2017-02-07 21:33:23 +00:00
|
|
|
/*
|
|
|
|
Copyright 2015 The Kubernetes Authors.
|
|
|
|
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
|
|
you may not use this file except in compliance with the License.
|
|
|
|
You may obtain a copy of the License at
|
|
|
|
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
|
|
See the License for the specific language governing permissions and
|
|
|
|
limitations under the License.
|
|
|
|
*/
|
|
|
|
|
|
|
|
/*
|
|
|
|
This file (together with pkg/apis/extensions/v1beta1/types.go) contain the experimental
|
|
|
|
types in kubernetes. These API objects are experimental, meaning that the
|
|
|
|
APIs may be broken at any time by the kubernetes team.
|
|
|
|
|
|
|
|
DISCLAIMER: The implementation of the experimental API group itself is
|
|
|
|
a temporary one meant as a stopgap solution until kubernetes has proper
|
|
|
|
support for multiple API groups. The transition may require changes
|
|
|
|
beyond registration differences. In other words, experimental API group
|
|
|
|
support is experimental.
|
|
|
|
*/
|
|
|
|
|
|
|
|
package extensions
|
|
|
|
|
|
|
|
import (
|
2017-04-07 10:49:53 +00:00
|
|
|
"k8s.io/client-go/pkg/api"
|
|
|
|
"k8s.io/client-go/pkg/api/resource"
|
|
|
|
"k8s.io/client-go/pkg/api/unversioned"
|
|
|
|
"k8s.io/client-go/pkg/util/intstr"
|
2017-02-07 21:33:23 +00:00
|
|
|
)
|
|
|
|
|
|
|
|
const (
|
|
|
|
// SysctlsPodSecurityPolicyAnnotationKey represents the key of a whitelist of
|
|
|
|
// allowed safe and unsafe sysctls in a pod spec. It's a comma-separated list of plain sysctl
|
|
|
|
// names or sysctl patterns (which end in *). The string "*" matches all sysctls.
|
|
|
|
SysctlsPodSecurityPolicyAnnotationKey string = "security.alpha.kubernetes.io/sysctls"
|
|
|
|
)
|
|
|
|
|
|
|
|
// describes the attributes of a scale subresource
|
|
|
|
type ScaleSpec struct {
|
|
|
|
// desired number of instances for the scaled object.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Replicas int32 `json:"replicas,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// represents the current status of a scale subresource.
|
|
|
|
type ScaleStatus struct {
|
|
|
|
// actual number of observed instances of the scaled object.
|
|
|
|
Replicas int32 `json:"replicas"`
|
|
|
|
|
|
|
|
// label query over pods that should match the replicas count.
|
2017-04-07 10:49:53 +00:00
|
|
|
// More info: http://kubernetes.io/docs/user-guide/labels#label-selectors
|
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Selector *unversioned.LabelSelector `json:"selector,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// +genclient=true
|
|
|
|
// +noMethods=true
|
|
|
|
|
|
|
|
// represents a scaling request for a resource.
|
|
|
|
type Scale struct {
|
|
|
|
unversioned.TypeMeta `json:",inline"`
|
|
|
|
// Standard object metadata; More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#metadata.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
api.ObjectMeta `json:"metadata,omitempty"`
|
|
|
|
|
|
|
|
// defines the behavior of the scale. More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#spec-and-status.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Spec ScaleSpec `json:"spec,omitempty"`
|
|
|
|
|
|
|
|
// current status of the scale. More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#spec-and-status. Read-only.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Status ScaleStatus `json:"status,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// Dummy definition
|
|
|
|
type ReplicationControllerDummy struct {
|
|
|
|
unversioned.TypeMeta `json:",inline"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// Alpha-level support for Custom Metrics in HPA (as annotations).
|
|
|
|
type CustomMetricTarget struct {
|
|
|
|
// Custom Metric name.
|
|
|
|
Name string `json:"name"`
|
|
|
|
// Custom Metric value (average).
|
|
|
|
TargetValue resource.Quantity `json:"value"`
|
|
|
|
}
|
|
|
|
|
|
|
|
type CustomMetricTargetList struct {
|
|
|
|
Items []CustomMetricTarget `json:"items"`
|
|
|
|
}
|
|
|
|
|
|
|
|
type CustomMetricCurrentStatus struct {
|
|
|
|
// Custom Metric name.
|
|
|
|
Name string `json:"name"`
|
|
|
|
// Custom Metric value (average).
|
|
|
|
CurrentValue resource.Quantity `json:"value"`
|
|
|
|
}
|
|
|
|
|
|
|
|
type CustomMetricCurrentStatusList struct {
|
|
|
|
Items []CustomMetricCurrentStatus `json:"items"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// +genclient=true
|
|
|
|
// +nonNamespaced=true
|
|
|
|
|
|
|
|
// A ThirdPartyResource is a generic representation of a resource, it is used by add-ons and plugins to add new resource
|
|
|
|
// types to the API. It consists of one or more Versions of the api.
|
|
|
|
type ThirdPartyResource struct {
|
|
|
|
unversioned.TypeMeta `json:",inline"`
|
|
|
|
|
|
|
|
// Standard object metadata
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
api.ObjectMeta `json:"metadata,omitempty"`
|
|
|
|
|
|
|
|
// Description is the description of this object.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Description string `json:"description,omitempty"`
|
|
|
|
|
|
|
|
// Versions are versions for this third party object
|
|
|
|
Versions []APIVersion `json:"versions,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
type ThirdPartyResourceList struct {
|
|
|
|
unversioned.TypeMeta `json:",inline"`
|
|
|
|
|
|
|
|
// Standard list metadata.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
unversioned.ListMeta `json:"metadata,omitempty"`
|
|
|
|
|
|
|
|
// Items is the list of horizontal pod autoscalers.
|
|
|
|
Items []ThirdPartyResource `json:"items"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// An APIVersion represents a single concrete version of an object model.
|
|
|
|
// TODO: we should consider merge this struct with GroupVersion in unversioned.go
|
|
|
|
type APIVersion struct {
|
|
|
|
// Name of this version (e.g. 'v1').
|
|
|
|
Name string `json:"name,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// An internal object, used for versioned storage in etcd. Not exposed to the end user.
|
|
|
|
type ThirdPartyResourceData struct {
|
|
|
|
unversioned.TypeMeta `json:",inline"`
|
|
|
|
// Standard object metadata.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
api.ObjectMeta `json:"metadata,omitempty"`
|
|
|
|
|
|
|
|
// Data is the raw JSON data for this data.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Data []byte `json:"data,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// +genclient=true
|
|
|
|
|
|
|
|
type Deployment struct {
|
|
|
|
unversioned.TypeMeta `json:",inline"`
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
|
|
|
api.ObjectMeta `json:"metadata,omitempty"`
|
2017-02-07 21:33:23 +00:00
|
|
|
|
|
|
|
// Specification of the desired behavior of the Deployment.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Spec DeploymentSpec `json:"spec,omitempty"`
|
|
|
|
|
|
|
|
// Most recently observed status of the Deployment.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Status DeploymentStatus `json:"status,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
type DeploymentSpec struct {
|
|
|
|
// Number of desired pods. This is a pointer to distinguish between explicit
|
|
|
|
// zero and not specified. Defaults to 1.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Replicas int32 `json:"replicas,omitempty"`
|
|
|
|
|
|
|
|
// Label selector for pods. Existing ReplicaSets whose pods are
|
|
|
|
// selected by this will be the ones affected by this deployment.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Selector *unversioned.LabelSelector `json:"selector,omitempty"`
|
|
|
|
|
|
|
|
// Template describes the pods that will be created.
