Bump the gomod group across 1 directory with 9 updates (#4508)
Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jiaren Wu <jiaren-wu@github.com>
This commit is contained in:
dependabot[bot]
GitHub
parent
631f39bb2a
commit
0dc5f8a0c2
|
|
@ -2084,7 +2084,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -4032,7 +4031,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -5548,7 +5546,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -7317,7 +7314,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -8899,7 +8895,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -9067,8 +9063,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
|
|||
|
|
@ -2067,7 +2067,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -4015,7 +4014,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -5531,7 +5529,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -7300,7 +7297,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -8882,7 +8878,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -9050,8 +9046,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
|
|||
|
|
@ -1999,7 +1999,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -3947,7 +3946,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -5463,7 +5461,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -7232,7 +7229,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -8814,7 +8810,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -8982,8 +8978,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
|
|||
|
|
@ -2221,7 +2221,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -3713,7 +3712,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -4179,7 +4177,6 @@ spec:
|
|||
When set to false, a new userns is created for the pod. Setting false is useful for
|
||||
mitigating container breakout vulnerabilities even allowing users to run their
|
||||
containers as root without actually having root privileges on the host.
|
||||
This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
|
||||
type: boolean
|
||||
hostname:
|
||||
description: |-
|
||||
|
|
@ -5290,7 +5287,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -5839,6 +5835,14 @@ spec:
|
|||
|
||||
It adds a name to it that uniquely identifies the ResourceClaim inside the Pod.
|
||||
Containers that need access to the ResourceClaim reference it with this name.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and this Pod
|
||||
belongs to a PodGroup, a PodResourceClaim is matched to a
|
||||
PodGroupResourceClaim if all of their fields are equal (Name,
|
||||
ResourceClaimName, and ResourceClaimTemplateName). A matched claim references
|
||||
a single ResourceClaim shared across all Pods in the PodGroup, reserved for
|
||||
the PodGroup in ResourceClaimStatus.ReservedFor rather than for individual
|
||||
Pods.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
|
|
@ -5864,6 +5868,16 @@ spec:
|
|||
generated component, will be used to form a unique name for the
|
||||
ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and the pod
|
||||
belongs to a PodGroup that defines a PodGroupResourceClaim with the same
|
||||
Name and ResourceClaimTemplateName, this PodResourceClaim resolves to the
|
||||
ResourceClaim generated for the PodGroup. All pods in the group that
|
||||
define an equivalent PodResourceClaim matching the
|
||||
PodGroupResourceClaim's Name and ResourceClaimTemplateName share the same
|
||||
generated ResourceClaim. ResourceClaims generated for a PodGroup are
|
||||
owned by the PodGroup and their lifecycles are tied to the PodGroup
|
||||
instead of any individual pod.
|
||||
|
||||
This field is immutable and no changes will be made to the
|
||||
corresponding ResourceClaim by the control plane after creating the
|
||||
ResourceClaim.
|
||||
|
|
@ -5985,6 +5999,28 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
schedulingGroup:
|
||||
description: |-
|
||||
SchedulingGroup provides a reference to the immediate scheduling runtime
|
||||
grouping object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the group and apply the
|
||||
correct group scheduling policies. The association with a group also
|
||||
impacts other lifecycle aspects of a Pod that are relevant in a wider context
|
||||
of scheduling like preemption, resource attachment, etc. If not specified,
|
||||
the Pod is treated as a single unit in all of these aspects.
|
||||
The group object referenced by this field may not exist at the time the
|
||||
Pod is created.
|
||||
This field is immutable, but a group object with the same name may be
|
||||
recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
podGroupName:
|
||||
description: |-
|
||||
PodGroupName specifies the name of the standalone PodGroup object
|
||||
that represents the runtime instance of this group.
|
||||
Must be a DNS subdomain.
|
||||
type: string
|
||||
type: object
|
||||
securityContext:
|
||||
description: |-
|
||||
SecurityContext holds pod-level security attributes and common container settings.
|
||||
|
|
@ -7371,7 +7407,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -7539,8 +7575,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
@ -8314,42 +8349,6 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
workloadRef:
|
||||
description: |-
|
||||
WorkloadRef provides a reference to the Workload object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the PodGroup and apply the
|
||||
correct group scheduling policies. The Workload object referenced
|
||||
by this field may not exist at the time the Pod is created.
|
||||
This field is immutable, but a Workload object with the same name
|
||||
may be recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
Name defines the name of the Workload object this Pod belongs to.
|
||||
Workload must be in the same namespace as the Pod.
|
||||
If it doesn't match any existing Workload, the Pod will remain unschedulable
|
||||
until a Workload object is created and observed by the kube-scheduler.
|
||||
It must be a DNS subdomain.
|
||||
type: string
|
||||
podGroup:
|
||||
description: |-
|
||||
PodGroup is the name of the PodGroup within the Workload that this Pod
|
||||
belongs to. If it doesn't match any existing PodGroup within the Workload,
|
||||
the Pod will remain unschedulable until the Workload object is recreated
|
||||
and observed by the kube-scheduler. It must be a DNS label.
|
||||
type: string
|
||||
podGroupReplicaKey:
|
||||
description: |-
|
||||
PodGroupReplicaKey specifies the replica key of the PodGroup to which this
|
||||
Pod belongs. It is used to distinguish pods belonging to different replicas
|
||||
of the same pod group. The pod group policy is applied separately to each replica.
|
||||
When set, it must be a DNS label.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
- podGroup
|
||||
type: object
|
||||
required:
|
||||
- containers
|
||||
type: object
|
||||
|
|
|
|||
|
|
@ -2333,7 +2333,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -3904,7 +3903,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -4388,7 +4386,6 @@ spec:
|
|||
When set to false, a new userns is created for the pod. Setting false is useful for
|
||||
mitigating container breakout vulnerabilities even allowing users to run their
|
||||
containers as root without actually having root privileges on the host.
|
||||
This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
|
||||
type: boolean
|
||||
hostname:
|
||||
description: |-
|
||||
|
|
@ -5558,7 +5555,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -6127,6 +6123,14 @@ spec:
|
|||
|
||||
It adds a name to it that uniquely identifies the ResourceClaim inside the Pod.
|
||||
Containers that need access to the ResourceClaim reference it with this name.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and this Pod
|
||||
belongs to a PodGroup, a PodResourceClaim is matched to a
|
||||
PodGroupResourceClaim if all of their fields are equal (Name,
|
||||
ResourceClaimName, and ResourceClaimTemplateName). A matched claim references
|
||||
a single ResourceClaim shared across all Pods in the PodGroup, reserved for
|
||||
the PodGroup in ResourceClaimStatus.ReservedFor rather than for individual
|
||||
Pods.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
|
|
@ -6152,6 +6156,16 @@ spec:
|
|||
generated component, will be used to form a unique name for the
|
||||
ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and the pod
|
||||
belongs to a PodGroup that defines a PodGroupResourceClaim with the same
|
||||
Name and ResourceClaimTemplateName, this PodResourceClaim resolves to the
|
||||
ResourceClaim generated for the PodGroup. All pods in the group that
|
||||
define an equivalent PodResourceClaim matching the
|
||||
PodGroupResourceClaim's Name and ResourceClaimTemplateName share the same
|
||||
generated ResourceClaim. ResourceClaims generated for a PodGroup are
|
||||
owned by the PodGroup and their lifecycles are tied to the PodGroup
|
||||
instead of any individual pod.
|
||||
|
||||
This field is immutable and no changes will be made to the
|
||||
corresponding ResourceClaim by the control plane after creating the
|
||||
ResourceClaim.
|
||||
|
|
@ -6277,6 +6291,28 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
schedulingGroup:
|
||||
description: |-
|
||||
SchedulingGroup provides a reference to the immediate scheduling runtime
|
||||
grouping object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the group and apply the
|
||||
correct group scheduling policies. The association with a group also
|
||||
impacts other lifecycle aspects of a Pod that are relevant in a wider context
|
||||
of scheduling like preemption, resource attachment, etc. If not specified,
|
||||
the Pod is treated as a single unit in all of these aspects.
|
||||
The group object referenced by this field may not exist at the time the
|
||||
Pod is created.
|
||||
This field is immutable, but a group object with the same name may be
|
||||
recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
podGroupName:
|
||||
description: |-
|
||||
PodGroupName specifies the name of the standalone PodGroup object
|
||||
that represents the runtime instance of this group.
|
||||
Must be a DNS subdomain.
|
||||
type: string
|
||||
type: object
|
||||
securityContext:
|
||||
description: |-
|
||||
SecurityContext holds pod-level security attributes and common container settings.
|
||||
|
|
@ -7722,7 +7758,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -7894,8 +7930,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
@ -8718,42 +8753,6 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
workloadRef:
|
||||
description: |-
|
||||
WorkloadRef provides a reference to the Workload object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the PodGroup and apply the
|
||||
correct group scheduling policies. The Workload object referenced
|
||||
by this field may not exist at the time the Pod is created.
|
||||
This field is immutable, but a Workload object with the same name
|
||||
may be recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
Name defines the name of the Workload object this Pod belongs to.
|
||||
Workload must be in the same namespace as the Pod.
|
||||
If it doesn't match any existing Workload, the Pod will remain unschedulable
|
||||
until a Workload object is created and observed by the kube-scheduler.
|
||||
It must be a DNS subdomain.
|
||||
type: string
|
||||
podGroup:
|
||||
description: |-
|
||||
PodGroup is the name of the PodGroup within the Workload that this Pod
|
||||
belongs to. If it doesn't match any existing PodGroup within the Workload,
|
||||
the Pod will remain unschedulable until the Workload object is recreated
|
||||
and observed by the kube-scheduler. It must be a DNS label.
|
||||
type: string
|
||||
podGroupReplicaKey:
|
||||
description: |-
|
||||
PodGroupReplicaKey specifies the replica key of the PodGroup to which this
|
||||
Pod belongs. It is used to distinguish pods belonging to different replicas
|
||||
of the same pod group. The pod group policy is applied separately to each replica.
|
||||
When set, it must be a DNS label.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
- podGroup
|
||||
type: object
|
||||
required:
|
||||
- containers
|
||||
type: object
|
||||
|
|
|
|||
|
|
@ -2212,7 +2212,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -3707,7 +3706,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -4173,7 +4171,6 @@ spec:
|
|||
When set to false, a new userns is created for the pod. Setting false is useful for
|
||||
mitigating container breakout vulnerabilities even allowing users to run their
|
||||
containers as root without actually having root privileges on the host.
|
||||
This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
|
||||
type: boolean
|
||||
hostname:
|
||||
description: |-
|
||||
|
|
@ -5287,7 +5284,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -5836,6 +5832,14 @@ spec:
|
|||
|
||||
It adds a name to it that uniquely identifies the ResourceClaim inside the Pod.
|
||||
Containers that need access to the ResourceClaim reference it with this name.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and this Pod
|
||||
belongs to a PodGroup, a PodResourceClaim is matched to a
|
||||
PodGroupResourceClaim if all of their fields are equal (Name,
|
||||
ResourceClaimName, and ResourceClaimTemplateName). A matched claim references
|
||||
a single ResourceClaim shared across all Pods in the PodGroup, reserved for
|
||||
the PodGroup in ResourceClaimStatus.ReservedFor rather than for individual
|
||||
Pods.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
|
|
@ -5861,6 +5865,16 @@ spec:
|
|||
generated component, will be used to form a unique name for the
|
||||
ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and the pod
|
||||
belongs to a PodGroup that defines a PodGroupResourceClaim with the same
|
||||
Name and ResourceClaimTemplateName, this PodResourceClaim resolves to the
|
||||
ResourceClaim generated for the PodGroup. All pods in the group that
|
||||
define an equivalent PodResourceClaim matching the
|
||||
PodGroupResourceClaim's Name and ResourceClaimTemplateName share the same
|
||||
generated ResourceClaim. ResourceClaims generated for a PodGroup are
|
||||
owned by the PodGroup and their lifecycles are tied to the PodGroup
|
||||
instead of any individual pod.
|
||||
|
||||
This field is immutable and no changes will be made to the
|
||||
corresponding ResourceClaim by the control plane after creating the
|
||||
ResourceClaim.
|
||||
|
|
@ -5985,6 +5999,28 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
schedulingGroup:
|
||||
description: |-
|
||||
SchedulingGroup provides a reference to the immediate scheduling runtime
|
||||
grouping object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the group and apply the
|
||||
correct group scheduling policies. The association with a group also
|
||||
impacts other lifecycle aspects of a Pod that are relevant in a wider context
|
||||
of scheduling like preemption, resource attachment, etc. If not specified,
|
||||
the Pod is treated as a single unit in all of these aspects.
|
||||
The group object referenced by this field may not exist at the time the
|
||||
Pod is created.
|
||||
This field is immutable, but a group object with the same name may be
|
||||
recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
podGroupName:
|
||||
description: |-
|
||||
PodGroupName specifies the name of the standalone PodGroup object
|
||||
that represents the runtime instance of this group.
|
||||
Must be a DNS subdomain.
|
||||
type: string
|
||||
type: object
|
||||
securityContext:
|
||||
description: |-
|
||||
SecurityContext holds pod-level security attributes and common container settings.
|
||||
|
|
@ -7371,7 +7407,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -7539,8 +7575,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
@ -8314,42 +8349,6 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
workloadRef:
|
||||
description: |-
|
||||
WorkloadRef provides a reference to the Workload object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the PodGroup and apply the
|
||||
correct group scheduling policies. The Workload object referenced
|
||||
by this field may not exist at the time the Pod is created.
|
||||
This field is immutable, but a Workload object with the same name
|
||||
may be recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
Name defines the name of the Workload object this Pod belongs to.
|
||||
Workload must be in the same namespace as the Pod.
|
||||
If it doesn't match any existing Workload, the Pod will remain unschedulable
|
||||
until a Workload object is created and observed by the kube-scheduler.
|
||||
It must be a DNS subdomain.
|
||||
type: string
|
||||
podGroup:
|
||||
description: |-
|
||||
PodGroup is the name of the PodGroup within the Workload that this Pod
|
||||
belongs to. If it doesn't match any existing PodGroup within the Workload,
|
||||
the Pod will remain unschedulable until the Workload object is recreated
|
||||
and observed by the kube-scheduler. It must be a DNS label.
|
||||
type: string
|
||||
podGroupReplicaKey:
|
||||
description: |-
|
||||
PodGroupReplicaKey specifies the replica key of the PodGroup to which this
|
||||
Pod belongs. It is used to distinguish pods belonging to different replicas
|
||||
of the same pod group. The pod group policy is applied separately to each replica.
|
||||
When set, it must be a DNS label.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
- podGroup
|
||||
type: object
|
||||
required:
|
||||
- containers
|
||||
type: object
|
||||
|
|
@ -10361,7 +10360,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -11853,7 +11851,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -12319,7 +12316,6 @@ spec:
|
|||
When set to false, a new userns is created for the pod. Setting false is useful for
|
||||
mitigating container breakout vulnerabilities even allowing users to run their
|
||||
containers as root without actually having root privileges on the host.
|
||||
This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
|
||||
type: boolean
|
||||
hostname:
|
||||
description: |-
|
||||
|
|
@ -13430,7 +13426,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -13979,6 +13974,14 @@ spec:
|
|||
|
||||
It adds a name to it that uniquely identifies the ResourceClaim inside the Pod.
|
||||
Containers that need access to the ResourceClaim reference it with this name.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and this Pod
|
||||
belongs to a PodGroup, a PodResourceClaim is matched to a
|
||||
PodGroupResourceClaim if all of their fields are equal (Name,
|
||||
ResourceClaimName, and ResourceClaimTemplateName). A matched claim references
|
||||
a single ResourceClaim shared across all Pods in the PodGroup, reserved for
|
||||
the PodGroup in ResourceClaimStatus.ReservedFor rather than for individual
|
||||
Pods.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
|
|
@ -14004,6 +14007,16 @@ spec:
|
|||
generated component, will be used to form a unique name for the
|
||||
ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and the pod
|
||||
belongs to a PodGroup that defines a PodGroupResourceClaim with the same
|
||||
Name and ResourceClaimTemplateName, this PodResourceClaim resolves to the
|
||||
ResourceClaim generated for the PodGroup. All pods in the group that
|
||||
define an equivalent PodResourceClaim matching the
|
||||
PodGroupResourceClaim's Name and ResourceClaimTemplateName share the same
|
||||
generated ResourceClaim. ResourceClaims generated for a PodGroup are
|
||||
owned by the PodGroup and their lifecycles are tied to the PodGroup
|
||||
instead of any individual pod.
|
||||
|
||||
This field is immutable and no changes will be made to the
|
||||
corresponding ResourceClaim by the control plane after creating the
|
||||
ResourceClaim.
|
||||
|
|
@ -14125,6 +14138,28 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
schedulingGroup:
|
||||
description: |-
|
||||
SchedulingGroup provides a reference to the immediate scheduling runtime
|
||||
grouping object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the group and apply the
|
||||
correct group scheduling policies. The association with a group also
|
||||
impacts other lifecycle aspects of a Pod that are relevant in a wider context
|
||||
of scheduling like preemption, resource attachment, etc. If not specified,
|
||||
the Pod is treated as a single unit in all of these aspects.
|
||||
The group object referenced by this field may not exist at the time the
|
||||
Pod is created.
|
||||
This field is immutable, but a group object with the same name may be
|
||||
recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
podGroupName:
|
||||
description: |-
|
||||
PodGroupName specifies the name of the standalone PodGroup object
|
||||
that represents the runtime instance of this group.
|
||||
Must be a DNS subdomain.
|
||||
type: string
|
||||
type: object
|
||||
securityContext:
|
||||
description: |-
|
||||
SecurityContext holds pod-level security attributes and common container settings.
|
||||
|
|
@ -15511,7 +15546,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -15679,8 +15714,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
@ -16454,42 +16488,6 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
workloadRef:
|
||||
description: |-
|
||||
WorkloadRef provides a reference to the Workload object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the PodGroup and apply the
|
||||
correct group scheduling policies. The Workload object referenced
|
||||
by this field may not exist at the time the Pod is created.
|
||||
This field is immutable, but a Workload object with the same name
|
||||
may be recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
Name defines the name of the Workload object this Pod belongs to.
|
||||
Workload must be in the same namespace as the Pod.
|
||||
If it doesn't match any existing Workload, the Pod will remain unschedulable
|
||||
until a Workload object is created and observed by the kube-scheduler.
