
type: object
|
|
type: array
|
|
searches:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
dnsPolicy:
|
|
type: string
|
|
enableServiceLinks:
|
|
type: boolean
|
|
ephemeralContainers:
|
|
items:
|
|
properties:
|
|
args:
|
|
items:
|
|
type: string
|
|
type: array
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
env:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
valueFrom:
|
|
properties:
|
|
configMapKeyRef:
|
|
properties:
|
|
key:
|
|
type: string
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
required:
|
|
- key
|
|
type: object
|
|
fieldRef:
|
|
properties:
|
|
apiVersion:
|
|
type: string
|
|
fieldPath:
|
|
type: string
|
|
required:
|
|
- fieldPath
|
|
type: object
|
|
resourceFieldRef:
|
|
properties:
|
|
containerName:
|
|
type: string
|
|
divisor:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
resource:
|
|
type: string
|
|
required:
|
|
- resource
|
|
type: object
|
|
secretKeyRef:
|
|
properties:
|
|
key:
|
|
type: string
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
required:
|
|
- key
|
|
type: object
|
|
type: object
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
envFrom:
|
|
items:
|
|
properties:
|
|
configMapRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
prefix:
|
|
type: string
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
type: object
|
|
type: array
|
|
image:
|
|
type: string
|
|
imagePullPolicy:
|
|
type: string
|
|
lifecycle:
|
|
properties:
|
|
postStart:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
type: object
|
|
preStop:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
type: object
|
|
type: object
|
|
livenessProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
name:
|
|
type: string
|
|
ports:
|
|
items:
|
|
properties:
|
|
containerPort:
|
|
format: int32
|
|
type: integer
|
|
hostIP:
|
|
type: string
|
|
hostPort:
|
|
format: int32
|
|
type: integer
|
|
name:
|
|
type: string
|
|
protocol:
|
|
default: TCP
|
|
type: string
|
|
required:
|
|
- containerPort
|
|
type: object
|
|
type: array
|
|
readinessProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
resources:
|
|
properties:
|
|
limits:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
requests:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
type: object
|
|
securityContext:
|
|
properties:
|
|
allowPrivilegeEscalation:
|
|
type: boolean
|
|
capabilities:
|
|
properties:
|
|
add:
|
|
items:
|
|
type: string
|
|
type: array
|
|
drop:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
privileged:
|
|
type: boolean
|
|
procMount:
|
|
type: string
|
|
readOnlyRootFilesystem:
|
|
type: boolean
|
|
runAsGroup:
|
|
format: int64
|
|
type: integer
|
|
runAsNonRoot:
|
|
type: boolean
|
|
runAsUser:
|
|
format: int64
|
|
type: integer
|
|
seLinuxOptions:
|
|
properties:
|
|
level:
|
|
type: string
|
|
role:
|
|
type: string
|
|
type:
|
|
type: string
|
|
user:
|
|
type: string
|
|
type: object
|
|
seccompProfile:
|
|
properties:
|
|
localhostProfile:
|
|
type: string
|
|
type:
|
|
type: string
|
|
required:
|
|
- type
|
|
type: object
|
|
windowsOptions:
|
|
properties:
|
|
gmsaCredentialSpec:
|
|
type: string
|
|
gmsaCredentialSpecName:
|
|
type: string
|
|
runAsUserName:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
startupProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
stdin:
|
|
type: boolean
|
|
stdinOnce:
|
|
type: boolean
|
|
targetContainerName:
|
|
type: string
|
|
terminationMessagePath:
|
|
type: string
|
|
terminationMessagePolicy:
|
|
type: string
|
|
tty:
|
|
type: boolean
|
|
volumeDevices:
|
|
items:
|
|
properties:
|
|
devicePath:
|
|
type: string
|
|
name:
|
|
type: string
|
|
required:
|
|
- devicePath
|
|
- name
|
|
type: object
|
|
type: array
|
|
volumeMounts:
|
|
items:
|
|
properties:
|
|
mountPath:
|
|
type: string
|
|
mountPropagation:
|
|
type: string
|
|
name:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
subPath:
|
|
type: string
|
|
subPathExpr:
|
|
type: string
|
|
required:
|
|
- mountPath
|
|
- name
|
|
type: object
|
|
type: array
|
|
workingDir:
|
|
type: string
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
hostAliases:
|
|
items:
|
|
properties:
|
|
hostnames:
|
|
items:
|
|
type: string
|
|
type: array
|
|
ip:
|
|
type: string
|
|
type: object
|
|
type: array
|
|
hostIPC:
|
|
type: boolean
|
|
hostNetwork:
|
|
type: boolean
|
|
hostPID:
|
|
type: boolean
|
|
hostname:
|
|
type: string
|
|
imagePullSecrets:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
type: array
|
|
initContainers:
|
|
items:
|
|
properties:
|
|
args:
|
|
items:
|
|
type: string
|
|
type: array
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
env:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
valueFrom:
|
|
properties:
|
|
configMapKeyRef:
|
|
properties:
|
|
key:
|
|
type: string
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
required:
|
|
- key
|
|
type: object
|
|
fieldRef:
|
|
properties:
|
|
apiVersion:
|
|
type: string
|
|
fieldPath:
|
|
type: string
|
|
required:
|
|
- fieldPath
|
|
type: object
|
|
resourceFieldRef:
|
|
properties:
|
|
containerName:
|
|
type: string
|
|
divisor:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
resource:
|
|
type: string
|
|
required:
|
|
- resource
|
|
type: object
|
|
secretKeyRef:
|
|
properties:
|
|
key:
|
|
type: string
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
required:
|
|
- key
|
|
type: object
|
|
type: object
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
envFrom:
|
|
items:
|
|
properties:
|
|
configMapRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
prefix:
|
|
type: string
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
type: object
|
|
type: array
|
|
image:
|
|
type: string
|
|
imagePullPolicy:
|
|
type: string
|
|
lifecycle:
|
|
properties:
|
|
postStart:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
type: object
|
|
preStop:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
type: object
|
|
type: object
|
|
livenessProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
name:
|
|
type: string
|
|
ports:
|
|
items:
|
|
properties:
|
|
containerPort:
|
|
format: int32
|
|
type: integer
|
|
hostIP:
|
|
type: string
|
|
hostPort:
|
|
format: int32
|
|
type: integer
|
|
name:
|
|
type: string
|
|
protocol:
|
|
default: TCP
|
|
type: string
|
|
required:
|
|
- containerPort
|
|
type: object
|
|
type: array
|
|
x-kubernetes-list-map-keys:
|
|
- containerPort
|
|
- protocol
|
|
x-kubernetes-list-type: map
|
|
readinessProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
resources:
|
|
properties:
|
|
limits:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
requests:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
type: object
|
|
securityContext:
|
|
properties:
|
|
allowPrivilegeEscalation:
|
|
type: boolean
|
|
capabilities:
|
|
properties:
|
|
add:
|
|
items:
|
|
type: string
|
|
type: array
|
|
drop:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
privileged:
|
|
type: boolean
|
|
procMount:
|
|
type: string
|
|
readOnlyRootFilesystem:
|
|
type: boolean
|
|
runAsGroup:
|
|
format: int64
|
|
type: integer
|
|
runAsNonRoot:
|
|
type: boolean
|
|
runAsUser:
|
|
format: int64
|
|
type: integer
|
|
seLinuxOptions:
|
|
properties:
|
|
level:
|
|
type: string
|
|
role:
|
|
type: string
|
|
type:
|
|
type: string
|
|
user:
|
|
type: string
|
|
type: object
|
|
seccompProfile:
|
|
properties:
|
|
localhostProfile:
|
|
type: string
|
|
type:
|
|
type: string
|
|
required:
|
|
- type
|
|
type: object
|
|
windowsOptions:
|
|
properties:
|
|
gmsaCredentialSpec:
|
|
type: string
|
|
gmsaCredentialSpecName:
|
|
type: string
|
|
runAsUserName:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
startupProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
stdin:
|
|
type: boolean
|
|
stdinOnce:
|
|
type: boolean
|
|
terminationMessagePath:
|
|
type: string
|
|
terminationMessagePolicy:
|
|
type: string
|
|
tty:
|
|
type: boolean
|
|
volumeDevices:
|
|
items:
|
|
properties:
|
|
devicePath:
|
|
type: string
|
|
name:
|
|
type: string
|
|
required:
|
|
- devicePath
|
|
- name
|
|
type: object
|
|
type: array
|
|
volumeMounts:
|
|
items:
|
|
properties:
|
|
mountPath:
|
|
type: string
|
|
mountPropagation:
|
|
type: string
|
|
name:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
subPath:
|
|
type: string
|
|
subPathExpr:
|
|
type: string
|
|
required:
|
|
- mountPath
|
|
- name
|
|
type: object
|
|
type: array
|
|
workingDir:
|
|
type: string
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
nodeName:
|
|
type: string
|
|
nodeSelector:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
overhead:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
preemptionPolicy:
|
|
type: string
|
|
priority:
|
|
format: int32
|
|
type: integer
|
|
priorityClassName:
|
|
type: string
|
|
readinessGates:
|
|
items:
|
|
properties:
|
|
conditionType:
|
|
type: string
|
|
required:
|
|
- conditionType
|
|
type: object
|
|
type: array
|
|
restartPolicy:
|
|
type: string
|
|
runtimeClassName:
|
|
type: string
|
|
schedulerName:
|
|
type: string
|
|
securityContext:
|
|
properties:
|
|
fsGroup:
|
|
format: int64
|
|
type: integer
|
|
fsGroupChangePolicy:
|
|
type: string
|
|
runAsGroup:
|
|
format: int64
|
|
type: integer
|
|
runAsNonRoot:
|
|
type: boolean
|
|
runAsUser:
|
|
format: int64
|
|
type: integer
|
|
seLinuxOptions:
|
|
properties:
|
|
level:
|
|
type: string
|
|
role:
|
|
type: string
|
|
type:
|
|
type: string
|
|
user:
|
|
type: string
|
|
type: object
|
|
seccompProfile:
|
|
properties:
|
|
localhostProfile:
|
|
type: string
|
|
type:
|
|
type: string
|
|
required:
|
|
- type
|
|
type: object
|
|
supplementalGroups:
|
|
items:
|
|
format: int64
|
|
type: integer
|
|
type: array
|
|
sysctls:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
windowsOptions:
|
|
properties:
|
|
gmsaCredentialSpec:
|
|
type: string
|
|
gmsaCredentialSpecName:
|
|
type: string
|
|
runAsUserName:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
serviceAccount:
|
|
type: string
|
|
serviceAccountName:
|
|
type: string
|
|
setHostnameAsFQDN:
|
|
type: boolean
|
|
shareProcessNamespace:
|
|
type: boolean
|
|
subdomain:
|
|
type: string
|
|
terminationGracePeriodSeconds:
|
|
format: int64
|
|
type: integer
|
|
tolerations:
|
|
items:
|
|
properties:
|
|
effect:
|
|
type: string
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
tolerationSeconds:
|
|
format: int64
|
|
type: integer
|
|
value:
|
|
type: string
|
|
type: object
|
|
type: array
|
|
topologySpreadConstraints:
|
|
items:
|
|
properties:
|
|
labelSelector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
maxSkew:
|
|
format: int32
|
|
type: integer
|
|
topologyKey:
|
|
type: string
|
|
whenUnsatisfiable:
|
|
type: string
|
|
required:
|
|
- maxSkew
|
|
- topologyKey
|
|
- whenUnsatisfiable
|
|
type: object
|
|
type: array
|
|
x-kubernetes-list-map-keys:
|
|
- topologyKey
|
|
- whenUnsatisfiable
|
|
x-kubernetes-list-type: map
|
|
volumes:
|
|
items:
|
|
properties:
|
|
awsElasticBlockStore:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
partition:
|
|
format: int32
|
|
type: integer
|
|
readOnly:
|
|
type: boolean
|
|
volumeID:
|
|
type: string
|
|
required:
|
|
- volumeID
|
|
type: object
|
|
azureDisk:
|
|
properties:
|
|
cachingMode:
|
|
type: string
|
|
diskName:
|
|
type: string
|
|
diskURI:
|
|
type: string
|
|
fsType:
|
|
type: string
|
|
kind:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
required:
|
|
- diskName
|
|
- diskURI
|
|
type: object
|
|
azureFile:
|
|
properties:
|
|
readOnly:
|
|
type: boolean
|
|
secretName:
|
|
type: string
|
|
shareName:
|
|
type: string
|
|
required:
|
|
- secretName
|
|
- shareName
|
|
type: object
|
|
cephfs:
|
|
properties:
|
|
monitors:
|
|
items:
|
|
type: string
|
|
type: array
|
|
path:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
secretFile:
|
|
type: string
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
user:
|
|
type: string
|
|
required:
|
|
- monitors
|
|
type: object
|
|
cinder:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
volumeID:
|
|
type: string
|
|
required:
|
|
- volumeID
|
|
type: object
|
|
configMap:
|
|
properties:
|
|
defaultMode:
|
|
format: int32
|
|
type: integer
|
|
items:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
mode:
|
|
format: int32
|
|
type: integer
|
|
path:
|
|
type: string
|
|
required:
|
|
- key
|
|
- path
|
|
type: object
|
|
type: array
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
csi:
|
|
properties:
|
|
driver:
|
|
type: string
|
|
fsType:
|
|
type: string
|
|
nodePublishSecretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
readOnly:
|
|
type: boolean
|
|
volumeAttributes:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
required:
|
|
- driver
|
|
type: object
|
|
downwardAPI:
|
|
properties:
|
|
defaultMode:
|
|
format: int32
|
|
type: integer
|
|
items:
|
|
items:
|
|
properties:
|
|
fieldRef:
|
|
properties:
|
|
apiVersion:
|
|
type: string
|
|
fieldPath:
|
|
type: string
|
|
required:
|
|
- fieldPath
|
|
type: object
|
|
mode:
|
|
format: int32
|
|
type: integer
|
|
path:
|
|
type: string
|
|
resourceFieldRef:
|
|
properties:
|
|
containerName:
|
|
type: string
|
|
divisor:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
resource:
|
|
type: string
|
|
required:
|
|
- resource
|
|
type: object
|
|
required:
|
|
- path
|
|
type: object
|
|
type: array
|
|
type: object
|
|
emptyDir:
|
|
properties:
|
|
medium:
|
|
type: string
|
|
sizeLimit:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
ephemeral:
|
|
properties:
|
|
readOnly:
|
|
type: boolean
|
|
volumeClaimTemplate:
|
|
properties:
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
properties:
|
|
accessModes:
|
|
items:
|
|
type: string
|
|
type: array
|
|
dataSource:
|
|
properties:
|
|
apiGroup:
|
|
type: string
|
|
kind:
|
|
type: string
|
|
name:
|
|
type: string
|
|
required:
|
|
- kind
|
|
- name
|
|
type: object
|
|
resources:
|
|
properties:
|
|
limits:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
requests:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
type: object
|
|
selector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
storageClassName:
|
|
type: string
|
|
volumeMode:
|
|
type: string
|
|
volumeName:
|
|
type: string
|
|
type: object
|
|
required:
|
|
- spec
|
|
type: object
|
|
type: object
|
|
fc:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
lun:
|
|
format: int32
|
|
type: integer
|
|
readOnly:
|
|
type: boolean
|
|
targetWWNs:
|
|
items:
|
|
type: string
|
|
type: array
|
|
wwids:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
flexVolume:
|
|
properties:
|
|
driver:
|
|
type: string
|
|
fsType:
|
|
type: string
|
|
options:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
readOnly:
|
|
type: boolean
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
required:
|
|
- driver
|
|
type: object
|
|
flocker:
|
|
properties:
|
|
datasetName:
|
|
type: string
|
|
datasetUUID:
|
|
type: string
|
|
type: object
|
|
gcePersistentDisk:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
partition:
|
|
format: int32
|
|
type: integer
|
|
pdName:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
required:
|
|
- pdName
|
|
type: object
|
|
gitRepo:
|
|
properties:
|
|
directory:
|
|
type: string
|
|
repository:
|
|
type: string
|
|
revision:
|
|
type: string
|
|
required:
|
|
- repository
|
|
type: object
|
|
glusterfs:
|
|
properties:
|
|
endpoints:
|
|
type: string
|
|
path:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
required:
|
|
- endpoints
|
|
- path
|
|
type: object
|
|
hostPath:
|
|
properties:
|
|
path:
|
|
type: string
|
|
type:
|
|
type: string
|
|
required:
|
|
- path
|
|
type: object
|
|
iscsi:
|
|
properties:
|
|
chapAuthDiscovery:
|
|
type: boolean
|
|
chapAuthSession:
|
|
type: boolean
|
|
fsType:
|
|
type: string
|
|
initiatorName:
|
|
type: string
|
|
iqn:
|
|
type: string
|
|
iscsiInterface:
|
|
type: string
|
|
lun:
|
|
format: int32
|
|
type: integer
|
|
portals:
|
|
items:
|
|
type: string
|
|
type: array
|
|
readOnly:
|
|
type: boolean
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
targetPortal:
|
|
type: string
|
|
required:
|
|
- iqn
|
|
- lun
|
|
- targetPortal
|
|
type: object
|
|
name:
|
|
type: string
|
|
nfs:
|
|
properties:
|
|
path:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
server:
|
|
type: string
|
|
required:
|
|
- path
|
|
- server
|
|
type: object
|
|
persistentVolumeClaim:
|
|
properties:
|
|
claimName:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
required:
|
|
- claimName
|
|
type: object
|
|
photonPersistentDisk:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
pdID:
|
|
type: string
|
|
required:
|
|
- pdID
|
|
type: object
|
|
portworxVolume:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
volumeID:
|
|
type: string
|
|
required:
|
|
- volumeID
|
|
type: object
|
|
projected:
|
|
properties:
|
|
defaultMode:
|
|
format: int32
|
|
type: integer
|
|
sources:
|
|
items:
|
|
properties:
|
|
configMap:
|
|
properties:
|
|
items:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
mode:
|
|
format: int32
|
|
type: integer
|
|
path:
|
|
type: string
|
|
required:
|
|
- key
|
|
- path
|
|
type: object
|
|
type: array
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
downwardAPI:
|
|
properties:
|
|
items:
|
|
items:
|
|
properties:
|
|
fieldRef:
|
|
properties:
|
|
apiVersion:
|
|
type: string
|
|
fieldPath:
|
|
type: string
|
|
required:
|
|
- fieldPath
|
|
type: object
|
|
mode:
|
|
format: int32
|
|
type: integer
|
|
path:
|
|
type: string
|
|
resourceFieldRef:
|
|
properties:
|
|
containerName:
|
|
type: string
|
|
divisor:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
resource:
|
|
type: string
|
|
required:
|
|
- resource
|
|
type: object
|
|
required:
|
|
- path
|
|
type: object
|
|
type: array
|
|
type: object
|
|
secret:
|
|
properties:
|
|
items:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
mode:
|
|
format: int32
|
|
type: integer
|
|
path:
|
|
type: string
|
|
required:
|
|
- key
|
|
- path
|
|
type: object
|
|
type: array
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
serviceAccountToken:
|
|
properties:
|
|
audience:
|
|
type: string
|
|
expirationSeconds:
|
|
format: int64
|
|
type: integer
|
|
path:
|
|
type: string
|
|
required:
|
|
- path
|
|
type: object
|
|
type: object
|
|
type: array
|
|
type: object
|
|
quobyte:
|
|
properties:
|
|
group:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
registry:
|
|
type: string
|
|
tenant:
|
|
type: string
|
|
user:
|
|
type: string
|
|
volume:
|
|
type: string
|
|
required:
|
|
- registry
|
|
- volume
|
|
type: object
|
|
rbd:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
image:
|
|
type: string
|
|
keyring:
|
|
type: string
|
|
monitors:
|
|
items:
|
|
type: string
|
|
type: array
|
|
pool:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
user:
|
|
type: string
|
|
required:
|
|
- image
|
|
- monitors
|
|
type: object
|
|
scaleIO:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
gateway:
|
|
type: string
|
|
protectionDomain:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
sslEnabled:
|
|
type: boolean
|
|
storageMode:
|
|
type: string
|
|
storagePool:
|
|
type: string
|
|
system:
|
|
type: string
|
|
volumeName:
|
|
type: string
|
|
required:
|
|
- gateway
|
|
- secretRef
|
|
- system
|
|
type: object
|
|
secret:
|
|
properties:
|
|
defaultMode:
|
|
format: int32
|
|
type: integer
|
|
items:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
mode:
|
|
format: int32
|
|
type: integer
|
|
path:
|
|
type: string
|
|
required:
|
|
- key
|
|
- path
|
|
type: object
|
|
type: array
|
|
optional:
|
|
type: boolean
|
|
secretName:
|
|
type: string
|
|
type: object
|
|
storageos:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
volumeName:
|
|
type: string
|
|
volumeNamespace:
|
|
type: string
|
|
type: object
|
|
vsphereVolume:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
storagePolicyID:
|
|
type: string
|
|
storagePolicyName:
|
|
type: string
|
|
volumePath:
|
|
type: string
|
|
required:
|
|
- volumePath
|
|
type: object
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
required:
|
|
- containers
|
|
type: object
|
|
type: object
|
|
updateStrategy:
|
|
properties:
|
|
rollingUpdate:
|
|
properties:
|
|
inPlaceUpdateStrategy:
|
|
properties:
|
|
gracePeriodSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
maxUnavailable:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
minReadySeconds:
|
|
format: int32
|
|
type: integer
|
|
partition:
|
|
format: int32
|
|
type: integer
|
|
paused:
|
|
type: boolean
|
|
podUpdatePolicy:
|
|
type: string
|
|
unorderedUpdate:
|
|
properties:
|
|
priorityStrategy:
|
|
properties:
|
|
orderPriority:
|
|
items:
|
|
properties:
|
|
orderedKey:
|
|
type: string
|
|
required:
|
|
- orderedKey
|
|
type: object
|
|
type: array
|
|
weightPriority:
|
|
items:
|
|
properties:
|
|
matchSelector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
weight:
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- matchSelector
|
|
- weight
|
|
type: object
|
|
type: array
|
|
type: object
|
|
type: object
|
|
type: object
|
|
type:
|
|
type: string
|
|
type: object
|
|
volumeClaimTemplates:
|
|
items:
|
|
properties:
|
|
apiVersion:
|
|
type: string
|
|
kind:
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
properties:
|
|
accessModes:
|
|
items:
|
|
type: string
|
|
type: array
|
|
dataSource:
|
|
properties:
|
|
apiGroup:
|
|
type: string
|
|
kind:
|
|
type: string
|
|
name:
|
|
type: string
|
|
required:
|
|
- kind
|
|
- name
|
|
type: object
|
|
resources:
|
|
properties:
|
|
limits:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
requests:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
type: object
|
|
selector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
storageClassName:
|
|
type: string
|
|
volumeMode:
|
|
type: string
|
|
volumeName:
|
|
type: string
|
|
type: object
|
|
status:
|
|
properties:
|
|
accessModes:
|
|
items:
|
|
type: string
|
|
type: array
|
|
capacity:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
conditions:
|
|
items:
|
|
properties:
|
|
lastProbeTime:
|
|
format: date-time
|
|
type: string
|
|
lastTransitionTime:
|
|
format: date-time
|
|
type: string
|
|
message:
|
|
type: string
|
|
reason:
|
|
type: string
|
|
status:
|
|
type: string
|
|
type:
|
|
type: string
|
|
required:
|
|
- status
|
|
- type
|
|
type: object
|
|
type: array
|
|
phase:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
type: array
|
|
required:
|
|
- selector
|
|
- template
|
|
type: object
|
|
affinity:
|
|
properties:
|
|
nodeAffinity:
|
|
properties:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
items:
|
|
properties:
|
|
preference:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchFields:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
type: object
|
|
weight:
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- preference
|
|
- weight
|
|
type: object
|
|
type: array
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
properties:
|
|
nodeSelectorTerms:
|
|
items:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchFields:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
type: object
|
|
type: array
|
|
required:
|
|
- nodeSelectorTerms
|
|
type: object
|
|
type: object
|
|
podAffinity:
|
|
properties:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
items:
|
|
properties:
|
|
podAffinityTerm:
|
|
properties:
|
|
labelSelector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
namespaces:
|
|
items:
|
|
type: string
|
|
type: array
|
|
topologyKey:
|
|
type: string
|
|
required:
|
|
- topologyKey
|
|
type: object
|
|
weight:
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- podAffinityTerm
|
|
- weight
|
|
type: object
|
|
type: array
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
items:
|
|
properties:
|
|
labelSelector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
namespaces:
|
|
items:
|
|
type: string
|
|
type: array
|
|
topologyKey:
|
|
type: string
|
|
required:
|
|
- topologyKey
|
|
type: object
|
|
type: array
|
|
type: object
|
|
podAntiAffinity:
|
|
properties:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
items:
|
|
properties:
|
|
podAffinityTerm:
|
|
properties:
|
|
labelSelector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
namespaces:
|
|
items:
|
|
type: string
|
|
type: array
|
|
topologyKey:
|
|
type: string
|
|
required:
|
|
- topologyKey
|
|
type: object
|
|
weight:
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- podAffinityTerm
|
|
- weight
|
|
type: object
|
|
type: array
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
items:
|
|
properties:
|
|
labelSelector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
namespaces:
|
|
items:
|
|
type: string
|
|
type: array
|
|
topologyKey:
|
|
type: string
|
|
required:
|
|
- topologyKey
|
|
type: object
|
|
type: array
|
|
type: object
|
|
type: object
|
|
cloneSet:
|
|
properties:
|
|
lifecycle:
|
|
properties:
|
|
inPlaceUpdate:
|
|
properties:
|
|
finalizersHandler:
|
|
items:
|
|
type: string
|
|
type: array
|
|
labelsHandler:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
preDelete:
|
|
properties:
|
|
finalizersHandler:
|
|
items:
|
|
type: string
|
|
type: array
|
|
labelsHandler:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
type: object
|
|
minReadySeconds:
|
|
format: int32
|
|
type: integer
|
|
replicas:
|
|
format: int32
|
|
type: integer
|
|
revisionHistoryLimit:
|
|
format: int32
|
|
type: integer
|
|
scaleStrategy:
|
|
properties:
|
|
podsToDelete:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
selector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
template:
|
|
properties:
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
properties:
|
|
activeDeadlineSeconds:
|
|
format: int64
|
|
type: integer
|
|
affinity:
|
|
properties:
|
|
nodeAffinity:
|
|
properties:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
items:
|
|
properties:
|
|
preference:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchFields:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
type: object
|
|
weight:
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- preference
|
|
- weight
|
|
type: object
|
|
type: array
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
properties:
|
|
nodeSelectorTerms:
|
|
items:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchFields:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
type: object
|
|
type: array
|
|
required:
|
|
- nodeSelectorTerms
|
|
type: object
|
|
type: object
|
|
podAffinity:
|
|
properties:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
items:
|
|
properties:
|
|
podAffinityTerm:
|
|
properties:
|
|
labelSelector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
namespaces:
|
|
items:
|
|
type: string
|
|
type: array
|
|
topologyKey:
|
|
type: string
|
|
required:
|
|
- topologyKey
|
|
type: object
|
|
weight:
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- podAffinityTerm
|
|
- weight
|
|
type: object
|
|
type: array
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
items:
|
|
properties:
|
|
labelSelector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
namespaces:
|
|
items:
|
|
type: string
|
|
type: array
|
|
topologyKey:
|
|
type: string
|
|
required:
|
|
- topologyKey
|
|
type: object
|
|
type: array
|
|
type: object
|
|
podAntiAffinity:
|
|
properties:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
items:
|
|
properties:
|
|
podAffinityTerm:
|
|
properties:
|
|
labelSelector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
namespaces:
|
|
items:
|
|
type: string
|
|
type: array
|
|
topologyKey:
|
|
type: string
|
|
required:
|
|
- topologyKey
|
|
type: object
|
|
weight:
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- podAffinityTerm
|
|
- weight
|
|
type: object
|
|
type: array
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
items:
|
|
properties:
|
|
labelSelector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
namespaces:
|
|
items:
|
|
type: string
|
|
type: array
|
|
topologyKey:
|
|
type: string
|
|
required:
|
|
- topologyKey
|
|
type: object
|
|
type: array
|
|
type: object
|
|
type: object
|
|
automountServiceAccountToken:
|
|
type: boolean
|
|
containers:
|
|
items:
|
|
properties:
|
|
args:
|
|
items:
|
|
type: string
|
|
type: array
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
env:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
valueFrom:
|
|
properties:
|
|
configMapKeyRef:
|
|
properties:
|
|
key:
|
|
type: string
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
required:
|
|
- key
|
|
type: object
|
|
fieldRef:
|
|
properties:
|
|
apiVersion:
|
|
type: string
|
|
fieldPath:
|
|
type: string
|
|
required:
|
|
- fieldPath
|
|
type: object
|
|
resourceFieldRef:
|
|
properties:
|
|
containerName:
|
|
type: string
|
|
divisor:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
resource:
|
|
type: string
|
|
required:
|
|
- resource
|
|
type: object
|
|
secretKeyRef:
|
|
properties:
|
|
key:
|
|
type: string
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
required:
|
|
- key
|
|
type: object
|
|
type: object
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
envFrom:
|
|
items:
|
|
properties:
|
|
configMapRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
prefix:
|
|
type: string
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
type: object
|
|
type: array
|
|
image:
|
|
type: string
|
|
imagePullPolicy:
|
|
type: string
|
|
lifecycle:
|
|
properties:
|
|
postStart:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
type: object
|
|
preStop:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
type: object
|
|
type: object
|
|
livenessProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
name:
|
|
type: string
|
|
ports:
|
|
items:
|
|
properties:
|
|
containerPort:
|
|
format: int32
|
|
type: integer
|
|
hostIP:
|
|
type: string
|
|
hostPort:
|
|
format: int32
|
|
type: integer
|
|
name:
|
|
type: string
|
|
protocol:
|
|
default: TCP
|
|
type: string
|
|
required:
|
|
- containerPort
|
|
type: object
|
|
type: array
|
|
x-kubernetes-list-map-keys:
|
|
- containerPort
|
|
- protocol
|
|
x-kubernetes-list-type: map
|
|
readinessProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
resources:
|
|
properties:
|
|
limits:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
requests:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
type: object
|
|
securityContext:
|
|
properties:
|
|
allowPrivilegeEscalation:
|
|
type: boolean
|
|
capabilities:
|
|
properties:
|
|
add:
|
|
items:
|
|
type: string
|
|
type: array
|
|
drop:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
privileged:
|
|
type: boolean
|
|
procMount:
|
|
type: string
|
|
readOnlyRootFilesystem:
|
|
type: boolean
|
|
runAsGroup:
|
|
format: int64
|
|
type: integer
|
|
runAsNonRoot:
|
|
type: boolean
|
|
runAsUser:
|
|
format: int64
|
|
type: integer
|
|
seLinuxOptions:
|
|
properties:
|
|
level:
|
|
type: string
|
|
role:
|
|
type: string
|
|
type:
|
|
type: string
|
|
user:
|
|
type: string
|
|
type: object
|
|
seccompProfile:
|
|
properties:
|
|
localhostProfile:
|
|
type: string
|
|
type:
|
|
type: string
|
|
required:
|
|
- type
|
|
type: object
|
|
windowsOptions:
|
|
properties:
|
|
gmsaCredentialSpec:
|
|
type: string
|
|
gmsaCredentialSpecName:
|
|
type: string
|
|
runAsUserName:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
startupProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
stdin:
|
|
type: boolean
|
|
stdinOnce:
|
|
type: boolean
|
|
terminationMessagePath:
|
|
type: string
|
|
terminationMessagePolicy:
|
|
type: string
|
|
tty:
|
|
type: boolean
|
|
volumeDevices:
|
|
items:
|
|
properties:
|
|
devicePath:
|
|
type: string
|
|
name:
|
|
type: string
|
|
required:
|
|
- devicePath
|
|
- name
|
|
type: object
|
|
type: array
|
|
volumeMounts:
|
|
items:
|
|
properties:
|
|
mountPath:
|
|
type: string
|
|
mountPropagation:
|
|
type: string
|
|
name:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
subPath:
|
|
type: string
|
|
subPathExpr:
|
|
type: string
|
|
required:
|
|
- mountPath
|
|
- name
|
|
type: object
|
|
type: array
|
|
workingDir:
|
|
type: string
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
dnsConfig:
|
|
properties:
|
|
nameservers:
|
|
items:
|
|
type: string
|
|
type: array
|
|
options:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
type: object
|
|
type: array
|
|
searches:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
dnsPolicy:
|
|
type: string
|
|
enableServiceLinks:
|
|
type: boolean
|
|
ephemeralContainers:
|
|
items:
|
|
properties:
|
|
args:
|
|
items:
|
|
type: string
|
|
type: array
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
env:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
valueFrom:
|
|
properties:
|
|
configMapKeyRef:
|
|
properties:
|
|
key:
|
|
type: string
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
required:
|
|
- key
|
|
type: object
|
|
fieldRef:
|
|
properties:
|
|
apiVersion:
|
|
type: string
|
|
fieldPath:
|
|
type: string
|
|
required:
|
|
- fieldPath
|
|
type: object
|
|
resourceFieldRef:
|
|
properties:
|
|
containerName:
|
|
type: string
|
|
divisor:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
resource:
|
|
type: string
|
|
required:
|
|
- resource
|
|
type: object
|
|
secretKeyRef:
|
|
properties:
|
|
key:
|
|
type: string
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
required:
|
|
- key
|
|
type: object
|
|
type: object
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
envFrom:
|
|
items:
|
|
properties:
|
|
configMapRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
prefix:
|
|
type: string
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
type: object
|
|
type: array
|
|
image:
|
|
type: string
|
|
imagePullPolicy:
|
|
type: string
|
|
lifecycle:
|
|
properties:
|
|
postStart:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
type: object
|
|
preStop:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
type: object
|
|
type: object
|
|
livenessProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
name:
|
|
type: string
|
|
ports:
|
|
items:
|
|
properties:
|
|
containerPort:
|
|
format: int32
|
|
type: integer
|
|
hostIP:
|
|
type: string
|
|
hostPort:
|
|
format: int32
|
|
type: integer
|
|
name:
|
|
type: string
|
|
protocol:
|
|
default: TCP
|
|
type: string
|
|
required:
|
|
- containerPort
|
|
type: object
|
|
type: array
|
|
readinessProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
resources:
|
|
properties:
|
|
limits:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
requests:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
type: object
|
|
securityContext:
|
|
properties:
|
|
allowPrivilegeEscalation:
|
|
type: boolean
|
|
capabilities:
|
|
properties:
|
|
add:
|
|
items:
|
|
type: string
|
|
type: array
|
|
drop:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
privileged:
|
|
type: boolean
|
|
procMount:
|
|
type: string
|
|
readOnlyRootFilesystem:
|
|
type: boolean
|
|
runAsGroup:
|
|
format: int64
|
|
type: integer
|
|
runAsNonRoot:
|
|
type: boolean
|
|
runAsUser:
|
|
format: int64
|
|
type: integer
|
|
seLinuxOptions:
|
|
properties:
|
|
level:
|
|
type: string
|
|
role:
|
|
type: string
|
|
type:
|
|
type: string
|
|
user:
|
|
type: string
|
|
type: object
|
|
seccompProfile:
|
|
properties:
|
|
localhostProfile:
|
|
type: string
|
|
type:
|
|
type: string
|
|
required:
|
|
- type
|
|
type: object
|
|
windowsOptions:
|
|
properties:
|
|
gmsaCredentialSpec:
|
|
type: string
|
|
gmsaCredentialSpecName:
|
|
type: string
|
|
runAsUserName:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
startupProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
stdin:
|
|
type: boolean
|
|
stdinOnce:
|
|
type: boolean
|
|
targetContainerName:
|
|
type: string
|
|
terminationMessagePath:
|
|
type: string
|
|
terminationMessagePolicy:
|
|
type: string
|
|
tty:
|
|
type: boolean
|
|
volumeDevices:
|
|
items:
|
|
properties:
|
|
devicePath:
|
|
type: string
|
|
name:
|
|
type: string
|
|
required:
|
|
- devicePath
|
|
- name
|
|
type: object
|
|
type: array
|
|
volumeMounts:
|
|
items:
|
|
properties:
|
|
mountPath:
|
|
type: string
|
|
mountPropagation:
|
|
type: string
|
|
name:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
subPath:
|
|
type: string
|
|
subPathExpr:
|
|
type: string
|
|
required:
|
|
- mountPath
|
|
- name
|
|
type: object
|
|
type: array
|
|
workingDir:
|
|
type: string
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
hostAliases:
|
|
items:
|
|
properties:
|
|
hostnames:
|
|
items:
|
|
type: string
|
|
type: array
|
|
ip:
|
|
type: string
|
|
type: object
|
|
type: array
|
|
hostIPC:
|
|
type: boolean
|
|
hostNetwork:
|
|
type: boolean
|
|
hostPID:
|
|
type: boolean
|
|
hostname:
|
|
type: string
|
|
imagePullSecrets:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
type: array
|
|
initContainers:
|
|
items:
|
|
properties:
|
|
args:
|
|
items:
|
|
type: string
|
|
type: array
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
env:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
valueFrom:
|
|
properties:
|
|
configMapKeyRef:
|
|
properties:
|
|
key:
|
|
type: string
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
required:
|
|
- key
|
|
type: object
|
|
fieldRef:
|
|
properties:
|
|
apiVersion:
|
|
type: string
|
|
fieldPath:
|
|
type: string
|
|
required:
|
|
- fieldPath
|
|
type: object
|
|
resourceFieldRef:
|
|
properties:
|
|
containerName:
|
|
type: string
|
|
divisor:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
resource:
|
|
type: string
|
|
required:
|
|
- resource
|
|
type: object
|
|
secretKeyRef:
|
|
properties:
|
|
key:
|
|
type: string
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
required:
|
|
- key
|
|
type: object
|
|
type: object
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
envFrom:
|
|
items:
|
|
properties:
|
|
configMapRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
prefix:
|
|
type: string
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
type: object
|
|
type: array
|
|
image:
|
|
type: string
|
|
imagePullPolicy:
|
|
type: string
|
|
lifecycle:
|
|
properties:
|
|
postStart:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
type: object
|
|
preStop:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
type: object
|
|
