v1beta1

package
v3.24.1 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Feb 17, 2023 License: Apache-2.0 Imports: 9 Imported by: 2

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type AllowedCSIDriver

type AllowedCSIDriver struct {
	// Name is the registered name of the CSI driver
	Name string `pulumi:"name"`
}

AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.

type AllowedCSIDriverArgs

type AllowedCSIDriverArgs struct {
	// Name is the registered name of the CSI driver
	Name pulumi.StringInput `pulumi:"name"`
}

AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.

func (AllowedCSIDriverArgs) ElementType

func (AllowedCSIDriverArgs) ElementType() reflect.Type

func (AllowedCSIDriverArgs) ToAllowedCSIDriverOutput

func (i AllowedCSIDriverArgs) ToAllowedCSIDriverOutput() AllowedCSIDriverOutput

func (AllowedCSIDriverArgs) ToAllowedCSIDriverOutputWithContext

func (i AllowedCSIDriverArgs) ToAllowedCSIDriverOutputWithContext(ctx context.Context) AllowedCSIDriverOutput

type AllowedCSIDriverArray

type AllowedCSIDriverArray []AllowedCSIDriverInput

func (AllowedCSIDriverArray) ElementType

func (AllowedCSIDriverArray) ElementType() reflect.Type

func (AllowedCSIDriverArray) ToAllowedCSIDriverArrayOutput

func (i AllowedCSIDriverArray) ToAllowedCSIDriverArrayOutput() AllowedCSIDriverArrayOutput

func (AllowedCSIDriverArray) ToAllowedCSIDriverArrayOutputWithContext

func (i AllowedCSIDriverArray) ToAllowedCSIDriverArrayOutputWithContext(ctx context.Context) AllowedCSIDriverArrayOutput

type AllowedCSIDriverArrayInput

type AllowedCSIDriverArrayInput interface {
	pulumi.Input

	ToAllowedCSIDriverArrayOutput() AllowedCSIDriverArrayOutput
	ToAllowedCSIDriverArrayOutputWithContext(context.Context) AllowedCSIDriverArrayOutput
}

AllowedCSIDriverArrayInput is an input type that accepts AllowedCSIDriverArray and AllowedCSIDriverArrayOutput values. You can construct a concrete instance of `AllowedCSIDriverArrayInput` via:

AllowedCSIDriverArray{ AllowedCSIDriverArgs{...} }

type AllowedCSIDriverArrayOutput

type AllowedCSIDriverArrayOutput struct{ *pulumi.OutputState }

func (AllowedCSIDriverArrayOutput) ElementType

func (AllowedCSIDriverArrayOutput) Index

func (AllowedCSIDriverArrayOutput) ToAllowedCSIDriverArrayOutput

func (o AllowedCSIDriverArrayOutput) ToAllowedCSIDriverArrayOutput() AllowedCSIDriverArrayOutput

func (AllowedCSIDriverArrayOutput) ToAllowedCSIDriverArrayOutputWithContext

func (o AllowedCSIDriverArrayOutput) ToAllowedCSIDriverArrayOutputWithContext(ctx context.Context) AllowedCSIDriverArrayOutput

type AllowedCSIDriverInput

type AllowedCSIDriverInput interface {
	pulumi.Input

	ToAllowedCSIDriverOutput() AllowedCSIDriverOutput
	ToAllowedCSIDriverOutputWithContext(context.Context) AllowedCSIDriverOutput
}

AllowedCSIDriverInput is an input type that accepts AllowedCSIDriverArgs and AllowedCSIDriverOutput values. You can construct a concrete instance of `AllowedCSIDriverInput` via:

AllowedCSIDriverArgs{...}

type AllowedCSIDriverOutput

type AllowedCSIDriverOutput struct{ *pulumi.OutputState }

AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.

func (AllowedCSIDriverOutput) ElementType

func (AllowedCSIDriverOutput) ElementType() reflect.Type

func (AllowedCSIDriverOutput) Name

Name is the registered name of the CSI driver

func (AllowedCSIDriverOutput) ToAllowedCSIDriverOutput

func (o AllowedCSIDriverOutput) ToAllowedCSIDriverOutput() AllowedCSIDriverOutput

func (AllowedCSIDriverOutput) ToAllowedCSIDriverOutputWithContext

func (o AllowedCSIDriverOutput) ToAllowedCSIDriverOutputWithContext(ctx context.Context) AllowedCSIDriverOutput

type AllowedCSIDriverPatch added in v3.20.0

type AllowedCSIDriverPatch struct {
	// Name is the registered name of the CSI driver
	Name *string `pulumi:"name"`
}

AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.

type AllowedCSIDriverPatchArgs added in v3.20.0

type AllowedCSIDriverPatchArgs struct {
	// Name is the registered name of the CSI driver
	Name pulumi.StringPtrInput `pulumi:"name"`
}

AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.

func (AllowedCSIDriverPatchArgs) ElementType added in v3.20.0

func (AllowedCSIDriverPatchArgs) ElementType() reflect.Type

func (AllowedCSIDriverPatchArgs) ToAllowedCSIDriverPatchOutput added in v3.20.0

func (i AllowedCSIDriverPatchArgs) ToAllowedCSIDriverPatchOutput() AllowedCSIDriverPatchOutput

func (AllowedCSIDriverPatchArgs) ToAllowedCSIDriverPatchOutputWithContext added in v3.20.0

func (i AllowedCSIDriverPatchArgs) ToAllowedCSIDriverPatchOutputWithContext(ctx context.Context) AllowedCSIDriverPatchOutput

type AllowedCSIDriverPatchArray added in v3.20.0

type AllowedCSIDriverPatchArray []AllowedCSIDriverPatchInput

func (AllowedCSIDriverPatchArray) ElementType added in v3.20.0

func (AllowedCSIDriverPatchArray) ElementType() reflect.Type

func (AllowedCSIDriverPatchArray) ToAllowedCSIDriverPatchArrayOutput added in v3.20.0

func (i AllowedCSIDriverPatchArray) ToAllowedCSIDriverPatchArrayOutput() AllowedCSIDriverPatchArrayOutput

func (AllowedCSIDriverPatchArray) ToAllowedCSIDriverPatchArrayOutputWithContext added in v3.20.0

func (i AllowedCSIDriverPatchArray) ToAllowedCSIDriverPatchArrayOutputWithContext(ctx context.Context) AllowedCSIDriverPatchArrayOutput

type AllowedCSIDriverPatchArrayInput added in v3.20.0

type AllowedCSIDriverPatchArrayInput interface {
	pulumi.Input

	ToAllowedCSIDriverPatchArrayOutput() AllowedCSIDriverPatchArrayOutput
	ToAllowedCSIDriverPatchArrayOutputWithContext(context.Context) AllowedCSIDriverPatchArrayOutput
}

AllowedCSIDriverPatchArrayInput is an input type that accepts AllowedCSIDriverPatchArray and AllowedCSIDriverPatchArrayOutput values. You can construct a concrete instance of `AllowedCSIDriverPatchArrayInput` via:

AllowedCSIDriverPatchArray{ AllowedCSIDriverPatchArgs{...} }

type AllowedCSIDriverPatchArrayOutput added in v3.20.0

type AllowedCSIDriverPatchArrayOutput struct{ *pulumi.OutputState }

func (AllowedCSIDriverPatchArrayOutput) ElementType added in v3.20.0

func (AllowedCSIDriverPatchArrayOutput) Index added in v3.20.0

func (AllowedCSIDriverPatchArrayOutput) ToAllowedCSIDriverPatchArrayOutput added in v3.20.0

func (o AllowedCSIDriverPatchArrayOutput) ToAllowedCSIDriverPatchArrayOutput() AllowedCSIDriverPatchArrayOutput

func (AllowedCSIDriverPatchArrayOutput) ToAllowedCSIDriverPatchArrayOutputWithContext added in v3.20.0

func (o AllowedCSIDriverPatchArrayOutput) ToAllowedCSIDriverPatchArrayOutputWithContext(ctx context.Context) AllowedCSIDriverPatchArrayOutput

type AllowedCSIDriverPatchInput added in v3.20.0

type AllowedCSIDriverPatchInput interface {
	pulumi.Input

	ToAllowedCSIDriverPatchOutput() AllowedCSIDriverPatchOutput
	ToAllowedCSIDriverPatchOutputWithContext(context.Context) AllowedCSIDriverPatchOutput
}

AllowedCSIDriverPatchInput is an input type that accepts AllowedCSIDriverPatchArgs and AllowedCSIDriverPatchOutput values. You can construct a concrete instance of `AllowedCSIDriverPatchInput` via:

AllowedCSIDriverPatchArgs{...}

type AllowedCSIDriverPatchOutput added in v3.20.0

type AllowedCSIDriverPatchOutput struct{ *pulumi.OutputState }

AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.

func (AllowedCSIDriverPatchOutput) ElementType added in v3.20.0

func (AllowedCSIDriverPatchOutput) Name added in v3.20.0

Name is the registered name of the CSI driver

func (AllowedCSIDriverPatchOutput) ToAllowedCSIDriverPatchOutput added in v3.20.0

func (o AllowedCSIDriverPatchOutput) ToAllowedCSIDriverPatchOutput() AllowedCSIDriverPatchOutput

func (AllowedCSIDriverPatchOutput) ToAllowedCSIDriverPatchOutputWithContext added in v3.20.0

func (o AllowedCSIDriverPatchOutput) ToAllowedCSIDriverPatchOutputWithContext(ctx context.Context) AllowedCSIDriverPatchOutput

type AllowedFlexVolume

type AllowedFlexVolume struct {
	// driver is the name of the Flexvolume driver.
	Driver string `pulumi:"driver"`
}

AllowedFlexVolume represents a single Flexvolume that is allowed to be used.

type AllowedFlexVolumeArgs

type AllowedFlexVolumeArgs struct {
	// driver is the name of the Flexvolume driver.
	Driver pulumi.StringInput `pulumi:"driver"`
}

AllowedFlexVolume represents a single Flexvolume that is allowed to be used.

func (AllowedFlexVolumeArgs) ElementType

func (AllowedFlexVolumeArgs) ElementType() reflect.Type

func (AllowedFlexVolumeArgs) ToAllowedFlexVolumeOutput

func (i AllowedFlexVolumeArgs) ToAllowedFlexVolumeOutput() AllowedFlexVolumeOutput

func (AllowedFlexVolumeArgs) ToAllowedFlexVolumeOutputWithContext

func (i AllowedFlexVolumeArgs) ToAllowedFlexVolumeOutputWithContext(ctx context.Context) AllowedFlexVolumeOutput

type AllowedFlexVolumeArray

type AllowedFlexVolumeArray []AllowedFlexVolumeInput

func (AllowedFlexVolumeArray) ElementType

func (AllowedFlexVolumeArray) ElementType() reflect.Type

func (AllowedFlexVolumeArray) ToAllowedFlexVolumeArrayOutput

func (i AllowedFlexVolumeArray) ToAllowedFlexVolumeArrayOutput() AllowedFlexVolumeArrayOutput

func (AllowedFlexVolumeArray) ToAllowedFlexVolumeArrayOutputWithContext

func (i AllowedFlexVolumeArray) ToAllowedFlexVolumeArrayOutputWithContext(ctx context.Context) AllowedFlexVolumeArrayOutput

type AllowedFlexVolumeArrayInput

type AllowedFlexVolumeArrayInput interface {
	pulumi.Input

	ToAllowedFlexVolumeArrayOutput() AllowedFlexVolumeArrayOutput
	ToAllowedFlexVolumeArrayOutputWithContext(context.Context) AllowedFlexVolumeArrayOutput
}

AllowedFlexVolumeArrayInput is an input type that accepts AllowedFlexVolumeArray and AllowedFlexVolumeArrayOutput values. You can construct a concrete instance of `AllowedFlexVolumeArrayInput` via:

AllowedFlexVolumeArray{ AllowedFlexVolumeArgs{...} }

type AllowedFlexVolumeArrayOutput

type AllowedFlexVolumeArrayOutput struct{ *pulumi.OutputState }

func (AllowedFlexVolumeArrayOutput) ElementType

func (AllowedFlexVolumeArrayOutput) Index

func (AllowedFlexVolumeArrayOutput) ToAllowedFlexVolumeArrayOutput

func (o AllowedFlexVolumeArrayOutput) ToAllowedFlexVolumeArrayOutput() AllowedFlexVolumeArrayOutput

func (AllowedFlexVolumeArrayOutput) ToAllowedFlexVolumeArrayOutputWithContext

func (o AllowedFlexVolumeArrayOutput) ToAllowedFlexVolumeArrayOutputWithContext(ctx context.Context) AllowedFlexVolumeArrayOutput

type AllowedFlexVolumeInput

type AllowedFlexVolumeInput interface {
	pulumi.Input

	ToAllowedFlexVolumeOutput() AllowedFlexVolumeOutput
	ToAllowedFlexVolumeOutputWithContext(context.Context) AllowedFlexVolumeOutput
}

AllowedFlexVolumeInput is an input type that accepts AllowedFlexVolumeArgs and AllowedFlexVolumeOutput values. You can construct a concrete instance of `AllowedFlexVolumeInput` via:

AllowedFlexVolumeArgs{...}

type AllowedFlexVolumeOutput

type AllowedFlexVolumeOutput struct{ *pulumi.OutputState }

AllowedFlexVolume represents a single Flexvolume that is allowed to be used.

func (AllowedFlexVolumeOutput) Driver

driver is the name of the Flexvolume driver.

func (AllowedFlexVolumeOutput) ElementType

func (AllowedFlexVolumeOutput) ElementType() reflect.Type

func (AllowedFlexVolumeOutput) ToAllowedFlexVolumeOutput

func (o AllowedFlexVolumeOutput) ToAllowedFlexVolumeOutput() AllowedFlexVolumeOutput

func (AllowedFlexVolumeOutput) ToAllowedFlexVolumeOutputWithContext

func (o AllowedFlexVolumeOutput) ToAllowedFlexVolumeOutputWithContext(ctx context.Context) AllowedFlexVolumeOutput

type AllowedFlexVolumePatch added in v3.20.0

type AllowedFlexVolumePatch struct {
	// driver is the name of the Flexvolume driver.
	Driver *string `pulumi:"driver"`
}

AllowedFlexVolume represents a single Flexvolume that is allowed to be used.

type AllowedFlexVolumePatchArgs added in v3.20.0

type AllowedFlexVolumePatchArgs struct {
	// driver is the name of the Flexvolume driver.
	Driver pulumi.StringPtrInput `pulumi:"driver"`
}

AllowedFlexVolume represents a single Flexvolume that is allowed to be used.

func (AllowedFlexVolumePatchArgs) ElementType added in v3.20.0

func (AllowedFlexVolumePatchArgs) ElementType() reflect.Type

func (AllowedFlexVolumePatchArgs) ToAllowedFlexVolumePatchOutput added in v3.20.0

func (i AllowedFlexVolumePatchArgs) ToAllowedFlexVolumePatchOutput() AllowedFlexVolumePatchOutput

func (AllowedFlexVolumePatchArgs) ToAllowedFlexVolumePatchOutputWithContext added in v3.20.0

func (i AllowedFlexVolumePatchArgs) ToAllowedFlexVolumePatchOutputWithContext(ctx context.Context) AllowedFlexVolumePatchOutput

type AllowedFlexVolumePatchArray added in v3.20.0

type AllowedFlexVolumePatchArray []AllowedFlexVolumePatchInput

func (AllowedFlexVolumePatchArray) ElementType added in v3.20.0

func (AllowedFlexVolumePatchArray) ToAllowedFlexVolumePatchArrayOutput added in v3.20.0

func (i AllowedFlexVolumePatchArray) ToAllowedFlexVolumePatchArrayOutput() AllowedFlexVolumePatchArrayOutput

func (AllowedFlexVolumePatchArray) ToAllowedFlexVolumePatchArrayOutputWithContext added in v3.20.0

func (i AllowedFlexVolumePatchArray) ToAllowedFlexVolumePatchArrayOutputWithContext(ctx context.Context) AllowedFlexVolumePatchArrayOutput

type AllowedFlexVolumePatchArrayInput added in v3.20.0

type AllowedFlexVolumePatchArrayInput interface {
	pulumi.Input

	ToAllowedFlexVolumePatchArrayOutput() AllowedFlexVolumePatchArrayOutput
	ToAllowedFlexVolumePatchArrayOutputWithContext(context.Context) AllowedFlexVolumePatchArrayOutput
}

AllowedFlexVolumePatchArrayInput is an input type that accepts AllowedFlexVolumePatchArray and AllowedFlexVolumePatchArrayOutput values. You can construct a concrete instance of `AllowedFlexVolumePatchArrayInput` via:

AllowedFlexVolumePatchArray{ AllowedFlexVolumePatchArgs{...} }

type AllowedFlexVolumePatchArrayOutput added in v3.20.0

type AllowedFlexVolumePatchArrayOutput struct{ *pulumi.OutputState }

func (AllowedFlexVolumePatchArrayOutput) ElementType added in v3.20.0

func (AllowedFlexVolumePatchArrayOutput) Index added in v3.20.0

func (AllowedFlexVolumePatchArrayOutput) ToAllowedFlexVolumePatchArrayOutput added in v3.20.0

func (o AllowedFlexVolumePatchArrayOutput) ToAllowedFlexVolumePatchArrayOutput() AllowedFlexVolumePatchArrayOutput

func (AllowedFlexVolumePatchArrayOutput) ToAllowedFlexVolumePatchArrayOutputWithContext added in v3.20.0

func (o AllowedFlexVolumePatchArrayOutput) ToAllowedFlexVolumePatchArrayOutputWithContext(ctx context.Context) AllowedFlexVolumePatchArrayOutput

type AllowedFlexVolumePatchInput added in v3.20.0

type AllowedFlexVolumePatchInput interface {
	pulumi.Input

	ToAllowedFlexVolumePatchOutput() AllowedFlexVolumePatchOutput
	ToAllowedFlexVolumePatchOutputWithContext(context.Context) AllowedFlexVolumePatchOutput
}

AllowedFlexVolumePatchInput is an input type that accepts AllowedFlexVolumePatchArgs and AllowedFlexVolumePatchOutput values. You can construct a concrete instance of `AllowedFlexVolumePatchInput` via:

AllowedFlexVolumePatchArgs{...}

type AllowedFlexVolumePatchOutput added in v3.20.0

type AllowedFlexVolumePatchOutput struct{ *pulumi.OutputState }

AllowedFlexVolume represents a single Flexvolume that is allowed to be used.

func (AllowedFlexVolumePatchOutput) Driver added in v3.20.0

driver is the name of the Flexvolume driver.

func (AllowedFlexVolumePatchOutput) ElementType added in v3.20.0

func (AllowedFlexVolumePatchOutput) ToAllowedFlexVolumePatchOutput added in v3.20.0

func (o AllowedFlexVolumePatchOutput) ToAllowedFlexVolumePatchOutput() AllowedFlexVolumePatchOutput

func (AllowedFlexVolumePatchOutput) ToAllowedFlexVolumePatchOutputWithContext added in v3.20.0

func (o AllowedFlexVolumePatchOutput) ToAllowedFlexVolumePatchOutputWithContext(ctx context.Context) AllowedFlexVolumePatchOutput

type AllowedHostPath

type AllowedHostPath struct {
	// pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.
	//
	// Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`
	PathPrefix *string `pulumi:"pathPrefix"`
	// when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
	ReadOnly *bool `pulumi:"readOnly"`
}

AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.

type AllowedHostPathArgs

type AllowedHostPathArgs struct {
	// pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.
	//
	// Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`
	PathPrefix pulumi.StringPtrInput `pulumi:"pathPrefix"`
	// when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
	ReadOnly pulumi.BoolPtrInput `pulumi:"readOnly"`
}

AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.

func (AllowedHostPathArgs) ElementType

func (AllowedHostPathArgs) ElementType() reflect.Type

func (AllowedHostPathArgs) ToAllowedHostPathOutput

func (i AllowedHostPathArgs) ToAllowedHostPathOutput() AllowedHostPathOutput

func (AllowedHostPathArgs) ToAllowedHostPathOutputWithContext

func (i AllowedHostPathArgs) ToAllowedHostPathOutputWithContext(ctx context.Context) AllowedHostPathOutput

type AllowedHostPathArray

type AllowedHostPathArray []AllowedHostPathInput

func (AllowedHostPathArray) ElementType

func (AllowedHostPathArray) ElementType() reflect.Type

func (AllowedHostPathArray) ToAllowedHostPathArrayOutput

func (i AllowedHostPathArray) ToAllowedHostPathArrayOutput() AllowedHostPathArrayOutput

func (AllowedHostPathArray) ToAllowedHostPathArrayOutputWithContext

func (i AllowedHostPathArray) ToAllowedHostPathArrayOutputWithContext(ctx context.Context) AllowedHostPathArrayOutput

type AllowedHostPathArrayInput

type AllowedHostPathArrayInput interface {
	pulumi.Input

	ToAllowedHostPathArrayOutput() AllowedHostPathArrayOutput
	ToAllowedHostPathArrayOutputWithContext(context.Context) AllowedHostPathArrayOutput
}

AllowedHostPathArrayInput is an input type that accepts AllowedHostPathArray and AllowedHostPathArrayOutput values. You can construct a concrete instance of `AllowedHostPathArrayInput` via:

AllowedHostPathArray{ AllowedHostPathArgs{...} }

type AllowedHostPathArrayOutput

type AllowedHostPathArrayOutput struct{ *pulumi.OutputState }

func (AllowedHostPathArrayOutput) ElementType

func (AllowedHostPathArrayOutput) ElementType() reflect.Type

func (AllowedHostPathArrayOutput) Index

func (AllowedHostPathArrayOutput) ToAllowedHostPathArrayOutput

func (o AllowedHostPathArrayOutput) ToAllowedHostPathArrayOutput() AllowedHostPathArrayOutput

func (AllowedHostPathArrayOutput) ToAllowedHostPathArrayOutputWithContext

func (o AllowedHostPathArrayOutput) ToAllowedHostPathArrayOutputWithContext(ctx context.Context) AllowedHostPathArrayOutput

type AllowedHostPathInput

type AllowedHostPathInput interface {
	pulumi.Input

	ToAllowedHostPathOutput() AllowedHostPathOutput
	ToAllowedHostPathOutputWithContext(context.Context) AllowedHostPathOutput
}

AllowedHostPathInput is an input type that accepts AllowedHostPathArgs and AllowedHostPathOutput values. You can construct a concrete instance of `AllowedHostPathInput` via:

AllowedHostPathArgs{...}

type AllowedHostPathOutput

type AllowedHostPathOutput struct{ *pulumi.OutputState }

AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.

func (AllowedHostPathOutput) ElementType

func (AllowedHostPathOutput) ElementType() reflect.Type

func (AllowedHostPathOutput) PathPrefix

pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.

Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`

func (AllowedHostPathOutput) ReadOnly

when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.

func (AllowedHostPathOutput) ToAllowedHostPathOutput

func (o AllowedHostPathOutput) ToAllowedHostPathOutput() AllowedHostPathOutput

func (AllowedHostPathOutput) ToAllowedHostPathOutputWithContext

func (o AllowedHostPathOutput) ToAllowedHostPathOutputWithContext(ctx context.Context) AllowedHostPathOutput

type AllowedHostPathPatch added in v3.20.0

type AllowedHostPathPatch struct {
	// pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.
	//
	// Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`
	PathPrefix *string `pulumi:"pathPrefix"`
	// when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
	ReadOnly *bool `pulumi:"readOnly"`
}

AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.

type AllowedHostPathPatchArgs added in v3.20.0

type AllowedHostPathPatchArgs struct {
	// pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.
	//
	// Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`
	PathPrefix pulumi.StringPtrInput `pulumi:"pathPrefix"`
	// when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
	ReadOnly pulumi.BoolPtrInput `pulumi:"readOnly"`
}

AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.

func (AllowedHostPathPatchArgs) ElementType added in v3.20.0

func (AllowedHostPathPatchArgs) ElementType() reflect.Type

func (AllowedHostPathPatchArgs) ToAllowedHostPathPatchOutput added in v3.20.0

func (i AllowedHostPathPatchArgs) ToAllowedHostPathPatchOutput() AllowedHostPathPatchOutput

func (AllowedHostPathPatchArgs) ToAllowedHostPathPatchOutputWithContext added in v3.20.0

func (i AllowedHostPathPatchArgs) ToAllowedHostPathPatchOutputWithContext(ctx context.Context) AllowedHostPathPatchOutput

type AllowedHostPathPatchArray added in v3.20.0

type AllowedHostPathPatchArray []AllowedHostPathPatchInput

func (AllowedHostPathPatchArray) ElementType added in v3.20.0

func (AllowedHostPathPatchArray) ElementType() reflect.Type

func (AllowedHostPathPatchArray) ToAllowedHostPathPatchArrayOutput added in v3.20.0

func (i AllowedHostPathPatchArray) ToAllowedHostPathPatchArrayOutput() AllowedHostPathPatchArrayOutput

func (AllowedHostPathPatchArray) ToAllowedHostPathPatchArrayOutputWithContext added in v3.20.0

func (i AllowedHostPathPatchArray) ToAllowedHostPathPatchArrayOutputWithContext(ctx context.Context) AllowedHostPathPatchArrayOutput

type AllowedHostPathPatchArrayInput added in v3.20.0

type AllowedHostPathPatchArrayInput interface {
	pulumi.Input

	ToAllowedHostPathPatchArrayOutput() AllowedHostPathPatchArrayOutput
	ToAllowedHostPathPatchArrayOutputWithContext(context.Context) AllowedHostPathPatchArrayOutput
}

AllowedHostPathPatchArrayInput is an input type that accepts AllowedHostPathPatchArray and AllowedHostPathPatchArrayOutput values. You can construct a concrete instance of `AllowedHostPathPatchArrayInput` via:

AllowedHostPathPatchArray{ AllowedHostPathPatchArgs{...} }

type AllowedHostPathPatchArrayOutput added in v3.20.0

type AllowedHostPathPatchArrayOutput struct{ *pulumi.OutputState }

func (AllowedHostPathPatchArrayOutput) ElementType added in v3.20.0

func (AllowedHostPathPatchArrayOutput) Index added in v3.20.0

func (AllowedHostPathPatchArrayOutput) ToAllowedHostPathPatchArrayOutput added in v3.20.0

func (o AllowedHostPathPatchArrayOutput) ToAllowedHostPathPatchArrayOutput() AllowedHostPathPatchArrayOutput

func (AllowedHostPathPatchArrayOutput) ToAllowedHostPathPatchArrayOutputWithContext added in v3.20.0

func (o AllowedHostPathPatchArrayOutput) ToAllowedHostPathPatchArrayOutputWithContext(ctx context.Context) AllowedHostPathPatchArrayOutput

type AllowedHostPathPatchInput added in v3.20.0

type AllowedHostPathPatchInput interface {
	pulumi.Input

	ToAllowedHostPathPatchOutput() AllowedHostPathPatchOutput
	ToAllowedHostPathPatchOutputWithContext(context.Context) AllowedHostPathPatchOutput
}

AllowedHostPathPatchInput is an input type that accepts AllowedHostPathPatchArgs and AllowedHostPathPatchOutput values. You can construct a concrete instance of `AllowedHostPathPatchInput` via:

AllowedHostPathPatchArgs{...}

type AllowedHostPathPatchOutput added in v3.20.0

type AllowedHostPathPatchOutput struct{ *pulumi.OutputState }

AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.

func (AllowedHostPathPatchOutput) ElementType added in v3.20.0

func (AllowedHostPathPatchOutput) ElementType() reflect.Type

func (AllowedHostPathPatchOutput) PathPrefix added in v3.20.0

pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.

Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`

func (AllowedHostPathPatchOutput) ReadOnly added in v3.20.0

when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.

func (AllowedHostPathPatchOutput) ToAllowedHostPathPatchOutput added in v3.20.0

func (o AllowedHostPathPatchOutput) ToAllowedHostPathPatchOutput() AllowedHostPathPatchOutput

func (AllowedHostPathPatchOutput) ToAllowedHostPathPatchOutputWithContext added in v3.20.0

func (o AllowedHostPathPatchOutput) ToAllowedHostPathPatchOutputWithContext(ctx context.Context) AllowedHostPathPatchOutput

type Eviction

type Eviction struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// DeleteOptions may be provided
	DeleteOptions *metav1.DeleteOptions `pulumi:"deleteOptions"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// ObjectMeta describes the pod that is being evicted.
	Metadata *metav1.ObjectMeta `pulumi:"metadata"`
}

Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod. A request to cause such an eviction is created by POSTing to .../pods/<pod name>/evictions.

type EvictionArgs

type EvictionArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// DeleteOptions may be provided
	DeleteOptions metav1.DeleteOptionsPtrInput `pulumi:"deleteOptions"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// ObjectMeta describes the pod that is being evicted.
	Metadata metav1.ObjectMetaPtrInput `pulumi:"metadata"`
}

Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod. A request to cause such an eviction is created by POSTing to .../pods/<pod name>/evictions.

func (EvictionArgs) ElementType

func (EvictionArgs) ElementType() reflect.Type

func (EvictionArgs) ToEvictionOutput

func (i EvictionArgs) ToEvictionOutput() EvictionOutput

func (EvictionArgs) ToEvictionOutputWithContext

func (i EvictionArgs) ToEvictionOutputWithContext(ctx context.Context) EvictionOutput

type EvictionInput

type EvictionInput interface {
	pulumi.Input

	ToEvictionOutput() EvictionOutput
	ToEvictionOutputWithContext(context.Context) EvictionOutput
}

EvictionInput is an input type that accepts EvictionArgs and EvictionOutput values. You can construct a concrete instance of `EvictionInput` via:

EvictionArgs{...}

type EvictionOutput

type EvictionOutput struct{ *pulumi.OutputState }

Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod. A request to cause such an eviction is created by POSTing to .../pods/<pod name>/evictions.

func (EvictionOutput) ApiVersion

func (o EvictionOutput) ApiVersion() pulumi.StringPtrOutput

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (EvictionOutput) DeleteOptions

func (o EvictionOutput) DeleteOptions() metav1.DeleteOptionsPtrOutput

DeleteOptions may be provided

func (EvictionOutput) ElementType

func (EvictionOutput) ElementType() reflect.Type

func (EvictionOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (EvictionOutput) Metadata

ObjectMeta describes the pod that is being evicted.

func (EvictionOutput) ToEvictionOutput

func (o EvictionOutput) ToEvictionOutput() EvictionOutput

func (EvictionOutput) ToEvictionOutputWithContext

func (o EvictionOutput) ToEvictionOutputWithContext(ctx context.Context) EvictionOutput

type EvictionPatch added in v3.20.0

type EvictionPatch struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// DeleteOptions may be provided
	DeleteOptions *metav1.DeleteOptionsPatch `pulumi:"deleteOptions"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// ObjectMeta describes the pod that is being evicted.
	Metadata *metav1.ObjectMetaPatch `pulumi:"metadata"`
}

Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod. A request to cause such an eviction is created by POSTing to .../pods/<pod name>/evictions.

type EvictionPatchArgs added in v3.20.0

type EvictionPatchArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// DeleteOptions may be provided
	DeleteOptions metav1.DeleteOptionsPatchPtrInput `pulumi:"deleteOptions"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// ObjectMeta describes the pod that is being evicted.
	Metadata metav1.ObjectMetaPatchPtrInput `pulumi:"metadata"`
}

Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod. A request to cause such an eviction is created by POSTing to .../pods/<pod name>/evictions.

func (EvictionPatchArgs) ElementType added in v3.20.0

func (EvictionPatchArgs) ElementType() reflect.Type

func (EvictionPatchArgs) ToEvictionPatchOutput added in v3.20.0

func (i EvictionPatchArgs) ToEvictionPatchOutput() EvictionPatchOutput

func (EvictionPatchArgs) ToEvictionPatchOutputWithContext added in v3.20.0

func (i EvictionPatchArgs) ToEvictionPatchOutputWithContext(ctx context.Context) EvictionPatchOutput

type EvictionPatchInput added in v3.20.0

type EvictionPatchInput interface {
	pulumi.Input

	ToEvictionPatchOutput() EvictionPatchOutput
	ToEvictionPatchOutputWithContext(context.Context) EvictionPatchOutput
}

EvictionPatchInput is an input type that accepts EvictionPatchArgs and EvictionPatchOutput values. You can construct a concrete instance of `EvictionPatchInput` via:

EvictionPatchArgs{...}

type EvictionPatchOutput added in v3.20.0

type EvictionPatchOutput struct{ *pulumi.OutputState }

Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod. A request to cause such an eviction is created by POSTing to .../pods/<pod name>/evictions.

func (EvictionPatchOutput) ApiVersion added in v3.20.0

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (EvictionPatchOutput) DeleteOptions added in v3.20.0

DeleteOptions may be provided

func (EvictionPatchOutput) ElementType added in v3.20.0

func (EvictionPatchOutput) ElementType() reflect.Type

func (EvictionPatchOutput) Kind added in v3.20.0

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (EvictionPatchOutput) Metadata added in v3.20.0

ObjectMeta describes the pod that is being evicted.

func (EvictionPatchOutput) ToEvictionPatchOutput added in v3.20.0

func (o EvictionPatchOutput) ToEvictionPatchOutput() EvictionPatchOutput

func (EvictionPatchOutput) ToEvictionPatchOutputWithContext added in v3.20.0

func (o EvictionPatchOutput) ToEvictionPatchOutputWithContext(ctx context.Context) EvictionPatchOutput

type FSGroupStrategyOptions

type FSGroupStrategyOptions struct {
	// ranges are the allowed ranges of fs groups.  If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRange `pulumi:"ranges"`
	// rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
	Rule *string `pulumi:"rule"`
}

FSGroupStrategyOptions defines the strategy type and options used to create the strategy.

type FSGroupStrategyOptionsArgs

type FSGroupStrategyOptionsArgs struct {
	// ranges are the allowed ranges of fs groups.  If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangeArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
}

FSGroupStrategyOptions defines the strategy type and options used to create the strategy.

func (FSGroupStrategyOptionsArgs) ElementType

func (FSGroupStrategyOptionsArgs) ElementType() reflect.Type

func (FSGroupStrategyOptionsArgs) ToFSGroupStrategyOptionsOutput

func (i FSGroupStrategyOptionsArgs) ToFSGroupStrategyOptionsOutput() FSGroupStrategyOptionsOutput

func (FSGroupStrategyOptionsArgs) ToFSGroupStrategyOptionsOutputWithContext

func (i FSGroupStrategyOptionsArgs) ToFSGroupStrategyOptionsOutputWithContext(ctx context.Context) FSGroupStrategyOptionsOutput

func (FSGroupStrategyOptionsArgs) ToFSGroupStrategyOptionsPtrOutput

func (i FSGroupStrategyOptionsArgs) ToFSGroupStrategyOptionsPtrOutput() FSGroupStrategyOptionsPtrOutput

func (FSGroupStrategyOptionsArgs) ToFSGroupStrategyOptionsPtrOutputWithContext

func (i FSGroupStrategyOptionsArgs) ToFSGroupStrategyOptionsPtrOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPtrOutput

type FSGroupStrategyOptionsInput

type FSGroupStrategyOptionsInput interface {
	pulumi.Input

	ToFSGroupStrategyOptionsOutput() FSGroupStrategyOptionsOutput
	ToFSGroupStrategyOptionsOutputWithContext(context.Context) FSGroupStrategyOptionsOutput
}

FSGroupStrategyOptionsInput is an input type that accepts FSGroupStrategyOptionsArgs and FSGroupStrategyOptionsOutput values. You can construct a concrete instance of `FSGroupStrategyOptionsInput` via:

FSGroupStrategyOptionsArgs{...}

type FSGroupStrategyOptionsOutput

type FSGroupStrategyOptionsOutput struct{ *pulumi.OutputState }

FSGroupStrategyOptions defines the strategy type and options used to create the strategy.

func (FSGroupStrategyOptionsOutput) ElementType

func (FSGroupStrategyOptionsOutput) Ranges

ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.

func (FSGroupStrategyOptionsOutput) Rule

rule is the strategy that will dictate what FSGroup is used in the SecurityContext.

func (FSGroupStrategyOptionsOutput) ToFSGroupStrategyOptionsOutput

func (o FSGroupStrategyOptionsOutput) ToFSGroupStrategyOptionsOutput() FSGroupStrategyOptionsOutput

func (FSGroupStrategyOptionsOutput) ToFSGroupStrategyOptionsOutputWithContext

func (o FSGroupStrategyOptionsOutput) ToFSGroupStrategyOptionsOutputWithContext(ctx context.Context) FSGroupStrategyOptionsOutput

func (FSGroupStrategyOptionsOutput) ToFSGroupStrategyOptionsPtrOutput

func (o FSGroupStrategyOptionsOutput) ToFSGroupStrategyOptionsPtrOutput() FSGroupStrategyOptionsPtrOutput

func (FSGroupStrategyOptionsOutput) ToFSGroupStrategyOptionsPtrOutputWithContext

func (o FSGroupStrategyOptionsOutput) ToFSGroupStrategyOptionsPtrOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPtrOutput

type FSGroupStrategyOptionsPatch added in v3.20.0

type FSGroupStrategyOptionsPatch struct {
	// ranges are the allowed ranges of fs groups.  If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRangePatch `pulumi:"ranges"`
	// rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
	Rule *string `pulumi:"rule"`
}

FSGroupStrategyOptions defines the strategy type and options used to create the strategy.

type FSGroupStrategyOptionsPatchArgs added in v3.20.0

type FSGroupStrategyOptionsPatchArgs struct {
	// ranges are the allowed ranges of fs groups.  If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangePatchArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
}

FSGroupStrategyOptions defines the strategy type and options used to create the strategy.

func (FSGroupStrategyOptionsPatchArgs) ElementType added in v3.20.0

func (FSGroupStrategyOptionsPatchArgs) ToFSGroupStrategyOptionsPatchOutput added in v3.20.0

func (i FSGroupStrategyOptionsPatchArgs) ToFSGroupStrategyOptionsPatchOutput() FSGroupStrategyOptionsPatchOutput

func (FSGroupStrategyOptionsPatchArgs) ToFSGroupStrategyOptionsPatchOutputWithContext added in v3.20.0

func (i FSGroupStrategyOptionsPatchArgs) ToFSGroupStrategyOptionsPatchOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPatchOutput

func (FSGroupStrategyOptionsPatchArgs) ToFSGroupStrategyOptionsPatchPtrOutput added in v3.20.0

func (i FSGroupStrategyOptionsPatchArgs) ToFSGroupStrategyOptionsPatchPtrOutput() FSGroupStrategyOptionsPatchPtrOutput

func (FSGroupStrategyOptionsPatchArgs) ToFSGroupStrategyOptionsPatchPtrOutputWithContext added in v3.20.0

func (i FSGroupStrategyOptionsPatchArgs) ToFSGroupStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPatchPtrOutput

type FSGroupStrategyOptionsPatchInput added in v3.20.0

type FSGroupStrategyOptionsPatchInput interface {
	pulumi.Input

	ToFSGroupStrategyOptionsPatchOutput() FSGroupStrategyOptionsPatchOutput
	ToFSGroupStrategyOptionsPatchOutputWithContext(context.Context) FSGroupStrategyOptionsPatchOutput
}

FSGroupStrategyOptionsPatchInput is an input type that accepts FSGroupStrategyOptionsPatchArgs and FSGroupStrategyOptionsPatchOutput values. You can construct a concrete instance of `FSGroupStrategyOptionsPatchInput` via:

FSGroupStrategyOptionsPatchArgs{...}

type FSGroupStrategyOptionsPatchOutput added in v3.20.0

type FSGroupStrategyOptionsPatchOutput struct{ *pulumi.OutputState }

FSGroupStrategyOptions defines the strategy type and options used to create the strategy.

func (FSGroupStrategyOptionsPatchOutput) ElementType added in v3.20.0

func (FSGroupStrategyOptionsPatchOutput) Ranges added in v3.20.0

ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.

func (FSGroupStrategyOptionsPatchOutput) Rule added in v3.20.0

rule is the strategy that will dictate what FSGroup is used in the SecurityContext.

func (FSGroupStrategyOptionsPatchOutput) ToFSGroupStrategyOptionsPatchOutput added in v3.20.0

func (o FSGroupStrategyOptionsPatchOutput) ToFSGroupStrategyOptionsPatchOutput() FSGroupStrategyOptionsPatchOutput

func (FSGroupStrategyOptionsPatchOutput) ToFSGroupStrategyOptionsPatchOutputWithContext added in v3.20.0

func (o FSGroupStrategyOptionsPatchOutput) ToFSGroupStrategyOptionsPatchOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPatchOutput

func (FSGroupStrategyOptionsPatchOutput) ToFSGroupStrategyOptionsPatchPtrOutput added in v3.20.0

func (o FSGroupStrategyOptionsPatchOutput) ToFSGroupStrategyOptionsPatchPtrOutput() FSGroupStrategyOptionsPatchPtrOutput

func (FSGroupStrategyOptionsPatchOutput) ToFSGroupStrategyOptionsPatchPtrOutputWithContext added in v3.20.0

func (o FSGroupStrategyOptionsPatchOutput) ToFSGroupStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPatchPtrOutput

type FSGroupStrategyOptionsPatchPtrInput added in v3.20.0

type FSGroupStrategyOptionsPatchPtrInput interface {
	pulumi.Input

	ToFSGroupStrategyOptionsPatchPtrOutput() FSGroupStrategyOptionsPatchPtrOutput
	ToFSGroupStrategyOptionsPatchPtrOutputWithContext(context.Context) FSGroupStrategyOptionsPatchPtrOutput
}

FSGroupStrategyOptionsPatchPtrInput is an input type that accepts FSGroupStrategyOptionsPatchArgs, FSGroupStrategyOptionsPatchPtr and FSGroupStrategyOptionsPatchPtrOutput values. You can construct a concrete instance of `FSGroupStrategyOptionsPatchPtrInput` via:

        FSGroupStrategyOptionsPatchArgs{...}

or:

        nil

func FSGroupStrategyOptionsPatchPtr added in v3.20.0

type FSGroupStrategyOptionsPatchPtrOutput added in v3.20.0

type FSGroupStrategyOptionsPatchPtrOutput struct{ *pulumi.OutputState }

func (FSGroupStrategyOptionsPatchPtrOutput) Elem added in v3.20.0

func (FSGroupStrategyOptionsPatchPtrOutput) ElementType added in v3.20.0

func (FSGroupStrategyOptionsPatchPtrOutput) Ranges added in v3.20.0

ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.

func (FSGroupStrategyOptionsPatchPtrOutput) Rule added in v3.20.0

rule is the strategy that will dictate what FSGroup is used in the SecurityContext.

func (FSGroupStrategyOptionsPatchPtrOutput) ToFSGroupStrategyOptionsPatchPtrOutput added in v3.20.0

func (o FSGroupStrategyOptionsPatchPtrOutput) ToFSGroupStrategyOptionsPatchPtrOutput() FSGroupStrategyOptionsPatchPtrOutput

func (FSGroupStrategyOptionsPatchPtrOutput) ToFSGroupStrategyOptionsPatchPtrOutputWithContext added in v3.20.0

func (o FSGroupStrategyOptionsPatchPtrOutput) ToFSGroupStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPatchPtrOutput

type FSGroupStrategyOptionsPtrInput

type FSGroupStrategyOptionsPtrInput interface {
	pulumi.Input

	ToFSGroupStrategyOptionsPtrOutput() FSGroupStrategyOptionsPtrOutput
	ToFSGroupStrategyOptionsPtrOutputWithContext(context.Context) FSGroupStrategyOptionsPtrOutput
}

FSGroupStrategyOptionsPtrInput is an input type that accepts FSGroupStrategyOptionsArgs, FSGroupStrategyOptionsPtr and FSGroupStrategyOptionsPtrOutput values. You can construct a concrete instance of `FSGroupStrategyOptionsPtrInput` via:

        FSGroupStrategyOptionsArgs{...}

or:

        nil

type FSGroupStrategyOptionsPtrOutput

type FSGroupStrategyOptionsPtrOutput struct{ *pulumi.OutputState }

func (FSGroupStrategyOptionsPtrOutput) Elem

func (FSGroupStrategyOptionsPtrOutput) ElementType

func (FSGroupStrategyOptionsPtrOutput) Ranges

ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.

func (FSGroupStrategyOptionsPtrOutput) Rule

rule is the strategy that will dictate what FSGroup is used in the SecurityContext.

func (FSGroupStrategyOptionsPtrOutput) ToFSGroupStrategyOptionsPtrOutput

func (o FSGroupStrategyOptionsPtrOutput) ToFSGroupStrategyOptionsPtrOutput() FSGroupStrategyOptionsPtrOutput

func (FSGroupStrategyOptionsPtrOutput) ToFSGroupStrategyOptionsPtrOutputWithContext

func (o FSGroupStrategyOptionsPtrOutput) ToFSGroupStrategyOptionsPtrOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPtrOutput

type HostPortRange

type HostPortRange struct {
	// max is the end of the range, inclusive.
	Max int `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min int `pulumi:"min"`
}

HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.

type HostPortRangeArgs

type HostPortRangeArgs struct {
	// max is the end of the range, inclusive.
	Max pulumi.IntInput `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min pulumi.IntInput `pulumi:"min"`
}

HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.

func (HostPortRangeArgs) ElementType

func (HostPortRangeArgs) ElementType() reflect.Type

func (HostPortRangeArgs) ToHostPortRangeOutput

func (i HostPortRangeArgs) ToHostPortRangeOutput() HostPortRangeOutput

func (HostPortRangeArgs) ToHostPortRangeOutputWithContext

func (i HostPortRangeArgs) ToHostPortRangeOutputWithContext(ctx context.Context) HostPortRangeOutput

type HostPortRangeArray

type HostPortRangeArray []HostPortRangeInput

func (HostPortRangeArray) ElementType

func (HostPortRangeArray) ElementType() reflect.Type

func (HostPortRangeArray) ToHostPortRangeArrayOutput

func (i HostPortRangeArray) ToHostPortRangeArrayOutput() HostPortRangeArrayOutput

func (HostPortRangeArray) ToHostPortRangeArrayOutputWithContext

func (i HostPortRangeArray) ToHostPortRangeArrayOutputWithContext(ctx context.Context) HostPortRangeArrayOutput

type HostPortRangeArrayInput

type HostPortRangeArrayInput interface {
	pulumi.Input

	ToHostPortRangeArrayOutput() HostPortRangeArrayOutput
	ToHostPortRangeArrayOutputWithContext(context.Context) HostPortRangeArrayOutput
}

HostPortRangeArrayInput is an input type that accepts HostPortRangeArray and HostPortRangeArrayOutput values. You can construct a concrete instance of `HostPortRangeArrayInput` via:

HostPortRangeArray{ HostPortRangeArgs{...} }

type HostPortRangeArrayOutput

type HostPortRangeArrayOutput struct{ *pulumi.OutputState }

func (HostPortRangeArrayOutput) ElementType

func (HostPortRangeArrayOutput) ElementType() reflect.Type

func (HostPortRangeArrayOutput) Index

func (HostPortRangeArrayOutput) ToHostPortRangeArrayOutput

func (o HostPortRangeArrayOutput) ToHostPortRangeArrayOutput() HostPortRangeArrayOutput

func (HostPortRangeArrayOutput) ToHostPortRangeArrayOutputWithContext

func (o HostPortRangeArrayOutput) ToHostPortRangeArrayOutputWithContext(ctx context.Context) HostPortRangeArrayOutput

type HostPortRangeInput

type HostPortRangeInput interface {
	pulumi.Input

	ToHostPortRangeOutput() HostPortRangeOutput
	ToHostPortRangeOutputWithContext(context.Context) HostPortRangeOutput
}

HostPortRangeInput is an input type that accepts HostPortRangeArgs and HostPortRangeOutput values. You can construct a concrete instance of `HostPortRangeInput` via:

HostPortRangeArgs{...}

type HostPortRangeOutput

type HostPortRangeOutput struct{ *pulumi.OutputState }

HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.

func (HostPortRangeOutput) ElementType

func (HostPortRangeOutput) ElementType() reflect.Type

func (HostPortRangeOutput) Max

max is the end of the range, inclusive.

func (HostPortRangeOutput) Min

min is the start of the range, inclusive.

func (HostPortRangeOutput) ToHostPortRangeOutput

func (o HostPortRangeOutput) ToHostPortRangeOutput() HostPortRangeOutput

func (HostPortRangeOutput) ToHostPortRangeOutputWithContext

func (o HostPortRangeOutput) ToHostPortRangeOutputWithContext(ctx context.Context) HostPortRangeOutput

type HostPortRangePatch added in v3.20.0

type HostPortRangePatch struct {
	// max is the end of the range, inclusive.
	Max *int `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min *int `pulumi:"min"`
}

HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.

type HostPortRangePatchArgs added in v3.20.0

type HostPortRangePatchArgs struct {
	// max is the end of the range, inclusive.
	Max pulumi.IntPtrInput `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min pulumi.IntPtrInput `pulumi:"min"`
}

HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.

func (HostPortRangePatchArgs) ElementType added in v3.20.0

func (HostPortRangePatchArgs) ElementType() reflect.Type

func (HostPortRangePatchArgs) ToHostPortRangePatchOutput added in v3.20.0

func (i HostPortRangePatchArgs) ToHostPortRangePatchOutput() HostPortRangePatchOutput

func (HostPortRangePatchArgs) ToHostPortRangePatchOutputWithContext added in v3.20.0

func (i HostPortRangePatchArgs) ToHostPortRangePatchOutputWithContext(ctx context.Context) HostPortRangePatchOutput

type HostPortRangePatchArray added in v3.20.0

type HostPortRangePatchArray []HostPortRangePatchInput

func (HostPortRangePatchArray) ElementType added in v3.20.0

func (HostPortRangePatchArray) ElementType() reflect.Type

func (HostPortRangePatchArray) ToHostPortRangePatchArrayOutput added in v3.20.0

func (i HostPortRangePatchArray) ToHostPortRangePatchArrayOutput() HostPortRangePatchArrayOutput

func (HostPortRangePatchArray) ToHostPortRangePatchArrayOutputWithContext added in v3.20.0

func (i HostPortRangePatchArray) ToHostPortRangePatchArrayOutputWithContext(ctx context.Context) HostPortRangePatchArrayOutput

type HostPortRangePatchArrayInput added in v3.20.0

type HostPortRangePatchArrayInput interface {
	pulumi.Input

	ToHostPortRangePatchArrayOutput() HostPortRangePatchArrayOutput
	ToHostPortRangePatchArrayOutputWithContext(context.Context) HostPortRangePatchArrayOutput
}

HostPortRangePatchArrayInput is an input type that accepts HostPortRangePatchArray and HostPortRangePatchArrayOutput values. You can construct a concrete instance of `HostPortRangePatchArrayInput` via:

HostPortRangePatchArray{ HostPortRangePatchArgs{...} }

type HostPortRangePatchArrayOutput added in v3.20.0

type HostPortRangePatchArrayOutput struct{ *pulumi.OutputState }

func (HostPortRangePatchArrayOutput) ElementType added in v3.20.0

func (HostPortRangePatchArrayOutput) Index added in v3.20.0

func (HostPortRangePatchArrayOutput) ToHostPortRangePatchArrayOutput added in v3.20.0

func (o HostPortRangePatchArrayOutput) ToHostPortRangePatchArrayOutput() HostPortRangePatchArrayOutput

func (HostPortRangePatchArrayOutput) ToHostPortRangePatchArrayOutputWithContext added in v3.20.0

func (o HostPortRangePatchArrayOutput) ToHostPortRangePatchArrayOutputWithContext(ctx context.Context) HostPortRangePatchArrayOutput

type HostPortRangePatchInput added in v3.20.0

type HostPortRangePatchInput interface {
	pulumi.Input

	ToHostPortRangePatchOutput() HostPortRangePatchOutput
	ToHostPortRangePatchOutputWithContext(context.Context) HostPortRangePatchOutput
}

HostPortRangePatchInput is an input type that accepts HostPortRangePatchArgs and HostPortRangePatchOutput values. You can construct a concrete instance of `HostPortRangePatchInput` via:

HostPortRangePatchArgs{...}

type HostPortRangePatchOutput added in v3.20.0

type HostPortRangePatchOutput struct{ *pulumi.OutputState }

HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.

func (HostPortRangePatchOutput) ElementType added in v3.20.0

func (HostPortRangePatchOutput) ElementType() reflect.Type

func (HostPortRangePatchOutput) Max added in v3.20.0

max is the end of the range, inclusive.

func (HostPortRangePatchOutput) Min added in v3.20.0

min is the start of the range, inclusive.

func (HostPortRangePatchOutput) ToHostPortRangePatchOutput added in v3.20.0

func (o HostPortRangePatchOutput) ToHostPortRangePatchOutput() HostPortRangePatchOutput

func (HostPortRangePatchOutput) ToHostPortRangePatchOutputWithContext added in v3.20.0

func (o HostPortRangePatchOutput) ToHostPortRangePatchOutputWithContext(ctx context.Context) HostPortRangePatchOutput

type IDRange

type IDRange struct {
	// max is the end of the range, inclusive.
	Max int `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min int `pulumi:"min"`
}

IDRange provides a min/max of an allowed range of IDs.

type IDRangeArgs

type IDRangeArgs struct {
	// max is the end of the range, inclusive.
	Max pulumi.IntInput `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min pulumi.IntInput `pulumi:"min"`
}

IDRange provides a min/max of an allowed range of IDs.

func (IDRangeArgs) ElementType

func (IDRangeArgs) ElementType() reflect.Type

func (IDRangeArgs) ToIDRangeOutput

func (i IDRangeArgs) ToIDRangeOutput() IDRangeOutput

func (IDRangeArgs) ToIDRangeOutputWithContext

func (i IDRangeArgs) ToIDRangeOutputWithContext(ctx context.Context) IDRangeOutput

type IDRangeArray

type IDRangeArray []IDRangeInput

func (IDRangeArray) ElementType

func (IDRangeArray) ElementType() reflect.Type

func (IDRangeArray) ToIDRangeArrayOutput

func (i IDRangeArray) ToIDRangeArrayOutput() IDRangeArrayOutput

func (IDRangeArray) ToIDRangeArrayOutputWithContext

func (i IDRangeArray) ToIDRangeArrayOutputWithContext(ctx context.Context) IDRangeArrayOutput

type IDRangeArrayInput

type IDRangeArrayInput interface {
	pulumi.Input

	ToIDRangeArrayOutput() IDRangeArrayOutput
	ToIDRangeArrayOutputWithContext(context.Context) IDRangeArrayOutput
}

IDRangeArrayInput is an input type that accepts IDRangeArray and IDRangeArrayOutput values. You can construct a concrete instance of `IDRangeArrayInput` via:

IDRangeArray{ IDRangeArgs{...} }

type IDRangeArrayOutput

type IDRangeArrayOutput struct{ *pulumi.OutputState }

func (IDRangeArrayOutput) ElementType

func (IDRangeArrayOutput) ElementType() reflect.Type

func (IDRangeArrayOutput) Index

func (IDRangeArrayOutput) ToIDRangeArrayOutput

func (o IDRangeArrayOutput) ToIDRangeArrayOutput() IDRangeArrayOutput

func (IDRangeArrayOutput) ToIDRangeArrayOutputWithContext

func (o IDRangeArrayOutput) ToIDRangeArrayOutputWithContext(ctx context.Context) IDRangeArrayOutput

type IDRangeInput

type IDRangeInput interface {
	pulumi.Input

	ToIDRangeOutput() IDRangeOutput
	ToIDRangeOutputWithContext(context.Context) IDRangeOutput
}

IDRangeInput is an input type that accepts IDRangeArgs and IDRangeOutput values. You can construct a concrete instance of `IDRangeInput` via:

IDRangeArgs{...}

type IDRangeOutput

type IDRangeOutput struct{ *pulumi.OutputState }

IDRange provides a min/max of an allowed range of IDs.

func (IDRangeOutput) ElementType

func (IDRangeOutput) ElementType() reflect.Type

func (IDRangeOutput) Max

func (o IDRangeOutput) Max() pulumi.IntOutput

max is the end of the range, inclusive.

func (IDRangeOutput) Min

func (o IDRangeOutput) Min() pulumi.IntOutput

min is the start of the range, inclusive.

func (IDRangeOutput) ToIDRangeOutput

func (o IDRangeOutput) ToIDRangeOutput() IDRangeOutput

func (IDRangeOutput) ToIDRangeOutputWithContext

func (o IDRangeOutput) ToIDRangeOutputWithContext(ctx context.Context) IDRangeOutput

type IDRangePatch added in v3.20.0

type IDRangePatch struct {
	// max is the end of the range, inclusive.
	Max *int `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min *int `pulumi:"min"`
}

IDRange provides a min/max of an allowed range of IDs.

type IDRangePatchArgs added in v3.20.0

type IDRangePatchArgs struct {
	// max is the end of the range, inclusive.
	Max pulumi.IntPtrInput `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min pulumi.IntPtrInput `pulumi:"min"`
}

IDRange provides a min/max of an allowed range of IDs.

func (IDRangePatchArgs) ElementType added in v3.20.0

func (IDRangePatchArgs) ElementType() reflect.Type

func (IDRangePatchArgs) ToIDRangePatchOutput added in v3.20.0

func (i IDRangePatchArgs) ToIDRangePatchOutput() IDRangePatchOutput

func (IDRangePatchArgs) ToIDRangePatchOutputWithContext added in v3.20.0

func (i IDRangePatchArgs) ToIDRangePatchOutputWithContext(ctx context.Context) IDRangePatchOutput

type IDRangePatchArray added in v3.20.0

type IDRangePatchArray []IDRangePatchInput

func (IDRangePatchArray) ElementType added in v3.20.0

func (IDRangePatchArray) ElementType() reflect.Type

func (IDRangePatchArray) ToIDRangePatchArrayOutput added in v3.20.0

func (i IDRangePatchArray) ToIDRangePatchArrayOutput() IDRangePatchArrayOutput

func (IDRangePatchArray) ToIDRangePatchArrayOutputWithContext added in v3.20.0

func (i IDRangePatchArray) ToIDRangePatchArrayOutputWithContext(ctx context.Context) IDRangePatchArrayOutput

type IDRangePatchArrayInput added in v3.20.0

type IDRangePatchArrayInput interface {
	pulumi.Input

	ToIDRangePatchArrayOutput() IDRangePatchArrayOutput
	ToIDRangePatchArrayOutputWithContext(context.Context) IDRangePatchArrayOutput
}

IDRangePatchArrayInput is an input type that accepts IDRangePatchArray and IDRangePatchArrayOutput values. You can construct a concrete instance of `IDRangePatchArrayInput` via:

IDRangePatchArray{ IDRangePatchArgs{...} }

type IDRangePatchArrayOutput added in v3.20.0

type IDRangePatchArrayOutput struct{ *pulumi.OutputState }

func (IDRangePatchArrayOutput) ElementType added in v3.20.0

func (IDRangePatchArrayOutput) ElementType() reflect.Type

func (IDRangePatchArrayOutput) Index added in v3.20.0

func (IDRangePatchArrayOutput) ToIDRangePatchArrayOutput added in v3.20.0

func (o IDRangePatchArrayOutput) ToIDRangePatchArrayOutput() IDRangePatchArrayOutput

func (IDRangePatchArrayOutput) ToIDRangePatchArrayOutputWithContext added in v3.20.0

func (o IDRangePatchArrayOutput) ToIDRangePatchArrayOutputWithContext(ctx context.Context) IDRangePatchArrayOutput

type IDRangePatchInput added in v3.20.0

type IDRangePatchInput interface {
	pulumi.Input

	ToIDRangePatchOutput() IDRangePatchOutput
	ToIDRangePatchOutputWithContext(context.Context) IDRangePatchOutput
}

IDRangePatchInput is an input type that accepts IDRangePatchArgs and IDRangePatchOutput values. You can construct a concrete instance of `IDRangePatchInput` via:

IDRangePatchArgs{...}

type IDRangePatchOutput added in v3.20.0

type IDRangePatchOutput struct{ *pulumi.OutputState }

IDRange provides a min/max of an allowed range of IDs.

func (IDRangePatchOutput) ElementType added in v3.20.0

func (IDRangePatchOutput) ElementType() reflect.Type

func (IDRangePatchOutput) Max added in v3.20.0

max is the end of the range, inclusive.

func (IDRangePatchOutput) Min added in v3.20.0

min is the start of the range, inclusive.

func (IDRangePatchOutput) ToIDRangePatchOutput added in v3.20.0

func (o IDRangePatchOutput) ToIDRangePatchOutput() IDRangePatchOutput

func (IDRangePatchOutput) ToIDRangePatchOutputWithContext added in v3.20.0

func (o IDRangePatchOutput) ToIDRangePatchOutputWithContext(ctx context.Context) IDRangePatchOutput

type PodDisruptionBudget

type PodDisruptionBudget struct {
	pulumi.CustomResourceState

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrOutput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrOutput     `pulumi:"kind"`
	Metadata metav1.ObjectMetaPtrOutput `pulumi:"metadata"`
	// Specification of the desired behavior of the PodDisruptionBudget.
	Spec PodDisruptionBudgetSpecPtrOutput `pulumi:"spec"`
	// Most recently observed status of the PodDisruptionBudget.
	Status PodDisruptionBudgetStatusPtrOutput `pulumi:"status"`
}

PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods

func GetPodDisruptionBudget

func GetPodDisruptionBudget(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PodDisruptionBudgetState, opts ...pulumi.ResourceOption) (*PodDisruptionBudget, error)

GetPodDisruptionBudget gets an existing PodDisruptionBudget resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPodDisruptionBudget

func NewPodDisruptionBudget(ctx *pulumi.Context,
	name string, args *PodDisruptionBudgetArgs, opts ...pulumi.ResourceOption) (*PodDisruptionBudget, error)

NewPodDisruptionBudget registers a new resource with the given unique name, arguments, and options.

func (*PodDisruptionBudget) ElementType

func (*PodDisruptionBudget) ElementType() reflect.Type

func (*PodDisruptionBudget) ToPodDisruptionBudgetOutput

func (i *PodDisruptionBudget) ToPodDisruptionBudgetOutput() PodDisruptionBudgetOutput

func (*PodDisruptionBudget) ToPodDisruptionBudgetOutputWithContext

func (i *PodDisruptionBudget) ToPodDisruptionBudgetOutputWithContext(ctx context.Context) PodDisruptionBudgetOutput

type PodDisruptionBudgetArgs

type PodDisruptionBudgetArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput
	Metadata metav1.ObjectMetaPtrInput
	// Specification of the desired behavior of the PodDisruptionBudget.
	Spec PodDisruptionBudgetSpecPtrInput
}

The set of arguments for constructing a PodDisruptionBudget resource.