|
|
|
|
Template api.PodTemplateSpec `json:"template"`
|
|
|
|
|
|
|
|
// The deployment strategy to use to replace existing pods with new ones.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Strategy DeploymentStrategy `json:"strategy,omitempty"`
|
|
|
|
|
|
|
|
// Minimum number of seconds for which a newly created pod should be ready
|
|
|
|
// without any of its container crashing, for it to be considered available.
|
|
|
|
// Defaults to 0 (pod will be considered available as soon as it is ready)
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
MinReadySeconds int32 `json:"minReadySeconds,omitempty"`
|
|
|
|
|
|
|
|
// The number of old ReplicaSets to retain to allow rollback.
|
|
|
|
// This is a pointer to distinguish between explicit zero and not specified.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
RevisionHistoryLimit *int32 `json:"revisionHistoryLimit,omitempty"`
|
|
|
|
|
|
|
|
// Indicates that the deployment is paused and will not be processed by the
|
|
|
|
// deployment controller.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Paused bool `json:"paused,omitempty"`
|
2017-04-07 10:49:53 +00:00
|
|
|
|
2017-02-07 21:33:23 +00:00
|
|
|
// The config this deployment is rolling back to. Will be cleared after rollback is done.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
RollbackTo *RollbackConfig `json:"rollbackTo,omitempty"`
|
2017-04-07 10:49:53 +00:00
|
|
|
|
|
|
|
// The maximum time in seconds for a deployment to make progress before it
|
|
|
|
// is considered to be failed. The deployment controller will continue to
|
|
|
|
// process failed deployments and a condition with a ProgressDeadlineExceeded
|
|
|
|
// reason will be surfaced in the deployment status. Once autoRollback is
|
|
|
|
// implemented, the deployment controller will automatically rollback failed
|
|
|
|
// deployments. Note that progress will not be estimated during the time a
|
|
|
|
// deployment is paused. This is not set by default.
|
|
|
|
ProgressDeadlineSeconds *int32 `json:"progressDeadlineSeconds,omitempty"`
|
2017-02-07 21:33:23 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
// DeploymentRollback stores the information required to rollback a deployment.
|
|
|
|
type DeploymentRollback struct {
|
|
|
|
unversioned.TypeMeta `json:",inline"`
|
|
|
|
// Required: This must match the Name of a deployment.
|
|
|
|
Name string `json:"name"`
|
|
|
|
// The annotations to be updated to a deployment
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
UpdatedAnnotations map[string]string `json:"updatedAnnotations,omitempty"`
|
|
|
|
// The config of this deployment rollback.
|
|
|
|
RollbackTo RollbackConfig `json:"rollbackTo"`
|
|
|
|
}
|
|
|
|
|
|
|
|
type RollbackConfig struct {
|
|
|
|
// The revision to rollback to. If set to 0, rollbck to the last revision.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Revision int64 `json:"revision,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
const (
|
|
|
|
// DefaultDeploymentUniqueLabelKey is the default key of the selector that is added
|
|
|
|
// to existing RCs (and label key that is added to its pods) to prevent the existing RCs
|
|
|
|
// to select new pods (and old pods being select by new RC).
|
|
|
|
DefaultDeploymentUniqueLabelKey string = "pod-template-hash"
|
|
|
|
)
|
|
|
|
|
|
|
|
type DeploymentStrategy struct {
|
|
|
|
// Type of deployment. Can be "Recreate" or "RollingUpdate". Default is RollingUpdate.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Type DeploymentStrategyType `json:"type,omitempty"`
|
|
|
|
|
|
|
|
// Rolling update config params. Present only if DeploymentStrategyType =
|
|
|
|
// RollingUpdate.
|
|
|
|
//---
|
|
|
|
// TODO: Update this to follow our convention for oneOf, whatever we decide it
|
|
|
|
// to be.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
RollingUpdate *RollingUpdateDeployment `json:"rollingUpdate,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
type DeploymentStrategyType string
|
|
|
|
|
|
|
|
const (
|
|
|
|
// Kill all existing pods before creating new ones.
|
|
|
|
RecreateDeploymentStrategyType DeploymentStrategyType = "Recreate"
|
|
|
|
|
|
|
|
// Replace the old RCs by new one using rolling update i.e gradually scale down the old RCs and scale up the new one.
|
|
|
|
RollingUpdateDeploymentStrategyType DeploymentStrategyType = "RollingUpdate"
|
|
|
|
)
|
|
|
|
|
|
|
|
// Spec to control the desired behavior of rolling update.
|
|
|
|
type RollingUpdateDeployment struct {
|
|
|
|
// The maximum number of pods that can be unavailable during the update.
|
|
|
|
// Value can be an absolute number (ex: 5) or a percentage of total pods at the start of update (ex: 10%).
|
|
|
|
// Absolute number is calculated from percentage by rounding up.
|
|
|
|
// This can not be 0 if MaxSurge is 0.
|
|
|
|
// By default, a fixed value of 1 is used.
|
|
|
|
// Example: when this is set to 30%, the old RC can be scaled down by 30%
|
|
|
|
// immediately when the rolling update starts. Once new pods are ready, old RC
|
|
|
|
// can be scaled down further, followed by scaling up the new RC, ensuring
|
|
|
|
// that at least 70% of original number of pods are available at all times
|
|
|
|
// during the update.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
MaxUnavailable intstr.IntOrString `json:"maxUnavailable,omitempty"`
|
|
|
|
|
|
|
|
// The maximum number of pods that can be scheduled above the original number of
|
|
|
|
// pods.
|
|
|
|
// Value can be an absolute number (ex: 5) or a percentage of total pods at
|
|
|
|
// the start of the update (ex: 10%). This can not be 0 if MaxUnavailable is 0.
|
|
|
|
// Absolute number is calculated from percentage by rounding up.
|
|
|
|
// By default, a value of 1 is used.
|
|
|
|
// Example: when this is set to 30%, the new RC can be scaled up by 30%
|
|
|
|
// immediately when the rolling update starts. Once old pods have been killed,
|
|
|
|
// new RC can be scaled up further, ensuring that total number of pods running
|
|
|
|
// at any time during the update is atmost 130% of original pods.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
MaxSurge intstr.IntOrString `json:"maxSurge,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
type DeploymentStatus struct {
|
|
|
|
// The generation observed by the deployment controller.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
ObservedGeneration int64 `json:"observedGeneration,omitempty"`
|
|
|
|
|
|
|
|
// Total number of non-terminated pods targeted by this deployment (their labels match the selector).