|
||||
It must be a DNS subdomain.
|
||||
type: string
|
||||
podGroup:
|
||||
description: |-
|
||||
PodGroup is the name of the PodGroup within the Workload that this Pod
|
||||
belongs to. If it doesn't match any existing PodGroup within the Workload,
|
||||
the Pod will remain unschedulable until the Workload object is recreated
|
||||
and observed by the kube-scheduler. It must be a DNS label.
|
||||
type: string
|
||||
podGroupReplicaKey:
|
||||
description: |-
|
||||
PodGroupReplicaKey specifies the replica key of the PodGroup to which this
|
||||
Pod belongs. It is used to distinguish pods belonging to different replicas
|
||||
of the same pod group. The pod group policy is applied separately to each replica.
|
||||
When set, it must be a DNS label.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
- podGroup
|
||||
type: object
|
||||
required:
|
||||
- containers
|
||||
type: object
|
||||
|
|
|
|||
|
|
@ -2109,7 +2109,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -3601,7 +3600,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -4067,7 +4065,6 @@ spec:
|
|||
When set to false, a new userns is created for the pod. Setting false is useful for
|
||||
mitigating container breakout vulnerabilities even allowing users to run their
|
||||
containers as root without actually having root privileges on the host.
|
||||
This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
|
||||
type: boolean
|
||||
hostname:
|
||||
description: |-
|
||||
|
|
@ -5178,7 +5175,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -5727,6 +5723,14 @@ spec:
|
|||
|
||||
It adds a name to it that uniquely identifies the ResourceClaim inside the Pod.
|
||||
Containers that need access to the ResourceClaim reference it with this name.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and this Pod
|
||||
belongs to a PodGroup, a PodResourceClaim is matched to a
|
||||
PodGroupResourceClaim if all of their fields are equal (Name,
|
||||
ResourceClaimName, and ResourceClaimTemplateName). A matched claim references
|
||||
a single ResourceClaim shared across all Pods in the PodGroup, reserved for
|
||||
the PodGroup in ResourceClaimStatus.ReservedFor rather than for individual
|
||||
Pods.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
|
|
@ -5752,6 +5756,16 @@ spec:
|
|||
generated component, will be used to form a unique name for the
|
||||
ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and the pod
|
||||
belongs to a PodGroup that defines a PodGroupResourceClaim with the same
|
||||
Name and ResourceClaimTemplateName, this PodResourceClaim resolves to the
|
||||
ResourceClaim generated for the PodGroup. All pods in the group that
|
||||
define an equivalent PodResourceClaim matching the
|
||||
PodGroupResourceClaim's Name and ResourceClaimTemplateName share the same
|
||||
generated ResourceClaim. ResourceClaims generated for a PodGroup are
|
||||
owned by the PodGroup and their lifecycles are tied to the PodGroup
|
||||
instead of any individual pod.
|
||||
|
||||
This field is immutable and no changes will be made to the
|
||||
corresponding ResourceClaim by the control plane after creating the
|
||||
ResourceClaim.
|
||||
|
|
@ -5876,6 +5890,28 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
schedulingGroup:
|
||||
description: |-
|
||||
SchedulingGroup provides a reference to the immediate scheduling runtime
|
||||
grouping object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the group and apply the
|
||||
correct group scheduling policies. The association with a group also
|
||||
impacts other lifecycle aspects of a Pod that are relevant in a wider context
|
||||
of scheduling like preemption, resource attachment, etc. If not specified,
|
||||
the Pod is treated as a single unit in all of these aspects.
|
||||
The group object referenced by this field may not exist at the time the
|
||||
Pod is created.
|
||||
This field is immutable, but a group object with the same name may be
|
||||
recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
podGroupName:
|
||||
description: |-
|
||||
PodGroupName specifies the name of the standalone PodGroup object
|
||||
that represents the runtime instance of this group.
|
||||
Must be a DNS subdomain.
|
||||
type: string
|
||||
type: object
|
||||
securityContext:
|
||||
description: |-
|
||||
SecurityContext holds pod-level security attributes and common container settings.
|
||||
|
|
@ -7262,7 +7298,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -7430,8 +7466,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
@ -8205,42 +8240,6 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
workloadRef:
|
||||
description: |-
|
||||
WorkloadRef provides a reference to the Workload object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the PodGroup and apply the
|
||||
correct group scheduling policies. The Workload object referenced
|
||||
by this field may not exist at the time the Pod is created.
|
||||
This field is immutable, but a Workload object with the same name
|
||||
may be recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
Name defines the name of the Workload object this Pod belongs to.
|
||||
Workload must be in the same namespace as the Pod.
|
||||
If it doesn't match any existing Workload, the Pod will remain unschedulable
|
||||
until a Workload object is created and observed by the kube-scheduler.
|
||||
It must be a DNS subdomain.
|
||||
type: string
|
||||
podGroup:
|
||||
description: |-
|
||||
PodGroup is the name of the PodGroup within the Workload that this Pod
|
||||
belongs to. If it doesn't match any existing PodGroup within the Workload,
|
||||
the Pod will remain unschedulable until the Workload object is recreated
|
||||
and observed by the kube-scheduler. It must be a DNS label.
|
||||
type: string
|
||||
podGroupReplicaKey:
|
||||
description: |-
|
||||
PodGroupReplicaKey specifies the replica key of the PodGroup to which this
|
||||
Pod belongs. It is used to distinguish pods belonging to different replicas
|
||||
of the same pod group. The pod group policy is applied separately to each replica.
|
||||
When set, it must be a DNS label.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
- podGroup
|
||||
type: object
|
||||
required:
|
||||
- containers
|
||||
type: object
|
||||
|
|
|
|||
|
|
@ -2112,7 +2112,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -3604,7 +3603,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -4070,7 +4068,6 @@ spec:
|
|||
When set to false, a new userns is created for the pod. Setting false is useful for
|
||||
mitigating container breakout vulnerabilities even allowing users to run their
|
||||
containers as root without actually having root privileges on the host.
|
||||
This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
|
||||
type: boolean
|
||||
hostname:
|
||||
description: |-
|
||||
|
|
@ -5181,7 +5178,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -5730,6 +5726,14 @@ spec:
|
|||
|
||||
It adds a name to it that uniquely identifies the ResourceClaim inside the Pod.
|
||||
Containers that need access to the ResourceClaim reference it with this name.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and this Pod
|
||||
belongs to a PodGroup, a PodResourceClaim is matched to a
|
||||
PodGroupResourceClaim if all of their fields are equal (Name,
|
||||
ResourceClaimName, and ResourceClaimTemplateName). A matched claim references
|
||||
a single ResourceClaim shared across all Pods in the PodGroup, reserved for
|
||||
the PodGroup in ResourceClaimStatus.ReservedFor rather than for individual
|
||||
Pods.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
|
|
@ -5755,6 +5759,16 @@ spec:
|
|||
generated component, will be used to form a unique name for the
|
||||
ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and the pod
|
||||
belongs to a PodGroup that defines a PodGroupResourceClaim with the same
|
||||
Name and ResourceClaimTemplateName, this PodResourceClaim resolves to the
|
||||
ResourceClaim generated for the PodGroup. All pods in the group that
|
||||
define an equivalent PodResourceClaim matching the
|
||||
PodGroupResourceClaim's Name and ResourceClaimTemplateName share the same
|
||||
generated ResourceClaim. ResourceClaims generated for a PodGroup are
|
||||
owned by the PodGroup and their lifecycles are tied to the PodGroup
|
||||
instead of any individual pod.
|
||||
|
||||
This field is immutable and no changes will be made to the
|
||||
corresponding ResourceClaim by the control plane after creating the
|
||||
ResourceClaim.
|
||||
|
|
@ -5879,6 +5893,28 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
schedulingGroup:
|
||||
description: |-
|
||||
SchedulingGroup provides a reference to the immediate scheduling runtime
|
||||
grouping object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the group and apply the
|
||||
correct group scheduling policies. The association with a group also
|
||||
impacts other lifecycle aspects of a Pod that are relevant in a wider context
|
||||
of scheduling like preemption, resource attachment, etc. If not specified,
|
||||
the Pod is treated as a single unit in all of these aspects.
|
||||
The group object referenced by this field may not exist at the time the
|
||||
Pod is created.
|
||||
This field is immutable, but a group object with the same name may be
|
||||
recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
podGroupName:
|
||||
description: |-
|
||||
PodGroupName specifies the name of the standalone PodGroup object
|
||||
that represents the runtime instance of this group.
|
||||
Must be a DNS subdomain.
|
||||
type: string
|
||||
type: object
|
||||
securityContext:
|
||||
description: |-
|
||||
SecurityContext holds pod-level security attributes and common container settings.
|
||||
|
|
@ -7265,7 +7301,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -7433,8 +7469,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
@ -8208,42 +8243,6 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
workloadRef:
|
||||
description: |-
|
||||
WorkloadRef provides a reference to the Workload object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the PodGroup and apply the
|
||||
correct group scheduling policies. The Workload object referenced
|
||||
by this field may not exist at the time the Pod is created.
|
||||
This field is immutable, but a Workload object with the same name
|
||||
may be recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
Name defines the name of the Workload object this Pod belongs to.
|
||||
Workload must be in the same namespace as the Pod.
|
||||
If it doesn't match any existing Workload, the Pod will remain unschedulable
|
||||
until a Workload object is created and observed by the kube-scheduler.
|
||||
It must be a DNS subdomain.
|
||||
type: string
|
||||
podGroup:
|
||||
description: |-
|
||||
PodGroup is the name of the PodGroup within the Workload that this Pod
|
||||
belongs to. If it doesn't match any existing PodGroup within the Workload,
|
||||
the Pod will remain unschedulable until the Workload object is recreated
|
||||
and observed by the kube-scheduler. It must be a DNS label.
|
||||
type: string
|
||||
podGroupReplicaKey:
|
||||
description: |-
|
||||
PodGroupReplicaKey specifies the replica key of the PodGroup to which this
|
||||
Pod belongs. It is used to distinguish pods belonging to different replicas
|
||||
of the same pod group. The pod group policy is applied separately to each replica.
|
||||
When set, it must be a DNS label.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
- podGroup
|
||||
type: object
|
||||
required:
|
||||
- containers
|
||||
type: object
|
||||
|
|
|
|||
|
|
@ -2333,7 +2333,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -3904,7 +3903,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -4388,7 +4386,6 @@ spec:
|
|||
When set to false, a new userns is created for the pod. Setting false is useful for
|
||||
mitigating container breakout vulnerabilities even allowing users to run their
|
||||
containers as root without actually having root privileges on the host.
|
||||
This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
|
||||
type: boolean
|
||||
hostname:
|
||||
description: |-
|
||||
|
|
@ -5558,7 +5555,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -6127,6 +6123,14 @@ spec:
|
|||
|
||||
It adds a name to it that uniquely identifies the ResourceClaim inside the Pod.
|
||||
Containers that need access to the ResourceClaim reference it with this name.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and this Pod
|
||||
belongs to a PodGroup, a PodResourceClaim is matched to a
|
||||
PodGroupResourceClaim if all of their fields are equal (Name,
|
||||
ResourceClaimName, and ResourceClaimTemplateName). A matched claim references
|
||||
a single ResourceClaim shared across all Pods in the PodGroup, reserved for
|
||||
the PodGroup in ResourceClaimStatus.ReservedFor rather than for individual
|
||||
Pods.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
|
|
@ -6152,6 +6156,16 @@ spec:
|
|||
generated component, will be used to form a unique name for the
|
||||
ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and the pod
|
||||
belongs to a PodGroup that defines a PodGroupResourceClaim with the same
|
||||
Name and ResourceClaimTemplateName, this PodResourceClaim resolves to the
|
||||
ResourceClaim generated for the PodGroup. All pods in the group that
|
||||
define an equivalent PodResourceClaim matching the
|
||||
PodGroupResourceClaim's Name and ResourceClaimTemplateName share the same
|
||||
generated ResourceClaim. ResourceClaims generated for a PodGroup are
|
||||
owned by the PodGroup and their lifecycles are tied to the PodGroup
|
||||
instead of any individual pod.
|
||||
|
||||
This field is immutable and no changes will be made to the
|
||||
corresponding ResourceClaim by the control plane after creating the
|
||||
ResourceClaim.
|
||||
|
|
@ -6277,6 +6291,28 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
schedulingGroup:
|
||||
description: |-
|
||||
SchedulingGroup provides a reference to the immediate scheduling runtime
|
||||
grouping object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the group and apply the
|
||||
correct group scheduling policies. The association with a group also
|
||||
impacts other lifecycle aspects of a Pod that are relevant in a wider context
|
||||
of scheduling like preemption, resource attachment, etc. If not specified,
|
||||
the Pod is treated as a single unit in all of these aspects.
|
||||
The group object referenced by this field may not exist at the time the
|
||||
Pod is created.
|
||||
This field is immutable, but a group object with the same name may be
|
||||
recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
podGroupName:
|
||||
description: |-
|
||||
PodGroupName specifies the name of the standalone PodGroup object
|
||||
that represents the runtime instance of this group.
|
||||
Must be a DNS subdomain.
|
||||
type: string
|
||||
type: object
|
||||
securityContext:
|
||||
description: |-
|
||||
SecurityContext holds pod-level security attributes and common container settings.
|
||||
|
|
@ -7722,7 +7758,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -7894,8 +7930,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
@ -8718,42 +8753,6 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
workloadRef:
|
||||
description: |-
|
||||
WorkloadRef provides a reference to the Workload object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the PodGroup and apply the
|
||||
correct group scheduling policies. The Workload object referenced
|
||||
by this field may not exist at the time the Pod is created.
|
||||
This field is immutable, but a Workload object with the same name
|
||||
may be recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
Name defines the name of the Workload object this Pod belongs to.
|
||||
Workload must be in the same namespace as the Pod.
|
||||
If it doesn't match any existing Workload, the Pod will remain unschedulable
|
||||
until a Workload object is created and observed by the kube-scheduler.
|
||||
It must be a DNS subdomain.
|
||||
type: string
|
||||
podGroup:
|
||||
description: |-
|
||||
PodGroup is the name of the PodGroup within the Workload that this Pod
|
||||
belongs to. If it doesn't match any existing PodGroup within the Workload,
|
||||
the Pod will remain unschedulable until the Workload object is recreated
|
||||
and observed by the kube-scheduler. It must be a DNS label.
|
||||
type: string
|
||||
podGroupReplicaKey:
|
||||
description: |-
|
||||
PodGroupReplicaKey specifies the replica key of the PodGroup to which this
|
||||
Pod belongs. It is used to distinguish pods belonging to different replicas
|
||||
of the same pod group. The pod group policy is applied separately to each replica.
|
||||
When set, it must be a DNS label.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
- podGroup
|
||||
type: object
|
||||
required:
|
||||
- containers
|
||||
type: object
|
||||
|
|
|
|||
|
|
@ -2212,7 +2212,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -3707,7 +3706,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -4173,7 +4171,6 @@ spec:
|
|||
When set to false, a new userns is created for the pod. Setting false is useful for
|
||||
mitigating container breakout vulnerabilities even allowing users to run their
|
||||
containers as root without actually having root privileges on the host.
|
||||
This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
|
||||
type: boolean
|
||||
hostname:
|
||||
description: |-
|
||||
|
|
@ -5287,7 +5284,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -5836,6 +5832,14 @@ spec:
|
|||
|
||||
It adds a name to it that uniquely identifies the ResourceClaim inside the Pod.
|
||||
Containers that need access to the ResourceClaim reference it with this name.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and this Pod
|
||||
belongs to a PodGroup, a PodResourceClaim is matched to a
|
||||
PodGroupResourceClaim if all of their fields are equal (Name,
|
||||
ResourceClaimName, and ResourceClaimTemplateName). A matched claim references
|
||||
a single ResourceClaim shared across all Pods in the PodGroup, reserved for
|
||||
the PodGroup in ResourceClaimStatus.ReservedFor rather than for individual
|
||||
Pods.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
|
|
@ -5861,6 +5865,16 @@ spec:
|
|||
generated component, will be used to form a unique name for the
|
||||
ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and the pod
|
||||
belongs to a PodGroup that defines a PodGroupResourceClaim with the same
|
||||
Name and ResourceClaimTemplateName, this PodResourceClaim resolves to the
|
||||
ResourceClaim generated for the PodGroup. All pods in the group that
|
||||
define an equivalent PodResourceClaim matching the
|
||||
PodGroupResourceClaim's Name and ResourceClaimTemplateName share the same
|
||||
generated ResourceClaim. ResourceClaims generated for a PodGroup are
|
||||
owned by the PodGroup and their lifecycles are tied to the PodGroup
|
||||
instead of any individual pod.
|
||||
|
||||
This field is immutable and no changes will be made to the
|
||||
corresponding ResourceClaim by the control plane after creating the
|
||||
ResourceClaim.
|
||||
|
|
@ -5985,6 +5999,28 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
schedulingGroup:
|
||||
description: |-
|
||||
SchedulingGroup provides a reference to the immediate scheduling runtime
|
||||
grouping object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the group and apply the
|
||||
correct group scheduling policies. The association with a group also
|
||||
impacts other lifecycle aspects of a Pod that are relevant in a wider context
|
||||
of scheduling like preemption, resource attachment, etc. If not specified,
|
||||
the Pod is treated as a single unit in all of these aspects.
|
||||
The group object referenced by this field may not exist at the time the
|
||||
Pod is created.
|
||||
This field is immutable, but a group object with the same name may be
|
||||
recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
podGroupName:
|
||||
description: |-
|
||||
PodGroupName specifies the name of the standalone PodGroup object
|
||||
that represents the runtime instance of this group.
|
||||
Must be a DNS subdomain.
|
||||
type: string
|
||||
type: object
|
||||
securityContext:
|
||||
description: |-
|
||||
SecurityContext holds pod-level security attributes and common container settings.
|
||||
|
|
@ -7371,7 +7407,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -7539,8 +7575,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
@ -8314,42 +8349,6 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
workloadRef:
|
||||
description: |-
|
||||
WorkloadRef provides a reference to the Workload object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the PodGroup and apply the
|
||||
correct group scheduling policies. The Workload object referenced
|
||||
by this field may not exist at the time the Pod is created.
|
||||
This field is immutable, but a Workload object with the same name
|
||||
may be recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
Name defines the name of the Workload object this Pod belongs to.
|
||||
Workload must be in the same namespace as the Pod.