func (PodDisruptionBudgetArgs) ElementType

func (PodDisruptionBudgetArgs) ElementType() reflect.Type

type PodDisruptionBudgetArray

type PodDisruptionBudgetArray []PodDisruptionBudgetInput

func (PodDisruptionBudgetArray) ElementType

func (PodDisruptionBudgetArray) ElementType() reflect.Type

func (PodDisruptionBudgetArray) ToPodDisruptionBudgetArrayOutput

func (i PodDisruptionBudgetArray) ToPodDisruptionBudgetArrayOutput() PodDisruptionBudgetArrayOutput

func (PodDisruptionBudgetArray) ToPodDisruptionBudgetArrayOutputWithContext

func (i PodDisruptionBudgetArray) ToPodDisruptionBudgetArrayOutputWithContext(ctx context.Context) PodDisruptionBudgetArrayOutput

type PodDisruptionBudgetArrayInput

type PodDisruptionBudgetArrayInput interface {
	pulumi.Input

	ToPodDisruptionBudgetArrayOutput() PodDisruptionBudgetArrayOutput
	ToPodDisruptionBudgetArrayOutputWithContext(context.Context) PodDisruptionBudgetArrayOutput
}

PodDisruptionBudgetArrayInput is an input type that accepts PodDisruptionBudgetArray and PodDisruptionBudgetArrayOutput values. You can construct a concrete instance of `PodDisruptionBudgetArrayInput` via:

PodDisruptionBudgetArray{ PodDisruptionBudgetArgs{...} }

type PodDisruptionBudgetArrayOutput

type PodDisruptionBudgetArrayOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetArrayOutput) ElementType

func (PodDisruptionBudgetArrayOutput) Index

func (PodDisruptionBudgetArrayOutput) ToPodDisruptionBudgetArrayOutput

func (o PodDisruptionBudgetArrayOutput) ToPodDisruptionBudgetArrayOutput() PodDisruptionBudgetArrayOutput

func (PodDisruptionBudgetArrayOutput) ToPodDisruptionBudgetArrayOutputWithContext

func (o PodDisruptionBudgetArrayOutput) ToPodDisruptionBudgetArrayOutputWithContext(ctx context.Context) PodDisruptionBudgetArrayOutput

type PodDisruptionBudgetInput

type PodDisruptionBudgetInput interface {
	pulumi.Input

	ToPodDisruptionBudgetOutput() PodDisruptionBudgetOutput
	ToPodDisruptionBudgetOutputWithContext(ctx context.Context) PodDisruptionBudgetOutput
}

type PodDisruptionBudgetList

type PodDisruptionBudgetList struct {
	pulumi.CustomResourceState

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrOutput             `pulumi:"apiVersion"`
	Items      PodDisruptionBudgetTypeArrayOutput `pulumi:"items"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrOutput   `pulumi:"kind"`
	Metadata metav1.ListMetaPtrOutput `pulumi:"metadata"`
}

PodDisruptionBudgetList is a collection of PodDisruptionBudgets.

func GetPodDisruptionBudgetList

func GetPodDisruptionBudgetList(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PodDisruptionBudgetListState, opts ...pulumi.ResourceOption) (*PodDisruptionBudgetList, error)

GetPodDisruptionBudgetList gets an existing PodDisruptionBudgetList resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPodDisruptionBudgetList

func NewPodDisruptionBudgetList(ctx *pulumi.Context,
	name string, args *PodDisruptionBudgetListArgs, opts ...pulumi.ResourceOption) (*PodDisruptionBudgetList, error)

NewPodDisruptionBudgetList registers a new resource with the given unique name, arguments, and options.

func (*PodDisruptionBudgetList) ElementType

func (*PodDisruptionBudgetList) ElementType() reflect.Type

func (*PodDisruptionBudgetList) ToPodDisruptionBudgetListOutput

func (i *PodDisruptionBudgetList) ToPodDisruptionBudgetListOutput() PodDisruptionBudgetListOutput

func (*PodDisruptionBudgetList) ToPodDisruptionBudgetListOutputWithContext

func (i *PodDisruptionBudgetList) ToPodDisruptionBudgetListOutputWithContext(ctx context.Context) PodDisruptionBudgetListOutput

type PodDisruptionBudgetListArgs

type PodDisruptionBudgetListArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput
	Items      PodDisruptionBudgetTypeArrayInput
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput
	Metadata metav1.ListMetaPtrInput
}

The set of arguments for constructing a PodDisruptionBudgetList resource.

func (PodDisruptionBudgetListArgs) ElementType

type PodDisruptionBudgetListArray

type PodDisruptionBudgetListArray []PodDisruptionBudgetListInput

func (PodDisruptionBudgetListArray) ElementType

func (PodDisruptionBudgetListArray) ToPodDisruptionBudgetListArrayOutput

func (i PodDisruptionBudgetListArray) ToPodDisruptionBudgetListArrayOutput() PodDisruptionBudgetListArrayOutput

func (PodDisruptionBudgetListArray) ToPodDisruptionBudgetListArrayOutputWithContext

func (i PodDisruptionBudgetListArray) ToPodDisruptionBudgetListArrayOutputWithContext(ctx context.Context) PodDisruptionBudgetListArrayOutput

type PodDisruptionBudgetListArrayInput

type PodDisruptionBudgetListArrayInput interface {
	pulumi.Input

	ToPodDisruptionBudgetListArrayOutput() PodDisruptionBudgetListArrayOutput
	ToPodDisruptionBudgetListArrayOutputWithContext(context.Context) PodDisruptionBudgetListArrayOutput
}

PodDisruptionBudgetListArrayInput is an input type that accepts PodDisruptionBudgetListArray and PodDisruptionBudgetListArrayOutput values. You can construct a concrete instance of `PodDisruptionBudgetListArrayInput` via:

PodDisruptionBudgetListArray{ PodDisruptionBudgetListArgs{...} }

type PodDisruptionBudgetListArrayOutput

type PodDisruptionBudgetListArrayOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetListArrayOutput) ElementType

func (PodDisruptionBudgetListArrayOutput) Index

func (PodDisruptionBudgetListArrayOutput) ToPodDisruptionBudgetListArrayOutput

func (o PodDisruptionBudgetListArrayOutput) ToPodDisruptionBudgetListArrayOutput() PodDisruptionBudgetListArrayOutput

func (PodDisruptionBudgetListArrayOutput) ToPodDisruptionBudgetListArrayOutputWithContext

func (o PodDisruptionBudgetListArrayOutput) ToPodDisruptionBudgetListArrayOutputWithContext(ctx context.Context) PodDisruptionBudgetListArrayOutput

type PodDisruptionBudgetListInput

type PodDisruptionBudgetListInput interface {
	pulumi.Input

	ToPodDisruptionBudgetListOutput() PodDisruptionBudgetListOutput
	ToPodDisruptionBudgetListOutputWithContext(ctx context.Context) PodDisruptionBudgetListOutput
}

type PodDisruptionBudgetListMap

type PodDisruptionBudgetListMap map[string]PodDisruptionBudgetListInput

func (PodDisruptionBudgetListMap) ElementType

func (PodDisruptionBudgetListMap) ElementType() reflect.Type

func (PodDisruptionBudgetListMap) ToPodDisruptionBudgetListMapOutput

func (i PodDisruptionBudgetListMap) ToPodDisruptionBudgetListMapOutput() PodDisruptionBudgetListMapOutput

func (PodDisruptionBudgetListMap) ToPodDisruptionBudgetListMapOutputWithContext

func (i PodDisruptionBudgetListMap) ToPodDisruptionBudgetListMapOutputWithContext(ctx context.Context) PodDisruptionBudgetListMapOutput

type PodDisruptionBudgetListMapInput

type PodDisruptionBudgetListMapInput interface {
	pulumi.Input

	ToPodDisruptionBudgetListMapOutput() PodDisruptionBudgetListMapOutput
	ToPodDisruptionBudgetListMapOutputWithContext(context.Context) PodDisruptionBudgetListMapOutput
}

PodDisruptionBudgetListMapInput is an input type that accepts PodDisruptionBudgetListMap and PodDisruptionBudgetListMapOutput values. You can construct a concrete instance of `PodDisruptionBudgetListMapInput` via:

PodDisruptionBudgetListMap{ "key": PodDisruptionBudgetListArgs{...} }

type PodDisruptionBudgetListMapOutput

type PodDisruptionBudgetListMapOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetListMapOutput) ElementType

func (PodDisruptionBudgetListMapOutput) MapIndex

func (PodDisruptionBudgetListMapOutput) ToPodDisruptionBudgetListMapOutput

func (o PodDisruptionBudgetListMapOutput) ToPodDisruptionBudgetListMapOutput() PodDisruptionBudgetListMapOutput

func (PodDisruptionBudgetListMapOutput) ToPodDisruptionBudgetListMapOutputWithContext

func (o PodDisruptionBudgetListMapOutput) ToPodDisruptionBudgetListMapOutputWithContext(ctx context.Context) PodDisruptionBudgetListMapOutput

type PodDisruptionBudgetListOutput

type PodDisruptionBudgetListOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetListOutput) ApiVersion added in v3.19.1

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodDisruptionBudgetListOutput) ElementType

func (PodDisruptionBudgetListOutput) Items added in v3.19.1

func (PodDisruptionBudgetListOutput) Kind added in v3.19.1

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodDisruptionBudgetListOutput) Metadata added in v3.19.1

func (PodDisruptionBudgetListOutput) ToPodDisruptionBudgetListOutput

func (o PodDisruptionBudgetListOutput) ToPodDisruptionBudgetListOutput() PodDisruptionBudgetListOutput

func (PodDisruptionBudgetListOutput) ToPodDisruptionBudgetListOutputWithContext

func (o PodDisruptionBudgetListOutput) ToPodDisruptionBudgetListOutputWithContext(ctx context.Context) PodDisruptionBudgetListOutput

type PodDisruptionBudgetListState

type PodDisruptionBudgetListState struct {
}

func (PodDisruptionBudgetListState) ElementType

type PodDisruptionBudgetListType

type PodDisruptionBudgetListType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string                   `pulumi:"apiVersion"`
	Items      []PodDisruptionBudgetType `pulumi:"items"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     *string          `pulumi:"kind"`
	Metadata *metav1.ListMeta `pulumi:"metadata"`
}

PodDisruptionBudgetList is a collection of PodDisruptionBudgets.

type PodDisruptionBudgetListTypeArgs

type PodDisruptionBudgetListTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput             `pulumi:"apiVersion"`
	Items      PodDisruptionBudgetTypeArrayInput `pulumi:"items"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput   `pulumi:"kind"`
	Metadata metav1.ListMetaPtrInput `pulumi:"metadata"`
}

PodDisruptionBudgetList is a collection of PodDisruptionBudgets.

func (PodDisruptionBudgetListTypeArgs) ElementType

func (PodDisruptionBudgetListTypeArgs) ToPodDisruptionBudgetListTypeOutput

func (i PodDisruptionBudgetListTypeArgs) ToPodDisruptionBudgetListTypeOutput() PodDisruptionBudgetListTypeOutput

func (PodDisruptionBudgetListTypeArgs) ToPodDisruptionBudgetListTypeOutputWithContext

func (i PodDisruptionBudgetListTypeArgs) ToPodDisruptionBudgetListTypeOutputWithContext(ctx context.Context) PodDisruptionBudgetListTypeOutput

type PodDisruptionBudgetListTypeInput

type PodDisruptionBudgetListTypeInput interface {
	pulumi.Input

	ToPodDisruptionBudgetListTypeOutput() PodDisruptionBudgetListTypeOutput
	ToPodDisruptionBudgetListTypeOutputWithContext(context.Context) PodDisruptionBudgetListTypeOutput
}

PodDisruptionBudgetListTypeInput is an input type that accepts PodDisruptionBudgetListTypeArgs and PodDisruptionBudgetListTypeOutput values. You can construct a concrete instance of `PodDisruptionBudgetListTypeInput` via:

PodDisruptionBudgetListTypeArgs{...}

type PodDisruptionBudgetListTypeOutput

type PodDisruptionBudgetListTypeOutput struct{ *pulumi.OutputState }

PodDisruptionBudgetList is a collection of PodDisruptionBudgets.

func (PodDisruptionBudgetListTypeOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodDisruptionBudgetListTypeOutput) ElementType

func (PodDisruptionBudgetListTypeOutput) Items

func (PodDisruptionBudgetListTypeOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodDisruptionBudgetListTypeOutput) Metadata

func (PodDisruptionBudgetListTypeOutput) ToPodDisruptionBudgetListTypeOutput

func (o PodDisruptionBudgetListTypeOutput) ToPodDisruptionBudgetListTypeOutput() PodDisruptionBudgetListTypeOutput

func (PodDisruptionBudgetListTypeOutput) ToPodDisruptionBudgetListTypeOutputWithContext

func (o PodDisruptionBudgetListTypeOutput) ToPodDisruptionBudgetListTypeOutputWithContext(ctx context.Context) PodDisruptionBudgetListTypeOutput

type PodDisruptionBudgetMap

type PodDisruptionBudgetMap map[string]PodDisruptionBudgetInput

func (PodDisruptionBudgetMap) ElementType

func (PodDisruptionBudgetMap) ElementType() reflect.Type

func (PodDisruptionBudgetMap) ToPodDisruptionBudgetMapOutput

func (i PodDisruptionBudgetMap) ToPodDisruptionBudgetMapOutput() PodDisruptionBudgetMapOutput

func (PodDisruptionBudgetMap) ToPodDisruptionBudgetMapOutputWithContext

func (i PodDisruptionBudgetMap) ToPodDisruptionBudgetMapOutputWithContext(ctx context.Context) PodDisruptionBudgetMapOutput

type PodDisruptionBudgetMapInput

type PodDisruptionBudgetMapInput interface {
	pulumi.Input

	ToPodDisruptionBudgetMapOutput() PodDisruptionBudgetMapOutput
	ToPodDisruptionBudgetMapOutputWithContext(context.Context) PodDisruptionBudgetMapOutput
}

PodDisruptionBudgetMapInput is an input type that accepts PodDisruptionBudgetMap and PodDisruptionBudgetMapOutput values. You can construct a concrete instance of `PodDisruptionBudgetMapInput` via:

PodDisruptionBudgetMap{ "key": PodDisruptionBudgetArgs{...} }

type PodDisruptionBudgetMapOutput

type PodDisruptionBudgetMapOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetMapOutput) ElementType

func (PodDisruptionBudgetMapOutput) MapIndex

func (PodDisruptionBudgetMapOutput) ToPodDisruptionBudgetMapOutput

func (o PodDisruptionBudgetMapOutput) ToPodDisruptionBudgetMapOutput() PodDisruptionBudgetMapOutput

func (PodDisruptionBudgetMapOutput) ToPodDisruptionBudgetMapOutputWithContext

func (o PodDisruptionBudgetMapOutput) ToPodDisruptionBudgetMapOutputWithContext(ctx context.Context) PodDisruptionBudgetMapOutput

type PodDisruptionBudgetOutput

type PodDisruptionBudgetOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetOutput) ApiVersion added in v3.19.1

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodDisruptionBudgetOutput) ElementType

func (PodDisruptionBudgetOutput) ElementType() reflect.Type

func (PodDisruptionBudgetOutput) Kind added in v3.19.1

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodDisruptionBudgetOutput) Metadata added in v3.19.1

func (PodDisruptionBudgetOutput) Spec added in v3.19.1

Specification of the desired behavior of the PodDisruptionBudget.

func (PodDisruptionBudgetOutput) Status added in v3.19.1

Most recently observed status of the PodDisruptionBudget.

func (PodDisruptionBudgetOutput) ToPodDisruptionBudgetOutput

func (o PodDisruptionBudgetOutput) ToPodDisruptionBudgetOutput() PodDisruptionBudgetOutput

func (PodDisruptionBudgetOutput) ToPodDisruptionBudgetOutputWithContext

func (o PodDisruptionBudgetOutput) ToPodDisruptionBudgetOutputWithContext(ctx context.Context) PodDisruptionBudgetOutput

type PodDisruptionBudgetPatch added in v3.20.0

type PodDisruptionBudgetPatch struct {
	pulumi.CustomResourceState

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrOutput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrOutput          `pulumi:"kind"`
	Metadata metav1.ObjectMetaPatchPtrOutput `pulumi:"metadata"`
	// Specification of the desired behavior of the PodDisruptionBudget.
	Spec PodDisruptionBudgetSpecPatchPtrOutput `pulumi:"spec"`
	// Most recently observed status of the PodDisruptionBudget.
	Status PodDisruptionBudgetStatusPatchPtrOutput `pulumi:"status"`
}

Patch resources are used to modify existing Kubernetes resources by using Server-Side Apply updates. The name of the resource must be specified, but all other properties are optional. More than one patch may be applied to the same resource, and a random FieldManager name will be used for each Patch resource. Conflicts will result in an error by default, but can be forced using the "pulumi.com/patchForce" annotation. See the [Server-Side Apply Docs](https://www.pulumi.com/registry/packages/kubernetes/how-to-guides/managing-resources-with-server-side-apply/) for additional information about using Server-Side Apply to manage Kubernetes resources with Pulumi. PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods

func GetPodDisruptionBudgetPatch added in v3.20.0

func GetPodDisruptionBudgetPatch(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PodDisruptionBudgetPatchState, opts ...pulumi.ResourceOption) (*PodDisruptionBudgetPatch, error)

GetPodDisruptionBudgetPatch gets an existing PodDisruptionBudgetPatch resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPodDisruptionBudgetPatch added in v3.20.0

func NewPodDisruptionBudgetPatch(ctx *pulumi.Context,
	name string, args *PodDisruptionBudgetPatchArgs, opts ...pulumi.ResourceOption) (*PodDisruptionBudgetPatch, error)

NewPodDisruptionBudgetPatch registers a new resource with the given unique name, arguments, and options.

func (*PodDisruptionBudgetPatch) ElementType added in v3.20.0

func (*PodDisruptionBudgetPatch) ElementType() reflect.Type

func (*PodDisruptionBudgetPatch) ToPodDisruptionBudgetPatchOutput added in v3.20.0

func (i *PodDisruptionBudgetPatch) ToPodDisruptionBudgetPatchOutput() PodDisruptionBudgetPatchOutput

func (*PodDisruptionBudgetPatch) ToPodDisruptionBudgetPatchOutputWithContext added in v3.20.0

func (i *PodDisruptionBudgetPatch) ToPodDisruptionBudgetPatchOutputWithContext(ctx context.Context) PodDisruptionBudgetPatchOutput

type PodDisruptionBudgetPatchArgs added in v3.20.0

type PodDisruptionBudgetPatchArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput
	Metadata metav1.ObjectMetaPatchPtrInput
	// Specification of the desired behavior of the PodDisruptionBudget.
	Spec PodDisruptionBudgetSpecPatchPtrInput
}

The set of arguments for constructing a PodDisruptionBudgetPatch resource.

func (PodDisruptionBudgetPatchArgs) ElementType added in v3.20.0

type PodDisruptionBudgetPatchArray added in v3.20.0

type PodDisruptionBudgetPatchArray []PodDisruptionBudgetPatchInput

func (PodDisruptionBudgetPatchArray) ElementType added in v3.20.0

func (PodDisruptionBudgetPatchArray) ToPodDisruptionBudgetPatchArrayOutput added in v3.20.0

func (i PodDisruptionBudgetPatchArray) ToPodDisruptionBudgetPatchArrayOutput() PodDisruptionBudgetPatchArrayOutput

func (PodDisruptionBudgetPatchArray) ToPodDisruptionBudgetPatchArrayOutputWithContext added in v3.20.0

func (i PodDisruptionBudgetPatchArray) ToPodDisruptionBudgetPatchArrayOutputWithContext(ctx context.Context) PodDisruptionBudgetPatchArrayOutput

type PodDisruptionBudgetPatchArrayInput added in v3.20.0

type PodDisruptionBudgetPatchArrayInput interface {
	pulumi.Input

	ToPodDisruptionBudgetPatchArrayOutput() PodDisruptionBudgetPatchArrayOutput
	ToPodDisruptionBudgetPatchArrayOutputWithContext(context.Context) PodDisruptionBudgetPatchArrayOutput
}

PodDisruptionBudgetPatchArrayInput is an input type that accepts PodDisruptionBudgetPatchArray and PodDisruptionBudgetPatchArrayOutput values. You can construct a concrete instance of `PodDisruptionBudgetPatchArrayInput` via:

PodDisruptionBudgetPatchArray{ PodDisruptionBudgetPatchArgs{...} }

type PodDisruptionBudgetPatchArrayOutput added in v3.20.0

type PodDisruptionBudgetPatchArrayOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetPatchArrayOutput) ElementType added in v3.20.0

func (PodDisruptionBudgetPatchArrayOutput) Index added in v3.20.0

func (PodDisruptionBudgetPatchArrayOutput) ToPodDisruptionBudgetPatchArrayOutput added in v3.20.0

func (o PodDisruptionBudgetPatchArrayOutput) ToPodDisruptionBudgetPatchArrayOutput() PodDisruptionBudgetPatchArrayOutput

func (PodDisruptionBudgetPatchArrayOutput) ToPodDisruptionBudgetPatchArrayOutputWithContext added in v3.20.0

func (o PodDisruptionBudgetPatchArrayOutput) ToPodDisruptionBudgetPatchArrayOutputWithContext(ctx context.Context) PodDisruptionBudgetPatchArrayOutput

type PodDisruptionBudgetPatchInput added in v3.20.0

type PodDisruptionBudgetPatchInput interface {
	pulumi.Input

	ToPodDisruptionBudgetPatchOutput() PodDisruptionBudgetPatchOutput
	ToPodDisruptionBudgetPatchOutputWithContext(ctx context.Context) PodDisruptionBudgetPatchOutput
}

type PodDisruptionBudgetPatchMap added in v3.20.0

type PodDisruptionBudgetPatchMap map[string]PodDisruptionBudgetPatchInput

func (PodDisruptionBudgetPatchMap) ElementType added in v3.20.0

func (PodDisruptionBudgetPatchMap) ToPodDisruptionBudgetPatchMapOutput added in v3.20.0

func (i PodDisruptionBudgetPatchMap) ToPodDisruptionBudgetPatchMapOutput() PodDisruptionBudgetPatchMapOutput

func (PodDisruptionBudgetPatchMap) ToPodDisruptionBudgetPatchMapOutputWithContext added in v3.20.0

func (i PodDisruptionBudgetPatchMap) ToPodDisruptionBudgetPatchMapOutputWithContext(ctx context.Context) PodDisruptionBudgetPatchMapOutput

type PodDisruptionBudgetPatchMapInput added in v3.20.0

type PodDisruptionBudgetPatchMapInput interface {
	pulumi.Input

	ToPodDisruptionBudgetPatchMapOutput() PodDisruptionBudgetPatchMapOutput
	ToPodDisruptionBudgetPatchMapOutputWithContext(context.Context) PodDisruptionBudgetPatchMapOutput
}

PodDisruptionBudgetPatchMapInput is an input type that accepts PodDisruptionBudgetPatchMap and PodDisruptionBudgetPatchMapOutput values. You can construct a concrete instance of `PodDisruptionBudgetPatchMapInput` via:

PodDisruptionBudgetPatchMap{ "key": PodDisruptionBudgetPatchArgs{...} }

type PodDisruptionBudgetPatchMapOutput added in v3.20.0

type PodDisruptionBudgetPatchMapOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetPatchMapOutput) ElementType added in v3.20.0

func (PodDisruptionBudgetPatchMapOutput) MapIndex added in v3.20.0

func (PodDisruptionBudgetPatchMapOutput) ToPodDisruptionBudgetPatchMapOutput added in v3.20.0

func (o PodDisruptionBudgetPatchMapOutput) ToPodDisruptionBudgetPatchMapOutput() PodDisruptionBudgetPatchMapOutput

func (PodDisruptionBudgetPatchMapOutput) ToPodDisruptionBudgetPatchMapOutputWithContext added in v3.20.0

func (o PodDisruptionBudgetPatchMapOutput) ToPodDisruptionBudgetPatchMapOutputWithContext(ctx context.Context) PodDisruptionBudgetPatchMapOutput

type PodDisruptionBudgetPatchOutput added in v3.20.0

type PodDisruptionBudgetPatchOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetPatchOutput) ApiVersion added in v3.20.0

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodDisruptionBudgetPatchOutput) ElementType added in v3.20.0

func (PodDisruptionBudgetPatchOutput) Kind added in v3.20.0

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodDisruptionBudgetPatchOutput) Metadata added in v3.20.0

func (PodDisruptionBudgetPatchOutput) Spec added in v3.20.0

Specification of the desired behavior of the PodDisruptionBudget.

func (PodDisruptionBudgetPatchOutput) Status added in v3.20.0

Most recently observed status of the PodDisruptionBudget.

func (PodDisruptionBudgetPatchOutput) ToPodDisruptionBudgetPatchOutput added in v3.20.0

func (o PodDisruptionBudgetPatchOutput) ToPodDisruptionBudgetPatchOutput() PodDisruptionBudgetPatchOutput

func (PodDisruptionBudgetPatchOutput) ToPodDisruptionBudgetPatchOutputWithContext added in v3.20.0

func (o PodDisruptionBudgetPatchOutput) ToPodDisruptionBudgetPatchOutputWithContext(ctx context.Context) PodDisruptionBudgetPatchOutput

type PodDisruptionBudgetPatchState added in v3.20.0

type PodDisruptionBudgetPatchState struct {
}

func (PodDisruptionBudgetPatchState) ElementType added in v3.20.0

type PodDisruptionBudgetPatchType added in v3.20.0

type PodDisruptionBudgetPatchType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     *string                 `pulumi:"kind"`
	Metadata *metav1.ObjectMetaPatch `pulumi:"metadata"`
	// Specification of the desired behavior of the PodDisruptionBudget.
	Spec *PodDisruptionBudgetSpecPatch `pulumi:"spec"`
	// Most recently observed status of the PodDisruptionBudget.
	Status *PodDisruptionBudgetStatusPatch `pulumi:"status"`
}

PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods

type PodDisruptionBudgetPatchTypeArgs added in v3.20.0

type PodDisruptionBudgetPatchTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput          `pulumi:"kind"`
	Metadata metav1.ObjectMetaPatchPtrInput `pulumi:"metadata"`
	// Specification of the desired behavior of the PodDisruptionBudget.
	Spec PodDisruptionBudgetSpecPatchPtrInput `pulumi:"spec"`
	// Most recently observed status of the PodDisruptionBudget.
	Status PodDisruptionBudgetStatusPatchPtrInput `pulumi:"status"`
}

PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods

func (PodDisruptionBudgetPatchTypeArgs) ElementType added in v3.20.0

func (PodDisruptionBudgetPatchTypeArgs) ToPodDisruptionBudgetPatchTypeOutput added in v3.20.0

func (i PodDisruptionBudgetPatchTypeArgs) ToPodDisruptionBudgetPatchTypeOutput() PodDisruptionBudgetPatchTypeOutput

func (PodDisruptionBudgetPatchTypeArgs) ToPodDisruptionBudgetPatchTypeOutputWithContext added in v3.20.0

func (i PodDisruptionBudgetPatchTypeArgs) ToPodDisruptionBudgetPatchTypeOutputWithContext(ctx context.Context) PodDisruptionBudgetPatchTypeOutput

type PodDisruptionBudgetPatchTypeInput added in v3.20.0

type PodDisruptionBudgetPatchTypeInput interface {
	pulumi.Input

	ToPodDisruptionBudgetPatchTypeOutput() PodDisruptionBudgetPatchTypeOutput
	ToPodDisruptionBudgetPatchTypeOutputWithContext(context.Context) PodDisruptionBudgetPatchTypeOutput
}

PodDisruptionBudgetPatchTypeInput is an input type that accepts PodDisruptionBudgetPatchTypeArgs and PodDisruptionBudgetPatchTypeOutput values. You can construct a concrete instance of `PodDisruptionBudgetPatchTypeInput` via:

PodDisruptionBudgetPatchTypeArgs{...}

type PodDisruptionBudgetPatchTypeOutput added in v3.20.0

type PodDisruptionBudgetPatchTypeOutput struct{ *pulumi.OutputState }

PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods

func (PodDisruptionBudgetPatchTypeOutput) ApiVersion added in v3.20.0

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodDisruptionBudgetPatchTypeOutput) ElementType added in v3.20.0

func (PodDisruptionBudgetPatchTypeOutput) Kind added in v3.20.0

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodDisruptionBudgetPatchTypeOutput) Metadata added in v3.20.0

func (PodDisruptionBudgetPatchTypeOutput) Spec added in v3.20.0

Specification of the desired behavior of the PodDisruptionBudget.

func (PodDisruptionBudgetPatchTypeOutput) Status added in v3.20.0

Most recently observed status of the PodDisruptionBudget.

func (PodDisruptionBudgetPatchTypeOutput) ToPodDisruptionBudgetPatchTypeOutput added in v3.20.0

func (o PodDisruptionBudgetPatchTypeOutput) ToPodDisruptionBudgetPatchTypeOutput() PodDisruptionBudgetPatchTypeOutput

func (PodDisruptionBudgetPatchTypeOutput) ToPodDisruptionBudgetPatchTypeOutputWithContext added in v3.20.0

func (o PodDisruptionBudgetPatchTypeOutput) ToPodDisruptionBudgetPatchTypeOutputWithContext(ctx context.Context) PodDisruptionBudgetPatchTypeOutput

type PodDisruptionBudgetSpec

type PodDisruptionBudgetSpec struct {
	// An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
	MaxUnavailable interface{} `pulumi:"maxUnavailable"`
	// An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod.  So for example you can prevent all voluntary evictions by specifying "100%".
	MinAvailable interface{} `pulumi:"minAvailable"`
	// Label query over pods whose evictions are managed by the disruption budget.
	Selector *metav1.LabelSelector `pulumi:"selector"`
}

PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.

type PodDisruptionBudgetSpecArgs

type PodDisruptionBudgetSpecArgs struct {
	// An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
	MaxUnavailable pulumi.Input `pulumi:"maxUnavailable"`
	// An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod.  So for example you can prevent all voluntary evictions by specifying "100%".
	MinAvailable pulumi.Input `pulumi:"minAvailable"`
	// Label query over pods whose evictions are managed by the disruption budget.
	Selector metav1.LabelSelectorPtrInput `pulumi:"selector"`
}

PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.

func (PodDisruptionBudgetSpecArgs) ElementType

func (PodDisruptionBudgetSpecArgs) ToPodDisruptionBudgetSpecOutput

func (i PodDisruptionBudgetSpecArgs) ToPodDisruptionBudgetSpecOutput() PodDisruptionBudgetSpecOutput

func (PodDisruptionBudgetSpecArgs) ToPodDisruptionBudgetSpecOutputWithContext

func (i PodDisruptionBudgetSpecArgs) ToPodDisruptionBudgetSpecOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecOutput

func (PodDisruptionBudgetSpecArgs) ToPodDisruptionBudgetSpecPtrOutput

func (i PodDisruptionBudgetSpecArgs) ToPodDisruptionBudgetSpecPtrOutput() PodDisruptionBudgetSpecPtrOutput

func (PodDisruptionBudgetSpecArgs) ToPodDisruptionBudgetSpecPtrOutputWithContext

func (i PodDisruptionBudgetSpecArgs) ToPodDisruptionBudgetSpecPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPtrOutput

type PodDisruptionBudgetSpecInput

type PodDisruptionBudgetSpecInput interface {
	pulumi.Input

	ToPodDisruptionBudgetSpecOutput() PodDisruptionBudgetSpecOutput
	ToPodDisruptionBudgetSpecOutputWithContext(context.Context) PodDisruptionBudgetSpecOutput
}

PodDisruptionBudgetSpecInput is an input type that accepts PodDisruptionBudgetSpecArgs and PodDisruptionBudgetSpecOutput values. You can construct a concrete instance of `PodDisruptionBudgetSpecInput` via:

PodDisruptionBudgetSpecArgs{...}

type PodDisruptionBudgetSpecOutput

type PodDisruptionBudgetSpecOutput struct{ *pulumi.OutputState }

PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.