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Replicas int32 `json:"replicas,omitempty"`
|
|
|
|
|
|
|
|
// Total number of non-terminated pods targeted by this deployment that have the desired template spec.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
UpdatedReplicas int32 `json:"updatedReplicas,omitempty"`
|
|
|
|
|
|
|
|
// Total number of available pods (ready for at least minReadySeconds) targeted by this deployment.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
AvailableReplicas int32 `json:"availableReplicas,omitempty"`
|
|
|
|
|
|
|
|
// Total number of unavailable pods targeted by this deployment.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
UnavailableReplicas int32 `json:"unavailableReplicas,omitempty"`
|
2017-04-07 10:49:53 +00:00
|
|
|
|
|
|
|
// Represents the latest available observations of a deployment's current state.
|
|
|
|
Conditions []DeploymentCondition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`
|
|
|
|
}
|
|
|
|
|
|
|
|
type DeploymentConditionType string
|
|
|
|
|
|
|
|
// These are valid conditions of a deployment.
|
|
|
|
const (
|
|
|
|
// Available means the deployment is available, ie. at least the minimum available
|
|
|
|
// replicas required are up and running for at least minReadySeconds.
|
|
|
|
DeploymentAvailable DeploymentConditionType = "Available"
|
|
|
|
// Progressing means the deployment is progressing. Progress for a deployment is
|
|
|
|
// considered when a new replica set is created or adopted, and when new pods scale
|
|
|
|
// up or old pods scale down. Progress is not estimated for paused deployments or
|
|
|
|
// when progressDeadlineSeconds is not specified.
|
|
|
|
DeploymentProgressing DeploymentConditionType = "Progressing"
|
|
|
|
// ReplicaFailure is added in a deployment when one of its pods fails to be created
|
|
|
|
// or deleted.
|
|
|
|
DeploymentReplicaFailure DeploymentConditionType = "ReplicaFailure"
|
|
|
|
)
|
|
|
|
|
|
|
|
// DeploymentCondition describes the state of a deployment at a certain point.
|
|
|
|
type DeploymentCondition struct {
|
|
|
|
// Type of deployment condition.
|
|
|
|
Type DeploymentConditionType `json:"type"`
|
|
|
|
// Status of the condition, one of True, False, Unknown.
|
|
|
|
Status api.ConditionStatus `json:"status"`
|
|
|
|
// The last time this condition was updated.
|
|
|
|
LastUpdateTime unversioned.Time `json:"lastUpdateTime,omitempty"`
|
|
|
|
// Last time the condition transitioned from one status to another.
|
|
|
|
LastTransitionTime unversioned.Time `json:"lastTransitionTime,omitempty"`
|
|
|
|
// The reason for the condition's last transition.
|
|
|
|
Reason string `json:"reason,omitempty"`
|
|
|
|
// A human readable message indicating details about the transition.
|
|
|
|
Message string `json:"message,omitempty"`
|
2017-02-07 21:33:23 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
type DeploymentList struct {
|
|
|
|
unversioned.TypeMeta `json:",inline"`
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
unversioned.ListMeta `json:"metadata,omitempty"`
|
|
|
|
|
|
|
|
// Items is the list of deployments.
|
|
|
|
Items []Deployment `json:"items"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// TODO(madhusudancs): Uncomment while implementing DaemonSet updates.
|
|
|
|
/* Commenting out for v1.2. We are planning to bring these types back with a more robust DaemonSet update implementation in v1.3, hence not deleting but just commenting the types out.
|
|
|
|
type DaemonSetUpdateStrategy struct {
|
|
|
|
// Type of daemon set update. Only "RollingUpdate" is supported at this time. Default is RollingUpdate.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Type DaemonSetUpdateStrategyType `json:"type,omitempty"`
|
|
|
|
|
|
|
|
// Rolling update config params. Present only if DaemonSetUpdateStrategy =
|
|
|
|
// RollingUpdate.
|
|
|
|
//---
|
|
|
|
// TODO: Update this to follow our convention for oneOf, whatever we decide it
|
|
|
|
// to be. Same as DeploymentStrategy.RollingUpdate.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
RollingUpdate *RollingUpdateDaemonSet `json:"rollingUpdate,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
type DaemonSetUpdateStrategyType string
|
|
|
|
|
|
|
|
const (
|
|
|
|
// Replace the old daemons by new ones using rolling update i.e replace them on each node one after the other.
|
|
|
|
RollingUpdateDaemonSetStrategyType DaemonSetUpdateStrategyType = "RollingUpdate"
|
|
|
|
)
|
|
|
|
|
|
|
|
// Spec to control the desired behavior of daemon set rolling update.
|
|
|
|
type RollingUpdateDaemonSet struct {
|
|
|
|
// The maximum number of DaemonSet pods that can be unavailable during the
|
|
|
|
// update. Value can be an absolute number (ex: 5) or a percentage of total
|
|
|
|
// number of DaemonSet pods at the start of the update (ex: 10%). Absolute
|
|
|
|
// number is calculated from percentage by rounding up.
|
|
|
|
// This cannot be 0.
|
|
|
|
// Default value is 1.
|
|
|
|
// Example: when this is set to 30%, 30% of the currently running DaemonSet
|
|
|
|
// pods can be stopped for an update at any given time. The update starts
|
|
|
|
// by stopping at most 30% of the currently running DaemonSet pods and then
|
|
|
|
// brings up new DaemonSet pods in their place. Once the new pods are ready,
|
|
|
|
// it then proceeds onto other DaemonSet pods, thus ensuring that at least
|
|
|
|
// 70% of original number of DaemonSet pods are available at all times
|
|
|
|
// during the update.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
MaxUnavailable intstr.IntOrString `json:"maxUnavailable,omitempty"`
|
|
|
|
|
|
|
|
// Minimum number of seconds for which a newly created DaemonSet pod should
|
|
|
|
// be ready without any of its container crashing, for it to be considered
|
|
|
|
// available. Defaults to 0 (pod will be considered available as soon as it
|
|
|
|
// is ready).