|
||||
If it doesn't match any existing Workload, the Pod will remain unschedulable
|
||||
until a Workload object is created and observed by the kube-scheduler.
|
||||
It must be a DNS subdomain.
|
||||
type: string
|
||||
podGroup:
|
||||
description: |-
|
||||
PodGroup is the name of the PodGroup within the Workload that this Pod
|
||||
belongs to. If it doesn't match any existing PodGroup within the Workload,
|
||||
the Pod will remain unschedulable until the Workload object is recreated
|
||||
and observed by the kube-scheduler. It must be a DNS label.
|
||||
type: string
|
||||
podGroupReplicaKey:
|
||||
description: |-
|
||||
PodGroupReplicaKey specifies the replica key of the PodGroup to which this
|
||||
Pod belongs. It is used to distinguish pods belonging to different replicas
|
||||
of the same pod group. The pod group policy is applied separately to each replica.
|
||||
When set, it must be a DNS label.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
- podGroup
|
||||
type: object
|
||||
required:
|
||||
- containers
|
||||
type: object
|
||||
|
|
@ -10361,7 +10360,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -11853,7 +11851,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -12319,7 +12316,6 @@ spec:
|
|||
When set to false, a new userns is created for the pod. Setting false is useful for
|
||||
mitigating container breakout vulnerabilities even allowing users to run their
|
||||
containers as root without actually having root privileges on the host.
|
||||
This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
|
||||
type: boolean
|
||||
hostname:
|
||||
description: |-
|
||||
|
|
@ -13430,7 +13426,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -13979,6 +13974,14 @@ spec:
|
|||
|
||||
It adds a name to it that uniquely identifies the ResourceClaim inside the Pod.
|
||||
Containers that need access to the ResourceClaim reference it with this name.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and this Pod
|
||||
belongs to a PodGroup, a PodResourceClaim is matched to a
|
||||
PodGroupResourceClaim if all of their fields are equal (Name,
|
||||
ResourceClaimName, and ResourceClaimTemplateName). A matched claim references
|
||||
a single ResourceClaim shared across all Pods in the PodGroup, reserved for
|
||||
the PodGroup in ResourceClaimStatus.ReservedFor rather than for individual
|
||||
Pods.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
|
|
@ -14004,6 +14007,16 @@ spec:
|
|||
generated component, will be used to form a unique name for the
|
||||
ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and the pod
|
||||
belongs to a PodGroup that defines a PodGroupResourceClaim with the same
|
||||
Name and ResourceClaimTemplateName, this PodResourceClaim resolves to the
|
||||
ResourceClaim generated for the PodGroup. All pods in the group that
|
||||
define an equivalent PodResourceClaim matching the
|
||||
PodGroupResourceClaim's Name and ResourceClaimTemplateName share the same
|
||||
generated ResourceClaim. ResourceClaims generated for a PodGroup are
|
||||
owned by the PodGroup and their lifecycles are tied to the PodGroup
|
||||
instead of any individual pod.
|
||||
|
||||
This field is immutable and no changes will be made to the
|
||||
corresponding ResourceClaim by the control plane after creating the
|
||||
ResourceClaim.
|
||||
|
|
@ -14125,6 +14138,28 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
schedulingGroup:
|
||||
description: |-
|
||||
SchedulingGroup provides a reference to the immediate scheduling runtime
|
||||
grouping object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the group and apply the
|
||||
correct group scheduling policies. The association with a group also
|
||||
impacts other lifecycle aspects of a Pod that are relevant in a wider context
|
||||
of scheduling like preemption, resource attachment, etc. If not specified,
|
||||
the Pod is treated as a single unit in all of these aspects.
|
||||
The group object referenced by this field may not exist at the time the
|
||||
Pod is created.
|
||||
This field is immutable, but a group object with the same name may be
|
||||
recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
podGroupName:
|
||||
description: |-
|
||||
PodGroupName specifies the name of the standalone PodGroup object
|
||||
that represents the runtime instance of this group.
|
||||
Must be a DNS subdomain.
|
||||
type: string
|
||||
type: object
|
||||
securityContext:
|
||||
description: |-
|
||||
SecurityContext holds pod-level security attributes and common container settings.
|
||||
|
|
@ -15511,7 +15546,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -15679,8 +15714,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
@ -16454,42 +16488,6 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
workloadRef:
|
||||
description: |-
|
||||
WorkloadRef provides a reference to the Workload object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the PodGroup and apply the
|
||||
correct group scheduling policies. The Workload object referenced
|
||||
by this field may not exist at the time the Pod is created.
|
||||
This field is immutable, but a Workload object with the same name
|
||||
may be recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
Name defines the name of the Workload object this Pod belongs to.
|
||||
Workload must be in the same namespace as the Pod.
|
||||
If it doesn't match any existing Workload, the Pod will remain unschedulable
|
||||
until a Workload object is created and observed by the kube-scheduler.
|
||||
It must be a DNS subdomain.
|
||||
type: string
|
||||
podGroup:
|
||||
description: |-
|
||||
PodGroup is the name of the PodGroup within the Workload that this Pod
|
||||
belongs to. If it doesn't match any existing PodGroup within the Workload,
|
||||
the Pod will remain unschedulable until the Workload object is recreated
|
||||
and observed by the kube-scheduler. It must be a DNS label.
|
||||
type: string
|
||||
podGroupReplicaKey:
|
||||
description: |-
|
||||
PodGroupReplicaKey specifies the replica key of the PodGroup to which this
|
||||
Pod belongs. It is used to distinguish pods belonging to different replicas
|
||||
of the same pod group. The pod group policy is applied separately to each replica.
|
||||
When set, it must be a DNS label.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
- podGroup
|
||||
type: object
|
||||
required:
|
||||
- containers
|
||||
type: object
|
||||
|
|
|
|||
|
|
@ -2109,7 +2109,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -3601,7 +3600,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -4067,7 +4065,6 @@ spec:
|
|||
When set to false, a new userns is created for the pod. Setting false is useful for
|
||||
mitigating container breakout vulnerabilities even allowing users to run their
|
||||
containers as root without actually having root privileges on the host.
|
||||
This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
|
||||
type: boolean
|
||||
hostname:
|
||||
description: |-
|
||||
|
|
@ -5178,7 +5175,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -5727,6 +5723,14 @@ spec:
|
|||
|
||||
It adds a name to it that uniquely identifies the ResourceClaim inside the Pod.
|
||||
Containers that need access to the ResourceClaim reference it with this name.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and this Pod
|
||||
belongs to a PodGroup, a PodResourceClaim is matched to a
|
||||
PodGroupResourceClaim if all of their fields are equal (Name,
|
||||
ResourceClaimName, and ResourceClaimTemplateName). A matched claim references
|
||||
a single ResourceClaim shared across all Pods in the PodGroup, reserved for
|
||||
the PodGroup in ResourceClaimStatus.ReservedFor rather than for individual
|
||||
Pods.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
|
|
@ -5752,6 +5756,16 @@ spec:
|
|||
generated component, will be used to form a unique name for the
|
||||
ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and the pod
|
||||
belongs to a PodGroup that defines a PodGroupResourceClaim with the same
|
||||
Name and ResourceClaimTemplateName, this PodResourceClaim resolves to the
|
||||
ResourceClaim generated for the PodGroup. All pods in the group that
|
||||
define an equivalent PodResourceClaim matching the
|
||||
PodGroupResourceClaim's Name and ResourceClaimTemplateName share the same
|
||||
generated ResourceClaim. ResourceClaims generated for a PodGroup are
|
||||
owned by the PodGroup and their lifecycles are tied to the PodGroup
|
||||
instead of any individual pod.
|
||||
|
||||
This field is immutable and no changes will be made to the
|
||||
corresponding ResourceClaim by the control plane after creating the
|
||||
ResourceClaim.
|
||||
|
|
@ -5876,6 +5890,28 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
schedulingGroup:
|
||||
description: |-
|
||||
SchedulingGroup provides a reference to the immediate scheduling runtime
|
||||
grouping object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the group and apply the
|
||||
correct group scheduling policies. The association with a group also
|
||||
impacts other lifecycle aspects of a Pod that are relevant in a wider context
|
||||
of scheduling like preemption, resource attachment, etc. If not specified,
|
||||
the Pod is treated as a single unit in all of these aspects.
|
||||
The group object referenced by this field may not exist at the time the
|
||||
Pod is created.
|
||||
This field is immutable, but a group object with the same name may be
|
||||
recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
podGroupName:
|
||||
description: |-
|
||||
PodGroupName specifies the name of the standalone PodGroup object
|
||||
that represents the runtime instance of this group.
|
||||
Must be a DNS subdomain.
|
||||
type: string
|
||||
type: object
|
||||
securityContext:
|
||||
description: |-
|
||||
SecurityContext holds pod-level security attributes and common container settings.
|
||||
|
|
@ -7262,7 +7298,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -7430,8 +7466,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
@ -8205,42 +8240,6 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
workloadRef:
|
||||
description: |-
|
||||
WorkloadRef provides a reference to the Workload object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the PodGroup and apply the
|
||||
correct group scheduling policies. The Workload object referenced
|
||||
by this field may not exist at the time the Pod is created.
|
||||
This field is immutable, but a Workload object with the same name
|
||||
may be recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
Name defines the name of the Workload object this Pod belongs to.
|
||||
Workload must be in the same namespace as the Pod.
|
||||
If it doesn't match any existing Workload, the Pod will remain unschedulable
|
||||
until a Workload object is created and observed by the kube-scheduler.
|
||||
It must be a DNS subdomain.
|
||||
type: string
|
||||
podGroup:
|
||||
description: |-
|
||||
PodGroup is the name of the PodGroup within the Workload that this Pod
|
||||
belongs to. If it doesn't match any existing PodGroup within the Workload,
|
||||
the Pod will remain unschedulable until the Workload object is recreated
|
||||
and observed by the kube-scheduler. It must be a DNS label.
|
||||
type: string
|
||||
podGroupReplicaKey:
|
||||
description: |-
|
||||
PodGroupReplicaKey specifies the replica key of the PodGroup to which this
|
||||
Pod belongs. It is used to distinguish pods belonging to different replicas
|
||||
of the same pod group. The pod group policy is applied separately to each replica.
|
||||
When set, it must be a DNS label.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
- podGroup
|
||||
type: object
|
||||
required:
|
||||
- containers
|
||||
type: object
|
||||
|
|
|
|||
|
|
@ -2112,7 +2112,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -3604,7 +3603,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -4070,7 +4068,6 @@ spec:
|
|||
When set to false, a new userns is created for the pod. Setting false is useful for
|
||||
mitigating container breakout vulnerabilities even allowing users to run their
|
||||
containers as root without actually having root privileges on the host.
|
||||
This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
|
||||
type: boolean
|
||||
hostname:
|
||||
description: |-
|
||||
|
|
@ -5181,7 +5178,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -5730,6 +5726,14 @@ spec:
|
|||
|
||||
It adds a name to it that uniquely identifies the ResourceClaim inside the Pod.
|
||||
Containers that need access to the ResourceClaim reference it with this name.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and this Pod
|
||||
belongs to a PodGroup, a PodResourceClaim is matched to a
|
||||
PodGroupResourceClaim if all of their fields are equal (Name,
|
||||
ResourceClaimName, and ResourceClaimTemplateName). A matched claim references
|
||||
a single ResourceClaim shared across all Pods in the PodGroup, reserved for
|
||||
the PodGroup in ResourceClaimStatus.ReservedFor rather than for individual
|
||||
Pods.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
|
|
@ -5755,6 +5759,16 @@ spec:
|
|||
generated component, will be used to form a unique name for the
|
||||
ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and the pod
|
||||
belongs to a PodGroup that defines a PodGroupResourceClaim with the same
|
||||
Name and ResourceClaimTemplateName, this PodResourceClaim resolves to the
|
||||
ResourceClaim generated for the PodGroup. All pods in the group that
|
||||
define an equivalent PodResourceClaim matching the
|
||||
PodGroupResourceClaim's Name and ResourceClaimTemplateName share the same
|
||||
generated ResourceClaim. ResourceClaims generated for a PodGroup are
|
||||
owned by the PodGroup and their lifecycles are tied to the PodGroup
|
||||
instead of any individual pod.
|
||||
|
||||
This field is immutable and no changes will be made to the
|
||||
corresponding ResourceClaim by the control plane after creating the
|
||||
ResourceClaim.
|
||||
|
|
@ -5879,6 +5893,28 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
schedulingGroup:
|
||||
description: |-
|
||||
SchedulingGroup provides a reference to the immediate scheduling runtime
|
||||
grouping object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the group and apply the
|
||||
correct group scheduling policies. The association with a group also
|
||||
impacts other lifecycle aspects of a Pod that are relevant in a wider context
|
||||
of scheduling like preemption, resource attachment, etc. If not specified,
|
||||
the Pod is treated as a single unit in all of these aspects.
|
||||
The group object referenced by this field may not exist at the time the
|
||||
Pod is created.
|
||||
This field is immutable, but a group object with the same name may be
|
||||
recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
podGroupName:
|
||||
description: |-
|
||||
PodGroupName specifies the name of the standalone PodGroup object
|
||||
that represents the runtime instance of this group.
|
||||
Must be a DNS subdomain.
|
||||
type: string
|
||||
type: object
|
||||
securityContext:
|
||||
description: |-
|
||||
SecurityContext holds pod-level security attributes and common container settings.
|
||||
|
|
@ -7265,7 +7301,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -7433,8 +7469,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
@ -8208,42 +8243,6 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
workloadRef:
|
||||
description: |-
|
||||
WorkloadRef provides a reference to the Workload object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the PodGroup and apply the
|
||||
correct group scheduling policies. The Workload object referenced
|
||||
by this field may not exist at the time the Pod is created.
|
||||
This field is immutable, but a Workload object with the same name
|
||||
may be recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
Name defines the name of the Workload object this Pod belongs to.
|
||||
Workload must be in the same namespace as the Pod.
|
||||
If it doesn't match any existing Workload, the Pod will remain unschedulable
|
||||
until a Workload object is created and observed by the kube-scheduler.
|
||||
It must be a DNS subdomain.
|
||||
type: string
|
||||
podGroup:
|
||||
description: |-
|
||||
PodGroup is the name of the PodGroup within the Workload that this Pod
|
||||
belongs to. If it doesn't match any existing PodGroup within the Workload,
|
||||
the Pod will remain unschedulable until the Workload object is recreated
|
||||
and observed by the kube-scheduler. It must be a DNS label.
|
||||
type: string
|
||||
podGroupReplicaKey:
|
||||
description: |-
|
||||
PodGroupReplicaKey specifies the replica key of the PodGroup to which this
|
||||
Pod belongs. It is used to distinguish pods belonging to different replicas
|
||||
of the same pod group. The pod group policy is applied separately to each replica.
|
||||
When set, it must be a DNS label.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
- podGroup
|
||||
type: object
|
||||
required:
|
||||
- containers
|
||||
type: object
|
||||
|
|
|
|||
|
|
@ -2333,7 +2333,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -3904,7 +3903,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -4388,7 +4386,6 @@ spec:
|
|||
When set to false, a new userns is created for the pod. Setting false is useful for
|
||||
mitigating container breakout vulnerabilities even allowing users to run their
|
||||
containers as root without actually having root privileges on the host.
|
||||
This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
|
||||
type: boolean
|
||||
hostname:
|
||||
description: |-
|
||||
|
|
@ -5558,7 +5555,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -6127,6 +6123,14 @@ spec:
|
|||
|
||||
It adds a name to it that uniquely identifies the ResourceClaim inside the Pod.
|
||||
Containers that need access to the ResourceClaim reference it with this name.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and this Pod
|
||||
belongs to a PodGroup, a PodResourceClaim is matched to a
|
||||
PodGroupResourceClaim if all of their fields are equal (Name,
|
||||
ResourceClaimName, and ResourceClaimTemplateName). A matched claim references
|
||||
a single ResourceClaim shared across all Pods in the PodGroup, reserved for
|
||||
the PodGroup in ResourceClaimStatus.ReservedFor rather than for individual
|
||||
Pods.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
|
|
@ -6152,6 +6156,16 @@ spec:
|
|||
generated component, will be used to form a unique name for the
|
||||
ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and the pod
|
||||
belongs to a PodGroup that defines a PodGroupResourceClaim with the same
|
||||
Name and ResourceClaimTemplateName, this PodResourceClaim resolves to the
|
||||
ResourceClaim generated for the PodGroup. All pods in the group that
|
||||
define an equivalent PodResourceClaim matching the
|
||||
PodGroupResourceClaim's Name and ResourceClaimTemplateName share the same
|
||||
generated ResourceClaim. ResourceClaims generated for a PodGroup are
|
||||
owned by the PodGroup and their lifecycles are tied to the PodGroup
|
||||
instead of any individual pod.
|
||||
|
||||
This field is immutable and no changes will be made to the
|
||||
corresponding ResourceClaim by the control plane after creating the
|
||||
ResourceClaim.
|
||||
|
|
@ -6277,6 +6291,28 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
schedulingGroup:
|
||||
description: |-
|
||||
SchedulingGroup provides a reference to the immediate scheduling runtime
|
||||
grouping object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the group and apply the
|
||||
correct group scheduling policies. The association with a group also
|
||||
impacts other lifecycle aspects of a Pod that are relevant in a wider context
|
||||
of scheduling like preemption, resource attachment, etc. If not specified,
|
||||
the Pod is treated as a single unit in all of these aspects.
|
||||
The group object referenced by this field may not exist at the time the
|
||||
Pod is created.
|
||||
This field is immutable, but a group object with the same name may be
|
||||
recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
podGroupName:
|
||||
description: |-
|
||||
PodGroupName specifies the name of the standalone PodGroup object
|
||||
that represents the runtime instance of this group.
|
||||
Must be a DNS subdomain.
|
||||
type: string
|
||||
type: object
|
||||
securityContext:
|
||||
description: |-
|
||||
SecurityContext holds pod-level security attributes and common container settings.
|
||||
|
|
@ -7722,7 +7758,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -7894,8 +7930,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
@ -8718,42 +8753,6 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
workloadRef:
|
||||
description: |-
|
||||
WorkloadRef provides a reference to the Workload object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the PodGroup and apply the
|
||||
correct group scheduling policies. The Workload object referenced
|
||||
by this field may not exist at the time the Pod is created.
|
||||
This field is immutable, but a Workload object with the same name
|
||||
may be recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
Name defines the name of the Workload object this Pod belongs to.