type: object
|
|
livenessProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
name:
|
|
type: string
|
|
ports:
|
|
items:
|
|
properties:
|
|
containerPort:
|
|
format: int32
|
|
type: integer
|
|
hostIP:
|
|
type: string
|
|
hostPort:
|
|
format: int32
|
|
type: integer
|
|
name:
|
|
type: string
|
|
protocol:
|
|
default: TCP
|
|
type: string
|
|
required:
|
|
- containerPort
|
|
type: object
|
|
type: array
|
|
x-kubernetes-list-map-keys:
|
|
- containerPort
|
|
- protocol
|
|
x-kubernetes-list-type: map
|
|
readinessProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
resources:
|
|
properties:
|
|
limits:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
requests:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
type: object
|
|
securityContext:
|
|
properties:
|
|
allowPrivilegeEscalation:
|
|
type: boolean
|
|
capabilities:
|
|
properties:
|
|
add:
|
|
items:
|
|
type: string
|
|
type: array
|
|
drop:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
privileged:
|
|
type: boolean
|
|
procMount:
|
|
type: string
|
|
readOnlyRootFilesystem:
|
|
type: boolean
|
|
runAsGroup:
|
|
format: int64
|
|
type: integer
|
|
runAsNonRoot:
|
|
type: boolean
|
|
runAsUser:
|
|
format: int64
|
|
type: integer
|
|
seLinuxOptions:
|
|
properties:
|
|
level:
|
|
type: string
|
|
role:
|
|
type: string
|
|
type:
|
|
type: string
|
|
user:
|
|
type: string
|
|
type: object
|
|
seccompProfile:
|
|
properties:
|
|
localhostProfile:
|
|
type: string
|
|
type:
|
|
type: string
|
|
required:
|
|
- type
|
|
type: object
|
|
windowsOptions:
|
|
properties:
|
|
gmsaCredentialSpec:
|
|
type: string
|
|
gmsaCredentialSpecName:
|
|
type: string
|
|
runAsUserName:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
startupProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
stdin:
|
|
type: boolean
|
|
stdinOnce:
|
|
type: boolean
|
|
terminationMessagePath:
|
|
type: string
|
|
terminationMessagePolicy:
|
|
type: string
|
|
tty:
|
|
type: boolean
|
|
volumeDevices:
|
|
items:
|
|
properties:
|
|
devicePath:
|
|
type: string
|
|
name:
|
|
type: string
|
|
required:
|
|
- devicePath
|
|
- name
|
|
type: object
|
|
type: array
|
|
volumeMounts:
|
|
items:
|
|
properties:
|
|
mountPath:
|
|
type: string
|
|
mountPropagation:
|
|
type: string
|
|
name:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
subPath:
|
|
type: string
|
|
subPathExpr:
|
|
type: string
|
|
required:
|
|
- mountPath
|
|
- name
|
|
type: object
|
|
type: array
|
|
workingDir:
|
|
type: string
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
nodeName:
|
|
type: string
|
|
nodeSelector:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
overhead:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
preemptionPolicy:
|
|
type: string
|
|
priority:
|
|
format: int32
|
|
type: integer
|
|
priorityClassName:
|
|
type: string
|
|
readinessGates:
|
|
items:
|
|
properties:
|
|
conditionType:
|
|
type: string
|
|
required:
|
|
- conditionType
|
|
type: object
|
|
type: array
|
|
restartPolicy:
|
|
type: string
|
|
runtimeClassName:
|
|
type: string
|
|
schedulerName:
|
|
type: string
|
|
securityContext:
|
|
properties:
|
|
fsGroup:
|
|
format: int64
|
|
type: integer
|
|
fsGroupChangePolicy:
|
|
type: string
|
|
runAsGroup:
|
|
format: int64
|
|
type: integer
|
|
runAsNonRoot:
|
|
type: boolean
|
|
runAsUser:
|
|
format: int64
|
|
type: integer
|
|
seLinuxOptions:
|
|
properties:
|
|
level:
|
|
type: string
|
|
role:
|
|
type: string
|
|
type:
|
|
type: string
|
|
user:
|
|
type: string
|
|
type: object
|
|
seccompProfile:
|
|
properties:
|
|
localhostProfile:
|
|
type: string
|
|
type:
|
|
type: string
|
|
required:
|
|
- type
|
|
type: object
|
|
supplementalGroups:
|
|
items:
|
|
format: int64
|
|
type: integer
|
|
type: array
|
|
sysctls:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
windowsOptions:
|
|
properties:
|
|
gmsaCredentialSpec:
|
|
type: string
|
|
gmsaCredentialSpecName:
|
|
type: string
|
|
runAsUserName:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
serviceAccount:
|
|
type: string
|
|
serviceAccountName:
|
|
type: string
|
|
setHostnameAsFQDN:
|
|
type: boolean
|
|
shareProcessNamespace:
|
|
type: boolean
|
|
subdomain:
|
|
type: string
|
|
terminationGracePeriodSeconds:
|
|
format: int64
|
|
type: integer
|
|
tolerations:
|
|
items:
|
|
properties:
|
|
effect:
|
|
type: string
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
tolerationSeconds:
|
|
format: int64
|
|
type: integer
|
|
value:
|
|
type: string
|
|
type: object
|
|
type: array
|
|
topologySpreadConstraints:
|
|
items:
|
|
properties:
|
|
labelSelector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
maxSkew:
|
|
format: int32
|
|
type: integer
|
|
topologyKey:
|
|
type: string
|
|
whenUnsatisfiable:
|
|
type: string
|
|
required:
|
|
- maxSkew
|
|
- topologyKey
|
|
- whenUnsatisfiable
|
|
type: object
|
|
type: array
|
|
x-kubernetes-list-map-keys:
|
|
- topologyKey
|
|
- whenUnsatisfiable
|
|
x-kubernetes-list-type: map
|
|
volumes:
|
|
items:
|
|
properties:
|
|
awsElasticBlockStore:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
partition:
|
|
format: int32
|
|
type: integer
|
|
readOnly:
|
|
type: boolean
|
|
volumeID:
|
|
type: string
|
|
required:
|
|
- volumeID
|
|
type: object
|
|
azureDisk:
|
|
properties:
|
|
cachingMode:
|
|
type: string
|
|
diskName:
|
|
type: string
|
|
diskURI:
|
|
type: string
|
|
fsType:
|
|
type: string
|
|
kind:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
required:
|
|
- diskName
|
|
- diskURI
|
|
type: object
|
|
azureFile:
|
|
properties:
|
|
readOnly:
|
|
type: boolean
|
|
secretName:
|
|
type: string
|
|
shareName:
|
|
type: string
|
|
required:
|
|
- secretName
|
|
- shareName
|
|
type: object
|
|
cephfs:
|
|
properties:
|
|
monitors:
|
|
items:
|
|
type: string
|
|
type: array
|
|
path:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
secretFile:
|
|
type: string
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
user:
|
|
type: string
|
|
required:
|
|
- monitors
|
|
type: object
|
|
cinder:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
volumeID:
|
|
type: string
|
|
required:
|
|
- volumeID
|
|
type: object
|
|
configMap:
|
|
properties:
|
|
defaultMode:
|
|
format: int32
|
|
type: integer
|
|
items:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
mode:
|
|
format: int32
|
|
type: integer
|
|
path:
|
|
type: string
|
|
required:
|
|
- key
|
|
- path
|
|
type: object
|
|
type: array
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
csi:
|
|
properties:
|
|
driver:
|
|
type: string
|
|
fsType:
|
|
type: string
|
|
nodePublishSecretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
readOnly:
|
|
type: boolean
|
|
volumeAttributes:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
required:
|
|
- driver
|
|
type: object
|
|
downwardAPI:
|
|
properties:
|
|
defaultMode:
|
|
format: int32
|
|
type: integer
|
|
items:
|
|
items:
|
|
properties:
|
|
fieldRef:
|
|
properties:
|
|
apiVersion:
|
|
type: string
|
|
fieldPath:
|
|
type: string
|
|
required:
|
|
- fieldPath
|
|
type: object
|
|
mode:
|
|
format: int32
|
|
type: integer
|
|
path:
|
|
type: string
|
|
resourceFieldRef:
|
|
properties:
|
|
containerName:
|
|
type: string
|
|
divisor:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
resource:
|
|
type: string
|
|
required:
|
|
- resource
|
|
type: object
|
|
required:
|
|
- path
|
|
type: object
|
|
type: array
|
|
type: object
|
|
emptyDir:
|
|
properties:
|
|
medium:
|
|
type: string
|
|
sizeLimit:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
ephemeral:
|
|
properties:
|
|
readOnly:
|
|
type: boolean
|
|
volumeClaimTemplate:
|
|
properties:
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
properties:
|
|
accessModes:
|
|
items:
|
|
type: string
|
|
type: array
|
|
dataSource:
|
|
properties:
|
|
apiGroup:
|
|
type: string
|
|
kind:
|
|
type: string
|
|
name:
|
|
type: string
|
|
required:
|
|
- kind
|
|
- name
|
|
type: object
|
|
resources:
|
|
properties:
|
|
limits:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
requests:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
type: object
|
|
selector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
storageClassName:
|
|
type: string
|
|
volumeMode:
|
|
type: string
|
|
volumeName:
|
|
type: string
|
|
type: object
|
|
required:
|
|
- spec
|
|
type: object
|
|
type: object
|
|
fc:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
lun:
|
|
format: int32
|
|
type: integer
|
|
readOnly:
|
|
type: boolean
|
|
targetWWNs:
|
|
items:
|
|
type: string
|
|
type: array
|
|
wwids:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
flexVolume:
|
|
properties:
|
|
driver:
|
|
type: string
|
|
fsType:
|
|
type: string
|
|
options:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
readOnly:
|
|
type: boolean
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
required:
|
|
- driver
|
|
type: object
|
|
flocker:
|
|
properties:
|
|
datasetName:
|
|
type: string
|
|
datasetUUID:
|
|
type: string
|
|
type: object
|
|
gcePersistentDisk:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
partition:
|
|
format: int32
|
|
type: integer
|
|
pdName:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
required:
|
|
- pdName
|
|
type: object
|
|
gitRepo:
|
|
properties:
|
|
directory:
|
|
type: string
|
|
repository:
|
|
type: string
|
|
revision:
|
|
type: string
|
|
required:
|
|
- repository
|
|
type: object
|
|
glusterfs:
|
|
properties:
|
|
endpoints:
|
|
type: string
|
|
path:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
required:
|
|
- endpoints
|
|
- path
|
|
type: object
|
|
hostPath:
|
|
properties:
|
|
path:
|
|
type: string
|
|
type:
|
|
type: string
|
|
required:
|
|
- path
|
|
type: object
|
|
iscsi:
|
|
properties:
|
|
chapAuthDiscovery:
|
|
type: boolean
|
|
chapAuthSession:
|
|
type: boolean
|
|
fsType:
|
|
type: string
|
|
initiatorName:
|
|
type: string
|
|
iqn:
|
|
type: string
|
|
iscsiInterface:
|
|
type: string
|
|
lun:
|
|
format: int32
|
|
type: integer
|
|
portals:
|
|
items:
|
|
type: string
|
|
type: array
|
|
readOnly:
|
|
type: boolean
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
targetPortal:
|
|
type: string
|
|
required:
|
|
- iqn
|
|
- lun
|
|
- targetPortal
|
|
type: object
|
|
name:
|
|
type: string
|
|
nfs:
|
|
properties:
|
|
path:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
server:
|
|
type: string
|
|
required:
|
|
- path
|
|
- server
|
|
type: object
|
|
persistentVolumeClaim:
|
|
properties:
|
|
claimName:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
required:
|
|
- claimName
|
|
type: object
|
|
photonPersistentDisk:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
pdID:
|
|
type: string
|
|
required:
|
|
- pdID
|
|
type: object
|
|
portworxVolume:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
volumeID:
|
|
type: string
|
|
required:
|
|
- volumeID
|
|
type: object
|
|
projected:
|
|
properties:
|
|
defaultMode:
|
|
format: int32
|
|
type: integer
|
|
sources:
|
|
items:
|
|
properties:
|
|
configMap:
|
|
properties:
|
|
items:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
mode:
|
|
format: int32
|
|
type: integer
|
|
path:
|
|
type: string
|
|
required:
|
|
- key
|
|
- path
|
|
type: object
|
|
type: array
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
downwardAPI:
|
|
properties:
|
|
items:
|
|
items:
|
|
properties:
|
|
fieldRef:
|
|
properties:
|
|
apiVersion:
|
|
type: string
|
|
fieldPath:
|
|
type: string
|
|
required:
|
|
- fieldPath
|
|
type: object
|
|
mode:
|
|
format: int32
|
|
type: integer
|
|
path:
|
|
type: string
|
|
resourceFieldRef:
|
|
properties:
|
|
containerName:
|
|
type: string
|
|
divisor:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
resource:
|
|
type: string
|
|
required:
|
|
- resource
|
|
type: object
|
|
required:
|
|
- path
|
|
type: object
|
|
type: array
|
|
type: object
|
|
secret:
|
|
properties:
|
|
items:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
mode:
|
|
format: int32
|
|
type: integer
|
|
path:
|
|
type: string
|
|
required:
|
|
- key
|
|
- path
|
|
type: object
|
|
type: array
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
serviceAccountToken:
|
|
properties:
|
|
audience:
|
|
type: string
|
|
expirationSeconds:
|
|
format: int64
|
|
type: integer
|
|
path:
|
|
type: string
|
|
required:
|
|
- path
|
|
type: object
|
|
type: object
|
|
type: array
|
|
type: object
|
|
quobyte:
|
|
properties:
|
|
group:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
registry:
|
|
type: string
|
|
tenant:
|
|
type: string
|
|
user:
|
|
type: string
|
|
volume:
|
|
type: string
|
|
required:
|
|
- registry
|
|
- volume
|
|
type: object
|
|
rbd:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
image:
|
|
type: string
|
|
keyring:
|
|
type: string
|
|
monitors:
|
|
items:
|
|
type: string
|
|
type: array
|
|
pool:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
user:
|
|
type: string
|
|
required:
|
|
- image
|
|
- monitors
|
|
type: object
|
|
scaleIO:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
gateway:
|
|
type: string
|
|
protectionDomain:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
sslEnabled:
|
|
type: boolean
|
|
storageMode:
|
|
type: string
|
|
storagePool:
|
|
type: string
|
|
system:
|
|
type: string
|
|
volumeName:
|
|
type: string
|
|
required:
|
|
- gateway
|
|
- secretRef
|
|
- system
|
|
type: object
|
|
secret:
|
|
properties:
|
|
defaultMode:
|
|
format: int32
|
|
type: integer
|
|
items:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
mode:
|
|
format: int32
|
|
type: integer
|
|
path:
|
|
type: string
|
|
required:
|
|
- key
|
|
- path
|
|
type: object
|
|
type: array
|
|
optional:
|
|
type: boolean
|
|
secretName:
|
|
type: string
|
|
type: object
|
|
storageos:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
volumeName:
|
|
type: string
|
|
volumeNamespace:
|
|
type: string
|
|
type: object
|
|
vsphereVolume:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
storagePolicyID:
|
|
type: string
|
|
storagePolicyName:
|
|
type: string
|
|
volumePath:
|
|
type: string
|
|
required:
|
|
- volumePath
|
|
type: object
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
required:
|
|
- containers
|
|
type: object
|
|
type: object
|
|
updateStrategy:
|
|
properties:
|
|
inPlaceUpdateStrategy:
|
|
properties:
|
|
gracePeriodSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
maxSurge:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
maxUnavailable:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
partition:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
paused:
|
|
type: boolean
|
|
priorityStrategy:
|
|
properties:
|
|
orderPriority:
|
|
items:
|
|
properties:
|
|
orderedKey:
|
|
type: string
|
|
required:
|
|
- orderedKey
|
|
type: object
|
|
type: array
|
|
weightPriority:
|
|
items:
|
|
properties:
|
|
matchSelector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
weight:
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- matchSelector
|
|
- weight
|
|
type: object
|
|
type: array
|
|
type: object
|
|
scatterStrategy:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- key
|
|
- value
|
|
type: object
|
|
type: array
|
|
type:
|
|
type: string
|
|
type: object
|
|
volumeClaimTemplates:
|
|
items:
|
|
properties:
|
|
apiVersion:
|
|
type: string
|
|
kind:
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
properties:
|
|
accessModes:
|
|
items:
|
|
type: string
|
|
type: array
|
|
dataSource:
|
|
properties:
|
|
apiGroup:
|
|
type: string
|
|
kind:
|
|
type: string
|
|
name:
|
|
type: string
|
|
required:
|
|
- kind
|
|
- name
|
|
type: object
|
|
resources:
|
|
properties:
|
|
limits:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
requests:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
type: object
|
|
selector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
storageClassName:
|
|
type: string
|
|
volumeMode:
|
|
type: string
|
|
volumeName:
|
|
type: string
|
|
type: object
|
|
status:
|
|
properties:
|
|
accessModes:
|
|
items:
|
|
type: string
|
|
type: array
|
|
capacity:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
conditions:
|
|
items:
|
|
properties:
|
|
lastProbeTime:
|
|
format: date-time
|
|
type: string
|
|
lastTransitionTime:
|
|
format: date-time
|
|
type: string
|
|
message:
|
|
type: string
|
|
reason:
|
|
type: string
|
|
status:
|
|
type: string
|
|
type:
|
|
type: string
|
|
required:
|
|
- status
|
|
- type
|
|
type: object
|
|
type: array
|
|
phase:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
type: array
|
|
required:
|
|
- selector
|
|
- template
|
|
type: object
|
|
containers:
|
|
items:
|
|
properties:
|
|
args:
|
|
items:
|
|
type: string
|
|
type: array
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
env:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
valueFrom:
|
|
properties:
|
|
configMapKeyRef:
|
|
properties:
|
|
key:
|
|
type: string
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
required:
|
|
- key
|
|
type: object
|
|
fieldRef:
|
|
properties:
|
|
apiVersion:
|
|
type: string
|
|
fieldPath:
|
|
type: string
|
|
required:
|
|
- fieldPath
|
|
type: object
|
|
resourceFieldRef:
|
|
properties:
|
|
containerName:
|
|
type: string
|
|
divisor:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
resource:
|
|
type: string
|
|
required:
|
|
- resource
|
|
type: object
|
|
secretKeyRef:
|
|
properties:
|
|
key:
|
|
type: string
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
required:
|
|
- key
|
|
type: object
|
|
type: object
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
envFrom:
|
|
items:
|
|
properties:
|
|
configMapRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
prefix:
|
|
type: string
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
type: object
|
|
type: array
|
|
image:
|
|
type: string
|
|
imagePullPolicy:
|
|
type: string
|
|
lifecycle:
|
|
properties:
|
|
postStart:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
type: object
|
|
preStop:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
type: object
|
|
type: object
|
|
livenessProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
name:
|
|
type: string
|
|
ports:
|
|
items:
|
|
properties:
|
|
containerPort:
|
|
format: int32
|
|
type: integer
|
|
hostIP:
|
|
type: string
|
|
hostPort:
|
|
format: int32
|
|
type: integer
|
|
name:
|
|
type: string
|
|
protocol:
|
|
default: TCP
|
|
type: string
|
|
required:
|
|
- containerPort
|
|
type: object
|
|
type: array
|
|
x-kubernetes-list-map-keys:
|
|
- containerPort
|
|
- protocol
|
|
x-kubernetes-list-type: map
|
|
readinessProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
resources:
|
|
properties:
|
|
limits:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
requests:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
type: object
|
|
securityContext:
|
|
properties:
|
|
allowPrivilegeEscalation:
|
|
type: boolean
|
|
capabilities:
|
|
properties:
|
|
add:
|
|
items:
|
|
type: string
|
|
type: array
|
|
drop:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
privileged:
|
|
type: boolean
|
|
procMount:
|
|
type: string
|
|
readOnlyRootFilesystem:
|
|
type: boolean
|
|
runAsGroup:
|
|
format: int64
|
|
type: integer
|
|
runAsNonRoot:
|
|
type: boolean
|
|
runAsUser:
|
|
format: int64
|
|
type: integer
|
|
seLinuxOptions:
|
|
properties:
|
|
level:
|
|
type: string
|
|
role:
|
|
type: string
|
|
type:
|
|
type: string
|
|
user:
|
|
type: string
|
|
type: object
|
|
seccompProfile:
|
|
properties:
|
|
localhostProfile:
|
|
type: string
|
|
type:
|
|
type: string
|
|
required:
|
|
- type
|
|
type: object
|
|
windowsOptions:
|
|
properties:
|
|
gmsaCredentialSpec:
|
|
type: string
|
|
gmsaCredentialSpecName:
|
|
type: string
|
|
runAsUserName:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
startupProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
stdin:
|
|
type: boolean
|
|
stdinOnce:
|
|
type: boolean
|
|
terminationMessagePath:
|
|
type: string
|
|
terminationMessagePolicy:
|
|
type: string
|
|
tty:
|
|
type: boolean
|
|
volumeDevices:
|
|
items:
|
|
properties:
|
|
devicePath:
|
|
type: string
|
|
name:
|
|
type: string
|
|
required:
|
|
- devicePath
|
|
- name
|
|
type: object
|
|
type: array
|
|
volumeMounts:
|
|
items:
|
|
properties:
|
|
mountPath:
|
|
type: string
|
|
mountPropagation:
|
|
type: string
|
|
name:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
subPath:
|
|
type: string
|
|
subPathExpr:
|
|
type: string
|
|
required:
|
|
- mountPath
|
|
- name
|
|
type: object
|
|
type: array
|
|
workingDir:
|
|
type: string
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
env:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
initContainers:
|
|
items:
|
|
properties:
|
|
args:
|
|
items:
|
|
type: string
|
|
type: array
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
env:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
valueFrom:
|
|
properties:
|
|
configMapKeyRef:
|
|
properties:
|
|
key:
|
|
type: string
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
required:
|
|
- key
|
|
type: object
|
|
fieldRef:
|
|
properties:
|
|
apiVersion:
|
|
type: string
|
|
fieldPath:
|
|
type: string
|
|
required:
|
|
- fieldPath
|
|
type: object
|
|
resourceFieldRef:
|
|
properties:
|
|
containerName:
|
|
type: string
|
|
divisor:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
resource:
|
|
type: string
|
|
required:
|
|
- resource
|
|
type: object
|
|
secretKeyRef:
|
|
properties:
|
|
key:
|
|
type: string
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
required:
|
|
- key
|
|
type: object
|
|
type: object
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
envFrom:
|
|
items:
|
|
properties:
|
|
configMapRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
prefix:
|
|
type: string
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
type: object
|
|
type: array
|
|
image:
|
|
type: string
|
|
imagePullPolicy:
|
|
type: string
|
|
lifecycle:
|
|
properties:
|
|
postStart:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
type: object
|
|
preStop:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
type: object
|
|
type: object
|
|
livenessProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
name:
|
|
type: string
|
|
ports:
|
|
items:
|
|
properties:
|
|
containerPort:
|
|
format: int32
|
|
type: integer
|
|
hostIP:
|
|
type: string
|
|
hostPort:
|
|
format: int32
|
|
type: integer
|
|
name:
|
|
type: string
|
|
protocol:
|
|
default: TCP
|
|
type: string
|
|
required:
|
|
- containerPort
|
|
type: object
|
|
type: array
|
|
x-kubernetes-list-map-keys:
|
|
- containerPort
|
|
- protocol
|
|
x-kubernetes-list-type: map
|
|
readinessProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
resources:
|
|
properties:
|
|
limits:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
requests:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
type: object
|
|
securityContext:
|
|
properties:
|
|
allowPrivilegeEscalation:
|
|
type: boolean
|
|
capabilities:
|
|
properties:
|
|
add:
|
|
items:
|
|
type: string
|
|
type: array
|
|
drop:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
privileged:
|
|
type: boolean
|
|
procMount:
|
|
type: string
|
|
readOnlyRootFilesystem:
|
|
type: boolean
|
|
runAsGroup:
|
|
format: int64
|
|
type: integer
|
|
runAsNonRoot:
|
|
type: boolean
|
|
runAsUser:
|
|
format: int64
|
|
type: integer
|
|
seLinuxOptions:
|
|
properties:
|
|
level:
|
|
type: string
|
|
role:
|
|
type: string
|
|
type:
|
|
type: string
|
|
user:
|
|
type: string
|
|
type: object
|
|
seccompProfile:
|
|
properties:
|
|
localhostProfile:
|
|
type: string
|
|
type:
|
|
type: string
|
|
required:
|
|
- type
|
|
type: object
|
|
windowsOptions:
|
|
properties:
|
|
gmsaCredentialSpec:
|
|
type: string
|
|
gmsaCredentialSpecName:
|
|
type: string
|
|
runAsUserName:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
startupProbe:
|
|
properties:
|
|
exec:
|
|
properties:
|
|
command:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
failureThreshold:
|
|
format: int32
|
|
type: integer
|
|
httpGet:
|
|
properties:
|
|
host:
|
|
type: string
|
|
httpHeaders:
|
|
items:
|
|
properties:
|
|
name:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
initialDelaySeconds:
|
|
format: int32
|
|
type: integer
|
|
periodSeconds:
|
|
format: int32
|
|
type: integer
|
|
successThreshold:
|
|
format: int32
|
|
type: integer
|
|
tcpSocket:
|
|
properties:
|
|
host:
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
stdin:
|
|
type: boolean
|
|
stdinOnce:
|
|
type: boolean
|
|
terminationMessagePath:
|
|
type: string
|
|
terminationMessagePolicy:
|
|
type: string
|
|
tty:
|
|
type: boolean
|
|
volumeDevices:
|
|
items:
|
|
properties:
|
|
devicePath:
|
|
type: string
|
|
name:
|
|
type: string
|
|
required:
|
|
- devicePath
|
|
- name
|
|
type: object
|
|
type: array
|
|
volumeMounts:
|
|
items:
|
|
properties:
|
|
mountPath:
|
|
type: string
|
|
mountPropagation:
|
|
type: string
|
|
name:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
subPath:
|
|
type: string
|
|
subPathExpr:
|
|
type: string
|
|
required:
|
|
- mountPath
|
|
- name
|
|
type: object
|
|
type: array
|
|
workingDir:
|
|
type: string
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
initialized:
|
|
type: boolean
|
|
kind:
|
|
type: string
|
|
progressDeadlineSeconds:
|
|
format: int32
|
|
type: integer
|
|
replicas:
|
|
format: int32
|
|
type: integer
|
|
service:
|
|
properties:
|
|
allocateLoadBalancerNodePorts:
|
|
type: boolean
|
|
clusterIP:
|
|
type: string
|
|
clusterIPs:
|
|
items:
|
|
type: string
|
|
type: array
|
|
x-kubernetes-list-type: atomic
|
|
externalIPs:
|
|
items:
|
|
type: string
|
|
type: array
|
|
externalName:
|
|
type: string
|
|
externalTrafficPolicy:
|
|
type: string
|
|
healthCheckNodePort:
|
|
format: int32
|
|
type: integer
|
|
ipFamilies:
|
|
items:
|
|
type: string
|
|
type: array
|
|
x-kubernetes-list-type: atomic
|
|
ipFamilyPolicy:
|
|
type: string
|
|
loadBalancerIP:
|
|
type: string
|
|
loadBalancerSourceRanges:
|
|
items:
|
|
type: string
|
|
type: array
|
|
ports:
|
|
items:
|
|
properties:
|
|
appProtocol:
|
|
type: string
|
|
name:
|
|
type: string
|
|
nodePort:
|
|
format: int32
|
|
type: integer
|
|
port:
|
|
format: int32
|
|
type: integer
|
|
protocol:
|
|
default: TCP
|
|
type: string
|
|
targetPort:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
type: array
|
|
x-kubernetes-list-map-keys:
|
|
- port
|
|
- protocol
|
|
x-kubernetes-list-type: map
|
|
publishNotReadyAddresses:
|
|
type: boolean
|
|
selector:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
sessionAffinity:
|
|
type: string
|
|
sessionAffinityConfig:
|
|
properties:
|
|
clientIP:
|
|
properties:
|
|
timeoutSeconds:
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
type: object
|
|
topologyKeys:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type:
|
|
type: string
|
|
type: object
|
|
tolerations:
|
|
items:
|
|
properties:
|
|
effect:
|
|
type: string
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
tolerationSeconds:
|
|
format: int64
|
|
type: integer
|
|
value:
|
|
type: string
|
|
type: object
|
|
type: array
|
|
volumes:
|
|
items:
|
|
properties:
|
|
awsElasticBlockStore:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
partition:
|
|
format: int32
|
|
type: integer
|
|
readOnly:
|
|
type: boolean
|
|
volumeID:
|
|
type: string
|
|
required:
|
|
- volumeID
|
|
type: object
|
|
azureDisk:
|
|
properties:
|
|
cachingMode:
|
|
type: string
|
|
diskName:
|
|
type: string
|
|
diskURI:
|
|
type: string
|
|
fsType:
|
|
type: string
|
|
kind:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
required:
|
|
- diskName
|
|
- diskURI
|
|
type: object
|
|
azureFile:
|
|
properties:
|
|
readOnly:
|
|
type: boolean
|
|
secretName:
|
|
type: string
|
|
shareName:
|
|
type: string
|
|
required:
|
|
- secretName
|
|
- shareName
|
|
type: object
|
|
cephfs:
|
|
properties:
|
|
monitors:
|
|
items:
|
|
type: string
|
|
type: array
|
|
path:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
secretFile:
|
|
type: string
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
user:
|
|
type: string
|
|
required:
|
|
- monitors
|
|
type: object
|
|
cinder:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
volumeID:
|
|
type: string
|
|
required:
|
|
- volumeID
|
|
type: object
|
|
configMap:
|
|
properties:
|
|
defaultMode:
|
|
format: int32
|
|
type: integer
|
|
items:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
mode:
|
|
format: int32
|
|
type: integer
|
|
path:
|
|
type: string
|
|
required:
|
|
- key
|
|
- path
|
|
type: object
|
|
type: array
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
csi:
|
|
properties:
|
|
driver:
|
|
type: string
|
|
fsType:
|
|
type: string
|
|
nodePublishSecretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
readOnly:
|
|
type: boolean
|
|
volumeAttributes:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
required:
|
|
- driver
|
|
type: object
|
|
downwardAPI:
|
|
properties:
|
|
defaultMode:
|
|
format: int32
|
|
type: integer
|
|
items:
|
|
items:
|
|
properties:
|
|
fieldRef:
|
|
properties:
|
|
apiVersion:
|
|
type: string
|
|
fieldPath:
|
|
type: string
|
|
required:
|
|
- fieldPath
|
|
type: object
|
|
mode:
|
|
format: int32
|
|
type: integer
|
|
path:
|
|
type: string
|
|
resourceFieldRef:
|
|
properties:
|
|
containerName:
|
|
type: string
|
|
divisor:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
resource:
|
|
type: string
|
|
required:
|
|
- resource
|
|
type: object
|
|
required:
|
|
- path
|
|
type: object
|
|
type: array
|
|
type: object
|
|
emptyDir:
|
|
properties:
|
|
medium:
|
|
type: string
|
|
sizeLimit:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
ephemeral:
|
|
properties:
|
|
readOnly:
|
|
type: boolean
|
|
volumeClaimTemplate:
|
|
properties:
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
properties:
|
|
accessModes:
|
|
items:
|
|
type: string
|
|
type: array
|
|
dataSource:
|
|
properties:
|
|
apiGroup:
|
|
type: string
|
|
kind:
|
|
type: string
|
|
name:
|
|
type: string
|
|
required:
|
|
- kind
|
|
- name
|
|
type: object
|
|
resources:
|
|
properties:
|
|
limits:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
requests:
|
|
additionalProperties:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
type: object
|
|
selector:
|
|
properties:
|
|
matchExpressions:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
operator:
|
|
type: string
|
|
values:
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
storageClassName:
|
|
type: string
|
|
volumeMode:
|
|
type: string
|
|
volumeName:
|
|
type: string
|
|
type: object
|
|
required:
|
|
- spec
|
|
type: object
|
|
type: object
|
|
fc:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
lun:
|
|
format: int32
|
|
type: integer
|
|
readOnly:
|
|
type: boolean
|
|
targetWWNs:
|
|
items:
|
|
type: string
|
|
type: array
|
|
wwids:
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
flexVolume:
|
|
properties:
|
|
driver:
|
|
type: string
|
|
fsType:
|
|
type: string
|
|
options:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
readOnly:
|
|
type: boolean
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
required:
|
|
- driver
|
|
type: object
|
|
flocker:
|
|
properties:
|
|
datasetName:
|
|
type: string
|
|
datasetUUID:
|
|
type: string
|
|
type: object
|
|
gcePersistentDisk:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
partition:
|
|
format: int32
|
|
type: integer
|
|
pdName:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
required:
|
|
- pdName
|
|
type: object
|
|
gitRepo:
|
|
properties:
|
|
directory:
|
|
type: string
|
|
repository:
|
|
type: string
|
|
revision:
|
|
type: string
|
|
required:
|
|
- repository
|
|
type: object
|
|
glusterfs:
|
|
properties:
|
|
endpoints:
|
|
type: string
|
|
path:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
required:
|
|
- endpoints
|
|
- path
|
|
type: object
|
|
hostPath:
|
|
properties:
|
|
path:
|
|
type: string
|
|
type:
|
|
type: string
|
|
required:
|
|
- path
|
|
type: object
|
|
iscsi:
|
|
properties:
|
|
chapAuthDiscovery:
|
|
type: boolean
|
|
chapAuthSession:
|
|
type: boolean
|
|
fsType:
|
|
type: string
|
|
initiatorName:
|
|
type: string
|
|
iqn:
|
|
type: string
|
|
iscsiInterface:
|
|
type: string
|
|
lun:
|
|
format: int32
|
|
type: integer
|
|
portals:
|
|
items:
|
|
type: string
|
|
type: array
|
|
readOnly:
|
|
type: boolean
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
targetPortal:
|
|
type: string
|
|
required:
|
|
- iqn
|
|
- lun
|
|
- targetPortal
|
|
type: object
|
|
name:
|
|
type: string
|
|
nfs:
|
|
properties:
|
|
path:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
server:
|
|
type: string
|
|
required:
|
|
- path
|
|
- server
|
|
type: object
|
|
persistentVolumeClaim:
|
|
properties:
|
|
claimName:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
required:
|
|
- claimName
|
|
type: object
|
|
photonPersistentDisk:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
pdID:
|
|
type: string
|
|
required:
|
|
- pdID
|
|
type: object
|
|
portworxVolume:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
volumeID:
|
|
type: string
|
|
required:
|
|
- volumeID
|
|
type: object
|
|
projected:
|
|
properties:
|
|
defaultMode:
|
|
format: int32
|
|
type: integer
|
|
sources:
|
|
items:
|
|
properties:
|
|
configMap:
|
|
properties:
|
|
items:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
mode:
|
|
format: int32
|
|
type: integer
|
|
path:
|
|
type: string
|
|
required:
|
|
- key
|
|
- path
|
|
type: object
|
|
type: array
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
downwardAPI:
|
|
properties:
|
|
items:
|
|
items:
|
|
properties:
|
|
fieldRef:
|
|
properties:
|
|
apiVersion:
|
|
type: string
|
|
fieldPath:
|
|
type: string
|
|
required:
|
|
- fieldPath
|
|
type: object
|
|
mode:
|
|
format: int32
|
|
type: integer
|
|
path:
|
|
type: string
|
|
resourceFieldRef:
|
|
properties:
|
|
containerName:
|
|
type: string
|
|
divisor:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
pattern: >-
|
|
^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
|
x-kubernetes-int-or-string: true
|
|
resource:
|
|
type: string
|
|
required:
|
|
- resource
|
|
type: object
|
|
required:
|
|
- path
|
|
type: object
|
|
type: array
|
|
type: object
|
|
secret:
|
|
properties:
|
|
items:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
mode:
|
|
format: int32
|
|
type: integer
|
|
path:
|
|
type: string
|
|
required:
|
|
- key
|
|
- path
|
|
type: object
|
|
type: array
|
|
name:
|
|
type: string
|
|
optional:
|
|
type: boolean
|
|
type: object
|
|
serviceAccountToken:
|
|
properties:
|
|
audience:
|
|
type: string
|
|
expirationSeconds:
|
|
format: int64
|
|
type: integer
|
|
path:
|
|
type: string
|
|
required:
|
|
- path
|
|
type: object
|
|
type: object
|
|
type: array
|
|
type: object
|
|
quobyte:
|
|
properties:
|
|
group:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
registry:
|
|
type: string
|
|
tenant:
|
|
type: string
|
|
user:
|
|
type: string
|
|
volume:
|
|
type: string
|
|
required:
|
|
- registry
|
|
- volume
|
|
type: object
|
|
rbd:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
image:
|
|
type: string
|
|
keyring:
|
|
type: string
|
|
monitors:
|
|
items:
|
|
type: string
|
|
type: array
|
|
pool:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
user:
|
|
type: string
|
|
required:
|
|
- image
|
|
- monitors
|
|
type: object
|
|
scaleIO:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
gateway:
|
|
type: string
|
|
protectionDomain:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
sslEnabled:
|
|
type: boolean
|
|
storageMode:
|
|
type: string
|
|
storagePool:
|
|
type: string
|
|
system:
|
|
type: string
|
|
volumeName:
|
|
type: string
|
|
required:
|
|
- gateway
|
|
- secretRef
|
|
- system
|
|
type: object
|
|
secret:
|
|
properties:
|
|
defaultMode:
|
|
format: int32
|
|
type: integer
|
|
items:
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
mode:
|
|
format: int32
|
|
type: integer
|
|
path:
|
|
type: string
|
|
required:
|
|
- key
|
|
- path
|
|
type: object
|
|
type: array
|
|
optional:
|
|
type: boolean
|
|
secretName:
|
|
type: string
|
|
type: object
|
|
storageos:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
readOnly:
|
|
type: boolean
|
|
secretRef:
|
|
properties:
|
|
name:
|
|
type: string
|
|
type: object
|
|
volumeName:
|
|
type: string
|
|
volumeNamespace:
|
|
type: string
|
|
type: object
|
|
vsphereVolume:
|
|
properties:
|
|
fsType:
|
|
type: string
|
|
storagePolicyID:
|
|
type: string
|
|
storagePolicyName:
|
|
type: string
|
|
volumePath:
|
|
type: string
|
|
required:
|
|
- volumePath
|
|
type: object
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
type: object
|
|
status:
|
|
properties:
|
|
condition:
|
|
type: string
|
|
conditions:
|
|
items:
|
|
properties:
|
|
lastTransitionTime:
|
|
format: date-time
|
|
type: string
|
|
message:
|
|
maxLength: 32768
|
|
type: string
|
|
observedGeneration:
|
|
format: int64
|
|
minimum: 0
|
|
type: integer
|
|
reason:
|
|
maxLength: 1024
|
|
minLength: 1
|
|
pattern: '^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$'
|
|
type: string
|
|
status:
|
|
enum:
|
|
- 'True'
|
|
- 'False'
|
|
- Unknown
|
|
type: string
|
|
type:
|
|
maxLength: 316
|
|
pattern: >-
|
|
^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
|
|
type: string
|
|
required:
|
|
- lastTransitionTime
|
|
- message
|
|
- reason
|
|
- status
|
|
- type
|
|
type: object
|
|
type: array
|
|
x-kubernetes-list-map-keys:
|
|
- type
|
|
x-kubernetes-list-type: map
|
|
type: object
|
|
type: object
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
status:
|
|
acceptedNames:
|
|
kind: ''
|
|
plural: ''
|
|
conditions: []
|
|
storedVersions: []
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/apps.kruise.io_advancedcronjobs.yaml
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
annotations:
|
|
controller-gen.kubebuilder.io/version: v0.7.0
|
|
creationTimestamp: null
|
|
name: advancedcronjobs.apps.kruise.io
|
|
spec:
|
|
group: apps.kruise.io
|
|
names:
|
|
kind: AdvancedCronJob
|
|
listKind: AdvancedCronJobList
|
|
plural: advancedcronjobs
|
|
shortNames:
|
|
- acj
|
|
singular: advancedcronjob
|
|
scope: Namespaced
|
|
versions:
|
|
- additionalPrinterColumns:
|
|
- description: The schedule of advanced cron job.
|
|
jsonPath: .spec.schedule
|
|
name: Schedule
|
|
type: string
|
|
- description: Type of cron job.
|
|
jsonPath: .status.type
|
|
name: Type
|
|
type: string
|
|
- description: The last time at which job was scheduled.
|
|
jsonPath: .status.lastScheduleTime
|
|
name: LastScheduleTime
|
|
type: date
|
|
- description: CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC.
|
|
jsonPath: .metadata.creationTimestamp
|
|
name: AGE
|
|
type: date
|
|
name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
description: AdvancedCronJob is the Schema for the advancedcronjobs API
|
|
properties:
|
|
apiVersion:
|
|
description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
|
type: string
|
|
kind:
|
|
description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
description: AdvancedCronJobSpec defines the desired state of AdvancedCronJob
|
|
properties:
|
|
concurrencyPolicy:
|
|
description: 'Specifies how to treat concurrent executions of a Job. Valid values are: - "Allow" (default): allows CronJobs to run concurrently; - "Forbid": forbids concurrent runs, skipping next run if previous run hasn''t finished yet; - "Replace": cancels currently running job and replaces it with a new one'
|
|
enum:
|
|
- Allow
|
|
- Forbid
|
|
- Replace
|
|
type: string
|
|
failedJobsHistoryLimit:
|
|
description: The number of failed finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified.
|
|
format: int32
|
|
minimum: 0
|
|
type: integer
|
|
paused:
|
|
description: Paused will pause the cron job.
|
|
type: boolean
|
|
schedule:
|
|
description: The schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.
|
|
minLength: 0
|
|
type: string
|
|
startingDeadlineSeconds:
|
|
description: Optional deadline in seconds for starting the job if it misses scheduled time for any reason. Missed jobs executions will be counted as failed ones.
|
|
format: int64
|
|
minimum: 0
|
|
type: integer
|
|
successfulJobsHistoryLimit:
|
|
description: The number of successful finished jobs to retain. This is a pointer to distinguish between explicit zero and not specified.
|
|
format: int32
|
|
minimum: 0
|
|
type: integer
|
|
template:
|
|
description: Specifies the job that will be created when executing a CronJob.
|
|
properties:
|
|
broadcastJobTemplate:
|
|
description: Specifies the broadcastjob that will be created when executing a BroadcastCronJob.
|
|
properties:
|
|
metadata:
|
|
description: Standard object's metadata of the jobs created from this template.
|
|
type: object
|
|
spec:
|
|
description: Specification of the desired behavior of the broadcastjob.
|
|
properties:
|
|
completionPolicy:
|
|
description: CompletionPolicy indicates the completion policy of the job. Default is Always CompletionPolicyType
|
|
properties:
|
|
activeDeadlineSeconds:
|
|
description: ActiveDeadlineSeconds specifies the duration in seconds relative to the startTime that the job may be active before the system tries to terminate it; value must be positive integer. Only works for Always type.
|
|
format: int64
|
|
type: integer
|
|
ttlSecondsAfterFinished:
|
|
description: ttlSecondsAfterFinished limits the lifetime of a Job that has finished execution (either Complete or Failed). If this field is set, ttlSecondsAfterFinished after the Job finishes, it is eligible to be automatically deleted. When the Job is being deleted, its lifecycle guarantees (e.g. finalizers) will be honored. If this field is unset, the Job won't be automatically deleted. If this field is set to zero, the Job becomes eligible to be deleted immediately after it finishes. This field is alpha-level and is only honored by servers that enable the TTLAfterFinished feature. Only works for Always type
|
|
format: int32
|
|
type: integer
|
|
type:
|
|
description: Type indicates the type of the CompletionPolicy Default is Always
|
|
type: string
|
|
type: object
|
|
failurePolicy:
|
|
description: FailurePolicy indicates the behavior of the job, when failed pod is found.
|
|
properties:
|
|
restartLimit:
|
|
description: RestartLimit specifies the number of retries before marking the pod failed.
|
|
format: int32
|
|
type: integer
|
|
type:
|
|
description: Type indicates the type of FailurePolicyType.
|
|
type: string
|
|
type: object
|
|
parallelism:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: Parallelism specifies the maximum desired number of pods the job should run at any given time. The actual number of pods running in steady state will be less than this number when the work left to do is less than max parallelism. Not setting this value means no limit.
|
|
x-kubernetes-int-or-string: true
|
|
paused:
|
|
description: Paused will pause the job.
|
|
type: boolean
|
|
template:
|
|
description: Template describes the pod that will be created when executing a job.
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
required:
|
|
- template
|
|
type: object
|
|
type: object
|
|
jobTemplate:
|
|
description: Specifies the job that will be created when executing a CronJob.
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
type: object
|
|
required:
|
|
- schedule
|
|
- template
|
|
type: object
|
|
status:
|
|
description: AdvancedCronJobStatus defines the observed state of AdvancedCronJob
|
|
properties:
|
|
active:
|
|
description: A list of pointers to currently running jobs.
|
|
items:
|
|
description: 'ObjectReference contains enough information to let you inspect or modify the referred object. --- New uses of this type are discouraged because of difficulty describing its usage when embedded in APIs. 1. Ignored fields. It includes many fields which are not generally honored. For instance, ResourceVersion and FieldPath are both very rarely valid in actual usage. 2. Invalid usage help. It is impossible to add specific help for individual usage. In most embedded usages, there are particular restrictions like, "must refer only to types A and B" or "UID not honored" or "name must be restricted". Those cannot be well described when embedded. 3. Inconsistent validation. Because the usages are different, the validation rules are different by usage, which makes it hard for users to predict what will happen. 4. The fields are both imprecise and overly precise. Kind is not a precise mapping to a URL. This can produce ambiguity during interpretation and require a REST mapping. In most cases, the dependency is on the group,resource tuple and the version of the actual struct is irrelevant. 5. We cannot easily change it. Because this type is embedded in many locations, updates to this type will affect numerous schemas. Don''t make new APIs embed an underspecified API type they do not control. Instead of using this type, create a locally provided and used type that is well-focused on your reference. For example, ServiceReferences for admission registration: https://github.com/kubernetes/api/blob/release-1.17/admissionregistration/v1/types.go#L533 .'
|
|
properties:
|
|
apiVersion:
|
|
description: API version of the referent.
|
|
type: string
|
|
fieldPath:
|
|
description: 'If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: "spec.containers{name}" (where "name" refers to the name of the container that triggered the event) or if no container name is specified "spec.containers[2]" (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object. TODO: this design is not final and this field is subject to change in the future.'
|
|
type: string
|
|
kind:
|
|
description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
type: string
|
|
name:
|
|
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
|
|
type: string
|
|
namespace:
|
|
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
|
|
type: string
|
|
resourceVersion:
|
|
description: 'Specific resourceVersion to which this reference is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
|
|
type: string
|
|
uid:
|
|
description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
|
|
type: string
|
|
type: object
|
|
type: array
|
|
lastScheduleTime:
|
|
description: Information when was the last time the job was successfully scheduled.
|
|
format: date-time
|
|
type: string
|
|
type:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
status:
|
|
acceptedNames:
|
|
kind: ""
|
|
plural: ""
|
|
conditions: []
|
|
storedVersions: []
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/apps.kruise.io_broadcastjobs.yaml
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
annotations:
|
|
controller-gen.kubebuilder.io/version: v0.7.0
|
|
creationTimestamp: null
|
|
name: broadcastjobs.apps.kruise.io
|
|
spec:
|
|
group: apps.kruise.io
|
|
names:
|
|
kind: BroadcastJob
|
|
listKind: BroadcastJobList
|
|
plural: broadcastjobs
|
|
shortNames:
|
|
- bcj
|
|
singular: broadcastjob
|
|
scope: Namespaced
|
|
versions:
|
|
- additionalPrinterColumns:
|
|
- description: The desired number of pods. This is typically equal to the number of nodes satisfied to run pods.
|
|
jsonPath: .status.desired
|
|
name: Desired
|
|
type: integer
|
|
- description: The number of actively running pods.
|
|
jsonPath: .status.active
|
|
name: Active
|
|
type: integer
|
|
- description: The number of pods which reached phase Succeeded.
|
|
jsonPath: .status.succeeded
|
|
name: Succeeded
|
|
type: integer
|
|
- description: The number of pods which reached phase Failed.
|
|
jsonPath: .status.failed
|
|
name: Failed
|
|
type: integer
|
|
- description: CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC.
|
|
jsonPath: .metadata.creationTimestamp
|
|
name: AGE
|
|
type: date
|
|
name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
description: BroadcastJob is the Schema for the broadcastjobs API
|
|
properties:
|
|
apiVersion:
|
|
description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
|
type: string
|
|
kind:
|
|
description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
description: BroadcastJobSpec defines the desired state of BroadcastJob
|
|
properties:
|
|
completionPolicy:
|
|
description: CompletionPolicy indicates the completion policy of the job. Default is Always CompletionPolicyType
|
|
properties:
|
|
activeDeadlineSeconds:
|
|
description: ActiveDeadlineSeconds specifies the duration in seconds relative to the startTime that the job may be active before the system tries to terminate it; value must be positive integer. Only works for Always type.
|
|
format: int64
|
|
type: integer
|
|
ttlSecondsAfterFinished:
|
|
description: ttlSecondsAfterFinished limits the lifetime of a Job that has finished execution (either Complete or Failed). If this field is set, ttlSecondsAfterFinished after the Job finishes, it is eligible to be automatically deleted. When the Job is being deleted, its lifecycle guarantees (e.g. finalizers) will be honored. If this field is unset, the Job won't be automatically deleted. If this field is set to zero, the Job becomes eligible to be deleted immediately after it finishes. This field is alpha-level and is only honored by servers that enable the TTLAfterFinished feature. Only works for Always type
|
|
format: int32
|
|
type: integer
|
|
type:
|
|
description: Type indicates the type of the CompletionPolicy Default is Always
|
|
type: string
|
|
type: object
|
|
failurePolicy:
|
|
description: FailurePolicy indicates the behavior of the job, when failed pod is found.
|
|
properties:
|
|
restartLimit:
|
|
description: RestartLimit specifies the number of retries before marking the pod failed.
|
|
format: int32
|
|
type: integer
|
|
type:
|
|
description: Type indicates the type of FailurePolicyType.
|
|
type: string
|
|
type: object
|
|
parallelism:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: Parallelism specifies the maximum desired number of pods the job should run at any given time. The actual number of pods running in steady state will be less than this number when the work left to do is less than max parallelism. Not setting this value means no limit.
|
|
x-kubernetes-int-or-string: true
|
|
paused:
|
|
description: Paused will pause the job.
|
|
type: boolean
|
|
template:
|
|
description: Template describes the pod that will be created when executing a job.
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
required:
|
|
- template
|
|
type: object
|
|
status:
|
|
description: BroadcastJobStatus defines the observed state of BroadcastJob
|
|
properties:
|
|
active:
|
|
description: The number of actively running pods.
|
|
format: int32
|
|
type: integer
|
|
completionTime:
|
|
description: Represents time when the job was completed. It is not guaranteed to be set in happens-before order across separate operations. It is represented in RFC3339 form and is in UTC.
|
|
format: date-time
|
|
type: string
|
|
conditions:
|
|
description: The latest available observations of an object's current state.
|
|
items:
|
|
description: JobCondition describes current state of a job.
|
|
properties:
|
|
lastProbeTime:
|
|
description: Last time the condition was checked.
|
|
format: date-time
|
|
type: string
|
|
lastTransitionTime:
|
|
description: Last time the condition transit from one status to another.
|
|
format: date-time
|
|
type: string
|
|
message:
|
|
description: Human readable message indicating details about last transition.
|
|
type: string
|
|
reason:
|
|
description: (brief) reason for the condition's last transition.
|
|
type: string
|
|
status:
|
|
description: Status of the condition, one of True, False, Unknown.
|
|
type: string
|
|
type:
|
|
description: Type of job condition, Complete or Failed.
|
|
type: string
|
|
required:
|
|
- status
|
|
- type
|
|
type: object
|
|
type: array
|
|
desired:
|
|
description: The desired number of pods, this is typically equal to the number of nodes satisfied to run pods.
|
|
format: int32
|
|
type: integer
|
|
failed:
|
|
description: The number of pods which reached phase Failed.
|
|
format: int32
|
|
type: integer
|
|
phase:
|
|
description: The phase of the job.
|
|
type: string
|
|
startTime:
|
|
description: Represents time when the job was acknowledged by the job controller. It is not guaranteed to be set in happens-before order across separate operations. It is represented in RFC3339 form and is in UTC.
|
|
format: date-time
|
|
type: string
|
|
succeeded:
|
|
description: The number of pods which reached phase Succeeded.
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
type: object
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
status:
|
|
acceptedNames:
|
|
kind: ""
|
|
plural: ""
|
|
conditions: []
|
|
storedVersions: []
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/apps.kruise.io_clonesets.yaml
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
annotations:
|
|
controller-gen.kubebuilder.io/version: v0.7.0
|
|
creationTimestamp: null
|
|
name: clonesets.apps.kruise.io
|
|
spec:
|
|
group: apps.kruise.io
|
|
names:
|
|
kind: CloneSet
|
|
listKind: CloneSetList
|
|
plural: clonesets
|
|
shortNames:
|
|
- clone
|
|
singular: cloneset
|
|
scope: Namespaced
|
|
versions:
|
|
- additionalPrinterColumns:
|
|
- description: The desired number of pods.
|
|
jsonPath: .spec.replicas
|
|
name: DESIRED
|
|
type: integer
|
|
- description: The number of pods updated.
|
|
jsonPath: .status.updatedReplicas
|
|
name: UPDATED
|
|
type: integer
|
|
- description: The number of pods updated and ready.
|
|
jsonPath: .status.updatedReadyReplicas
|
|
name: UPDATED_READY
|
|
type: integer
|
|
- description: The number of pods ready.
|
|
jsonPath: .status.readyReplicas
|
|
name: READY
|
|
type: integer
|
|
- description: The number of currently all pods.
|
|
jsonPath: .status.replicas
|
|
name: TOTAL
|
|
type: integer
|
|
- description: CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC.
|
|
jsonPath: .metadata.creationTimestamp
|
|
name: AGE
|
|
type: date
|
|
- description: The containers of currently cloneset.
|
|
jsonPath: .spec.template.spec.containers[*].name
|
|
name: CONTAINERS
|
|
priority: 1
|
|
type: string
|
|
- description: The images of currently cloneset.
|
|
jsonPath: .spec.template.spec.containers[*].image
|
|
name: IMAGES
|
|
priority: 1
|
|
type: string
|
|
- description: The selector of currently cloneset.
|
|
jsonPath: .status.labelSelector
|
|
name: SELECTOR
|
|
priority: 1
|
|
type: string
|
|
name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
description: CloneSet is the Schema for the clonesets API
|
|
properties:
|
|
apiVersion:
|
|
description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
|
type: string
|
|
kind:
|
|
description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
description: CloneSetSpec defines the desired state of CloneSet
|
|
properties:
|
|
lifecycle:
|
|
description: Lifecycle defines the lifecycle hooks for Pods pre-delete, in-place update.
|
|
properties:
|
|
inPlaceUpdate:
|
|
description: InPlaceUpdate is the hook before Pod to update and after Pod has been updated.
|
|
properties:
|
|
finalizersHandler:
|
|
items:
|
|
type: string
|
|
type: array
|
|
labelsHandler:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
preDelete:
|
|
description: PreDelete is the hook before Pod to be deleted.
|
|
properties:
|
|
finalizersHandler:
|
|
items:
|
|
type: string
|
|
type: array
|
|
labelsHandler:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
type: object
|
|
minReadySeconds:
|
|
description: Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)
|
|
format: int32
|
|
type: integer
|
|
replicas:
|
|
description: Replicas is the desired number of replicas of the given Template. These are replicas in the sense that they are instantiations of the same Template. If unspecified, defaults to 1.
|
|
format: int32
|
|
type: integer
|
|
revisionHistoryLimit:
|
|
description: RevisionHistoryLimit is the maximum number of revisions that will be maintained in the CloneSet's revision history. The revision history consists of all revisions not represented by a currently applied CloneSetSpec version. The default value is 10.
|
|
format: int32
|
|
type: integer
|
|
scaleStrategy:
|
|
description: ScaleStrategy indicates the ScaleStrategy that will be employed to create and delete Pods in the CloneSet.
|
|
properties:
|
|
maxUnavailable:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: The maximum number of pods that can be unavailable for scaled pods. This field can control the changes rate of replicas for CloneSet so as to minimize the impact for users' service. The scale will fail if the number of unavailable pods were greater than this MaxUnavailable at scaling up. MaxUnavailable works only when scaling up.
|
|
x-kubernetes-int-or-string: true
|
|
podsToDelete:
|
|
description: PodsToDelete is the names of Pod should be deleted. Note that this list will be truncated for non-existing pod names.
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
selector:
|
|
description: 'Selector is a label query over pods that should match the replica count. It must match the pod template''s labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors'
|
|
properties:
|
|
matchExpressions:
|
|
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
|
|
items:
|
|
description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: key is the label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
|
|
type: string
|
|
values:
|
|
description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
|
|
type: object
|
|
type: object
|
|
template:
|
|
description: Template describes the pods that will be created.
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
updateStrategy:
|
|
description: UpdateStrategy indicates the UpdateStrategy that will be employed to update Pods in the CloneSet when a revision is made to Template.
|
|
properties:
|
|
inPlaceUpdateStrategy:
|
|
description: InPlaceUpdateStrategy contains strategies for in-place update.
|
|
properties:
|
|
gracePeriodSeconds:
|
|
description: GracePeriodSeconds is the timespan between set Pod status to not-ready and update images in Pod spec when in-place update a Pod.
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
maxSurge:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: 'The maximum number of pods that can be scheduled above the desired replicas during update or specified delete. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding up. Defaults to 0.'
|
|
x-kubernetes-int-or-string: true
|
|
maxUnavailable:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: 'The maximum number of pods that can be unavailable during update or scale. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding up by default. When maxSurge > 0, absolute number is calculated from percentage by rounding down. Defaults to 20%.'
|
|
x-kubernetes-int-or-string: true
|
|
partition:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: 'Partition is the desired number of pods in old revisions. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding up by default. It means when partition is set during pods updating, (replicas - partition value) number of pods will be updated. Default value is 0.'
|
|
x-kubernetes-int-or-string: true
|
|
paused:
|
|
description: Paused indicates that the CloneSet is paused. Default value is false
|
|
type: boolean
|
|
priorityStrategy:
|
|
description: Priorities are the rules for calculating the priority of updating pods. Each pod to be updated, will pass through these terms and get a sum of weights.
|
|
properties:
|
|
orderPriority:
|
|
description: 'Order priority terms, pods will be sorted by the value of orderedKey. For example: ``` orderPriority: - orderedKey: key1 - orderedKey: key2 ``` First, all pods which have key1 in labels will be sorted by the value of key1. Then, the left pods which have no key1 but have key2 in labels will be sorted by the value of key2 and put behind those pods have key1.'
|
|
items:
|
|
description: UpdatePriorityOrder defines order priority.
|
|
properties:
|
|
orderedKey:
|
|
description: Calculate priority by value of this key. Values of this key, will be sorted by GetInt(val). GetInt method will find the last int in value, such as getting 5 in value '5', getting 10 in value 'sts-10'.
|
|
type: string
|
|
required:
|
|
- orderedKey
|
|
type: object
|
|
type: array
|
|
weightPriority:
|
|
description: Weight priority terms, pods will be sorted by the sum of all terms weight.
|
|
items:
|
|
description: UpdatePriorityWeightTerm defines weight priority.
|
|
properties:
|
|
matchSelector:
|
|
description: MatchSelector is used to select by pod's labels.
|
|
properties:
|
|
matchExpressions:
|
|
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
|
|
items:
|
|
description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: key is the label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
|
|
type: string
|
|
values:
|
|
description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
|
|
type: object
|
|
type: object
|
|
weight:
|
|
description: Weight associated with matching the corresponding matchExpressions, in the range 1-100.
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- matchSelector
|
|
- weight
|
|
type: object
|
|
type: array
|
|
type: object
|
|
scatterStrategy:
|
|
description: ScatterStrategy defines the scatter rules to make pods been scattered when update. This will avoid pods with the same key-value to be updated in one batch. - Note that pods will be scattered after priority sort. So, although priority strategy and scatter strategy can be applied together, we suggest to use either one of them. - If scatterStrategy is used, we suggest to just use one term. Otherwise, the update order can be hard to understand.
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- key
|
|
- value
|
|
type: object
|
|
type: array
|
|
type:
|
|
description: Type indicates the type of the CloneSetUpdateStrategy. Default is ReCreate.
|
|
type: string
|
|
type: object
|
|
volumeClaimTemplates:
|
|
description: VolumeClaimTemplates is a list of claims that pods are allowed to reference. Note that PVC will be deleted when its pod has been deleted.
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
required:
|
|
- selector
|
|
- template
|
|
type: object
|
|
status:
|
|
description: CloneSetStatus defines the observed state of CloneSet
|
|
properties:
|
|
availableReplicas:
|
|
description: AvailableReplicas is the number of Pods created by the CloneSet controller that have a Ready Condition for at least minReadySeconds.
|
|
format: int32
|
|
type: integer
|
|
collisionCount:
|
|
description: CollisionCount is the count of hash collisions for the CloneSet. The CloneSet controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ControllerRevision.
|
|
format: int32
|
|
type: integer
|
|
conditions:
|
|
description: Conditions represents the latest available observations of a CloneSet's current state.
|
|
items:
|
|
description: CloneSetCondition describes the state of a CloneSet at a certain point.
|
|
properties:
|
|
lastTransitionTime:
|
|
description: Last time the condition transitioned from one status to another.
|
|
format: date-time
|
|
type: string
|
|
message:
|
|
description: A human readable message indicating details about the transition.
|
|
type: string
|
|
reason:
|
|
description: The reason for the condition's last transition.
|
|
type: string
|
|
status:
|
|
description: Status of the condition, one of True, False, Unknown.
|
|
type: string
|
|
type:
|
|
description: Type of CloneSet condition.
|
|
type: string
|
|
required:
|
|
- status
|
|
- type
|
|
type: object
|
|
type: array
|
|
currentRevision:
|
|
description: currentRevision, if not empty, indicates the current revision version of the CloneSet.
|
|
type: string
|
|
labelSelector:
|
|
description: LabelSelector is label selectors for query over pods that should match the replica count used by HPA.
|
|
type: string
|
|
observedGeneration:
|
|
description: ObservedGeneration is the most recent generation observed for this CloneSet. It corresponds to the CloneSet's generation, which is updated on mutation by the API Server.
|
|
format: int64
|
|
type: integer
|
|
readyReplicas:
|
|
description: ReadyReplicas is the number of Pods created by the CloneSet controller that have a Ready Condition.
|
|
format: int32
|
|
type: integer
|
|
replicas:
|
|
description: Replicas is the number of Pods created by the CloneSet controller.
|
|
format: int32
|
|
type: integer
|
|
updateRevision:
|
|
description: UpdateRevision, if not empty, indicates the latest revision of the CloneSet.
|
|
type: string
|
|
updatedReadyReplicas:
|
|
description: UpdatedReadyReplicas is the number of Pods created by the CloneSet controller from the CloneSet version indicated by updateRevision and have a Ready Condition.
|
|
format: int32
|
|
type: integer
|
|
updatedReplicas:
|
|
description: UpdatedReplicas is the number of Pods created by the CloneSet controller from the CloneSet version indicated by updateRevision.
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- availableReplicas
|
|
- readyReplicas
|
|
- replicas
|
|
- updatedReadyReplicas
|
|
- updatedReplicas
|
|
type: object
|
|
type: object
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
scale:
|
|
labelSelectorPath: .status.labelSelector
|
|
specReplicasPath: .spec.replicas
|
|
statusReplicasPath: .status.replicas
|
|
status: {}
|
|
status:
|
|
acceptedNames:
|
|
kind: ""
|
|
plural: ""
|
|
conditions: []
|
|
storedVersions: []
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/apps.kruise.io_containerrecreaterequests.yaml
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
annotations:
|
|
controller-gen.kubebuilder.io/version: v0.7.0
|
|
creationTimestamp: null
|
|
name: containerrecreaterequests.apps.kruise.io
|
|
spec:
|
|
group: apps.kruise.io
|
|
names:
|
|
kind: ContainerRecreateRequest
|
|
listKind: ContainerRecreateRequestList
|
|
plural: containerrecreaterequests
|
|
shortNames:
|
|
- crr
|
|
singular: containerrecreaterequest
|
|
scope: Namespaced
|
|
versions:
|
|
- additionalPrinterColumns:
|
|
- description: Phase of this ContainerRecreateRequest.
|
|
jsonPath: .status.phase
|
|
name: PHASE
|
|
type: string
|
|
- description: Pod name of this ContainerRecreateRequest.
|
|
jsonPath: .spec.podName
|
|
name: POD
|
|
type: string
|
|
- description: Pod name of this ContainerRecreateRequest.
|
|
jsonPath: .metadata.labels.crr\.apps\.kruise\.io/node-name
|
|
name: NODE
|
|
type: string
|
|
- description: CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC.
|
|
jsonPath: .metadata.creationTimestamp
|
|
name: AGE
|
|
type: date
|
|
name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
description: ContainerRecreateRequest is the Schema for the containerrecreaterequests API
|
|
properties:
|
|
apiVersion:
|
|
description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
|
type: string
|
|
kind:
|
|
description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
description: ContainerRecreateRequestSpec defines the desired state of ContainerRecreateRequest
|
|
properties:
|
|
activeDeadlineSeconds:
|
|
description: ActiveDeadlineSeconds is the deadline duration of this ContainerRecreateRequest.
|
|
format: int64
|
|
type: integer
|
|
containers:
|
|
description: Containers contains the containers that need to recreate in the Pod.
|
|
items:
|
|
description: ContainerRecreateRequestContainer defines the container that need to recreate.
|
|
properties:
|
|
name:
|
|
description: Name of the container that need to recreate. It must be existing in the real pod.Spec.Containers.
|
|
type: string
|
|
ports:
|
|
description: Ports is synced from the real container in Pod spec during this ContainerRecreateRequest creating. Populated by the system. Read-only.
|
|
items:
|
|
description: ContainerPort represents a network port in a single container.
|
|
properties:
|
|
containerPort:
|
|
description: Number of port to expose on the pod's IP address. This must be a valid port number, 0 < x < 65536.
|
|
format: int32
|
|
type: integer
|
|
hostIP:
|
|
description: What host IP to bind the external port to.
|
|
type: string
|
|
hostPort:
|
|
description: Number of port to expose on the host. If specified, this must be a valid port number, 0 < x < 65536. If HostNetwork is specified, this must match ContainerPort. Most containers do not need this.
|
|
format: int32
|
|
type: integer
|
|
name:
|
|
description: If specified, this must be an IANA_SVC_NAME and unique within the pod. Each named port in a pod must have a unique name. Name for the port that can be referred to by services.
|
|
type: string
|
|
protocol:
|
|
default: TCP
|
|
description: Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
|
|
type: string
|
|
required:
|
|
- containerPort
|
|
type: object
|
|
type: array
|
|
preStop:
|
|
description: PreStop is synced from the real container in Pod spec during this ContainerRecreateRequest creating. Populated by the system. Read-only.
|
|
properties:
|
|
exec:
|
|
description: One and only one of the following should be specified. Exec specifies the action to take.
|
|
properties:
|
|
command:
|
|
description: Command is the command line to execute inside the container, the working directory for the command is root ('/') in the container's filesystem. The command is simply exec'd, it is not run inside a shell, so traditional shell instructions ('|', etc) won't work. To use a shell, you need to explicitly call out to that shell. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
httpGet:
|
|
description: HTTPGet specifies the http request to perform.
|
|
properties:
|
|
host:
|
|
description: Host name to connect to, defaults to the pod IP. You probably want to set "Host" in httpHeaders instead.
|
|
type: string
|
|
httpHeaders:
|
|
description: Custom headers to set in the request. HTTP allows repeated headers.
|
|
items:
|
|
description: HTTPHeader describes a custom header to be used in HTTP probes
|
|
properties:
|
|
name:
|
|
description: The header field name
|
|
type: string
|
|
value:
|
|
description: The header field value
|
|
type: string
|
|
required:
|
|
- name
|
|
- value
|
|
type: object
|
|
type: array
|
|
path:
|
|
description: Path to access on the HTTP server.
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
|
|
x-kubernetes-int-or-string: true
|
|
scheme:
|
|
description: Scheme to use for connecting to the host. Defaults to HTTP.
|
|
type: string
|
|
required:
|
|
- port
|
|
type: object
|
|
tcpSocket:
|
|
description: 'TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported TODO: implement a realistic TCP lifecycle hook'
|
|
properties:
|
|
host:
|
|
description: 'Optional: Host name to connect to, defaults to the pod IP.'
|
|
type: string
|
|
port:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.
|
|
x-kubernetes-int-or-string: true
|
|
required:
|
|
- port
|
|
type: object
|
|
type: object
|
|
statusContext:
|
|
description: StatusContext is synced from the real Pod status during this ContainerRecreateRequest creating. Populated by the system. Read-only.
|
|
properties:
|
|
containerID:
|
|
description: Container's ID in the format 'docker://<container_id>'.
|
|
type: string
|
|
restartCount:
|
|
description: The number of times the container has been restarted, currently based on the number of dead containers that have not yet been removed. Note that this is calculated from dead containers. But those containers are subject to garbage collection. This value will get capped at 5 by GC.
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- containerID
|
|
- restartCount
|
|
type: object
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
podName:
|
|
description: PodName is name of the Pod that owns the recreated containers.
|
|
type: string
|
|
strategy:
|
|
description: Strategy defines strategies for containers recreation.
|
|
properties:
|
|
failurePolicy:
|
|
description: FailurePolicy decides whether to continue if one container fails to recreate
|
|
type: string
|
|
minStartedSeconds:
|
|
description: Minimum number of seconds for which a newly created container should be started and ready without any of its container crashing, for it to be considered Succeeded. Defaults to 0 (container will be considered Succeeded as soon as it is started and ready)
|
|
format: int32
|
|
type: integer
|
|
orderedRecreate:
|
|
description: OrderedRecreate indicates whether to recreate the next container only if the previous one has recreated completely.
|
|
type: boolean
|
|
terminationGracePeriodSeconds:
|
|
description: TerminationGracePeriodSeconds is the optional duration in seconds to wait the container terminating gracefully. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, we will use pod.Spec.TerminationGracePeriodSeconds as default value.
|
|
format: int64
|
|
type: integer
|
|
unreadyGracePeriodSeconds:
|
|
description: UnreadyGracePeriodSeconds is the optional duration in seconds to mark Pod as not ready over this duration before executing preStop hook and stopping the container.
|
|
format: int64
|
|
type: integer
|
|
type: object
|
|
ttlSecondsAfterFinished:
|
|
description: TTLSecondsAfterFinished is the TTL duration after this ContainerRecreateRequest has completed.
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- containers
|
|
- podName
|
|
type: object
|
|
status:
|
|
description: ContainerRecreateRequestStatus defines the observed state of ContainerRecreateRequest
|
|
properties:
|
|
completionTime:
|
|
description: Represents time when the ContainerRecreateRequest was completed. It is not guaranteed to be set in happens-before order across separate operations. It is represented in RFC3339 form and is in UTC.
|
|
format: date-time
|
|
type: string
|
|
containerRecreateStates:
|
|
description: ContainerRecreateStates contains the recreation states of the containers.
|
|
items:
|
|
description: ContainerRecreateRequestContainerRecreateState contains the recreation state of the container.
|
|
properties:
|
|
message:
|
|
description: A human readable message indicating details about this state.
|
|
type: string
|
|
name:
|
|
description: Name of the container.
|
|
type: string
|
|
phase:
|
|
description: Phase indicates the recreation phase of the container.
|
|
type: string
|
|
required:
|
|
- name
|
|
- phase
|
|
type: object
|
|
type: array
|
|
message:
|
|
description: A human readable message indicating details about this ContainerRecreateRequest.
|
|
type: string
|
|
phase:
|
|
description: Phase of this ContainerRecreateRequest, e.g. Pending, Recreating, Completed
|
|
type: string
|
|
required:
|
|
- phase
|
|
type: object
|
|
type: object
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
status:
|
|
acceptedNames:
|
|
kind: ""
|
|
plural: ""
|
|
conditions: []
|
|
storedVersions: []
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/apps.kruise.io_daemonsets.yaml
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
annotations:
|
|
controller-gen.kubebuilder.io/version: v0.7.0
|
|
creationTimestamp: null
|
|
name: daemonsets.apps.kruise.io
|
|
spec:
|
|
group: apps.kruise.io
|
|
names:
|
|
kind: DaemonSet
|
|
listKind: DaemonSetList
|
|
plural: daemonsets
|
|
shortNames:
|
|
- daemon
|
|
singular: daemonset
|
|
scope: Namespaced
|
|
versions:
|
|
- additionalPrinterColumns:
|
|
- description: The desired number of pods.
|
|
jsonPath: .status.desiredNumberScheduled
|
|
name: DesiredNumber
|
|
type: integer
|
|
- description: The current number of pods.
|
|
jsonPath: .status.currentNumberScheduled
|
|
name: CurrentNumber
|
|
type: integer
|
|
- description: The updated number of pods.
|
|
jsonPath: .status.updatedNumberScheduled
|
|
name: UpdatedNumberScheduled
|
|
type: integer
|
|
- description: CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC.
|
|
jsonPath: .metadata.creationTimestamp
|
|
name: AGE
|
|
type: date
|
|
- description: The containers of currently daemonset.
|
|
jsonPath: .spec.template.spec.containers[*].name
|
|
name: CONTAINERS
|
|
priority: 1
|
|
type: string
|
|
- description: The images of currently advanced daemonset.
|
|
jsonPath: .spec.template.spec.containers[*].image
|
|
name: IMAGES
|
|
priority: 1
|
|
type: string
|
|
name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
description: DaemonSet is the Schema for the daemonsets API
|
|
properties:
|
|
apiVersion:
|
|
description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
|
type: string
|
|
kind:
|
|
description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
description: DaemonSetSpec defines the desired state of DaemonSet
|
|
properties:
|
|
burstReplicas:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: BurstReplicas is a rate limiter for booting pods on a lot of pods. The default value is 250
|
|
x-kubernetes-int-or-string: true
|
|
minReadySeconds:
|
|
description: The minimum number of seconds for which a newly created DaemonSet pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready).
|
|
format: int32
|
|
type: integer
|
|
revisionHistoryLimit:
|
|
description: The number of old history to retain to allow rollback. This is a pointer to distinguish between explicit zero and not specified. Defaults to 10.
|
|
format: int32
|
|
type: integer
|
|
selector:
|
|
description: 'A label query over pods that are managed by the daemon set. Must match in order to be controlled. It must match the pod template''s labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors'
|
|
properties:
|
|
matchExpressions:
|
|
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
|
|
items:
|
|
description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: key is the label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
|
|
type: string
|
|
values:
|
|
description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
|
|
type: object
|
|
type: object
|
|
template:
|
|
description: 'An object that describes the pod that will be created. The DaemonSet will create exactly one copy of this pod on every node that matches the template''s node selector (or on every node if no node selector is specified). More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template'
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
updateStrategy:
|
|
description: An update strategy to replace existing DaemonSet pods with new pods.
|
|
properties:
|
|
rollingUpdate:
|
|
description: Rolling update config params. Present only if type = "RollingUpdate".
|
|
properties:
|
|
maxSurge:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: 'Only when type=SurgingRollingUpdateType, it works. The maximum number of DaemonSet pods that can be scheduled above the desired number of pods during the update. Value can be an absolute number (ex: 5) or a percentage of the total number of DaemonSet pods at the start of the update (ex: 10%). The absolute number is calculated from the percentage by rounding up. This cannot be 0. The default value is 1. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have 2 pods running at any given time. The update starts by starting replacements for at most 30% of those DaemonSet pods. Once the new pods are available it then stops the existing pods before proceeding onto other DaemonSet pods, thus ensuring that at most 130% of the desired final number of DaemonSet pods are running at all times during the update.'
|
|
x-kubernetes-int-or-string: true
|
|
maxUnavailable:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: 'The maximum number of DaemonSet pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of total number of DaemonSet pods at the start of the update (ex: 10%). Absolute number is calculated from percentage by rounding up. This cannot be 0. Default value is 1. Example: when this is set to 30%, at most 30% of the total number of nodes that should be running the daemon pod (i.e. status.desiredNumberScheduled) can have their pods stopped for an update at any given time. The update starts by stopping at most 30% of those DaemonSet pods and then brings up new DaemonSet pods in their place. Once the new pods are available, it then proceeds onto other DaemonSet pods, thus ensuring that at least 70% of original number of DaemonSet pods are available at all times during the update.'
|
|
x-kubernetes-int-or-string: true
|
|
partition:
|
|
description: The number of DaemonSet pods remained to be old version. Default value is 0. Maximum value is status.DesiredNumberScheduled, which means no pod will be updated.
|
|
format: int32
|
|
type: integer
|
|
paused:
|
|
description: Indicates that the daemon set is paused and will not be processed by the daemon set controller.
|
|
type: boolean
|
|
rollingUpdateType:
|
|
description: Type is to specify which kind of rollingUpdate.
|
|
type: string
|
|
selector:
|
|
description: A label query over nodes that are managed by the daemon set RollingUpdate. Must match in order to be controlled. It must match the node's labels.
|
|
properties:
|
|
matchExpressions:
|
|
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
|
|
items:
|
|
description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: key is the label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
|
|
type: string
|
|
values:
|
|
description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
|
|
type: object
|
|
type: object
|
|
type: object
|
|
type:
|
|
description: Type of daemon set update. Can be "RollingUpdate" or "OnDelete". Default is RollingUpdate.
|
|
type: string
|
|
type: object
|
|
required:
|
|
- selector
|
|
- template
|
|
type: object
|
|
status:
|
|
description: DaemonSetStatus defines the observed state of DaemonSet
|
|
properties:
|
|
collisionCount:
|
|
description: Count of hash collisions for the DaemonSet. The DaemonSet controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ControllerRevision.
|
|
format: int32
|
|
type: integer
|
|
conditions:
|
|
description: Represents the latest available observations of a DaemonSet's current state.
|
|
items:
|
|
description: DaemonSetCondition describes the state of a DaemonSet at a certain point.
|
|
properties:
|
|
lastTransitionTime:
|
|
description: Last time the condition transitioned from one status to another.
|
|
format: date-time
|
|
type: string
|
|
message:
|
|
description: A human readable message indicating details about the transition.
|
|
type: string
|
|
reason:
|
|
description: The reason for the condition's last transition.
|
|
type: string
|
|
status:
|
|
description: Status of the condition, one of True, False, Unknown.
|
|
type: string
|
|
type:
|
|
description: Type of DaemonSet condition.
|
|
type: string
|
|
required:
|
|
- status
|
|
- type
|
|
type: object
|
|
type: array
|
|
currentNumberScheduled:
|
|
description: 'The number of nodes that are running at least 1 daemon pod and are supposed to run the daemon pod. More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/'
|
|
format: int32
|
|
type: integer
|
|
daemonSetHash:
|
|
description: DaemonSetHash is the controller-revision-hash, which represents the latest version of the DaemonSet.
|
|
type: string
|
|
desiredNumberScheduled:
|
|
description: 'The total number of nodes that should be running the daemon pod (including nodes correctly running the daemon pod). More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/'
|
|
format: int32
|
|
type: integer
|
|
numberAvailable:
|
|
description: The number of nodes that should be running the daemon pod and have one or more of the daemon pod running and available (ready for at least spec.minReadySeconds)
|
|
format: int32
|
|
type: integer
|
|
numberMisscheduled:
|
|
description: 'The number of nodes that are running the daemon pod, but are not supposed to run the daemon pod. More info: https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/'
|
|
format: int32
|
|
type: integer
|
|
numberReady:
|
|
description: The number of nodes that should be running the daemon pod and have one or more of the daemon pod running and ready.
|
|
format: int32
|
|
type: integer
|
|
numberUnavailable:
|
|
description: The number of nodes that should be running the daemon pod and have none of the daemon pod running and available (ready for at least spec.minReadySeconds)
|
|
format: int32
|
|
type: integer
|
|
observedGeneration:
|
|
description: The most recent generation observed by the daemon set controller.
|
|
format: int64
|
|
type: integer
|
|
updatedNumberScheduled:
|
|
description: The total number of nodes that are running updated daemon pod
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- currentNumberScheduled
|
|
- daemonSetHash
|
|
- desiredNumberScheduled
|
|
- numberMisscheduled
|
|
- numberReady
|
|
- updatedNumberScheduled
|
|
type: object
|
|
type: object
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
status:
|
|
acceptedNames:
|
|
kind: ""
|
|
plural: ""
|
|
conditions: []
|
|
storedVersions: []
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/apps.kruise.io_imagepulljobs.yaml
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
annotations:
|
|
controller-gen.kubebuilder.io/version: v0.7.0
|
|
creationTimestamp: null
|
|
name: imagepulljobs.apps.kruise.io
|
|
spec:
|
|
group: apps.kruise.io
|
|
names:
|
|
kind: ImagePullJob
|
|
listKind: ImagePullJobList
|
|
plural: imagepulljobs
|
|
singular: imagepulljob
|
|
scope: Namespaced
|
|
versions:
|
|
- additionalPrinterColumns:
|
|
- description: Number of all nodes matched by this job
|
|
jsonPath: .status.desired
|
|
name: TOTAL
|
|
type: integer
|
|
- description: Number of image pull task active
|
|
jsonPath: .status.active
|
|
name: ACTIVE
|
|
type: integer
|
|
- description: Number of image pull task succeeded
|
|
jsonPath: .status.succeeded
|
|
name: SUCCEED
|
|
type: integer
|
|
- description: Number of image pull tasks failed
|
|
jsonPath: .status.failed
|
|
name: FAILED
|
|
type: integer
|
|
- description: CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC.
|
|
jsonPath: .metadata.creationTimestamp
|
|
name: AGE
|
|
type: date
|
|
- description: Summary of status when job is failed
|
|
jsonPath: .status.message
|
|
name: MESSAGE
|
|
type: string
|
|
name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
description: ImagePullJob is the Schema for the imagepulljobs API
|
|
properties:
|
|
apiVersion:
|
|
description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
|
type: string
|
|
kind:
|
|
description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
description: ImagePullJobSpec defines the desired state of ImagePullJob
|
|
properties:
|
|
completionPolicy:
|
|
description: CompletionPolicy indicates the completion policy of the job. Default is Always CompletionPolicyType.
|
|
properties:
|
|
activeDeadlineSeconds:
|
|
description: ActiveDeadlineSeconds specifies the duration in seconds relative to the startTime that the job may be active before the system tries to terminate it; value must be positive integer. Only works for Always type.
|
|
format: int64
|
|
type: integer
|
|
ttlSecondsAfterFinished:
|
|
description: ttlSecondsAfterFinished limits the lifetime of a Job that has finished execution (either Complete or Failed). If this field is set, ttlSecondsAfterFinished after the Job finishes, it is eligible to be automatically deleted. When the Job is being deleted, its lifecycle guarantees (e.g. finalizers) will be honored. If this field is unset, the Job won't be automatically deleted. If this field is set to zero, the Job becomes eligible to be deleted immediately after it finishes. This field is alpha-level and is only honored by servers that enable the TTLAfterFinished feature. Only works for Always type
|
|
format: int32
|
|
type: integer
|
|
type:
|
|
description: Type indicates the type of the CompletionPolicy Default is Always
|
|
type: string
|
|
type: object
|
|
image:
|
|
description: Image is the image to be pulled by the job
|
|
type: string
|
|
parallelism:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: Parallelism is the requested parallelism, it can be set to any non-negative value. If it is unspecified, it defaults to 1. If it is specified as 0, then the Job is effectively paused until it is increased.
|
|
x-kubernetes-int-or-string: true
|
|
podSelector:
|
|
description: PodSelector is a query over pods that should pull image on nodes of these pods. Mutually exclusive with Selector.
|
|
properties:
|
|
matchExpressions:
|
|
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
|
|
items:
|
|
description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: key is the label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
|
|
type: string
|
|
values:
|
|
description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
|
|
type: object
|
|
type: object
|
|
pullPolicy:
|
|
description: PullPolicy is an optional field to set parameters of the pulling task. If not specified, the system will use the default values.
|
|
properties:
|
|
backoffLimit:
|
|
description: Specifies the number of retries before marking the pulling task failed. Defaults to 3
|
|
format: int32
|
|
type: integer
|
|
timeoutSeconds:
|
|
description: Specifies the timeout of the pulling task. Defaults to 600
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
pullSecrets:
|
|
description: ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling the image. If specified, these secrets will be passed to individual puller implementations for them to use. For example, in the case of docker, only DockerConfig type secrets are honored.
|
|
items:
|
|
type: string
|
|
type: array
|
|
selector:
|
|
description: Selector is a query over nodes that should match the job. nil to match all nodes.
|
|
properties:
|
|
matchExpressions:
|
|
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
|
|
items:
|
|
description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: key is the label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
|
|
type: string
|
|
values:
|
|
description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
|
|
type: object
|
|
names:
|
|
description: Names specify a set of nodes to execute the job.
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
required:
|
|
- completionPolicy
|
|
- image
|
|
type: object
|
|
status:
|
|
description: ImagePullJobStatus defines the observed state of ImagePullJob
|
|
properties:
|
|
active:
|
|
description: The number of actively running pulling tasks.
|
|
format: int32
|
|
type: integer
|
|
completionTime:
|
|
description: Represents time when the job was completed. It is not guaranteed to be set in happens-before order across separate operations. It is represented in RFC3339 form and is in UTC.
|
|
format: date-time
|
|
type: string
|
|
desired:
|
|
description: The desired number of pulling tasks, this is typically equal to the number of nodes satisfied.
|
|
format: int32
|
|
type: integer
|
|
failed:
|
|
description: The number of pulling tasks which reached phase Failed.
|
|
format: int32
|
|
type: integer
|
|
failedNodes:
|
|
description: The nodes that failed to pull the image.
|
|
items:
|
|
type: string
|
|
type: array
|
|
message:
|
|
description: The text prompt for job running status.
|
|
type: string
|
|
startTime:
|
|
description: Represents time when the job was acknowledged by the job controller. It is not guaranteed to be set in happens-before order across separate operations. It is represented in RFC3339 form and is in UTC.
|
|
format: date-time
|
|
type: string
|
|
succeeded:
|
|
description: The number of pulling tasks which reached phase Succeeded.
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- desired
|
|
type: object
|
|
type: object
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
status:
|
|
acceptedNames:
|
|
kind: ""
|
|
plural: ""
|
|
conditions: []
|
|
storedVersions: []
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/apps.kruise.io_nodeimages.yaml
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
annotations:
|
|
controller-gen.kubebuilder.io/version: v0.7.0
|
|
creationTimestamp: null
|
|
name: nodeimages.apps.kruise.io
|
|
spec:
|
|
group: apps.kruise.io
|
|
names:
|
|
kind: NodeImage
|
|
listKind: NodeImageList
|
|
plural: nodeimages
|
|
singular: nodeimage
|
|
scope: Cluster
|
|
versions:
|
|
- additionalPrinterColumns:
|
|
- description: Number of all images on this node
|
|
jsonPath: .status.desired
|
|
name: DESIRED
|
|
type: integer
|
|
- description: Number of image pull task active
|
|
jsonPath: .status.pulling
|
|
name: PULLING
|
|
type: integer
|
|
- description: Number of image pull task succeeded
|
|
jsonPath: .status.succeeded
|
|
name: SUCCEED
|
|
type: integer
|
|
- description: Number of image pull tasks failed
|
|
jsonPath: .status.failed
|
|
name: FAILED
|
|
type: integer
|
|
- description: CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC.
|
|
jsonPath: .metadata.creationTimestamp
|
|
name: AGE
|
|
type: date
|
|
name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
description: NodeImage is the Schema for the nodeimages API
|
|
properties:
|
|
apiVersion:
|
|
description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
|
type: string
|
|
kind:
|
|
description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
description: NodeImageSpec defines the desired state of NodeImage
|
|
properties:
|
|
images:
|
|
additionalProperties:
|
|
description: ImageSpec defines the pulling spec of an image
|
|
properties:
|
|
pullSecrets:
|
|
description: PullSecrets is an optional list of references to secrets in the same namespace to use for pulling the image. If specified, these secrets will be passed to individual puller implementations for them to use. For example, in the case of docker, only DockerConfig type secrets are honored.
|
|
items:
|
|
description: ReferenceObject comprises a resource name, with a mandatory namespace, rendered as "<namespace>/<name>".
|
|
properties:
|
|
name:
|
|
type: string
|
|
namespace:
|
|
type: string
|
|
type: object
|
|
type: array
|
|
tags:
|
|
description: Tags is a list of versions of this image
|
|
items:
|
|
description: ImageTagSpec defines the pulling spec of an image tag
|
|
properties:
|
|
createdAt:
|
|
description: Specifies the create time of this tag
|
|
format: date-time
|
|
type: string
|
|
ownerReferences:
|
|
description: List of objects depended by this object. If this image is managed by a controller, then an entry in this list will point to this controller.
|
|
items:
|
|
description: 'ObjectReference contains enough information to let you inspect or modify the referred object. --- New uses of this type are discouraged because of difficulty describing its usage when embedded in APIs. 1. Ignored fields. It includes many fields which are not generally honored. For instance, ResourceVersion and FieldPath are both very rarely valid in actual usage. 2. Invalid usage help. It is impossible to add specific help for individual usage. In most embedded usages, there are particular restrictions like, "must refer only to types A and B" or "UID not honored" or "name must be restricted". Those cannot be well described when embedded. 3. Inconsistent validation. Because the usages are different, the validation rules are different by usage, which makes it hard for users to predict what will happen. 4. The fields are both imprecise and overly precise. Kind is not a precise mapping to a URL. This can produce ambiguity during interpretation and require a REST mapping. In most cases, the dependency is on the group,resource tuple and the version of the actual struct is irrelevant. 5. We cannot easily change it. Because this type is embedded in many locations, updates to this type will affect numerous schemas. Don''t make new APIs embed an underspecified API type they do not control. Instead of using this type, create a locally provided and used type that is well-focused on your reference. For example, ServiceReferences for admission registration: https://github.com/kubernetes/api/blob/release-1.17/admissionregistration/v1/types.go#L533 .'
|
|
properties:
|
|
apiVersion:
|
|
description: API version of the referent.
|
|
type: string
|
|
fieldPath:
|
|
description: 'If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: "spec.containers{name}" (where "name" refers to the name of the container that triggered the event) or if no container name is specified "spec.containers[2]" (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object. TODO: this design is not final and this field is subject to change in the future.'
|
|
type: string
|
|
kind:
|
|
description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
type: string
|
|
name:
|
|
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
|
|
type: string
|
|
namespace:
|
|
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
|
|
type: string
|
|
resourceVersion:
|
|
description: 'Specific resourceVersion to which this reference is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
|
|
type: string
|
|
uid:
|
|
description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
|
|
type: string
|
|
type: object
|
|
type: array
|
|
pullPolicy:
|
|
description: PullPolicy is an optional field to set parameters of the pulling task. If not specified, the system will use the default values.
|
|
properties:
|
|
activeDeadlineSeconds:
|
|
description: ActiveDeadlineSeconds specifies the duration in seconds relative to the startTime that the task may be active before the system tries to terminate it; value must be positive integer. if not specified, the system will never terminate it.
|
|
format: int64
|
|
type: integer
|
|
backoffLimit:
|
|
description: Specifies the number of retries before marking the pulling task failed. Defaults to 3
|
|
format: int32
|
|
type: integer
|
|
timeoutSeconds:
|
|
description: Specifies the timeout of the pulling task. Defaults to 600
|
|
format: int32
|
|
type: integer
|
|
ttlSecondsAfterFinished:
|
|
description: TTLSecondsAfterFinished limits the lifetime of a pulling task that has finished execution (either Complete or Failed). If this field is set, ttlSecondsAfterFinished after the task finishes, it is eligible to be automatically deleted. If this field is unset, the task won't be automatically deleted. If this field is set to zero, the task becomes eligible to be deleted immediately after it finishes.
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
tag:
|
|
description: Specifies the image tag
|
|
type: string
|
|
version:
|
|
description: "An opaque value that represents the internal version of this tag that can be used by clients to determine when objects have changed. May be used for optimistic concurrency, change detection, and the watch operation on a resource or set of resources. Clients must treat these values as opaque and passed unmodified back to the server. \n Populated by the system. Read-only. Value must be treated as opaque by clients and ."
|
|
format: int64
|
|
type: integer
|
|
required:
|
|
- tag
|
|
type: object
|
|
type: array
|
|
required:
|
|
- tags
|
|
type: object
|
|
description: Specifies images to be pulled on this node It can not be more than 256 for each NodeImage
|
|
type: object
|
|
type: object
|
|
status:
|
|
description: NodeImageStatus defines the observed state of NodeImage
|
|
properties:
|
|
desired:
|
|
description: The desired number of pulling tasks, this is typically equal to the number of images in spec.
|
|
format: int32
|
|
type: integer
|
|
failed:
|
|
description: The number of pulling tasks which reached phase Failed.
|
|
format: int32
|
|
type: integer
|
|
firstSyncStatus:
|
|
description: The first of all job has finished on this node. When a node is added to the cluster, we want to know the time when the node's image pulling is completed, and use it to trigger the operation of the upper system.
|
|
properties:
|
|
message:
|
|
type: string
|
|
status:
|
|
description: SyncStatusPhase defines the node status
|
|
type: string
|
|
syncAt:
|
|
format: date-time
|
|
type: string
|
|
type: object
|
|
imageStatuses:
|
|
additionalProperties:
|
|
description: ImageStatus defines the pulling status of an image
|
|
properties:
|
|
tags:
|
|
description: Represents statuses of pulling tasks on this node
|
|
items:
|
|
description: ImageTagStatus defines the pulling status of an image tag
|
|
properties:
|
|
completionTime:
|
|
description: Represents time when the pulling task was completed. It is not guaranteed to be set in happens-before order across separate operations. It is represented in RFC3339 form and is in UTC.
|
|
format: date-time
|
|
type: string
|
|
imageID:
|
|
description: Represents the ID of this image.
|
|
type: string
|
|
message:
|
|
description: Represents the summary informations of this node
|
|
type: string
|
|
phase:
|
|
description: Represents the image pulling task phase.
|
|
type: string
|
|
progress:
|
|
description: Represents the pulling progress of this tag, which is beetween 0-100. There is no guarantee of monotonic consistency, and it may be a rollback due to retry during pulling.
|
|
format: int32
|
|
type: integer
|
|
startTime:
|
|
description: Represents time when the pulling task was acknowledged by the image puller. It is not guaranteed to be set in happens-before order across separate operations. It is represented in RFC3339 form and is in UTC.
|
|
format: date-time
|
|
type: string
|
|
tag:
|
|
description: Represents the image tag.
|
|
type: string
|
|
version:
|
|
description: Represents the internal version of this tag that the daemon handled.
|
|
format: int64
|
|
type: integer
|
|
required:
|
|
- phase
|
|
- tag
|
|
type: object
|
|
type: array
|
|
required:
|
|
- tags
|
|
type: object
|
|
description: all statuses of active image pulling tasks
|
|
type: object
|
|
pulling:
|
|
description: The number of pulling tasks which are not finished.
|
|
format: int32
|
|
type: integer
|
|
succeeded:
|
|
description: The number of pulling tasks which reached phase Succeeded.
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- desired
|
|
type: object
|
|
type: object
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
status:
|
|
acceptedNames:
|
|
kind: ""
|
|
plural: ""
|
|
conditions: []
|
|
storedVersions: []
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/apps.kruise.io_resourcedistribution.yaml
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
annotations:
|
|
controller-gen.kubebuilder.io/version: v0.7.0
|
|
creationTimestamp: null
|
|
name: resourcedistributions.apps.kruise.io
|
|
spec:
|
|
group: apps.kruise.io
|
|
names:
|
|
kind: ResourceDistribution
|
|
listKind: ResourceDistributionList
|
|
plural: resourcedistributions
|
|
shortNames:
|
|
- distributor
|
|
singular: resourcedistribution
|
|
scope: Cluster
|
|
versions:
|
|
- additionalPrinterColumns:
|
|
- description: The desired number of desired distribution and syncs.
|
|
jsonPath: .status.desired
|
|
name: TOTAL
|
|
type: integer
|
|
- description: The number of successful distribution and syncs.
|
|
jsonPath: .status.succeeded
|
|
name: SUCCEED
|
|
type: integer
|
|
- description: The number of failed distributions and syncs.
|
|
jsonPath: .status.failed
|
|
name: FAILED
|
|
type: integer
|
|
name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
description: ResourceDistribution is the Schema for the resourcedistributions API.
|
|
properties:
|
|
apiVersion:
|
|
description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
|
type: string
|
|
kind:
|
|
description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
description: ResourceDistributionSpec defines the desired state of ResourceDistribution.
|
|
properties:
|
|
resource:
|
|
description: Resource must be the complete yaml that users want to distribute.
|
|
type: object
|
|
x-kubernetes-embedded-resource: true
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
targets:
|
|
description: Targets defines the namespaces that users want to distribute to.
|
|
properties:
|
|
allNamespaces:
|
|
description: If AllNamespaces is true, Resource will be distributed to the all namespaces (except some forbidden namespaces, such as "kube-system" and "kube-public").
|
|
type: boolean
|
|
excludedNamespaces:
|
|
description: If ExcludedNamespaces is not empty, Resource will never be distributed to the listed namespaces. ExcludedNamespaces has the highest priority.
|
|
properties:
|
|
list:
|
|
items:
|
|
description: ResourceDistributionNamespace contains a namespace name
|
|
properties:
|
|
name:
|
|
description: Namespace name
|
|
type: string
|
|
type: object
|
|
type: array
|
|
type: object
|
|
includedNamespaces:
|
|
description: If IncludedNamespaces is not empty, Resource will be distributed to the listed namespaces.
|
|
properties:
|
|
list:
|
|
items:
|
|
description: ResourceDistributionNamespace contains a namespace name
|
|
properties:
|
|
name:
|
|
description: Namespace name
|
|
type: string
|
|
type: object
|
|
type: array
|
|
type: object
|
|
namespaceLabelSelector:
|
|
description: If NamespaceLabelSelector is not empty, Resource will be distributed to the matched namespaces.
|
|
properties:
|
|
matchExpressions:
|
|
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
|
|
items:
|
|
description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: key is the label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
|
|
type: string
|
|
values:
|
|
description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
|
|
type: object
|
|
type: object
|
|
type: object
|
|
required:
|
|
- resource
|
|
- targets
|
|
type: object
|
|
status:
|
|
description: ResourceDistributionStatus defines the observed state of ResourceDistribution. ResourceDistributionStatus is recorded by kruise, users' modification is invalid and meaningless.
|
|
properties:
|
|
conditions:
|
|
description: Conditions describe the condition when Resource creating, updating and deleting.
|
|
items:
|
|
description: ResourceDistributionCondition allows a row to be marked with additional information.
|
|
properties:
|
|
failedNamespace:
|
|
description: FailedNamespaces describe all failed namespaces when Status is False
|
|
items:
|
|
type: string
|
|
type: array
|
|
lastTransitionTime:
|
|
description: LastTransitionTime is the last time the condition transitioned from one status to another.
|
|
format: date-time
|
|
type: string
|
|
reason:
|
|
description: Reason describe human readable message indicating details about last transition.
|
|
type: string
|
|
status:
|
|
description: Status of the condition, one of True, False, Unknown.
|
|
type: string
|
|
type:
|
|
description: Type of ResourceDistributionCondition.
|
|
type: string
|
|
required:
|
|
- status
|
|
- type
|
|
type: object
|
|
type: array
|
|
desired:
|
|
description: Desired represents the number of total target namespaces.
|
|
format: int32
|
|
type: integer
|
|
failed:
|
|
description: Failed represents the number of failed distributions.
|
|
format: int32
|
|
type: integer
|
|
observedGeneration:
|
|
description: ObservedGeneration represents the .metadata.generation that the condition was set based upon.
|
|
format: int64
|
|
type: integer
|
|
succeeded:
|
|
description: Succeeded represents the number of successful distributions.
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
type: object
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
status:
|
|
acceptedNames:
|
|
kind: ""
|
|
plural: ""
|
|
conditions: []
|
|
storedVersions: []
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/apps.kruise.io_sidecarsets.yaml
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
annotations:
|
|
controller-gen.kubebuilder.io/version: v0.7.0
|
|
creationTimestamp: null
|
|
name: sidecarsets.apps.kruise.io
|
|
spec:
|
|
group: apps.kruise.io
|
|
names:
|
|
kind: SidecarSet
|
|
listKind: SidecarSetList
|
|
plural: sidecarsets
|
|
singular: sidecarset
|
|
scope: Cluster
|
|
versions:
|
|
- additionalPrinterColumns:
|
|
- description: The number of pods matched.
|
|
jsonPath: .status.matchedPods
|
|
name: MATCHED
|
|
type: integer
|
|
- description: The number of pods matched and updated.
|
|
jsonPath: .status.updatedPods
|
|
name: UPDATED
|
|
type: integer
|
|
- description: The number of pods matched and ready.
|
|
jsonPath: .status.readyPods
|
|
name: READY
|
|
type: integer
|
|
- description: CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC.
|
|
jsonPath: .metadata.creationTimestamp
|
|
name: AGE
|
|
type: date
|
|
name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
description: SidecarSet is the Schema for the sidecarsets API
|
|
properties:
|
|
apiVersion:
|
|
description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
|
type: string
|
|
kind:
|
|
description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
description: SidecarSetSpec defines the desired state of SidecarSet
|
|
properties:
|
|
containers:
|
|
description: Containers is the list of sidecar containers to be injected into the selected pod
|
|
items:
|
|
description: SidecarContainer defines the container of Sidecar
|
|
properties:
|
|
podInjectPolicy:
|
|
description: The rules that injected SidecarContainer into Pod.spec.containers, not takes effect in initContainers If BeforeAppContainer, the SidecarContainer will be injected in front of the pod.spec.containers otherwise it will be injected into the back. default BeforeAppContainerType
|
|
type: string
|
|
shareVolumePolicy:
|
|
description: If ShareVolumePolicy is enabled, the sidecar container will share the other container's VolumeMounts in the pod(don't contains the injected sidecar container).
|
|
properties:
|
|
type:
|
|
type: string
|
|
type: object
|
|
transferEnv:
|
|
description: TransferEnv will transfer env info from other container SourceContainerName is pod.spec.container[x].name; EnvName is pod.spec.container[x].Env.name
|
|
items:
|
|
properties:
|
|
envName:
|
|
type: string
|
|
envNames:
|
|
items:
|
|
type: string
|
|
type: array
|
|
sourceContainerName:
|
|
type: string
|
|
sourceContainerNameFrom:
|
|
properties:
|
|
fieldRef:
|
|
description: 'Selects a field of the pod: supports metadata.name, `metadata.labels[''<KEY>'']`, `metadata.annotations[''<KEY>'']`,'
|
|
properties:
|
|
apiVersion:
|
|
description: Version of the schema the FieldPath is written in terms of, defaults to "v1".
|
|
type: string
|
|
fieldPath:
|
|
description: Path of the field to select in the specified API version.
|
|
type: string
|
|
required:
|
|
- fieldPath
|
|
type: object
|
|
type: object
|
|
type: object
|
|
type: array
|
|
upgradeStrategy:
|
|
description: 'sidecarContainer upgrade strategy, include: ColdUpgrade, HotUpgrade'
|
|
properties:
|
|
hotUpgradeEmptyImage:
|
|
description: when HotUpgrade, HotUpgradeEmptyImage is used to complete the hot upgrading process HotUpgradeEmptyImage is consistent of sidecar container in Command, Args, Liveness probe, etc. but it does no actual work.
|
|
type: string
|
|
upgradeType:
|
|
description: when sidecar container is stateless, use ColdUpgrade otherwise HotUpgrade are more HotUpgrade. examples for istio envoy container is suitable for HotUpgrade default is ColdUpgrade
|
|
type: string
|
|
type: object
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
type: array
|
|
imagePullSecrets:
|
|
description: List of the names of secrets required by pulling sidecar container images
|
|
items:
|
|
description: LocalObjectReference contains enough information to let you locate the referenced object inside the same namespace.
|
|
properties:
|
|
name:
|
|
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?'
|
|
type: string
|
|
type: object
|
|
type: array
|
|
initContainers:
|
|
description: InitContainers is the list of init containers to be injected into the selected pod We will inject those containers by their name in ascending order We only inject init containers when a new pod is created, it does not apply to any existing pod
|
|
items:
|
|
description: SidecarContainer defines the container of Sidecar
|
|
properties:
|
|
podInjectPolicy:
|
|
description: The rules that injected SidecarContainer into Pod.spec.containers, not takes effect in initContainers If BeforeAppContainer, the SidecarContainer will be injected in front of the pod.spec.containers otherwise it will be injected into the back. default BeforeAppContainerType
|
|
type: string
|
|
shareVolumePolicy:
|
|
description: If ShareVolumePolicy is enabled, the sidecar container will share the other container's VolumeMounts in the pod(don't contains the injected sidecar container).
|
|
properties:
|
|
type:
|
|
type: string
|
|
type: object
|
|
transferEnv:
|
|
description: TransferEnv will transfer env info from other container SourceContainerName is pod.spec.container[x].name; EnvName is pod.spec.container[x].Env.name
|
|
items:
|
|
properties:
|
|
envName:
|
|
type: string
|
|
envNames:
|
|
items:
|
|
type: string
|
|
type: array
|
|
sourceContainerName:
|
|
type: string
|
|
sourceContainerNameFrom:
|
|
properties:
|
|
fieldRef:
|
|
description: 'Selects a field of the pod: supports metadata.name, `metadata.labels[''<KEY>'']`, `metadata.annotations[''<KEY>'']`,'
|
|
properties:
|
|
apiVersion:
|
|
description: Version of the schema the FieldPath is written in terms of, defaults to "v1".
|
|
type: string
|
|
fieldPath:
|
|
description: Path of the field to select in the specified API version.
|
|
type: string
|
|
required:
|
|
- fieldPath
|
|
type: object
|
|
type: object
|
|
type: object
|
|
type: array
|
|
upgradeStrategy:
|
|
description: 'sidecarContainer upgrade strategy, include: ColdUpgrade, HotUpgrade'
|
|
properties:
|
|
hotUpgradeEmptyImage:
|
|
description: when HotUpgrade, HotUpgradeEmptyImage is used to complete the hot upgrading process HotUpgradeEmptyImage is consistent of sidecar container in Command, Args, Liveness probe, etc. but it does no actual work.
|
|
type: string
|
|
upgradeType:
|
|
description: when sidecar container is stateless, use ColdUpgrade otherwise HotUpgrade are more HotUpgrade. examples for istio envoy container is suitable for HotUpgrade default is ColdUpgrade
|
|
type: string
|
|
type: object
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
type: array
|
|
injectionStrategy:
|
|
description: InjectionStrategy describe the strategy when sidecarset is injected into pods
|
|
properties:
|
|
paused:
|
|
description: Paused indicates that SidecarSet will suspend injection into Pods If Paused is true, the sidecarSet will not be injected to newly created Pods, but the injected sidecar container remains updating and running. default is false
|
|
type: boolean
|
|
type: object
|
|
namespace:
|
|
description: Namespace sidecarSet will only match the pods in the namespace otherwise, match pods in all namespaces(in cluster)
|
|
type: string
|
|
revisionHistoryLimit:
|
|
description: RevisionHistoryLimit indicates the maximum quantity of stored revisions about the SidecarSet. default value is 10
|
|
format: int32
|
|
type: integer
|
|
selector:
|
|
description: selector is a label query over pods that should be injected
|
|
properties:
|
|
matchExpressions:
|
|
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
|
|
items:
|
|
description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: key is the label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
|
|
type: string
|
|
values:
|
|
description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
|
|
type: object
|
|
type: object
|
|
updateStrategy:
|
|
description: The sidecarset updateStrategy to use to replace existing pods with new ones.
|
|
properties:
|
|
maxUnavailable:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: 'The maximum number of SidecarSet pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of total number of SidecarSet pods at the start of the update (ex: 10%). Absolute number is calculated from percentage by rounding up. This cannot be 0. Default value is 1.'
|
|
x-kubernetes-int-or-string: true
|
|
partition:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: Partition is the desired number of pods in old revisions. It means when partition is set during pods updating, (replicas - partition) number of pods will be updated. Default value is 0.
|
|
x-kubernetes-int-or-string: true
|
|
paused:
|
|
description: Paused indicates that the SidecarSet is paused to update the injected pods, but it don't affect the webhook inject sidecar container into the newly created pods. default is false
|
|
type: boolean
|
|
scatterStrategy:
|
|
description: ScatterStrategy defines the scatter rules to make pods been scattered when update. This will avoid pods with the same key-value to be updated in one batch. - Note that pods will be scattered after priority sort. So, although priority strategy and scatter strategy can be applied together, we suggest to use either one of them. - If scatterStrategy is used, we suggest to just use one term. Otherwise, the update order can be hard to understand.
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- key
|
|
- value
|
|
type: object
|
|
type: array
|
|
selector:
|
|
description: If selector is not nil, this upgrade will only update the selected pods.
|
|
properties:
|
|
matchExpressions:
|
|
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
|
|
items:
|
|
description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: key is the label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
|
|
type: string
|
|
values:
|
|
description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
|
|
type: object
|
|
type: object
|
|
type:
|
|
description: Type is NotUpdate, the SidecarSet don't update the injected pods, it will only inject sidecar container into the newly created pods. Type is RollingUpdate, the SidecarSet will update the injected pods to the latest version on RollingUpdate Strategy. default is RollingUpdate
|
|
type: string
|
|
type: object
|
|
volumes:
|
|
description: List of volumes that can be mounted by sidecar containers
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
type: object
|
|
status:
|
|
description: SidecarSetStatus defines the observed state of SidecarSet
|
|
properties:
|
|
collisionCount:
|
|
description: CollisionCount is the count of hash collisions for the SidecarSet. The SidecarSet controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ControllerRevision.
|
|
format: int32
|
|
type: integer
|
|
latestRevision:
|
|
description: LatestRevision, if not empty, indicates the latest controllerRevision name of the SidecarSet.
|
|
type: string
|
|
matchedPods:
|
|
description: matchedPods is the number of Pods whose labels are matched with this SidecarSet's selector and are created after sidecarset creates
|
|
format: int32
|
|
type: integer
|
|
observedGeneration:
|
|
description: observedGeneration is the most recent generation observed for this SidecarSet. It corresponds to the SidecarSet's generation, which is updated on mutation by the API Server.
|
|
format: int64
|
|
type: integer
|
|
readyPods:
|
|
description: readyPods is the number of matched Pods that have a ready condition
|
|
format: int32
|
|
type: integer
|
|
updatedPods:
|
|
description: updatedPods is the number of matched Pods that are injected with the latest SidecarSet's containers
|
|
format: int32
|
|
type: integer
|
|
updatedReadyPods:
|
|
description: updatedReadyPods is the number of matched pods that updated and ready
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- matchedPods
|
|
- readyPods
|
|
- updatedPods
|
|
type: object
|
|
type: object
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
status:
|
|
acceptedNames:
|
|
kind: ""
|
|
plural: ""
|
|
conditions: []
|
|
storedVersions: []
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/apps.kruise.io_statefulsets.yaml
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
annotations:
|
|
controller-gen.kubebuilder.io/version: v0.7.0
|
|
name: statefulsets.apps.kruise.io
|
|
spec:
|
|
conversion:
|
|
strategy: Webhook
|
|
webhook:
|
|
clientConfig:
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /convert
|
|
conversionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
group: apps.kruise.io
|
|
names:
|
|
kind: StatefulSet
|
|
listKind: StatefulSetList
|
|
plural: statefulsets
|
|
shortNames:
|
|
- sts
|
|
- asts
|
|
singular: statefulset
|
|
scope: Namespaced
|
|
versions:
|
|
- additionalPrinterColumns:
|
|
- description: The desired number of pods.
|
|
jsonPath: .spec.replicas
|
|
name: DESIRED
|
|
type: integer
|
|
- description: The number of currently all pods.
|
|
jsonPath: .status.replicas
|
|
name: CURRENT
|
|
type: integer
|
|
- description: The number of pods updated.
|
|
jsonPath: .status.updatedReplicas
|
|
name: UPDATED
|
|
type: integer
|
|
- description: The number of pods ready.
|
|
jsonPath: .status.readyReplicas
|
|
name: READY
|
|
type: integer
|
|
- description: CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC.
|
|
jsonPath: .metadata.creationTimestamp
|
|
name: AGE
|
|
type: date
|
|
- description: The containers of currently advanced statefulset.
|
|
jsonPath: .spec.template.spec.containers[*].name
|
|
name: CONTAINERS
|
|
priority: 1
|
|
type: string
|
|
- description: The images of currently advanced statefulset.
|
|
jsonPath: .spec.template.spec.containers[*].image
|
|
name: IMAGES
|
|
priority: 1
|
|
type: string
|
|
name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
description: StatefulSet is the Schema for the statefulsets API
|
|
properties:
|
|
apiVersion:
|
|
description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
|
type: string
|
|
kind:
|
|
description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
description: StatefulSetSpec defines the desired state of StatefulSet
|
|
properties:
|
|
podManagementPolicy:
|
|
description: podManagementPolicy controls how pods are created during initial scale up, when replacing pods on nodes, or when scaling down. The default policy is `OrderedReady`, where pods are created in increasing order (pod-0, then pod-1, etc) and the controller will wait until each pod is ready before continuing. When scaling down, the pods are removed in the opposite order. The alternative policy is `Parallel` which will create pods in parallel to match the desired scale without waiting, and on scale down will delete all pods at once.
|
|
type: string
|
|
replicas:
|
|
description: 'replicas is the desired number of replicas of the given Template. These are replicas in the sense that they are instantiations of the same Template, but individual replicas also have a consistent identity. If unspecified, defaults to 1. TODO: Consider a rename of this field.'
|
|
format: int32
|
|
type: integer
|
|
revisionHistoryLimit:
|
|
description: revisionHistoryLimit is the maximum number of revisions that will be maintained in the StatefulSet's revision history. The revision history consists of all revisions not represented by a currently applied StatefulSetSpec version. The default value is 10.
|
|
format: int32
|
|
type: integer
|
|
selector:
|
|
description: 'selector is a label query over pods that should match the replica count. It must match the pod template''s labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors'
|
|
properties:
|
|
matchExpressions:
|
|
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
|
|
items:
|
|
description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: key is the label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
|
|
type: string
|
|
values:
|
|
description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
|
|
type: object
|
|
type: object
|
|
serviceName:
|
|
description: 'serviceName is the name of the service that governs this StatefulSet. This service must exist before the StatefulSet, and is responsible for the network identity of the set. Pods get DNS/hostnames that follow the pattern: pod-specific-string.serviceName.default.svc.cluster.local where "pod-specific-string" is managed by the StatefulSet controller.'
|
|
type: string
|
|
template:
|
|
description: template is the object that describes the pod that will be created if insufficient replicas are detected. Each pod stamped out by the StatefulSet will fulfill this Template, but have a unique identity from the rest of the StatefulSet.
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
updateStrategy:
|
|
description: updateStrategy indicates the StatefulSetUpdateStrategy that will be employed to update Pods in the StatefulSet when a revision is made to Template.
|
|
properties:
|
|
rollingUpdate:
|
|
description: RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType.
|
|
properties:
|
|
inPlaceUpdateStrategy:
|
|
description: InPlaceUpdateStrategy contains strategies for in-place update.
|
|
properties:
|
|
gracePeriodSeconds:
|
|
description: GracePeriodSeconds is the timespan between set Pod status to not-ready and update images in Pod spec when in-place update a Pod.
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
maxUnavailable:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: 'The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. Also, maxUnavailable can just be allowed to work with Parallel podManagementPolicy. Defaults to 1.'
|
|
x-kubernetes-int-or-string: true
|
|
minReadySeconds:
|
|
description: MinReadySeconds indicates how long will the pod be considered ready after it's updated. MinReadySeconds works with both OrderedReady and Parallel podManagementPolicy. It affects the pod scale up speed when the podManagementPolicy is set to be OrderedReady. Combined with MaxUnavailable, it affects the pod update speed regardless of podManagementPolicy. Default value is 0, max is 300.
|
|
format: int32
|
|
type: integer
|
|
partition:
|
|
description: 'Partition indicates the ordinal at which the StatefulSet should be partitioned by default. But if unorderedUpdate has been set: - Partition indicates the number of pods with non-updated revisions when rolling update. - It means controller will update $(replicas - partition) number of pod. Default value is 0.'
|
|
format: int32
|
|
type: integer
|
|
paused:
|
|
description: Paused indicates that the StatefulSet is paused. Default value is false
|
|
type: boolean
|
|
podUpdatePolicy:
|
|
description: PodUpdatePolicy indicates how pods should be updated Default value is "ReCreate"
|
|
type: string
|
|
unorderedUpdate:
|
|
description: UnorderedUpdate contains strategies for non-ordered update. If it is not nil, pods will be updated with non-ordered sequence. Noted that UnorderedUpdate can only be allowed to work with Parallel podManagementPolicy
|
|
properties:
|
|
priorityStrategy:
|
|
description: Priorities are the rules for calculating the priority of updating pods. Each pod to be updated, will pass through these terms and get a sum of weights.
|
|
properties:
|
|
orderPriority:
|
|
description: 'Order priority terms, pods will be sorted by the value of orderedKey. For example: ``` orderPriority: - orderedKey: key1 - orderedKey: key2 ``` First, all pods which have key1 in labels will be sorted by the value of key1. Then, the left pods which have no key1 but have key2 in labels will be sorted by the value of key2 and put behind those pods have key1.'
|
|
items:
|
|
description: UpdatePriorityOrder defines order priority.
|
|
properties:
|
|
orderedKey:
|
|
description: Calculate priority by value of this key. Values of this key, will be sorted by GetInt(val). GetInt method will find the last int in value, such as getting 5 in value '5', getting 10 in value 'sts-10'.
|
|
type: string
|
|
required:
|
|
- orderedKey
|
|
type: object
|
|
type: array
|
|
weightPriority:
|
|
description: Weight priority terms, pods will be sorted by the sum of all terms weight.
|
|
items:
|
|
description: UpdatePriorityWeightTerm defines weight priority.
|
|
properties:
|
|
matchSelector:
|
|
description: MatchSelector is used to select by pod's labels.
|
|
properties:
|
|
matchExpressions:
|
|
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
|
|
items:
|
|
description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: key is the label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
|
|
type: string
|
|
values:
|
|
description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
|
|
type: object
|
|
type: object
|
|
weight:
|
|
description: Weight associated with matching the corresponding matchExpressions, in the range 1-100.
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- matchSelector
|
|
- weight
|
|
type: object
|
|
type: array
|
|
type: object
|
|
type: object
|
|
type: object
|
|
type:
|
|
description: Type indicates the type of the StatefulSetUpdateStrategy. Default is RollingUpdate.
|
|
type: string
|
|
type: object
|
|
volumeClaimTemplates:
|
|
description: 'volumeClaimTemplates is a list of claims that pods are allowed to reference. The StatefulSet controller is responsible for mapping network identities to claims in a way that maintains the identity of a pod. Every claim in this list must have at least one matching (by name) volumeMount in one container in the template. A claim in this list takes precedence over any volumes in the template, with the same name. TODO: Define the behavior if a claim already exists with the same name.'
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
required:
|
|
- selector
|
|
- template
|
|
type: object
|
|
status:
|
|
description: StatefulSetStatus defines the observed state of StatefulSet
|
|
properties:
|
|
availableReplicas:
|
|
description: AvailableReplicas is the number of Pods created by the StatefulSet controller that have been ready for minReadySeconds.
|
|
format: int32
|
|
type: integer
|
|
collisionCount:
|
|
description: collisionCount is the count of hash collisions for the StatefulSet. The StatefulSet controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ControllerRevision.
|
|
format: int32
|
|
type: integer
|
|
conditions:
|
|
description: Represents the latest available observations of a statefulset's current state.
|
|
items:
|
|
description: StatefulSetCondition describes the state of a statefulset at a certain point.
|
|
properties:
|
|
lastTransitionTime:
|
|
description: Last time the condition transitioned from one status to another.
|
|
format: date-time
|
|
type: string
|
|
message:
|
|
description: A human readable message indicating details about the transition.
|
|
type: string
|
|
reason:
|
|
description: The reason for the condition's last transition.
|
|
type: string
|
|
status:
|
|
description: Status of the condition, one of True, False, Unknown.
|
|
type: string
|
|
type:
|
|
description: Type of statefulset condition.
|
|
type: string
|
|
required:
|
|
- status
|
|
- type
|
|
type: object
|
|
type: array
|
|
currentReplicas:
|
|
description: currentReplicas is the number of Pods created by the StatefulSet controller from the StatefulSet version indicated by currentRevision.
|
|
format: int32
|
|
type: integer
|
|
currentRevision:
|
|
description: currentRevision, if not empty, indicates the version of the StatefulSet used to generate Pods in the sequence [0,currentReplicas).
|
|
type: string
|
|
labelSelector:
|
|
description: LabelSelector is label selectors for query over pods that should match the replica count used by HPA.
|
|
type: string
|
|
observedGeneration:
|
|
description: observedGeneration is the most recent generation observed for this StatefulSet. It corresponds to the StatefulSet's generation, which is updated on mutation by the API Server.
|
|
format: int64
|
|
type: integer
|
|
readyReplicas:
|
|
description: readyReplicas is the number of Pods created by the StatefulSet controller that have a Ready Condition.
|
|
format: int32
|
|
type: integer
|
|
replicas:
|
|
description: replicas is the number of Pods created by the StatefulSet controller.
|
|
format: int32
|
|
type: integer
|
|
updateRevision:
|
|
description: updateRevision, if not empty, indicates the version of the StatefulSet used to generate Pods in the sequence [replicas-updatedReplicas,replicas)
|
|
type: string
|
|
updatedReplicas:
|
|
description: updatedReplicas is the number of Pods created by the StatefulSet controller from the StatefulSet version indicated by updateRevision.
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- availableReplicas
|
|
- currentReplicas
|
|
- readyReplicas
|
|
- replicas
|
|
- updatedReplicas
|
|
type: object
|
|
type: object
|
|
served: true
|
|
storage: false
|
|
subresources:
|
|
scale:
|
|
labelSelectorPath: .status.labelSelector
|
|
specReplicasPath: .spec.replicas
|
|
statusReplicasPath: .status.replicas
|
|
status: {}
|
|
- additionalPrinterColumns:
|
|
- description: The desired number of pods.
|
|
jsonPath: .spec.replicas
|
|
name: DESIRED
|
|
type: integer
|
|
- description: The number of currently all pods.
|
|
jsonPath: .status.replicas
|
|
name: CURRENT
|
|
type: integer
|
|
- description: The number of pods updated.
|
|
jsonPath: .status.updatedReplicas
|
|
name: UPDATED
|
|
type: integer
|
|
- description: The number of pods ready.
|
|
jsonPath: .status.readyReplicas
|
|
name: READY
|
|
type: integer
|
|
- description: CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC.
|
|
jsonPath: .metadata.creationTimestamp
|
|
name: AGE
|
|
type: date
|
|
- description: The containers of currently advanced statefulset.
|
|
jsonPath: .spec.template.spec.containers[*].name
|
|
name: CONTAINERS
|
|
priority: 1
|
|
type: string
|
|
- description: The images of currently advanced statefulset.
|
|
jsonPath: .spec.template.spec.containers[*].image
|
|
name: IMAGES
|
|
priority: 1
|
|
type: string
|
|
name: v1beta1
|
|
schema:
|
|
openAPIV3Schema:
|
|
description: StatefulSet is the Schema for the statefulsets API
|
|
properties:
|
|
apiVersion:
|
|
description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
|
type: string
|
|
kind:
|
|
description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
description: StatefulSetSpec defines the desired state of StatefulSet
|
|
properties:
|
|
lifecycle:
|
|
description: Lifecycle defines the lifecycle hooks for Pods pre-delete, in-place update.
|
|
properties:
|
|
inPlaceUpdate:
|
|
description: InPlaceUpdate is the hook before Pod to update and after Pod has been updated.
|
|
properties:
|
|
finalizersHandler:
|
|
items:
|
|
type: string
|
|
type: array
|
|
labelsHandler:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
preDelete:
|
|
description: PreDelete is the hook before Pod to be deleted.
|
|
properties:
|
|
finalizersHandler:
|
|
items:
|
|
type: string
|
|
type: array
|
|
labelsHandler:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
type: object
|
|
podManagementPolicy:
|
|
description: podManagementPolicy controls how pods are created during initial scale up, when replacing pods on nodes, or when scaling down. The default policy is `OrderedReady`, where pods are created in increasing order (pod-0, then pod-1, etc) and the controller will wait until each pod is ready before continuing. When scaling down, the pods are removed in the opposite order. The alternative policy is `Parallel` which will create pods in parallel to match the desired scale without waiting, and on scale down will delete all pods at once.
|
|
type: string
|
|
replicas:
|
|
description: 'replicas is the desired number of replicas of the given Template. These are replicas in the sense that they are instantiations of the same Template, but individual replicas also have a consistent identity. If unspecified, defaults to 1. TODO: Consider a rename of this field.'
|
|
format: int32
|
|
type: integer
|
|
reserveOrdinals:
|
|
description: 'reserveOrdinals controls the ordinal numbers that should be reserved, and the replicas will always be the expectation number of running Pods. For a sts with replicas=3 and its Pods in [0, 1, 2]: - If you want to migrate Pod-1 and reserve this ordinal, just set spec.reserveOrdinal to [1]. Then controller will delete Pod-1 and create Pod-3 (existing Pods will be [0, 2, 3]) - If you just want to delete Pod-1, you should set spec.reserveOrdinal to [1] and spec.replicas to 2. Then controller will delete Pod-1 (existing Pods will be [0, 2])'
|
|
items:
|
|
type: integer
|
|
type: array
|
|
revisionHistoryLimit:
|
|
description: revisionHistoryLimit is the maximum number of revisions that will be maintained in the StatefulSet's revision history. The revision history consists of all revisions not represented by a currently applied StatefulSetSpec version. The default value is 10.
|
|
format: int32
|
|
type: integer
|
|
scaleStrategy:
|
|
description: scaleStrategy indicates the StatefulSetScaleStrategy that will be employed to scale Pods in the StatefulSet.
|
|
properties:
|
|
maxUnavailable:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: 'The maximum number of pods that can be unavailable during scaling. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. It can just be allowed to work with Parallel podManagementPolicy.'
|
|
x-kubernetes-int-or-string: true
|
|
type: object
|
|
selector:
|
|
description: 'selector is a label query over pods that should match the replica count. It must match the pod template''s labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors'
|
|
properties:
|
|
matchExpressions:
|
|
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
|
|
items:
|
|
description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: key is the label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
|
|
type: string
|
|
values:
|
|
description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
|
|
type: object
|
|
type: object
|
|
serviceName:
|
|
description: 'serviceName is the name of the service that governs this StatefulSet. This service must exist before the StatefulSet, and is responsible for the network identity of the set. Pods get DNS/hostnames that follow the pattern: pod-specific-string.serviceName.default.svc.cluster.local where "pod-specific-string" is managed by the StatefulSet controller.'
|
|
type: string
|
|
template:
|
|
description: template is the object that describes the pod that will be created if insufficient replicas are detected. Each pod stamped out by the StatefulSet will fulfill this Template, but have a unique identity from the rest of the StatefulSet.
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
updateStrategy:
|
|
description: updateStrategy indicates the StatefulSetUpdateStrategy that will be employed to update Pods in the StatefulSet when a revision is made to Template.
|
|
properties:
|
|
rollingUpdate:
|
|
description: RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType.
|
|
properties:
|
|
inPlaceUpdateStrategy:
|
|
description: InPlaceUpdateStrategy contains strategies for in-place update.
|
|
properties:
|
|
gracePeriodSeconds:
|
|
description: GracePeriodSeconds is the timespan between set Pod status to not-ready and update images in Pod spec when in-place update a Pod.
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
maxUnavailable:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: 'The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. Also, maxUnavailable can just be allowed to work with Parallel podManagementPolicy. Defaults to 1.'
|
|
x-kubernetes-int-or-string: true
|
|
minReadySeconds:
|
|
description: MinReadySeconds indicates how long will the pod be considered ready after it's updated. MinReadySeconds works with both OrderedReady and Parallel podManagementPolicy. It affects the pod scale up speed when the podManagementPolicy is set to be OrderedReady. Combined with MaxUnavailable, it affects the pod update speed regardless of podManagementPolicy. Default value is 0, max is 300.
|
|
format: int32
|
|
type: integer
|
|
partition:
|
|
description: 'Partition indicates the ordinal at which the StatefulSet should be partitioned by default. But if unorderedUpdate has been set: - Partition indicates the number of pods with non-updated revisions when rolling update. - It means controller will update $(replicas - partition) number of pod. Default value is 0.'
|
|
format: int32
|
|
type: integer
|
|
paused:
|
|
description: Paused indicates that the StatefulSet is paused. Default value is false
|
|
type: boolean
|
|
podUpdatePolicy:
|
|
description: PodUpdatePolicy indicates how pods should be updated Default value is "ReCreate"
|
|
type: string
|
|
unorderedUpdate:
|
|
description: UnorderedUpdate contains strategies for non-ordered update. If it is not nil, pods will be updated with non-ordered sequence. Noted that UnorderedUpdate can only be allowed to work with Parallel podManagementPolicy
|
|
properties:
|
|
priorityStrategy:
|
|
description: Priorities are the rules for calculating the priority of updating pods. Each pod to be updated, will pass through these terms and get a sum of weights.
|
|
properties:
|
|
orderPriority:
|
|
description: 'Order priority terms, pods will be sorted by the value of orderedKey. For example: ``` orderPriority: - orderedKey: key1 - orderedKey: key2 ``` First, all pods which have key1 in labels will be sorted by the value of key1. Then, the left pods which have no key1 but have key2 in labels will be sorted by the value of key2 and put behind those pods have key1.'
|
|
items:
|
|
description: UpdatePriorityOrder defines order priority.
|
|
properties:
|
|
orderedKey:
|
|
description: Calculate priority by value of this key. Values of this key, will be sorted by GetInt(val). GetInt method will find the last int in value, such as getting 5 in value '5', getting 10 in value 'sts-10'.
|
|
type: string
|
|
required:
|
|
- orderedKey
|
|
type: object
|
|
type: array
|
|
weightPriority:
|
|
description: Weight priority terms, pods will be sorted by the sum of all terms weight.
|
|
items:
|
|
description: UpdatePriorityWeightTerm defines weight priority.
|
|
properties:
|
|
matchSelector:
|
|
description: MatchSelector is used to select by pod's labels.
|
|
properties:
|
|
matchExpressions:
|
|
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
|
|
items:
|
|
description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: key is the label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
|
|
type: string
|
|
values:
|
|
description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
|
|
type: object
|
|
type: object
|
|
weight:
|
|
description: Weight associated with matching the corresponding matchExpressions, in the range 1-100.
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- matchSelector
|
|
- weight
|
|
type: object
|
|
type: array
|
|
type: object
|
|
type: object
|
|
type: object
|
|
type:
|
|
description: Type indicates the type of the StatefulSetUpdateStrategy. Default is RollingUpdate.
|
|
type: string
|
|
type: object
|
|
volumeClaimTemplates:
|
|
description: 'volumeClaimTemplates is a list of claims that pods are allowed to reference. The StatefulSet controller is responsible for mapping network identities to claims in a way that maintains the identity of a pod. Every claim in this list must have at least one matching (by name) volumeMount in one container in the template. A claim in this list takes precedence over any volumes in the template, with the same name. TODO: Define the behavior if a claim already exists with the same name.'
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
required:
|
|
- selector
|
|
- template
|
|
type: object
|
|
status:
|
|
description: StatefulSetStatus defines the observed state of StatefulSet
|
|
properties:
|
|
availableReplicas:
|
|
description: AvailableReplicas is the number of Pods created by the StatefulSet controller that have been ready for minReadySeconds.
|
|
format: int32
|
|
type: integer
|
|
collisionCount:
|
|
description: collisionCount is the count of hash collisions for the StatefulSet. The StatefulSet controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ControllerRevision.
|
|
format: int32
|
|
type: integer
|
|
conditions:
|
|
description: Represents the latest available observations of a statefulset's current state.
|
|
items:
|
|
description: StatefulSetCondition describes the state of a statefulset at a certain point.
|
|
properties:
|
|
lastTransitionTime:
|
|
description: Last time the condition transitioned from one status to another.
|
|
format: date-time
|
|
type: string
|
|
message:
|
|
description: A human readable message indicating details about the transition.
|
|
type: string
|
|
reason:
|
|
description: The reason for the condition's last transition.
|
|
type: string
|
|
status:
|
|
description: Status of the condition, one of True, False, Unknown.
|
|
type: string
|
|
type:
|
|
description: Type of statefulset condition.
|
|
type: string
|
|
required:
|
|
- status
|
|
- type
|
|
type: object
|
|
type: array
|
|
currentReplicas:
|
|
description: currentReplicas is the number of Pods created by the StatefulSet controller from the StatefulSet version indicated by currentRevision.
|
|
format: int32
|
|
type: integer
|
|
currentRevision:
|
|
description: currentRevision, if not empty, indicates the version of the StatefulSet used to generate Pods in the sequence [0,currentReplicas).
|
|
type: string
|
|
labelSelector:
|
|
description: LabelSelector is label selectors for query over pods that should match the replica count used by HPA.
|
|
type: string
|
|
observedGeneration:
|
|
description: observedGeneration is the most recent generation observed for this StatefulSet. It corresponds to the StatefulSet's generation, which is updated on mutation by the API Server.
|
|
format: int64
|
|
type: integer
|
|
readyReplicas:
|
|
description: readyReplicas is the number of Pods created by the StatefulSet controller that have a Ready Condition.
|
|
format: int32
|
|
type: integer
|
|
replicas:
|
|
description: replicas is the number of Pods created by the StatefulSet controller.
|
|
format: int32
|
|
type: integer
|
|
updateRevision:
|
|
description: updateRevision, if not empty, indicates the version of the StatefulSet used to generate Pods in the sequence [replicas-updatedReplicas,replicas)
|
|
type: string
|
|
updatedReplicas:
|
|
description: updatedReplicas is the number of Pods created by the StatefulSet controller from the StatefulSet version indicated by updateRevision.
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- availableReplicas
|
|
- currentReplicas
|
|
- readyReplicas
|
|
- replicas
|
|
- updatedReplicas
|
|
type: object
|
|
type: object
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
scale:
|
|
labelSelectorPath: .status.labelSelector
|
|
specReplicasPath: .spec.replicas
|
|
statusReplicasPath: .status.replicas
|
|
status: {}
|
|
status:
|
|
acceptedNames:
|
|
kind: ""
|
|
plural: ""
|
|
conditions: []
|
|
storedVersions: []
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/apps.kruise.io_uniteddeployments.yaml
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
annotations:
|
|
controller-gen.kubebuilder.io/version: v0.7.0
|
|
creationTimestamp: null
|
|
name: uniteddeployments.apps.kruise.io
|
|
spec:
|
|
group: apps.kruise.io
|
|
names:
|
|
kind: UnitedDeployment
|
|
listKind: UnitedDeploymentList
|
|
plural: uniteddeployments
|
|
shortNames:
|
|
- ud
|
|
singular: uniteddeployment
|
|
scope: Namespaced
|
|
versions:
|
|
- additionalPrinterColumns:
|
|
- description: The desired number of pods.
|
|
jsonPath: .spec.replicas
|
|
name: DESIRED
|
|
type: integer
|
|
- description: The number of currently all pods.
|
|
jsonPath: .status.replicas
|
|
name: CURRENT
|
|
type: integer
|
|
- description: The number of pods updated.
|
|
jsonPath: .status.updatedReplicas
|
|
name: UPDATED
|
|
type: integer
|
|
- description: The number of pods ready.
|
|
jsonPath: .status.readyReplicas
|
|
name: READY
|
|
type: integer
|
|
- description: CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC.
|
|
jsonPath: .metadata.creationTimestamp
|
|
name: AGE
|
|
type: date
|
|
name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
description: UnitedDeployment is the Schema for the uniteddeployments API
|
|
properties:
|
|
apiVersion:
|
|
description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
|
type: string
|
|
kind:
|
|
description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
description: UnitedDeploymentSpec defines the desired state of UnitedDeployment.
|
|
properties:
|
|
replicas:
|
|
description: Replicas is the total desired replicas of all the subsets. If unspecified, defaults to 1.
|
|
format: int32
|
|
type: integer
|
|
revisionHistoryLimit:
|
|
description: Indicates the number of histories to be conserved. If unspecified, defaults to 10.
|
|
format: int32
|
|
type: integer
|
|
selector:
|
|
description: Selector is a label query over pods that should match the replica count. It must match the pod template's labels.
|
|
properties:
|
|
matchExpressions:
|
|
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
|
|
items:
|
|
description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: key is the label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
|
|
type: string
|
|
values:
|
|
description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
|
|
type: object
|
|
type: object
|
|
template:
|
|
description: Template describes the subset that will be created.
|
|
properties:
|
|
advancedStatefulSetTemplate:
|
|
description: AdvancedStatefulSet template
|
|
properties:
|
|
metadata:
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
spec:
|
|
description: StatefulSetSpec defines the desired state of StatefulSet
|
|
properties:
|
|
podManagementPolicy:
|
|
description: podManagementPolicy controls how pods are created during initial scale up, when replacing pods on nodes, or when scaling down. The default policy is `OrderedReady`, where pods are created in increasing order (pod-0, then pod-1, etc) and the controller will wait until each pod is ready before continuing. When scaling down, the pods are removed in the opposite order. The alternative policy is `Parallel` which will create pods in parallel to match the desired scale without waiting, and on scale down will delete all pods at once.
|
|
type: string
|
|
replicas:
|
|
description: 'replicas is the desired number of replicas of the given Template. These are replicas in the sense that they are instantiations of the same Template, but individual replicas also have a consistent identity. If unspecified, defaults to 1. TODO: Consider a rename of this field.'
|
|
format: int32
|
|
type: integer
|
|
revisionHistoryLimit:
|
|
description: revisionHistoryLimit is the maximum number of revisions that will be maintained in the StatefulSet's revision history. The revision history consists of all revisions not represented by a currently applied StatefulSetSpec version. The default value is 10.
|
|
format: int32
|
|
type: integer
|
|
selector:
|
|
description: 'selector is a label query over pods that should match the replica count. It must match the pod template''s labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors'
|
|
properties:
|
|
matchExpressions:
|
|
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
|
|
items:
|
|
description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: key is the label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
|
|
type: string
|
|
values:
|
|
description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
|
|
type: object
|
|
type: object
|
|
serviceName:
|
|
description: 'serviceName is the name of the service that governs this StatefulSet. This service must exist before the StatefulSet, and is responsible for the network identity of the set. Pods get DNS/hostnames that follow the pattern: pod-specific-string.serviceName.default.svc.cluster.local where "pod-specific-string" is managed by the StatefulSet controller.'
|
|
type: string
|
|
template:
|
|
description: template is the object that describes the pod that will be created if insufficient replicas are detected. Each pod stamped out by the StatefulSet will fulfill this Template, but have a unique identity from the rest of the StatefulSet.
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
updateStrategy:
|
|
description: updateStrategy indicates the StatefulSetUpdateStrategy that will be employed to update Pods in the StatefulSet when a revision is made to Template.
|
|
properties:
|
|
rollingUpdate:
|
|
description: RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType.
|
|
properties:
|
|
inPlaceUpdateStrategy:
|
|
description: InPlaceUpdateStrategy contains strategies for in-place update.
|
|
properties:
|
|
gracePeriodSeconds:
|
|
description: GracePeriodSeconds is the timespan between set Pod status to not-ready and update images in Pod spec when in-place update a Pod.
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
maxUnavailable:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: 'The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. Also, maxUnavailable can just be allowed to work with Parallel podManagementPolicy. Defaults to 1.'
|
|
x-kubernetes-int-or-string: true
|
|
minReadySeconds:
|
|
description: MinReadySeconds indicates how long will the pod be considered ready after it's updated. MinReadySeconds works with both OrderedReady and Parallel podManagementPolicy. It affects the pod scale up speed when the podManagementPolicy is set to be OrderedReady. Combined with MaxUnavailable, it affects the pod update speed regardless of podManagementPolicy. Default value is 0, max is 300.
|
|
format: int32
|
|
type: integer
|
|
partition:
|
|
description: 'Partition indicates the ordinal at which the StatefulSet should be partitioned by default. But if unorderedUpdate has been set: - Partition indicates the number of pods with non-updated revisions when rolling update. - It means controller will update $(replicas - partition) number of pod. Default value is 0.'
|
|
format: int32
|
|
type: integer
|
|
paused:
|
|
description: Paused indicates that the StatefulSet is paused. Default value is false
|
|
type: boolean
|
|
podUpdatePolicy:
|
|
description: PodUpdatePolicy indicates how pods should be updated Default value is "ReCreate"
|
|
type: string
|
|
unorderedUpdate:
|
|
description: UnorderedUpdate contains strategies for non-ordered update. If it is not nil, pods will be updated with non-ordered sequence. Noted that UnorderedUpdate can only be allowed to work with Parallel podManagementPolicy
|
|
properties:
|
|
priorityStrategy:
|
|
description: Priorities are the rules for calculating the priority of updating pods. Each pod to be updated, will pass through these terms and get a sum of weights.
|
|
properties:
|
|
orderPriority:
|
|
description: 'Order priority terms, pods will be sorted by the value of orderedKey. For example: ``` orderPriority: - orderedKey: key1 - orderedKey: key2 ``` First, all pods which have key1 in labels will be sorted by the value of key1. Then, the left pods which have no key1 but have key2 in labels will be sorted by the value of key2 and put behind those pods have key1.'
|
|
items:
|
|
description: UpdatePriorityOrder defines order priority.
|
|
properties:
|
|
orderedKey:
|
|
description: Calculate priority by value of this key. Values of this key, will be sorted by GetInt(val). GetInt method will find the last int in value, such as getting 5 in value '5', getting 10 in value 'sts-10'.
|
|
type: string
|
|
required:
|
|
- orderedKey
|
|
type: object
|
|
type: array
|
|
weightPriority:
|
|
description: Weight priority terms, pods will be sorted by the sum of all terms weight.
|
|
items:
|
|
description: UpdatePriorityWeightTerm defines weight priority.
|
|
properties:
|
|
matchSelector:
|
|
description: MatchSelector is used to select by pod's labels.
|
|
properties:
|
|
matchExpressions:
|
|
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
|
|
items:
|
|
description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: key is the label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
|
|
type: string
|
|
values:
|
|
description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
|
|
type: object
|
|
type: object
|
|
weight:
|
|
description: Weight associated with matching the corresponding matchExpressions, in the range 1-100.
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- matchSelector
|
|
- weight
|
|
type: object
|
|
type: array
|
|
type: object
|
|
type: object
|
|
type: object
|
|
type:
|
|
description: Type indicates the type of the StatefulSetUpdateStrategy. Default is RollingUpdate.
|
|
type: string
|
|
type: object
|
|
volumeClaimTemplates:
|
|
description: 'volumeClaimTemplates is a list of claims that pods are allowed to reference. The StatefulSet controller is responsible for mapping network identities to claims in a way that maintains the identity of a pod. Every claim in this list must have at least one matching (by name) volumeMount in one container in the template. A claim in this list takes precedence over any volumes in the template, with the same name. TODO: Define the behavior if a claim already exists with the same name.'
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
required:
|
|
- selector
|
|
- template
|
|
type: object
|
|
required:
|
|
- spec
|
|
type: object
|
|
cloneSetTemplate:
|
|
description: CloneSet template
|
|
properties:
|
|
metadata:
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
spec:
|
|
description: CloneSetSpec defines the desired state of CloneSet
|
|
properties:
|
|
lifecycle:
|
|
description: Lifecycle defines the lifecycle hooks for Pods pre-delete, in-place update.
|
|
properties:
|
|
inPlaceUpdate:
|
|
description: InPlaceUpdate is the hook before Pod to update and after Pod has been updated.
|
|
properties:
|
|
finalizersHandler:
|
|
items:
|
|
type: string
|
|
type: array
|
|
labelsHandler:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
preDelete:
|
|
description: PreDelete is the hook before Pod to be deleted.
|
|
properties:
|
|
finalizersHandler:
|
|
items:
|
|
type: string
|
|
type: array
|
|
labelsHandler:
|
|
additionalProperties:
|
|
type: string
|
|
type: object
|
|
type: object
|
|
type: object
|
|
minReadySeconds:
|
|
description: Minimum number of seconds for which a newly created pod should be ready without any of its container crashing, for it to be considered available. Defaults to 0 (pod will be considered available as soon as it is ready)
|
|
format: int32
|
|
type: integer
|
|
replicas:
|
|
description: Replicas is the desired number of replicas of the given Template. These are replicas in the sense that they are instantiations of the same Template. If unspecified, defaults to 1.
|
|
format: int32
|
|
type: integer
|
|
revisionHistoryLimit:
|
|
description: RevisionHistoryLimit is the maximum number of revisions that will be maintained in the CloneSet's revision history. The revision history consists of all revisions not represented by a currently applied CloneSetSpec version. The default value is 10.
|
|
format: int32
|
|
type: integer
|
|
scaleStrategy:
|
|
description: ScaleStrategy indicates the ScaleStrategy that will be employed to create and delete Pods in the CloneSet.
|
|
properties:
|
|
maxUnavailable:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: The maximum number of pods that can be unavailable for scaled pods. This field can control the changes rate of replicas for CloneSet so as to minimize the impact for users' service. The scale will fail if the number of unavailable pods were greater than this MaxUnavailable at scaling up. MaxUnavailable works only when scaling up.
|
|
x-kubernetes-int-or-string: true
|
|
podsToDelete:
|
|
description: PodsToDelete is the names of Pod should be deleted. Note that this list will be truncated for non-existing pod names.
|
|
items:
|
|
type: string
|
|
type: array
|
|
type: object
|
|
selector:
|
|
description: 'Selector is a label query over pods that should match the replica count. It must match the pod template''s labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors'
|
|
properties:
|
|
matchExpressions:
|
|
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
|
|
items:
|
|
description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: key is the label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
|
|
type: string
|
|
values:
|
|
description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
|
|
type: object
|
|
type: object
|
|
template:
|
|
description: Template describes the pods that will be created.
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
updateStrategy:
|
|
description: UpdateStrategy indicates the UpdateStrategy that will be employed to update Pods in the CloneSet when a revision is made to Template.
|
|
properties:
|
|
inPlaceUpdateStrategy:
|
|
description: InPlaceUpdateStrategy contains strategies for in-place update.
|
|
properties:
|
|
gracePeriodSeconds:
|
|
description: GracePeriodSeconds is the timespan between set Pod status to not-ready and update images in Pod spec when in-place update a Pod.
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
maxSurge:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: 'The maximum number of pods that can be scheduled above the desired replicas during update or specified delete. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding up. Defaults to 0.'
|
|
x-kubernetes-int-or-string: true
|
|
maxUnavailable:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: 'The maximum number of pods that can be unavailable during update or scale. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding up by default. When maxSurge > 0, absolute number is calculated from percentage by rounding down. Defaults to 20%.'
|
|
x-kubernetes-int-or-string: true
|
|
partition:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: 'Partition is the desired number of pods in old revisions. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding up by default. It means when partition is set during pods updating, (replicas - partition value) number of pods will be updated. Default value is 0.'
|
|
x-kubernetes-int-or-string: true
|
|
paused:
|
|
description: Paused indicates that the CloneSet is paused. Default value is false
|
|
type: boolean
|
|
priorityStrategy:
|
|
description: Priorities are the rules for calculating the priority of updating pods. Each pod to be updated, will pass through these terms and get a sum of weights.
|
|
properties:
|
|
orderPriority:
|
|
description: 'Order priority terms, pods will be sorted by the value of orderedKey. For example: ``` orderPriority: - orderedKey: key1 - orderedKey: key2 ``` First, all pods which have key1 in labels will be sorted by the value of key1. Then, the left pods which have no key1 but have key2 in labels will be sorted by the value of key2 and put behind those pods have key1.'
|
|
items:
|
|
description: UpdatePriorityOrder defines order priority.
|
|
properties:
|
|
orderedKey:
|
|
description: Calculate priority by value of this key. Values of this key, will be sorted by GetInt(val). GetInt method will find the last int in value, such as getting 5 in value '5', getting 10 in value 'sts-10'.
|
|
type: string
|
|
required:
|
|
- orderedKey
|
|
type: object
|
|
type: array
|
|
weightPriority:
|
|
description: Weight priority terms, pods will be sorted by the sum of all terms weight.
|
|
items:
|
|
description: UpdatePriorityWeightTerm defines weight priority.
|
|
properties:
|
|
matchSelector:
|
|
description: MatchSelector is used to select by pod's labels.
|
|
properties:
|
|
matchExpressions:
|
|
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
|
|
items:
|
|
description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: key is the label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
|
|
type: string
|
|
values:
|
|
description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
|
|
type: object
|
|
type: object
|
|
weight:
|
|
description: Weight associated with matching the corresponding matchExpressions, in the range 1-100.
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- matchSelector
|
|
- weight
|
|
type: object
|
|
type: array
|
|
type: object
|
|
scatterStrategy:
|
|
description: ScatterStrategy defines the scatter rules to make pods been scattered when update. This will avoid pods with the same key-value to be updated in one batch. - Note that pods will be scattered after priority sort. So, although priority strategy and scatter strategy can be applied together, we suggest to use either one of them. - If scatterStrategy is used, we suggest to just use one term. Otherwise, the update order can be hard to understand.
|
|
items:
|
|
properties:
|
|
key:
|
|
type: string
|
|
value:
|
|
type: string
|
|
required:
|
|
- key
|
|
- value
|
|
type: object
|
|
type: array
|
|
type:
|
|
description: Type indicates the type of the CloneSetUpdateStrategy. Default is ReCreate.
|
|
type: string
|
|
type: object
|
|
volumeClaimTemplates:
|
|
description: VolumeClaimTemplates is a list of claims that pods are allowed to reference. Note that PVC will be deleted when its pod has been deleted.
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
required:
|
|
- selector
|
|
- template
|
|
type: object
|
|
required:
|
|
- spec
|
|
type: object
|
|
deploymentTemplate:
|
|
description: Deployment template
|
|
properties:
|
|
metadata:
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
spec:
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
required:
|
|
- spec
|
|
type: object
|
|
statefulSetTemplate:
|
|
description: StatefulSet template
|
|
properties:
|
|
metadata:
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
spec:
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
required:
|
|
- spec
|
|
type: object
|
|
type: object
|
|
topology:
|
|
description: Topology describes the pods distribution detail between each of subsets.
|
|
properties:
|
|
subsets:
|
|
description: Contains the details of each subset. Each element in this array represents one subset which will be provisioned and managed by UnitedDeployment.
|
|
items:
|
|
description: Subset defines the detail of a subset.
|
|
properties:
|
|
name:
|
|
description: Indicates subset name as a DNS_LABEL, which will be used to generate subset workload name prefix in the format '<deployment-name>-<subset-name>-'. Name should be unique between all of the subsets under one UnitedDeployment.
|
|
type: string
|
|
nodeSelectorTerm:
|
|
description: Indicates the node selector to form the subset. Depending on the node selector, pods provisioned could be distributed across multiple groups of nodes. A subset's nodeSelectorTerm is not allowed to be updated.
|
|
properties:
|
|
matchExpressions:
|
|
description: A list of node selector requirements by node's labels.
|
|
items:
|
|
description: A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: The label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
|
|
type: string
|
|
values:
|
|
description: An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchFields:
|
|
description: A list of node selector requirements by node's fields.
|
|
items:
|
|
description: A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: The label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
|
|
type: string
|
|
values:
|
|
description: An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
type: object
|
|
replicas:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: Indicates the number of the pod to be created under this subset. Replicas could also be percentage like '10%', which means 10% of UnitedDeployment replicas of pods will be distributed under this subset. If nil, the number of replicas in this subset is determined by controller. Controller will try to keep all the subsets with nil replicas have average pods.
|
|
x-kubernetes-int-or-string: true
|
|
tolerations:
|
|
description: Indicates the tolerations the pods under this subset have. A subset's tolerations is not allowed to be updated.
|
|
items:
|
|
description: The pod this Toleration is attached to tolerates any taint that matches the triple <key,value,effect> using the matching operator <operator>.
|
|
properties:
|
|
effect:
|
|
description: Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
|
|
type: string
|
|
key:
|
|
description: Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys.
|
|
type: string
|
|
operator:
|
|
description: Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category.
|
|
type: string
|
|
tolerationSeconds:
|
|
description: TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system.
|
|
format: int64
|
|
type: integer
|
|
value:
|
|
description: Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string.
|
|
type: string
|
|
type: object
|
|
type: array
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
type: object
|
|
updateStrategy:
|
|
description: UpdateStrategy indicates the strategy the UnitedDeployment use to preform the update, when template is changed.
|
|
properties:
|
|
manualUpdate:
|
|
description: Includes all of the parameters a Manual update strategy needs.
|
|
properties:
|
|
partitions:
|
|
additionalProperties:
|
|
format: int32
|
|
type: integer
|
|
description: Indicates number of subset partition.
|
|
type: object
|
|
type: object
|
|
type:
|
|
description: Type of UnitedDeployment update strategy. Default is Manual.
|
|
type: string
|
|
type: object
|
|
required:
|
|
- selector
|
|
type: object
|
|
status:
|
|
description: UnitedDeploymentStatus defines the observed state of UnitedDeployment.
|
|
properties:
|
|
collisionCount:
|
|
description: Count of hash collisions for the UnitedDeployment. The UnitedDeployment controller uses this field as a collision avoidance mechanism when it needs to create the name for the newest ControllerRevision.
|
|
format: int32
|
|
type: integer
|
|
conditions:
|
|
description: Represents the latest available observations of a UnitedDeployment's current state.
|
|
items:
|
|
description: UnitedDeploymentCondition describes current state of a UnitedDeployment.
|
|
properties:
|
|
lastTransitionTime:
|
|
description: Last time the condition transitioned from one status to another.
|
|
format: date-time
|
|
type: string
|
|
message:
|
|
description: A human readable message indicating details about the transition.
|
|
type: string
|
|
reason:
|
|
description: The reason for the condition's last transition.
|
|
type: string
|
|
status:
|
|
description: Status of the condition, one of True, False, Unknown.
|
|
type: string
|
|
type:
|
|
description: Type of in place set condition.
|
|
type: string
|
|
type: object
|
|
type: array
|
|
currentRevision:
|
|
description: CurrentRevision, if not empty, indicates the current version of the UnitedDeployment.
|
|
type: string
|
|
observedGeneration:
|
|
description: ObservedGeneration is the most recent generation observed for this UnitedDeployment. It corresponds to the UnitedDeployment's generation, which is updated on mutation by the API Server.
|
|
format: int64
|
|
type: integer
|
|
readyReplicas:
|
|
description: The number of ready replicas.
|
|
format: int32
|
|
type: integer
|
|
replicas:
|
|
description: Replicas is the most recently observed number of replicas.
|
|
format: int32
|
|
type: integer
|
|
subsetReplicas:
|
|
additionalProperties:
|
|
format: int32
|
|
type: integer
|
|
description: Records the topology detail information of the replicas of each subset.
|
|
type: object
|
|
updateStatus:
|
|
description: Records the information of update progress.
|
|
properties:
|
|
currentPartitions:
|
|
additionalProperties:
|
|
format: int32
|
|
type: integer
|
|
description: Records the current partition.
|
|
type: object
|
|
updatedRevision:
|
|
description: Records the latest revision.
|
|
type: string
|
|
type: object
|
|
updatedReadyReplicas:
|
|
description: The number of ready current revision replicas for this UnitedDeployment.
|
|
format: int32
|
|
type: integer
|
|
updatedReplicas:
|
|
description: The number of pods in current version.
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- currentRevision
|
|
- replicas
|
|
- updatedReplicas
|
|
type: object
|
|
type: object
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
scale:
|
|
labelSelectorPath: .status.selector
|
|
specReplicasPath: .spec.replicas
|
|
statusReplicasPath: .status.replicas
|
|
status: {}
|
|
status:
|
|
acceptedNames:
|
|
kind: ""
|
|
plural: ""
|
|
conditions: []
|
|
storedVersions: []
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/apps.kruise.io_workloadspreads.yaml
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
annotations:
|
|
controller-gen.kubebuilder.io/version: v0.7.0
|
|
creationTimestamp: null
|
|
name: workloadspreads.apps.kruise.io
|
|
spec:
|
|
group: apps.kruise.io
|
|
names:
|
|
kind: WorkloadSpread
|
|
listKind: WorkloadSpreadList
|
|
plural: workloadspreads
|
|
shortNames:
|
|
- ws
|
|
singular: workloadspread
|
|
scope: Namespaced
|
|
versions:
|
|
- additionalPrinterColumns:
|
|
- jsonPath: .spec.targetRef.name
|
|
name: WorkloadName
|
|
type: string
|
|
- jsonPath: .spec.targetRef.kind
|
|
name: WorkloadKind
|
|
type: string
|
|
- description: Whether use the adaptive reschedule strategy
|
|
jsonPath: .spec.scheduleStrategy.type[?(@ == "Adaptive")]
|
|
name: Adaptive
|
|
type: boolean
|
|
- jsonPath: .metadata.creationTimestamp
|
|
name: Age
|
|
type: date
|
|
name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
description: WorkloadSpread is the Schema for the WorkloadSpread API
|
|
properties:
|
|
apiVersion:
|
|
description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
|
type: string
|
|
kind:
|
|
description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
description: WorkloadSpreadSpec defines the desired state of WorkloadSpread.
|
|
properties:
|
|
scheduleStrategy:
|
|
description: ScheduleStrategy indicates the strategy the WorkloadSpread used to preform the schedule between each of subsets.
|
|
properties:
|
|
adaptive:
|
|
description: Adaptive is used to communicate parameters when Type is AdaptiveWorkloadSpreadScheduleStrategyType.
|
|
properties:
|
|
disableSimulationSchedule:
|
|
description: DisableSimulationSchedule indicates whether to disable the feature of simulation schedule. Default is false. Webhook can take a simple general predicates to check whether Pod can be scheduled into this subset, but it just considers the Node resource and cannot replace scheduler to do richer predicates practically.
|
|
type: boolean
|
|
rescheduleCriticalSeconds:
|
|
description: RescheduleCriticalSeconds indicates how long controller will reschedule a schedule failed Pod to the subset that has redundant capacity after the subset where the Pod lives. If a Pod was scheduled failed and still in a unschedulabe status over RescheduleCriticalSeconds duration, the controller will reschedule it to a suitable subset.
|
|
format: int32
|
|
type: integer
|
|
type: object
|
|
type:
|
|
description: Type indicates the type of the WorkloadSpreadScheduleStrategy. Default is Fixed
|
|
enum:
|
|
- Adaptive
|
|
- Fixed
|
|
- ""
|
|
type: string
|
|
type: object
|
|
subsets:
|
|
description: Subsets describes the pods distribution details between each of subsets.
|
|
items:
|
|
description: WorkloadSpreadSubset defines the details of a subset.
|
|
properties:
|
|
maxReplicas:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: MaxReplicas indicates the desired max replicas of this subset.
|
|
x-kubernetes-int-or-string: true
|
|
name:
|
|
description: Name should be unique between all of the subsets under one WorkloadSpread.
|
|
type: string
|
|
patch:
|
|
description: Patch indicates patching podTemplate to the Pod.
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
preferredNodeSelectorTerms:
|
|
description: Indicates the node preferred selector to form the subset.
|
|
items:
|
|
description: An empty preferred scheduling term matches all objects with implicit weight 0 (i.e. it's a no-op). A null preferred scheduling term matches no objects (i.e. is also a no-op).
|
|
properties:
|
|
preference:
|
|
description: A node selector term, associated with the corresponding weight.
|
|
properties:
|
|
matchExpressions:
|
|
description: A list of node selector requirements by node's labels.
|
|
items:
|
|
description: A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: The label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
|
|
type: string
|
|
values:
|
|
description: An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchFields:
|
|
description: A list of node selector requirements by node's fields.
|
|
items:
|
|
description: A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: The label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
|
|
type: string
|
|
values:
|
|
description: An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
type: object
|
|
weight:
|
|
description: Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- preference
|
|
- weight
|
|
type: object
|
|
type: array
|
|
requiredNodeSelectorTerm:
|
|
description: Indicates the node required selector to form the subset.
|
|
properties:
|
|
matchExpressions:
|
|
description: A list of node selector requirements by node's labels.
|
|
items:
|
|
description: A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: The label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
|
|
type: string
|
|
values:
|
|
description: An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchFields:
|
|
description: A list of node selector requirements by node's fields.
|
|
items:
|
|
description: A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: The label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
|
|
type: string
|
|
values:
|
|
description: An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
type: object
|
|
tolerations:
|
|
description: Indicates the tolerations the pods under this subset have.
|
|
items:
|
|
description: The pod this Toleration is attached to tolerates any taint that matches the triple <key,value,effect> using the matching operator <operator>.
|
|
properties:
|
|
effect:
|
|
description: Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
|
|
type: string
|
|
key:
|
|
description: Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys.
|
|
type: string
|
|
operator:
|
|
description: Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category.
|
|
type: string
|
|
tolerationSeconds:
|
|
description: TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system.
|
|
format: int64
|
|
type: integer
|
|
value:
|
|
description: Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string.
|
|
type: string
|
|
type: object
|
|
type: array
|
|
required:
|
|
- name
|
|
type: object
|
|
type: array
|
|
targetRef:
|
|
description: TargetReference is the target workload that WorkloadSpread want to control.
|
|
properties:
|
|
apiVersion:
|
|
description: API version of the referent.
|
|
type: string
|
|
kind:
|
|
description: Kind of the referent.
|
|
type: string
|
|
name:
|
|
description: Name of the referent.
|
|
type: string
|
|
required:
|
|
- apiVersion
|
|
- kind
|
|
- name
|
|
type: object
|
|
required:
|
|
- subsets
|
|
- targetRef
|
|
type: object
|
|
status:
|
|
description: WorkloadSpreadStatus defines the observed state of WorkloadSpread.
|
|
properties:
|
|
observedGeneration:
|
|
description: ObservedGeneration is the most recent generation observed for this WorkloadSpread. It corresponds to the WorkloadSpread's generation, which is updated on mutation by the API Server.
|
|
format: int64
|
|
type: integer
|
|
subsetStatuses:
|
|
description: Contains the status of each subset. Each element in this array represents one subset
|
|
items:
|
|
description: WorkloadSpreadSubsetStatus defines the observed state of subset
|
|
properties:
|
|
conditions:
|
|
description: Conditions is an array of current observed subset conditions.
|
|
items:
|
|
properties:
|
|
lastTransitionTime:
|
|
description: Last time the condition transitioned from one status to another.
|
|
format: date-time
|
|
type: string
|
|
message:
|
|
description: A human readable message indicating details about the transition.
|
|
type: string
|
|
reason:
|
|
description: The reason for the condition's last transition.
|
|
type: string
|
|
status:
|
|
description: Status of the condition, one of True, False, Unknown.
|
|
type: string
|
|
type:
|
|
description: Type of in place set condition.
|
|
type: string
|
|
required:
|
|
- status
|
|
- type
|
|
type: object
|
|
type: array
|
|
creatingPods:
|
|
additionalProperties:
|
|
format: date-time
|
|
type: string
|
|
description: CreatingPods contains information about pods whose creation was processed by the webhook handler but not yet been observed by the WorkloadSpread controller. A pod will be in this map from the time when the webhook handler processed the creation request to the time when the pod is seen by controller. The key in the map is the name of the pod and the value is the time when the webhook handler process the creation request. If the real creation didn't happen and a pod is still in this map, it will be removed from the list automatically by WorkloadSpread controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod creations.
|
|
type: object
|
|
deletingPods:
|
|
additionalProperties:
|
|
format: date-time
|
|
type: string
|
|
description: DeletingPods is similar with CreatingPods and it contains information about pod deletion.
|
|
type: object
|
|
missingReplicas:
|
|
description: MissingReplicas is the number of active replicas belong to this subset not be found. MissingReplicas > 0 indicates the subset is still missing MissingReplicas pods to create MissingReplicas = 0 indicates the subset already has enough pods, there is no need to create MissingReplicas = -1 indicates the subset's MaxReplicas not set, then there is no limit for pods number
|
|
format: int32
|
|
type: integer
|
|
name:
|
|
description: Name should be unique between all of the subsets under one WorkloadSpread.
|
|
type: string
|
|
replicas:
|
|
description: Replicas is the most recently observed number of active replicas for subset.
|
|
format: int32
|
|
type: integer
|
|
required:
|
|
- missingReplicas
|
|
- name
|
|
- replicas
|
|
type: object
|
|
type: array
|
|
type: object
|
|
type: object
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
status:
|
|
acceptedNames:
|
|
kind: ""
|
|
plural: ""
|
|
conditions: []
|
|
storedVersions: []
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/policy.kruise.io_podunavailablebudgets.yaml
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
annotations:
|
|
controller-gen.kubebuilder.io/version: v0.7.0
|
|
creationTimestamp: null
|
|
name: podunavailablebudgets.policy.kruise.io
|
|
spec:
|
|
group: policy.kruise.io
|
|
names:
|
|
kind: PodUnavailableBudget
|
|
listKind: PodUnavailableBudgetList
|
|
plural: podunavailablebudgets
|
|
shortNames:
|
|
- pub
|
|
singular: podunavailablebudget
|
|
scope: Namespaced
|
|
versions:
|
|
- additionalPrinterColumns:
|
|
- description: UnavailableAllowed number of pod unavailable that are currently allowed
|
|
jsonPath: .status.unavailableAllowed
|
|
name: Allowed
|
|
type: integer
|
|
- description: CurrentAvailable current number of available pods
|
|
jsonPath: .status.currentAvailable
|
|
name: Current
|
|
type: integer
|
|
- description: DesiredAvailable minimum desired number of available pods
|
|
jsonPath: .status.desiredAvailable
|
|
name: Desired
|
|
type: integer
|
|
- description: TotalReplicas total number of pods counted by this budget
|
|
jsonPath: .status.totalReplicas
|
|
name: Total
|
|
type: integer
|
|
name: v1alpha1
|
|
schema:
|
|
openAPIV3Schema:
|
|
description: PodUnavailableBudget is the Schema for the podunavailablebudgets API
|
|
properties:
|
|
apiVersion:
|
|
description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
|
type: string
|
|
kind:
|
|
description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
description: PodUnavailableBudgetSpec defines the desired state of PodUnavailableBudget
|
|
properties:
|
|
maxUnavailable:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: Delete pod, evict pod or update pod specification is allowed if at most "maxUnavailable" pods selected by "selector" or "targetRef" are unavailable after the above operation for pod. MaxUnavailable and MinAvailable are mutually exclusive, MaxUnavailable is priority to take effect
|
|
x-kubernetes-int-or-string: true
|
|
minAvailable:
|
|
anyOf:
|
|
- type: integer
|
|
- type: string
|
|
description: Delete pod, evict pod or update pod specification is allowed if at least "minAvailable" pods selected by "selector" or "targetRef" will still be available after the above operation for pod.
|
|
x-kubernetes-int-or-string: true
|
|
selector:
|
|
description: Selector label query over pods managed by the budget
|
|
properties:
|
|
matchExpressions:
|
|
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
|
|
items:
|
|
description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
|
|
properties:
|
|
key:
|
|
description: key is the label key that the selector applies to.
|
|
type: string
|
|
operator:
|
|
description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
|
|
type: string
|
|
values:
|
|
description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- key
|
|
- operator
|
|
type: object
|
|
type: array
|
|
matchLabels:
|
|
additionalProperties:
|
|
type: string
|
|
description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
|
|
type: object
|
|
type: object
|
|
targetRef:
|
|
description: TargetReference contains enough information to let you identify an workload for PodUnavailableBudget Selector and TargetReference are mutually exclusive, TargetReference is priority to take effect
|
|
properties:
|
|
apiVersion:
|
|
description: API version of the referent.
|
|
type: string
|
|
kind:
|
|
description: Kind of the referent.
|
|
type: string
|
|
name:
|
|
description: Name of the referent.
|
|
type: string
|
|
type: object
|
|
type: object
|
|
status:
|
|
description: PodUnavailableBudgetStatus defines the observed state of PodUnavailableBudget
|
|
properties:
|
|
currentAvailable:
|
|
description: CurrentAvailable current number of available pods
|
|
format: int32
|
|
type: integer
|
|
desiredAvailable:
|
|
description: DesiredAvailable minimum desired number of available pods
|
|
format: int32
|
|
type: integer
|
|
disruptedPods:
|
|
additionalProperties:
|
|
format: date-time
|
|
type: string
|
|
description: DisruptedPods contains information about pods whose eviction or deletion was processed by the API handler but has not yet been observed by the PodUnavailableBudget.
|
|
type: object
|
|
observedGeneration:
|
|
description: Most recent generation observed when updating this PUB status. UnavailableAllowed and other status information is valid only if observedGeneration equals to PUB's object generation.
|
|
format: int64
|
|
type: integer
|
|
totalReplicas:
|
|
description: TotalReplicas total number of pods counted by this unavailable budget
|
|
format: int32
|
|
type: integer
|
|
unavailableAllowed:
|
|
description: UnavailableAllowed number of pod unavailable that are currently allowed
|
|
format: int32
|
|
type: integer
|
|
unavailablePods:
|
|
additionalProperties:
|
|
format: date-time
|
|
type: string
|
|
description: UnavailablePods contains information about pods whose specification changed(inplace-update pod), once pod is available(consistent and ready) again, it will be removed from the list.
|
|
type: object
|
|
required:
|
|
- currentAvailable
|
|
- desiredAvailable
|
|
- totalReplicas
|
|
- unavailableAllowed
|
|
type: object
|
|
type: object
|
|
served: true
|
|
storage: true
|
|
subresources:
|
|
status: {}
|
|
status:
|
|
acceptedNames:
|
|
kind: ""
|
|
plural: ""
|
|
conditions: []
|
|
storedVersions: []
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/rbac_role.yaml
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
creationTimestamp: null
|
|
name: kruise-manager-role
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- namespaces
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- secrets
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- '*'
|
|
resources:
|
|
- '*'
|
|
verbs:
|
|
- list
|
|
- apiGroups:
|
|
- admissionregistration.k8s.io
|
|
resources:
|
|
- mutatingwebhookconfigurations
|
|
verbs:
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- admissionregistration.k8s.io
|
|
resources:
|
|
- validatingwebhookconfigurations
|
|
verbs:
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- apiextensions.k8s.io
|
|
resources:
|
|
- customresourcedefinitions
|
|
verbs:
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- apps
|
|
resources:
|
|
- controllerrevisions
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- apps
|
|
resources:
|
|
- deployments
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- apps
|
|
resources:
|
|
- deployments/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- apps
|
|
resources:
|
|
- replicasets
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- apps
|
|
resources:
|
|
- replicasets/status
|
|
verbs:
|
|
- get
|
|
- apiGroups:
|
|
- apps
|
|
resources:
|
|
- statefulsets
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- apps
|
|
resources:
|
|
- statefulsets/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- advancedcronjobs
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- advancedcronjobs/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- broadcastjobs
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- broadcastjobs/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- clonesets
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- clonesets/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- containerrecreaterequests
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- containerrecreaterequests/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- daemonsets
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- daemonsets/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- ephemeraljobs
|
|
verbs:
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- ephemeraljobs/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- imagepulljobs
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- imagepulljobs/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- nodeimages
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- nodeimages/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- resourcedistributions
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- resourcedistributions/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- sidecarsets
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- sidecarsets/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- statefulsets
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- statefulsets/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- uniteddeployments
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- uniteddeployments/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- workloadspreads
|
|
verbs:
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- workloadspreads/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- batch
|
|
resources:
|
|
- jobs
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- batch
|
|
resources:
|
|
- jobs/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- events
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- nodes
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- persistentvolumeclaims
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods/ephemeralcontainers
|
|
verbs:
|
|
- get
|
|
- update
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- secrets
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- policy.kruise.io
|
|
resources:
|
|
- podunavailablebudgets
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- policy.kruise.io
|
|
resources:
|
|
- podunavailablebudgets/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/rbac_role.yaml
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
creationTimestamp: null
|
|
name: kruise-daemon-role
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- nodeimages
|
|
verbs:
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- nodeimages/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- events
|
|
verbs:
|
|
- create
|
|
- update
|
|
- patch
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- containerrecreaterequests
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
resources:
|
|
- containerrecreaterequests/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods
|
|
verbs:
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- secrets
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/openebs/templates/clusterrole.yaml
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: sreworks-openebs
|
|
labels:
|
|
app: openebs
|
|
chart: openebs-3.1.0
|
|
release: sreworks
|
|
heritage: Helm
|
|
rules:
|
|
- apiGroups: ["*"]
|
|
resources: ["nodes", "nodes/proxy"]
|
|
verbs: ["*"]
|
|
- apiGroups: ["*"]
|
|
resources: ["namespaces", "services", "pods", "pods/exec", "deployments", "deployments/finalizers", "replicationcontrollers", "replicasets", "events", "endpoints", "configmaps", "secrets", "jobs", "cronjobs" ]
|
|
verbs: ["*"]
|
|
- apiGroups: ["*"]
|
|
resources: ["statefulsets", "daemonsets"]
|
|
verbs: ["*"]
|
|
- apiGroups: ["*"]
|
|
resources: ["resourcequotas", "limitranges"]
|
|
verbs: ["list", "watch"]
|
|
- apiGroups: ["*"]
|
|
resources: ["ingresses", "horizontalpodautoscalers", "verticalpodautoscalers", "poddisruptionbudgets", "certificatesigningrequests"]
|
|
verbs: ["list", "watch"]
|
|
- apiGroups: ["*"]
|
|
resources: ["storageclasses", "persistentvolumeclaims", "persistentvolumes"]
|
|
verbs: ["*"]
|
|
- apiGroups: ["volumesnapshot.external-storage.k8s.io"]
|
|
resources: ["volumesnapshots", "volumesnapshotdatas"]
|
|
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
|
|
- apiGroups: ["apiextensions.k8s.io"]
|
|
resources: ["customresourcedefinitions"]
|
|
verbs: [ "get", "list", "create", "update", "delete", "patch"]
|
|
- apiGroups: ["openebs.io"]
|
|
resources: [ "*"]
|
|
verbs: ["*" ]
|
|
- apiGroups: ["cstor.openebs.io"]
|
|
resources: [ "*"]
|
|
verbs: ["*" ]
|
|
- apiGroups: ["coordination.k8s.io"]
|
|
resources: ["leases"]
|
|
verbs: ["get", "watch", "list", "delete", "update", "create"]
|
|
- apiGroups: ["admissionregistration.k8s.io"]
|
|
resources: ["validatingwebhookconfigurations", "mutatingwebhookconfigurations"]
|
|
verbs: ["get", "create", "list", "delete", "update", "patch"]
|
|
- nonResourceURLs: ["/metrics"]
|
|
verbs: ["get"]
|
|
---
|
|
# Source: sreworks/charts/appmanager/templates/rbac-admin.yaml
|
|
kind: ClusterRoleBinding
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
metadata:
|
|
name: appmanager-cluster-role
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: default
|
|
namespace: sreworks
|
|
roleRef:
|
|
kind: ClusterRole
|
|
name: cluster-admin
|
|
apiGroup: rbac.authorization.k8s.io
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/rbac_role.yaml
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
name: kruise-manager-rolebinding
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: kruise-manager-role
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: kruise-manager
|
|
namespace: kruise-system
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/rbac_role.yaml
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
name: kruise-daemon-rolebinding
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: kruise-daemon-role
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: kruise-daemon
|
|
namespace: kruise-system
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/openebs/templates/clusterrolebinding.yaml
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
name: sreworks-openebs
|
|
labels:
|
|
app: openebs
|
|
chart: openebs-3.1.0
|
|
release: sreworks
|
|
heritage: Helm
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: sreworks-openebs
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: sreworks-openebs
|
|
namespace: sreworks
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/rbac_role.yaml
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
name: kruise-leader-election-role
|
|
namespace: kruise-system
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- create
|
|
- update
|
|
- patch
|
|
- delete
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps/status
|
|
verbs:
|
|
- get
|
|
- update
|
|
- patch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- events
|
|
verbs:
|
|
- create
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/rbac_role.yaml
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
name: kruise-leader-election-rolebinding
|
|
namespace: kruise-system
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: kruise-leader-election-role
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: kruise-manager
|
|
namespace: kruise-system
|
|
---
|
|
# Source: sreworks/charts/appmanager/templates/operator-service.yaml
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
labels:
|
|
control-plane: controller-manager
|
|
name: appmanager-operator-controller-manager-metrics-service
|
|
spec:
|
|
ports:
|
|
- name: https
|
|
port: 8443
|
|
targetPort: https
|
|
selector:
|
|
control-plane: controller-manager
|
|
---
|
|
# Source: sreworks/charts/appmanager/templates/server-service.yaml
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: sreworks-appmanager
|
|
spec:
|
|
type: ClusterIP
|
|
selector:
|
|
name: sreworks-appmanager-server
|
|
ports:
|
|
- port: 80
|
|
targetPort: 7001
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kafka/templates/svc-headless.yaml
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: sreworks-kafka-headless
|
|
labels:
|
|
app.kubernetes.io/name: kafka
|
|
helm.sh/chart: kafka-14.0.3
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
app.kubernetes.io/component: kafka
|
|
spec:
|
|
type: ClusterIP
|
|
clusterIP: None
|
|
ports:
|
|
- name: tcp-client
|
|
port: 9092
|
|
protocol: TCP
|
|
targetPort: kafka-client
|
|
- name: tcp-internal
|
|
port: 9093
|
|
protocol: TCP
|
|
targetPort: kafka-internal
|
|
selector:
|
|
app.kubernetes.io/name: kafka
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/component: kafka
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kafka/templates/svc.yaml
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: sreworks-kafka
|
|
labels:
|
|
app.kubernetes.io/name: kafka
|
|
helm.sh/chart: kafka-14.0.3
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
app.kubernetes.io/component: kafka
|
|
spec:
|
|
type: ClusterIP
|
|
ports:
|
|
- name: tcp-client
|
|
port: 9092
|
|
protocol: TCP
|
|
targetPort: kafka-client
|
|
nodePort: null
|
|
selector:
|
|
app.kubernetes.io/name: kafka
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/component: kafka
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/manager.yaml
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
spec:
|
|
ports:
|
|
- port: 443
|
|
targetPort: 9876
|
|
selector:
|
|
control-plane: controller-manager
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/minio/templates/service.yaml
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: sreworks-minio
|
|
namespace: "sreworks"
|
|
labels:
|
|
app.kubernetes.io/name: minio
|
|
helm.sh/chart: minio-4.1.6
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
spec:
|
|
type: ClusterIP
|
|
ports:
|
|
- name: minio
|
|
port: 9000
|
|
targetPort: minio
|
|
nodePort: null
|
|
selector:
|
|
app.kubernetes.io/name: minio
|
|
app.kubernetes.io/instance: sreworks
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/mysql/templates/primary/svc-headless.yaml
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: sreworks-mysql-headless
|
|
namespace: sreworks
|
|
labels:
|
|
app.kubernetes.io/name: mysql
|
|
helm.sh/chart: mysql-8.2.3
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
app.kubernetes.io/component: primary
|
|
annotations:
|
|
spec:
|
|
type: ClusterIP
|
|
clusterIP: None
|
|
publishNotReadyAddresses: true
|
|
ports:
|
|
- name: mysql
|
|
port: 3306
|
|
targetPort: mysql
|
|
selector:
|
|
app.kubernetes.io/name: mysql
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/component: primary
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/mysql/templates/primary/svc.yaml
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: sreworks-mysql
|
|
namespace: sreworks
|
|
labels:
|
|
app.kubernetes.io/name: mysql
|
|
helm.sh/chart: mysql-8.2.3
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
app.kubernetes.io/component: primary
|
|
annotations:
|
|
spec:
|
|
type: ClusterIP
|
|
ports:
|
|
- name: mysql
|
|
port: 3306
|
|
protocol: TCP
|
|
targetPort: mysql
|
|
nodePort: null
|
|
selector:
|
|
app.kubernetes.io/name: mysql
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/component: primary
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/redis/templates/headless-svc.yaml
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: sreworks-redis-headless
|
|
namespace: "sreworks"
|
|
labels:
|
|
app: redis
|
|
chart: redis-12.2.3
|
|
release: sreworks
|
|
heritage: Helm
|
|
spec:
|
|
type: ClusterIP
|
|
clusterIP: None
|
|
ports:
|
|
- name: redis
|
|
port: 6379
|
|
targetPort: redis
|
|
selector:
|
|
app: redis
|
|
release: sreworks
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/redis/templates/redis-master-svc.yaml
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: sreworks-redis-master
|
|
namespace: "sreworks"
|
|
labels:
|
|
app: redis
|
|
chart: redis-12.2.3
|
|
release: sreworks
|
|
heritage: Helm
|
|
spec:
|
|
type: ClusterIP
|
|
ports:
|
|
- name: redis
|
|
port: 6379
|
|
targetPort: redis
|
|
selector:
|
|
app: redis
|
|
release: sreworks
|
|
role: master
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/zookeeper/templates/svc-headless.yaml
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: sreworks-zookeeper-headless
|
|
namespace: sreworks
|
|
labels:
|
|
app.kubernetes.io/name: zookeeper
|
|
helm.sh/chart: zookeeper-6.2.0
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
app.kubernetes.io/component: zookeeper
|
|
spec:
|
|
type: ClusterIP
|
|
clusterIP: None
|
|
publishNotReadyAddresses: true
|
|
ports:
|
|
|
|
- name: tcp-client
|
|
port: 2181
|
|
targetPort: client
|
|
|
|
|
|
- name: follower
|
|
port: 2888
|
|
targetPort: follower
|
|
- name: tcp-election
|
|
port: 3888
|
|
targetPort: election
|
|
selector:
|
|
app.kubernetes.io/name: zookeeper
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/component: zookeeper
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/zookeeper/templates/svc.yaml
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: sreworks-zookeeper
|
|
namespace: sreworks
|
|
labels:
|
|
app.kubernetes.io/name: zookeeper
|
|
helm.sh/chart: zookeeper-6.2.0
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
app.kubernetes.io/component: zookeeper
|
|
spec:
|
|
type: ClusterIP
|
|
ports:
|
|
|
|
- name: tcp-client
|
|
port: 2181
|
|
targetPort: client
|
|
|
|
|
|
- name: follower
|
|
port: 2888
|
|
targetPort: follower
|
|
- name: tcp-election
|
|
port: 3888
|
|
targetPort: election
|
|
selector:
|
|
app.kubernetes.io/name: zookeeper
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/component: zookeeper
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/manager.yaml
|
|
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
name: kruise-daemon
|
|
namespace: kruise-system
|
|
labels:
|
|
control-plane: daemon
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
control-plane: daemon
|
|
minReadySeconds: 3
|
|
updateStrategy:
|
|
type: RollingUpdate
|
|
rollingUpdate:
|
|
maxUnavailable: 10%
|
|
template:
|
|
metadata:
|
|
labels:
|
|
control-plane: daemon
|
|
spec:
|
|
containers:
|
|
- command:
|
|
- /kruise-daemon
|
|
args:
|
|
- --logtostderr=true
|
|
- --v=4
|
|
- --addr=:10221
|
|
- --feature-gates=
|
|
image: openkruise/kruise-manager:v1.0.1
|
|
imagePullPolicy: Always
|
|
name: daemon
|
|
env:
|
|
- name: NODE_NAME
|
|
valueFrom:
|
|
fieldRef:
|
|
apiVersion: v1
|
|
fieldPath: spec.nodeName
|
|
livenessProbe:
|
|
failureThreshold: 3
|
|
httpGet:
|
|
path: /healthz
|
|
port: 10221
|
|
scheme: HTTP
|
|
initialDelaySeconds: 60
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
timeoutSeconds: 1
|
|
resources:
|
|
limits:
|
|
cpu: 50m
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: "0"
|
|
memory: "0"
|
|
volumeMounts:
|
|
- mountPath: /hostvarrun
|
|
name: runtime-socket
|
|
readOnly: true
|
|
tolerations:
|
|
- operator: Exists
|
|
hostNetwork: true
|
|
terminationGracePeriodSeconds: 10
|
|
serviceAccountName: kruise-daemon
|
|
volumes:
|
|
- hostPath:
|
|
path: /var/run
|
|
type: ""
|
|
name: runtime-socket
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/openebs/templates/ndm/daemonset-ndm.yaml
|
|
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
name: sreworks-openebs-ndm
|
|
labels:
|
|
app: openebs
|
|
chart: openebs-3.1.0
|
|
release: sreworks
|
|
heritage: Helm
|
|
component: ndm
|
|
openebs.io/component-name: ndm
|
|
openebs.io/version: 3.1.0
|
|
spec:
|
|
updateStrategy:
|
|
type: "RollingUpdate"
|
|
selector:
|
|
matchLabels:
|
|
app: openebs
|
|
release: sreworks
|
|
component: ndm
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: openebs
|
|
release: sreworks
|
|
component: ndm
|
|
openebs.io/component-name: ndm
|
|
name: openebs-ndm
|
|
openebs.io/version: 3.1.0
|
|
spec:
|
|
serviceAccountName: sreworks-openebs
|
|
hostNetwork: true
|
|
# host PID is used to check status of iSCSI Service when the NDM
|
|
# API service is enabled
|
|
containers:
|
|
- name: openebs-ndm
|
|
image: "openebs/node-disk-manager:1.8.0"
|
|
args:
|
|
- -v=4
|
|
- --feature-gates=GPTBasedUUID
|
|
imagePullPolicy: IfNotPresent
|
|
securityContext:
|
|
privileged: true
|
|
env:
|
|
# namespace in which NDM is installed will be passed to NDM Daemonset
|
|
# as environment variable
|
|
- name: NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
# pass hostname as env variable using downward API to the NDM container
|
|
- name: NODE_NAME
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: spec.nodeName
|
|
# specify the directory where the sparse files need to be created.
|
|
# if not specified, then sparse files will not be created.
|
|
- name: SPARSE_FILE_DIR
|
|
value: "/var/openebs/sparse"
|
|
# Size(bytes) of the sparse file to be created.
|
|
- name: SPARSE_FILE_SIZE
|
|
value: "10737418240"
|
|
# Specify the number of sparse files to be created
|
|
- name: SPARSE_FILE_COUNT
|
|
value: "0"
|
|
# Process name used for matching is limited to the 15 characters
|
|
# present in the pgrep output.
|
|
# So fullname can be used here with pgrep (cmd is < 15 chars).
|
|
livenessProbe:
|
|
exec:
|
|
command:
|
|
- pgrep
|
|
- "ndm"
|
|
initialDelaySeconds: 30
|
|
periodSeconds: 60
|
|
volumeMounts:
|
|
- name: config
|
|
mountPath: /host/node-disk-manager.config
|
|
subPath: node-disk-manager.config
|
|
readOnly: true
|
|
- name: udev
|
|
mountPath: /run/udev
|
|
- name: procmount
|
|
mountPath: /host/proc
|
|
readOnly: true
|
|
- name: devmount
|
|
mountPath: /dev
|
|
- name: basepath
|
|
mountPath: /var/openebs/ndm
|
|
- name: sparsepath
|
|
mountPath: /var/openebs/sparse
|
|
volumes:
|
|
- name: config
|
|
configMap:
|
|
name: sreworks-openebs-ndm-config
|
|
- name: udev
|
|
hostPath:
|
|
path: /run/udev
|
|
type: Directory
|
|
# mount /proc (to access mount file of process 1 of host) inside container
|
|
# to read mount-point of disks and partitions
|
|
- name: procmount
|
|
hostPath:
|
|
path: /proc
|
|
type: Directory
|
|
# the /dev directory is mounted so that we have access to the devices that
|
|
# are connected at runtime of the pod.
|
|
- name: devmount
|
|
hostPath:
|
|
path: /dev
|
|
type: Directory
|
|
- name: basepath
|
|
hostPath:
|
|
path: "/var/openebs/ndm"
|
|
type: DirectoryOrCreate
|
|
- name: sparsepath
|
|
hostPath:
|
|
path: /var/openebs/sparse
|
|
# By default the node-disk-manager will be run on all kubernetes nodes
|
|
# If you would like to limit this to only some nodes, say the nodes
|
|
# that have storage attached, you could label those node and use
|
|
# nodeSelector.
|
|
#
|
|
# e.g. label the storage nodes with - "openebs.io/nodegroup"="storage-node"
|
|
# kubectl label node <node-name> "openebs.io/nodegroup"="storage-node"
|
|
#nodeSelector:
|
|
# "openebs.io/nodegroup": "storage-node"
|
|
---
|
|
# Source: sreworks/charts/appmanager/templates/operator-deployment.yaml
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
labels:
|
|
control-plane: controller-manager
|
|
name: sreworks-appmanager-operator-controller-manager
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
control-plane: controller-manager
|
|
template:
|
|
metadata:
|
|
labels:
|
|
control-plane: controller-manager
|
|
spec:
|
|
containers:
|
|
- args:
|
|
- --secure-listen-address=0.0.0.0:8443
|
|
- --upstream=http://127.0.0.1:8080/
|
|
- --logtostderr=true
|
|
- --v=10
|
|
image: sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/kube-rbac-proxy:v0.8.0
|
|
imagePullPolicy: Always
|
|
name: kube-rbac-proxy
|
|
ports:
|
|
- containerPort: 8443
|
|
name: https
|
|
- args:
|
|
- --metrics-addr=0.0.0.0:8080
|
|
- --leader-elect=true
|
|
- --namespace=sreworks
|
|
- --global-listener=true
|
|
command:
|
|
- /manager
|
|
image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/sw-paas-appmanager-operator:v1.2
|
|
imagePullPolicy: Always
|
|
name: manager
|
|
resources:
|
|
limits:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
requests:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
terminationGracePeriodSeconds: 10
|
|
---
|
|
# Source: sreworks/charts/appmanager/templates/server-deployment.yaml
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: sreworks-appmanager-server
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
name: sreworks-appmanager-server
|
|
template:
|
|
metadata:
|
|
labels:
|
|
name: sreworks-appmanager-server
|
|
spec:
|
|
initContainers:
|
|
- name: server-init
|
|
image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/sw-paas-appmanager-db-migration:v1.2
|
|
imagePullPolicy: Always
|
|
envFrom:
|
|
- configMapRef:
|
|
name: sreworks-appmanager-server-init-configmap
|
|
containers:
|
|
- name: server
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /status.taobao
|
|
port: 7001
|
|
initialDelaySeconds: 1200
|
|
failureThreshold: 5
|
|
periodSeconds: 20
|
|
image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/sw-paas-appmanager:v1.2
|
|
imagePullPolicy: Always
|
|
ports:
|
|
- containerPort: 7001
|
|
envFrom:
|
|
- configMapRef:
|
|
name: sreworks-appmanager-server-configmap
|
|
securityContext:
|
|
privileged: true
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/manager.yaml
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
labels:
|
|
control-plane: controller-manager
|
|
name: kruise-controller-manager
|
|
namespace: kruise-system
|
|
spec:
|
|
replicas: 2
|
|
selector:
|
|
matchLabels:
|
|
control-plane: controller-manager
|
|
minReadySeconds: 3
|
|
strategy:
|
|
type: RollingUpdate
|
|
rollingUpdate:
|
|
maxUnavailable: 0
|
|
maxSurge: 100%
|
|
template:
|
|
metadata:
|
|
labels:
|
|
control-plane: controller-manager
|
|
spec:
|
|
containers:
|
|
- args:
|
|
- --enable-leader-election
|
|
- --metrics-addr=:8080
|
|
- --health-probe-addr=:8000
|
|
- --logtostderr=true
|
|
- --leader-election-namespace=kruise-system
|
|
- --v=4
|
|
- --feature-gates=
|
|
- --sync-period=0
|
|
command:
|
|
- /manager
|
|
image: openkruise/kruise-manager:v1.0.1
|
|
imagePullPolicy: Always
|
|
name: manager
|
|
env:
|
|
- name: POD_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
- name: WEBHOOK_PORT
|
|
value: "9876"
|
|
- name: WEBHOOK_CONFIGURATION_FAILURE_POLICY_PODS
|
|
value: Ignore
|
|
ports:
|
|
- containerPort: 9876
|
|
name: webhook-server
|
|
protocol: TCP
|
|
- containerPort: 8080
|
|
name: metrics
|
|
protocol: TCP
|
|
- containerPort: 8000
|
|
name: health
|
|
protocol: TCP
|
|
readinessProbe:
|
|
httpGet:
|
|
path: readyz
|
|
port: 8000
|
|
resources:
|
|
limits:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
hostNetwork: false
|
|
terminationGracePeriodSeconds: 10
|
|
serviceAccountName: kruise-manager
|
|
affinity:
|
|
podAntiAffinity:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
- podAffinityTerm:
|
|
labelSelector:
|
|
matchExpressions:
|
|
- key: control-plane
|
|
operator: In
|
|
values:
|
|
- controller-manager
|
|
topologyKey: kubernetes.io/hostname
|
|
weight: 100
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/minio/templates/deployment-standalone.yaml
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: sreworks-minio
|
|
namespace: "sreworks"
|
|
labels:
|
|
app.kubernetes.io/name: minio
|
|
helm.sh/chart: minio-4.1.6
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
spec:
|
|
strategy:
|
|
type: Recreate
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: minio
|
|
app.kubernetes.io/instance: sreworks
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/name: minio
|
|
helm.sh/chart: minio-4.1.6
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
annotations:
|
|
checksum/credentials-secret: 181fa091465988454f410aa10f7779d63a18511cce174e243ab27831689836f5
|
|
spec:
|
|
serviceAccountName: sreworks-minio
|
|
|
|
affinity:
|
|
podAffinity:
|
|
|
|
podAntiAffinity:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
- podAffinityTerm:
|
|
labelSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: minio
|
|
app.kubernetes.io/instance: sreworks
|
|
namespaces:
|
|
- "sreworks"
|
|
topologyKey: kubernetes.io/hostname
|
|
weight: 1
|
|
nodeAffinity:
|
|
|
|
securityContext:
|
|
fsGroup: 1001
|
|
containers:
|
|
- name: minio
|
|
image: sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/minio:v1.0
|
|
imagePullPolicy: "IfNotPresent"
|
|
securityContext:
|
|
runAsUser: 1001
|
|
env:
|
|
- name: BITNAMI_DEBUG
|
|
value: "false"
|
|
- name: MINIO_FORCE_NEW_KEYS
|
|
value: "no"
|
|
- name: MINIO_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: sreworks-minio
|
|
key: access-key
|
|
- name: MINIO_SECRET_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: sreworks-minio
|
|
key: secret-key
|
|
- name: MINIO_BROWSER
|
|
value: "on"
|
|
- name: MINIO_PROMETHEUS_AUTH_TYPE
|
|
value: public
|
|
|
|
ports:
|
|
- name: minio
|
|
containerPort: 9000
|
|
livenessProbe:
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 5
|
|
timeoutSeconds: 5
|
|
successThreshold: 1
|
|
failureThreshold: 5
|
|
httpGet:
|
|
path: /minio/health/live
|
|
port: minio
|
|
readinessProbe:
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 5
|
|
timeoutSeconds: 1
|
|
successThreshold: 1
|
|
failureThreshold: 5
|
|
tcpSocket:
|
|
port: minio
|
|
resources:
|
|
limits: {}
|
|
requests: {}
|
|
volumeMounts:
|
|
- name: "data"
|
|
mountPath: /data
|
|
volumes:
|
|
- name: data
|
|
persistentVolumeClaim:
|
|
claimName: sreworks-minio
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/openebs/templates/localprovisioner/deployment-local-provisioner.yaml
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: sreworks-openebs-localpv-provisioner
|
|
labels:
|
|
app: openebs
|
|
chart: openebs-3.1.0
|
|
release: sreworks
|
|
heritage: Helm
|
|
component: localpv-provisioner
|
|
openebs.io/component-name: openebs-localpv-provisioner
|
|
openebs.io/version: 3.1.0
|
|
spec:
|
|
replicas: 1
|
|
strategy:
|
|
type: "Recreate"
|
|
rollingUpdate: null
|
|
selector:
|
|
matchLabels:
|
|
app: openebs
|
|
release: sreworks
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: openebs
|
|
release: sreworks
|
|
component: localpv-provisioner
|
|
name: openebs-localpv-provisioner
|
|
openebs.io/component-name: openebs-localpv-provisioner
|
|
openebs.io/version: 3.1.0
|
|
spec:
|
|
serviceAccountName: sreworks-openebs
|
|
containers:
|
|
- name: openebs-localpv-provisioner
|
|
image: "openebs/provisioner-localpv:3.1.0"
|
|
imagePullPolicy: IfNotPresent
|
|
args:
|
|
- "--bd-time-out=$(BDC_BD_BIND_RETRIES)"
|
|
env:
|
|
# OPENEBS_IO_K8S_MASTER enables openebs provisioner to connect to K8s
|
|
# based on this address. This is ignored if empty.
|
|
# This is supported for openebs provisioner version 0.5.2 onwards
|
|
#- name: OPENEBS_IO_K8S_MASTER
|
|
# value: "http://10.128.0.12:8080"
|
|
# OPENEBS_IO_KUBE_CONFIG enables openebs provisioner to connect to K8s
|
|
# based on this config. This is ignored if empty.
|
|
# This is supported for openebs provisioner version 0.5.2 onwards
|
|
#- name: OPENEBS_IO_KUBE_CONFIG
|
|
# value: "/home/ubuntu/.kube/config"
|
|
# This sets the number of times the provisioner should try
|
|
# with a polling interval of 5 seconds, to get the Blockdevice
|
|
# Name from a BlockDeviceClaim, before the BlockDeviceClaim
|
|
# is deleted. E.g. 12 * 5 seconds = 60 seconds timeout
|
|
- name: BDC_BD_BIND_RETRIES
|
|
value: "12"
|
|
# OPENEBS_NAMESPACE is the namespace that this provisioner will
|
|
# lookup to find maya api service
|
|
- name: OPENEBS_NAMESPACE
|
|
value: "sreworks"
|
|
- name: NODE_NAME
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: spec.nodeName
|
|
# OPENEBS_SERVICE_ACCOUNT provides the service account of this pod as
|
|
# environment variable
|
|
- name: OPENEBS_SERVICE_ACCOUNT
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: spec.serviceAccountName
|
|
# OPENEBS_IO_BASE_PATH is the environment variable that provides the
|
|
# default base path on the node where host-path PVs will be provisioned.
|
|
- name: OPENEBS_IO_ENABLE_ANALYTICS
|
|
value: "true"
|
|
- name: OPENEBS_IO_BASE_PATH
|
|
value: "/var/openebs/local"
|
|
- name: OPENEBS_IO_HELPER_IMAGE
|
|
value: "openebs/linux-utils:3.1.0"
|
|
- name: OPENEBS_IO_INSTALLER_TYPE
|
|
value: "charts-helm"
|
|
# LEADER_ELECTION_ENABLED is used to enable/disable leader election. By default
|
|
# leader election is enabled.
|
|
- name: LEADER_ELECTION_ENABLED
|
|
value: "true"
|
|
# Process name used for matching is limited to the 15 characters
|
|
# present in the pgrep output.
|
|
# So fullname can't be used here with pgrep (>15 chars).A regular expression
|
|
# that matches the entire command name has to specified.
|
|
# Anchor `^` : matches any string that starts with `provisioner-loc`
|
|
# `.*`: matches any string that has `provisioner-loc` followed by zero or more char
|
|
livenessProbe:
|
|
exec:
|
|
command:
|
|
- sh
|
|
- -c
|
|
- test `pgrep -c "^provisioner-loc.*"` = 1
|
|
initialDelaySeconds: 30
|
|
periodSeconds: 60
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/openebs/templates/ndm/deployment-ndm-operator.yaml
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: sreworks-openebs-ndm-operator
|
|
labels:
|
|
app: openebs
|
|
chart: openebs-3.1.0
|
|
release: sreworks
|
|
heritage: Helm
|
|
component: ndm-operator
|
|
openebs.io/component-name: ndm-operator
|
|
openebs.io/version: 3.1.0
|
|
name: ndm-operator
|
|
spec:
|
|
replicas: 1
|
|
strategy:
|
|
type: "Recreate"
|
|
rollingUpdate: null
|
|
selector:
|
|
matchLabels:
|
|
app: openebs
|
|
release: sreworks
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: openebs
|
|
release: sreworks
|
|
component: ndm-operator
|
|
name: ndm-operator
|
|
openebs.io/component-name: ndm-operator
|
|
openebs.io/version: 3.1.0
|
|
spec:
|
|
serviceAccountName: sreworks-openebs
|
|
containers:
|
|
- name: sreworks-openebs-ndm-operator
|
|
image: "openebs/node-disk-operator:1.8.0"
|
|
imagePullPolicy: IfNotPresent
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /healthz
|
|
port: 8585
|
|
initialDelaySeconds: 15
|
|
periodSeconds: 20
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /readyz
|
|
port: 8585
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
env:
|
|
- name: WATCH_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
- name: POD_NAME
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.name
|
|
- name: SERVICE_ACCOUNT
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: spec.serviceAccountName
|
|
- name: OPERATOR_NAME
|
|
value: "node-disk-operator"
|
|
- name: CLEANUP_JOB_IMAGE
|
|
value: "openebs/linux-utils:3.1.0"
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kafka/templates/statefulset.yaml
|
|
apiVersion: apps/v1
|
|
kind: StatefulSet
|
|
metadata:
|
|
name: sreworks-kafka
|
|
labels:
|
|
app.kubernetes.io/name: kafka
|
|
helm.sh/chart: kafka-14.0.3
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
app.kubernetes.io/component: kafka
|
|
spec:
|
|
podManagementPolicy: Parallel
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: kafka
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/component: kafka
|
|
serviceName: sreworks-kafka-headless
|
|
updateStrategy:
|
|
type: "RollingUpdate"
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/name: kafka
|
|
helm.sh/chart: kafka-14.0.3
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
app.kubernetes.io/component: kafka
|
|
spec:
|
|
|
|
affinity:
|
|
podAffinity:
|
|
|
|
podAntiAffinity:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
- podAffinityTerm:
|
|
labelSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: kafka
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/component: kafka
|
|
namespaces:
|
|
- "sreworks"
|
|
topologyKey: kubernetes.io/hostname
|
|
weight: 1
|
|
nodeAffinity:
|
|
|
|
securityContext:
|
|
fsGroup: 1001
|
|
runAsUser: 1001
|
|
serviceAccountName: sreworks-kafka
|
|
containers:
|
|
- name: kafka
|
|
image: sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/kafka:2.8.0-debian-10-r76
|
|
imagePullPolicy: "IfNotPresent"
|
|
command:
|
|
- /scripts/setup.sh
|
|
env:
|
|
- name: BITNAMI_DEBUG
|
|
value: "false"
|
|
- name: MY_POD_IP
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: status.podIP
|
|
- name: MY_POD_NAME
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.name
|
|
- name: KAFKA_CFG_ZOOKEEPER_CONNECT
|
|
value: sreworks-zookeeper:2181
|
|
- name: KAFKA_INTER_BROKER_LISTENER_NAME
|
|
value: "INTERNAL"
|
|
- name: KAFKA_CFG_LISTENER_SECURITY_PROTOCOL_MAP
|
|
value: "INTERNAL:PLAINTEXT,CLIENT:PLAINTEXT"
|
|
- name: KAFKA_CFG_LISTENERS
|
|
value: "INTERNAL://:9093,CLIENT://:9092"
|
|
- name: KAFKA_CFG_ADVERTISED_LISTENERS
|
|
value: "INTERNAL://$(MY_POD_NAME).sreworks-kafka-headless.sreworks.svc.cluster.local:9093,CLIENT://$(MY_POD_NAME).sreworks-kafka-headless.sreworks.svc.cluster.local:9092"
|
|
- name: ALLOW_PLAINTEXT_LISTENER
|
|
value: "yes"
|
|
- name: KAFKA_VOLUME_DIR
|
|
value: "/bitnami/kafka"
|
|
- name: KAFKA_LOG_DIR
|
|
value: "/opt/bitnami/kafka/logs"
|
|
- name: KAFKA_CFG_DELETE_TOPIC_ENABLE
|
|
value: "false"
|
|
- name: KAFKA_CFG_AUTO_CREATE_TOPICS_ENABLE
|
|
value: "true"
|
|
- name: KAFKA_HEAP_OPTS
|
|
value: "-Xmx1024m -Xms1024m"
|
|
- name: KAFKA_CFG_LOG_FLUSH_INTERVAL_MESSAGES
|
|
value: "10000"
|
|
- name: KAFKA_CFG_LOG_FLUSH_INTERVAL_MS
|
|
value: "1000"
|
|
- name: KAFKA_CFG_LOG_RETENTION_BYTES
|
|
value: "1073741824"
|
|
- name: KAFKA_CFG_LOG_RETENTION_CHECK_INTERVALS_MS
|
|
value: "300000"
|
|
- name: KAFKA_CFG_LOG_RETENTION_HOURS
|
|
value: "168"
|
|
- name: KAFKA_CFG_MESSAGE_MAX_BYTES
|
|
value: "1000012"
|
|
- name: KAFKA_CFG_LOG_SEGMENT_BYTES
|
|
value: "1073741824"
|
|
- name: KAFKA_CFG_LOG_DIRS
|
|
value: "/bitnami/kafka/data"
|
|
- name: KAFKA_CFG_DEFAULT_REPLICATION_FACTOR
|
|
value: "1"
|
|
- name: KAFKA_CFG_OFFSETS_TOPIC_REPLICATION_FACTOR
|
|
value: "1"
|
|
- name: KAFKA_CFG_TRANSACTION_STATE_LOG_REPLICATION_FACTOR
|
|
value: "1"
|
|
- name: KAFKA_CFG_TRANSACTION_STATE_LOG_MIN_ISR
|
|
value: "1"
|
|
- name: KAFKA_CFG_NUM_IO_THREADS
|
|
value: "8"
|
|
- name: KAFKA_CFG_NUM_NETWORK_THREADS
|
|
value: "3"
|
|
- name: KAFKA_CFG_NUM_PARTITIONS
|
|
value: "1"
|
|
- name: KAFKA_CFG_NUM_RECOVERY_THREADS_PER_DATA_DIR
|
|
value: "1"
|
|
- name: KAFKA_CFG_SOCKET_RECEIVE_BUFFER_BYTES
|
|
value: "102400"
|
|
- name: KAFKA_CFG_SOCKET_REQUEST_MAX_BYTES
|
|
value: "104857600"
|
|
- name: KAFKA_CFG_SOCKET_SEND_BUFFER_BYTES
|
|
value: "102400"
|
|
- name: KAFKA_CFG_ZOOKEEPER_CONNECTION_TIMEOUT_MS
|
|
value: "6000"
|
|
ports:
|
|
- name: kafka-client
|
|
containerPort: 9092
|
|
- name: kafka-internal
|
|
containerPort: 9093
|
|
livenessProbe:
|
|
tcpSocket:
|
|
port: kafka-client
|
|
initialDelaySeconds: 10
|
|
timeoutSeconds: 5
|
|
failureThreshold: 3
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
readinessProbe:
|
|
tcpSocket:
|
|
port: kafka-client
|
|
initialDelaySeconds: 5
|
|
timeoutSeconds: 5
|
|
failureThreshold: 6
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
resources:
|
|
limits: {}
|
|
requests: {}
|
|
volumeMounts:
|
|
- name: data
|
|
mountPath: /bitnami/kafka
|
|
- name: logs
|
|
mountPath: /opt/bitnami/kafka/logs
|
|
- name: scripts
|
|
mountPath: /scripts/setup.sh
|
|
subPath: setup.sh
|
|
volumes:
|
|
- name: scripts
|
|
configMap:
|
|
name: sreworks-kafka-scripts
|
|
defaultMode: 0755
|
|
- name: logs
|
|
emptyDir: {}
|
|
volumeClaimTemplates:
|
|
- metadata:
|
|
name: data
|
|
spec:
|
|
accessModes:
|
|
- "ReadWriteOnce"
|
|
resources:
|
|
requests:
|
|
storage: "20Gi"
|
|
|
|
storageClassName: __STORAGE_CLASS__
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/mysql/templates/primary/statefulset.yaml
|
|
apiVersion: apps/v1
|
|
kind: StatefulSet
|
|
metadata:
|
|
name: sreworks-mysql
|
|
namespace: sreworks
|
|
labels:
|
|
app.kubernetes.io/name: mysql
|
|
helm.sh/chart: mysql-8.2.3
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
app.kubernetes.io/component: primary
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: mysql
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/component: primary
|
|
serviceName: sreworks-mysql
|
|
updateStrategy:
|
|
type: RollingUpdate
|
|
template:
|
|
metadata:
|
|
annotations:
|
|
checksum/configuration: 7c4d261d8711bdefbd47de7a4939ed26a18abae82038d582783afe9c2b6cb39d
|
|
labels:
|
|
app.kubernetes.io/name: mysql
|
|
helm.sh/chart: mysql-8.2.3
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
app.kubernetes.io/component: primary
|
|
spec:
|
|
|
|
serviceAccountName: sreworks-mysql
|
|
affinity:
|
|
podAffinity:
|
|
|
|
podAntiAffinity:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
- podAffinityTerm:
|
|
labelSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: mysql
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/component: primary
|
|
namespaces:
|
|
- "sreworks"
|
|
topologyKey: kubernetes.io/hostname
|
|
weight: 1
|
|
nodeAffinity:
|
|
|
|
securityContext:
|
|
fsGroup: 1001
|
|
containers:
|
|
- name: mysql
|
|
image: sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/mysql:v1.0
|
|
imagePullPolicy: "IfNotPresent"
|
|
securityContext:
|
|
runAsUser: 1001
|
|
env:
|
|
- name: BITNAMI_DEBUG
|
|
value: "false"
|
|
- name: MYSQL_ROOT_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: sreworks-mysql
|
|
key: mysql-root-password
|
|
- name: MYSQL_DATABASE
|
|
value: "my_database"
|
|
- name: MYSQL_EXTRA_FLAGS
|
|
value: "--max-connect-errors=1000 --max_connections=10000"
|
|
ports:
|
|
- name: mysql
|
|
containerPort: 3306
|
|
livenessProbe:
|
|
failureThreshold: 3
|
|
initialDelaySeconds: 120
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
timeoutSeconds: 1
|
|
exec:
|
|
command:
|
|
- /bin/bash
|
|
- -ec
|
|
- |
|
|
password_aux="${MYSQL_ROOT_PASSWORD:-}"
|
|
if [[ -f "${MYSQL_ROOT_PASSWORD_FILE:-}" ]]; then
|
|
password_aux=$(cat "$MYSQL_ROOT_PASSWORD_FILE")
|
|
fi
|
|
mysqladmin status -uroot -p"${password_aux}"
|
|
readinessProbe:
|
|
failureThreshold: 3
|
|
initialDelaySeconds: 30
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
timeoutSeconds: 1
|
|
exec:
|
|
command:
|
|
- /bin/bash
|
|
- -ec
|
|
- |
|
|
password_aux="${MYSQL_ROOT_PASSWORD:-}"
|
|
if [[ -f "${MYSQL_ROOT_PASSWORD_FILE:-}" ]]; then
|
|
password_aux=$(cat "$MYSQL_ROOT_PASSWORD_FILE")
|
|
fi
|
|
mysqladmin status -uroot -p"${password_aux}"
|
|
resources:
|
|
limits: {}
|
|
requests: {}
|
|
volumeMounts:
|
|
- name: data
|
|
mountPath: /bitnami/mysql
|
|
- name: config
|
|
mountPath: /opt/bitnami/mysql/conf/my.cnf
|
|
subPath: my.cnf
|
|
volumes:
|
|
- name: config
|
|
configMap:
|
|
name: sreworks-mysql
|
|
volumeClaimTemplates:
|
|
- metadata:
|
|
name: data
|
|
labels:
|
|
app.kubernetes.io/name: mysql
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/component: primary
|
|
spec:
|
|
accessModes:
|
|
- "ReadWriteOnce"
|
|
resources:
|
|
requests:
|
|
storage: "20Gi"
|
|
storageClassName: __STORAGE_CLASS__
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/redis/templates/redis-master-statefulset.yaml
|
|
apiVersion: apps/v1
|
|
kind: StatefulSet
|
|
metadata:
|
|
name: sreworks-redis-master
|
|
namespace: "sreworks"
|
|
labels:
|
|
app: redis
|
|
chart: redis-12.2.3
|
|
release: sreworks
|
|
heritage: Helm
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app: redis
|
|
release: sreworks
|
|
role: master
|
|
serviceName: sreworks-redis-headless
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: redis
|
|
chart: redis-12.2.3
|
|
release: sreworks
|
|
role: master
|
|
annotations:
|
|
checksum/health: 402cb8f9e01235d8e51eb55760f71a7fe1a57b7871aa7712df25f7afcee99f07
|
|
checksum/configmap: dfb0e092d3feff8c703f1ff06132599066228c2d766d7583de15b91884a66aa9
|
|
checksum/secret: 5815716e71e7403cd5c61a5eb6601bf98fa79d307763355c6951bd9a1dd3700a
|
|
spec:
|
|
|
|
securityContext:
|
|
fsGroup: 1001
|
|
serviceAccountName: default
|
|
containers:
|
|
- name: redis
|
|
image: sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/redis:v1.0
|
|
imagePullPolicy: "IfNotPresent"
|
|
securityContext:
|
|
runAsUser: 1001
|
|
command:
|
|
- /bin/bash
|
|
- -c
|
|
- /opt/bitnami/scripts/start-scripts/start-master.sh
|
|
env:
|
|
- name: REDIS_REPLICATION_MODE
|
|
value: master
|
|
- name: REDIS_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: sreworks-redis
|
|
key: redis-password
|
|
- name: REDIS_TLS_ENABLED
|
|
value: "no"
|
|
- name: REDIS_PORT
|
|
value: "6379"
|
|
ports:
|
|
- name: redis
|
|
containerPort: 6379
|
|
livenessProbe:
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 5
|
|
# One second longer than command timeout should prevent generation of zombie processes.
|
|
timeoutSeconds: 6
|
|
successThreshold: 1
|
|
failureThreshold: 5
|
|
exec:
|
|
command:
|
|
- sh
|
|
- -c
|
|
- /health/ping_liveness_local.sh 5
|
|
readinessProbe:
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 5
|
|
timeoutSeconds: 2
|
|
successThreshold: 1
|
|
failureThreshold: 5
|
|
exec:
|
|
command:
|
|
- sh
|
|
- -c
|
|
- /health/ping_readiness_local.sh 1
|
|
resources:
|
|
null
|
|
volumeMounts:
|
|
- name: start-scripts
|
|
mountPath: /opt/bitnami/scripts/start-scripts
|
|
- name: health
|
|
mountPath: /health
|
|
- name: redis-data
|
|
mountPath: /data
|
|
subPath:
|
|
- name: config
|
|
mountPath: /opt/bitnami/redis/mounted-etc
|
|
- name: redis-tmp-conf
|
|
mountPath: /opt/bitnami/redis/etc/
|
|
volumes:
|
|
- name: start-scripts
|
|
configMap:
|
|
name: sreworks-redis-scripts
|
|
defaultMode: 0755
|
|
- name: health
|
|
configMap:
|
|
name: sreworks-redis-health
|
|
defaultMode: 0755
|
|
- name: config
|
|
configMap:
|
|
name: sreworks-redis
|
|
- name: redis-tmp-conf
|
|
emptyDir: {}
|
|
volumeClaimTemplates:
|
|
- metadata:
|
|
name: redis-data
|
|
labels:
|
|
app: redis
|
|
release: sreworks
|
|
heritage: Helm
|
|
component: master
|
|
spec:
|
|
accessModes:
|
|
- "ReadWriteOnce"
|
|
resources:
|
|
requests:
|
|
storage: "20Gi"
|
|
storageClassName: __STORAGE_CLASS__
|
|
selector:
|
|
updateStrategy:
|
|
type: RollingUpdate
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/zookeeper/templates/statefulset.yaml
|
|
apiVersion: apps/v1
|
|
kind: StatefulSet
|
|
metadata:
|
|
name: sreworks-zookeeper
|
|
namespace: sreworks
|
|
labels:
|
|
app.kubernetes.io/name: zookeeper
|
|
helm.sh/chart: zookeeper-6.2.0
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
app.kubernetes.io/component: zookeeper
|
|
role: zookeeper
|
|
spec:
|
|
serviceName: sreworks-zookeeper-headless
|
|
replicas: 1
|
|
podManagementPolicy: Parallel
|
|
updateStrategy:
|
|
type: RollingUpdate
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: zookeeper
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/component: zookeeper
|
|
template:
|
|
metadata:
|
|
name: sreworks-zookeeper
|
|
labels:
|
|
app.kubernetes.io/name: zookeeper
|
|
helm.sh/chart: zookeeper-6.2.0
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/managed-by: Helm
|
|
app.kubernetes.io/component: zookeeper
|
|
spec:
|
|
|
|
serviceAccountName: default
|
|
securityContext:
|
|
fsGroup: 1001
|
|
affinity:
|
|
podAffinity:
|
|
|
|
podAntiAffinity:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
- podAffinityTerm:
|
|
labelSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: zookeeper
|
|
app.kubernetes.io/instance: sreworks
|
|
app.kubernetes.io/component: zookeeper
|
|
namespaces:
|
|
- "sreworks"
|
|
topologyKey: kubernetes.io/hostname
|
|
weight: 1
|
|
nodeAffinity:
|
|
|
|
containers:
|
|
- name: zookeeper
|
|
image: sreworks-registry.cn-beijing.cr.aliyuncs.com/mirror/zookeeper:v1.0
|
|
imagePullPolicy: "IfNotPresent"
|
|
securityContext:
|
|
runAsUser: 1001
|
|
command:
|
|
- bash
|
|
- -ec
|
|
- |
|
|
# Execute entrypoint as usual after obtaining ZOO_SERVER_ID
|
|
# check ZOO_SERVER_ID in persistent volume via myid
|
|
# if not present, set based on POD hostname
|
|
if [[ -f "/bitnami/zookeeper/data/myid" ]]; then
|
|
export ZOO_SERVER_ID="$(cat /bitnami/zookeeper/data/myid)"
|
|
else
|
|
HOSTNAME=`hostname -s`
|
|
if [[ $HOSTNAME =~ (.*)-([0-9]+)$ ]]; then
|
|
ORD=${BASH_REMATCH[2]}
|
|
export ZOO_SERVER_ID=$((ORD + 1 ))
|
|
else
|
|
echo "Failed to get index from hostname $HOST"
|
|
exit 1
|
|
fi
|
|
fi
|
|
exec /entrypoint.sh /run.sh
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 256Mi
|
|
env:
|
|
- name: ZOO_DATA_LOG_DIR
|
|
value: ""
|
|
- name: ZOO_PORT_NUMBER
|
|
value: "2181"
|
|
- name: ZOO_TICK_TIME
|
|
value: "2000"
|
|
- name: ZOO_INIT_LIMIT
|
|
value: "10"
|
|
- name: ZOO_SYNC_LIMIT
|
|
value: "5"
|
|
- name: ZOO_MAX_CLIENT_CNXNS
|
|
value: "60"
|
|
- name: ZOO_4LW_COMMANDS_WHITELIST
|
|
value: "srvr, mntr, ruok"
|
|
- name: ZOO_LISTEN_ALLIPS_ENABLED
|
|
value: "no"
|
|
- name: ZOO_AUTOPURGE_INTERVAL
|
|
value: "0"
|
|
- name: ZOO_AUTOPURGE_RETAIN_COUNT
|
|
value: "3"
|
|
- name: ZOO_MAX_SESSION_TIMEOUT
|
|
value: "40000"
|
|
- name: ZOO_SERVERS
|
|
value: sreworks-zookeeper-0.sreworks-zookeeper-headless.sreworks.svc.cluster.local:2888:3888::1
|
|
- name: ZOO_ENABLE_AUTH
|
|
value: "no"
|
|
- name: ZOO_HEAP_SIZE
|
|
value: "1024"
|
|
- name: ZOO_LOG_LEVEL
|
|
value: "ERROR"
|
|
- name: ALLOW_ANONYMOUS_LOGIN
|
|
value: "yes"
|
|
- name: POD_NAME
|
|
valueFrom:
|
|
fieldRef:
|
|
apiVersion: v1
|
|
fieldPath: metadata.name
|
|
ports:
|
|
|
|
- name: client
|
|
containerPort: 2181
|
|
|
|
|
|
- name: follower
|
|
containerPort: 2888
|
|
- name: election
|
|
containerPort: 3888
|
|
livenessProbe:
|
|
exec:
|
|
command: ['/bin/bash', '-c', 'echo "ruok" | timeout 2 nc -w 2 localhost 2181 | grep imok']
|
|
initialDelaySeconds: 30
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
successThreshold: 1
|
|
failureThreshold: 6
|
|
readinessProbe:
|
|
exec:
|
|
command: ['/bin/bash', '-c', 'echo "ruok" | timeout 2 nc -w 2 localhost 2181 | grep imok']
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
successThreshold: 1
|
|
failureThreshold: 6
|
|
volumeMounts:
|
|
- name: data
|
|
mountPath: /bitnami/zookeeper
|
|
volumes:
|
|
volumeClaimTemplates:
|
|
- metadata:
|
|
name: data
|
|
annotations:
|
|
spec:
|
|
accessModes:
|
|
- "ReadWriteOnce"
|
|
resources:
|
|
requests:
|
|
storage: "20Gi"
|
|
storageClassName: __STORAGE_CLASS__
|
|
---
|
|
# Source: sreworks/charts/appmanager/templates/cluster-initjob.yaml
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: sreworks-appmanager-cluster-initjob
|
|
namespace: sreworks
|
|
labels:
|
|
name: appmanager-cluster-initjob
|
|
spec:
|
|
backoffLimit: 1000000
|
|
template:
|
|
metadata:
|
|
name: appmanager-cluster-initjob
|
|
labels:
|
|
name: appmanager-cluster-initjob
|
|
spec:
|
|
containers:
|
|
- name: job
|
|
image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/sw-paas-appmanager-cluster-init:v1.2
|
|
imagePullPolicy: Always
|
|
envFrom:
|
|
- configMapRef:
|
|
name: sreworks-appmanager-server-configmap
|
|
restartPolicy: OnFailure
|
|
---
|
|
# Source: sreworks/charts/appmanager/templates/postrun-job.yaml
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: sreworks-appmanager-postrun
|
|
labels:
|
|
name: appmanager-postrun
|
|
spec:
|
|
backoffLimit: 1000000
|
|
template:
|
|
metadata:
|
|
name: appmanager-postrun
|
|
labels:
|
|
name: appmanager-postrun
|
|
spec:
|
|
containers:
|
|
- name: job
|
|
image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/sw-paas-appmanager-postrun:v1.2
|
|
imagePullPolicy: Always
|
|
envFrom:
|
|
- configMapRef:
|
|
name: sreworks-appmanager-server-configmap
|
|
restartPolicy: OnFailure
|
|
---
|
|
# Source: sreworks/templates/init-job.yaml
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: sreworks-core-init-job
|
|
annotations:
|
|
spec:
|
|
backoffLimit: 100000
|
|
ttlSecondsAfterFinished: 600
|
|
template:
|
|
spec:
|
|
|
|
restartPolicy: OnFailure
|
|
|
|
containers:
|
|
- image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/swcli-builtin-package:v1.2
|
|
name: job
|
|
command: ["sh"]
|
|
args: ["/app/core.sh"]
|
|
imagePullPolicy: Always
|
|
#args: ["/app/sleep.sh"]
|
|
workingDir: /root
|
|
envFrom:
|
|
- configMapRef:
|
|
name: init-configmap
|
|
volumeMounts:
|
|
- name: run-volume
|
|
mountPath: /app
|
|
- name: swcli-volume
|
|
mountPath: /swcli
|
|
|
|
volumes:
|
|
- name: run-volume
|
|
configMap:
|
|
name: init-run
|
|
- name: swcli-volume
|
|
configMap:
|
|
name: init-swcli
|
|
---
|
|
# Source: sreworks/templates/init-job.yaml
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: sreworks-saas-demoapp-init-job
|
|
annotations:
|
|
spec:
|
|
backoffLimit: 100000
|
|
ttlSecondsAfterFinished: 600
|
|
template:
|
|
spec:
|
|
|
|
restartPolicy: OnFailure
|
|
|
|
containers:
|
|
- image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/swcli-builtin-package:v1.2
|
|
name: job
|
|
command: ["sh"]
|
|
#args: ["/app/sleep.sh"]
|
|
imagePullPolicy: Always
|
|
args: ["/app/saas-demoapp.sh"]
|
|
workingDir: /root
|
|
envFrom:
|
|
- configMapRef:
|
|
name: init-configmap
|
|
volumeMounts:
|
|
- name: run-volume
|
|
mountPath: /app
|
|
- name: swcli-volume
|
|
mountPath: /swcli
|
|
|
|
volumes:
|
|
- name: run-volume
|
|
configMap:
|
|
name: init-run
|
|
- name: swcli-volume
|
|
configMap:
|
|
name: init-swcli
|
|
---
|
|
# Source: sreworks/templates/init-job.yaml
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: sreworks-saas-cluster-init-job
|
|
annotations:
|
|
spec:
|
|
backoffLimit: 100000
|
|
ttlSecondsAfterFinished: 600
|
|
template:
|
|
spec:
|
|
|
|
restartPolicy: OnFailure
|
|
|
|
containers:
|
|
- image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/swcli-builtin-package:v1.2
|
|
name: job
|
|
command: ["sh"]
|
|
#args: ["/app/sleep.sh"]
|
|
imagePullPolicy: Always
|
|
args: ["/app/saas-cluster.sh"]
|
|
workingDir: /root
|
|
envFrom:
|
|
- configMapRef:
|
|
name: init-configmap
|
|
volumeMounts:
|
|
- name: run-volume
|
|
mountPath: /app
|
|
- name: swcli-volume
|
|
mountPath: /swcli
|
|
|
|
volumes:
|
|
- name: run-volume
|
|
configMap:
|
|
name: init-run
|
|
- name: swcli-volume
|
|
configMap:
|
|
name: init-swcli
|
|
---
|
|
# Source: sreworks/templates/init-job.yaml
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: sreworks-saas-app-init-job
|
|
annotations:
|
|
spec:
|
|
backoffLimit: 100000
|
|
ttlSecondsAfterFinished: 600
|
|
template:
|
|
spec:
|
|
|
|
restartPolicy: OnFailure
|
|
|
|
containers:
|
|
- image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/swcli-builtin-package:v1.2
|
|
name: job
|
|
command: ["sh"]
|
|
#args: ["/app/sleep.sh"]
|
|
imagePullPolicy: Always
|
|
args: ["/app/saas-app.sh"]
|
|
workingDir: /root
|
|
envFrom:
|
|
- configMapRef:
|
|
name: init-configmap
|
|
volumeMounts:
|
|
- name: run-volume
|
|
mountPath: /app
|
|
- name: swcli-volume
|
|
mountPath: /swcli
|
|
|
|
volumes:
|
|
- name: run-volume
|
|
configMap:
|
|
name: init-run
|
|
- name: swcli-volume
|
|
configMap:
|
|
name: init-swcli
|
|
---
|
|
# Source: sreworks/templates/init-job.yaml
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: sreworks-saas-team-init-job
|
|
annotations:
|
|
spec:
|
|
backoffLimit: 100000
|
|
ttlSecondsAfterFinished: 600
|
|
template:
|
|
spec:
|
|
|
|
restartPolicy: OnFailure
|
|
|
|
containers:
|
|
- image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/swcli-builtin-package:v1.2
|
|
name: job
|
|
command: ["sh"]
|
|
#args: ["/app/sleep.sh"]
|
|
imagePullPolicy: Always
|
|
args: ["/app/saas-team.sh"]
|
|
workingDir: /root
|
|
envFrom:
|
|
- configMapRef:
|
|
name: init-configmap
|
|
volumeMounts:
|
|
- name: run-volume
|
|
mountPath: /app
|
|
- name: swcli-volume
|
|
mountPath: /swcli
|
|
|
|
volumes:
|
|
- name: run-volume
|
|
configMap:
|
|
name: init-run
|
|
- name: swcli-volume
|
|
configMap:
|
|
name: init-swcli
|
|
---
|
|
# Source: sreworks/templates/init-job.yaml
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: sreworks-saas-dataops-init-job
|
|
annotations:
|
|
spec:
|
|
backoffLimit: 100000
|
|
ttlSecondsAfterFinished: 600
|
|
template:
|
|
spec:
|
|
|
|
restartPolicy: OnFailure
|
|
|
|
containers:
|
|
- image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/swcli-builtin-package:v1.2
|
|
name: job
|
|
command: ["sh"]
|
|
#args: ["/app/sleep.sh"]
|
|
imagePullPolicy: Always
|
|
args: ["/app/saas-dataops.sh"]
|
|
workingDir: /root
|
|
envFrom:
|
|
- configMapRef:
|
|
name: init-configmap
|
|
volumeMounts:
|
|
- name: run-volume
|
|
mountPath: /app
|
|
- name: swcli-volume
|
|
mountPath: /swcli
|
|
|
|
volumes:
|
|
- name: run-volume
|
|
configMap:
|
|
name: init-run
|
|
- name: swcli-volume
|
|
configMap:
|
|
name: init-swcli
|
|
---
|
|
# Source: sreworks/templates/init-job.yaml
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: sreworks-saas-system-init-job
|
|
annotations:
|
|
spec:
|
|
backoffLimit: 100000
|
|
ttlSecondsAfterFinished: 600
|
|
template:
|
|
spec:
|
|
|
|
restartPolicy: OnFailure
|
|
|
|
containers:
|
|
- image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/swcli-builtin-package:v1.2
|
|
name: job
|
|
command: ["sh"]
|
|
#args: ["/app/sleep.sh"]
|
|
imagePullPolicy: Always
|
|
args: ["/app/saas-system.sh"]
|
|
workingDir: /root
|
|
envFrom:
|
|
- configMapRef:
|
|
name: init-configmap
|
|
volumeMounts:
|
|
- name: run-volume
|
|
mountPath: /app
|
|
- name: swcli-volume
|
|
mountPath: /swcli
|
|
|
|
volumes:
|
|
- name: run-volume
|
|
configMap:
|
|
name: init-run
|
|
- name: swcli-volume
|
|
configMap:
|
|
name: init-swcli
|
|
---
|
|
# Source: sreworks/templates/init-job.yaml
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: sreworks-saas-job-init-job
|
|
annotations:
|
|
spec:
|
|
backoffLimit: 100000
|
|
ttlSecondsAfterFinished: 600
|
|
template:
|
|
spec:
|
|
|
|
restartPolicy: OnFailure
|
|
|
|
containers:
|
|
- image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/swcli-builtin-package:v1.2
|
|
name: job
|
|
command: ["sh"]
|
|
#args: ["/app/sleep.sh"]
|
|
imagePullPolicy: Always
|
|
args: ["/app/saas-job.sh"]
|
|
workingDir: /root
|
|
envFrom:
|
|
- configMapRef:
|
|
name: init-configmap
|
|
volumeMounts:
|
|
- name: run-volume
|
|
mountPath: /app
|
|
- name: swcli-volume
|
|
mountPath: /swcli
|
|
|
|
volumes:
|
|
- name: run-volume
|
|
configMap:
|
|
name: init-run
|
|
- name: swcli-volume
|
|
configMap:
|
|
name: init-swcli
|
|
---
|
|
# Source: sreworks/templates/init-job.yaml
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: sreworks-saas-search-init-job
|
|
annotations:
|
|
spec:
|
|
backoffLimit: 100000
|
|
ttlSecondsAfterFinished: 600
|
|
template:
|
|
spec:
|
|
|
|
restartPolicy: OnFailure
|
|
|
|
containers:
|
|
- image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/swcli-builtin-package:v1.2
|
|
name: job
|
|
command: ["sh"]
|
|
#args: ["/app/sleep.sh"]
|
|
imagePullPolicy: Always
|
|
args: ["/app/saas-search.sh"]
|
|
workingDir: /root
|
|
envFrom:
|
|
- configMapRef:
|
|
name: init-configmap
|
|
volumeMounts:
|
|
- name: run-volume
|
|
mountPath: /app
|
|
- name: swcli-volume
|
|
mountPath: /swcli
|
|
|
|
volumes:
|
|
- name: run-volume
|
|
configMap:
|
|
name: init-run
|
|
- name: swcli-volume
|
|
configMap:
|
|
name: init-swcli
|
|
---
|
|
# Source: sreworks/templates/init-job.yaml
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: sreworks-saas-healing-init-job
|
|
annotations:
|
|
spec:
|
|
backoffLimit: 100000
|
|
ttlSecondsAfterFinished: 600
|
|
template:
|
|
spec:
|
|
|
|
restartPolicy: OnFailure
|
|
|
|
containers:
|
|
- image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/swcli-builtin-package:v1.2
|
|
name: job
|
|
command: ["sh"]
|
|
#args: ["/app/sleep.sh"]
|
|
imagePullPolicy: Always
|
|
args: ["/app/saas-healing.sh"]
|
|
workingDir: /root
|
|
envFrom:
|
|
- configMapRef:
|
|
name: init-configmap
|
|
volumeMounts:
|
|
- name: run-volume
|
|
mountPath: /app
|
|
- name: swcli-volume
|
|
mountPath: /swcli
|
|
|
|
volumes:
|
|
- name: run-volume
|
|
configMap:
|
|
name: init-run
|
|
- name: swcli-volume
|
|
configMap:
|
|
name: init-swcli
|
|
---
|
|
# Source: sreworks/templates/init-job.yaml
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: sreworks-saas-aiops-init-job
|
|
annotations:
|
|
spec:
|
|
backoffLimit: 100000
|
|
ttlSecondsAfterFinished: 600
|
|
template:
|
|
spec:
|
|
|
|
restartPolicy: OnFailure
|
|
|
|
containers:
|
|
- image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/swcli-builtin-package:v1.2
|
|
name: job
|
|
command: ["sh"]
|
|
#args: ["/app/sleep.sh"]
|
|
imagePullPolicy: Always
|
|
args: ["/app/saas-aiops.sh"]
|
|
workingDir: /root
|
|
envFrom:
|
|
- configMapRef:
|
|
name: init-configmap
|
|
volumeMounts:
|
|
- name: run-volume
|
|
mountPath: /app
|
|
- name: swcli-volume
|
|
mountPath: /swcli
|
|
|
|
volumes:
|
|
- name: run-volume
|
|
configMap:
|
|
name: init-run
|
|
- name: swcli-volume
|
|
configMap:
|
|
name: init-swcli
|
|
---
|
|
# Source: sreworks/templates/init-job.yaml
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: sreworks-saas-health-init-job
|
|
annotations:
|
|
spec:
|
|
backoffLimit: 100000
|
|
ttlSecondsAfterFinished: 600
|
|
template:
|
|
spec:
|
|
|
|
restartPolicy: OnFailure
|
|
|
|
containers:
|
|
- image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/swcli-builtin-package:v1.2
|
|
name: job
|
|
command: ["sh"]
|
|
#args: ["/app/sleep.sh"]
|
|
imagePullPolicy: Always
|
|
args: ["/app/saas-health.sh"]
|
|
workingDir: /root
|
|
envFrom:
|
|
- configMapRef:
|
|
name: init-configmap
|
|
volumeMounts:
|
|
- name: run-volume
|
|
mountPath: /app
|
|
- name: swcli-volume
|
|
mountPath: /swcli
|
|
|
|
volumes:
|
|
- name: run-volume
|
|
configMap:
|
|
name: init-run
|
|
- name: swcli-volume
|
|
configMap:
|
|
name: init-swcli
|
|
---
|
|
# Source: sreworks/templates/init-job.yaml
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: sreworks-saas-ocenter-init-job
|
|
annotations:
|
|
spec:
|
|
backoffLimit: 100000
|
|
ttlSecondsAfterFinished: 600
|
|
template:
|
|
spec:
|
|
|
|
restartPolicy: OnFailure
|
|
|
|
containers:
|
|
- image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/swcli-builtin-package:v1.2
|
|
name: job
|
|
command: ["sh"]
|
|
#args: ["/app/sleep.sh"]
|
|
imagePullPolicy: Always
|
|
args: ["/app/saas-ocenter.sh"]
|
|
workingDir: /root
|
|
envFrom:
|
|
- configMapRef:
|
|
name: init-configmap
|
|
volumeMounts:
|
|
- name: run-volume
|
|
mountPath: /app
|
|
- name: swcli-volume
|
|
mountPath: /swcli
|
|
|
|
volumes:
|
|
- name: run-volume
|
|
configMap:
|
|
name: init-run
|
|
- name: swcli-volume
|
|
configMap:
|
|
name: init-swcli
|
|
---
|
|
# Source: sreworks/templates/init-job.yaml
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: sreworks-saas-help-init-job
|
|
annotations:
|
|
spec:
|
|
backoffLimit: 100000
|
|
ttlSecondsAfterFinished: 600
|
|
template:
|
|
spec:
|
|
|
|
restartPolicy: OnFailure
|
|
|
|
containers:
|
|
- image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/swcli-builtin-package:v1.2
|
|
name: job
|
|
command: ["sh"]
|
|
#args: ["/app/sleep.sh"]
|
|
imagePullPolicy: Always
|
|
args: ["/app/saas-help.sh"]
|
|
workingDir: /root
|
|
envFrom:
|
|
- configMapRef:
|
|
name: init-configmap
|
|
volumeMounts:
|
|
- name: run-volume
|
|
mountPath: /app
|
|
- name: swcli-volume
|
|
mountPath: /swcli
|
|
|
|
volumes:
|
|
- name: run-volume
|
|
configMap:
|
|
name: init-run
|
|
- name: swcli-volume
|
|
configMap:
|
|
name: init-swcli
|
|
---
|
|
# Source: sreworks/templates/init-job.yaml
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: sreworks-saas-upload-init-job
|
|
annotations:
|
|
spec:
|
|
backoffLimit: 100000
|
|
ttlSecondsAfterFinished: 600
|
|
template:
|
|
spec:
|
|
|
|
restartPolicy: OnFailure
|
|
|
|
containers:
|
|
- image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/swcli-builtin-package:v1.2
|
|
name: job
|
|
command: ["sh"]
|
|
#args: ["/app/sleep.sh"]
|
|
imagePullPolicy: Always
|
|
args: ["/app/saas-upload.sh"]
|
|
workingDir: /root
|
|
envFrom:
|
|
- configMapRef:
|
|
name: init-configmap
|
|
volumeMounts:
|
|
- name: run-volume
|
|
mountPath: /app
|
|
- name: swcli-volume
|
|
mountPath: /swcli
|
|
|
|
volumes:
|
|
- name: run-volume
|
|
configMap:
|
|
name: init-run
|
|
- name: swcli-volume
|
|
configMap:
|
|
name: init-swcli
|
|
---
|
|
# Source: sreworks/templates/progress-check-job.yaml
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: sreworks-progress-check
|
|
spec:
|
|
backoffLimit: 100000
|
|
ttlSecondsAfterFinished: 600
|
|
template:
|
|
spec:
|
|
restartPolicy: OnFailure
|
|
containers:
|
|
- image: sreworks-registry.cn-beijing.cr.aliyuncs.com/sreworks/sw-progress-check:v1.2
|
|
name: job
|
|
imagePullPolicy: Always
|
|
envFrom:
|
|
- configMapRef:
|
|
name: init-configmap
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/openebs/templates/localprovisioner/device-class.yaml
|
|
# The second operand in the AND operation can be removed
|
|
# when enableDeviceClass is deprecated.
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/webhookconfiguration.yaml
|
|
apiVersion: admissionregistration.k8s.io/v1
|
|
kind: MutatingWebhookConfiguration
|
|
metadata:
|
|
name: kruise-mutating-webhook-configuration
|
|
annotations:
|
|
template: ""
|
|
webhooks:
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /mutate-apps-kruise-io-v1alpha1-advancedcronjob
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: madvancedcronjob.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- advancedcronjobs
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /mutate-apps-kruise-io-v1alpha1-broadcastjob
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: mbroadcastjob.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- broadcastjobs
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /mutate-apps-kruise-io-v1alpha1-cloneset
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: mcloneset.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- clonesets
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /mutate-apps-kruise-io-v1alpha1-containerrecreaterequest
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: mcontainerrecreaterequest.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- containerrecreaterequests
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /mutate-apps-kruise-io-v1alpha1-daemonset
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: mdaemonset.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- daemonsets
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /mutate-apps-kruise-io-v1alpha1-imagepulljob
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: mimagepulljob.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- imagepulljobs
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /mutate-apps-kruise-io-v1alpha1-nodeimage
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: mnodeimage.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- nodeimages
|
|
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /mutate-pod
|
|
failurePolicy: Ignore
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: mpod.kb.io
|
|
namespaceSelector:
|
|
matchExpressions:
|
|
- key: control-plane
|
|
operator: DoesNotExist
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
apiVersions:
|
|
- v1
|
|
operations:
|
|
- CREATE
|
|
resources:
|
|
- pods
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /mutate-apps-kruise-io-v1alpha1-sidecarset
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: msidecarset.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- sidecarsets
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /mutate-apps-kruise-io-statefulset
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: mstatefulset.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
- v1beta1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- statefulsets
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /mutate-apps-kruise-io-v1alpha1-uniteddeployment
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: muniteddeployment.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- uniteddeployments
|
|
---
|
|
# Source: sreworks/charts/appmanagerbase/charts/kruise/templates/webhookconfiguration.yaml
|
|
apiVersion: admissionregistration.k8s.io/v1
|
|
kind: ValidatingWebhookConfiguration
|
|
metadata:
|
|
name: kruise-validating-webhook-configuration
|
|
annotations:
|
|
template: ""
|
|
webhooks:
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /validate-apps-kruise-io-v1alpha1-resourcedistribution
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: vresourcedistribution.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- resourcedistributions
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /validate-apps-kruise-io-v1alpha1-advancedcronjob
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: vadvancedcronjob.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- advancedcronjobs
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /validate-apps-kruise-io-v1alpha1-broadcastjob
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: vbroadcastjob.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- broadcastjobs
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /validate-apps-deployment
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: vbuiltindeployment.kb.io
|
|
objectSelector:
|
|
matchExpressions:
|
|
- key: policy.kruise.io/delete-protection
|
|
operator: Exists
|
|
rules:
|
|
- apiGroups:
|
|
- apps
|
|
apiVersions:
|
|
- v1
|
|
operations:
|
|
- DELETE
|
|
resources:
|
|
- deployments
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /validate-apps-replicaset
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: vbuiltinreplicaset.kb.io
|
|
objectSelector:
|
|
matchExpressions:
|
|
- key: policy.kruise.io/delete-protection
|
|
operator: Exists
|
|
rules:
|
|
- apiGroups:
|
|
- apps
|
|
apiVersions:
|
|
- v1
|
|
operations:
|
|
- DELETE
|
|
resources:
|
|
- replicasets
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /validate-apps-statefulset
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: vbuiltinstatefulset.kb.io
|
|
objectSelector:
|
|
matchExpressions:
|
|
- key: policy.kruise.io/delete-protection
|
|
operator: Exists
|
|
rules:
|
|
- apiGroups:
|
|
- apps
|
|
apiVersions:
|
|
- v1
|
|
operations:
|
|
- DELETE
|
|
resources:
|
|
- statefulsets
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /validate-apps-kruise-io-v1alpha1-cloneset
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: vcloneset.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
- DELETE
|
|
resources:
|
|
- clonesets
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /validate-customresourcedefinition
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: vcustomresourcedefinition.kb.io
|
|
objectSelector:
|
|
matchExpressions:
|
|
- key: policy.kruise.io/delete-protection
|
|
operator: Exists
|
|
rules:
|
|
- apiGroups:
|
|
- apiextensions.k8s.io
|
|
apiVersions:
|
|
- v1
|
|
- v1beta1
|
|
operations:
|
|
- DELETE
|
|
resources:
|
|
- customresourcedefinitions
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /validate-apps-kruise-io-v1alpha1-daemonset
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: vdaemonset.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- daemonsets
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /validate-apps-kruise-io-v1alpha1-imagepulljob
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: vimagepulljob.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- imagepulljobs
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /validate-namespace
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: vnamespace.kb.io
|
|
objectSelector:
|
|
matchExpressions:
|
|
- key: policy.kruise.io/delete-protection
|
|
operator: Exists
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
apiVersions:
|
|
- v1
|
|
operations:
|
|
- DELETE
|
|
resources:
|
|
- namespaces
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /validate-apps-kruise-io-v1alpha1-nodeimage
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: vnodeimage.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- nodeimages
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /validate-policy-kruise-io-podunavailablebudget
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
name: vpodunavailablebudget.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- policy.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- podunavailablebudgets
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /validate-apps-kruise-io-v1alpha1-sidecarset
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: vsidecarset.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- sidecarsets
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /validate-apps-kruise-io-statefulset
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: vstatefulset.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
- v1beta1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
- DELETE
|
|
resources:
|
|
- statefulsets
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /validate-apps-kruise-io-v1alpha1-uniteddeployment
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: vuniteddeployment.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
- DELETE
|
|
resources:
|
|
- uniteddeployments
|
|
- clientConfig:
|
|
caBundle: Cg==
|
|
service:
|
|
name: kruise-webhook-service
|
|
namespace: kruise-system
|
|
path: /validate-apps-kruise-io-v1alpha1-workloadspread
|
|
failurePolicy: Fail
|
|
admissionReviewVersions:
|
|
- v1
|
|
- v1beta1
|
|
sideEffects: None
|
|
timeoutSeconds: 30
|
|
name: vworkloadspread.kb.io
|
|
rules:
|
|
- apiGroups:
|
|
- apps.kruise.io
|
|
apiVersions:
|
|
- v1alpha1
|
|
operations:
|
|
- CREATE
|
|
- UPDATE
|
|
resources:
|
|
- workloadspreads
|