func (PodDisruptionBudgetSpecOutput) ElementType

func (PodDisruptionBudgetSpecOutput) MaxUnavailable

func (o PodDisruptionBudgetSpecOutput) MaxUnavailable() pulumi.AnyOutput

An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".

func (PodDisruptionBudgetSpecOutput) MinAvailable

An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying "100%".

func (PodDisruptionBudgetSpecOutput) Selector

Label query over pods whose evictions are managed by the disruption budget.

func (PodDisruptionBudgetSpecOutput) ToPodDisruptionBudgetSpecOutput

func (o PodDisruptionBudgetSpecOutput) ToPodDisruptionBudgetSpecOutput() PodDisruptionBudgetSpecOutput

func (PodDisruptionBudgetSpecOutput) ToPodDisruptionBudgetSpecOutputWithContext

func (o PodDisruptionBudgetSpecOutput) ToPodDisruptionBudgetSpecOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecOutput

func (PodDisruptionBudgetSpecOutput) ToPodDisruptionBudgetSpecPtrOutput

func (o PodDisruptionBudgetSpecOutput) ToPodDisruptionBudgetSpecPtrOutput() PodDisruptionBudgetSpecPtrOutput

func (PodDisruptionBudgetSpecOutput) ToPodDisruptionBudgetSpecPtrOutputWithContext

func (o PodDisruptionBudgetSpecOutput) ToPodDisruptionBudgetSpecPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPtrOutput

type PodDisruptionBudgetSpecPatch added in v3.20.0

type PodDisruptionBudgetSpecPatch struct {
	// An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
	MaxUnavailable interface{} `pulumi:"maxUnavailable"`
	// An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod.  So for example you can prevent all voluntary evictions by specifying "100%".
	MinAvailable interface{} `pulumi:"minAvailable"`
	// Label query over pods whose evictions are managed by the disruption budget.
	Selector *metav1.LabelSelectorPatch `pulumi:"selector"`
}

PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.

type PodDisruptionBudgetSpecPatchArgs added in v3.20.0

type PodDisruptionBudgetSpecPatchArgs struct {
	// An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
	MaxUnavailable pulumi.Input `pulumi:"maxUnavailable"`
	// An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod.  So for example you can prevent all voluntary evictions by specifying "100%".
	MinAvailable pulumi.Input `pulumi:"minAvailable"`
	// Label query over pods whose evictions are managed by the disruption budget.
	Selector metav1.LabelSelectorPatchPtrInput `pulumi:"selector"`
}

PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.

func (PodDisruptionBudgetSpecPatchArgs) ElementType added in v3.20.0

func (PodDisruptionBudgetSpecPatchArgs) ToPodDisruptionBudgetSpecPatchOutput added in v3.20.0

func (i PodDisruptionBudgetSpecPatchArgs) ToPodDisruptionBudgetSpecPatchOutput() PodDisruptionBudgetSpecPatchOutput

func (PodDisruptionBudgetSpecPatchArgs) ToPodDisruptionBudgetSpecPatchOutputWithContext added in v3.20.0

func (i PodDisruptionBudgetSpecPatchArgs) ToPodDisruptionBudgetSpecPatchOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPatchOutput

func (PodDisruptionBudgetSpecPatchArgs) ToPodDisruptionBudgetSpecPatchPtrOutput added in v3.20.0

func (i PodDisruptionBudgetSpecPatchArgs) ToPodDisruptionBudgetSpecPatchPtrOutput() PodDisruptionBudgetSpecPatchPtrOutput

func (PodDisruptionBudgetSpecPatchArgs) ToPodDisruptionBudgetSpecPatchPtrOutputWithContext added in v3.20.0

func (i PodDisruptionBudgetSpecPatchArgs) ToPodDisruptionBudgetSpecPatchPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPatchPtrOutput

type PodDisruptionBudgetSpecPatchInput added in v3.20.0

type PodDisruptionBudgetSpecPatchInput interface {
	pulumi.Input

	ToPodDisruptionBudgetSpecPatchOutput() PodDisruptionBudgetSpecPatchOutput
	ToPodDisruptionBudgetSpecPatchOutputWithContext(context.Context) PodDisruptionBudgetSpecPatchOutput
}

PodDisruptionBudgetSpecPatchInput is an input type that accepts PodDisruptionBudgetSpecPatchArgs and PodDisruptionBudgetSpecPatchOutput values. You can construct a concrete instance of `PodDisruptionBudgetSpecPatchInput` via:

PodDisruptionBudgetSpecPatchArgs{...}

type PodDisruptionBudgetSpecPatchOutput added in v3.20.0

type PodDisruptionBudgetSpecPatchOutput struct{ *pulumi.OutputState }

PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.

func (PodDisruptionBudgetSpecPatchOutput) ElementType added in v3.20.0

func (PodDisruptionBudgetSpecPatchOutput) MaxUnavailable added in v3.20.0

An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".

func (PodDisruptionBudgetSpecPatchOutput) MinAvailable added in v3.20.0

An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying "100%".

func (PodDisruptionBudgetSpecPatchOutput) Selector added in v3.20.0

Label query over pods whose evictions are managed by the disruption budget.

func (PodDisruptionBudgetSpecPatchOutput) ToPodDisruptionBudgetSpecPatchOutput added in v3.20.0

func (o PodDisruptionBudgetSpecPatchOutput) ToPodDisruptionBudgetSpecPatchOutput() PodDisruptionBudgetSpecPatchOutput

func (PodDisruptionBudgetSpecPatchOutput) ToPodDisruptionBudgetSpecPatchOutputWithContext added in v3.20.0

func (o PodDisruptionBudgetSpecPatchOutput) ToPodDisruptionBudgetSpecPatchOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPatchOutput

func (PodDisruptionBudgetSpecPatchOutput) ToPodDisruptionBudgetSpecPatchPtrOutput added in v3.20.0

func (o PodDisruptionBudgetSpecPatchOutput) ToPodDisruptionBudgetSpecPatchPtrOutput() PodDisruptionBudgetSpecPatchPtrOutput

func (PodDisruptionBudgetSpecPatchOutput) ToPodDisruptionBudgetSpecPatchPtrOutputWithContext added in v3.20.0

func (o PodDisruptionBudgetSpecPatchOutput) ToPodDisruptionBudgetSpecPatchPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPatchPtrOutput

type PodDisruptionBudgetSpecPatchPtrInput added in v3.20.0

type PodDisruptionBudgetSpecPatchPtrInput interface {
	pulumi.Input

	ToPodDisruptionBudgetSpecPatchPtrOutput() PodDisruptionBudgetSpecPatchPtrOutput
	ToPodDisruptionBudgetSpecPatchPtrOutputWithContext(context.Context) PodDisruptionBudgetSpecPatchPtrOutput
}

PodDisruptionBudgetSpecPatchPtrInput is an input type that accepts PodDisruptionBudgetSpecPatchArgs, PodDisruptionBudgetSpecPatchPtr and PodDisruptionBudgetSpecPatchPtrOutput values. You can construct a concrete instance of `PodDisruptionBudgetSpecPatchPtrInput` via:

        PodDisruptionBudgetSpecPatchArgs{...}

or:

        nil

func PodDisruptionBudgetSpecPatchPtr added in v3.20.0

type PodDisruptionBudgetSpecPatchPtrOutput added in v3.20.0

type PodDisruptionBudgetSpecPatchPtrOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetSpecPatchPtrOutput) Elem added in v3.20.0

func (PodDisruptionBudgetSpecPatchPtrOutput) ElementType added in v3.20.0

func (PodDisruptionBudgetSpecPatchPtrOutput) MaxUnavailable added in v3.20.0

An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".

func (PodDisruptionBudgetSpecPatchPtrOutput) MinAvailable added in v3.20.0

An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying "100%".

func (PodDisruptionBudgetSpecPatchPtrOutput) Selector added in v3.20.0

Label query over pods whose evictions are managed by the disruption budget.

func (PodDisruptionBudgetSpecPatchPtrOutput) ToPodDisruptionBudgetSpecPatchPtrOutput added in v3.20.0

func (o PodDisruptionBudgetSpecPatchPtrOutput) ToPodDisruptionBudgetSpecPatchPtrOutput() PodDisruptionBudgetSpecPatchPtrOutput

func (PodDisruptionBudgetSpecPatchPtrOutput) ToPodDisruptionBudgetSpecPatchPtrOutputWithContext added in v3.20.0

func (o PodDisruptionBudgetSpecPatchPtrOutput) ToPodDisruptionBudgetSpecPatchPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPatchPtrOutput

type PodDisruptionBudgetSpecPtrInput

type PodDisruptionBudgetSpecPtrInput interface {
	pulumi.Input

	ToPodDisruptionBudgetSpecPtrOutput() PodDisruptionBudgetSpecPtrOutput
	ToPodDisruptionBudgetSpecPtrOutputWithContext(context.Context) PodDisruptionBudgetSpecPtrOutput
}

PodDisruptionBudgetSpecPtrInput is an input type that accepts PodDisruptionBudgetSpecArgs, PodDisruptionBudgetSpecPtr and PodDisruptionBudgetSpecPtrOutput values. You can construct a concrete instance of `PodDisruptionBudgetSpecPtrInput` via:

        PodDisruptionBudgetSpecArgs{...}

or:

        nil

type PodDisruptionBudgetSpecPtrOutput

type PodDisruptionBudgetSpecPtrOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetSpecPtrOutput) Elem

func (PodDisruptionBudgetSpecPtrOutput) ElementType

func (PodDisruptionBudgetSpecPtrOutput) MaxUnavailable

An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".

func (PodDisruptionBudgetSpecPtrOutput) MinAvailable

An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying "100%".

func (PodDisruptionBudgetSpecPtrOutput) Selector

Label query over pods whose evictions are managed by the disruption budget.

func (PodDisruptionBudgetSpecPtrOutput) ToPodDisruptionBudgetSpecPtrOutput

func (o PodDisruptionBudgetSpecPtrOutput) ToPodDisruptionBudgetSpecPtrOutput() PodDisruptionBudgetSpecPtrOutput

func (PodDisruptionBudgetSpecPtrOutput) ToPodDisruptionBudgetSpecPtrOutputWithContext

func (o PodDisruptionBudgetSpecPtrOutput) ToPodDisruptionBudgetSpecPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPtrOutput

type PodDisruptionBudgetState

type PodDisruptionBudgetState struct {
}

func (PodDisruptionBudgetState) ElementType

func (PodDisruptionBudgetState) ElementType() reflect.Type

type PodDisruptionBudgetStatus

type PodDisruptionBudgetStatus struct {
	// current number of healthy pods
	CurrentHealthy int `pulumi:"currentHealthy"`
	// minimum desired number of healthy pods
	DesiredHealthy int `pulumi:"desiredHealthy"`
	// DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
	DisruptedPods map[string]string `pulumi:"disruptedPods"`
	// Number of pod disruptions that are currently allowed.
	DisruptionsAllowed int `pulumi:"disruptionsAllowed"`
	// total number of pods counted by this disruption budget
	ExpectedPods int `pulumi:"expectedPods"`
	// Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.
	ObservedGeneration *int `pulumi:"observedGeneration"`
}

PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.

type PodDisruptionBudgetStatusArgs

type PodDisruptionBudgetStatusArgs struct {
	// current number of healthy pods
	CurrentHealthy pulumi.IntInput `pulumi:"currentHealthy"`
	// minimum desired number of healthy pods
	DesiredHealthy pulumi.IntInput `pulumi:"desiredHealthy"`
	// DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
	DisruptedPods pulumi.StringMapInput `pulumi:"disruptedPods"`
	// Number of pod disruptions that are currently allowed.
	DisruptionsAllowed pulumi.IntInput `pulumi:"disruptionsAllowed"`
	// total number of pods counted by this disruption budget
	ExpectedPods pulumi.IntInput `pulumi:"expectedPods"`
	// Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.
	ObservedGeneration pulumi.IntPtrInput `pulumi:"observedGeneration"`
}

PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.

func (PodDisruptionBudgetStatusArgs) ElementType

func (PodDisruptionBudgetStatusArgs) ToPodDisruptionBudgetStatusOutput

func (i PodDisruptionBudgetStatusArgs) ToPodDisruptionBudgetStatusOutput() PodDisruptionBudgetStatusOutput

func (PodDisruptionBudgetStatusArgs) ToPodDisruptionBudgetStatusOutputWithContext

func (i PodDisruptionBudgetStatusArgs) ToPodDisruptionBudgetStatusOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusOutput

func (PodDisruptionBudgetStatusArgs) ToPodDisruptionBudgetStatusPtrOutput

func (i PodDisruptionBudgetStatusArgs) ToPodDisruptionBudgetStatusPtrOutput() PodDisruptionBudgetStatusPtrOutput

func (PodDisruptionBudgetStatusArgs) ToPodDisruptionBudgetStatusPtrOutputWithContext

func (i PodDisruptionBudgetStatusArgs) ToPodDisruptionBudgetStatusPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPtrOutput

type PodDisruptionBudgetStatusInput

type PodDisruptionBudgetStatusInput interface {
	pulumi.Input

	ToPodDisruptionBudgetStatusOutput() PodDisruptionBudgetStatusOutput
	ToPodDisruptionBudgetStatusOutputWithContext(context.Context) PodDisruptionBudgetStatusOutput
}

PodDisruptionBudgetStatusInput is an input type that accepts PodDisruptionBudgetStatusArgs and PodDisruptionBudgetStatusOutput values. You can construct a concrete instance of `PodDisruptionBudgetStatusInput` via:

PodDisruptionBudgetStatusArgs{...}

type PodDisruptionBudgetStatusOutput

type PodDisruptionBudgetStatusOutput struct{ *pulumi.OutputState }

PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.

func (PodDisruptionBudgetStatusOutput) CurrentHealthy

current number of healthy pods

func (PodDisruptionBudgetStatusOutput) DesiredHealthy

minimum desired number of healthy pods

func (PodDisruptionBudgetStatusOutput) DisruptedPods

DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.

func (PodDisruptionBudgetStatusOutput) DisruptionsAllowed

func (o PodDisruptionBudgetStatusOutput) DisruptionsAllowed() pulumi.IntOutput

Number of pod disruptions that are currently allowed.

func (PodDisruptionBudgetStatusOutput) ElementType

func (PodDisruptionBudgetStatusOutput) ExpectedPods

total number of pods counted by this disruption budget

func (PodDisruptionBudgetStatusOutput) ObservedGeneration

func (o PodDisruptionBudgetStatusOutput) ObservedGeneration() pulumi.IntPtrOutput

Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.

func (PodDisruptionBudgetStatusOutput) ToPodDisruptionBudgetStatusOutput

func (o PodDisruptionBudgetStatusOutput) ToPodDisruptionBudgetStatusOutput() PodDisruptionBudgetStatusOutput

func (PodDisruptionBudgetStatusOutput) ToPodDisruptionBudgetStatusOutputWithContext

func (o PodDisruptionBudgetStatusOutput) ToPodDisruptionBudgetStatusOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusOutput

func (PodDisruptionBudgetStatusOutput) ToPodDisruptionBudgetStatusPtrOutput

func (o PodDisruptionBudgetStatusOutput) ToPodDisruptionBudgetStatusPtrOutput() PodDisruptionBudgetStatusPtrOutput

func (PodDisruptionBudgetStatusOutput) ToPodDisruptionBudgetStatusPtrOutputWithContext

func (o PodDisruptionBudgetStatusOutput) ToPodDisruptionBudgetStatusPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPtrOutput

type PodDisruptionBudgetStatusPatch added in v3.20.0

type PodDisruptionBudgetStatusPatch struct {
	// current number of healthy pods
	CurrentHealthy *int `pulumi:"currentHealthy"`
	// minimum desired number of healthy pods
	DesiredHealthy *int `pulumi:"desiredHealthy"`
	// DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
	DisruptedPods map[string]string `pulumi:"disruptedPods"`
	// Number of pod disruptions that are currently allowed.
	DisruptionsAllowed *int `pulumi:"disruptionsAllowed"`
	// total number of pods counted by this disruption budget
	ExpectedPods *int `pulumi:"expectedPods"`
	// Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.
	ObservedGeneration *int `pulumi:"observedGeneration"`
}

PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.

type PodDisruptionBudgetStatusPatchArgs added in v3.20.0

type PodDisruptionBudgetStatusPatchArgs struct {
	// current number of healthy pods
	CurrentHealthy pulumi.IntPtrInput `pulumi:"currentHealthy"`
	// minimum desired number of healthy pods
	DesiredHealthy pulumi.IntPtrInput `pulumi:"desiredHealthy"`
	// DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
	DisruptedPods pulumi.StringMapInput `pulumi:"disruptedPods"`
	// Number of pod disruptions that are currently allowed.
	DisruptionsAllowed pulumi.IntPtrInput `pulumi:"disruptionsAllowed"`
	// total number of pods counted by this disruption budget
	ExpectedPods pulumi.IntPtrInput `pulumi:"expectedPods"`
	// Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.
	ObservedGeneration pulumi.IntPtrInput `pulumi:"observedGeneration"`
}

PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.

func (PodDisruptionBudgetStatusPatchArgs) ElementType added in v3.20.0

func (PodDisruptionBudgetStatusPatchArgs) ToPodDisruptionBudgetStatusPatchOutput added in v3.20.0

func (i PodDisruptionBudgetStatusPatchArgs) ToPodDisruptionBudgetStatusPatchOutput() PodDisruptionBudgetStatusPatchOutput

func (PodDisruptionBudgetStatusPatchArgs) ToPodDisruptionBudgetStatusPatchOutputWithContext added in v3.20.0

func (i PodDisruptionBudgetStatusPatchArgs) ToPodDisruptionBudgetStatusPatchOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPatchOutput

func (PodDisruptionBudgetStatusPatchArgs) ToPodDisruptionBudgetStatusPatchPtrOutput added in v3.20.0

func (i PodDisruptionBudgetStatusPatchArgs) ToPodDisruptionBudgetStatusPatchPtrOutput() PodDisruptionBudgetStatusPatchPtrOutput

func (PodDisruptionBudgetStatusPatchArgs) ToPodDisruptionBudgetStatusPatchPtrOutputWithContext added in v3.20.0

func (i PodDisruptionBudgetStatusPatchArgs) ToPodDisruptionBudgetStatusPatchPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPatchPtrOutput

type PodDisruptionBudgetStatusPatchInput added in v3.20.0

type PodDisruptionBudgetStatusPatchInput interface {
	pulumi.Input

	ToPodDisruptionBudgetStatusPatchOutput() PodDisruptionBudgetStatusPatchOutput
	ToPodDisruptionBudgetStatusPatchOutputWithContext(context.Context) PodDisruptionBudgetStatusPatchOutput
}

PodDisruptionBudgetStatusPatchInput is an input type that accepts PodDisruptionBudgetStatusPatchArgs and PodDisruptionBudgetStatusPatchOutput values. You can construct a concrete instance of `PodDisruptionBudgetStatusPatchInput` via:

PodDisruptionBudgetStatusPatchArgs{...}

type PodDisruptionBudgetStatusPatchOutput added in v3.20.0

type PodDisruptionBudgetStatusPatchOutput struct{ *pulumi.OutputState }

PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.

func (PodDisruptionBudgetStatusPatchOutput) CurrentHealthy added in v3.20.0

current number of healthy pods

func (PodDisruptionBudgetStatusPatchOutput) DesiredHealthy added in v3.20.0

minimum desired number of healthy pods

func (PodDisruptionBudgetStatusPatchOutput) DisruptedPods added in v3.20.0

DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.

func (PodDisruptionBudgetStatusPatchOutput) DisruptionsAllowed added in v3.20.0

Number of pod disruptions that are currently allowed.

func (PodDisruptionBudgetStatusPatchOutput) ElementType added in v3.20.0

func (PodDisruptionBudgetStatusPatchOutput) ExpectedPods added in v3.20.0

total number of pods counted by this disruption budget

func (PodDisruptionBudgetStatusPatchOutput) ObservedGeneration added in v3.20.0

Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.

func (PodDisruptionBudgetStatusPatchOutput) ToPodDisruptionBudgetStatusPatchOutput added in v3.20.0

func (o PodDisruptionBudgetStatusPatchOutput) ToPodDisruptionBudgetStatusPatchOutput() PodDisruptionBudgetStatusPatchOutput

func (PodDisruptionBudgetStatusPatchOutput) ToPodDisruptionBudgetStatusPatchOutputWithContext added in v3.20.0

func (o PodDisruptionBudgetStatusPatchOutput) ToPodDisruptionBudgetStatusPatchOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPatchOutput

func (PodDisruptionBudgetStatusPatchOutput) ToPodDisruptionBudgetStatusPatchPtrOutput added in v3.20.0

func (o PodDisruptionBudgetStatusPatchOutput) ToPodDisruptionBudgetStatusPatchPtrOutput() PodDisruptionBudgetStatusPatchPtrOutput

func (PodDisruptionBudgetStatusPatchOutput) ToPodDisruptionBudgetStatusPatchPtrOutputWithContext added in v3.20.0

func (o PodDisruptionBudgetStatusPatchOutput) ToPodDisruptionBudgetStatusPatchPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPatchPtrOutput

type PodDisruptionBudgetStatusPatchPtrInput added in v3.20.0

type PodDisruptionBudgetStatusPatchPtrInput interface {
	pulumi.Input

	ToPodDisruptionBudgetStatusPatchPtrOutput() PodDisruptionBudgetStatusPatchPtrOutput
	ToPodDisruptionBudgetStatusPatchPtrOutputWithContext(context.Context) PodDisruptionBudgetStatusPatchPtrOutput
}

PodDisruptionBudgetStatusPatchPtrInput is an input type that accepts PodDisruptionBudgetStatusPatchArgs, PodDisruptionBudgetStatusPatchPtr and PodDisruptionBudgetStatusPatchPtrOutput values. You can construct a concrete instance of `PodDisruptionBudgetStatusPatchPtrInput` via:

        PodDisruptionBudgetStatusPatchArgs{...}

or:

        nil

type PodDisruptionBudgetStatusPatchPtrOutput added in v3.20.0

type PodDisruptionBudgetStatusPatchPtrOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetStatusPatchPtrOutput) CurrentHealthy added in v3.20.0

current number of healthy pods

func (PodDisruptionBudgetStatusPatchPtrOutput) DesiredHealthy added in v3.20.0

minimum desired number of healthy pods

func (PodDisruptionBudgetStatusPatchPtrOutput) DisruptedPods added in v3.20.0

DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.

func (PodDisruptionBudgetStatusPatchPtrOutput) DisruptionsAllowed added in v3.20.0

Number of pod disruptions that are currently allowed.

func (PodDisruptionBudgetStatusPatchPtrOutput) Elem added in v3.20.0

func (PodDisruptionBudgetStatusPatchPtrOutput) ElementType added in v3.20.0

func (PodDisruptionBudgetStatusPatchPtrOutput) ExpectedPods added in v3.20.0

total number of pods counted by this disruption budget

func (PodDisruptionBudgetStatusPatchPtrOutput) ObservedGeneration added in v3.20.0

Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.

func (PodDisruptionBudgetStatusPatchPtrOutput) ToPodDisruptionBudgetStatusPatchPtrOutput added in v3.20.0

func (o PodDisruptionBudgetStatusPatchPtrOutput) ToPodDisruptionBudgetStatusPatchPtrOutput() PodDisruptionBudgetStatusPatchPtrOutput

func (PodDisruptionBudgetStatusPatchPtrOutput) ToPodDisruptionBudgetStatusPatchPtrOutputWithContext added in v3.20.0

func (o PodDisruptionBudgetStatusPatchPtrOutput) ToPodDisruptionBudgetStatusPatchPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPatchPtrOutput

type PodDisruptionBudgetStatusPtrInput

type PodDisruptionBudgetStatusPtrInput interface {
	pulumi.Input

	ToPodDisruptionBudgetStatusPtrOutput() PodDisruptionBudgetStatusPtrOutput
	ToPodDisruptionBudgetStatusPtrOutputWithContext(context.Context) PodDisruptionBudgetStatusPtrOutput
}

PodDisruptionBudgetStatusPtrInput is an input type that accepts PodDisruptionBudgetStatusArgs, PodDisruptionBudgetStatusPtr and PodDisruptionBudgetStatusPtrOutput values. You can construct a concrete instance of `PodDisruptionBudgetStatusPtrInput` via:

        PodDisruptionBudgetStatusArgs{...}

or:

        nil

type PodDisruptionBudgetStatusPtrOutput

type PodDisruptionBudgetStatusPtrOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetStatusPtrOutput) CurrentHealthy

current number of healthy pods

func (PodDisruptionBudgetStatusPtrOutput) DesiredHealthy

minimum desired number of healthy pods

func (PodDisruptionBudgetStatusPtrOutput) DisruptedPods

DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.

func (PodDisruptionBudgetStatusPtrOutput) DisruptionsAllowed

Number of pod disruptions that are currently allowed.

func (PodDisruptionBudgetStatusPtrOutput) Elem

func (PodDisruptionBudgetStatusPtrOutput) ElementType

func (PodDisruptionBudgetStatusPtrOutput) ExpectedPods

total number of pods counted by this disruption budget

func (PodDisruptionBudgetStatusPtrOutput) ObservedGeneration

Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.

func (PodDisruptionBudgetStatusPtrOutput) ToPodDisruptionBudgetStatusPtrOutput

func (o PodDisruptionBudgetStatusPtrOutput) ToPodDisruptionBudgetStatusPtrOutput() PodDisruptionBudgetStatusPtrOutput

func (PodDisruptionBudgetStatusPtrOutput) ToPodDisruptionBudgetStatusPtrOutputWithContext

func (o PodDisruptionBudgetStatusPtrOutput) ToPodDisruptionBudgetStatusPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPtrOutput

type PodDisruptionBudgetType

type PodDisruptionBudgetType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     *string            `pulumi:"kind"`
	Metadata *metav1.ObjectMeta `pulumi:"metadata"`
	// Specification of the desired behavior of the PodDisruptionBudget.
	Spec *PodDisruptionBudgetSpec `pulumi:"spec"`
	// Most recently observed status of the PodDisruptionBudget.
	Status *PodDisruptionBudgetStatus `pulumi:"status"`
}

PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods

type PodDisruptionBudgetTypeArgs

type PodDisruptionBudgetTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput     `pulumi:"kind"`
	Metadata metav1.ObjectMetaPtrInput `pulumi:"metadata"`
	// Specification of the desired behavior of the PodDisruptionBudget.
	Spec PodDisruptionBudgetSpecPtrInput `pulumi:"spec"`
	// Most recently observed status of the PodDisruptionBudget.
	Status PodDisruptionBudgetStatusPtrInput `pulumi:"status"`
}

PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods

func (PodDisruptionBudgetTypeArgs) ElementType

func (PodDisruptionBudgetTypeArgs) ToPodDisruptionBudgetTypeOutput

func (i PodDisruptionBudgetTypeArgs) ToPodDisruptionBudgetTypeOutput() PodDisruptionBudgetTypeOutput

func (PodDisruptionBudgetTypeArgs) ToPodDisruptionBudgetTypeOutputWithContext

func (i PodDisruptionBudgetTypeArgs) ToPodDisruptionBudgetTypeOutputWithContext(ctx context.Context) PodDisruptionBudgetTypeOutput

type PodDisruptionBudgetTypeArray

type PodDisruptionBudgetTypeArray []PodDisruptionBudgetTypeInput

func (PodDisruptionBudgetTypeArray) ElementType

func (PodDisruptionBudgetTypeArray) ToPodDisruptionBudgetTypeArrayOutput

func (i PodDisruptionBudgetTypeArray) ToPodDisruptionBudgetTypeArrayOutput() PodDisruptionBudgetTypeArrayOutput

func (PodDisruptionBudgetTypeArray) ToPodDisruptionBudgetTypeArrayOutputWithContext

func (i PodDisruptionBudgetTypeArray) ToPodDisruptionBudgetTypeArrayOutputWithContext(ctx context.Context) PodDisruptionBudgetTypeArrayOutput

type PodDisruptionBudgetTypeArrayInput

type PodDisruptionBudgetTypeArrayInput interface {
	pulumi.Input

	ToPodDisruptionBudgetTypeArrayOutput() PodDisruptionBudgetTypeArrayOutput
	ToPodDisruptionBudgetTypeArrayOutputWithContext(context.Context) PodDisruptionBudgetTypeArrayOutput
}

PodDisruptionBudgetTypeArrayInput is an input type that accepts PodDisruptionBudgetTypeArray and PodDisruptionBudgetTypeArrayOutput values. You can construct a concrete instance of `PodDisruptionBudgetTypeArrayInput` via:

PodDisruptionBudgetTypeArray{ PodDisruptionBudgetTypeArgs{...} }

type PodDisruptionBudgetTypeArrayOutput

type PodDisruptionBudgetTypeArrayOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetTypeArrayOutput) ElementType

func (PodDisruptionBudgetTypeArrayOutput) Index

func (PodDisruptionBudgetTypeArrayOutput) ToPodDisruptionBudgetTypeArrayOutput

func (o PodDisruptionBudgetTypeArrayOutput) ToPodDisruptionBudgetTypeArrayOutput() PodDisruptionBudgetTypeArrayOutput

func (PodDisruptionBudgetTypeArrayOutput) ToPodDisruptionBudgetTypeArrayOutputWithContext

func (o PodDisruptionBudgetTypeArrayOutput) ToPodDisruptionBudgetTypeArrayOutputWithContext(ctx context.Context) PodDisruptionBudgetTypeArrayOutput

type PodDisruptionBudgetTypeInput

type PodDisruptionBudgetTypeInput interface {
	pulumi.Input

	ToPodDisruptionBudgetTypeOutput() PodDisruptionBudgetTypeOutput
	ToPodDisruptionBudgetTypeOutputWithContext(context.Context) PodDisruptionBudgetTypeOutput
}

PodDisruptionBudgetTypeInput is an input type that accepts PodDisruptionBudgetTypeArgs and PodDisruptionBudgetTypeOutput values. You can construct a concrete instance of `PodDisruptionBudgetTypeInput` via:

PodDisruptionBudgetTypeArgs{...}

type PodDisruptionBudgetTypeOutput

type PodDisruptionBudgetTypeOutput struct{ *pulumi.OutputState }

PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods

func (PodDisruptionBudgetTypeOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodDisruptionBudgetTypeOutput) ElementType

func (PodDisruptionBudgetTypeOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodDisruptionBudgetTypeOutput) Metadata

func (PodDisruptionBudgetTypeOutput) Spec

Specification of the desired behavior of the PodDisruptionBudget.

func (PodDisruptionBudgetTypeOutput) Status

Most recently observed status of the PodDisruptionBudget.

func (PodDisruptionBudgetTypeOutput) ToPodDisruptionBudgetTypeOutput

func (o PodDisruptionBudgetTypeOutput) ToPodDisruptionBudgetTypeOutput() PodDisruptionBudgetTypeOutput

func (PodDisruptionBudgetTypeOutput) ToPodDisruptionBudgetTypeOutputWithContext

func (o PodDisruptionBudgetTypeOutput) ToPodDisruptionBudgetTypeOutputWithContext(ctx context.Context) PodDisruptionBudgetTypeOutput

type PodSecurityPolicy

type PodSecurityPolicy struct {
	pulumi.CustomResourceState

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrOutput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrOutput `pulumi:"kind"`
	// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPtrOutput `pulumi:"metadata"`
	// spec defines the policy enforced.
	Spec PodSecurityPolicySpecPtrOutput `pulumi:"spec"`
}

PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.

func GetPodSecurityPolicy

func GetPodSecurityPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PodSecurityPolicyState, opts ...pulumi.ResourceOption) (*PodSecurityPolicy, error)