|
||||
Workload must be in the same namespace as the Pod.
|
||||
If it doesn't match any existing Workload, the Pod will remain unschedulable
|
||||
until a Workload object is created and observed by the kube-scheduler.
|
||||
It must be a DNS subdomain.
|
||||
type: string
|
||||
podGroup:
|
||||
description: |-
|
||||
PodGroup is the name of the PodGroup within the Workload that this Pod
|
||||
belongs to. If it doesn't match any existing PodGroup within the Workload,
|
||||
the Pod will remain unschedulable until the Workload object is recreated
|
||||
and observed by the kube-scheduler. It must be a DNS label.
|
||||
type: string
|
||||
podGroupReplicaKey:
|
||||
description: |-
|
||||
PodGroupReplicaKey specifies the replica key of the PodGroup to which this
|
||||
Pod belongs. It is used to distinguish pods belonging to different replicas
|
||||
of the same pod group. The pod group policy is applied separately to each replica.
|
||||
When set, it must be a DNS label.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
- podGroup
|
||||
type: object
|
||||
required:
|
||||
- containers
|
||||
type: object
|
||||
|
|
|
|||
|
|
@ -2212,7 +2212,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -3707,7 +3706,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -4173,7 +4171,6 @@ spec:
|
|||
When set to false, a new userns is created for the pod. Setting false is useful for
|
||||
mitigating container breakout vulnerabilities even allowing users to run their
|
||||
containers as root without actually having root privileges on the host.
|
||||
This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
|
||||
type: boolean
|
||||
hostname:
|
||||
description: |-
|
||||
|
|
@ -5287,7 +5284,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -5836,6 +5832,14 @@ spec:
|
|||
|
||||
It adds a name to it that uniquely identifies the ResourceClaim inside the Pod.
|
||||
Containers that need access to the ResourceClaim reference it with this name.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and this Pod
|
||||
belongs to a PodGroup, a PodResourceClaim is matched to a
|
||||
PodGroupResourceClaim if all of their fields are equal (Name,
|
||||
ResourceClaimName, and ResourceClaimTemplateName). A matched claim references
|
||||
a single ResourceClaim shared across all Pods in the PodGroup, reserved for
|
||||
the PodGroup in ResourceClaimStatus.ReservedFor rather than for individual
|
||||
Pods.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
|
|
@ -5861,6 +5865,16 @@ spec:
|
|||
generated component, will be used to form a unique name for the
|
||||
ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and the pod
|
||||
belongs to a PodGroup that defines a PodGroupResourceClaim with the same
|
||||
Name and ResourceClaimTemplateName, this PodResourceClaim resolves to the
|
||||
ResourceClaim generated for the PodGroup. All pods in the group that
|
||||
define an equivalent PodResourceClaim matching the
|
||||
PodGroupResourceClaim's Name and ResourceClaimTemplateName share the same
|
||||
generated ResourceClaim. ResourceClaims generated for a PodGroup are
|
||||
owned by the PodGroup and their lifecycles are tied to the PodGroup
|
||||
instead of any individual pod.
|
||||
|
||||
This field is immutable and no changes will be made to the
|
||||
corresponding ResourceClaim by the control plane after creating the
|
||||
ResourceClaim.
|
||||
|
|
@ -5985,6 +5999,28 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
schedulingGroup:
|
||||
description: |-
|
||||
SchedulingGroup provides a reference to the immediate scheduling runtime
|
||||
grouping object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the group and apply the
|
||||
correct group scheduling policies. The association with a group also
|
||||
impacts other lifecycle aspects of a Pod that are relevant in a wider context
|
||||
of scheduling like preemption, resource attachment, etc. If not specified,
|
||||
the Pod is treated as a single unit in all of these aspects.
|
||||
The group object referenced by this field may not exist at the time the
|
||||
Pod is created.
|
||||
This field is immutable, but a group object with the same name may be
|
||||
recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
podGroupName:
|
||||
description: |-
|
||||
PodGroupName specifies the name of the standalone PodGroup object
|
||||
that represents the runtime instance of this group.
|
||||
Must be a DNS subdomain.
|
||||
type: string
|
||||
type: object
|
||||
securityContext:
|
||||
description: |-
|
||||
SecurityContext holds pod-level security attributes and common container settings.
|
||||
|
|
@ -7371,7 +7407,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -7539,8 +7575,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
@ -8314,42 +8349,6 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
workloadRef:
|
||||
description: |-
|
||||
WorkloadRef provides a reference to the Workload object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the PodGroup and apply the
|
||||
correct group scheduling policies. The Workload object referenced
|
||||
by this field may not exist at the time the Pod is created.
|
||||
This field is immutable, but a Workload object with the same name
|
||||
may be recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
Name defines the name of the Workload object this Pod belongs to.
|
||||
Workload must be in the same namespace as the Pod.
|
||||
If it doesn't match any existing Workload, the Pod will remain unschedulable
|
||||
until a Workload object is created and observed by the kube-scheduler.
|
||||
It must be a DNS subdomain.
|
||||
type: string
|
||||
podGroup:
|
||||
description: |-
|
||||
PodGroup is the name of the PodGroup within the Workload that this Pod
|
||||
belongs to. If it doesn't match any existing PodGroup within the Workload,
|
||||
the Pod will remain unschedulable until the Workload object is recreated
|
||||
and observed by the kube-scheduler. It must be a DNS label.
|
||||
type: string
|
||||
podGroupReplicaKey:
|
||||
description: |-
|
||||
PodGroupReplicaKey specifies the replica key of the PodGroup to which this
|
||||
Pod belongs. It is used to distinguish pods belonging to different replicas
|
||||
of the same pod group. The pod group policy is applied separately to each replica.
|
||||
When set, it must be a DNS label.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
- podGroup
|
||||
type: object
|
||||
required:
|
||||
- containers
|
||||
type: object
|
||||
|
|
@ -10361,7 +10360,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -11853,7 +11851,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -12319,7 +12316,6 @@ spec:
|
|||
When set to false, a new userns is created for the pod. Setting false is useful for
|
||||
mitigating container breakout vulnerabilities even allowing users to run their
|
||||
containers as root without actually having root privileges on the host.
|
||||
This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
|
||||
type: boolean
|
||||
hostname:
|
||||
description: |-
|
||||
|
|
@ -13430,7 +13426,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -13979,6 +13974,14 @@ spec:
|
|||
|
||||
It adds a name to it that uniquely identifies the ResourceClaim inside the Pod.
|
||||
Containers that need access to the ResourceClaim reference it with this name.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and this Pod
|
||||
belongs to a PodGroup, a PodResourceClaim is matched to a
|
||||
PodGroupResourceClaim if all of their fields are equal (Name,
|
||||
ResourceClaimName, and ResourceClaimTemplateName). A matched claim references
|
||||
a single ResourceClaim shared across all Pods in the PodGroup, reserved for
|
||||
the PodGroup in ResourceClaimStatus.ReservedFor rather than for individual
|
||||
Pods.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
|
|
@ -14004,6 +14007,16 @@ spec:
|
|||
generated component, will be used to form a unique name for the
|
||||
ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and the pod
|
||||
belongs to a PodGroup that defines a PodGroupResourceClaim with the same
|
||||
Name and ResourceClaimTemplateName, this PodResourceClaim resolves to the
|
||||
ResourceClaim generated for the PodGroup. All pods in the group that
|
||||
define an equivalent PodResourceClaim matching the
|
||||
PodGroupResourceClaim's Name and ResourceClaimTemplateName share the same
|
||||
generated ResourceClaim. ResourceClaims generated for a PodGroup are
|
||||
owned by the PodGroup and their lifecycles are tied to the PodGroup
|
||||
instead of any individual pod.
|
||||
|
||||
This field is immutable and no changes will be made to the
|
||||
corresponding ResourceClaim by the control plane after creating the
|
||||
ResourceClaim.
|
||||
|
|
@ -14125,6 +14138,28 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
schedulingGroup:
|
||||
description: |-
|
||||
SchedulingGroup provides a reference to the immediate scheduling runtime
|
||||
grouping object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the group and apply the
|
||||
correct group scheduling policies. The association with a group also
|
||||
impacts other lifecycle aspects of a Pod that are relevant in a wider context
|
||||
of scheduling like preemption, resource attachment, etc. If not specified,
|
||||
the Pod is treated as a single unit in all of these aspects.
|
||||
The group object referenced by this field may not exist at the time the
|
||||
Pod is created.
|
||||
This field is immutable, but a group object with the same name may be
|
||||
recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
podGroupName:
|
||||
description: |-
|
||||
PodGroupName specifies the name of the standalone PodGroup object
|
||||
that represents the runtime instance of this group.
|
||||
Must be a DNS subdomain.
|
||||
type: string
|
||||
type: object
|
||||
securityContext:
|
||||
description: |-
|
||||
SecurityContext holds pod-level security attributes and common container settings.
|
||||
|
|
@ -15511,7 +15546,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -15679,8 +15714,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
@ -16454,42 +16488,6 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
workloadRef:
|
||||
description: |-
|
||||
WorkloadRef provides a reference to the Workload object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the PodGroup and apply the
|
||||
correct group scheduling policies. The Workload object referenced
|
||||
by this field may not exist at the time the Pod is created.
|
||||
This field is immutable, but a Workload object with the same name
|
||||
may be recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
Name defines the name of the Workload object this Pod belongs to.
|
||||
Workload must be in the same namespace as the Pod.
|
||||
If it doesn't match any existing Workload, the Pod will remain unschedulable
|
||||
until a Workload object is created and observed by the kube-scheduler.
|
||||
It must be a DNS subdomain.
|
||||
type: string
|
||||
podGroup:
|
||||
description: |-
|
||||
PodGroup is the name of the PodGroup within the Workload that this Pod
|
||||
belongs to. If it doesn't match any existing PodGroup within the Workload,
|
||||
the Pod will remain unschedulable until the Workload object is recreated
|
||||
and observed by the kube-scheduler. It must be a DNS label.
|
||||
type: string
|
||||
podGroupReplicaKey:
|
||||
description: |-
|
||||
PodGroupReplicaKey specifies the replica key of the PodGroup to which this
|
||||
Pod belongs. It is used to distinguish pods belonging to different replicas
|
||||
of the same pod group. The pod group policy is applied separately to each replica.
|
||||
When set, it must be a DNS label.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
- podGroup
|
||||
type: object
|
||||
required:
|
||||
- containers
|
||||
type: object
|
||||
|
|
|
|||
|
|
@ -2109,7 +2109,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -3601,7 +3600,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -4067,7 +4065,6 @@ spec:
|
|||
When set to false, a new userns is created for the pod. Setting false is useful for
|
||||
mitigating container breakout vulnerabilities even allowing users to run their
|
||||
containers as root without actually having root privileges on the host.
|
||||
This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
|
||||
type: boolean
|
||||
hostname:
|
||||
description: |-
|
||||
|
|
@ -5178,7 +5175,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -5727,6 +5723,14 @@ spec:
|
|||
|
||||
It adds a name to it that uniquely identifies the ResourceClaim inside the Pod.
|
||||
Containers that need access to the ResourceClaim reference it with this name.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and this Pod
|
||||
belongs to a PodGroup, a PodResourceClaim is matched to a
|
||||
PodGroupResourceClaim if all of their fields are equal (Name,
|
||||
ResourceClaimName, and ResourceClaimTemplateName). A matched claim references
|
||||
a single ResourceClaim shared across all Pods in the PodGroup, reserved for
|
||||
the PodGroup in ResourceClaimStatus.ReservedFor rather than for individual
|
||||
Pods.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
|
|
@ -5752,6 +5756,16 @@ spec:
|
|||
generated component, will be used to form a unique name for the
|
||||
ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and the pod
|
||||
belongs to a PodGroup that defines a PodGroupResourceClaim with the same
|
||||
Name and ResourceClaimTemplateName, this PodResourceClaim resolves to the
|
||||
ResourceClaim generated for the PodGroup. All pods in the group that
|
||||
define an equivalent PodResourceClaim matching the
|
||||
PodGroupResourceClaim's Name and ResourceClaimTemplateName share the same
|
||||
generated ResourceClaim. ResourceClaims generated for a PodGroup are
|
||||
owned by the PodGroup and their lifecycles are tied to the PodGroup
|
||||
instead of any individual pod.
|
||||
|
||||
This field is immutable and no changes will be made to the
|
||||
corresponding ResourceClaim by the control plane after creating the
|
||||
ResourceClaim.
|
||||
|
|
@ -5876,6 +5890,28 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
schedulingGroup:
|
||||
description: |-
|
||||
SchedulingGroup provides a reference to the immediate scheduling runtime
|
||||
grouping object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the group and apply the
|
||||
correct group scheduling policies. The association with a group also
|
||||
impacts other lifecycle aspects of a Pod that are relevant in a wider context
|
||||
of scheduling like preemption, resource attachment, etc. If not specified,
|
||||
the Pod is treated as a single unit in all of these aspects.
|
||||
The group object referenced by this field may not exist at the time the
|
||||
Pod is created.
|
||||
This field is immutable, but a group object with the same name may be
|
||||
recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
podGroupName:
|
||||
description: |-
|
||||
PodGroupName specifies the name of the standalone PodGroup object
|
||||
that represents the runtime instance of this group.
|
||||
Must be a DNS subdomain.
|
||||
type: string
|
||||
type: object
|
||||
securityContext:
|
||||
description: |-
|
||||
SecurityContext holds pod-level security attributes and common container settings.
|
||||
|
|
@ -7262,7 +7298,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -7430,8 +7466,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
@ -8205,42 +8240,6 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
workloadRef:
|
||||
description: |-
|
||||
WorkloadRef provides a reference to the Workload object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the PodGroup and apply the
|
||||
correct group scheduling policies. The Workload object referenced
|
||||
by this field may not exist at the time the Pod is created.
|
||||
This field is immutable, but a Workload object with the same name
|
||||
may be recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
Name defines the name of the Workload object this Pod belongs to.
|
||||
Workload must be in the same namespace as the Pod.
|
||||
If it doesn't match any existing Workload, the Pod will remain unschedulable
|
||||
until a Workload object is created and observed by the kube-scheduler.
|
||||
It must be a DNS subdomain.
|
||||
type: string
|
||||
podGroup:
|
||||
description: |-
|
||||
PodGroup is the name of the PodGroup within the Workload that this Pod
|
||||
belongs to. If it doesn't match any existing PodGroup within the Workload,
|
||||
the Pod will remain unschedulable until the Workload object is recreated
|
||||
and observed by the kube-scheduler. It must be a DNS label.
|
||||
type: string
|
||||
podGroupReplicaKey:
|
||||
description: |-
|
||||
PodGroupReplicaKey specifies the replica key of the PodGroup to which this
|
||||
Pod belongs. It is used to distinguish pods belonging to different replicas
|
||||
of the same pod group. The pod group policy is applied separately to each replica.
|
||||
When set, it must be a DNS label.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
- podGroup
|
||||
type: object
|
||||
required:
|
||||
- containers
|
||||
type: object
|
||||
|
|
|
|||
|
|
@ -2112,7 +2112,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -3604,7 +3603,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -4070,7 +4068,6 @@ spec:
|
|||
When set to false, a new userns is created for the pod. Setting false is useful for
|
||||
mitigating container breakout vulnerabilities even allowing users to run their
|
||||
containers as root without actually having root privileges on the host.
|
||||
This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
|
||||
type: boolean
|
||||
hostname:
|
||||
description: |-
|
||||
|
|
@ -5181,7 +5178,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -5730,6 +5726,14 @@ spec:
|
|||
|
||||
It adds a name to it that uniquely identifies the ResourceClaim inside the Pod.
|
||||
Containers that need access to the ResourceClaim reference it with this name.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and this Pod
|
||||
belongs to a PodGroup, a PodResourceClaim is matched to a
|
||||
PodGroupResourceClaim if all of their fields are equal (Name,
|
||||
ResourceClaimName, and ResourceClaimTemplateName). A matched claim references
|
||||
a single ResourceClaim shared across all Pods in the PodGroup, reserved for
|
||||
the PodGroup in ResourceClaimStatus.ReservedFor rather than for individual
|
||||
Pods.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
|
|
@ -5755,6 +5759,16 @@ spec:
|
|||
generated component, will be used to form a unique name for the
|
||||
ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and the pod
|
||||
belongs to a PodGroup that defines a PodGroupResourceClaim with the same
|
||||
Name and ResourceClaimTemplateName, this PodResourceClaim resolves to the
|
||||
ResourceClaim generated for the PodGroup. All pods in the group that
|
||||
define an equivalent PodResourceClaim matching the
|
||||
PodGroupResourceClaim's Name and ResourceClaimTemplateName share the same
|
||||
generated ResourceClaim. ResourceClaims generated for a PodGroup are
|
||||
owned by the PodGroup and their lifecycles are tied to the PodGroup
|
||||
instead of any individual pod.
|
||||
|
||||
This field is immutable and no changes will be made to the
|
||||
corresponding ResourceClaim by the control plane after creating the
|
||||
ResourceClaim.
|
||||
|
|
@ -5879,6 +5893,28 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
schedulingGroup:
|
||||
description: |-
|
||||
SchedulingGroup provides a reference to the immediate scheduling runtime
|
||||
grouping object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the group and apply the
|
||||
correct group scheduling policies. The association with a group also
|
||||
impacts other lifecycle aspects of a Pod that are relevant in a wider context
|
||||
of scheduling like preemption, resource attachment, etc. If not specified,
|
||||
the Pod is treated as a single unit in all of these aspects.
|
||||
The group object referenced by this field may not exist at the time the
|
||||
Pod is created.
|
||||
This field is immutable, but a group object with the same name may be
|
||||
recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
podGroupName:
|
||||
description: |-
|
||||
PodGroupName specifies the name of the standalone PodGroup object
|
||||
that represents the runtime instance of this group.
|
||||
Must be a DNS subdomain.
|
||||
type: string
|
||||
type: object
|
||||
securityContext:
|
||||
description: |-
|
||||
SecurityContext holds pod-level security attributes and common container settings.
|
||||
|
|
@ -7265,7 +7301,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -7433,8 +7469,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
@ -8208,42 +8243,6 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
workloadRef:
|
||||
description: |-
|
||||
WorkloadRef provides a reference to the Workload object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the PodGroup and apply the
|
||||
correct group scheduling policies. The Workload object referenced
|
||||
by this field may not exist at the time the Pod is created.
|
||||
This field is immutable, but a Workload object with the same name
|
||||
may be recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
Name defines the name of the Workload object this Pod belongs to.
|
||||
Workload must be in the same namespace as the Pod.
|
||||
If it doesn't match any existing Workload, the Pod will remain unschedulable
|
||||
until a Workload object is created and observed by the kube-scheduler.
|
||||
It must be a DNS subdomain.
|
||||
type: string
|
||||
podGroup:
|
||||
description: |-
|
||||
PodGroup is the name of the PodGroup within the Workload that this Pod
|
||||
belongs to. If it doesn't match any existing PodGroup within the Workload,
|
||||
the Pod will remain unschedulable until the Workload object is recreated
|
||||
and observed by the kube-scheduler. It must be a DNS label.
|
||||
type: string
|
||||
podGroupReplicaKey:
|
||||
description: |-
|
||||
PodGroupReplicaKey specifies the replica key of the PodGroup to which this
|
||||
Pod belongs. It is used to distinguish pods belonging to different replicas
|
||||
of the same pod group. The pod group policy is applied separately to each replica.
|
||||
When set, it must be a DNS label.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
- podGroup
|
||||
type: object
|
||||
required:
|
||||
- containers
|
||||
type: object
|
||||
|
|
|
|||
|
|
@ -2084,7 +2084,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -4032,7 +4031,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -5548,7 +5546,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -7317,7 +7314,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -8899,7 +8895,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -9067,8 +9063,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
|
|||
|
|
@ -2067,7 +2067,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -4015,7 +4014,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -5531,7 +5529,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -7300,7 +7297,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -8882,7 +8878,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -9050,8 +9046,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
|
|||
|
|
@ -1999,7 +1999,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -3947,7 +3946,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -5463,7 +5461,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -7232,7 +7229,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -8814,7 +8810,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -8982,8 +8978,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
|
|||
|
|
@ -2221,7 +2221,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -3713,7 +3712,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -4179,7 +4177,6 @@ spec:
|
|||
When set to false, a new userns is created for the pod. Setting false is useful for
|
||||
mitigating container breakout vulnerabilities even allowing users to run their
|
||||
containers as root without actually having root privileges on the host.
|
||||
This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
|
||||
type: boolean
|
||||
hostname:
|
||||
description: |-
|
||||
|
|
@ -5290,7 +5287,6 @@ spec:
|
|||
procMount denotes the type of proc mount to use for the containers.
|
||||
The default value is Default which uses the container runtime defaults for
|
||||
readonly paths and masked paths.
|
||||
This requires the ProcMountType feature flag to be enabled.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
|
|
@ -5839,6 +5835,14 @@ spec:
|
|||
|
||||
It adds a name to it that uniquely identifies the ResourceClaim inside the Pod.
|
||||
Containers that need access to the ResourceClaim reference it with this name.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and this Pod
|
||||
belongs to a PodGroup, a PodResourceClaim is matched to a
|
||||
PodGroupResourceClaim if all of their fields are equal (Name,
|
||||
ResourceClaimName, and ResourceClaimTemplateName). A matched claim references
|
||||
a single ResourceClaim shared across all Pods in the PodGroup, reserved for
|
||||
the PodGroup in ResourceClaimStatus.ReservedFor rather than for individual
|
||||
Pods.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
|
|
@ -5864,6 +5868,16 @@ spec:
|
|||
generated component, will be used to form a unique name for the
|
||||
ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses.
|
||||
|
||||
When the DRAWorkloadResourceClaims feature gate is enabled and the pod
|
||||
belongs to a PodGroup that defines a PodGroupResourceClaim with the same
|
||||
Name and ResourceClaimTemplateName, this PodResourceClaim resolves to the
|
||||
ResourceClaim generated for the PodGroup. All pods in the group that
|
||||
define an equivalent PodResourceClaim matching the
|
||||
PodGroupResourceClaim's Name and ResourceClaimTemplateName share the same
|
||||
generated ResourceClaim. ResourceClaims generated for a PodGroup are
|
||||
owned by the PodGroup and their lifecycles are tied to the PodGroup
|
||||
instead of any individual pod.
|
||||
|
||||
This field is immutable and no changes will be made to the
|
||||
corresponding ResourceClaim by the control plane after creating the
|
||||
ResourceClaim.
|
||||
|
|
@ -5985,6 +5999,28 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
schedulingGroup:
|
||||
description: |-
|
||||
SchedulingGroup provides a reference to the immediate scheduling runtime
|
||||
grouping object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the group and apply the
|
||||
correct group scheduling policies. The association with a group also
|
||||
impacts other lifecycle aspects of a Pod that are relevant in a wider context
|
||||
of scheduling like preemption, resource attachment, etc. If not specified,
|
||||
the Pod is treated as a single unit in all of these aspects.
|
||||
The group object referenced by this field may not exist at the time the
|
||||
Pod is created.
|
||||
This field is immutable, but a group object with the same name may be
|
||||
recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
podGroupName:
|
||||
description: |-
|
||||
PodGroupName specifies the name of the standalone PodGroup object
|
||||
that represents the runtime instance of this group.
|
||||
Must be a DNS subdomain.
|
||||
type: string
|
||||
type: object
|
||||
securityContext:
|
||||
description: |-
|
||||
SecurityContext holds pod-level security attributes and common container settings.
|
||||
|
|
@ -7371,7 +7407,7 @@ spec:
|
|||
A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message.
|
||||
The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field.
|
||||
The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images.
|
||||
The volume will be mounted read-only (ro) and non-executable files (noexec).
|
||||
The volume will be mounted read-only (ro).
|
||||
Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33.
|
||||
The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type.
|
||||
properties:
|
||||
|
|
@ -7539,8 +7575,7 @@ spec:
|
|||
description: |-
|
||||
portworxVolume represents a portworx volume attached and mounted on kubelets host machine.
|
||||
Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type
|
||||
are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate
|
||||
is on.
|
||||
are redirected to the pxd.portworx.com CSI driver.
|
||||
properties:
|
||||
fsType:
|
||||
description: |-
|
||||
|
|
@ -8314,42 +8349,6 @@ spec:
|
|||
x-kubernetes-list-map-keys:
|
||||
- name
|
||||
x-kubernetes-list-type: map
|
||||
workloadRef:
|
||||
description: |-
|
||||
WorkloadRef provides a reference to the Workload object that this Pod belongs to.
|
||||
This field is used by the scheduler to identify the PodGroup and apply the
|
||||
correct group scheduling policies. The Workload object referenced
|
||||
by this field may not exist at the time the Pod is created.
|
||||
This field is immutable, but a Workload object with the same name
|
||||
may be recreated with different policies. Doing this during pod scheduling
|
||||
may result in the placement not conforming to the expected policies.
|
||||
properties:
|
||||
name:
|
||||
description: |-
|
||||
Name defines the name of the Workload object this Pod belongs to.
|
||||
Workload must be in the same namespace as the Pod.
|
||||
If it doesn't match any existing Workload, the Pod will remain unschedulable
|
||||
until a Workload object is created and observed by the kube-scheduler.
|
||||
It must be a DNS subdomain.
|
||||
type: string
|
||||
podGroup:
|
||||
description: |-
|
||||
PodGroup is the name of the PodGroup within the Workload that this Pod
|
||||
belongs to. If it doesn't match any existing PodGroup within the Workload,
|
||||
the Pod will remain unschedulable until the Workload object is recreated
|
||||
and observed by the kube-scheduler. It must be a DNS label.
|
||||
type: string
|
||||
podGroupReplicaKey:
|
||||
description: |-
|
||||
PodGroupReplicaKey specifies the replica key of the PodGroup to which this
|
||||
Pod belongs. It is used to distinguish pods belonging to different replicas
|
||||
of the same pod group. The pod group policy is applied separately to each replica.
|
||||
When set, it must be a DNS label.
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
- podGroup
|
||||
type: object
|
||||
required:
|
||||
- containers
|
||||
type: object
|
||||
|
|
|
|||
123
go.mod
123
go.mod
|
|
@ -3,7 +3,7 @@ module github.com/actions/actions-runner-controller
|
|||
go 1.26.3
|
||||
|
||||
require (
|
||||
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0
|
||||
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.1
|
||||
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1
|
||||
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets v1.4.0
|
||||
github.com/actions/scaleset v0.4.0
|
||||
|
|
@ -17,75 +17,74 @@ require (
|
|||
github.com/google/uuid v1.6.0
|
||||
github.com/gorilla/mux v1.8.1
|
||||
github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79
|
||||
github.com/gruntwork-io/terratest v0.56.0
|
||||
github.com/gruntwork-io/terratest v1.0.0
|
||||
github.com/hashicorp/go-retryablehttp v0.7.8
|
||||
github.com/kelseyhightower/envconfig v1.4.0
|
||||
github.com/onsi/ginkgo v1.16.5
|
||||
github.com/onsi/ginkgo/v2 v2.28.1
|
||||
github.com/onsi/gomega v1.39.1
|
||||
github.com/onsi/ginkgo/v2 v2.29.0
|
||||
github.com/onsi/gomega v1.40.0
|
||||
github.com/prometheus/client_golang v1.23.2
|
||||
github.com/stretchr/testify v1.11.1
|
||||
github.com/teambition/rrule-go v1.8.2
|
||||
go.uber.org/multierr v1.11.0
|
||||
go.uber.org/zap v1.27.1
|
||||
golang.org/x/net v0.52.0
|
||||
go.uber.org/zap v1.28.0
|
||||
golang.org/x/net v0.53.0
|
||||
golang.org/x/oauth2 v0.36.0
|
||||
golang.org/x/sync v0.20.0
|
||||
gomodules.xyz/jsonpatch/v2 v2.5.0
|
||||
gopkg.in/yaml.v2 v2.4.0
|
||||
k8s.io/api v0.35.2
|
||||
k8s.io/apimachinery v0.35.2
|
||||
k8s.io/client-go v0.35.2
|
||||
k8s.io/api v0.36.1
|
||||
k8s.io/apimachinery v0.36.1
|
||||
k8s.io/client-go v0.36.1
|
||||
k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2
|
||||
sigs.k8s.io/controller-runtime v0.23.3
|
||||
sigs.k8s.io/controller-runtime v0.24.1
|
||||
sigs.k8s.io/yaml v1.6.0
|
||||
)
|
||||
|
||||
require (
|
||||
filippo.io/edwards25519 v1.2.0 // indirect
|
||||
github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2 // indirect
|
||||
github.com/Azure/azure-sdk-for-go/sdk/internal v1.12.0 // indirect
|
||||
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.2.0 // indirect
|
||||
github.com/AzureAD/microsoft-authentication-library-for-go v1.7.0 // indirect
|
||||
github.com/BurntSushi/toml v1.6.0 // indirect
|
||||
github.com/Masterminds/semver/v3 v3.4.0 // indirect
|
||||
github.com/ProtonMail/go-crypto v1.4.0 // indirect
|
||||
github.com/aws/aws-sdk-go-v2 v1.41.3 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.6 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/config v1.32.11 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/credentials v1.19.11 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.19 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.22.7 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.19 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.19 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.5 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.20 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/acm v1.37.21 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/autoscaling v1.64.2 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.64.0 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/dynamodb v1.56.1 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/ec2 v1.294.0 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/ecr v1.56.0 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/ecs v1.73.1 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/iam v1.53.5 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.6 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.11 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery v1.11.19 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.19 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.19 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/kms v1.50.2 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/lambda v1.88.2 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/rds v1.116.2 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/route53 v1.62.3 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/s3 v1.97.0 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.41.3 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/signin v1.0.7 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/sns v1.39.13 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/sqs v1.42.23 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/ssm v1.68.2 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/sso v1.30.12 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.16 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/sts v1.41.8 // indirect
|
||||
github.com/aws/smithy-go v1.24.2 // indirect
|
||||
github.com/aws/aws-sdk-go-v2 v1.41.6 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.9 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/config v1.32.16 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/credentials v1.19.15 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.22 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.1.17 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.22 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.22 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.23 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/acm v1.38.2 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/autoscaling v1.66.1 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.69.1 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/dynamodb v1.57.2 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/ec2 v1.297.1 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/ecr v1.57.1 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/ecs v1.78.1 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/iam v1.53.8 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.8 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.14 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery v1.11.22 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.22 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.22 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/kms v1.50.5 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/lambda v1.89.1 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/rds v1.118.1 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/route53 v1.62.6 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/s3 v1.99.1 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.41.6 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/signin v1.0.10 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/sns v1.39.16 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/sqs v1.42.26 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/ssm v1.68.5 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/sso v1.30.16 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.20 // indirect
|
||||
github.com/aws/aws-sdk-go-v2/service/sts v1.42.0 // indirect
|
||||
github.com/aws/smithy-go v1.25.0 // indirect
|
||||
github.com/beorn7/perks v1.0.1 // indirect
|
||||
github.com/boombuler/barcode v1.1.0 // indirect
|
||||
github.com/brunoga/deep v1.2.4 // indirect
|
||||
|
|
@ -123,11 +122,10 @@ require (
|
|||
github.com/gonvenience/term v1.0.5 // indirect
|
||||
github.com/gonvenience/text v1.0.10 // indirect
|
||||
github.com/gonvenience/ytbx v1.4.8 // indirect
|
||||
github.com/google/btree v1.1.3 // indirect
|
||||
github.com/google/gnostic-models v0.7.1 // indirect
|
||||
github.com/google/go-github/v84 v84.0.0 // indirect
|
||||
github.com/google/go-querystring v1.2.0 // indirect
|
||||
github.com/google/pprof v0.0.0-20260302011040-a15ffb7f9dcc // indirect
|
||||
github.com/google/pprof v0.0.0-20260402051712-545e8a4df936 // indirect
|
||||
github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect
|
||||
github.com/gruntwork-io/go-commons v0.17.2 // indirect
|
||||
github.com/hashicorp/errwrap v1.1.0 // indirect
|
||||
|
|
@ -138,7 +136,7 @@ require (
|
|||
github.com/inconshreveable/mousetrap v1.1.0 // indirect
|
||||
github.com/jackc/pgpassfile v1.0.0 // indirect
|
||||
github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect
|
||||
github.com/jackc/pgx/v5 v5.8.0 // indirect
|
||||
github.com/jackc/pgx/v5 v5.9.0 // indirect
|
||||
github.com/jackc/puddle/v2 v2.2.2 // indirect
|
||||
github.com/jedib0t/go-pretty/v6 v6.6.7 // indirect
|
||||
github.com/json-iterator/go v1.1.12 // indirect
|
||||
|
|
@ -157,15 +155,13 @@ require (
|
|||
github.com/mattn/go-runewidth v0.0.16 // indirect
|
||||
github.com/mattn/go-zglob v0.0.6 // indirect
|
||||
github.com/mitchellh/copystructure v1.2.0 // indirect
|
||||
github.com/mitchellh/go-homedir v1.1.0 // indirect
|
||||
github.com/mitchellh/go-ps v1.0.0 // indirect
|
||||
github.com/mitchellh/hashstructure v1.1.0 // indirect
|
||||
github.com/mitchellh/reflectwalk v1.0.2 // indirect
|
||||
github.com/moby/spdystream v0.5.0 // indirect
|
||||
github.com/moby/spdystream v0.5.1 // indirect
|
||||
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
|
||||
github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee // indirect
|
||||
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
|
||||
github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f // indirect
|
||||
github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect
|
||||
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
|
||||
github.com/pquerna/otp v1.5.0 // indirect
|
||||
|
|
@ -190,21 +186,22 @@ require (
|
|||
github.com/xrash/smetrics v0.0.0-20250705151800-55b8f293f342 // indirect
|
||||
go.yaml.in/yaml/v2 v2.4.4 // indirect
|
||||
go.yaml.in/yaml/v3 v3.0.4 // indirect
|
||||
golang.org/x/crypto v0.49.0 // indirect
|
||||
golang.org/x/crypto v0.50.0 // indirect
|
||||
golang.org/x/exp v0.0.0-20260312153236-7ab1446f8b90 // indirect
|
||||
golang.org/x/mod v0.34.0 // indirect
|
||||
golang.org/x/sys v0.42.0 // indirect
|
||||
golang.org/x/term v0.41.0 // indirect
|
||||
golang.org/x/text v0.35.0 // indirect
|
||||
golang.org/x/mod v0.35.0 // indirect
|
||||
golang.org/x/sys v0.43.0 // indirect
|
||||
golang.org/x/term v0.42.0 // indirect
|
||||
golang.org/x/text v0.36.0 // indirect
|
||||
golang.org/x/time v0.15.0 // indirect
|
||||
golang.org/x/tools v0.43.0 // indirect
|
||||
google.golang.org/protobuf v1.36.11 // indirect
|
||||
golang.org/x/tools v0.44.0 // indirect
|
||||
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect
|
||||
gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
|
||||
gopkg.in/inf.v0 v0.9.1 // indirect
|
||||
gopkg.in/yaml.v3 v3.0.1 // indirect
|
||||
k8s.io/apiextensions-apiserver v0.35.2 // indirect
|
||||
k8s.io/apiextensions-apiserver v0.36.0 // indirect
|
||||
k8s.io/klog/v2 v2.140.0 // indirect
|
||||
k8s.io/kube-openapi v0.0.0-20260304202019-5b3e3fdb0acf // indirect
|
||||
k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a // indirect
|
||||
k8s.io/streaming v0.36.1 // indirect
|
||||
sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
|
||||
sigs.k8s.io/randfill v1.0.0 // indirect
|
||||
sigs.k8s.io/structured-merge-diff/v6 v6.3.2 // indirect
|
||||
|
|
|
|||
249
go.sum
249
go.sum
|
|
@ -1,14 +1,13 @@
|
|||
filippo.io/edwards25519 v1.2.0 h1:crnVqOiS4jqYleHd9vaKZ+HKtHfllngJIiOpNpoJsjo=
|
||||
filippo.io/edwards25519 v1.2.0/go.mod h1:xzAOLCNug/yB62zG1bQ8uziwrIqIuxhctzJT18Q77mc=
|
||||
github.com/Azure/azure-sdk-for-go v51.0.0+incompatible h1:p7blnyJSjJqf5jflHbSGhIhEpXIgIFmYZNg5uwqweso=
|
||||
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0 h1:fou+2+WFTib47nS+nz/ozhEBnvU96bKHy6LjRsY4E28=
|
||||
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0/go.mod h1:t76Ruy8AHvUAC8GfMWJMa0ElSbuIcO03NLpynfbgsPA=
|
||||
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.1 h1:jHb/wfvRikGdxMXYV3QG/SzUOPYN9KEUUuC0Yd0/vC0=
|
||||
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.1/go.mod h1:pzBXCYn05zvYIrwLgtK8Ap8QcjRg+0i76tMQdWN6wOk=
|
||||
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1 h1:Hk5QBxZQC1jb2Fwj6mpzme37xbCDdNTxU7O9eb5+LB4=
|
||||
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1/go.mod h1:IYus9qsFobWIc2YVwe/WPjcnyCkPKtnHAqUYeebc8z0=
|
||||
github.com/Azure/azure-sdk-for-go/sdk/azidentity/cache v0.3.2 h1:yz1bePFlP5Vws5+8ez6T3HWXPmwOK7Yvq8QxDBD3SKY=
|
||||
github.com/Azure/azure-sdk-for-go/sdk/azidentity/cache v0.3.2/go.mod h1:Pa9ZNPuoNu/GztvBSKk9J1cDJW6vk/n0zLtV4mgd8N8=
|
||||
github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2 h1:9iefClla7iYpfYWdzPCRDozdmndjTm8DXdpCzPajMgA=
|
||||
github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2/go.mod h1:XtLgD3ZD34DAaVIIAyG3objl5DynM3CQ/vMcbBNJZGI=
|
||||
github.com/Azure/azure-sdk-for-go/sdk/internal v1.12.0 h1:fhqpLE3UEXi9lPaBRpQ6XuRW0nU7hgg4zlmZZa+a9q4=
|
||||
github.com/Azure/azure-sdk-for-go/sdk/internal v1.12.0/go.mod h1:7dCRMLwisfRH3dBupKeNCioWYUZ4SS09Z14H+7i8ZoY=
|
||||
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets v1.4.0 h1:/g8S6wk65vfC6m3FIxJ+i5QDyN9JWwXI8Hb0Img10hU=
|
||||
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets v1.4.0/go.mod h1:gpl+q95AzZlKVI3xSoseF9QPrypk0hQqBiJYeB/cR/I=
|
||||
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.2.0 h1:nCYfgcSyHZXJI8J0IWE5MsCGlb2xp9fJiXyxWgmOFg4=
|
||||
|
|
@ -25,86 +24,82 @@ github.com/ProtonMail/go-crypto v1.4.0 h1:Zq/pbM3F5DFgJiMouxEdSVY44MVoQNEKp5d5Qx
|
|||
github.com/ProtonMail/go-crypto v1.4.0/go.mod h1:e1OaTyu5SYVrO9gKOEhTc+5UcXtTUa+P3uLudwcgPqo=
|
||||
github.com/actions-runner-controller/httpcache v0.2.0 h1:hCNvYuVPJ2xxYBymqBvH0hSiQpqz4PHF/LbU3XghGNI=
|
||||
github.com/actions-runner-controller/httpcache v0.2.0/go.mod h1:JLu9/2M/btPz1Zu/vTZ71XzukQHn2YeISPmJoM5exBI=
|
||||
github.com/actions/scaleset v0.3.0 h1:y5/ClYLJXFuGCikzILOOPhaCShAcL6K0mnUtjDKFxVw=
|
||||
github.com/actions/scaleset v0.3.0/go.mod h1:2L2I6rggFWV+zprDet6y7y7Vkm3HPudaup78eSc79Uo=
|
||||
github.com/actions/scaleset v0.4.0 h1:691GC2AkHb3ZGjfNvatboYoRS7CLr3+4VcZk/6w9IbM=
|
||||
github.com/actions/scaleset v0.4.0/go.mod h1:2L2I6rggFWV+zprDet6y7y7Vkm3HPudaup78eSc79Uo=
|
||||
github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5 h1:0CwZNZbxp69SHPdPJAN/hZIm0C4OItdklCFmMRWYpio=
|
||||
github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5/go.mod h1:wHh0iHkYZB8zMSxRWpUBQtwG5a7fFgvEO+odwuTv2gs=
|
||||
github.com/aws/aws-sdk-go-v2 v1.41.3 h1:4kQ/fa22KjDt13QCy1+bYADvdgcxpfH18f0zP542kZA=
|
||||
github.com/aws/aws-sdk-go-v2 v1.41.3/go.mod h1:mwsPRE8ceUUpiTgF7QmQIJ7lgsKUPQOUl3o72QBrE1o=
|
||||
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.6 h1:N4lRUXZpZ1KVEUn6hxtco/1d2lgYhNn1fHkkl8WhlyQ=
|
||||
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.6/go.mod h1:lyw7GFp3qENLh7kwzf7iMzAxDn+NzjXEAGjKS2UOKqI=
|
||||
github.com/aws/aws-sdk-go-v2/config v1.32.11 h1:ftxI5sgz8jZkckuUHXfC/wMUc8u3fG1vQS0plr2F2Zs=
|
||||
github.com/aws/aws-sdk-go-v2/config v1.32.11/go.mod h1:twF11+6ps9aNRKEDimksp923o44w/Thk9+8YIlzWMmo=
|
||||
github.com/aws/aws-sdk-go-v2/credentials v1.19.11 h1:NdV8cwCcAXrCWyxArt58BrvZJ9pZ9Fhf9w6Uh5W3Uyc=
|
||||
github.com/aws/aws-sdk-go-v2/credentials v1.19.11/go.mod h1:30yY2zqkMPdrvxBqzI9xQCM+WrlrZKSOpSJEsylVU+8=
|
||||
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.19 h1:INUvJxmhdEbVulJYHI061k4TVuS3jzzthNvjqvVvTKM=
|
||||
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.19/go.mod h1:FpZN2QISLdEBWkayloda+sZjVJL+e9Gl0k1SyTgcswU=
|
||||
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.22.7 h1:U1bRnGCibeRlgswAtU0OjsIy+3yQZGBJQoRvTz2m47k=
|
||||
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.22.7/go.mod h1:o468HQR7wpjYUtIHLk7hMnk+1wya63m32Z4DnGqQJe0=
|
||||
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.19 h1:/sECfyq2JTifMI2JPyZ4bdRN77zJmr6SrS1eL3augIA=
|
||||
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.19/go.mod h1:dMf8A5oAqr9/oxOfLkC/c2LU/uMcALP0Rgn2BD5LWn0=
|
||||
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.19 h1:AWeJMk33GTBf6J20XJe6qZoRSJo0WfUhsMdUKhoODXE=
|
||||
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.19/go.mod h1:+GWrYoaAsV7/4pNHpwh1kiNLXkKaSoppxQq9lbH8Ejw=
|
||||
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.5 h1:clHU5fm//kWS1C2HgtgWxfQbFbx4b6rx+5jzhgX9HrI=
|
||||
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.5/go.mod h1:O3h0IK87yXci+kg6flUKzJnWeziQUKciKrLjcatSNcY=
|
||||
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.20 h1:qi3e/dmpdONhj1RyIZdi6DKKpDXS5Lb8ftr3p7cyHJc=
|
||||
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.20/go.mod h1:V1K+TeJVD5JOk3D9e5tsX2KUdL7BlB+FV6cBhdobN8c=
|
||||
github.com/aws/aws-sdk-go-v2/service/acm v1.37.21 h1:AUceKJhgt+FOwImMUPbOHKLpe5O9a8N/RtC+tLQ+sxc=
|
||||
github.com/aws/aws-sdk-go-v2/service/acm v1.37.21/go.mod h1:kkbySLpdZk0UNdU23rBaef7IfuSRy0/jEM84BGCcvKM=
|
||||
github.com/aws/aws-sdk-go-v2/service/autoscaling v1.64.2 h1:pzFtdV2DArJul6aM3+WiWjUQ63IzrSnSbvBr8FAokt4=
|
||||
github.com/aws/aws-sdk-go-v2/service/autoscaling v1.64.2/go.mod h1:8xQlcle6cf4R66HrXbiahORXakWpLlvJXoiGae5BlIc=
|
||||
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.64.0 h1:6QLwTAIR2z3QmYxuHM8nfZkW/C/qn4cvhesHIE98/CE=
|
||||
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.64.0/go.mod h1:RCkMRCGlsyFwF9Accj7GsHQFCIR9s8iRbv4LPYOT9wY=
|
||||
github.com/aws/aws-sdk-go-v2/service/dynamodb v1.56.1 h1:EkW4NqA2mwCkL7YCDYh6OpA/bCMhKYbZgpRHt2FD2Ow=
|
||||
github.com/aws/aws-sdk-go-v2/service/dynamodb v1.56.1/go.mod h1:OQp5333OH1IjmJmJpTU4IwoaOoCMnDrThg0zIx169rE=
|
||||
github.com/aws/aws-sdk-go-v2/service/ec2 v1.294.0 h1:776KnBqePBBR6zEDi0bUIHXzUBOISa2WgAKEgckUF8M=
|
||||
github.com/aws/aws-sdk-go-v2/service/ec2 v1.294.0/go.mod h1:rB577GvkmJADVOFGY8/j9sPv/ewcsEtQNsd9Lrn7Zx0=
|
||||
github.com/aws/aws-sdk-go-v2/service/ecr v1.56.0 h1:XxNya31nOtsClGghvQ2VkhIB2S/rggb64x5vkHl4xZQ=
|
||||
github.com/aws/aws-sdk-go-v2/service/ecr v1.56.0/go.mod h1:T+Tz2Xp1gnvtlgvP7OyRHlr84KtI3fZW5Ax/e+s9b64=
|
||||
github.com/aws/aws-sdk-go-v2/service/ecs v1.73.1 h1:TSmcWx+RzhGJrPNoFkuqANafJQ7xY3W2UBg6ShN3ae8=
|
||||
github.com/aws/aws-sdk-go-v2/service/ecs v1.73.1/go.mod h1:KWILGx+bRowcGyJU/va2Ift48c658blP5e1qvldnIRE=
|
||||
github.com/aws/aws-sdk-go-v2/service/iam v1.53.5 h1:J8qtztl/SJ6lhk/Rke/F6PgpZ7V6UYq0my0Zc8hdLuc=
|
||||
github.com/aws/aws-sdk-go-v2/service/iam v1.53.5/go.mod h1:seDE466zJ4haVuAVcRk+yIH4DWb3s6cqt3Od8GxnGAA=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.6 h1:XAq62tBTJP/85lFD5oqOOe7YYgWxY9LvWq8plyDvDVg=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.6/go.mod h1:x0nZssQ3qZSnIcePWLvcoFisRXJzcTVvYpAAdYX8+GI=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.11 h1:BYf7XNsJMzl4mObARUBUib+j2tf0U//JAAtTnYqvqCw=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.11/go.mod h1:aEUS4WrNk/+FxkBZZa7tVgp4pGH+kFGW40Y8rCPqt5g=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery v1.11.19 h1:jdCj9vbCXwzTcIJX+MVd2UdssFhRJFTrWlPZwZB8Hpk=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery v1.11.19/go.mod h1:Dgg2d5WGRr7YB8JJsELskBxLUhgwWppXPwlvmuQKhbc=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.19 h1:X1Tow7suZk9UCJHE1Iw9GMZJJl0dAnKXXP1NaSDHwmw=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.19/go.mod h1:/rARO8psX+4sfjUQXp5LLifjUt8DuATZ31WptNJTyQA=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.19 h1:JnQeStZvPHFHeyky/7LbMlyQjUa+jIBj36OlWm0pzIk=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.19/go.mod h1:HGyasyHvYdFQeJhvDHfH7HXkHh57htcJGKDZ+7z+I24=
|
||||
github.com/aws/aws-sdk-go-v2/service/kms v1.50.2 h1:UOHOXigIzDRaEU03CBQcZ5uW7FNC7E+vwfhsQWXl5RQ=
|
||||
github.com/aws/aws-sdk-go-v2/service/kms v1.50.2/go.mod h1:nAa5gmcmAmjXN3tGuhPSHLXFeWv+7nzKhjZzh8F7MH0=
|
||||
github.com/aws/aws-sdk-go-v2/service/lambda v1.88.2 h1:j+IFEtr7aykD6jJRE86kv/+TgN1UK90LudBuz2bjjYw=
|
||||
github.com/aws/aws-sdk-go-v2/service/lambda v1.88.2/go.mod h1:IDvS3hFp41ZJTByY7BO8PNgQkPNeQDjJfU/0cHJ2V4o=
|
||||
github.com/aws/aws-sdk-go-v2/service/rds v1.116.2 h1:KQLPCn9BWXW0Y8DyzEokbTF9HOiOQoR77Eu9GKcjBWU=
|
||||
github.com/aws/aws-sdk-go-v2/service/rds v1.116.2/go.mod h1:aPw0arz1e+cZUbF4LU7ZMYB1ZSYsJKi/tsAq9wADfeE=
|
||||
github.com/aws/aws-sdk-go-v2/service/route53 v1.62.3 h1:JRPXnIr0WwFsSHBmuCvT/uh0Vgys+crvwkOghbJEqi8=
|
||||
github.com/aws/aws-sdk-go-v2/service/route53 v1.62.3/go.mod h1:DHddp7OO4bY467WVCqWBzk5+aEWn7vqYkap7UigJzGk=
|
||||
github.com/aws/aws-sdk-go-v2/service/s3 v1.97.0 h1:zyKY4OxzUImu+DigelJI9o49QQv8CjREs5E1CywjtIA=
|
||||
github.com/aws/aws-sdk-go-v2/service/s3 v1.97.0/go.mod h1:NF3JcMGOiARAss1ld3WGORCw71+4ExDD2cbbdKS5PpA=
|
||||
github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.41.3 h1:9bb0dEq1WzA0ZxIGG2EmwEgxfMAJpHyusxwbVN7f6iM=
|
||||
github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.41.3/go.mod h1:2z9eg35jfuRtdPE4Ci0ousrOU9PBhDBilXA1cwq9Ptk=
|
||||
github.com/aws/aws-sdk-go-v2/service/signin v1.0.7 h1:Y2cAXlClHsXkkOvWZFXATr34b0hxxloeQu/pAZz2row=
|
||||
github.com/aws/aws-sdk-go-v2/service/signin v1.0.7/go.mod h1:idzZ7gmDeqeNrSPkdbtMp9qWMgcBwykA7P7Rzh5DXVU=
|
||||
github.com/aws/aws-sdk-go-v2/service/sns v1.39.13 h1:8xP94tDzFpgwIOsusGiEFHPaqrpckDojoErk/ZFZTio=
|
||||
github.com/aws/aws-sdk-go-v2/service/sns v1.39.13/go.mod h1:RwF6Xnba8PlINxJUQq1IAWeon6IglvqsnhNqV8QsQjk=
|
||||
github.com/aws/aws-sdk-go-v2/service/sqs v1.42.23 h1:Rw3+8VaLH0jozccNR52bSvCPYtkiQeNn576l7HCHvL0=
|
||||
github.com/aws/aws-sdk-go-v2/service/sqs v1.42.23/go.mod h1:MdjRkQEd2EUOiifYnkg/6f1NGtZSN3dFOLNByzufXok=
|
||||
github.com/aws/aws-sdk-go-v2/service/ssm v1.68.2 h1:idKv7B7NjmTDd05YHQYMMEFNeD0rWxs/kVX4lsjEiDo=
|
||||
github.com/aws/aws-sdk-go-v2/service/ssm v1.68.2/go.mod h1:1NiL45h4A60CO/hu/UdNyG5AD3VEsdpaQx1l5KtpurA=
|
||||
github.com/aws/aws-sdk-go-v2/service/sso v1.30.12 h1:iSsvB9EtQ09YrsmIc44Heqlx5ByGErqhPK1ZQLppias=
|
||||
github.com/aws/aws-sdk-go-v2/service/sso v1.30.12/go.mod h1:fEWYKTRGoZNl8tZ77i61/ccwOMJdGxwOhWCkp6TXAr0=
|
||||
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.16 h1:EnUdUqRP1CNzt2DkV67tJx6XDN4xlfBFm+bzeNOQVb0=
|
||||
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.16/go.mod h1:Jic/xv0Rq/pFNCh3WwpH4BEqdbSAl+IyHro8LbibHD8=
|
||||
github.com/aws/aws-sdk-go-v2/service/sts v1.41.8 h1:XQTQTF75vnug2TXS8m7CVJfC2nniYPZnO1D4Np761Oo=
|
||||
github.com/aws/aws-sdk-go-v2/service/sts v1.41.8/go.mod h1:Xgx+PR1NUOjNmQY+tRMnouRp83JRM8pRMw/vCaVhPkI=
|
||||
github.com/aws/smithy-go v1.24.2 h1:FzA3bu/nt/vDvmnkg+R8Xl46gmzEDam6mZ1hzmwXFng=
|
||||
github.com/aws/smithy-go v1.24.2/go.mod h1:YE2RhdIuDbA5E5bTdciG9KrW3+TiEONeUWCqxX9i1Fc=
|
||||
github.com/aws/aws-sdk-go-v2 v1.41.6 h1:1AX0AthnBQzMx1vbmir3Y4WsnJgiydmnJjiLu+LvXOg=
|
||||
github.com/aws/aws-sdk-go-v2 v1.41.6/go.mod h1:dy0UzBIfwSeot4grGvY1AqFWN5zgziMmWGzysDnHFcQ=
|
||||
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.9 h1:adBsCIIpLbLmYnkQU+nAChU5yhVTvu5PerROm+/Kq2A=
|
||||
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.9/go.mod h1:uOYhgfgThm/ZyAuJGNQ5YgNyOlYfqnGpTHXvk3cpykg=
|
||||
github.com/aws/aws-sdk-go-v2/config v1.32.16 h1:Q0iQ7quUgJP0F/SCRTieScnaMdXr9h/2+wze1u3cNeM=
|
||||
github.com/aws/aws-sdk-go-v2/config v1.32.16/go.mod h1:duCCnJEFqpt2RC6no1iK6q+8HpwOAkiUua0pY507dQc=
|
||||
github.com/aws/aws-sdk-go-v2/credentials v1.19.15 h1:fyvgWTszojq8hEnMi8PPBTvZdTtEVmAVyo+NFLHBhH4=
|
||||
github.com/aws/aws-sdk-go-v2/credentials v1.19.15/go.mod h1:gJiYyMOjNg8OEdRWOf3CrFQxM2a98qmrtjx1zuiQfB8=
|
||||
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.22 h1:IOGsJ1xVWhsi+ZO7/NW8OuZZBtMJLZbk4P5HDjJO0jQ=
|
||||
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.22/go.mod h1:b+hYdbU+jGKfXE8kKM6g1+h+L/Go3vMvzlxBsiuGsxg=
|
||||
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.1.17 h1:95y7/EqethAhFwMKJ9cDutzBhsS1h8uBwkJ5rp8pNTU=
|
||||
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.1.17/go.mod h1:77baheqr62SkTw77HWH8qpdWTd2gXKN0xg0qLvDSkpk=
|
||||
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.22 h1:GmLa5Kw1ESqtFpXsx5MmC84QWa/ZrLZvlJGa2y+4kcQ=
|
||||
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.22/go.mod h1:6sW9iWm9DK9YRpRGga/qzrzNLgKpT2cIxb7Vo2eNOp0=
|
||||
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.22 h1:dY4kWZiSaXIzxnKlj17nHnBcXXBfac6UlsAx2qL6XrU=
|
||||
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.22/go.mod h1:KIpEUx0JuRZLO7U6cbV204cWAEco2iC3l061IxlwLtI=
|
||||
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.23 h1:FPXsW9+gMuIeKmz7j6ENWcWtBGTe1kH8r9thNt5Uxx4=
|
||||
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.23/go.mod h1:7J8iGMdRKk6lw2C+cMIphgAnT8uTwBwNOsGkyOCm80U=
|
||||
github.com/aws/aws-sdk-go-v2/service/acm v1.38.2 h1:ozcwethaFOi2ST9h6MKGq1GAIHP68tjiDqgkWVPwfR8=
|
||||
github.com/aws/aws-sdk-go-v2/service/acm v1.38.2/go.mod h1:HNtDOv4XmqExPxNIBp171KKc5ZoUJwHH9ZhlCcZmdt0=
|
||||
github.com/aws/aws-sdk-go-v2/service/autoscaling v1.66.1 h1:kGlbhb5GMfkP/bcqcbt3oDi50kwDTpRmNzYUY9LqbLk=
|
||||
github.com/aws/aws-sdk-go-v2/service/autoscaling v1.66.1/go.mod h1:z45kurrOonQepd3SN5LIgropAn1NGHwBn1yOMF+QVFU=
|
||||
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.69.1 h1:2ANEV0YkO/NlWxVmHBui7w7NE3lHW2sJji+OtjKJwck=
|
||||
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.69.1/go.mod h1:O7cQtpXZSk+P59gPFZIpcMpKwLk5d9zabFpV8fw68RM=
|
||||
github.com/aws/aws-sdk-go-v2/service/dynamodb v1.57.2 h1:J2ibOhlMLx1o6QwDFsHHfbQjaZ6t5LXodiLNuK6jbZA=
|
||||
github.com/aws/aws-sdk-go-v2/service/dynamodb v1.57.2/go.mod h1:Tj8VcffnduuewrM8HN8xQ9wzzez0CJ0FGSGEovq7Sgs=
|
||||
github.com/aws/aws-sdk-go-v2/service/ec2 v1.297.1 h1:9nfacm+uWgbdPaOplvJjxN50qgthexb7GOR/97ygc5o=
|
||||
github.com/aws/aws-sdk-go-v2/service/ec2 v1.297.1/go.mod h1:E1pnYwWFZ8N3REmeN9Fe/Zipbpps4HJj8DQGNnLUMYc=
|
||||
github.com/aws/aws-sdk-go-v2/service/ecr v1.57.1 h1:G/O4muLF2pe1UJBKEyF7J+kdokEEqFJjm42cU68FqH4=
|
||||
github.com/aws/aws-sdk-go-v2/service/ecr v1.57.1/go.mod h1:KBzTxiBlQ2bB5XT367+t18i3Qe7NZDRyGKxdzN43aOw=
|
||||
github.com/aws/aws-sdk-go-v2/service/ecs v1.78.1 h1:9zSVr4X6X8JNTxSMip2RORaBB+Mu0/IfzNu3iRWZE9c=
|
||||
github.com/aws/aws-sdk-go-v2/service/ecs v1.78.1/go.mod h1:1DlTqkp+8uc5At3UXyJAvJXFaWoMmxSHcp2Zdor0qGw=
|
||||
github.com/aws/aws-sdk-go-v2/service/iam v1.53.8 h1:p0oB4eZfBfBAOasnKvHJOlNcuHVE/ieuWs7uIZgQlyQ=
|
||||
github.com/aws/aws-sdk-go-v2/service/iam v1.53.8/go.mod h1:epCaPnGVdiX5ra1lHPfRkVuiQGxrdY8bRI2FBJU+6ok=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.8 h1:HtOTYcbVcGABLOVuPYaIihj6IlkqubBwFj10K5fxRek=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.8/go.mod h1:VsK9abqQeGlzPgUr+isNWzPlK2vKe9INMLWnY65f5Xs=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.14 h1:xnvDEnw+pnj5mctWiYuFbigrEzSm35x7k4KS/ZkCANg=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.14/go.mod h1:yS5rNogD8e0Wu9+l3MUwr6eENBzEeGejvINpN5PAYfY=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery v1.11.22 h1:8IXbJCgOn8ztzvRUOm27iCeTSxmPW45JsSDW3EGi16M=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery v1.11.22/go.mod h1:l53RbOWvncp4DEmlEz6dSXJS913AIxtFqkJZ+Xz7pHs=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.22 h1:PUmZeJU6Y1Lbvt9WFuJ0ugUK2xn6hIWUBBbKuOWF30s=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.22/go.mod h1:nO6egFBoAaoXze24a2C0NjQCvdpk8OueRoYimvEB9jo=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.22 h1:SE+aQ4DEqG53RRCAIHlCf//B2ycxGH7jFkpnAh/kKPM=
|
||||
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.22/go.mod h1:ES3ynECd7fYeJIL6+oax+uIEljmfps0S70BaQzbMd/o=
|
||||
github.com/aws/aws-sdk-go-v2/service/kms v1.50.5 h1:nEzwx/ZlpUZ2Y6WztsgYmfBh5Ixd3QiECawXMzvTMeo=
|
||||
github.com/aws/aws-sdk-go-v2/service/kms v1.50.5/go.mod h1:GBO/aaEi47QldDVoqw2CsM2UZQDoqDiFIMJD/ztHPs0=
|
||||
github.com/aws/aws-sdk-go-v2/service/lambda v1.89.1 h1:JxHLwNK5mIKsh2Q0APTSijdzkk5ccI4gyvYdar1JU/0=
|
||||
github.com/aws/aws-sdk-go-v2/service/lambda v1.89.1/go.mod h1:7qoh/MlWG5QCnZwq9bvdXomEAkmumayXcjEjIemIV7U=
|
||||
github.com/aws/aws-sdk-go-v2/service/rds v1.118.1 h1:cywOPYUFOSOAjrovJNxuBXd6SV3osiP3KJ5p412IEJQ=
|
||||
github.com/aws/aws-sdk-go-v2/service/rds v1.118.1/go.mod h1:BaS59j6evm68pt9EaJnb7tnTOaT0MY4rJeESKh8RKKY=
|
||||
github.com/aws/aws-sdk-go-v2/service/route53 v1.62.6 h1:6b+KS0uVMMsCUKlW8OPNxmcEmoEUtqP1LfnzSzWmuQM=
|
||||
github.com/aws/aws-sdk-go-v2/service/route53 v1.62.6/go.mod h1:+wmraHmxwqi7feUL/41uULJWl8V1HxtxzOJH6a4ZRg4=
|
||||
github.com/aws/aws-sdk-go-v2/service/s3 v1.99.1 h1:kU/eBN5+MWNo/LcbNa4hWDdN76hdcd7hocU5kvu7IsU=
|
||||
github.com/aws/aws-sdk-go-v2/service/s3 v1.99.1/go.mod h1:Fw9aqhJicIVee1VytBBjH+l+5ov6/PhbtIK/u3rt/ls=
|
||||
github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.41.6 h1:XR42AXidhYs4HwH0I+yElLXVt7zb2hAyNHQJe6Blv7w=
|
||||
github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.41.6/go.mod h1:nOTsSVQlAsgwVRdtZYtECSnsInF8IUhrpnclCPat7Fs=
|
||||
github.com/aws/aws-sdk-go-v2/service/signin v1.0.10 h1:a1Fq/KXn75wSzoJaPQTgZO0wHGqE9mjFnylnqEPTchA=
|
||||
github.com/aws/aws-sdk-go-v2/service/signin v1.0.10/go.mod h1:p6+MXNxW7IA6dMgHfTAzljuwSKD0NCm/4lbS4t6+7vI=
|
||||
github.com/aws/aws-sdk-go-v2/service/sns v1.39.16 h1:CIFDzcrpG87cjj5Op1NZ55BZV64mFka1DuJIEjedxmI=
|
||||
github.com/aws/aws-sdk-go-v2/service/sns v1.39.16/go.mod h1:468X50NBvl50h/poFrQXD1oZMxbOCTQSVdvowm0i4aw=
|
||||
github.com/aws/aws-sdk-go-v2/service/sqs v1.42.26 h1:jtUEQz/c14fCMkOX3r2/nhYmhXZas0XdcQhUaIW5ubY=
|
||||
github.com/aws/aws-sdk-go-v2/service/sqs v1.42.26/go.mod h1:gcJv70rH+Z/Q1PM3jKsJr6+vfKrDHJOfmKq7342+Vq8=
|
||||
github.com/aws/aws-sdk-go-v2/service/ssm v1.68.5 h1:TY5Vh7uXQgJVuc6ahI6toLcRajG1aYSDCP3a0xsPvmo=
|
||||
github.com/aws/aws-sdk-go-v2/service/ssm v1.68.5/go.mod h1:UkzShnbxHRIIL2cHi/7fBGLUAZIVTEADQjaA53bWWCE=
|
||||
github.com/aws/aws-sdk-go-v2/service/sso v1.30.16 h1:x6bKbmDhsgSZwv6q19wY/u3rLk/3FGjJWyqKcIRufpE=
|
||||
github.com/aws/aws-sdk-go-v2/service/sso v1.30.16/go.mod h1:CudnEVKRtLn0+3uMV0yEXZ+YZOKnAtUJ5DmDhilVnIw=
|
||||
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.20 h1:oK/njaL8GtyEihkWMD4k3VgHCT64RQKkZwh0DG5j8ak=
|
||||
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.20/go.mod h1:JHs8/y1f3zY7U5WcuzoJ/yAYGYtNIVPKLIbp61euvmg=
|
||||
github.com/aws/aws-sdk-go-v2/service/sts v1.42.0 h1:ks8KBcZPh3PYISr5dAiXCM5/Thcuxk8l+PG4+A0exds=
|
||||
github.com/aws/aws-sdk-go-v2/service/sts v1.42.0/go.mod h1:pFw33T0WLvXU3rw1WBkpMlkgIn54eCB5FYLhjDc9Foo=
|
||||
github.com/aws/smithy-go v1.25.0 h1:Sz/XJ64rwuiKtB6j98nDIPyYrV1nVNJ4YU74gttcl5U=
|
||||
github.com/aws/smithy-go v1.25.0/go.mod h1:YE2RhdIuDbA5E5bTdciG9KrW3+TiEONeUWCqxX9i1Fc=
|
||||
github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
|
||||
github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
|
||||
github.com/boombuler/barcode v1.0.1-0.20190219062509-6c824513bacc/go.mod h1:paBWMcWSl3LHKBqUq+rly7CNSldXjb2rDl3JlRe0mD8=
|
||||
|
|
@ -221,8 +216,6 @@ github.com/gonvenience/text v1.0.10 h1:QRqtC/KMk57K7y4jHi4HjLxf8u+tg+/tIRCS5afyw
|
|||
github.com/gonvenience/text v1.0.10/go.mod h1:qO4aTZGAXbeW7eJXK+94nIc5Uumz8Q5DphOFZex6JHI=
|
||||
github.com/gonvenience/ytbx v1.4.8 h1:V7oea89gLUN1C0rGDHxnt1YMAd7wHau9LC80Ng2QauA=
|
||||
github.com/gonvenience/ytbx v1.4.8/go.mod h1:DVrIUZAiVv/bzOU3esvEvhGWED4YbyhSAuFru5nlzD4=
|
||||
github.com/google/btree v1.1.3 h1:CVpQJjYgC4VbzxeGVHfvZrv1ctoYCAI8vbl07Fcxlyg=
|
||||
github.com/google/btree v1.1.3/go.mod h1:qOPhT0dTNdNzV6Z/lhRX0YXUafgPLFUh+gZMl761Gm4=
|
||||
github.com/google/gnostic-models v0.7.1 h1:SisTfuFKJSKM5CPZkffwi6coztzzeYUhc3v4yxLWH8c=
|
||||
github.com/google/gnostic-models v0.7.1/go.mod h1:whL5G0m6dmc5cPxKc5bdKdEN3UjI7OUGxBlw57miDrQ=
|
||||
github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
|
||||
|
|
@ -240,8 +233,8 @@ github.com/google/go-querystring v1.2.0/go.mod h1:8IFJqpSRITyJ8QhQ13bmbeMBDfmeEJ
|
|||
github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
|
||||
github.com/google/gofuzz v1.2.0 h1:xRy4A+RhZaiKjJ1bPfwQ8sedCA+YS2YcCHW6ec7JMi0=
|
||||
github.com/google/gofuzz v1.2.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
|
||||
github.com/google/pprof v0.0.0-20260302011040-a15ffb7f9dcc h1:VBbFa1lDYWEeV5FZKUiYKYT0VxCp9twUmmaq9eb8sXw=
|
||||
github.com/google/pprof v0.0.0-20260302011040-a15ffb7f9dcc/go.mod h1:MxpfABSjhmINe3F1It9d+8exIHFvUqtLIRCdOGNXqiI=
|
||||
github.com/google/pprof v0.0.0-20260402051712-545e8a4df936 h1:EwtI+Al+DeppwYX2oXJCETMO23COyaKGP6fHVpkpWpg=
|
||||
github.com/google/pprof v0.0.0-20260402051712-545e8a4df936/go.mod h1:MxpfABSjhmINe3F1It9d+8exIHFvUqtLIRCdOGNXqiI=
|
||||
github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
|
||||
github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
|
||||
github.com/gorilla/mux v1.8.1 h1:TuBL49tXwgrFYWhqrNgrUNEY92u81SPhu7sTdzQEiWY=
|
||||
|
|
@ -250,8 +243,8 @@ github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 h1:JeSE6pjso5T
|
|||
github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674/go.mod h1:r4w70xmWCQKmi1ONH4KIaBptdivuRPyosB9RmPlGEwA=
|
||||
github.com/gruntwork-io/go-commons v0.17.2 h1:14dsCJ7M5Vv2X3BIPKeG9Kdy6vTMGhM8L4WZazxfTuY=
|
||||
github.com/gruntwork-io/go-commons v0.17.2/go.mod h1:zs7Q2AbUKuTarBPy19CIxJVUX/rBamfW8IwuWKniWkE=
|
||||
github.com/gruntwork-io/terratest v0.56.0 h1:Z01eNpWsgEqVQbMpdS5HzUZDBIxyib7Psqzias+HbqQ=
|
||||
github.com/gruntwork-io/terratest v0.56.0/go.mod h1:gflMQk8AYbzJSwKQzgt0vmF8Js+GTBA0nbE/vQe811o=
|
||||
github.com/gruntwork-io/terratest v1.0.0 h1:Zk7VJ5Z9vBSwv8OQ/zzkG5D/tfqyVyjMK+lq2v+Kn/c=
|
||||
github.com/gruntwork-io/terratest v1.0.0/go.mod h1:g2XWbOQOvnHBFcIYCt5ryaFBWp69+5L+QMbAwor+CBo=
|
||||
github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
|
||||
github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I=
|
||||
github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
|
||||
|
|
@ -274,8 +267,8 @@ github.com/jackc/pgpassfile v1.0.0 h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsI
|
|||
github.com/jackc/pgpassfile v1.0.0/go.mod h1:CEx0iS5ambNFdcRtxPj5JhEz+xB6uRky5eyVu/W2HEg=
|
||||
github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 h1:iCEnooe7UlwOQYpKFhBabPMi4aNAfoODPEFNiAnClxo=
|
||||
github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761/go.mod h1:5TJZWKEWniPve33vlWYSoGYefn3gLQRzjfDlhSJ9ZKM=
|
||||
github.com/jackc/pgx/v5 v5.8.0 h1:TYPDoleBBme0xGSAX3/+NujXXtpZn9HBONkQC7IEZSo=
|
||||
github.com/jackc/pgx/v5 v5.8.0/go.mod h1:QVeDInX2m9VyzvNeiCJVjCkNFqzsNb43204HshNSZKw=
|
||||
github.com/jackc/pgx/v5 v5.9.0 h1:T/dI+2TvmI2H8s/KH1/lXIbz1CUFk3gn5oTjr0/mBsE=
|
||||
github.com/jackc/pgx/v5 v5.9.0/go.mod h1:mal1tBGAFfLHvZzaYh77YS/eC6IX9OWbRV1QIIM0Jn4=
|
||||
github.com/jackc/puddle/v2 v2.2.2 h1:PR8nw+E/1w0GLuRFSmiioY6UooMp6KJv0/61nB7icHo=
|
||||
github.com/jackc/puddle/v2 v2.2.2/go.mod h1:vriiEXHvEE654aYKXXjOvZM39qJ0q+azkZFrfEOc3H4=
|
||||
github.com/jedib0t/go-pretty/v6 v6.6.7 h1:m+LbHpm0aIAPLzLbMfn8dc3Ht8MW7lsSO4MPItz/Uuo=
|
||||
|
|
@ -333,16 +326,14 @@ github.com/mfridman/tparse v0.18.0 h1:wh6dzOKaIwkUGyKgOntDW4liXSo37qg5AXbIhkMV3v
|
|||
github.com/mfridman/tparse v0.18.0/go.mod h1:gEvqZTuCgEhPbYk/2lS3Kcxg1GmTxxU7kTC8DvP0i/A=
|
||||
github.com/mitchellh/copystructure v1.2.0 h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw=
|
||||
github.com/mitchellh/copystructure v1.2.0/go.mod h1:qLl+cE2AmVv+CoeAwDPye/v+N2HKCj9FbZEVFJRxO9s=
|
||||
github.com/mitchellh/go-homedir v1.1.0 h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y=
|
||||
github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
|
||||
github.com/mitchellh/go-ps v1.0.0 h1:i6ampVEEF4wQFF+bkYfwYgY+F/uYJDktmvLPf7qIgjc=
|
||||
github.com/mitchellh/go-ps v1.0.0/go.mod h1:J4lOc8z8yJs6vUwklHw2XEIiT4z4C40KtWVN3nvg8Pg=
|
||||
github.com/mitchellh/hashstructure v1.1.0 h1:P6P1hdjqAAknpY/M1CGipelZgp+4y9ja9kmUZPXP+H0=
|
||||
github.com/mitchellh/hashstructure v1.1.0/go.mod h1:xUDAozZz0Wmdiufv0uyhnHkUTN6/6d8ulp4AwfLKrmA=
|
||||
github.com/mitchellh/reflectwalk v1.0.2 h1:G2LzWKi524PWgd3mLHV8Y5k7s6XUvT0Gef6zxSIeXaQ=
|
||||
github.com/mitchellh/reflectwalk v1.0.2/go.mod h1:mSTlrgnPZtwu0c4WaC2kGObEpuNDbx0jmZXqmk4esnw=
|
||||
github.com/moby/spdystream v0.5.0 h1:7r0J1Si3QO/kjRitvSLVVFUjxMEb/YLj6S9FF62JBCU=
|
||||
github.com/moby/spdystream v0.5.0/go.mod h1:xBAYlnt/ay+11ShkdFKNAG7LsyK/tmNBVvVOwrfMgdI=
|
||||
github.com/moby/spdystream v0.5.1 h1:9sNYeYZUcci9R6/w7KDaFWEWeV4LStVG78Mpyq/Zm/Y=
|
||||
github.com/moby/spdystream v0.5.1/go.mod h1:xBAYlnt/ay+11ShkdFKNAG7LsyK/tmNBVvVOwrfMgdI=
|
||||
github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
|
||||
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
|
||||
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
|
||||
|
|
@ -351,20 +342,18 @@ github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee h1:W5t00kpgFd
|
|||
github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
|
||||
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
|
||||
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
|
||||
github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f h1:y5//uYreIhSUg3J1GEMiLbxo1LJaP8RfCpH6pymGZus=
|
||||
github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f/go.mod h1:ZdcZmHo+o7JKHSa8/e818NopupXU1YMK5fe1lsApnBw=
|
||||
github.com/nxadm/tail v1.4.4/go.mod h1:kenIhsEOeOJmVchQTgglprH7qJGnHDVpk1VPCcaMI8A=
|
||||
github.com/nxadm/tail v1.4.8/go.mod h1:+ncqLTQzXmGhMZNUePPaPqPvBxHAIsmXswZKocGu+AU=
|
||||
github.com/onsi/ginkgo v1.6.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
|
||||
github.com/onsi/ginkgo v1.12.1/go.mod h1:zj2OWP4+oCPe1qIXoGWkgMRwljMUYCdkwsT2108oapk=
|
||||
github.com/onsi/ginkgo v1.16.5 h1:8xi0RTUf59SOSfEtZMvwTvXYMzG4gV23XVHOZiXNtnE=
|
||||
github.com/onsi/ginkgo v1.16.5/go.mod h1:+E8gABHa3K6zRBolWtd+ROzc/U5bkGt0FwiG042wbpU=
|
||||
github.com/onsi/ginkgo/v2 v2.28.1 h1:S4hj+HbZp40fNKuLUQOYLDgZLwNUVn19N3Atb98NCyI=
|
||||
github.com/onsi/ginkgo/v2 v2.28.1/go.mod h1:CLtbVInNckU3/+gC8LzkGUb9oF+e8W8TdUsxPwvdOgE=
|
||||
github.com/onsi/ginkgo/v2 v2.29.0 h1:rfh+ZFjgJhYWRoIqVf3Uwx/W20yLrcrE2h2GmYVRaag=
|
||||
github.com/onsi/ginkgo/v2 v2.29.0/go.mod h1:+aXOY+vzZ5mu2iI2HpTZUPmM//oQfsNFX6gU9kNcA44=
|
||||
github.com/onsi/gomega v1.7.1/go.mod h1:XdKZgCCFLUoM/7CFJVPcG8C1xQ1AJ0vpAezJrB7JYyY=
|
||||
github.com/onsi/gomega v1.10.1/go.mod h1:iN09h71vgCQne3DLsj+A5owkum+a2tYe+TOCB1ybHNo=
|
||||
github.com/onsi/gomega v1.39.1 h1:1IJLAad4zjPn2PsnhH70V4DKRFlrCzGBNrNaru+Vf28=
|
||||
github.com/onsi/gomega v1.39.1/go.mod h1:hL6yVALoTOxeWudERyfppUcZXjMwIMLnuSfruD2lcfg=
|
||||
github.com/onsi/gomega v1.40.0 h1:Vtol0e1MghCD2ZVIilPDIg44XSL9l2QAn8ZNaljWcJc=
|
||||
github.com/onsi/gomega v1.40.0/go.mod h1:M/Uqpu/8qTjtzCLUA2zJHX9Iilrau25x1PdoSRbWh5A=
|
||||
github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c h1:+mdjkGKdHQG3305AYmdv1U2eRNDiU2ErMBj1gwrq8eQ=
|
||||
github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c/go.mod h1:7rwL4CYBLnjLxUqIJNnCWiEdr3bn6IUYi15bNlnbCCU=
|
||||
github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
|
||||
|
|
@ -441,8 +430,8 @@ go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
|
|||
go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
|
||||
go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=
|
||||
go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y=
|
||||
go.uber.org/zap v1.27.1 h1:08RqriUEv8+ArZRYSTXy1LeBScaMpVSTBhCeaZYfMYc=
|
||||
go.uber.org/zap v1.27.1/go.mod h1:GB2qFLM7cTU87MWRP2mPIjqfIDnGu+VIO4V/SdhGo2E=
|
||||
go.uber.org/zap v1.28.0 h1:IZzaP1Fv73/T/pBMLk4VutPl36uNC+OSUh3JLG3FIjo=
|
||||
go.uber.org/zap v1.28.0/go.mod h1:rDLpOi171uODNm/mxFcuYWxDsqWSAVkFdX4XojSKg/Q=
|
||||
go.yaml.in/yaml/v2 v2.4.4 h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ=
|
||||
go.yaml.in/yaml/v2 v2.4.4/go.mod h1:gMZqIpDtDqOfM0uNfy0SkpRhvUryYH0Z6wdMYcacYXQ=
|
||||
go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
|
||||
|
|
@ -450,20 +439,20 @@ go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
|
|||
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
|
||||
golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
|
||||
golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
|
||||
golang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4=
|
||||
golang.org/x/crypto v0.49.0/go.mod h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA=
|
||||
golang.org/x/crypto v0.50.0 h1:zO47/JPrL6vsNkINmLoo/PH1gcxpls50DNogFvB5ZGI=
|
||||
golang.org/x/crypto v0.50.0/go.mod h1:3muZ7vA7PBCE6xgPX7nkzzjiUq87kRItoJQM1Yo8S+Q=
|
||||
golang.org/x/exp v0.0.0-20260312153236-7ab1446f8b90 h1:jiDhWWeC7jfWqR9c/uplMOqJ0sbNlNWv0UkzE0vX1MA=
|
||||
golang.org/x/exp v0.0.0-20260312153236-7ab1446f8b90/go.mod h1:xE1HEv6b+1SCZ5/uscMRjUBKtIxworgEcEi+/n9NQDQ=
|
||||
golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
|
||||
golang.org/x/mod v0.34.0 h1:xIHgNUUnW6sYkcM5Jleh05DvLOtwc6RitGHbDk4akRI=
|
||||
golang.org/x/mod v0.34.0/go.mod h1:ykgH52iCZe79kzLLMhyCUzhMci+nQj+0XkbXpNYtVjY=
|
||||
golang.org/x/mod v0.35.0 h1:Ww1D637e6Pg+Zb2KrWfHQUnH2dQRLBQyAtpr/haaJeM=
|
||||
golang.org/x/mod v0.35.0/go.mod h1:+GwiRhIInF8wPm+4AoT6L0FA1QWAad3OMdTRx4tFYlU=
|
||||
golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
|
||||
golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
|
||||
golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
|
||||
golang.org/x/net v0.0.0-20200520004742-59133d7f0dd7/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
|
||||
golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
|
||||
golang.org/x/net v0.52.0 h1:He/TN1l0e4mmR3QqHMT2Xab3Aj3L9qjbhRm78/6jrW0=
|
||||
golang.org/x/net v0.52.0/go.mod h1:R1MAz7uMZxVMualyPXb+VaqGSa3LIaUqk0eEt3w36Sw=
|
||||
golang.org/x/net v0.53.0 h1:d+qAbo5L0orcWAr0a9JweQpjXF19LMXJE8Ey7hwOdUA=
|
||||
golang.org/x/net v0.53.0/go.mod h1:JvMuJH7rrdiCfbeHoo3fCQU24Lf5JJwT9W3sJFulfgs=
|
||||
golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=
|
||||
golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q=
|
||||
golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
|
||||
|
|
@ -484,21 +473,21 @@ golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBc
|
|||
golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
|
||||
golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
|
||||
golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
|
||||
golang.org/x/sys v0.42.0 h1:omrd2nAlyT5ESRdCLYdm3+fMfNFE/+Rf4bDIQImRJeo=
|
||||
golang.org/x/sys v0.42.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
|
||||
golang.org/x/term v0.41.0 h1:QCgPso/Q3RTJx2Th4bDLqML4W6iJiaXFq2/ftQF13YU=
|
||||
golang.org/x/term v0.41.0/go.mod h1:3pfBgksrReYfZ5lvYM0kSO0LIkAl4Yl2bXOkKP7Ec2A=
|
||||
golang.org/x/sys v0.43.0 h1:Rlag2XtaFTxp19wS8MXlJwTvoh8ArU6ezoyFsMyCTNI=
|
||||
golang.org/x/sys v0.43.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
|
||||
golang.org/x/term v0.42.0 h1:UiKe+zDFmJobeJ5ggPwOshJIVt6/Ft0rcfrXZDLWAWY=
|
||||
golang.org/x/term v0.42.0/go.mod h1:Dq/D+snpsbazcBG5+F9Q1n2rXV8Ma+71xEjTRufARgY=
|
||||
golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
|
||||
golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
|
||||
golang.org/x/text v0.35.0 h1:JOVx6vVDFokkpaq1AEptVzLTpDe9KGpj5tR4/X+ybL8=
|
||||
golang.org/x/text v0.35.0/go.mod h1:khi/HExzZJ2pGnjenulevKNX1W67CUy0AsXcNubPGCA=
|
||||
golang.org/x/text v0.36.0 h1:JfKh3XmcRPqZPKevfXVpI1wXPTqbkE5f7JA92a55Yxg=
|
||||
golang.org/x/text v0.36.0/go.mod h1:NIdBknypM8iqVmPiuco0Dh6P5Jcdk8lJL0CUebqK164=
|
||||
golang.org/x/time v0.15.0 h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U=
|
||||
golang.org/x/time v0.15.0/go.mod h1:Y4YMaQmXwGQZoFaVFk4YpCt4FLQMYKZe9oeV/f4MSno=
|
||||
golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
|
||||
golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
|
||||
golang.org/x/tools v0.0.0-20201224043029-2b0845dc783e/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
|
||||
golang.org/x/tools v0.43.0 h1:12BdW9CeB3Z+J/I/wj34VMl8X+fEXBxVR90JeMX5E7s=
|
||||
golang.org/x/tools v0.43.0/go.mod h1:uHkMso649BX2cZK6+RpuIPXS3ho2hZo4FVwfoy1vIk0=
|
||||
golang.org/x/tools v0.44.0 h1:UP4ajHPIcuMjT1GqzDWRlalUEoY+uzoZKnhOjbIPD2c=
|
||||
golang.org/x/tools v0.44.0/go.mod h1:KA0AfVErSdxRZIsOVipbv3rQhVXTnlU6UhKxHd1seDI=
|
||||
golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
|
||||
golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
|
||||
golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
|
||||
|
|
@ -511,8 +500,8 @@ google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQ
|
|||
google.golang.org/protobuf v1.20.1-0.20200309200217-e05f789c0967/go.mod h1:A+miEFZTKqfCUM6K7xSMQL9OKL/b6hQv+e19PK+JZNE=
|
||||
google.golang.org/protobuf v1.21.0/go.mod h1:47Nbq4nVaFHyn7ilMalzfO3qCViNmqZ2kzikPIcrTAo=
|
||||
google.golang.org/protobuf v1.23.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
|
||||
google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
|
||||
google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
|
||||
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af h1:+5/Sw3GsDNlEmu7TfklWKPdQ0Ykja5VEmq2i817+jbI=
|
||||
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
|
||||
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
|
||||
gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
|
||||
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
|
||||
|
|
@ -531,22 +520,24 @@ gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
|
|||
gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
|
||||
gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
|
||||
gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
|
||||
k8s.io/api v0.35.2 h1:tW7mWc2RpxW7HS4CoRXhtYHSzme1PN1UjGHJ1bdrtdw=
|
||||
k8s.io/api v0.35.2/go.mod h1:7AJfqGoAZcwSFhOjcGM7WV05QxMMgUaChNfLTXDRE60=
|
||||
k8s.io/apiextensions-apiserver v0.35.2 h1:iyStXHoJZsUXPh/nFAsjC29rjJWdSgUmG1XpApE29c0=
|
||||
k8s.io/apiextensions-apiserver v0.35.2/go.mod h1:OdyGvcO1FtMDWQ+rRh/Ei3b6X3g2+ZDHd0MSRGeS8rU=
|
||||
k8s.io/apimachinery v0.35.2 h1:NqsM/mmZA7sHW02JZ9RTtk3wInRgbVxL8MPfzSANAK8=
|
||||
k8s.io/apimachinery v0.35.2/go.mod h1:jQCgFZFR1F4Ik7hvr2g84RTJSZegBc8yHgFWKn//hns=
|
||||
k8s.io/client-go v0.35.2 h1:YUfPefdGJA4aljDdayAXkc98DnPkIetMl4PrKX97W9o=
|
||||
k8s.io/client-go v0.35.2/go.mod h1:4QqEwh4oQpeK8AaefZ0jwTFJw/9kIjdQi0jpKeYvz7g=
|
||||
k8s.io/api v0.36.1 h1:XbL/EMj8K2aJpJtePmqUyQMsM0D4QI2pvl7YKJ20FTY=
|
||||
k8s.io/api v0.36.1/go.mod h1:KOWo4ey3TINlXjeHVuwB3i+tXXnu+UcwFBHlI/9dvEo=
|
||||
k8s.io/apiextensions-apiserver v0.36.0 h1:Wt7E8J+VBCbj4FjiBfDTK/neXDDjyJVJc7xfuOHImZ0=
|
||||
k8s.io/apiextensions-apiserver v0.36.0/go.mod h1:kGDjH0msuiIB3tgsYRV0kS9GqpMYMUsQ3GHv7TApyug=
|
||||
k8s.io/apimachinery v0.36.1 h1:G63Gjx2W+q0YD+72Vo8oY0nDnePVwnuzTmmy5ENrVSA=
|
||||
k8s.io/apimachinery v0.36.1/go.mod h1:ibYOR00vW/I1kzvi5SF0dRuJ52BvKtfvRdOn35GPQ+8=
|
||||
k8s.io/client-go v0.36.1 h1:FN/K8QIT2CEDt+2WB2HnWrUANZ50AP5GII43/SP2JR0=
|
||||
k8s.io/client-go v0.36.1/go.mod h1:s6rAnCtTGYDQnpNjEhSaISV+2O8jwruZ6m3QOYBFbtU=
|
||||
k8s.io/klog/v2 v2.140.0 h1:Tf+J3AH7xnUzZyVVXhTgGhEKnFqye14aadWv7bzXdzc=
|
||||
k8s.io/klog/v2 v2.140.0/go.mod h1:o+/RWfJ6PwpnFn7OyAG3QnO47BFsymfEfrz6XyYSSp0=
|
||||
k8s.io/kube-openapi v0.0.0-20260304202019-5b3e3fdb0acf h1:btPscg4cMql0XdYK2jLsJcNEKmACJz8l+U7geC06FiM=
|
||||
k8s.io/kube-openapi v0.0.0-20260304202019-5b3e3fdb0acf/go.mod h1:kdmbQkyfwUagLfXIad1y2TdrjPFWp2Q89B3qkRwf/pQ=
|
||||
k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a h1:xCeOEAOoGYl2jnJoHkC3hkbPJgdATINPMAxaynU2Ovg=
|
||||
k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a/go.mod h1:uGBT7iTA6c6MvqUvSXIaYZo9ukscABYi2btjhvgKGZ0=
|
||||
k8s.io/streaming v0.36.1 h1:L+K68n4Gg940BGNNYtUBvL1WTLL0YnKT3s+P1MNAmR4=
|
||||
k8s.io/streaming v0.36.1/go.mod h1:z6fV3D+NVkoeqRMtWwlUZK6U17SY/LqNzOxWL6GyR/s=
|
||||
k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2 h1:AZYQSJemyQB5eRxqcPky+/7EdBj0xi3g0ZcxxJ7vbWU=
|
||||
k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2/go.mod h1:xDxuJ0whA3d0I4mf/C4ppKHxXynQ+fxnkmQH0vTHnuk=
|
||||
sigs.k8s.io/controller-runtime v0.23.3 h1:VjB/vhoPoA9l1kEKZHBMnQF33tdCLQKJtydy4iqwZ80=
|
||||
sigs.k8s.io/controller-runtime v0.23.3/go.mod h1:B6COOxKptp+YaUT5q4l6LqUJTRpizbgf9KSRNdQGns0=
|
||||
sigs.k8s.io/controller-runtime v0.24.1 h1:miPEwrmirImAvgME1L9qebGHrOnGJoVmVdtOU9fRfo4=
|
||||
sigs.k8s.io/controller-runtime v0.24.1/go.mod h1:vFkfY5fGt5xAC/sKb8IBFKgWPNKG9OUG29dR8Y2wImw=
|
||||
sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg=
|
||||
sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730/go.mod h1:mdzfpAEoE6DHQEN0uh9ZbOCuHbLK5wOm7dK4ctXE9Tg=
|
||||
sigs.k8s.io/randfill v1.0.0 h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU=
|
||||
|
|
|
|||
Loading…
Reference in New Issue