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
MinReadySeconds int `json:"minReadySeconds,omitempty"`
|
|
|
|
}
|
|
|
|
*/
|
|
|
|
|
|
|
|
// DaemonSetSpec is the specification of a daemon set.
|
|
|
|
type DaemonSetSpec struct {
|
|
|
|
// Selector is a label query over pods that are managed by the daemon set.
|
|
|
|
// Must match in order to be controlled.
|
|
|
|
// If empty, defaulted to labels on Pod template.
|
2017-04-07 10:49:53 +00:00
|
|
|
// More info: http://kubernetes.io/docs/user-guide/labels#label-selectors
|
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Selector *unversioned.LabelSelector `json:"selector,omitempty"`
|
|
|
|
|
|
|
|
// Template is the object that describes the pod that will be created.
|
|
|
|
// The DaemonSet will create exactly one copy of this pod on every node
|
|
|
|
// that matches the template's node selector (or on every node if no node
|
|
|
|
// selector is specified).
|
2017-04-07 10:49:53 +00:00
|
|
|
// More info: http://kubernetes.io/docs/user-guide/replication-controller#pod-template
|
2017-02-07 21:33:23 +00:00
|
|
|
Template api.PodTemplateSpec `json:"template"`
|
|
|
|
|
|
|
|
// TODO(madhusudancs): Uncomment while implementing DaemonSet updates.
|
|
|
|
/* Commenting out for v1.2. We are planning to bring these fields back with a more robust DaemonSet update implementation in v1.3, hence not deleting but just commenting these fields out.
|
2017-04-07 10:49:53 +00:00
|
|
|
// Update strategy to replace existing DaemonSet pods with new pods.
|
|
|
|
// +optional
|
|
|
|
UpdateStrategy DaemonSetUpdateStrategy `json:"updateStrategy,omitempty"`
|
|
|
|
|
|
|
|
// Label key that is added to DaemonSet pods to distinguish between old and
|
|
|
|
// new pod templates during DaemonSet update.
|
|
|
|
// Users can set this to an empty string to indicate that the system should
|
|
|
|
// not add any label. If unspecified, system uses
|
|
|
|
// DefaultDaemonSetUniqueLabelKey("daemonset.kubernetes.io/podTemplateHash").
|
|
|
|
// Value of this key is hash of DaemonSetSpec.PodTemplateSpec.
|
|
|
|
// No label is added if this is set to empty string.
|
|
|
|
// +optional
|
|
|
|
UniqueLabelKey string `json:"uniqueLabelKey,omitempty"`
|
2017-02-07 21:33:23 +00:00
|
|
|
*/
|
|
|
|
}
|
|
|
|
|
|
|
|
const (
|
|
|
|
// DefaultDaemonSetUniqueLabelKey is the default key of the labels that is added
|
|
|
|
// to daemon set pods to distinguish between old and new pod templates during
|
|
|
|
// DaemonSet update. See DaemonSetSpec's UniqueLabelKey field for more information.
|
|
|
|
DefaultDaemonSetUniqueLabelKey string = "daemonset.kubernetes.io/podTemplateHash"
|
|
|
|
)
|
|
|
|
|
|
|
|
// DaemonSetStatus represents the current status of a daemon set.
|
|
|
|
type DaemonSetStatus struct {
|
|
|
|
// CurrentNumberScheduled is the number of nodes that are running at least 1
|
|
|
|
// daemon pod and are supposed to run the daemon pod.
|
|
|
|
CurrentNumberScheduled int32 `json:"currentNumberScheduled"`
|
|
|
|
|
|
|
|
// NumberMisscheduled is the number of nodes that are running the daemon pod, but are
|
|
|
|
// not supposed to run the daemon pod.
|
|
|
|
NumberMisscheduled int32 `json:"numberMisscheduled"`
|
|
|
|
|
|
|
|
// DesiredNumberScheduled is the total number of nodes that should be running the daemon
|
|
|
|
// pod (including nodes correctly running the daemon pod).
|
|
|
|
DesiredNumberScheduled int32 `json:"desiredNumberScheduled"`
|
2017-04-07 10:49:53 +00:00
|
|
|
|
|
|
|
// NumberReady is the number of nodes that should be running the daemon pod and have one
|
|
|
|
// or more of the daemon pod running and ready.
|
|
|
|
NumberReady int32 `json:"numberReady"`
|
2017-02-07 21:33:23 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
// +genclient=true
|
|
|
|
|
|
|
|
// DaemonSet represents the configuration of a daemon set.
|
|
|
|
type DaemonSet struct {
|
|
|
|
unversioned.TypeMeta `json:",inline"`
|
|
|
|
// Standard object's metadata.
|
|
|
|
// More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#metadata
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
api.ObjectMeta `json:"metadata,omitempty"`
|
|
|
|
|
|
|
|
// Spec defines the desired behavior of this daemon set.
|
|
|
|
// More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#spec-and-status
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Spec DaemonSetSpec `json:"spec,omitempty"`
|
|
|
|
|
|
|
|
// Status is the current status of this daemon set. This data may be
|
|
|
|
// out of date by some window of time.
|
|
|
|
// Populated by the system.
|
|
|
|
// Read-only.
|
|
|
|
// More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#spec-and-status
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Status DaemonSetStatus `json:"status,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// DaemonSetList is a collection of daemon sets.
|
|
|
|
type DaemonSetList struct {
|
|
|
|
unversioned.TypeMeta `json:",inline"`
|
|
|
|
// Standard list metadata.
|
|
|
|
// More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#metadata
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
unversioned.ListMeta `json:"metadata,omitempty"`
|
|
|
|
|
|
|
|
// Items is a list of daemon sets.
|
|
|
|
Items []DaemonSet `json:"items"`
|
|
|
|
}
|
|
|
|
|
|
|
|
type ThirdPartyResourceDataList struct {
|
|
|
|
unversioned.TypeMeta `json:",inline"`
|
|
|
|
// Standard list metadata
|
|
|
|
// More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#metadata
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
unversioned.ListMeta `json:"metadata,omitempty"`
|
|
|
|
// Items is a list of third party objects
|
|
|
|
Items []ThirdPartyResourceData `json:"items"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// +genclient=true
|
|
|
|
|
|
|
|
// Ingress is a collection of rules that allow inbound connections to reach the
|
|
|
|
// endpoints defined by a backend. An Ingress can be configured to give services
|
|
|
|
// externally-reachable urls, load balance traffic, terminate SSL, offer name
|
|
|
|
// based virtual hosting etc.
|
|
|
|
type Ingress struct {
|
|
|
|
unversioned.TypeMeta `json:",inline"`
|
|
|
|
// Standard object's metadata.
|
|
|
|
// More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#metadata
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
api.ObjectMeta `json:"metadata,omitempty"`
|
|
|
|
|
|
|
|
// Spec is the desired state of the Ingress.
|
|
|
|
// More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#spec-and-status
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Spec IngressSpec `json:"spec,omitempty"`
|
|
|
|
|
|
|
|
// Status is the current state of the Ingress.
|
|
|
|
// More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#spec-and-status
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Status IngressStatus `json:"status,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// IngressList is a collection of Ingress.
|
|
|
|
type IngressList struct {
|
|
|
|
unversioned.TypeMeta `json:",inline"`
|
|
|
|
// Standard object's metadata.
|
|
|
|
// More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#metadata
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
unversioned.ListMeta `json:"metadata,omitempty"`
|
|
|
|
|
|
|
|
// Items is the list of Ingress.
|
|
|
|
Items []Ingress `json:"items"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// IngressSpec describes the Ingress the user wishes to exist.
|
|
|
|
type IngressSpec struct {
|
|
|
|
// A default backend capable of servicing requests that don't match any
|
|
|
|
// rule. At least one of 'backend' or 'rules' must be specified. This field
|
|
|
|
// is optional to allow the loadbalancer controller or defaulting logic to
|
|
|
|
// specify a global default.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Backend *IngressBackend `json:"backend,omitempty"`
|
|
|
|
|
|
|
|
// TLS configuration. Currently the Ingress only supports a single TLS
|
|
|
|
// port, 443. If multiple members of this list specify different hosts, they
|
|
|
|
// will be multiplexed on the same port according to the hostname specified
|
|
|
|
// through the SNI TLS extension, if the ingress controller fulfilling the
|
|
|
|
// ingress supports SNI.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
TLS []IngressTLS `json:"tls,omitempty"`
|
|
|
|
|
|
|
|
// A list of host rules used to configure the Ingress. If unspecified, or
|
|
|
|
// no rule matches, all traffic is sent to the default backend.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Rules []IngressRule `json:"rules,omitempty"`
|
|
|
|
// TODO: Add the ability to specify load-balancer IP through claims
|
|
|
|
}
|
|
|
|
|
|
|
|
// IngressTLS describes the transport layer security associated with an Ingress.
|
|
|
|
type IngressTLS struct {
|
|
|
|
// Hosts are a list of hosts included in the TLS certificate. The values in
|
|
|
|
// this list must match the name/s used in the tlsSecret. Defaults to the
|
|
|
|
// wildcard host setting for the loadbalancer controller fulfilling this
|
|
|
|
// Ingress, if left unspecified.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Hosts []string `json:"hosts,omitempty"`
|
|
|
|
// SecretName is the name of the secret used to terminate SSL traffic on 443.
|
|
|
|
// Field is left optional to allow SSL routing based on SNI hostname alone.
|
|
|
|
// If the SNI host in a listener conflicts with the "Host" header field used
|
|
|
|
// by an IngressRule, the SNI host is used for termination and value of the
|
|
|
|
// Host header is used for routing.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
SecretName string `json:"secretName,omitempty"`
|
|
|
|
// TODO: Consider specifying different modes of termination, protocols etc.
|
|
|
|
}
|
|
|
|
|
|
|
|
// IngressStatus describe the current state of the Ingress.
|
|
|
|
type IngressStatus struct {
|
|
|
|
// LoadBalancer contains the current status of the load-balancer.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
LoadBalancer api.LoadBalancerStatus `json:"loadBalancer,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// IngressRule represents the rules mapping the paths under a specified host to
|
|
|
|
// the related backend services. Incoming requests are first evaluated for a host
|
|
|
|
// match, then routed to the backend associated with the matching IngressRuleValue.
|
|
|
|
type IngressRule struct {
|
|
|
|
// Host is the fully qualified domain name of a network host, as defined
|
|
|
|
// by RFC 3986. Note the following deviations from the "host" part of the
|
|
|
|
// URI as defined in the RFC:
|
|
|
|
// 1. IPs are not allowed. Currently an IngressRuleValue can only apply to the
|
|
|
|
// IP in the Spec of the parent Ingress.
|
|
|
|
// 2. The `:` delimiter is not respected because ports are not allowed.
|
|
|
|
// Currently the port of an Ingress is implicitly :80 for http and
|
|
|
|
// :443 for https.
|
|
|
|
// Both these may change in the future.
|
|
|
|
// Incoming requests are matched against the host before the IngressRuleValue.
|
|
|
|
// If the host is unspecified, the Ingress routes all traffic based on the
|
|
|
|
// specified IngressRuleValue.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Host string `json:"host,omitempty"`
|
|
|
|
// IngressRuleValue represents a rule to route requests for this IngressRule.
|
|
|
|
// If unspecified, the rule defaults to a http catch-all. Whether that sends
|
|
|
|
// just traffic matching the host to the default backend or all traffic to the
|
|
|
|
// default backend, is left to the controller fulfilling the Ingress. Http is
|
|
|
|
// currently the only supported IngressRuleValue.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
IngressRuleValue `json:",inline,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// IngressRuleValue represents a rule to apply against incoming requests. If the
|
|
|
|
// rule is satisfied, the request is routed to the specified backend. Currently
|
|
|
|
// mixing different types of rules in a single Ingress is disallowed, so exactly
|
|
|
|
// one of the following must be set.
|
|
|
|
type IngressRuleValue struct {
|
|
|
|
//TODO:
|
|
|
|
// 1. Consider renaming this resource and the associated rules so they
|
|
|
|
// aren't tied to Ingress. They can be used to route intra-cluster traffic.
|
|
|
|
// 2. Consider adding fields for ingress-type specific global options
|
|
|
|
// usable by a loadbalancer, like http keep-alive.
|
|
|
|
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
HTTP *HTTPIngressRuleValue `json:"http,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// HTTPIngressRuleValue is a list of http selectors pointing to backends.
|
|
|
|
// In the example: http://<host>/<path>?<searchpart> -> backend where
|
|
|
|
// where parts of the url correspond to RFC 3986, this resource will be used
|
|
|
|
// to match against everything after the last '/' and before the first '?'
|
|
|
|
// or '#'.
|
|
|
|
type HTTPIngressRuleValue struct {
|
|
|
|
// A collection of paths that map requests to backends.
|
|
|
|
Paths []HTTPIngressPath `json:"paths"`
|
|
|
|
// TODO: Consider adding fields for ingress-type specific global
|
|
|
|
// options usable by a loadbalancer, like http keep-alive.
|
|
|
|
}
|
|
|
|
|
|
|
|
// HTTPIngressPath associates a path regex with a backend. Incoming urls matching
|
|
|
|
// the path are forwarded to the backend.
|
|
|
|
type HTTPIngressPath struct {
|
|
|
|
// Path is an extended POSIX regex as defined by IEEE Std 1003.1,
|
|
|
|
// (i.e this follows the egrep/unix syntax, not the perl syntax)
|
|
|
|
// matched against the path of an incoming request. Currently it can
|
|
|
|
// contain characters disallowed from the conventional "path"
|
|
|
|
// part of a URL as defined by RFC 3986. Paths must begin with
|
|
|
|
// a '/'. If unspecified, the path defaults to a catch all sending
|
|
|
|
// traffic to the backend.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Path string `json:"path,omitempty"`
|
|
|
|
|
|
|
|
// Backend defines the referenced service endpoint to which the traffic
|
|
|
|
// will be forwarded to.
|
|
|
|
Backend IngressBackend `json:"backend"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// IngressBackend describes all endpoints for a given service and port.
|
|
|
|
type IngressBackend struct {
|
|
|
|
// Specifies the name of the referenced service.
|
|
|
|
ServiceName string `json:"serviceName"`
|
|
|
|
|
|
|
|
// Specifies the port of the referenced service.
|
|
|
|
ServicePort intstr.IntOrString `json:"servicePort"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// +genclient=true
|
|
|
|
|
|
|
|
// ReplicaSet represents the configuration of a replica set.
|
|
|
|
type ReplicaSet struct {
|
|
|
|
unversioned.TypeMeta `json:",inline"`
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
|
|
|
api.ObjectMeta `json:"metadata,omitempty"`
|
2017-02-07 21:33:23 +00:00
|
|
|
|
|
|
|
// Spec defines the desired behavior of this ReplicaSet.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Spec ReplicaSetSpec `json:"spec,omitempty"`
|
|
|
|
|
|
|
|
// Status is the current status of this ReplicaSet. This data may be
|
|
|
|
// out of date by some window of time.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Status ReplicaSetStatus `json:"status,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// ReplicaSetList is a collection of ReplicaSets.
|
|
|
|
type ReplicaSetList struct {
|
|
|
|
unversioned.TypeMeta `json:",inline"`
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
unversioned.ListMeta `json:"metadata,omitempty"`
|
|
|
|
|
|
|
|
Items []ReplicaSet `json:"items"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// ReplicaSetSpec is the specification of a ReplicaSet.
|
|
|
|
// As the internal representation of a ReplicaSet, it must have
|
|
|
|
// a Template set.
|
|
|
|
type ReplicaSetSpec struct {
|
|
|
|
// Replicas is the number of desired replicas.
|
|
|
|
Replicas int32 `json:"replicas"`
|
|
|
|
|
2017-04-07 10:49:53 +00:00
|
|
|
// Minimum number of seconds for which a newly created pod should be ready
|
|
|
|
// without any of its container crashing, for it to be considered available.
|
|
|
|
// Defaults to 0 (pod will be considered available as soon as it is ready)
|
|
|
|
// +optional
|
|
|
|
MinReadySeconds int32 `json:"minReadySeconds,omitempty"`
|
|
|
|
|
2017-02-07 21:33:23 +00:00
|
|
|
// Selector is a label query over pods that should match the replica count.
|
|
|
|
// Must match in order to be controlled.
|
|
|
|
// If empty, defaulted to labels on pod template.
|
2017-04-07 10:49:53 +00:00
|
|
|
// More info: http://kubernetes.io/docs/user-guide/labels#label-selectors
|
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Selector *unversioned.LabelSelector `json:"selector,omitempty"`
|
|
|
|
|
|
|
|
// Template is the object that describes the pod that will be created if
|
|
|
|
// insufficient replicas are detected.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Template api.PodTemplateSpec `json:"template,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// ReplicaSetStatus represents the current status of a ReplicaSet.
|
|
|
|
type ReplicaSetStatus struct {
|
|
|
|
// Replicas is the number of actual replicas.
|
|
|
|
Replicas int32 `json:"replicas"`
|
|
|
|
|
|
|
|
// The number of pods that have labels matching the labels of the pod template of the replicaset.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
FullyLabeledReplicas int32 `json:"fullyLabeledReplicas,omitempty"`
|
|
|
|
|
|
|
|
// The number of ready replicas for this replica set.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
ReadyReplicas int32 `json:"readyReplicas,omitempty"`
|
|
|
|
|
2017-04-07 10:49:53 +00:00
|
|
|
// The number of available replicas (ready for at least minReadySeconds) for this replica set.
|
|
|
|
// +optional
|
|
|
|
AvailableReplicas int32 `json:"availableReplicas,omitempty"`
|
|
|
|
|
2017-02-07 21:33:23 +00:00
|
|
|
// ObservedGeneration is the most recent generation observed by the controller.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
ObservedGeneration int64 `json:"observedGeneration,omitempty"`
|
2017-04-07 10:49:53 +00:00
|
|
|
|
|
|
|
// Represents the latest available observations of a replica set's current state.
|
|
|
|
// +optional
|
|
|
|
Conditions []ReplicaSetCondition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type"`
|
|
|
|
}
|
|
|
|
|
|
|
|
type ReplicaSetConditionType string
|
|
|
|
|
|
|
|
// These are valid conditions of a replica set.
|
|
|
|
const (
|
|
|
|
// ReplicaSetReplicaFailure is added in a replica set when one of its pods fails to be created
|
|
|
|
// due to insufficient quota, limit ranges, pod security policy, node selectors, etc. or deleted
|
|
|
|
// due to kubelet being down or finalizers are failing.
|
|
|
|
ReplicaSetReplicaFailure ReplicaSetConditionType = "ReplicaFailure"
|
|
|
|
)
|
|
|
|
|
|
|
|
// ReplicaSetCondition describes the state of a replica set at a certain point.
|
|
|
|
type ReplicaSetCondition struct {
|
|
|
|
// Type of replica set condition.
|
|
|
|
Type ReplicaSetConditionType `json:"type"`
|
|
|
|
// Status of the condition, one of True, False, Unknown.
|
|
|
|
Status api.ConditionStatus `json:"status"`
|
|
|
|
// The last time the condition transitioned from one status to another.
|
|
|
|
// +optional
|
|
|
|
LastTransitionTime unversioned.Time `json:"lastTransitionTime,omitempty"`
|
|
|
|
// The reason for the condition's last transition.
|
|
|
|
// +optional
|
|
|
|
Reason string `json:"reason,omitempty"`
|
|
|
|
// A human readable message indicating details about the transition.
|
|
|
|
// +optional
|
|
|
|
Message string `json:"message,omitempty"`
|
2017-02-07 21:33:23 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
// +genclient=true
|
|
|
|
// +nonNamespaced=true
|
|
|
|
|
|
|
|
// PodSecurityPolicy governs the ability to make requests that affect the SecurityContext
|
|
|
|
// that will be applied to a pod and container.
|
|
|
|
type PodSecurityPolicy struct {
|
|
|
|
unversioned.TypeMeta `json:",inline"`
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
|
|
|
api.ObjectMeta `json:"metadata,omitempty"`
|
2017-02-07 21:33:23 +00:00
|
|
|
|
|
|
|
// Spec defines the policy enforced.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Spec PodSecurityPolicySpec `json:"spec,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// PodSecurityPolicySpec defines the policy enforced.
|
|
|
|
type PodSecurityPolicySpec struct {
|
|
|
|
// Privileged determines if a pod can request to be run as privileged.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Privileged bool `json:"privileged,omitempty"`
|
|
|
|
// DefaultAddCapabilities is the default set of capabilities that will be added to the container
|
|
|
|
// unless the pod spec specifically drops the capability. You may not list a capability in both
|
|
|
|
// DefaultAddCapabilities and RequiredDropCapabilities.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
DefaultAddCapabilities []api.Capability `json:"defaultAddCapabilities,omitempty"`
|
|
|
|
// RequiredDropCapabilities are the capabilities that will be dropped from the container. These
|
|
|
|
// are required to be dropped and cannot be added.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
RequiredDropCapabilities []api.Capability `json:"requiredDropCapabilities,omitempty"`
|
|
|
|
// AllowedCapabilities is a list of capabilities that can be requested to add to the container.
|
|
|
|
// Capabilities in this field may be added at the pod author's discretion.
|
|
|
|
// You must not list a capability in both AllowedCapabilities and RequiredDropCapabilities.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
AllowedCapabilities []api.Capability `json:"allowedCapabilities,omitempty"`
|
|
|
|
// Volumes is a white list of allowed volume plugins. Empty indicates that all plugins
|
|
|
|
// may be used.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Volumes []FSType `json:"volumes,omitempty"`
|
|
|
|
// HostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
HostNetwork bool `json:"hostNetwork,omitempty"`
|
|
|
|
// HostPorts determines which host port ranges are allowed to be exposed.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
HostPorts []HostPortRange `json:"hostPorts,omitempty"`
|
|
|
|
// HostPID determines if the policy allows the use of HostPID in the pod spec.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
HostPID bool `json:"hostPID,omitempty"`
|
|
|
|
// HostIPC determines if the policy allows the use of HostIPC in the pod spec.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
HostIPC bool `json:"hostIPC,omitempty"`
|
|
|
|
// SELinux is the strategy that will dictate the allowable labels that may be set.
|
|
|
|
SELinux SELinuxStrategyOptions `json:"seLinux"`
|
|
|
|
// RunAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
|
|
|
RunAsUser RunAsUserStrategyOptions `json:"runAsUser"`
|
|
|
|
// SupplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
|
|
|
SupplementalGroups SupplementalGroupsStrategyOptions `json:"supplementalGroups"`
|
|
|
|
// FSGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
|
|
|
FSGroup FSGroupStrategyOptions `json:"fsGroup"`
|
|
|
|
// ReadOnlyRootFilesystem when set to true will force containers to run with a read only root file
|
|
|
|
// system. If the container specifically requests to run with a non-read only root file system
|
|
|
|
// the PSP should deny the pod.
|
|
|
|
// If set to false the container may run with a read only root file system if it wishes but it
|
|
|
|
// will not be forced to.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
ReadOnlyRootFilesystem bool `json:"readOnlyRootFilesystem,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// HostPortRange defines a range of host ports that will be enabled by a policy
|
|
|
|
// for pods to use. It requires both the start and end to be defined.
|
|
|
|
type HostPortRange struct {
|
|
|
|
// Min is the start of the range, inclusive.
|
|
|
|
Min int `json:"min"`
|
|
|
|
// Max is the end of the range, inclusive.
|
|
|
|
Max int `json:"max"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// FSType gives strong typing to different file systems that are used by volumes.
|
|
|
|
type FSType string
|
|
|
|
|
|
|
|
var (
|
|
|
|
AzureFile FSType = "azureFile"
|
|
|
|
Flocker FSType = "flocker"
|
|
|
|
FlexVolume FSType = "flexVolume"
|
|
|
|
HostPath FSType = "hostPath"
|
|
|
|
EmptyDir FSType = "emptyDir"
|
|
|
|
GCEPersistentDisk FSType = "gcePersistentDisk"
|
|
|
|
AWSElasticBlockStore FSType = "awsElasticBlockStore"
|
|
|
|
GitRepo FSType = "gitRepo"
|
|
|
|
Secret FSType = "secret"
|
|
|
|
NFS FSType = "nfs"
|
|
|
|
ISCSI FSType = "iscsi"
|
|
|
|
Glusterfs FSType = "glusterfs"
|
|
|
|
PersistentVolumeClaim FSType = "persistentVolumeClaim"
|
|
|
|
RBD FSType = "rbd"
|
|
|
|
Cinder FSType = "cinder"
|
|
|
|
CephFS FSType = "cephFS"
|
|
|
|
DownwardAPI FSType = "downwardAPI"
|
|
|
|
FC FSType = "fc"
|
|
|
|
ConfigMap FSType = "configMap"
|
|
|
|
VsphereVolume FSType = "vsphereVolume"
|
|
|
|
Quobyte FSType = "quobyte"
|
|
|
|
AzureDisk FSType = "azureDisk"
|
2017-04-07 10:49:53 +00:00
|
|
|
PhotonPersistentDisk FSType = "photonPersistentDisk"
|
2017-02-07 21:33:23 +00:00
|
|
|
All FSType = "*"
|
|
|
|
)
|
|
|
|
|
|
|
|
// SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.
|
|
|
|
type SELinuxStrategyOptions struct {
|
|
|
|
// Rule is the strategy that will dictate the allowable labels that may be set.
|
|
|
|
Rule SELinuxStrategy `json:"rule"`
|
|
|
|
// seLinuxOptions required to run as; required for MustRunAs
|
|
|
|
// More info: http://releases.k8s.io/HEAD/docs/design/security_context.md#security-context
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
SELinuxOptions *api.SELinuxOptions `json:"seLinuxOptions,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// SELinuxStrategy denotes strategy types for generating SELinux options for a
|
|
|
|
// Security.
|
|
|
|
type SELinuxStrategy string
|
|
|
|
|
|
|
|
const (
|
|
|
|
// container must have SELinux labels of X applied.
|
|
|
|
SELinuxStrategyMustRunAs SELinuxStrategy = "MustRunAs"
|
|
|
|
// container may make requests for any SELinux context labels.
|
|
|
|
SELinuxStrategyRunAsAny SELinuxStrategy = "RunAsAny"
|
|
|
|
)
|
|
|
|
|
|
|
|
// RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.
|
|
|
|
type RunAsUserStrategyOptions struct {
|
|
|
|
// Rule is the strategy that will dictate the allowable RunAsUser values that may be set.
|
|
|
|
Rule RunAsUserStrategy `json:"rule"`
|
|
|
|
// Ranges are the allowed ranges of uids that may be used.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Ranges []IDRange `json:"ranges,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// IDRange provides a min/max of an allowed range of IDs.
|
|
|
|
type IDRange struct {
|
|
|
|
// Min is the start of the range, inclusive.
|
|
|
|
Min int64 `json:"min"`
|
|
|
|
// Max is the end of the range, inclusive.
|
|
|
|
Max int64 `json:"max"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// RunAsUserStrategy denotes strategy types for generating RunAsUser values for a
|
|
|
|
// SecurityContext.
|
|
|
|
type RunAsUserStrategy string
|
|
|
|
|
|
|
|
const (
|
|
|
|
// container must run as a particular uid.
|
|
|
|
RunAsUserStrategyMustRunAs RunAsUserStrategy = "MustRunAs"
|
|
|
|
// container must run as a non-root uid
|
|
|
|
RunAsUserStrategyMustRunAsNonRoot RunAsUserStrategy = "MustRunAsNonRoot"
|
|
|
|
// container may make requests for any uid.
|
|
|
|
RunAsUserStrategyRunAsAny RunAsUserStrategy = "RunAsAny"
|
|
|
|
)
|
|
|
|
|
|
|
|
// FSGroupStrategyOptions defines the strategy type and options used to create the strategy.
|
|
|
|
type FSGroupStrategyOptions struct {
|
|
|
|
// Rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Rule FSGroupStrategyType `json:"rule,omitempty"`
|
|
|
|
// Ranges are the allowed ranges of fs groups. If you would like to force a single
|
|
|
|
// fs group then supply a single range with the same start and end.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Ranges []IDRange `json:"ranges,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// FSGroupStrategyType denotes strategy types for generating FSGroup values for a
|
|
|
|
// SecurityContext
|
|
|
|
type FSGroupStrategyType string
|
|
|
|
|
|
|
|
const (
|
|
|
|
// container must have FSGroup of X applied.
|
|
|
|
FSGroupStrategyMustRunAs FSGroupStrategyType = "MustRunAs"
|
|
|
|
// container may make requests for any FSGroup labels.
|
|
|
|
FSGroupStrategyRunAsAny FSGroupStrategyType = "RunAsAny"
|
|
|
|
)
|
|
|
|
|
|
|
|
// SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.
|
|
|
|
type SupplementalGroupsStrategyOptions struct {
|
|
|
|
// Rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Rule SupplementalGroupsStrategyType `json:"rule,omitempty"`
|
|
|
|
// Ranges are the allowed ranges of supplemental groups. If you would like to force a single
|
|
|
|
// supplemental group then supply a single range with the same start and end.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Ranges []IDRange `json:"ranges,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// SupplementalGroupsStrategyType denotes strategy types for determining valid supplemental
|
|
|
|
// groups for a SecurityContext.
|
|
|
|
type SupplementalGroupsStrategyType string
|
|
|
|
|
|
|
|
const (
|
|
|
|
// container must run as a particular gid.
|
|
|
|
SupplementalGroupsStrategyMustRunAs SupplementalGroupsStrategyType = "MustRunAs"
|
|
|
|
// container may make requests for any gid.
|
|
|
|
SupplementalGroupsStrategyRunAsAny SupplementalGroupsStrategyType = "RunAsAny"
|
|
|
|
)
|
|
|
|
|
|
|
|
// PodSecurityPolicyList is a list of PodSecurityPolicy objects.
|
|
|
|
type PodSecurityPolicyList struct {
|
|
|
|
unversioned.TypeMeta `json:",inline"`
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
unversioned.ListMeta `json:"metadata,omitempty"`
|
|
|
|
|
|
|
|
Items []PodSecurityPolicy `json:"items"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// +genclient=true
|
|
|
|
|
|
|
|
type NetworkPolicy struct {
|
|
|
|
unversioned.TypeMeta `json:",inline"`
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
|
|
|
api.ObjectMeta `json:"metadata,omitempty"`
|
2017-02-07 21:33:23 +00:00
|
|
|
|
|
|
|
// Specification of the desired behavior for this NetworkPolicy.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Spec NetworkPolicySpec `json:"spec,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
type NetworkPolicySpec struct {
|
|
|
|
// Selects the pods to which this NetworkPolicy object applies. The array of ingress rules
|
|
|
|
// is applied to any pods selected by this field. Multiple network policies can select the
|
|
|
|
// same set of pods. In this case, the ingress rules for each are combined additively.
|
|
|
|
// This field is NOT optional and follows standard label selector semantics.
|
|
|
|
// An empty podSelector matches all pods in this namespace.
|
|
|
|
PodSelector unversioned.LabelSelector `json:"podSelector"`
|
|
|
|
|
|
|
|
// List of ingress rules to be applied to the selected pods.
|
|
|
|
// Traffic is allowed to a pod if namespace.networkPolicy.ingress.isolation is undefined and cluster policy allows it,
|
|
|
|
// OR if the traffic source is the pod's local node,
|
|
|
|
// OR if the traffic matches at least one ingress rule across all of the NetworkPolicy
|
|
|
|
// objects whose podSelector matches the pod.
|
|
|
|
// If this field is empty then this NetworkPolicy does not affect ingress isolation.
|
|
|
|
// If this field is present and contains at least one rule, this policy allows any traffic
|
|
|
|
// which matches at least one of the ingress rules in this list.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Ingress []NetworkPolicyIngressRule `json:"ingress,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// This NetworkPolicyIngressRule matches traffic if and only if the traffic matches both ports AND from.
|
|
|
|
type NetworkPolicyIngressRule struct {
|
|
|
|
// List of ports which should be made accessible on the pods selected for this rule.
|
|
|
|
// Each item in this list is combined using a logical OR.
|
|
|
|
// If this field is not provided, this rule matches all ports (traffic not restricted by port).
|
|
|
|
// If this field is empty, this rule matches no ports (no traffic matches).
|
|
|
|
// If this field is present and contains at least one item, then this rule allows traffic
|
|
|
|
// only if the traffic matches at least one port in the list.
|
|
|
|
// TODO: Update this to be a pointer to slice as soon as auto-generation supports it.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Ports []NetworkPolicyPort `json:"ports,omitempty"`
|
|
|
|
|
|
|
|
// List of sources which should be able to access the pods selected for this rule.
|
|
|
|
// Items in this list are combined using a logical OR operation.
|
|
|
|
// If this field is not provided, this rule matches all sources (traffic not restricted by source).
|
|
|
|
// If this field is empty, this rule matches no sources (no traffic matches).
|
|
|
|
// If this field is present and contains at least on item, this rule allows traffic only if the
|
|
|
|
// traffic matches at least one item in the from list.
|
|
|
|
// TODO: Update this to be a pointer to slice as soon as auto-generation supports it.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
From []NetworkPolicyPeer `json:"from,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
type NetworkPolicyPort struct {
|
|
|
|
// Optional. The protocol (TCP or UDP) which traffic must match.
|
|
|
|
// If not specified, this field defaults to TCP.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Protocol *api.Protocol `json:"protocol,omitempty"`
|
|
|
|
|
|
|
|
// If specified, the port on the given protocol. This can
|
|
|
|
// either be a numerical or named port on a pod. If this field is not provided,
|
|
|
|
// this matches all port names and numbers.
|
|
|
|
// If present, only traffic on the specified protocol AND port
|
|
|
|
// will be matched.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
Port *intstr.IntOrString `json:"port,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
type NetworkPolicyPeer struct {
|
|
|
|
// Exactly one of the following must be specified.
|
|
|
|
|
|
|
|
// This is a label selector which selects Pods in this namespace.
|
|
|
|
// This field follows standard label selector semantics.
|
|
|
|
// If not provided, this selector selects no pods.
|
|
|
|
// If present but empty, this selector selects all pods in this namespace.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
PodSelector *unversioned.LabelSelector `json:"podSelector,omitempty"`
|
|
|
|
|
|
|
|
// Selects Namespaces using cluster scoped-labels. This
|
|
|
|
// matches all pods in all namespaces selected by this label selector.
|
|
|
|
// This field follows standard label selector semantics.
|
|
|
|
// If omitted, this selector selects no namespaces.
|
|
|
|
// If present but empty, this selector selects all namespaces.
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
NamespaceSelector *unversioned.LabelSelector `json:"namespaceSelector,omitempty"`
|
|
|
|
}
|
|
|
|
|
|
|
|
// NetworkPolicyList is a list of NetworkPolicy objects.
|
|
|
|
type NetworkPolicyList struct {
|
|
|
|
unversioned.TypeMeta `json:",inline"`
|
2017-04-07 10:49:53 +00:00
|
|
|
// +optional
|
2017-02-07 21:33:23 +00:00
|
|
|
unversioned.ListMeta `json:"metadata,omitempty"`
|
|
|
|
|
|
|
|
Items []NetworkPolicy `json:"items"`
|
|
|
|
}
|