GetPodSecurityPolicy gets an existing PodSecurityPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPodSecurityPolicy

func NewPodSecurityPolicy(ctx *pulumi.Context,
	name string, args *PodSecurityPolicyArgs, opts ...pulumi.ResourceOption) (*PodSecurityPolicy, error)

NewPodSecurityPolicy registers a new resource with the given unique name, arguments, and options.

func (*PodSecurityPolicy) ElementType

func (*PodSecurityPolicy) ElementType() reflect.Type

func (*PodSecurityPolicy) ToPodSecurityPolicyOutput

func (i *PodSecurityPolicy) ToPodSecurityPolicyOutput() PodSecurityPolicyOutput

func (*PodSecurityPolicy) ToPodSecurityPolicyOutputWithContext

func (i *PodSecurityPolicy) ToPodSecurityPolicyOutputWithContext(ctx context.Context) PodSecurityPolicyOutput

type PodSecurityPolicyArgs

type PodSecurityPolicyArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput
	// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPtrInput
	// spec defines the policy enforced.
	Spec PodSecurityPolicySpecPtrInput
}

The set of arguments for constructing a PodSecurityPolicy resource.

func (PodSecurityPolicyArgs) ElementType

func (PodSecurityPolicyArgs) ElementType() reflect.Type

type PodSecurityPolicyArray

type PodSecurityPolicyArray []PodSecurityPolicyInput

func (PodSecurityPolicyArray) ElementType

func (PodSecurityPolicyArray) ElementType() reflect.Type

func (PodSecurityPolicyArray) ToPodSecurityPolicyArrayOutput

func (i PodSecurityPolicyArray) ToPodSecurityPolicyArrayOutput() PodSecurityPolicyArrayOutput

func (PodSecurityPolicyArray) ToPodSecurityPolicyArrayOutputWithContext

func (i PodSecurityPolicyArray) ToPodSecurityPolicyArrayOutputWithContext(ctx context.Context) PodSecurityPolicyArrayOutput

type PodSecurityPolicyArrayInput

type PodSecurityPolicyArrayInput interface {
	pulumi.Input

	ToPodSecurityPolicyArrayOutput() PodSecurityPolicyArrayOutput
	ToPodSecurityPolicyArrayOutputWithContext(context.Context) PodSecurityPolicyArrayOutput
}

PodSecurityPolicyArrayInput is an input type that accepts PodSecurityPolicyArray and PodSecurityPolicyArrayOutput values. You can construct a concrete instance of `PodSecurityPolicyArrayInput` via:

PodSecurityPolicyArray{ PodSecurityPolicyArgs{...} }

type PodSecurityPolicyArrayOutput

type PodSecurityPolicyArrayOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyArrayOutput) ElementType

func (PodSecurityPolicyArrayOutput) Index

func (PodSecurityPolicyArrayOutput) ToPodSecurityPolicyArrayOutput

func (o PodSecurityPolicyArrayOutput) ToPodSecurityPolicyArrayOutput() PodSecurityPolicyArrayOutput

func (PodSecurityPolicyArrayOutput) ToPodSecurityPolicyArrayOutputWithContext

func (o PodSecurityPolicyArrayOutput) ToPodSecurityPolicyArrayOutputWithContext(ctx context.Context) PodSecurityPolicyArrayOutput

type PodSecurityPolicyInput

type PodSecurityPolicyInput interface {
	pulumi.Input

	ToPodSecurityPolicyOutput() PodSecurityPolicyOutput
	ToPodSecurityPolicyOutputWithContext(ctx context.Context) PodSecurityPolicyOutput
}

type PodSecurityPolicyList

type PodSecurityPolicyList struct {
	pulumi.CustomResourceState

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrOutput `pulumi:"apiVersion"`
	// items is a list of schema objects.
	Items PodSecurityPolicyTypeArrayOutput `pulumi:"items"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrOutput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ListMetaPtrOutput `pulumi:"metadata"`
}

PodSecurityPolicyList is a list of PodSecurityPolicy objects.

func GetPodSecurityPolicyList

func GetPodSecurityPolicyList(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PodSecurityPolicyListState, opts ...pulumi.ResourceOption) (*PodSecurityPolicyList, error)

GetPodSecurityPolicyList gets an existing PodSecurityPolicyList resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPodSecurityPolicyList

func NewPodSecurityPolicyList(ctx *pulumi.Context,
	name string, args *PodSecurityPolicyListArgs, opts ...pulumi.ResourceOption) (*PodSecurityPolicyList, error)

NewPodSecurityPolicyList registers a new resource with the given unique name, arguments, and options.

func (*PodSecurityPolicyList) ElementType

func (*PodSecurityPolicyList) ElementType() reflect.Type

func (*PodSecurityPolicyList) ToPodSecurityPolicyListOutput

func (i *PodSecurityPolicyList) ToPodSecurityPolicyListOutput() PodSecurityPolicyListOutput

func (*PodSecurityPolicyList) ToPodSecurityPolicyListOutputWithContext

func (i *PodSecurityPolicyList) ToPodSecurityPolicyListOutputWithContext(ctx context.Context) PodSecurityPolicyListOutput

type PodSecurityPolicyListArgs

type PodSecurityPolicyListArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput
	// items is a list of schema objects.
	Items PodSecurityPolicyTypeArrayInput
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ListMetaPtrInput
}

The set of arguments for constructing a PodSecurityPolicyList resource.

func (PodSecurityPolicyListArgs) ElementType

func (PodSecurityPolicyListArgs) ElementType() reflect.Type

type PodSecurityPolicyListArray

type PodSecurityPolicyListArray []PodSecurityPolicyListInput

func (PodSecurityPolicyListArray) ElementType

func (PodSecurityPolicyListArray) ElementType() reflect.Type

func (PodSecurityPolicyListArray) ToPodSecurityPolicyListArrayOutput

func (i PodSecurityPolicyListArray) ToPodSecurityPolicyListArrayOutput() PodSecurityPolicyListArrayOutput

func (PodSecurityPolicyListArray) ToPodSecurityPolicyListArrayOutputWithContext

func (i PodSecurityPolicyListArray) ToPodSecurityPolicyListArrayOutputWithContext(ctx context.Context) PodSecurityPolicyListArrayOutput

type PodSecurityPolicyListArrayInput

type PodSecurityPolicyListArrayInput interface {
	pulumi.Input

	ToPodSecurityPolicyListArrayOutput() PodSecurityPolicyListArrayOutput
	ToPodSecurityPolicyListArrayOutputWithContext(context.Context) PodSecurityPolicyListArrayOutput
}

PodSecurityPolicyListArrayInput is an input type that accepts PodSecurityPolicyListArray and PodSecurityPolicyListArrayOutput values. You can construct a concrete instance of `PodSecurityPolicyListArrayInput` via:

PodSecurityPolicyListArray{ PodSecurityPolicyListArgs{...} }

type PodSecurityPolicyListArrayOutput

type PodSecurityPolicyListArrayOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyListArrayOutput) ElementType

func (PodSecurityPolicyListArrayOutput) Index

func (PodSecurityPolicyListArrayOutput) ToPodSecurityPolicyListArrayOutput

func (o PodSecurityPolicyListArrayOutput) ToPodSecurityPolicyListArrayOutput() PodSecurityPolicyListArrayOutput

func (PodSecurityPolicyListArrayOutput) ToPodSecurityPolicyListArrayOutputWithContext

func (o PodSecurityPolicyListArrayOutput) ToPodSecurityPolicyListArrayOutputWithContext(ctx context.Context) PodSecurityPolicyListArrayOutput

type PodSecurityPolicyListInput

type PodSecurityPolicyListInput interface {
	pulumi.Input

	ToPodSecurityPolicyListOutput() PodSecurityPolicyListOutput
	ToPodSecurityPolicyListOutputWithContext(ctx context.Context) PodSecurityPolicyListOutput
}

type PodSecurityPolicyListMap

type PodSecurityPolicyListMap map[string]PodSecurityPolicyListInput

func (PodSecurityPolicyListMap) ElementType

func (PodSecurityPolicyListMap) ElementType() reflect.Type

func (PodSecurityPolicyListMap) ToPodSecurityPolicyListMapOutput

func (i PodSecurityPolicyListMap) ToPodSecurityPolicyListMapOutput() PodSecurityPolicyListMapOutput

func (PodSecurityPolicyListMap) ToPodSecurityPolicyListMapOutputWithContext

func (i PodSecurityPolicyListMap) ToPodSecurityPolicyListMapOutputWithContext(ctx context.Context) PodSecurityPolicyListMapOutput

type PodSecurityPolicyListMapInput

type PodSecurityPolicyListMapInput interface {
	pulumi.Input

	ToPodSecurityPolicyListMapOutput() PodSecurityPolicyListMapOutput
	ToPodSecurityPolicyListMapOutputWithContext(context.Context) PodSecurityPolicyListMapOutput
}

PodSecurityPolicyListMapInput is an input type that accepts PodSecurityPolicyListMap and PodSecurityPolicyListMapOutput values. You can construct a concrete instance of `PodSecurityPolicyListMapInput` via:

PodSecurityPolicyListMap{ "key": PodSecurityPolicyListArgs{...} }

type PodSecurityPolicyListMapOutput

type PodSecurityPolicyListMapOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyListMapOutput) ElementType

func (PodSecurityPolicyListMapOutput) MapIndex

func (PodSecurityPolicyListMapOutput) ToPodSecurityPolicyListMapOutput

func (o PodSecurityPolicyListMapOutput) ToPodSecurityPolicyListMapOutput() PodSecurityPolicyListMapOutput

func (PodSecurityPolicyListMapOutput) ToPodSecurityPolicyListMapOutputWithContext

func (o PodSecurityPolicyListMapOutput) ToPodSecurityPolicyListMapOutputWithContext(ctx context.Context) PodSecurityPolicyListMapOutput

type PodSecurityPolicyListOutput

type PodSecurityPolicyListOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyListOutput) ApiVersion added in v3.19.1

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodSecurityPolicyListOutput) ElementType

func (PodSecurityPolicyListOutput) Items added in v3.19.1

items is a list of schema objects.

func (PodSecurityPolicyListOutput) Kind added in v3.19.1

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodSecurityPolicyListOutput) Metadata added in v3.19.1

Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

func (PodSecurityPolicyListOutput) ToPodSecurityPolicyListOutput

func (o PodSecurityPolicyListOutput) ToPodSecurityPolicyListOutput() PodSecurityPolicyListOutput

func (PodSecurityPolicyListOutput) ToPodSecurityPolicyListOutputWithContext

func (o PodSecurityPolicyListOutput) ToPodSecurityPolicyListOutputWithContext(ctx context.Context) PodSecurityPolicyListOutput

type PodSecurityPolicyListState

type PodSecurityPolicyListState struct {
}

func (PodSecurityPolicyListState) ElementType

func (PodSecurityPolicyListState) ElementType() reflect.Type

type PodSecurityPolicyListType

type PodSecurityPolicyListType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// items is a list of schema objects.
	Items []PodSecurityPolicyType `pulumi:"items"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata *metav1.ListMeta `pulumi:"metadata"`
}

PodSecurityPolicyList is a list of PodSecurityPolicy objects.

type PodSecurityPolicyListTypeArgs

type PodSecurityPolicyListTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// items is a list of schema objects.
	Items PodSecurityPolicyTypeArrayInput `pulumi:"items"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ListMetaPtrInput `pulumi:"metadata"`
}

PodSecurityPolicyList is a list of PodSecurityPolicy objects.

func (PodSecurityPolicyListTypeArgs) ElementType

func (PodSecurityPolicyListTypeArgs) ToPodSecurityPolicyListTypeOutput

func (i PodSecurityPolicyListTypeArgs) ToPodSecurityPolicyListTypeOutput() PodSecurityPolicyListTypeOutput

func (PodSecurityPolicyListTypeArgs) ToPodSecurityPolicyListTypeOutputWithContext

func (i PodSecurityPolicyListTypeArgs) ToPodSecurityPolicyListTypeOutputWithContext(ctx context.Context) PodSecurityPolicyListTypeOutput

type PodSecurityPolicyListTypeInput

type PodSecurityPolicyListTypeInput interface {
	pulumi.Input

	ToPodSecurityPolicyListTypeOutput() PodSecurityPolicyListTypeOutput
	ToPodSecurityPolicyListTypeOutputWithContext(context.Context) PodSecurityPolicyListTypeOutput
}

PodSecurityPolicyListTypeInput is an input type that accepts PodSecurityPolicyListTypeArgs and PodSecurityPolicyListTypeOutput values. You can construct a concrete instance of `PodSecurityPolicyListTypeInput` via:

PodSecurityPolicyListTypeArgs{...}

type PodSecurityPolicyListTypeOutput

type PodSecurityPolicyListTypeOutput struct{ *pulumi.OutputState }

PodSecurityPolicyList is a list of PodSecurityPolicy objects.

func (PodSecurityPolicyListTypeOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodSecurityPolicyListTypeOutput) ElementType

func (PodSecurityPolicyListTypeOutput) Items

items is a list of schema objects.

func (PodSecurityPolicyListTypeOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodSecurityPolicyListTypeOutput) ToPodSecurityPolicyListTypeOutput

func (o PodSecurityPolicyListTypeOutput) ToPodSecurityPolicyListTypeOutput() PodSecurityPolicyListTypeOutput

func (PodSecurityPolicyListTypeOutput) ToPodSecurityPolicyListTypeOutputWithContext

func (o PodSecurityPolicyListTypeOutput) ToPodSecurityPolicyListTypeOutputWithContext(ctx context.Context) PodSecurityPolicyListTypeOutput

type PodSecurityPolicyMap

type PodSecurityPolicyMap map[string]PodSecurityPolicyInput

func (PodSecurityPolicyMap) ElementType

func (PodSecurityPolicyMap) ElementType() reflect.Type

func (PodSecurityPolicyMap) ToPodSecurityPolicyMapOutput

func (i PodSecurityPolicyMap) ToPodSecurityPolicyMapOutput() PodSecurityPolicyMapOutput

func (PodSecurityPolicyMap) ToPodSecurityPolicyMapOutputWithContext

func (i PodSecurityPolicyMap) ToPodSecurityPolicyMapOutputWithContext(ctx context.Context) PodSecurityPolicyMapOutput

type PodSecurityPolicyMapInput

type PodSecurityPolicyMapInput interface {
	pulumi.Input

	ToPodSecurityPolicyMapOutput() PodSecurityPolicyMapOutput
	ToPodSecurityPolicyMapOutputWithContext(context.Context) PodSecurityPolicyMapOutput
}

PodSecurityPolicyMapInput is an input type that accepts PodSecurityPolicyMap and PodSecurityPolicyMapOutput values. You can construct a concrete instance of `PodSecurityPolicyMapInput` via:

PodSecurityPolicyMap{ "key": PodSecurityPolicyArgs{...} }

type PodSecurityPolicyMapOutput

type PodSecurityPolicyMapOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyMapOutput) ElementType

func (PodSecurityPolicyMapOutput) ElementType() reflect.Type

func (PodSecurityPolicyMapOutput) MapIndex

func (PodSecurityPolicyMapOutput) ToPodSecurityPolicyMapOutput

func (o PodSecurityPolicyMapOutput) ToPodSecurityPolicyMapOutput() PodSecurityPolicyMapOutput

func (PodSecurityPolicyMapOutput) ToPodSecurityPolicyMapOutputWithContext

func (o PodSecurityPolicyMapOutput) ToPodSecurityPolicyMapOutputWithContext(ctx context.Context) PodSecurityPolicyMapOutput

type PodSecurityPolicyOutput

type PodSecurityPolicyOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyOutput) ApiVersion added in v3.19.1

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodSecurityPolicyOutput) ElementType

func (PodSecurityPolicyOutput) ElementType() reflect.Type

func (PodSecurityPolicyOutput) Kind added in v3.19.1

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodSecurityPolicyOutput) Metadata added in v3.19.1

Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

func (PodSecurityPolicyOutput) Spec added in v3.19.1

spec defines the policy enforced.

func (PodSecurityPolicyOutput) ToPodSecurityPolicyOutput

func (o PodSecurityPolicyOutput) ToPodSecurityPolicyOutput() PodSecurityPolicyOutput

func (PodSecurityPolicyOutput) ToPodSecurityPolicyOutputWithContext

func (o PodSecurityPolicyOutput) ToPodSecurityPolicyOutputWithContext(ctx context.Context) PodSecurityPolicyOutput

type PodSecurityPolicyPatch added in v3.20.0

type PodSecurityPolicyPatch struct {
	pulumi.CustomResourceState

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrOutput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrOutput `pulumi:"kind"`
	// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPatchPtrOutput `pulumi:"metadata"`
	// spec defines the policy enforced.
	Spec PodSecurityPolicySpecPatchPtrOutput `pulumi:"spec"`
}

Patch resources are used to modify existing Kubernetes resources by using Server-Side Apply updates. The name of the resource must be specified, but all other properties are optional. More than one patch may be applied to the same resource, and a random FieldManager name will be used for each Patch resource. Conflicts will result in an error by default, but can be forced using the "pulumi.com/patchForce" annotation. See the [Server-Side Apply Docs](https://www.pulumi.com/registry/packages/kubernetes/how-to-guides/managing-resources-with-server-side-apply/) for additional information about using Server-Side Apply to manage Kubernetes resources with Pulumi. PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.

func GetPodSecurityPolicyPatch added in v3.20.0

func GetPodSecurityPolicyPatch(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PodSecurityPolicyPatchState, opts ...pulumi.ResourceOption) (*PodSecurityPolicyPatch, error)

GetPodSecurityPolicyPatch gets an existing PodSecurityPolicyPatch resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPodSecurityPolicyPatch added in v3.20.0

func NewPodSecurityPolicyPatch(ctx *pulumi.Context,
	name string, args *PodSecurityPolicyPatchArgs, opts ...pulumi.ResourceOption) (*PodSecurityPolicyPatch, error)

NewPodSecurityPolicyPatch registers a new resource with the given unique name, arguments, and options.

func (*PodSecurityPolicyPatch) ElementType added in v3.20.0

func (*PodSecurityPolicyPatch) ElementType() reflect.Type

func (*PodSecurityPolicyPatch) ToPodSecurityPolicyPatchOutput added in v3.20.0

func (i *PodSecurityPolicyPatch) ToPodSecurityPolicyPatchOutput() PodSecurityPolicyPatchOutput

func (*PodSecurityPolicyPatch) ToPodSecurityPolicyPatchOutputWithContext added in v3.20.0

func (i *PodSecurityPolicyPatch) ToPodSecurityPolicyPatchOutputWithContext(ctx context.Context) PodSecurityPolicyPatchOutput

type PodSecurityPolicyPatchArgs added in v3.20.0

type PodSecurityPolicyPatchArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput
	// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPatchPtrInput
	// spec defines the policy enforced.
	Spec PodSecurityPolicySpecPatchPtrInput
}

The set of arguments for constructing a PodSecurityPolicyPatch resource.

func (PodSecurityPolicyPatchArgs) ElementType added in v3.20.0

func (PodSecurityPolicyPatchArgs) ElementType() reflect.Type

type PodSecurityPolicyPatchArray added in v3.20.0

type PodSecurityPolicyPatchArray []PodSecurityPolicyPatchInput

func (PodSecurityPolicyPatchArray) ElementType added in v3.20.0

func (PodSecurityPolicyPatchArray) ToPodSecurityPolicyPatchArrayOutput added in v3.20.0

func (i PodSecurityPolicyPatchArray) ToPodSecurityPolicyPatchArrayOutput() PodSecurityPolicyPatchArrayOutput

func (PodSecurityPolicyPatchArray) ToPodSecurityPolicyPatchArrayOutputWithContext added in v3.20.0

func (i PodSecurityPolicyPatchArray) ToPodSecurityPolicyPatchArrayOutputWithContext(ctx context.Context) PodSecurityPolicyPatchArrayOutput

type PodSecurityPolicyPatchArrayInput added in v3.20.0

type PodSecurityPolicyPatchArrayInput interface {
	pulumi.Input

	ToPodSecurityPolicyPatchArrayOutput() PodSecurityPolicyPatchArrayOutput
	ToPodSecurityPolicyPatchArrayOutputWithContext(context.Context) PodSecurityPolicyPatchArrayOutput
}

PodSecurityPolicyPatchArrayInput is an input type that accepts PodSecurityPolicyPatchArray and PodSecurityPolicyPatchArrayOutput values. You can construct a concrete instance of `PodSecurityPolicyPatchArrayInput` via:

PodSecurityPolicyPatchArray{ PodSecurityPolicyPatchArgs{...} }

type PodSecurityPolicyPatchArrayOutput added in v3.20.0

type PodSecurityPolicyPatchArrayOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyPatchArrayOutput) ElementType added in v3.20.0

func (PodSecurityPolicyPatchArrayOutput) Index added in v3.20.0

func (PodSecurityPolicyPatchArrayOutput) ToPodSecurityPolicyPatchArrayOutput added in v3.20.0

func (o PodSecurityPolicyPatchArrayOutput) ToPodSecurityPolicyPatchArrayOutput() PodSecurityPolicyPatchArrayOutput

func (PodSecurityPolicyPatchArrayOutput) ToPodSecurityPolicyPatchArrayOutputWithContext added in v3.20.0

func (o PodSecurityPolicyPatchArrayOutput) ToPodSecurityPolicyPatchArrayOutputWithContext(ctx context.Context) PodSecurityPolicyPatchArrayOutput

type PodSecurityPolicyPatchInput added in v3.20.0

type PodSecurityPolicyPatchInput interface {
	pulumi.Input

	ToPodSecurityPolicyPatchOutput() PodSecurityPolicyPatchOutput
	ToPodSecurityPolicyPatchOutputWithContext(ctx context.Context) PodSecurityPolicyPatchOutput
}

type PodSecurityPolicyPatchMap added in v3.20.0

type PodSecurityPolicyPatchMap map[string]PodSecurityPolicyPatchInput

func (PodSecurityPolicyPatchMap) ElementType added in v3.20.0

func (PodSecurityPolicyPatchMap) ElementType() reflect.Type

func (PodSecurityPolicyPatchMap) ToPodSecurityPolicyPatchMapOutput added in v3.20.0

func (i PodSecurityPolicyPatchMap) ToPodSecurityPolicyPatchMapOutput() PodSecurityPolicyPatchMapOutput

func (PodSecurityPolicyPatchMap) ToPodSecurityPolicyPatchMapOutputWithContext added in v3.20.0

func (i PodSecurityPolicyPatchMap) ToPodSecurityPolicyPatchMapOutputWithContext(ctx context.Context) PodSecurityPolicyPatchMapOutput

type PodSecurityPolicyPatchMapInput added in v3.20.0

type PodSecurityPolicyPatchMapInput interface {
	pulumi.Input

	ToPodSecurityPolicyPatchMapOutput() PodSecurityPolicyPatchMapOutput
	ToPodSecurityPolicyPatchMapOutputWithContext(context.Context) PodSecurityPolicyPatchMapOutput
}

PodSecurityPolicyPatchMapInput is an input type that accepts PodSecurityPolicyPatchMap and PodSecurityPolicyPatchMapOutput values. You can construct a concrete instance of `PodSecurityPolicyPatchMapInput` via:

PodSecurityPolicyPatchMap{ "key": PodSecurityPolicyPatchArgs{...} }

type PodSecurityPolicyPatchMapOutput added in v3.20.0

type PodSecurityPolicyPatchMapOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyPatchMapOutput) ElementType added in v3.20.0

func (PodSecurityPolicyPatchMapOutput) MapIndex added in v3.20.0

func (PodSecurityPolicyPatchMapOutput) ToPodSecurityPolicyPatchMapOutput added in v3.20.0

func (o PodSecurityPolicyPatchMapOutput) ToPodSecurityPolicyPatchMapOutput() PodSecurityPolicyPatchMapOutput

func (PodSecurityPolicyPatchMapOutput) ToPodSecurityPolicyPatchMapOutputWithContext added in v3.20.0

func (o PodSecurityPolicyPatchMapOutput) ToPodSecurityPolicyPatchMapOutputWithContext(ctx context.Context) PodSecurityPolicyPatchMapOutput

type PodSecurityPolicyPatchOutput added in v3.20.0

type PodSecurityPolicyPatchOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyPatchOutput) ApiVersion added in v3.20.0

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodSecurityPolicyPatchOutput) ElementType added in v3.20.0

func (PodSecurityPolicyPatchOutput) Kind added in v3.20.0

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodSecurityPolicyPatchOutput) Metadata added in v3.20.0

Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

func (PodSecurityPolicyPatchOutput) Spec added in v3.20.0

spec defines the policy enforced.

func (PodSecurityPolicyPatchOutput) ToPodSecurityPolicyPatchOutput added in v3.20.0

func (o PodSecurityPolicyPatchOutput) ToPodSecurityPolicyPatchOutput() PodSecurityPolicyPatchOutput

func (PodSecurityPolicyPatchOutput) ToPodSecurityPolicyPatchOutputWithContext added in v3.20.0

func (o PodSecurityPolicyPatchOutput) ToPodSecurityPolicyPatchOutputWithContext(ctx context.Context) PodSecurityPolicyPatchOutput

type PodSecurityPolicyPatchState added in v3.20.0

type PodSecurityPolicyPatchState struct {
}

func (PodSecurityPolicyPatchState) ElementType added in v3.20.0

type PodSecurityPolicyPatchType added in v3.20.0

type PodSecurityPolicyPatchType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata *metav1.ObjectMetaPatch `pulumi:"metadata"`
	// spec defines the policy enforced.
	Spec *PodSecurityPolicySpecPatch `pulumi:"spec"`
}

PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.

type PodSecurityPolicyPatchTypeArgs added in v3.20.0

type PodSecurityPolicyPatchTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPatchPtrInput `pulumi:"metadata"`
	// spec defines the policy enforced.
	Spec PodSecurityPolicySpecPatchPtrInput `pulumi:"spec"`
}

PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.

func (PodSecurityPolicyPatchTypeArgs) ElementType added in v3.20.0

func (PodSecurityPolicyPatchTypeArgs) ToPodSecurityPolicyPatchTypeOutput added in v3.20.0

func (i PodSecurityPolicyPatchTypeArgs) ToPodSecurityPolicyPatchTypeOutput() PodSecurityPolicyPatchTypeOutput

func (PodSecurityPolicyPatchTypeArgs) ToPodSecurityPolicyPatchTypeOutputWithContext added in v3.20.0

func (i PodSecurityPolicyPatchTypeArgs) ToPodSecurityPolicyPatchTypeOutputWithContext(ctx context.Context) PodSecurityPolicyPatchTypeOutput

type PodSecurityPolicyPatchTypeInput added in v3.20.0

type PodSecurityPolicyPatchTypeInput interface {
	pulumi.Input

	ToPodSecurityPolicyPatchTypeOutput() PodSecurityPolicyPatchTypeOutput
	ToPodSecurityPolicyPatchTypeOutputWithContext(context.Context) PodSecurityPolicyPatchTypeOutput
}

PodSecurityPolicyPatchTypeInput is an input type that accepts PodSecurityPolicyPatchTypeArgs and PodSecurityPolicyPatchTypeOutput values. You can construct a concrete instance of `PodSecurityPolicyPatchTypeInput` via:

PodSecurityPolicyPatchTypeArgs{...}

type PodSecurityPolicyPatchTypeOutput added in v3.20.0

type PodSecurityPolicyPatchTypeOutput struct{ *pulumi.OutputState }

PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.

func (PodSecurityPolicyPatchTypeOutput) ApiVersion added in v3.20.0

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodSecurityPolicyPatchTypeOutput) ElementType added in v3.20.0

func (PodSecurityPolicyPatchTypeOutput) Kind added in v3.20.0

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodSecurityPolicyPatchTypeOutput) Metadata added in v3.20.0

Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

func (PodSecurityPolicyPatchTypeOutput) Spec added in v3.20.0

spec defines the policy enforced.

func (PodSecurityPolicyPatchTypeOutput) ToPodSecurityPolicyPatchTypeOutput added in v3.20.0

func (o PodSecurityPolicyPatchTypeOutput) ToPodSecurityPolicyPatchTypeOutput() PodSecurityPolicyPatchTypeOutput

func (PodSecurityPolicyPatchTypeOutput) ToPodSecurityPolicyPatchTypeOutputWithContext added in v3.20.0

func (o PodSecurityPolicyPatchTypeOutput) ToPodSecurityPolicyPatchTypeOutputWithContext(ctx context.Context) PodSecurityPolicyPatchTypeOutput

type PodSecurityPolicySpec

type PodSecurityPolicySpec struct {
	// allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
	AllowPrivilegeEscalation *bool `pulumi:"allowPrivilegeEscalation"`
	// AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
	AllowedCSIDrivers []AllowedCSIDriver `pulumi:"allowedCSIDrivers"`
	// allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
	AllowedCapabilities []string `pulumi:"allowedCapabilities"`
	// allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.
	AllowedFlexVolumes []AllowedFlexVolume `pulumi:"allowedFlexVolumes"`
	// allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.
	AllowedHostPaths []AllowedHostPath `pulumi:"allowedHostPaths"`
	// AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
	AllowedProcMountTypes []string `pulumi:"allowedProcMountTypes"`
	// allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
	//
	// Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
	AllowedUnsafeSysctls []string `pulumi:"allowedUnsafeSysctls"`
	// defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.  You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
	DefaultAddCapabilities []string `pulumi:"defaultAddCapabilities"`
	// defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
	DefaultAllowPrivilegeEscalation *bool `pulumi:"defaultAllowPrivilegeEscalation"`
	// forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
	//
	// Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
	ForbiddenSysctls []string `pulumi:"forbiddenSysctls"`
	// fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
	FsGroup FSGroupStrategyOptions `pulumi:"fsGroup"`
	// hostIPC determines if the policy allows the use of HostIPC in the pod spec.
	HostIPC *bool `pulumi:"hostIPC"`
	// hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
	HostNetwork *bool `pulumi:"hostNetwork"`
	// hostPID determines if the policy allows the use of HostPID in the pod spec.
	HostPID *bool `pulumi:"hostPID"`
	// hostPorts determines which host port ranges are allowed to be exposed.
	HostPorts []HostPortRange `pulumi:"hostPorts"`
	// privileged determines if a pod can request to be run as privileged.
	Privileged *bool `pulumi:"privileged"`
	// readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.  If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
	ReadOnlyRootFilesystem *bool `pulumi:"readOnlyRootFilesystem"`
	// requiredDropCapabilities are the capabilities that will be dropped from the container.  These are required to be dropped and cannot be added.
	RequiredDropCapabilities []string `pulumi:"requiredDropCapabilities"`
	// RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.
	RunAsGroup *RunAsGroupStrategyOptions `pulumi:"runAsGroup"`
	// runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
	RunAsUser RunAsUserStrategyOptions `pulumi:"runAsUser"`
	// runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.
	RuntimeClass *RuntimeClassStrategyOptions `pulumi:"runtimeClass"`
	// seLinux is the strategy that will dictate the allowable labels that may be set.
	SeLinux SELinuxStrategyOptions `pulumi:"seLinux"`
	// supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
	SupplementalGroups SupplementalGroupsStrategyOptions `pulumi:"supplementalGroups"`
	// volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
	Volumes []string `pulumi:"volumes"`
}

PodSecurityPolicySpec defines the policy enforced.

