mirror of https://github.com/k3s-io/k3s
Merge pull request #69795 from yue9944882/chore/resync-psp-api
Resycn psp v1beta1 api with internalpull/58/head
commit
c89b239cfa
|
@ -58,9 +58,11 @@ message AllowedHostPath {
|
||||||
// created by POSTing to .../pods/<pod name>/evictions.
|
// created by POSTing to .../pods/<pod name>/evictions.
|
||||||
message Eviction {
|
message Eviction {
|
||||||
// ObjectMeta describes the pod that is being evicted.
|
// ObjectMeta describes the pod that is being evicted.
|
||||||
|
// +optional
|
||||||
optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
|
optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
|
||||||
|
|
||||||
// DeleteOptions may be provided
|
// DeleteOptions may be provided
|
||||||
|
// +optional
|
||||||
optional k8s.io.apimachinery.pkg.apis.meta.v1.DeleteOptions deleteOptions = 2;
|
optional k8s.io.apimachinery.pkg.apis.meta.v1.DeleteOptions deleteOptions = 2;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -97,17 +99,21 @@ message IDRange {
|
||||||
|
|
||||||
// PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods
|
// PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods
|
||||||
message PodDisruptionBudget {
|
message PodDisruptionBudget {
|
||||||
|
// +optional
|
||||||
optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
|
optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
|
||||||
|
|
||||||
// Specification of the desired behavior of the PodDisruptionBudget.
|
// Specification of the desired behavior of the PodDisruptionBudget.
|
||||||
|
// +optional
|
||||||
optional PodDisruptionBudgetSpec spec = 2;
|
optional PodDisruptionBudgetSpec spec = 2;
|
||||||
|
|
||||||
// Most recently observed status of the PodDisruptionBudget.
|
// Most recently observed status of the PodDisruptionBudget.
|
||||||
|
// +optional
|
||||||
optional PodDisruptionBudgetStatus status = 3;
|
optional PodDisruptionBudgetStatus status = 3;
|
||||||
}
|
}
|
||||||
|
|
||||||
// PodDisruptionBudgetList is a collection of PodDisruptionBudgets.
|
// PodDisruptionBudgetList is a collection of PodDisruptionBudgets.
|
||||||
message PodDisruptionBudgetList {
|
message PodDisruptionBudgetList {
|
||||||
|
// +optional
|
||||||
optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
|
optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
|
||||||
|
|
||||||
repeated PodDisruptionBudget items = 2;
|
repeated PodDisruptionBudget items = 2;
|
||||||
|
@ -119,16 +125,19 @@ message PodDisruptionBudgetSpec {
|
||||||
// "selector" will still be available after the eviction, i.e. even in the
|
// "selector" will still be available after the eviction, i.e. even in the
|
||||||
// absence of the evicted pod. So for example you can prevent all voluntary
|
// absence of the evicted pod. So for example you can prevent all voluntary
|
||||||
// evictions by specifying "100%".
|
// evictions by specifying "100%".
|
||||||
|
// +optional
|
||||||
optional k8s.io.apimachinery.pkg.util.intstr.IntOrString minAvailable = 1;
|
optional k8s.io.apimachinery.pkg.util.intstr.IntOrString minAvailable = 1;
|
||||||
|
|
||||||
// Label query over pods whose evictions are managed by the disruption
|
// Label query over pods whose evictions are managed by the disruption
|
||||||
// budget.
|
// budget.
|
||||||
|
// +optional
|
||||||
optional k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector selector = 2;
|
optional k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector selector = 2;
|
||||||
|
|
||||||
// An eviction is allowed if at most "maxUnavailable" pods selected by
|
// An eviction is allowed if at most "maxUnavailable" pods selected by
|
||||||
// "selector" are unavailable after the eviction, i.e. even in absence of
|
// "selector" are unavailable after the eviction, i.e. even in absence of
|
||||||
// the evicted pod. For example, one can prevent all voluntary evictions
|
// the evicted pod. For example, one can prevent all voluntary evictions
|
||||||
// by specifying 0. This is a mutually exclusive setting with "minAvailable".
|
// by specifying 0. This is a mutually exclusive setting with "minAvailable".
|
||||||
|
// +optional
|
||||||
optional k8s.io.apimachinery.pkg.util.intstr.IntOrString maxUnavailable = 3;
|
optional k8s.io.apimachinery.pkg.util.intstr.IntOrString maxUnavailable = 3;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
|
@ -28,16 +28,19 @@ type PodDisruptionBudgetSpec struct {
|
||||||
// "selector" will still be available after the eviction, i.e. even in the
|
// "selector" will still be available after the eviction, i.e. even in the
|
||||||
// absence of the evicted pod. So for example you can prevent all voluntary
|
// absence of the evicted pod. So for example you can prevent all voluntary
|
||||||
// evictions by specifying "100%".
|
// evictions by specifying "100%".
|
||||||
|
// +optional
|
||||||
MinAvailable *intstr.IntOrString `json:"minAvailable,omitempty" protobuf:"bytes,1,opt,name=minAvailable"`
|
MinAvailable *intstr.IntOrString `json:"minAvailable,omitempty" protobuf:"bytes,1,opt,name=minAvailable"`
|
||||||
|
|
||||||
// Label query over pods whose evictions are managed by the disruption
|
// Label query over pods whose evictions are managed by the disruption
|
||||||
// budget.
|
// budget.
|
||||||
|
// +optional
|
||||||
Selector *metav1.LabelSelector `json:"selector,omitempty" protobuf:"bytes,2,opt,name=selector"`
|
Selector *metav1.LabelSelector `json:"selector,omitempty" protobuf:"bytes,2,opt,name=selector"`
|
||||||
|
|
||||||
// An eviction is allowed if at most "maxUnavailable" pods selected by
|
// An eviction is allowed if at most "maxUnavailable" pods selected by
|
||||||
// "selector" are unavailable after the eviction, i.e. even in absence of
|
// "selector" are unavailable after the eviction, i.e. even in absence of
|
||||||
// the evicted pod. For example, one can prevent all voluntary evictions
|
// the evicted pod. For example, one can prevent all voluntary evictions
|
||||||
// by specifying 0. This is a mutually exclusive setting with "minAvailable".
|
// by specifying 0. This is a mutually exclusive setting with "minAvailable".
|
||||||
|
// +optional
|
||||||
MaxUnavailable *intstr.IntOrString `json:"maxUnavailable,omitempty" protobuf:"bytes,3,opt,name=maxUnavailable"`
|
MaxUnavailable *intstr.IntOrString `json:"maxUnavailable,omitempty" protobuf:"bytes,3,opt,name=maxUnavailable"`
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -81,12 +84,15 @@ type PodDisruptionBudgetStatus struct {
|
||||||
|
|
||||||
// PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods
|
// PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods
|
||||||
type PodDisruptionBudget struct {
|
type PodDisruptionBudget struct {
|
||||||
metav1.TypeMeta `json:",inline"`
|
metav1.TypeMeta `json:",inline"`
|
||||||
|
// +optional
|
||||||
metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
|
metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
|
||||||
|
|
||||||
// Specification of the desired behavior of the PodDisruptionBudget.
|
// Specification of the desired behavior of the PodDisruptionBudget.
|
||||||
|
// +optional
|
||||||
Spec PodDisruptionBudgetSpec `json:"spec,omitempty" protobuf:"bytes,2,opt,name=spec"`
|
Spec PodDisruptionBudgetSpec `json:"spec,omitempty" protobuf:"bytes,2,opt,name=spec"`
|
||||||
// Most recently observed status of the PodDisruptionBudget.
|
// Most recently observed status of the PodDisruptionBudget.
|
||||||
|
// +optional
|
||||||
Status PodDisruptionBudgetStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"`
|
Status PodDisruptionBudgetStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"`
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -95,6 +101,7 @@ type PodDisruptionBudget struct {
|
||||||
// PodDisruptionBudgetList is a collection of PodDisruptionBudgets.
|
// PodDisruptionBudgetList is a collection of PodDisruptionBudgets.
|
||||||
type PodDisruptionBudgetList struct {
|
type PodDisruptionBudgetList struct {
|
||||||
metav1.TypeMeta `json:",inline"`
|
metav1.TypeMeta `json:",inline"`
|
||||||
|
// +optional
|
||||||
metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
|
metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
|
||||||
Items []PodDisruptionBudget `json:"items" protobuf:"bytes,2,rep,name=items"`
|
Items []PodDisruptionBudget `json:"items" protobuf:"bytes,2,rep,name=items"`
|
||||||
}
|
}
|
||||||
|
@ -110,9 +117,11 @@ type Eviction struct {
|
||||||
metav1.TypeMeta `json:",inline"`
|
metav1.TypeMeta `json:",inline"`
|
||||||
|
|
||||||
// ObjectMeta describes the pod that is being evicted.
|
// ObjectMeta describes the pod that is being evicted.
|
||||||
|
// +optional
|
||||||
metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
|
metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
|
||||||
|
|
||||||
// DeleteOptions may be provided
|
// DeleteOptions may be provided
|
||||||
|
// +optional
|
||||||
DeleteOptions *metav1.DeleteOptions `json:"deleteOptions,omitempty" protobuf:"bytes,2,opt,name=deleteOptions"`
|
DeleteOptions *metav1.DeleteOptions `json:"deleteOptions,omitempty" protobuf:"bytes,2,opt,name=deleteOptions"`
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -250,13 +259,13 @@ type AllowedHostPath struct {
|
||||||
ReadOnly bool `json:"readOnly,omitempty" protobuf:"varint,2,opt,name=readOnly"`
|
ReadOnly bool `json:"readOnly,omitempty" protobuf:"varint,2,opt,name=readOnly"`
|
||||||
}
|
}
|
||||||
|
|
||||||
// FSType gives strong typing to different file systems that are used by volumes.
|
|
||||||
type FSType string
|
|
||||||
|
|
||||||
// AllowAllCapabilities can be used as a value for the PodSecurityPolicy.AllowAllCapabilities
|
// AllowAllCapabilities can be used as a value for the PodSecurityPolicy.AllowAllCapabilities
|
||||||
// field and means that any capabilities are allowed to be requested.
|
// field and means that any capabilities are allowed to be requested.
|
||||||
var AllowAllCapabilities v1.Capability = "*"
|
var AllowAllCapabilities v1.Capability = "*"
|
||||||
|
|
||||||
|
// FSType gives strong typing to different file systems that are used by volumes.
|
||||||
|
type FSType string
|
||||||
|
|
||||||
var (
|
var (
|
||||||
AzureFile FSType = "azureFile"
|
AzureFile FSType = "azureFile"
|
||||||
Flocker FSType = "flocker"
|
Flocker FSType = "flocker"
|
||||||
|
|
Loading…
Reference in New Issue