type PodSecurityPolicySpecArgs

type PodSecurityPolicySpecArgs struct {
	// allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
	AllowPrivilegeEscalation pulumi.BoolPtrInput `pulumi:"allowPrivilegeEscalation"`
	// AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
	AllowedCSIDrivers AllowedCSIDriverArrayInput `pulumi:"allowedCSIDrivers"`
	// allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
	AllowedCapabilities pulumi.StringArrayInput `pulumi:"allowedCapabilities"`
	// allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.
	AllowedFlexVolumes AllowedFlexVolumeArrayInput `pulumi:"allowedFlexVolumes"`
	// allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.
	AllowedHostPaths AllowedHostPathArrayInput `pulumi:"allowedHostPaths"`
	// AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
	AllowedProcMountTypes pulumi.StringArrayInput `pulumi:"allowedProcMountTypes"`
	// allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
	//
	// Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
	AllowedUnsafeSysctls pulumi.StringArrayInput `pulumi:"allowedUnsafeSysctls"`
	// defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.  You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
	DefaultAddCapabilities pulumi.StringArrayInput `pulumi:"defaultAddCapabilities"`
	// defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
	DefaultAllowPrivilegeEscalation pulumi.BoolPtrInput `pulumi:"defaultAllowPrivilegeEscalation"`
	// forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
	//
	// Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
	ForbiddenSysctls pulumi.StringArrayInput `pulumi:"forbiddenSysctls"`
	// fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
	FsGroup FSGroupStrategyOptionsInput `pulumi:"fsGroup"`
	// hostIPC determines if the policy allows the use of HostIPC in the pod spec.
	HostIPC pulumi.BoolPtrInput `pulumi:"hostIPC"`
	// hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
	HostNetwork pulumi.BoolPtrInput `pulumi:"hostNetwork"`
	// hostPID determines if the policy allows the use of HostPID in the pod spec.
	HostPID pulumi.BoolPtrInput `pulumi:"hostPID"`
	// hostPorts determines which host port ranges are allowed to be exposed.
	HostPorts HostPortRangeArrayInput `pulumi:"hostPorts"`
	// privileged determines if a pod can request to be run as privileged.
	Privileged pulumi.BoolPtrInput `pulumi:"privileged"`
	// readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.  If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
	ReadOnlyRootFilesystem pulumi.BoolPtrInput `pulumi:"readOnlyRootFilesystem"`
	// requiredDropCapabilities are the capabilities that will be dropped from the container.  These are required to be dropped and cannot be added.
	RequiredDropCapabilities pulumi.StringArrayInput `pulumi:"requiredDropCapabilities"`
	// RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.
	RunAsGroup RunAsGroupStrategyOptionsPtrInput `pulumi:"runAsGroup"`
	// runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
	RunAsUser RunAsUserStrategyOptionsInput `pulumi:"runAsUser"`
	// runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.
	RuntimeClass RuntimeClassStrategyOptionsPtrInput `pulumi:"runtimeClass"`
	// seLinux is the strategy that will dictate the allowable labels that may be set.
	SeLinux SELinuxStrategyOptionsInput `pulumi:"seLinux"`
	// supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
	SupplementalGroups SupplementalGroupsStrategyOptionsInput `pulumi:"supplementalGroups"`
	// volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
	Volumes pulumi.StringArrayInput `pulumi:"volumes"`
}

PodSecurityPolicySpec defines the policy enforced.

func (PodSecurityPolicySpecArgs) ElementType

func (PodSecurityPolicySpecArgs) ElementType() reflect.Type

func (PodSecurityPolicySpecArgs) ToPodSecurityPolicySpecOutput

func (i PodSecurityPolicySpecArgs) ToPodSecurityPolicySpecOutput() PodSecurityPolicySpecOutput

func (PodSecurityPolicySpecArgs) ToPodSecurityPolicySpecOutputWithContext

func (i PodSecurityPolicySpecArgs) ToPodSecurityPolicySpecOutputWithContext(ctx context.Context) PodSecurityPolicySpecOutput

func (PodSecurityPolicySpecArgs) ToPodSecurityPolicySpecPtrOutput

func (i PodSecurityPolicySpecArgs) ToPodSecurityPolicySpecPtrOutput() PodSecurityPolicySpecPtrOutput

func (PodSecurityPolicySpecArgs) ToPodSecurityPolicySpecPtrOutputWithContext

func (i PodSecurityPolicySpecArgs) ToPodSecurityPolicySpecPtrOutputWithContext(ctx context.Context) PodSecurityPolicySpecPtrOutput

type PodSecurityPolicySpecInput

type PodSecurityPolicySpecInput interface {
	pulumi.Input

	ToPodSecurityPolicySpecOutput() PodSecurityPolicySpecOutput
	ToPodSecurityPolicySpecOutputWithContext(context.Context) PodSecurityPolicySpecOutput
}

PodSecurityPolicySpecInput is an input type that accepts PodSecurityPolicySpecArgs and PodSecurityPolicySpecOutput values. You can construct a concrete instance of `PodSecurityPolicySpecInput` via:

PodSecurityPolicySpecArgs{...}

type PodSecurityPolicySpecOutput

type PodSecurityPolicySpecOutput struct{ *pulumi.OutputState }

PodSecurityPolicySpec defines the policy enforced.

func (PodSecurityPolicySpecOutput) AllowPrivilegeEscalation

func (o PodSecurityPolicySpecOutput) AllowPrivilegeEscalation() pulumi.BoolPtrOutput

allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.

func (PodSecurityPolicySpecOutput) AllowedCSIDrivers

AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.

func (PodSecurityPolicySpecOutput) AllowedCapabilities

func (o PodSecurityPolicySpecOutput) AllowedCapabilities() pulumi.StringArrayOutput

allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.

func (PodSecurityPolicySpecOutput) AllowedFlexVolumes

allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.

func (PodSecurityPolicySpecOutput) AllowedHostPaths

allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.

func (PodSecurityPolicySpecOutput) AllowedProcMountTypes

func (o PodSecurityPolicySpecOutput) AllowedProcMountTypes() pulumi.StringArrayOutput

AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.

func (PodSecurityPolicySpecOutput) AllowedUnsafeSysctls

func (o PodSecurityPolicySpecOutput) AllowedUnsafeSysctls() pulumi.StringArrayOutput

allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.

Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.

func (PodSecurityPolicySpecOutput) DefaultAddCapabilities

func (o PodSecurityPolicySpecOutput) DefaultAddCapabilities() pulumi.StringArrayOutput

defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.

func (PodSecurityPolicySpecOutput) DefaultAllowPrivilegeEscalation

func (o PodSecurityPolicySpecOutput) DefaultAllowPrivilegeEscalation() pulumi.BoolPtrOutput

defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.

func (PodSecurityPolicySpecOutput) ElementType

func (PodSecurityPolicySpecOutput) ForbiddenSysctls

forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.

Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.

func (PodSecurityPolicySpecOutput) FsGroup

fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.

func (PodSecurityPolicySpecOutput) HostIPC

hostIPC determines if the policy allows the use of HostIPC in the pod spec.

func (PodSecurityPolicySpecOutput) HostNetwork

hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.

func (PodSecurityPolicySpecOutput) HostPID

hostPID determines if the policy allows the use of HostPID in the pod spec.

func (PodSecurityPolicySpecOutput) HostPorts

hostPorts determines which host port ranges are allowed to be exposed.

func (PodSecurityPolicySpecOutput) Privileged

privileged determines if a pod can request to be run as privileged.

func (PodSecurityPolicySpecOutput) ReadOnlyRootFilesystem

func (o PodSecurityPolicySpecOutput) ReadOnlyRootFilesystem() pulumi.BoolPtrOutput

readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.

func (PodSecurityPolicySpecOutput) RequiredDropCapabilities

func (o PodSecurityPolicySpecOutput) RequiredDropCapabilities() pulumi.StringArrayOutput

requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.

func (PodSecurityPolicySpecOutput) RunAsGroup

RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.

func (PodSecurityPolicySpecOutput) RunAsUser

runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.

func (PodSecurityPolicySpecOutput) RuntimeClass

runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.

func (PodSecurityPolicySpecOutput) SeLinux

seLinux is the strategy that will dictate the allowable labels that may be set.

func (PodSecurityPolicySpecOutput) SupplementalGroups

supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.

func (PodSecurityPolicySpecOutput) ToPodSecurityPolicySpecOutput

func (o PodSecurityPolicySpecOutput) ToPodSecurityPolicySpecOutput() PodSecurityPolicySpecOutput

func (PodSecurityPolicySpecOutput) ToPodSecurityPolicySpecOutputWithContext

func (o PodSecurityPolicySpecOutput) ToPodSecurityPolicySpecOutputWithContext(ctx context.Context) PodSecurityPolicySpecOutput

func (PodSecurityPolicySpecOutput) ToPodSecurityPolicySpecPtrOutput

func (o PodSecurityPolicySpecOutput) ToPodSecurityPolicySpecPtrOutput() PodSecurityPolicySpecPtrOutput

func (PodSecurityPolicySpecOutput) ToPodSecurityPolicySpecPtrOutputWithContext

func (o PodSecurityPolicySpecOutput) ToPodSecurityPolicySpecPtrOutputWithContext(ctx context.Context) PodSecurityPolicySpecPtrOutput

func (PodSecurityPolicySpecOutput) Volumes

volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.

type PodSecurityPolicySpecPatch added in v3.20.0

type PodSecurityPolicySpecPatch struct {
	// allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
	AllowPrivilegeEscalation *bool `pulumi:"allowPrivilegeEscalation"`
	// AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
	AllowedCSIDrivers []AllowedCSIDriverPatch `pulumi:"allowedCSIDrivers"`
	// allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
	AllowedCapabilities []string `pulumi:"allowedCapabilities"`
	// allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.
	AllowedFlexVolumes []AllowedFlexVolumePatch `pulumi:"allowedFlexVolumes"`
	// allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.
	AllowedHostPaths []AllowedHostPathPatch `pulumi:"allowedHostPaths"`
	// AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
	AllowedProcMountTypes []string `pulumi:"allowedProcMountTypes"`
	// allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
	//
	// Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
	AllowedUnsafeSysctls []string `pulumi:"allowedUnsafeSysctls"`
	// defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.  You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
	DefaultAddCapabilities []string `pulumi:"defaultAddCapabilities"`
	// defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
	DefaultAllowPrivilegeEscalation *bool `pulumi:"defaultAllowPrivilegeEscalation"`
	// forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
	//
	// Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
	ForbiddenSysctls []string `pulumi:"forbiddenSysctls"`
	// fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
	FsGroup *FSGroupStrategyOptionsPatch `pulumi:"fsGroup"`
	// hostIPC determines if the policy allows the use of HostIPC in the pod spec.
	HostIPC *bool `pulumi:"hostIPC"`
	// hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
	HostNetwork *bool `pulumi:"hostNetwork"`
	// hostPID determines if the policy allows the use of HostPID in the pod spec.
	HostPID *bool `pulumi:"hostPID"`
	// hostPorts determines which host port ranges are allowed to be exposed.
	HostPorts []HostPortRangePatch `pulumi:"hostPorts"`
	// privileged determines if a pod can request to be run as privileged.
	Privileged *bool `pulumi:"privileged"`
	// readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.  If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
	ReadOnlyRootFilesystem *bool `pulumi:"readOnlyRootFilesystem"`
	// requiredDropCapabilities are the capabilities that will be dropped from the container.  These are required to be dropped and cannot be added.
	RequiredDropCapabilities []string `pulumi:"requiredDropCapabilities"`
	// RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.
	RunAsGroup *RunAsGroupStrategyOptionsPatch `pulumi:"runAsGroup"`
	// runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
	RunAsUser *RunAsUserStrategyOptionsPatch `pulumi:"runAsUser"`
	// runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.
	RuntimeClass *RuntimeClassStrategyOptionsPatch `pulumi:"runtimeClass"`
	// seLinux is the strategy that will dictate the allowable labels that may be set.
	SeLinux *SELinuxStrategyOptionsPatch `pulumi:"seLinux"`
	// supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
	SupplementalGroups *SupplementalGroupsStrategyOptionsPatch `pulumi:"supplementalGroups"`
	// volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
	Volumes []string `pulumi:"volumes"`
}

PodSecurityPolicySpec defines the policy enforced.

type PodSecurityPolicySpecPatchArgs added in v3.20.0

type PodSecurityPolicySpecPatchArgs struct {
	// allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
	AllowPrivilegeEscalation pulumi.BoolPtrInput `pulumi:"allowPrivilegeEscalation"`
	// AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
	AllowedCSIDrivers AllowedCSIDriverPatchArrayInput `pulumi:"allowedCSIDrivers"`
	// allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
	AllowedCapabilities pulumi.StringArrayInput `pulumi:"allowedCapabilities"`
	// allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.
	AllowedFlexVolumes AllowedFlexVolumePatchArrayInput `pulumi:"allowedFlexVolumes"`
	// allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.
	AllowedHostPaths AllowedHostPathPatchArrayInput `pulumi:"allowedHostPaths"`
	// AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
	AllowedProcMountTypes pulumi.StringArrayInput `pulumi:"allowedProcMountTypes"`
	// allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
	//
	// Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
	AllowedUnsafeSysctls pulumi.StringArrayInput `pulumi:"allowedUnsafeSysctls"`
	// defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.  You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
	DefaultAddCapabilities pulumi.StringArrayInput `pulumi:"defaultAddCapabilities"`
	// defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
	DefaultAllowPrivilegeEscalation pulumi.BoolPtrInput `pulumi:"defaultAllowPrivilegeEscalation"`
	// forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
	//
	// Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
	ForbiddenSysctls pulumi.StringArrayInput `pulumi:"forbiddenSysctls"`
	// fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
	FsGroup FSGroupStrategyOptionsPatchPtrInput `pulumi:"fsGroup"`
	// hostIPC determines if the policy allows the use of HostIPC in the pod spec.
	HostIPC pulumi.BoolPtrInput `pulumi:"hostIPC"`
	// hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
	HostNetwork pulumi.BoolPtrInput `pulumi:"hostNetwork"`
	// hostPID determines if the policy allows the use of HostPID in the pod spec.
	HostPID pulumi.BoolPtrInput `pulumi:"hostPID"`
	// hostPorts determines which host port ranges are allowed to be exposed.
	HostPorts HostPortRangePatchArrayInput `pulumi:"hostPorts"`
	// privileged determines if a pod can request to be run as privileged.
	Privileged pulumi.BoolPtrInput `pulumi:"privileged"`
	// readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.  If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
	ReadOnlyRootFilesystem pulumi.BoolPtrInput `pulumi:"readOnlyRootFilesystem"`
	// requiredDropCapabilities are the capabilities that will be dropped from the container.  These are required to be dropped and cannot be added.
	RequiredDropCapabilities pulumi.StringArrayInput `pulumi:"requiredDropCapabilities"`
	// RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.
	RunAsGroup RunAsGroupStrategyOptionsPatchPtrInput `pulumi:"runAsGroup"`
	// runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
	RunAsUser RunAsUserStrategyOptionsPatchPtrInput `pulumi:"runAsUser"`
	// runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.
	RuntimeClass RuntimeClassStrategyOptionsPatchPtrInput `pulumi:"runtimeClass"`
	// seLinux is the strategy that will dictate the allowable labels that may be set.
	SeLinux SELinuxStrategyOptionsPatchPtrInput `pulumi:"seLinux"`
	// supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
	SupplementalGroups SupplementalGroupsStrategyOptionsPatchPtrInput `pulumi:"supplementalGroups"`
	// volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
	Volumes pulumi.StringArrayInput `pulumi:"volumes"`
}

PodSecurityPolicySpec defines the policy enforced.

func (PodSecurityPolicySpecPatchArgs) ElementType added in v3.20.0

func (PodSecurityPolicySpecPatchArgs) ToPodSecurityPolicySpecPatchOutput added in v3.20.0

func (i PodSecurityPolicySpecPatchArgs) ToPodSecurityPolicySpecPatchOutput() PodSecurityPolicySpecPatchOutput

func (PodSecurityPolicySpecPatchArgs) ToPodSecurityPolicySpecPatchOutputWithContext added in v3.20.0

func (i PodSecurityPolicySpecPatchArgs) ToPodSecurityPolicySpecPatchOutputWithContext(ctx context.Context) PodSecurityPolicySpecPatchOutput

func (PodSecurityPolicySpecPatchArgs) ToPodSecurityPolicySpecPatchPtrOutput added in v3.20.0

func (i PodSecurityPolicySpecPatchArgs) ToPodSecurityPolicySpecPatchPtrOutput() PodSecurityPolicySpecPatchPtrOutput

func (PodSecurityPolicySpecPatchArgs) ToPodSecurityPolicySpecPatchPtrOutputWithContext added in v3.20.0

func (i PodSecurityPolicySpecPatchArgs) ToPodSecurityPolicySpecPatchPtrOutputWithContext(ctx context.Context) PodSecurityPolicySpecPatchPtrOutput

type PodSecurityPolicySpecPatchInput added in v3.20.0

type PodSecurityPolicySpecPatchInput interface {
	pulumi.Input

	ToPodSecurityPolicySpecPatchOutput() PodSecurityPolicySpecPatchOutput
	ToPodSecurityPolicySpecPatchOutputWithContext(context.Context) PodSecurityPolicySpecPatchOutput
}

PodSecurityPolicySpecPatchInput is an input type that accepts PodSecurityPolicySpecPatchArgs and PodSecurityPolicySpecPatchOutput values. You can construct a concrete instance of `PodSecurityPolicySpecPatchInput` via:

PodSecurityPolicySpecPatchArgs{...}

type PodSecurityPolicySpecPatchOutput added in v3.20.0

type PodSecurityPolicySpecPatchOutput struct{ *pulumi.OutputState }

PodSecurityPolicySpec defines the policy enforced.

func (PodSecurityPolicySpecPatchOutput) AllowPrivilegeEscalation added in v3.20.0

func (o PodSecurityPolicySpecPatchOutput) AllowPrivilegeEscalation() pulumi.BoolPtrOutput

allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.

func (PodSecurityPolicySpecPatchOutput) AllowedCSIDrivers added in v3.20.0

AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.

func (PodSecurityPolicySpecPatchOutput) AllowedCapabilities added in v3.20.0

allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.

func (PodSecurityPolicySpecPatchOutput) AllowedFlexVolumes added in v3.20.0

allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.

func (PodSecurityPolicySpecPatchOutput) AllowedHostPaths added in v3.20.0

allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.

func (PodSecurityPolicySpecPatchOutput) AllowedProcMountTypes added in v3.20.0

func (o PodSecurityPolicySpecPatchOutput) AllowedProcMountTypes() pulumi.StringArrayOutput

AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.

func (PodSecurityPolicySpecPatchOutput) AllowedUnsafeSysctls added in v3.20.0

allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.

Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.

func (PodSecurityPolicySpecPatchOutput) DefaultAddCapabilities added in v3.20.0

func (o PodSecurityPolicySpecPatchOutput) DefaultAddCapabilities() pulumi.StringArrayOutput

defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.

func (PodSecurityPolicySpecPatchOutput) DefaultAllowPrivilegeEscalation added in v3.20.0

func (o PodSecurityPolicySpecPatchOutput) DefaultAllowPrivilegeEscalation() pulumi.BoolPtrOutput

defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.

func (PodSecurityPolicySpecPatchOutput) ElementType added in v3.20.0

func (PodSecurityPolicySpecPatchOutput) ForbiddenSysctls added in v3.20.0

forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.

Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.

func (PodSecurityPolicySpecPatchOutput) FsGroup added in v3.20.0

fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.

func (PodSecurityPolicySpecPatchOutput) HostIPC added in v3.20.0

hostIPC determines if the policy allows the use of HostIPC in the pod spec.

func (PodSecurityPolicySpecPatchOutput) HostNetwork added in v3.20.0

hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.

func (PodSecurityPolicySpecPatchOutput) HostPID added in v3.20.0

hostPID determines if the policy allows the use of HostPID in the pod spec.

func (PodSecurityPolicySpecPatchOutput) HostPorts added in v3.20.0

hostPorts determines which host port ranges are allowed to be exposed.

func (PodSecurityPolicySpecPatchOutput) Privileged added in v3.20.0

privileged determines if a pod can request to be run as privileged.

func (PodSecurityPolicySpecPatchOutput) ReadOnlyRootFilesystem added in v3.20.0

func (o PodSecurityPolicySpecPatchOutput) ReadOnlyRootFilesystem() pulumi.BoolPtrOutput

readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.

func (PodSecurityPolicySpecPatchOutput) RequiredDropCapabilities added in v3.20.0

func (o PodSecurityPolicySpecPatchOutput) RequiredDropCapabilities() pulumi.StringArrayOutput

requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.

func (PodSecurityPolicySpecPatchOutput) RunAsGroup added in v3.20.0

RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.

func (PodSecurityPolicySpecPatchOutput) RunAsUser added in v3.20.0

runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.

func (PodSecurityPolicySpecPatchOutput) RuntimeClass added in v3.20.0

runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.

func (PodSecurityPolicySpecPatchOutput) SeLinux added in v3.20.0

seLinux is the strategy that will dictate the allowable labels that may be set.

func (PodSecurityPolicySpecPatchOutput) SupplementalGroups added in v3.20.0

supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.

func (PodSecurityPolicySpecPatchOutput) ToPodSecurityPolicySpecPatchOutput added in v3.20.0

func (o PodSecurityPolicySpecPatchOutput) ToPodSecurityPolicySpecPatchOutput() PodSecurityPolicySpecPatchOutput

func (PodSecurityPolicySpecPatchOutput) ToPodSecurityPolicySpecPatchOutputWithContext added in v3.20.0

func (o PodSecurityPolicySpecPatchOutput) ToPodSecurityPolicySpecPatchOutputWithContext(ctx context.Context) PodSecurityPolicySpecPatchOutput

func (PodSecurityPolicySpecPatchOutput) ToPodSecurityPolicySpecPatchPtrOutput added in v3.20.0

func (o PodSecurityPolicySpecPatchOutput) ToPodSecurityPolicySpecPatchPtrOutput() PodSecurityPolicySpecPatchPtrOutput

func (PodSecurityPolicySpecPatchOutput) ToPodSecurityPolicySpecPatchPtrOutputWithContext added in v3.20.0

func (o PodSecurityPolicySpecPatchOutput) ToPodSecurityPolicySpecPatchPtrOutputWithContext(ctx context.Context) PodSecurityPolicySpecPatchPtrOutput

func (PodSecurityPolicySpecPatchOutput) Volumes added in v3.20.0

volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.

type PodSecurityPolicySpecPatchPtrInput added in v3.20.0

type PodSecurityPolicySpecPatchPtrInput interface {
	pulumi.Input

	ToPodSecurityPolicySpecPatchPtrOutput() PodSecurityPolicySpecPatchPtrOutput
	ToPodSecurityPolicySpecPatchPtrOutputWithContext(context.Context) PodSecurityPolicySpecPatchPtrOutput
}

PodSecurityPolicySpecPatchPtrInput is an input type that accepts PodSecurityPolicySpecPatchArgs, PodSecurityPolicySpecPatchPtr and PodSecurityPolicySpecPatchPtrOutput values. You can construct a concrete instance of `PodSecurityPolicySpecPatchPtrInput` via:

        PodSecurityPolicySpecPatchArgs{...}

or:

        nil

func PodSecurityPolicySpecPatchPtr added in v3.20.0

type PodSecurityPolicySpecPatchPtrOutput added in v3.20.0

type PodSecurityPolicySpecPatchPtrOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicySpecPatchPtrOutput) AllowPrivilegeEscalation added in v3.20.0

func (o PodSecurityPolicySpecPatchPtrOutput) AllowPrivilegeEscalation() pulumi.BoolPtrOutput

allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.

func (PodSecurityPolicySpecPatchPtrOutput) AllowedCSIDrivers added in v3.20.0

AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.

func (PodSecurityPolicySpecPatchPtrOutput) AllowedCapabilities added in v3.20.0

allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.

func (PodSecurityPolicySpecPatchPtrOutput) AllowedFlexVolumes added in v3.20.0

allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.

func (PodSecurityPolicySpecPatchPtrOutput) AllowedHostPaths added in v3.20.0

allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.

func (PodSecurityPolicySpecPatchPtrOutput) AllowedProcMountTypes added in v3.20.0

AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.

func (PodSecurityPolicySpecPatchPtrOutput) AllowedUnsafeSysctls added in v3.20.0

allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.

Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.

func (PodSecurityPolicySpecPatchPtrOutput) DefaultAddCapabilities added in v3.20.0

defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.

func (PodSecurityPolicySpecPatchPtrOutput) DefaultAllowPrivilegeEscalation added in v3.20.0

func (o PodSecurityPolicySpecPatchPtrOutput) DefaultAllowPrivilegeEscalation() pulumi.BoolPtrOutput

defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.

func (PodSecurityPolicySpecPatchPtrOutput) Elem added in v3.20.0

func (PodSecurityPolicySpecPatchPtrOutput) ElementType added in v3.20.0

func (PodSecurityPolicySpecPatchPtrOutput) ForbiddenSysctls added in v3.20.0

forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.

Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.

func (PodSecurityPolicySpecPatchPtrOutput) FsGroup added in v3.20.0

fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.

func (PodSecurityPolicySpecPatchPtrOutput) HostIPC added in v3.20.0

hostIPC determines if the policy allows the use of HostIPC in the pod spec.

func (PodSecurityPolicySpecPatchPtrOutput) HostNetwork added in v3.20.0

hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.

func (PodSecurityPolicySpecPatchPtrOutput) HostPID added in v3.20.0

hostPID determines if the policy allows the use of HostPID in the pod spec.

func (PodSecurityPolicySpecPatchPtrOutput) HostPorts added in v3.20.0

hostPorts determines which host port ranges are allowed to be exposed.

func (PodSecurityPolicySpecPatchPtrOutput) Privileged added in v3.20.0

privileged determines if a pod can request to be run as privileged.

func (PodSecurityPolicySpecPatchPtrOutput) ReadOnlyRootFilesystem added in v3.20.0

func (o PodSecurityPolicySpecPatchPtrOutput) ReadOnlyRootFilesystem() pulumi.BoolPtrOutput

readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.

func (PodSecurityPolicySpecPatchPtrOutput) RequiredDropCapabilities added in v3.20.0

func (o PodSecurityPolicySpecPatchPtrOutput) RequiredDropCapabilities() pulumi.StringArrayOutput

requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.

func (PodSecurityPolicySpecPatchPtrOutput) RunAsGroup added in v3.20.0

RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.

func (PodSecurityPolicySpecPatchPtrOutput) RunAsUser added in v3.20.0

runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.

func (PodSecurityPolicySpecPatchPtrOutput) RuntimeClass added in v3.20.0

runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.

func (PodSecurityPolicySpecPatchPtrOutput) SeLinux added in v3.20.0

seLinux is the strategy that will dictate the allowable labels that may be set.

func (PodSecurityPolicySpecPatchPtrOutput) SupplementalGroups added in v3.20.0

supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.

func (PodSecurityPolicySpecPatchPtrOutput) ToPodSecurityPolicySpecPatchPtrOutput added in v3.20.0

func (o PodSecurityPolicySpecPatchPtrOutput) ToPodSecurityPolicySpecPatchPtrOutput() PodSecurityPolicySpecPatchPtrOutput

func (PodSecurityPolicySpecPatchPtrOutput) ToPodSecurityPolicySpecPatchPtrOutputWithContext added in v3.20.0

func (o PodSecurityPolicySpecPatchPtrOutput) ToPodSecurityPolicySpecPatchPtrOutputWithContext(ctx context.Context) PodSecurityPolicySpecPatchPtrOutput

func (PodSecurityPolicySpecPatchPtrOutput) Volumes added in v3.20.0

volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.

type PodSecurityPolicySpecPtrInput

type PodSecurityPolicySpecPtrInput interface {
	pulumi.Input

	ToPodSecurityPolicySpecPtrOutput() PodSecurityPolicySpecPtrOutput
	ToPodSecurityPolicySpecPtrOutputWithContext(context.Context) PodSecurityPolicySpecPtrOutput
}

PodSecurityPolicySpecPtrInput is an input type that accepts PodSecurityPolicySpecArgs, PodSecurityPolicySpecPtr and PodSecurityPolicySpecPtrOutput values. You can construct a concrete instance of `PodSecurityPolicySpecPtrInput` via:

        PodSecurityPolicySpecArgs{...}

or:

        nil

type PodSecurityPolicySpecPtrOutput

type PodSecurityPolicySpecPtrOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicySpecPtrOutput) AllowPrivilegeEscalation

func (o PodSecurityPolicySpecPtrOutput) AllowPrivilegeEscalation() pulumi.BoolPtrOutput

allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.

func (PodSecurityPolicySpecPtrOutput) AllowedCSIDrivers

AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.

func (PodSecurityPolicySpecPtrOutput) AllowedCapabilities

allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.

func (PodSecurityPolicySpecPtrOutput) AllowedFlexVolumes

allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.

func (PodSecurityPolicySpecPtrOutput) AllowedHostPaths

allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.

func (PodSecurityPolicySpecPtrOutput) AllowedProcMountTypes

func (o PodSecurityPolicySpecPtrOutput) AllowedProcMountTypes() pulumi.StringArrayOutput

AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.

func (PodSecurityPolicySpecPtrOutput) AllowedUnsafeSysctls

func (o PodSecurityPolicySpecPtrOutput) AllowedUnsafeSysctls() pulumi.StringArrayOutput

allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.

Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.

func (PodSecurityPolicySpecPtrOutput) DefaultAddCapabilities

func (o PodSecurityPolicySpecPtrOutput) DefaultAddCapabilities() pulumi.StringArrayOutput

defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.

func (PodSecurityPolicySpecPtrOutput) DefaultAllowPrivilegeEscalation

func (o PodSecurityPolicySpecPtrOutput) DefaultAllowPrivilegeEscalation() pulumi.BoolPtrOutput

defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.

func (PodSecurityPolicySpecPtrOutput) Elem

func (PodSecurityPolicySpecPtrOutput) ElementType

func (PodSecurityPolicySpecPtrOutput) ForbiddenSysctls

forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.

Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.

func (PodSecurityPolicySpecPtrOutput) FsGroup

fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.

func (PodSecurityPolicySpecPtrOutput) HostIPC

hostIPC determines if the policy allows the use of HostIPC in the pod spec.

func (PodSecurityPolicySpecPtrOutput) HostNetwork

hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.

func (PodSecurityPolicySpecPtrOutput) HostPID

hostPID determines if the policy allows the use of HostPID in the pod spec.

func (PodSecurityPolicySpecPtrOutput) HostPorts

hostPorts determines which host port ranges are allowed to be exposed.

func (PodSecurityPolicySpecPtrOutput) Privileged

privileged determines if a pod can request to be run as privileged.

func (PodSecurityPolicySpecPtrOutput) ReadOnlyRootFilesystem

func (o PodSecurityPolicySpecPtrOutput) ReadOnlyRootFilesystem() pulumi.BoolPtrOutput

readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.

func (PodSecurityPolicySpecPtrOutput) RequiredDropCapabilities

func (o PodSecurityPolicySpecPtrOutput) RequiredDropCapabilities() pulumi.StringArrayOutput

requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.

func (PodSecurityPolicySpecPtrOutput) RunAsGroup

RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.

func (PodSecurityPolicySpecPtrOutput) RunAsUser

runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.

func (PodSecurityPolicySpecPtrOutput) RuntimeClass

runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.

func (PodSecurityPolicySpecPtrOutput) SeLinux

seLinux is the strategy that will dictate the allowable labels that may be set.

func (PodSecurityPolicySpecPtrOutput) SupplementalGroups

supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.

func (PodSecurityPolicySpecPtrOutput) ToPodSecurityPolicySpecPtrOutput

func (o PodSecurityPolicySpecPtrOutput) ToPodSecurityPolicySpecPtrOutput() PodSecurityPolicySpecPtrOutput

func (PodSecurityPolicySpecPtrOutput) ToPodSecurityPolicySpecPtrOutputWithContext

func (o PodSecurityPolicySpecPtrOutput) ToPodSecurityPolicySpecPtrOutputWithContext(ctx context.Context) PodSecurityPolicySpecPtrOutput

func (PodSecurityPolicySpecPtrOutput) Volumes

volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.

type PodSecurityPolicyState

type PodSecurityPolicyState struct {
}

func (PodSecurityPolicyState) ElementType

func (PodSecurityPolicyState) ElementType() reflect.Type

type PodSecurityPolicyType

type PodSecurityPolicyType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata *metav1.ObjectMeta `pulumi:"metadata"`
	// spec defines the policy enforced.
	Spec *PodSecurityPolicySpec `pulumi:"spec"`
}

PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.

type PodSecurityPolicyTypeArgs

type PodSecurityPolicyTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPtrInput `pulumi:"metadata"`
	// spec defines the policy enforced.
	Spec PodSecurityPolicySpecPtrInput `pulumi:"spec"`
}

PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.

func (PodSecurityPolicyTypeArgs) ElementType

func (PodSecurityPolicyTypeArgs) ElementType() reflect.Type

func (PodSecurityPolicyTypeArgs) ToPodSecurityPolicyTypeOutput

func (i PodSecurityPolicyTypeArgs) ToPodSecurityPolicyTypeOutput() PodSecurityPolicyTypeOutput

func (PodSecurityPolicyTypeArgs) ToPodSecurityPolicyTypeOutputWithContext

func (i PodSecurityPolicyTypeArgs) ToPodSecurityPolicyTypeOutputWithContext(ctx context.Context) PodSecurityPolicyTypeOutput

type PodSecurityPolicyTypeArray

type PodSecurityPolicyTypeArray []PodSecurityPolicyTypeInput

func (PodSecurityPolicyTypeArray) ElementType

func (PodSecurityPolicyTypeArray) ElementType() reflect.Type

func (PodSecurityPolicyTypeArray) ToPodSecurityPolicyTypeArrayOutput

func (i PodSecurityPolicyTypeArray) ToPodSecurityPolicyTypeArrayOutput() PodSecurityPolicyTypeArrayOutput

func (PodSecurityPolicyTypeArray) ToPodSecurityPolicyTypeArrayOutputWithContext

func (i PodSecurityPolicyTypeArray) ToPodSecurityPolicyTypeArrayOutputWithContext(ctx context.Context) PodSecurityPolicyTypeArrayOutput

type PodSecurityPolicyTypeArrayInput

type PodSecurityPolicyTypeArrayInput interface {
	pulumi.Input

	ToPodSecurityPolicyTypeArrayOutput() PodSecurityPolicyTypeArrayOutput
	ToPodSecurityPolicyTypeArrayOutputWithContext(context.Context) PodSecurityPolicyTypeArrayOutput
}

PodSecurityPolicyTypeArrayInput is an input type that accepts PodSecurityPolicyTypeArray and PodSecurityPolicyTypeArrayOutput values. You can construct a concrete instance of `PodSecurityPolicyTypeArrayInput` via:

PodSecurityPolicyTypeArray{ PodSecurityPolicyTypeArgs{...} }

type PodSecurityPolicyTypeArrayOutput

type PodSecurityPolicyTypeArrayOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyTypeArrayOutput) ElementType

func (PodSecurityPolicyTypeArrayOutput) Index

func (PodSecurityPolicyTypeArrayOutput) ToPodSecurityPolicyTypeArrayOutput

func (o PodSecurityPolicyTypeArrayOutput) ToPodSecurityPolicyTypeArrayOutput() PodSecurityPolicyTypeArrayOutput

func (PodSecurityPolicyTypeArrayOutput) ToPodSecurityPolicyTypeArrayOutputWithContext

func (o PodSecurityPolicyTypeArrayOutput) ToPodSecurityPolicyTypeArrayOutputWithContext(ctx context.Context) PodSecurityPolicyTypeArrayOutput

type PodSecurityPolicyTypeInput

type PodSecurityPolicyTypeInput interface {
	pulumi.Input

	ToPodSecurityPolicyTypeOutput() PodSecurityPolicyTypeOutput
	ToPodSecurityPolicyTypeOutputWithContext(context.Context) PodSecurityPolicyTypeOutput
}

PodSecurityPolicyTypeInput is an input type that accepts PodSecurityPolicyTypeArgs and PodSecurityPolicyTypeOutput values. You can construct a concrete instance of `PodSecurityPolicyTypeInput` via:

PodSecurityPolicyTypeArgs{...}

type PodSecurityPolicyTypeOutput

type PodSecurityPolicyTypeOutput struct{ *pulumi.OutputState }

PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.

func (PodSecurityPolicyTypeOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodSecurityPolicyTypeOutput) ElementType

func (PodSecurityPolicyTypeOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodSecurityPolicyTypeOutput) Spec

spec defines the policy enforced.

func (PodSecurityPolicyTypeOutput) ToPodSecurityPolicyTypeOutput

func (o PodSecurityPolicyTypeOutput) ToPodSecurityPolicyTypeOutput() PodSecurityPolicyTypeOutput

func (PodSecurityPolicyTypeOutput) ToPodSecurityPolicyTypeOutputWithContext

func (o PodSecurityPolicyTypeOutput) ToPodSecurityPolicyTypeOutputWithContext(ctx context.Context) PodSecurityPolicyTypeOutput

type RunAsGroupStrategyOptions

type RunAsGroupStrategyOptions struct {
	// ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRange `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
	Rule string `pulumi:"rule"`
}

RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.

type RunAsGroupStrategyOptionsArgs

type RunAsGroupStrategyOptionsArgs struct {
	// ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangeArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
	Rule pulumi.StringInput `pulumi:"rule"`
}

RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.

func (RunAsGroupStrategyOptionsArgs) ElementType

func (RunAsGroupStrategyOptionsArgs) ToRunAsGroupStrategyOptionsOutput

func (i RunAsGroupStrategyOptionsArgs) ToRunAsGroupStrategyOptionsOutput() RunAsGroupStrategyOptionsOutput

func (RunAsGroupStrategyOptionsArgs) ToRunAsGroupStrategyOptionsOutputWithContext

func (i RunAsGroupStrategyOptionsArgs) ToRunAsGroupStrategyOptionsOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsOutput

func (RunAsGroupStrategyOptionsArgs) ToRunAsGroupStrategyOptionsPtrOutput

func (i RunAsGroupStrategyOptionsArgs) ToRunAsGroupStrategyOptionsPtrOutput() RunAsGroupStrategyOptionsPtrOutput

func (RunAsGroupStrategyOptionsArgs) ToRunAsGroupStrategyOptionsPtrOutputWithContext

func (i RunAsGroupStrategyOptionsArgs) ToRunAsGroupStrategyOptionsPtrOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPtrOutput

type RunAsGroupStrategyOptionsInput

type RunAsGroupStrategyOptionsInput interface {
	pulumi.Input

	ToRunAsGroupStrategyOptionsOutput() RunAsGroupStrategyOptionsOutput
	ToRunAsGroupStrategyOptionsOutputWithContext(context.Context) RunAsGroupStrategyOptionsOutput
}

RunAsGroupStrategyOptionsInput is an input type that accepts RunAsGroupStrategyOptionsArgs and RunAsGroupStrategyOptionsOutput values. You can construct a concrete instance of `RunAsGroupStrategyOptionsInput` via:

RunAsGroupStrategyOptionsArgs{...}

type RunAsGroupStrategyOptionsOutput

type RunAsGroupStrategyOptionsOutput struct{ *pulumi.OutputState }

RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.

func (RunAsGroupStrategyOptionsOutput) ElementType

func (RunAsGroupStrategyOptionsOutput) Ranges

ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.

func (RunAsGroupStrategyOptionsOutput) Rule

rule is the strategy that will dictate the allowable RunAsGroup values that may be set.

func (RunAsGroupStrategyOptionsOutput) ToRunAsGroupStrategyOptionsOutput

func (o RunAsGroupStrategyOptionsOutput) ToRunAsGroupStrategyOptionsOutput() RunAsGroupStrategyOptionsOutput

func (RunAsGroupStrategyOptionsOutput) ToRunAsGroupStrategyOptionsOutputWithContext

func (o RunAsGroupStrategyOptionsOutput) ToRunAsGroupStrategyOptionsOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsOutput

func (RunAsGroupStrategyOptionsOutput) ToRunAsGroupStrategyOptionsPtrOutput

func (o RunAsGroupStrategyOptionsOutput) ToRunAsGroupStrategyOptionsPtrOutput() RunAsGroupStrategyOptionsPtrOutput

func (RunAsGroupStrategyOptionsOutput) ToRunAsGroupStrategyOptionsPtrOutputWithContext

func (o RunAsGroupStrategyOptionsOutput) ToRunAsGroupStrategyOptionsPtrOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPtrOutput

type RunAsGroupStrategyOptionsPatch added in v3.20.0

type RunAsGroupStrategyOptionsPatch struct {
	// ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRangePatch `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
	Rule *string `pulumi:"rule"`
}

RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.

type RunAsGroupStrategyOptionsPatchArgs added in v3.20.0

type RunAsGroupStrategyOptionsPatchArgs struct {
	// ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangePatchArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
}

RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.

func (RunAsGroupStrategyOptionsPatchArgs) ElementType added in v3.20.0

func (RunAsGroupStrategyOptionsPatchArgs) ToRunAsGroupStrategyOptionsPatchOutput added in v3.20.0

func (i RunAsGroupStrategyOptionsPatchArgs) ToRunAsGroupStrategyOptionsPatchOutput() RunAsGroupStrategyOptionsPatchOutput

func (RunAsGroupStrategyOptionsPatchArgs) ToRunAsGroupStrategyOptionsPatchOutputWithContext added in v3.20.0

func (i RunAsGroupStrategyOptionsPatchArgs) ToRunAsGroupStrategyOptionsPatchOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPatchOutput

func (RunAsGroupStrategyOptionsPatchArgs) ToRunAsGroupStrategyOptionsPatchPtrOutput added in v3.20.0

func (i RunAsGroupStrategyOptionsPatchArgs) ToRunAsGroupStrategyOptionsPatchPtrOutput() RunAsGroupStrategyOptionsPatchPtrOutput

func (RunAsGroupStrategyOptionsPatchArgs) ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext added in v3.20.0

func (i RunAsGroupStrategyOptionsPatchArgs) ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPatchPtrOutput

type RunAsGroupStrategyOptionsPatchInput added in v3.20.0

type RunAsGroupStrategyOptionsPatchInput interface {
	pulumi.Input

	ToRunAsGroupStrategyOptionsPatchOutput() RunAsGroupStrategyOptionsPatchOutput
	ToRunAsGroupStrategyOptionsPatchOutputWithContext(context.Context) RunAsGroupStrategyOptionsPatchOutput
}

RunAsGroupStrategyOptionsPatchInput is an input type that accepts RunAsGroupStrategyOptionsPatchArgs and RunAsGroupStrategyOptionsPatchOutput values. You can construct a concrete instance of `RunAsGroupStrategyOptionsPatchInput` via:

RunAsGroupStrategyOptionsPatchArgs{...}

type RunAsGroupStrategyOptionsPatchOutput added in v3.20.0

type RunAsGroupStrategyOptionsPatchOutput struct{ *pulumi.OutputState }

RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.

func (RunAsGroupStrategyOptionsPatchOutput) ElementType added in v3.20.0

func (RunAsGroupStrategyOptionsPatchOutput) Ranges added in v3.20.0

ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.

func (RunAsGroupStrategyOptionsPatchOutput) Rule added in v3.20.0

rule is the strategy that will dictate the allowable RunAsGroup values that may be set.

func (RunAsGroupStrategyOptionsPatchOutput) ToRunAsGroupStrategyOptionsPatchOutput added in v3.20.0

func (o RunAsGroupStrategyOptionsPatchOutput) ToRunAsGroupStrategyOptionsPatchOutput() RunAsGroupStrategyOptionsPatchOutput

func (RunAsGroupStrategyOptionsPatchOutput) ToRunAsGroupStrategyOptionsPatchOutputWithContext added in v3.20.0

func (o RunAsGroupStrategyOptionsPatchOutput) ToRunAsGroupStrategyOptionsPatchOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPatchOutput

func (RunAsGroupStrategyOptionsPatchOutput) ToRunAsGroupStrategyOptionsPatchPtrOutput added in v3.20.0

func (o RunAsGroupStrategyOptionsPatchOutput) ToRunAsGroupStrategyOptionsPatchPtrOutput() RunAsGroupStrategyOptionsPatchPtrOutput

func (RunAsGroupStrategyOptionsPatchOutput) ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext added in v3.20.0

func (o RunAsGroupStrategyOptionsPatchOutput) ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPatchPtrOutput

type RunAsGroupStrategyOptionsPatchPtrInput added in v3.20.0

type RunAsGroupStrategyOptionsPatchPtrInput interface {
	pulumi.Input

	ToRunAsGroupStrategyOptionsPatchPtrOutput() RunAsGroupStrategyOptionsPatchPtrOutput
	ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext(context.Context) RunAsGroupStrategyOptionsPatchPtrOutput
}

RunAsGroupStrategyOptionsPatchPtrInput is an input type that accepts RunAsGroupStrategyOptionsPatchArgs, RunAsGroupStrategyOptionsPatchPtr and RunAsGroupStrategyOptionsPatchPtrOutput values. You can construct a concrete instance of `RunAsGroupStrategyOptionsPatchPtrInput` via:

        RunAsGroupStrategyOptionsPatchArgs{...}

or:

        nil

type RunAsGroupStrategyOptionsPatchPtrOutput added in v3.20.0

type RunAsGroupStrategyOptionsPatchPtrOutput struct{ *pulumi.OutputState }

func (RunAsGroupStrategyOptionsPatchPtrOutput) Elem added in v3.20.0

func (RunAsGroupStrategyOptionsPatchPtrOutput) ElementType added in v3.20.0

func (RunAsGroupStrategyOptionsPatchPtrOutput) Ranges added in v3.20.0

ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.

func (RunAsGroupStrategyOptionsPatchPtrOutput) Rule added in v3.20.0

rule is the strategy that will dictate the allowable RunAsGroup values that may be set.

func (RunAsGroupStrategyOptionsPatchPtrOutput) ToRunAsGroupStrategyOptionsPatchPtrOutput added in v3.20.0

func (o RunAsGroupStrategyOptionsPatchPtrOutput) ToRunAsGroupStrategyOptionsPatchPtrOutput() RunAsGroupStrategyOptionsPatchPtrOutput

func (RunAsGroupStrategyOptionsPatchPtrOutput) ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext added in v3.20.0

func (o RunAsGroupStrategyOptionsPatchPtrOutput) ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPatchPtrOutput

type RunAsGroupStrategyOptionsPtrInput

type RunAsGroupStrategyOptionsPtrInput interface {
	pulumi.Input

	ToRunAsGroupStrategyOptionsPtrOutput() RunAsGroupStrategyOptionsPtrOutput
	ToRunAsGroupStrategyOptionsPtrOutputWithContext(context.Context) RunAsGroupStrategyOptionsPtrOutput
}

RunAsGroupStrategyOptionsPtrInput is an input type that accepts RunAsGroupStrategyOptionsArgs, RunAsGroupStrategyOptionsPtr and RunAsGroupStrategyOptionsPtrOutput values. You can construct a concrete instance of `RunAsGroupStrategyOptionsPtrInput` via:

        RunAsGroupStrategyOptionsArgs{...}

or:

        nil

type RunAsGroupStrategyOptionsPtrOutput

type RunAsGroupStrategyOptionsPtrOutput struct{ *pulumi.OutputState }

func (RunAsGroupStrategyOptionsPtrOutput) Elem

func (RunAsGroupStrategyOptionsPtrOutput) ElementType

func (RunAsGroupStrategyOptionsPtrOutput) Ranges

ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.

func (RunAsGroupStrategyOptionsPtrOutput) Rule

rule is the strategy that will dictate the allowable RunAsGroup values that may be set.

func (RunAsGroupStrategyOptionsPtrOutput) ToRunAsGroupStrategyOptionsPtrOutput

func (o RunAsGroupStrategyOptionsPtrOutput) ToRunAsGroupStrategyOptionsPtrOutput() RunAsGroupStrategyOptionsPtrOutput

func (RunAsGroupStrategyOptionsPtrOutput) ToRunAsGroupStrategyOptionsPtrOutputWithContext

func (o RunAsGroupStrategyOptionsPtrOutput) ToRunAsGroupStrategyOptionsPtrOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPtrOutput

type RunAsUserStrategyOptions

type RunAsUserStrategyOptions struct {
	// ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRange `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsUser values that may be set.
	Rule string `pulumi:"rule"`
}

RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.

type RunAsUserStrategyOptionsArgs

type RunAsUserStrategyOptionsArgs struct {
	// ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangeArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsUser values that may be set.
	Rule pulumi.StringInput `pulumi:"rule"`
}

RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.

func (RunAsUserStrategyOptionsArgs) ElementType

func (RunAsUserStrategyOptionsArgs) ToRunAsUserStrategyOptionsOutput

func (i RunAsUserStrategyOptionsArgs) ToRunAsUserStrategyOptionsOutput() RunAsUserStrategyOptionsOutput

func (RunAsUserStrategyOptionsArgs) ToRunAsUserStrategyOptionsOutputWithContext

func (i RunAsUserStrategyOptionsArgs) ToRunAsUserStrategyOptionsOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsOutput

func (RunAsUserStrategyOptionsArgs) ToRunAsUserStrategyOptionsPtrOutput

func (i RunAsUserStrategyOptionsArgs) ToRunAsUserStrategyOptionsPtrOutput() RunAsUserStrategyOptionsPtrOutput

func (RunAsUserStrategyOptionsArgs) ToRunAsUserStrategyOptionsPtrOutputWithContext

func (i RunAsUserStrategyOptionsArgs) ToRunAsUserStrategyOptionsPtrOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPtrOutput

type RunAsUserStrategyOptionsInput

type RunAsUserStrategyOptionsInput interface {
	pulumi.Input

	ToRunAsUserStrategyOptionsOutput() RunAsUserStrategyOptionsOutput
	ToRunAsUserStrategyOptionsOutputWithContext(context.Context) RunAsUserStrategyOptionsOutput
}

RunAsUserStrategyOptionsInput is an input type that accepts RunAsUserStrategyOptionsArgs and RunAsUserStrategyOptionsOutput values. You can construct a concrete instance of `RunAsUserStrategyOptionsInput` via:

RunAsUserStrategyOptionsArgs{...}

type RunAsUserStrategyOptionsOutput

type RunAsUserStrategyOptionsOutput struct{ *pulumi.OutputState }

RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.

func (RunAsUserStrategyOptionsOutput) ElementType

func (RunAsUserStrategyOptionsOutput) Ranges

ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.

func (RunAsUserStrategyOptionsOutput) Rule

rule is the strategy that will dictate the allowable RunAsUser values that may be set.

func (RunAsUserStrategyOptionsOutput) ToRunAsUserStrategyOptionsOutput

func (o RunAsUserStrategyOptionsOutput) ToRunAsUserStrategyOptionsOutput() RunAsUserStrategyOptionsOutput

func (RunAsUserStrategyOptionsOutput) ToRunAsUserStrategyOptionsOutputWithContext

func (o RunAsUserStrategyOptionsOutput) ToRunAsUserStrategyOptionsOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsOutput

func (RunAsUserStrategyOptionsOutput) ToRunAsUserStrategyOptionsPtrOutput

func (o RunAsUserStrategyOptionsOutput) ToRunAsUserStrategyOptionsPtrOutput() RunAsUserStrategyOptionsPtrOutput

func (RunAsUserStrategyOptionsOutput) ToRunAsUserStrategyOptionsPtrOutputWithContext

func (o RunAsUserStrategyOptionsOutput) ToRunAsUserStrategyOptionsPtrOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPtrOutput

type RunAsUserStrategyOptionsPatch added in v3.20.0

type RunAsUserStrategyOptionsPatch struct {
	// ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRangePatch `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsUser values that may be set.
	Rule *string `pulumi:"rule"`
}

RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.

type RunAsUserStrategyOptionsPatchArgs added in v3.20.0

type RunAsUserStrategyOptionsPatchArgs struct {
	// ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangePatchArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsUser values that may be set.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
}

RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.

func (RunAsUserStrategyOptionsPatchArgs) ElementType added in v3.20.0

func (RunAsUserStrategyOptionsPatchArgs) ToRunAsUserStrategyOptionsPatchOutput added in v3.20.0

func (i RunAsUserStrategyOptionsPatchArgs) ToRunAsUserStrategyOptionsPatchOutput() RunAsUserStrategyOptionsPatchOutput

func (RunAsUserStrategyOptionsPatchArgs) ToRunAsUserStrategyOptionsPatchOutputWithContext added in v3.20.0

func (i RunAsUserStrategyOptionsPatchArgs) ToRunAsUserStrategyOptionsPatchOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPatchOutput

func (RunAsUserStrategyOptionsPatchArgs) ToRunAsUserStrategyOptionsPatchPtrOutput added in v3.20.0

func (i RunAsUserStrategyOptionsPatchArgs) ToRunAsUserStrategyOptionsPatchPtrOutput() RunAsUserStrategyOptionsPatchPtrOutput

func (RunAsUserStrategyOptionsPatchArgs) ToRunAsUserStrategyOptionsPatchPtrOutputWithContext added in v3.20.0

func (i RunAsUserStrategyOptionsPatchArgs) ToRunAsUserStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPatchPtrOutput

type RunAsUserStrategyOptionsPatchInput added in v3.20.0

type RunAsUserStrategyOptionsPatchInput interface {
	pulumi.Input

	ToRunAsUserStrategyOptionsPatchOutput() RunAsUserStrategyOptionsPatchOutput
	ToRunAsUserStrategyOptionsPatchOutputWithContext(context.Context) RunAsUserStrategyOptionsPatchOutput
}

RunAsUserStrategyOptionsPatchInput is an input type that accepts RunAsUserStrategyOptionsPatchArgs and RunAsUserStrategyOptionsPatchOutput values. You can construct a concrete instance of `RunAsUserStrategyOptionsPatchInput` via:

RunAsUserStrategyOptionsPatchArgs{...}

type RunAsUserStrategyOptionsPatchOutput added in v3.20.0

type RunAsUserStrategyOptionsPatchOutput struct{ *pulumi.OutputState }

RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.

func (RunAsUserStrategyOptionsPatchOutput) ElementType added in v3.20.0

func (RunAsUserStrategyOptionsPatchOutput) Ranges added in v3.20.0

ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.

func (RunAsUserStrategyOptionsPatchOutput) Rule added in v3.20.0

rule is the strategy that will dictate the allowable RunAsUser values that may be set.

func (RunAsUserStrategyOptionsPatchOutput) ToRunAsUserStrategyOptionsPatchOutput added in v3.20.0

func (o RunAsUserStrategyOptionsPatchOutput) ToRunAsUserStrategyOptionsPatchOutput() RunAsUserStrategyOptionsPatchOutput

func (RunAsUserStrategyOptionsPatchOutput) ToRunAsUserStrategyOptionsPatchOutputWithContext added in v3.20.0

func (o RunAsUserStrategyOptionsPatchOutput) ToRunAsUserStrategyOptionsPatchOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPatchOutput

func (RunAsUserStrategyOptionsPatchOutput) ToRunAsUserStrategyOptionsPatchPtrOutput added in v3.20.0

func (o RunAsUserStrategyOptionsPatchOutput) ToRunAsUserStrategyOptionsPatchPtrOutput() RunAsUserStrategyOptionsPatchPtrOutput

func (RunAsUserStrategyOptionsPatchOutput) ToRunAsUserStrategyOptionsPatchPtrOutputWithContext added in v3.20.0

func (o RunAsUserStrategyOptionsPatchOutput) ToRunAsUserStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPatchPtrOutput

type RunAsUserStrategyOptionsPatchPtrInput added in v3.20.0

type RunAsUserStrategyOptionsPatchPtrInput interface {
	pulumi.Input

	ToRunAsUserStrategyOptionsPatchPtrOutput() RunAsUserStrategyOptionsPatchPtrOutput
	ToRunAsUserStrategyOptionsPatchPtrOutputWithContext(context.Context) RunAsUserStrategyOptionsPatchPtrOutput
}

RunAsUserStrategyOptionsPatchPtrInput is an input type that accepts RunAsUserStrategyOptionsPatchArgs, RunAsUserStrategyOptionsPatchPtr and RunAsUserStrategyOptionsPatchPtrOutput values. You can construct a concrete instance of `RunAsUserStrategyOptionsPatchPtrInput` via:

        RunAsUserStrategyOptionsPatchArgs{...}

or:

        nil

type RunAsUserStrategyOptionsPatchPtrOutput added in v3.20.0

type RunAsUserStrategyOptionsPatchPtrOutput struct{ *pulumi.OutputState }

func (RunAsUserStrategyOptionsPatchPtrOutput) Elem added in v3.20.0

func (RunAsUserStrategyOptionsPatchPtrOutput) ElementType added in v3.20.0

func (RunAsUserStrategyOptionsPatchPtrOutput) Ranges added in v3.20.0

ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.

func (RunAsUserStrategyOptionsPatchPtrOutput) Rule added in v3.20.0

rule is the strategy that will dictate the allowable RunAsUser values that may be set.

func (RunAsUserStrategyOptionsPatchPtrOutput) ToRunAsUserStrategyOptionsPatchPtrOutput added in v3.20.0

func (o RunAsUserStrategyOptionsPatchPtrOutput) ToRunAsUserStrategyOptionsPatchPtrOutput() RunAsUserStrategyOptionsPatchPtrOutput

func (RunAsUserStrategyOptionsPatchPtrOutput) ToRunAsUserStrategyOptionsPatchPtrOutputWithContext added in v3.20.0

func (o RunAsUserStrategyOptionsPatchPtrOutput) ToRunAsUserStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPatchPtrOutput

type RunAsUserStrategyOptionsPtrInput

type RunAsUserStrategyOptionsPtrInput interface {
	pulumi.Input

	ToRunAsUserStrategyOptionsPtrOutput() RunAsUserStrategyOptionsPtrOutput
	ToRunAsUserStrategyOptionsPtrOutputWithContext(context.Context) RunAsUserStrategyOptionsPtrOutput
}

RunAsUserStrategyOptionsPtrInput is an input type that accepts RunAsUserStrategyOptionsArgs, RunAsUserStrategyOptionsPtr and RunAsUserStrategyOptionsPtrOutput values. You can construct a concrete instance of `RunAsUserStrategyOptionsPtrInput` via:

        RunAsUserStrategyOptionsArgs{...}

or:

        nil

type RunAsUserStrategyOptionsPtrOutput

type RunAsUserStrategyOptionsPtrOutput struct{ *pulumi.OutputState }

func (RunAsUserStrategyOptionsPtrOutput) Elem

func (RunAsUserStrategyOptionsPtrOutput) ElementType

func (RunAsUserStrategyOptionsPtrOutput) Ranges

ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.

func (RunAsUserStrategyOptionsPtrOutput) Rule

rule is the strategy that will dictate the allowable RunAsUser values that may be set.

func (RunAsUserStrategyOptionsPtrOutput) ToRunAsUserStrategyOptionsPtrOutput

func (o RunAsUserStrategyOptionsPtrOutput) ToRunAsUserStrategyOptionsPtrOutput() RunAsUserStrategyOptionsPtrOutput

func (RunAsUserStrategyOptionsPtrOutput) ToRunAsUserStrategyOptionsPtrOutputWithContext

func (o RunAsUserStrategyOptionsPtrOutput) ToRunAsUserStrategyOptionsPtrOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPtrOutput

type RuntimeClassStrategyOptions

type RuntimeClassStrategyOptions struct {
	// allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
	AllowedRuntimeClassNames []string `pulumi:"allowedRuntimeClassNames"`
	// defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
	DefaultRuntimeClassName *string `pulumi:"defaultRuntimeClassName"`
}

RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.

type RuntimeClassStrategyOptionsArgs

type RuntimeClassStrategyOptionsArgs struct {
	// allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
	AllowedRuntimeClassNames pulumi.StringArrayInput `pulumi:"allowedRuntimeClassNames"`
	// defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
	DefaultRuntimeClassName pulumi.StringPtrInput `pulumi:"defaultRuntimeClassName"`
}

RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.

func (RuntimeClassStrategyOptionsArgs) ElementType

func (RuntimeClassStrategyOptionsArgs) ToRuntimeClassStrategyOptionsOutput

func (i RuntimeClassStrategyOptionsArgs) ToRuntimeClassStrategyOptionsOutput() RuntimeClassStrategyOptionsOutput

func (RuntimeClassStrategyOptionsArgs) ToRuntimeClassStrategyOptionsOutputWithContext

func (i RuntimeClassStrategyOptionsArgs) ToRuntimeClassStrategyOptionsOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsOutput

func (RuntimeClassStrategyOptionsArgs) ToRuntimeClassStrategyOptionsPtrOutput

func (i RuntimeClassStrategyOptionsArgs) ToRuntimeClassStrategyOptionsPtrOutput() RuntimeClassStrategyOptionsPtrOutput

func (RuntimeClassStrategyOptionsArgs) ToRuntimeClassStrategyOptionsPtrOutputWithContext

func (i RuntimeClassStrategyOptionsArgs) ToRuntimeClassStrategyOptionsPtrOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPtrOutput

type RuntimeClassStrategyOptionsInput

type RuntimeClassStrategyOptionsInput interface {
	pulumi.Input

	ToRuntimeClassStrategyOptionsOutput() RuntimeClassStrategyOptionsOutput
	ToRuntimeClassStrategyOptionsOutputWithContext(context.Context) RuntimeClassStrategyOptionsOutput
}

RuntimeClassStrategyOptionsInput is an input type that accepts RuntimeClassStrategyOptionsArgs and RuntimeClassStrategyOptionsOutput values. You can construct a concrete instance of `RuntimeClassStrategyOptionsInput` via:

RuntimeClassStrategyOptionsArgs{...}

type RuntimeClassStrategyOptionsOutput

type RuntimeClassStrategyOptionsOutput struct{ *pulumi.OutputState }

RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.

func (RuntimeClassStrategyOptionsOutput) AllowedRuntimeClassNames

func (o RuntimeClassStrategyOptionsOutput) AllowedRuntimeClassNames() pulumi.StringArrayOutput

allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.

func (RuntimeClassStrategyOptionsOutput) DefaultRuntimeClassName

func (o RuntimeClassStrategyOptionsOutput) DefaultRuntimeClassName() pulumi.StringPtrOutput

defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.

func (RuntimeClassStrategyOptionsOutput) ElementType

func (RuntimeClassStrategyOptionsOutput) ToRuntimeClassStrategyOptionsOutput

func (o RuntimeClassStrategyOptionsOutput) ToRuntimeClassStrategyOptionsOutput() RuntimeClassStrategyOptionsOutput

func (RuntimeClassStrategyOptionsOutput) ToRuntimeClassStrategyOptionsOutputWithContext

func (o RuntimeClassStrategyOptionsOutput) ToRuntimeClassStrategyOptionsOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsOutput

func (RuntimeClassStrategyOptionsOutput) ToRuntimeClassStrategyOptionsPtrOutput

func (o RuntimeClassStrategyOptionsOutput) ToRuntimeClassStrategyOptionsPtrOutput() RuntimeClassStrategyOptionsPtrOutput

func (RuntimeClassStrategyOptionsOutput) ToRuntimeClassStrategyOptionsPtrOutputWithContext

func (o RuntimeClassStrategyOptionsOutput) ToRuntimeClassStrategyOptionsPtrOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPtrOutput

type RuntimeClassStrategyOptionsPatch added in v3.20.0

type RuntimeClassStrategyOptionsPatch struct {
	// allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
	AllowedRuntimeClassNames []string `pulumi:"allowedRuntimeClassNames"`
	// defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
	DefaultRuntimeClassName *string `pulumi:"defaultRuntimeClassName"`
}

RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.

type RuntimeClassStrategyOptionsPatchArgs added in v3.20.0

type RuntimeClassStrategyOptionsPatchArgs struct {
	// allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
	AllowedRuntimeClassNames pulumi.StringArrayInput `pulumi:"allowedRuntimeClassNames"`
	// defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
	DefaultRuntimeClassName pulumi.StringPtrInput `pulumi:"defaultRuntimeClassName"`
}

RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.

func (RuntimeClassStrategyOptionsPatchArgs) ElementType added in v3.20.0

func (RuntimeClassStrategyOptionsPatchArgs) ToRuntimeClassStrategyOptionsPatchOutput added in v3.20.0

func (i RuntimeClassStrategyOptionsPatchArgs) ToRuntimeClassStrategyOptionsPatchOutput() RuntimeClassStrategyOptionsPatchOutput

func (RuntimeClassStrategyOptionsPatchArgs) ToRuntimeClassStrategyOptionsPatchOutputWithContext added in v3.20.0

func (i RuntimeClassStrategyOptionsPatchArgs) ToRuntimeClassStrategyOptionsPatchOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPatchOutput

func (RuntimeClassStrategyOptionsPatchArgs) ToRuntimeClassStrategyOptionsPatchPtrOutput added in v3.20.0

func (i RuntimeClassStrategyOptionsPatchArgs) ToRuntimeClassStrategyOptionsPatchPtrOutput() RuntimeClassStrategyOptionsPatchPtrOutput

func (RuntimeClassStrategyOptionsPatchArgs) ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext added in v3.20.0

func (i RuntimeClassStrategyOptionsPatchArgs) ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPatchPtrOutput

type RuntimeClassStrategyOptionsPatchInput added in v3.20.0

type RuntimeClassStrategyOptionsPatchInput interface {
	pulumi.Input

	ToRuntimeClassStrategyOptionsPatchOutput() RuntimeClassStrategyOptionsPatchOutput
	ToRuntimeClassStrategyOptionsPatchOutputWithContext(context.Context) RuntimeClassStrategyOptionsPatchOutput
}

RuntimeClassStrategyOptionsPatchInput is an input type that accepts RuntimeClassStrategyOptionsPatchArgs and RuntimeClassStrategyOptionsPatchOutput values. You can construct a concrete instance of `RuntimeClassStrategyOptionsPatchInput` via:

RuntimeClassStrategyOptionsPatchArgs{...}

type RuntimeClassStrategyOptionsPatchOutput added in v3.20.0

type RuntimeClassStrategyOptionsPatchOutput struct{ *pulumi.OutputState }

RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.

func (RuntimeClassStrategyOptionsPatchOutput) AllowedRuntimeClassNames added in v3.20.0

allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.

func (RuntimeClassStrategyOptionsPatchOutput) DefaultRuntimeClassName added in v3.20.0

defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.

func (RuntimeClassStrategyOptionsPatchOutput) ElementType added in v3.20.0

func (RuntimeClassStrategyOptionsPatchOutput) ToRuntimeClassStrategyOptionsPatchOutput added in v3.20.0

func (o RuntimeClassStrategyOptionsPatchOutput) ToRuntimeClassStrategyOptionsPatchOutput() RuntimeClassStrategyOptionsPatchOutput

func (RuntimeClassStrategyOptionsPatchOutput) ToRuntimeClassStrategyOptionsPatchOutputWithContext added in v3.20.0

func (o RuntimeClassStrategyOptionsPatchOutput) ToRuntimeClassStrategyOptionsPatchOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPatchOutput

func (RuntimeClassStrategyOptionsPatchOutput) ToRuntimeClassStrategyOptionsPatchPtrOutput added in v3.20.0

func (o RuntimeClassStrategyOptionsPatchOutput) ToRuntimeClassStrategyOptionsPatchPtrOutput() RuntimeClassStrategyOptionsPatchPtrOutput

func (RuntimeClassStrategyOptionsPatchOutput) ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext added in v3.20.0

func (o RuntimeClassStrategyOptionsPatchOutput) ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPatchPtrOutput

type RuntimeClassStrategyOptionsPatchPtrInput added in v3.20.0

type RuntimeClassStrategyOptionsPatchPtrInput interface {
	pulumi.Input

	ToRuntimeClassStrategyOptionsPatchPtrOutput() RuntimeClassStrategyOptionsPatchPtrOutput
	ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext(context.Context) RuntimeClassStrategyOptionsPatchPtrOutput
}

RuntimeClassStrategyOptionsPatchPtrInput is an input type that accepts RuntimeClassStrategyOptionsPatchArgs, RuntimeClassStrategyOptionsPatchPtr and RuntimeClassStrategyOptionsPatchPtrOutput values. You can construct a concrete instance of `RuntimeClassStrategyOptionsPatchPtrInput` via:

        RuntimeClassStrategyOptionsPatchArgs{...}

or:

        nil

type RuntimeClassStrategyOptionsPatchPtrOutput added in v3.20.0

type RuntimeClassStrategyOptionsPatchPtrOutput struct{ *pulumi.OutputState }

func (RuntimeClassStrategyOptionsPatchPtrOutput) AllowedRuntimeClassNames added in v3.20.0

allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.

func (RuntimeClassStrategyOptionsPatchPtrOutput) DefaultRuntimeClassName added in v3.20.0

defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.

func (RuntimeClassStrategyOptionsPatchPtrOutput) Elem added in v3.20.0

func (RuntimeClassStrategyOptionsPatchPtrOutput) ElementType added in v3.20.0

func (RuntimeClassStrategyOptionsPatchPtrOutput) ToRuntimeClassStrategyOptionsPatchPtrOutput added in v3.20.0

func (o RuntimeClassStrategyOptionsPatchPtrOutput) ToRuntimeClassStrategyOptionsPatchPtrOutput() RuntimeClassStrategyOptionsPatchPtrOutput

func (RuntimeClassStrategyOptionsPatchPtrOutput) ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext added in v3.20.0

func (o RuntimeClassStrategyOptionsPatchPtrOutput) ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPatchPtrOutput

type RuntimeClassStrategyOptionsPtrInput

type RuntimeClassStrategyOptionsPtrInput interface {
	pulumi.Input

	ToRuntimeClassStrategyOptionsPtrOutput() RuntimeClassStrategyOptionsPtrOutput
	ToRuntimeClassStrategyOptionsPtrOutputWithContext(context.Context) RuntimeClassStrategyOptionsPtrOutput
}

RuntimeClassStrategyOptionsPtrInput is an input type that accepts RuntimeClassStrategyOptionsArgs, RuntimeClassStrategyOptionsPtr and RuntimeClassStrategyOptionsPtrOutput values. You can construct a concrete instance of `RuntimeClassStrategyOptionsPtrInput` via:

        RuntimeClassStrategyOptionsArgs{...}

or:

        nil

type RuntimeClassStrategyOptionsPtrOutput

type RuntimeClassStrategyOptionsPtrOutput struct{ *pulumi.OutputState }

func (RuntimeClassStrategyOptionsPtrOutput) AllowedRuntimeClassNames

func (o RuntimeClassStrategyOptionsPtrOutput) AllowedRuntimeClassNames() pulumi.StringArrayOutput

allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.

func (RuntimeClassStrategyOptionsPtrOutput) DefaultRuntimeClassName

func (o RuntimeClassStrategyOptionsPtrOutput) DefaultRuntimeClassName() pulumi.StringPtrOutput

defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.

func (RuntimeClassStrategyOptionsPtrOutput) Elem

func (RuntimeClassStrategyOptionsPtrOutput) ElementType

func (RuntimeClassStrategyOptionsPtrOutput) ToRuntimeClassStrategyOptionsPtrOutput

func (o RuntimeClassStrategyOptionsPtrOutput) ToRuntimeClassStrategyOptionsPtrOutput() RuntimeClassStrategyOptionsPtrOutput

func (RuntimeClassStrategyOptionsPtrOutput) ToRuntimeClassStrategyOptionsPtrOutputWithContext

func (o RuntimeClassStrategyOptionsPtrOutput) ToRuntimeClassStrategyOptionsPtrOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPtrOutput

type SELinuxStrategyOptions

type SELinuxStrategyOptions struct {
	// rule is the strategy that will dictate the allowable labels that may be set.
	Rule string `pulumi:"rule"`
	// seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
	SeLinuxOptions *corev1.SELinuxOptions `pulumi:"seLinuxOptions"`
}

SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.

type SELinuxStrategyOptionsArgs

type SELinuxStrategyOptionsArgs struct {
	// rule is the strategy that will dictate the allowable labels that may be set.
	Rule pulumi.StringInput `pulumi:"rule"`
	// seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
	SeLinuxOptions corev1.SELinuxOptionsPtrInput `pulumi:"seLinuxOptions"`
}

SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.

func (SELinuxStrategyOptionsArgs) ElementType

func (SELinuxStrategyOptionsArgs) ElementType() reflect.Type

func (SELinuxStrategyOptionsArgs) ToSELinuxStrategyOptionsOutput

func (i SELinuxStrategyOptionsArgs) ToSELinuxStrategyOptionsOutput() SELinuxStrategyOptionsOutput

func (SELinuxStrategyOptionsArgs) ToSELinuxStrategyOptionsOutputWithContext

func (i SELinuxStrategyOptionsArgs) ToSELinuxStrategyOptionsOutputWithContext(ctx context.Context) SELinuxStrategyOptionsOutput

func (SELinuxStrategyOptionsArgs) ToSELinuxStrategyOptionsPtrOutput

func (i SELinuxStrategyOptionsArgs) ToSELinuxStrategyOptionsPtrOutput() SELinuxStrategyOptionsPtrOutput

func (SELinuxStrategyOptionsArgs) ToSELinuxStrategyOptionsPtrOutputWithContext

func (i SELinuxStrategyOptionsArgs) ToSELinuxStrategyOptionsPtrOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPtrOutput

type SELinuxStrategyOptionsInput

type SELinuxStrategyOptionsInput interface {
	pulumi.Input

	ToSELinuxStrategyOptionsOutput() SELinuxStrategyOptionsOutput
	ToSELinuxStrategyOptionsOutputWithContext(context.Context) SELinuxStrategyOptionsOutput
}

SELinuxStrategyOptionsInput is an input type that accepts SELinuxStrategyOptionsArgs and SELinuxStrategyOptionsOutput values. You can construct a concrete instance of `SELinuxStrategyOptionsInput` via:

SELinuxStrategyOptionsArgs{...}

type SELinuxStrategyOptionsOutput

type SELinuxStrategyOptionsOutput struct{ *pulumi.OutputState }

SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.

func (SELinuxStrategyOptionsOutput) ElementType

func (SELinuxStrategyOptionsOutput) Rule

rule is the strategy that will dictate the allowable labels that may be set.

func (SELinuxStrategyOptionsOutput) SeLinuxOptions

seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/

func (SELinuxStrategyOptionsOutput) ToSELinuxStrategyOptionsOutput

func (o SELinuxStrategyOptionsOutput) ToSELinuxStrategyOptionsOutput() SELinuxStrategyOptionsOutput

func (SELinuxStrategyOptionsOutput) ToSELinuxStrategyOptionsOutputWithContext

func (o SELinuxStrategyOptionsOutput) ToSELinuxStrategyOptionsOutputWithContext(ctx context.Context) SELinuxStrategyOptionsOutput

func (SELinuxStrategyOptionsOutput) ToSELinuxStrategyOptionsPtrOutput

func (o SELinuxStrategyOptionsOutput) ToSELinuxStrategyOptionsPtrOutput() SELinuxStrategyOptionsPtrOutput

func (SELinuxStrategyOptionsOutput) ToSELinuxStrategyOptionsPtrOutputWithContext

func (o SELinuxStrategyOptionsOutput) ToSELinuxStrategyOptionsPtrOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPtrOutput

type SELinuxStrategyOptionsPatch added in v3.20.0

type SELinuxStrategyOptionsPatch struct {
	// rule is the strategy that will dictate the allowable labels that may be set.
	Rule *string `pulumi:"rule"`
	// seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
	SeLinuxOptions *corev1.SELinuxOptionsPatch `pulumi:"seLinuxOptions"`
}

SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.

type SELinuxStrategyOptionsPatchArgs added in v3.20.0

type SELinuxStrategyOptionsPatchArgs struct {
	// rule is the strategy that will dictate the allowable labels that may be set.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
	// seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
	SeLinuxOptions corev1.SELinuxOptionsPatchPtrInput `pulumi:"seLinuxOptions"`
}

SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.

func (SELinuxStrategyOptionsPatchArgs) ElementType added in v3.20.0

func (SELinuxStrategyOptionsPatchArgs) ToSELinuxStrategyOptionsPatchOutput added in v3.20.0

func (i SELinuxStrategyOptionsPatchArgs) ToSELinuxStrategyOptionsPatchOutput() SELinuxStrategyOptionsPatchOutput

func (SELinuxStrategyOptionsPatchArgs) ToSELinuxStrategyOptionsPatchOutputWithContext added in v3.20.0

func (i SELinuxStrategyOptionsPatchArgs) ToSELinuxStrategyOptionsPatchOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPatchOutput

func (SELinuxStrategyOptionsPatchArgs) ToSELinuxStrategyOptionsPatchPtrOutput added in v3.20.0

func (i SELinuxStrategyOptionsPatchArgs) ToSELinuxStrategyOptionsPatchPtrOutput() SELinuxStrategyOptionsPatchPtrOutput

func (SELinuxStrategyOptionsPatchArgs) ToSELinuxStrategyOptionsPatchPtrOutputWithContext added in v3.20.0

func (i SELinuxStrategyOptionsPatchArgs) ToSELinuxStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPatchPtrOutput

type SELinuxStrategyOptionsPatchInput added in v3.20.0

type SELinuxStrategyOptionsPatchInput interface {
	pulumi.Input

	ToSELinuxStrategyOptionsPatchOutput() SELinuxStrategyOptionsPatchOutput
	ToSELinuxStrategyOptionsPatchOutputWithContext(context.Context) SELinuxStrategyOptionsPatchOutput
}

SELinuxStrategyOptionsPatchInput is an input type that accepts SELinuxStrategyOptionsPatchArgs and SELinuxStrategyOptionsPatchOutput values. You can construct a concrete instance of `SELinuxStrategyOptionsPatchInput` via:

SELinuxStrategyOptionsPatchArgs{...}

type SELinuxStrategyOptionsPatchOutput added in v3.20.0

type SELinuxStrategyOptionsPatchOutput struct{ *pulumi.OutputState }

SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.

func (SELinuxStrategyOptionsPatchOutput) ElementType added in v3.20.0

func (SELinuxStrategyOptionsPatchOutput) Rule added in v3.20.0

rule is the strategy that will dictate the allowable labels that may be set.

func (SELinuxStrategyOptionsPatchOutput) SeLinuxOptions added in v3.20.0

seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/

func (SELinuxStrategyOptionsPatchOutput) ToSELinuxStrategyOptionsPatchOutput added in v3.20.0

func (o SELinuxStrategyOptionsPatchOutput) ToSELinuxStrategyOptionsPatchOutput() SELinuxStrategyOptionsPatchOutput

func (SELinuxStrategyOptionsPatchOutput) ToSELinuxStrategyOptionsPatchOutputWithContext added in v3.20.0

func (o SELinuxStrategyOptionsPatchOutput) ToSELinuxStrategyOptionsPatchOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPatchOutput

func (SELinuxStrategyOptionsPatchOutput) ToSELinuxStrategyOptionsPatchPtrOutput added in v3.20.0

func (o SELinuxStrategyOptionsPatchOutput) ToSELinuxStrategyOptionsPatchPtrOutput() SELinuxStrategyOptionsPatchPtrOutput

func (SELinuxStrategyOptionsPatchOutput) ToSELinuxStrategyOptionsPatchPtrOutputWithContext added in v3.20.0

func (o SELinuxStrategyOptionsPatchOutput) ToSELinuxStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPatchPtrOutput

type SELinuxStrategyOptionsPatchPtrInput added in v3.20.0

type SELinuxStrategyOptionsPatchPtrInput interface {
	pulumi.Input

	ToSELinuxStrategyOptionsPatchPtrOutput() SELinuxStrategyOptionsPatchPtrOutput
	ToSELinuxStrategyOptionsPatchPtrOutputWithContext(context.Context) SELinuxStrategyOptionsPatchPtrOutput
}

SELinuxStrategyOptionsPatchPtrInput is an input type that accepts SELinuxStrategyOptionsPatchArgs, SELinuxStrategyOptionsPatchPtr and SELinuxStrategyOptionsPatchPtrOutput values. You can construct a concrete instance of `SELinuxStrategyOptionsPatchPtrInput` via:

        SELinuxStrategyOptionsPatchArgs{...}

or:

        nil

func SELinuxStrategyOptionsPatchPtr added in v3.20.0

type SELinuxStrategyOptionsPatchPtrOutput added in v3.20.0

type SELinuxStrategyOptionsPatchPtrOutput struct{ *pulumi.OutputState }

func (SELinuxStrategyOptionsPatchPtrOutput) Elem added in v3.20.0

func (SELinuxStrategyOptionsPatchPtrOutput) ElementType added in v3.20.0

func (SELinuxStrategyOptionsPatchPtrOutput) Rule added in v3.20.0

rule is the strategy that will dictate the allowable labels that may be set.

func (SELinuxStrategyOptionsPatchPtrOutput) SeLinuxOptions added in v3.20.0

seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/

func (SELinuxStrategyOptionsPatchPtrOutput) ToSELinuxStrategyOptionsPatchPtrOutput added in v3.20.0

func (o SELinuxStrategyOptionsPatchPtrOutput) ToSELinuxStrategyOptionsPatchPtrOutput() SELinuxStrategyOptionsPatchPtrOutput

func (SELinuxStrategyOptionsPatchPtrOutput) ToSELinuxStrategyOptionsPatchPtrOutputWithContext added in v3.20.0

func (o SELinuxStrategyOptionsPatchPtrOutput) ToSELinuxStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPatchPtrOutput

type SELinuxStrategyOptionsPtrInput

type SELinuxStrategyOptionsPtrInput interface {
	pulumi.Input

	ToSELinuxStrategyOptionsPtrOutput() SELinuxStrategyOptionsPtrOutput
	ToSELinuxStrategyOptionsPtrOutputWithContext(context.Context) SELinuxStrategyOptionsPtrOutput
}

SELinuxStrategyOptionsPtrInput is an input type that accepts SELinuxStrategyOptionsArgs, SELinuxStrategyOptionsPtr and SELinuxStrategyOptionsPtrOutput values. You can construct a concrete instance of `SELinuxStrategyOptionsPtrInput` via:

        SELinuxStrategyOptionsArgs{...}

or:

        nil

type SELinuxStrategyOptionsPtrOutput

type SELinuxStrategyOptionsPtrOutput struct{ *pulumi.OutputState }

func (SELinuxStrategyOptionsPtrOutput) Elem

func (SELinuxStrategyOptionsPtrOutput) ElementType

func (SELinuxStrategyOptionsPtrOutput) Rule

rule is the strategy that will dictate the allowable labels that may be set.

func (SELinuxStrategyOptionsPtrOutput) SeLinuxOptions

seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/

func (SELinuxStrategyOptionsPtrOutput) ToSELinuxStrategyOptionsPtrOutput

func (o SELinuxStrategyOptionsPtrOutput) ToSELinuxStrategyOptionsPtrOutput() SELinuxStrategyOptionsPtrOutput

func (SELinuxStrategyOptionsPtrOutput) ToSELinuxStrategyOptionsPtrOutputWithContext

func (o SELinuxStrategyOptionsPtrOutput) ToSELinuxStrategyOptionsPtrOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPtrOutput

type SupplementalGroupsStrategyOptions

type SupplementalGroupsStrategyOptions struct {
	// ranges are the allowed ranges of supplemental groups.  If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRange `pulumi:"ranges"`
	// rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
	Rule *string `pulumi:"rule"`
}

SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.

type SupplementalGroupsStrategyOptionsArgs

type SupplementalGroupsStrategyOptionsArgs struct {
	// ranges are the allowed ranges of supplemental groups.  If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangeArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
}

SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.

func (SupplementalGroupsStrategyOptionsArgs) ElementType

func (SupplementalGroupsStrategyOptionsArgs) ToSupplementalGroupsStrategyOptionsOutput

func (i SupplementalGroupsStrategyOptionsArgs) ToSupplementalGroupsStrategyOptionsOutput() SupplementalGroupsStrategyOptionsOutput

func (SupplementalGroupsStrategyOptionsArgs) ToSupplementalGroupsStrategyOptionsOutputWithContext

func (i SupplementalGroupsStrategyOptionsArgs) ToSupplementalGroupsStrategyOptionsOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsOutput

func (SupplementalGroupsStrategyOptionsArgs) ToSupplementalGroupsStrategyOptionsPtrOutput

func (i SupplementalGroupsStrategyOptionsArgs) ToSupplementalGroupsStrategyOptionsPtrOutput() SupplementalGroupsStrategyOptionsPtrOutput

func (SupplementalGroupsStrategyOptionsArgs) ToSupplementalGroupsStrategyOptionsPtrOutputWithContext

func (i SupplementalGroupsStrategyOptionsArgs) ToSupplementalGroupsStrategyOptionsPtrOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPtrOutput

type SupplementalGroupsStrategyOptionsInput

type SupplementalGroupsStrategyOptionsInput interface {
	pulumi.Input

	ToSupplementalGroupsStrategyOptionsOutput() SupplementalGroupsStrategyOptionsOutput
	ToSupplementalGroupsStrategyOptionsOutputWithContext(context.Context) SupplementalGroupsStrategyOptionsOutput
}

SupplementalGroupsStrategyOptionsInput is an input type that accepts SupplementalGroupsStrategyOptionsArgs and SupplementalGroupsStrategyOptionsOutput values. You can construct a concrete instance of `SupplementalGroupsStrategyOptionsInput` via:

SupplementalGroupsStrategyOptionsArgs{...}

type SupplementalGroupsStrategyOptionsOutput

type SupplementalGroupsStrategyOptionsOutput struct{ *pulumi.OutputState }

SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.

func (SupplementalGroupsStrategyOptionsOutput) ElementType

func (SupplementalGroupsStrategyOptionsOutput) Ranges

ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.

func (SupplementalGroupsStrategyOptionsOutput) Rule

rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.

func (SupplementalGroupsStrategyOptionsOutput) ToSupplementalGroupsStrategyOptionsOutput

func (o SupplementalGroupsStrategyOptionsOutput) ToSupplementalGroupsStrategyOptionsOutput() SupplementalGroupsStrategyOptionsOutput

func (SupplementalGroupsStrategyOptionsOutput) ToSupplementalGroupsStrategyOptionsOutputWithContext

func (o SupplementalGroupsStrategyOptionsOutput) ToSupplementalGroupsStrategyOptionsOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsOutput

func (SupplementalGroupsStrategyOptionsOutput) ToSupplementalGroupsStrategyOptionsPtrOutput

func (o SupplementalGroupsStrategyOptionsOutput) ToSupplementalGroupsStrategyOptionsPtrOutput() SupplementalGroupsStrategyOptionsPtrOutput

func (SupplementalGroupsStrategyOptionsOutput) ToSupplementalGroupsStrategyOptionsPtrOutputWithContext

func (o SupplementalGroupsStrategyOptionsOutput) ToSupplementalGroupsStrategyOptionsPtrOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPtrOutput

type SupplementalGroupsStrategyOptionsPatch added in v3.20.0

type SupplementalGroupsStrategyOptionsPatch struct {
	// ranges are the allowed ranges of supplemental groups.  If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRangePatch `pulumi:"ranges"`
	// rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
	Rule *string `pulumi:"rule"`
}

SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.

type SupplementalGroupsStrategyOptionsPatchArgs added in v3.20.0

type SupplementalGroupsStrategyOptionsPatchArgs struct {
	// ranges are the allowed ranges of supplemental groups.  If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangePatchArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
}

SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.

func (SupplementalGroupsStrategyOptionsPatchArgs) ElementType added in v3.20.0

func (SupplementalGroupsStrategyOptionsPatchArgs) ToSupplementalGroupsStrategyOptionsPatchOutput added in v3.20.0

func (i SupplementalGroupsStrategyOptionsPatchArgs) ToSupplementalGroupsStrategyOptionsPatchOutput() SupplementalGroupsStrategyOptionsPatchOutput

func (SupplementalGroupsStrategyOptionsPatchArgs) ToSupplementalGroupsStrategyOptionsPatchOutputWithContext added in v3.20.0

func (i SupplementalGroupsStrategyOptionsPatchArgs) ToSupplementalGroupsStrategyOptionsPatchOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPatchOutput

func (SupplementalGroupsStrategyOptionsPatchArgs) ToSupplementalGroupsStrategyOptionsPatchPtrOutput added in v3.20.0

func (i SupplementalGroupsStrategyOptionsPatchArgs) ToSupplementalGroupsStrategyOptionsPatchPtrOutput() SupplementalGroupsStrategyOptionsPatchPtrOutput

func (SupplementalGroupsStrategyOptionsPatchArgs) ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext added in v3.20.0

func (i SupplementalGroupsStrategyOptionsPatchArgs) ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPatchPtrOutput

type SupplementalGroupsStrategyOptionsPatchInput added in v3.20.0

type SupplementalGroupsStrategyOptionsPatchInput interface {
	pulumi.Input

	ToSupplementalGroupsStrategyOptionsPatchOutput() SupplementalGroupsStrategyOptionsPatchOutput
	ToSupplementalGroupsStrategyOptionsPatchOutputWithContext(context.Context) SupplementalGroupsStrategyOptionsPatchOutput
}

SupplementalGroupsStrategyOptionsPatchInput is an input type that accepts SupplementalGroupsStrategyOptionsPatchArgs and SupplementalGroupsStrategyOptionsPatchOutput values. You can construct a concrete instance of `SupplementalGroupsStrategyOptionsPatchInput` via:

SupplementalGroupsStrategyOptionsPatchArgs{...}

type SupplementalGroupsStrategyOptionsPatchOutput added in v3.20.0

type SupplementalGroupsStrategyOptionsPatchOutput struct{ *pulumi.OutputState }

SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.

func (SupplementalGroupsStrategyOptionsPatchOutput) ElementType added in v3.20.0

func (SupplementalGroupsStrategyOptionsPatchOutput) Ranges added in v3.20.0

ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.

func (SupplementalGroupsStrategyOptionsPatchOutput) Rule added in v3.20.0

rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.

func (SupplementalGroupsStrategyOptionsPatchOutput) ToSupplementalGroupsStrategyOptionsPatchOutput added in v3.20.0

func (o SupplementalGroupsStrategyOptionsPatchOutput) ToSupplementalGroupsStrategyOptionsPatchOutput() SupplementalGroupsStrategyOptionsPatchOutput

func (SupplementalGroupsStrategyOptionsPatchOutput) ToSupplementalGroupsStrategyOptionsPatchOutputWithContext added in v3.20.0

func (o SupplementalGroupsStrategyOptionsPatchOutput) ToSupplementalGroupsStrategyOptionsPatchOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPatchOutput

func (SupplementalGroupsStrategyOptionsPatchOutput) ToSupplementalGroupsStrategyOptionsPatchPtrOutput added in v3.20.0

func (o SupplementalGroupsStrategyOptionsPatchOutput) ToSupplementalGroupsStrategyOptionsPatchPtrOutput() SupplementalGroupsStrategyOptionsPatchPtrOutput

func (SupplementalGroupsStrategyOptionsPatchOutput) ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext added in v3.20.0

func (o SupplementalGroupsStrategyOptionsPatchOutput) ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPatchPtrOutput

type SupplementalGroupsStrategyOptionsPatchPtrInput added in v3.20.0

type SupplementalGroupsStrategyOptionsPatchPtrInput interface {
	pulumi.Input

	ToSupplementalGroupsStrategyOptionsPatchPtrOutput() SupplementalGroupsStrategyOptionsPatchPtrOutput
	ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext(context.Context) SupplementalGroupsStrategyOptionsPatchPtrOutput
}

SupplementalGroupsStrategyOptionsPatchPtrInput is an input type that accepts SupplementalGroupsStrategyOptionsPatchArgs, SupplementalGroupsStrategyOptionsPatchPtr and SupplementalGroupsStrategyOptionsPatchPtrOutput values. You can construct a concrete instance of `SupplementalGroupsStrategyOptionsPatchPtrInput` via:

        SupplementalGroupsStrategyOptionsPatchArgs{...}

or:

        nil

type SupplementalGroupsStrategyOptionsPatchPtrOutput added in v3.20.0

type SupplementalGroupsStrategyOptionsPatchPtrOutput struct{ *pulumi.OutputState }

func (SupplementalGroupsStrategyOptionsPatchPtrOutput) Elem added in v3.20.0

func (SupplementalGroupsStrategyOptionsPatchPtrOutput) ElementType added in v3.20.0

func (SupplementalGroupsStrategyOptionsPatchPtrOutput) Ranges added in v3.20.0

ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.

func (SupplementalGroupsStrategyOptionsPatchPtrOutput) Rule added in v3.20.0

rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.

func (SupplementalGroupsStrategyOptionsPatchPtrOutput) ToSupplementalGroupsStrategyOptionsPatchPtrOutput added in v3.20.0

func (o SupplementalGroupsStrategyOptionsPatchPtrOutput) ToSupplementalGroupsStrategyOptionsPatchPtrOutput() SupplementalGroupsStrategyOptionsPatchPtrOutput

func (SupplementalGroupsStrategyOptionsPatchPtrOutput) ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext added in v3.20.0

func (o SupplementalGroupsStrategyOptionsPatchPtrOutput) ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPatchPtrOutput

type SupplementalGroupsStrategyOptionsPtrInput

type SupplementalGroupsStrategyOptionsPtrInput interface {
	pulumi.Input

	ToSupplementalGroupsStrategyOptionsPtrOutput() SupplementalGroupsStrategyOptionsPtrOutput
	ToSupplementalGroupsStrategyOptionsPtrOutputWithContext(context.Context) SupplementalGroupsStrategyOptionsPtrOutput
}

SupplementalGroupsStrategyOptionsPtrInput is an input type that accepts SupplementalGroupsStrategyOptionsArgs, SupplementalGroupsStrategyOptionsPtr and SupplementalGroupsStrategyOptionsPtrOutput values. You can construct a concrete instance of `SupplementalGroupsStrategyOptionsPtrInput` via:

        SupplementalGroupsStrategyOptionsArgs{...}

or:

        nil

type SupplementalGroupsStrategyOptionsPtrOutput

type SupplementalGroupsStrategyOptionsPtrOutput struct{ *pulumi.OutputState }

func (SupplementalGroupsStrategyOptionsPtrOutput) Elem

func (SupplementalGroupsStrategyOptionsPtrOutput) ElementType

func (SupplementalGroupsStrategyOptionsPtrOutput) Ranges

ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.

func (SupplementalGroupsStrategyOptionsPtrOutput) Rule

rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.

func (SupplementalGroupsStrategyOptionsPtrOutput) ToSupplementalGroupsStrategyOptionsPtrOutput

func (o SupplementalGroupsStrategyOptionsPtrOutput) ToSupplementalGroupsStrategyOptionsPtrOutput() SupplementalGroupsStrategyOptionsPtrOutput

func (SupplementalGroupsStrategyOptionsPtrOutput) ToSupplementalGroupsStrategyOptionsPtrOutputWithContext

func (o SupplementalGroupsStrategyOptionsPtrOutput) ToSupplementalGroupsStrategyOptionsPtrOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPtrOutput

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL