v1beta1

package
v4.11.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Apr 18, 2024 License: Apache-2.0 Imports: 9 Imported by: 2

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type AllowedCSIDriver

type AllowedCSIDriver struct {
	// Name is the registered name of the CSI driver
	Name string `pulumi:"name"`
}

AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.

type AllowedCSIDriverArgs

type AllowedCSIDriverArgs struct {
	// Name is the registered name of the CSI driver
	Name pulumi.StringInput `pulumi:"name"`
}

AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.

func (AllowedCSIDriverArgs) ElementType

func (AllowedCSIDriverArgs) ElementType() reflect.Type

func (AllowedCSIDriverArgs) ToAllowedCSIDriverOutput

func (i AllowedCSIDriverArgs) ToAllowedCSIDriverOutput() AllowedCSIDriverOutput

func (AllowedCSIDriverArgs) ToAllowedCSIDriverOutputWithContext

func (i AllowedCSIDriverArgs) ToAllowedCSIDriverOutputWithContext(ctx context.Context) AllowedCSIDriverOutput

type AllowedCSIDriverArray

type AllowedCSIDriverArray []AllowedCSIDriverInput

func (AllowedCSIDriverArray) ElementType

func (AllowedCSIDriverArray) ElementType() reflect.Type

func (AllowedCSIDriverArray) ToAllowedCSIDriverArrayOutput

func (i AllowedCSIDriverArray) ToAllowedCSIDriverArrayOutput() AllowedCSIDriverArrayOutput

func (AllowedCSIDriverArray) ToAllowedCSIDriverArrayOutputWithContext

func (i AllowedCSIDriverArray) ToAllowedCSIDriverArrayOutputWithContext(ctx context.Context) AllowedCSIDriverArrayOutput

type AllowedCSIDriverArrayInput

type AllowedCSIDriverArrayInput interface {
	pulumi.Input

	ToAllowedCSIDriverArrayOutput() AllowedCSIDriverArrayOutput
	ToAllowedCSIDriverArrayOutputWithContext(context.Context) AllowedCSIDriverArrayOutput
}

AllowedCSIDriverArrayInput is an input type that accepts AllowedCSIDriverArray and AllowedCSIDriverArrayOutput values. You can construct a concrete instance of `AllowedCSIDriverArrayInput` via:

AllowedCSIDriverArray{ AllowedCSIDriverArgs{...} }

type AllowedCSIDriverArrayOutput

type AllowedCSIDriverArrayOutput struct{ *pulumi.OutputState }

func (AllowedCSIDriverArrayOutput) ElementType

func (AllowedCSIDriverArrayOutput) Index

func (AllowedCSIDriverArrayOutput) ToAllowedCSIDriverArrayOutput

func (o AllowedCSIDriverArrayOutput) ToAllowedCSIDriverArrayOutput() AllowedCSIDriverArrayOutput

func (AllowedCSIDriverArrayOutput) ToAllowedCSIDriverArrayOutputWithContext

func (o AllowedCSIDriverArrayOutput) ToAllowedCSIDriverArrayOutputWithContext(ctx context.Context) AllowedCSIDriverArrayOutput

type AllowedCSIDriverInput

type AllowedCSIDriverInput interface {
	pulumi.Input

	ToAllowedCSIDriverOutput() AllowedCSIDriverOutput
	ToAllowedCSIDriverOutputWithContext(context.Context) AllowedCSIDriverOutput
}

AllowedCSIDriverInput is an input type that accepts AllowedCSIDriverArgs and AllowedCSIDriverOutput values. You can construct a concrete instance of `AllowedCSIDriverInput` via:

AllowedCSIDriverArgs{...}

type AllowedCSIDriverOutput

type AllowedCSIDriverOutput struct{ *pulumi.OutputState }

AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.

func (AllowedCSIDriverOutput) ElementType

func (AllowedCSIDriverOutput) ElementType() reflect.Type

func (AllowedCSIDriverOutput) Name

Name is the registered name of the CSI driver

func (AllowedCSIDriverOutput) ToAllowedCSIDriverOutput

func (o AllowedCSIDriverOutput) ToAllowedCSIDriverOutput() AllowedCSIDriverOutput

func (AllowedCSIDriverOutput) ToAllowedCSIDriverOutputWithContext

func (o AllowedCSIDriverOutput) ToAllowedCSIDriverOutputWithContext(ctx context.Context) AllowedCSIDriverOutput

type AllowedCSIDriverPatch

type AllowedCSIDriverPatch struct {
	// Name is the registered name of the CSI driver
	Name *string `pulumi:"name"`
}

AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.

type AllowedCSIDriverPatchArgs

type AllowedCSIDriverPatchArgs struct {
	// Name is the registered name of the CSI driver
	Name pulumi.StringPtrInput `pulumi:"name"`
}

AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.

func (AllowedCSIDriverPatchArgs) ElementType

func (AllowedCSIDriverPatchArgs) ElementType() reflect.Type

func (AllowedCSIDriverPatchArgs) ToAllowedCSIDriverPatchOutput

func (i AllowedCSIDriverPatchArgs) ToAllowedCSIDriverPatchOutput() AllowedCSIDriverPatchOutput

func (AllowedCSIDriverPatchArgs) ToAllowedCSIDriverPatchOutputWithContext

func (i AllowedCSIDriverPatchArgs) ToAllowedCSIDriverPatchOutputWithContext(ctx context.Context) AllowedCSIDriverPatchOutput

type AllowedCSIDriverPatchArray

type AllowedCSIDriverPatchArray []AllowedCSIDriverPatchInput

func (AllowedCSIDriverPatchArray) ElementType

func (AllowedCSIDriverPatchArray) ElementType() reflect.Type

func (AllowedCSIDriverPatchArray) ToAllowedCSIDriverPatchArrayOutput

func (i AllowedCSIDriverPatchArray) ToAllowedCSIDriverPatchArrayOutput() AllowedCSIDriverPatchArrayOutput

func (AllowedCSIDriverPatchArray) ToAllowedCSIDriverPatchArrayOutputWithContext

func (i AllowedCSIDriverPatchArray) ToAllowedCSIDriverPatchArrayOutputWithContext(ctx context.Context) AllowedCSIDriverPatchArrayOutput

type AllowedCSIDriverPatchArrayInput

type AllowedCSIDriverPatchArrayInput interface {
	pulumi.Input

	ToAllowedCSIDriverPatchArrayOutput() AllowedCSIDriverPatchArrayOutput
	ToAllowedCSIDriverPatchArrayOutputWithContext(context.Context) AllowedCSIDriverPatchArrayOutput
}

AllowedCSIDriverPatchArrayInput is an input type that accepts AllowedCSIDriverPatchArray and AllowedCSIDriverPatchArrayOutput values. You can construct a concrete instance of `AllowedCSIDriverPatchArrayInput` via:

AllowedCSIDriverPatchArray{ AllowedCSIDriverPatchArgs{...} }

type AllowedCSIDriverPatchArrayOutput

type AllowedCSIDriverPatchArrayOutput struct{ *pulumi.OutputState }

func (AllowedCSIDriverPatchArrayOutput) ElementType

func (AllowedCSIDriverPatchArrayOutput) Index

func (AllowedCSIDriverPatchArrayOutput) ToAllowedCSIDriverPatchArrayOutput

func (o AllowedCSIDriverPatchArrayOutput) ToAllowedCSIDriverPatchArrayOutput() AllowedCSIDriverPatchArrayOutput

func (AllowedCSIDriverPatchArrayOutput) ToAllowedCSIDriverPatchArrayOutputWithContext

func (o AllowedCSIDriverPatchArrayOutput) ToAllowedCSIDriverPatchArrayOutputWithContext(ctx context.Context) AllowedCSIDriverPatchArrayOutput

type AllowedCSIDriverPatchInput

type AllowedCSIDriverPatchInput interface {
	pulumi.Input

	ToAllowedCSIDriverPatchOutput() AllowedCSIDriverPatchOutput
	ToAllowedCSIDriverPatchOutputWithContext(context.Context) AllowedCSIDriverPatchOutput
}

AllowedCSIDriverPatchInput is an input type that accepts AllowedCSIDriverPatchArgs and AllowedCSIDriverPatchOutput values. You can construct a concrete instance of `AllowedCSIDriverPatchInput` via:

AllowedCSIDriverPatchArgs{...}

type AllowedCSIDriverPatchOutput

type AllowedCSIDriverPatchOutput struct{ *pulumi.OutputState }

AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.

func (AllowedCSIDriverPatchOutput) ElementType

func (AllowedCSIDriverPatchOutput) Name

Name is the registered name of the CSI driver

func (AllowedCSIDriverPatchOutput) ToAllowedCSIDriverPatchOutput

func (o AllowedCSIDriverPatchOutput) ToAllowedCSIDriverPatchOutput() AllowedCSIDriverPatchOutput

func (AllowedCSIDriverPatchOutput) ToAllowedCSIDriverPatchOutputWithContext

func (o AllowedCSIDriverPatchOutput) ToAllowedCSIDriverPatchOutputWithContext(ctx context.Context) AllowedCSIDriverPatchOutput

type AllowedFlexVolume

type AllowedFlexVolume struct {
	// driver is the name of the Flexvolume driver.
	Driver string `pulumi:"driver"`
}

AllowedFlexVolume represents a single Flexvolume that is allowed to be used.

type AllowedFlexVolumeArgs

type AllowedFlexVolumeArgs struct {
	// driver is the name of the Flexvolume driver.
	Driver pulumi.StringInput `pulumi:"driver"`
}

AllowedFlexVolume represents a single Flexvolume that is allowed to be used.

func (AllowedFlexVolumeArgs) ElementType

func (AllowedFlexVolumeArgs) ElementType() reflect.Type

func (AllowedFlexVolumeArgs) ToAllowedFlexVolumeOutput

func (i AllowedFlexVolumeArgs) ToAllowedFlexVolumeOutput() AllowedFlexVolumeOutput

func (AllowedFlexVolumeArgs) ToAllowedFlexVolumeOutputWithContext

func (i AllowedFlexVolumeArgs) ToAllowedFlexVolumeOutputWithContext(ctx context.Context) AllowedFlexVolumeOutput

type AllowedFlexVolumeArray

type AllowedFlexVolumeArray []AllowedFlexVolumeInput

func (AllowedFlexVolumeArray) ElementType

func (AllowedFlexVolumeArray) ElementType() reflect.Type

func (AllowedFlexVolumeArray) ToAllowedFlexVolumeArrayOutput

func (i AllowedFlexVolumeArray) ToAllowedFlexVolumeArrayOutput() AllowedFlexVolumeArrayOutput

func (AllowedFlexVolumeArray) ToAllowedFlexVolumeArrayOutputWithContext

func (i AllowedFlexVolumeArray) ToAllowedFlexVolumeArrayOutputWithContext(ctx context.Context) AllowedFlexVolumeArrayOutput

type AllowedFlexVolumeArrayInput

type AllowedFlexVolumeArrayInput interface {
	pulumi.Input

	ToAllowedFlexVolumeArrayOutput() AllowedFlexVolumeArrayOutput
	ToAllowedFlexVolumeArrayOutputWithContext(context.Context) AllowedFlexVolumeArrayOutput
}

AllowedFlexVolumeArrayInput is an input type that accepts AllowedFlexVolumeArray and AllowedFlexVolumeArrayOutput values. You can construct a concrete instance of `AllowedFlexVolumeArrayInput` via:

AllowedFlexVolumeArray{ AllowedFlexVolumeArgs{...} }

type AllowedFlexVolumeArrayOutput

type AllowedFlexVolumeArrayOutput struct{ *pulumi.OutputState }

func (AllowedFlexVolumeArrayOutput) ElementType

func (AllowedFlexVolumeArrayOutput) Index

func (AllowedFlexVolumeArrayOutput) ToAllowedFlexVolumeArrayOutput

func (o AllowedFlexVolumeArrayOutput) ToAllowedFlexVolumeArrayOutput() AllowedFlexVolumeArrayOutput

func (AllowedFlexVolumeArrayOutput) ToAllowedFlexVolumeArrayOutputWithContext

func (o AllowedFlexVolumeArrayOutput) ToAllowedFlexVolumeArrayOutputWithContext(ctx context.Context) AllowedFlexVolumeArrayOutput

type AllowedFlexVolumeInput

type AllowedFlexVolumeInput interface {
	pulumi.Input

	ToAllowedFlexVolumeOutput() AllowedFlexVolumeOutput
	ToAllowedFlexVolumeOutputWithContext(context.Context) AllowedFlexVolumeOutput
}

AllowedFlexVolumeInput is an input type that accepts AllowedFlexVolumeArgs and AllowedFlexVolumeOutput values. You can construct a concrete instance of `AllowedFlexVolumeInput` via:

AllowedFlexVolumeArgs{...}

type AllowedFlexVolumeOutput

type AllowedFlexVolumeOutput struct{ *pulumi.OutputState }

AllowedFlexVolume represents a single Flexvolume that is allowed to be used.

func (AllowedFlexVolumeOutput) Driver

driver is the name of the Flexvolume driver.

func (AllowedFlexVolumeOutput) ElementType

func (AllowedFlexVolumeOutput) ElementType() reflect.Type

func (AllowedFlexVolumeOutput) ToAllowedFlexVolumeOutput

func (o AllowedFlexVolumeOutput) ToAllowedFlexVolumeOutput() AllowedFlexVolumeOutput

func (AllowedFlexVolumeOutput) ToAllowedFlexVolumeOutputWithContext

func (o AllowedFlexVolumeOutput) ToAllowedFlexVolumeOutputWithContext(ctx context.Context) AllowedFlexVolumeOutput

type AllowedFlexVolumePatch

type AllowedFlexVolumePatch struct {
	// driver is the name of the Flexvolume driver.
	Driver *string `pulumi:"driver"`
}

AllowedFlexVolume represents a single Flexvolume that is allowed to be used.

type AllowedFlexVolumePatchArgs

type AllowedFlexVolumePatchArgs struct {
	// driver is the name of the Flexvolume driver.
	Driver pulumi.StringPtrInput `pulumi:"driver"`
}

AllowedFlexVolume represents a single Flexvolume that is allowed to be used.

func (AllowedFlexVolumePatchArgs) ElementType

func (AllowedFlexVolumePatchArgs) ElementType() reflect.Type

func (AllowedFlexVolumePatchArgs) ToAllowedFlexVolumePatchOutput

func (i AllowedFlexVolumePatchArgs) ToAllowedFlexVolumePatchOutput() AllowedFlexVolumePatchOutput

func (AllowedFlexVolumePatchArgs) ToAllowedFlexVolumePatchOutputWithContext

func (i AllowedFlexVolumePatchArgs) ToAllowedFlexVolumePatchOutputWithContext(ctx context.Context) AllowedFlexVolumePatchOutput

type AllowedFlexVolumePatchArray

type AllowedFlexVolumePatchArray []AllowedFlexVolumePatchInput

func (AllowedFlexVolumePatchArray) ElementType

func (AllowedFlexVolumePatchArray) ToAllowedFlexVolumePatchArrayOutput

func (i AllowedFlexVolumePatchArray) ToAllowedFlexVolumePatchArrayOutput() AllowedFlexVolumePatchArrayOutput

func (AllowedFlexVolumePatchArray) ToAllowedFlexVolumePatchArrayOutputWithContext

func (i AllowedFlexVolumePatchArray) ToAllowedFlexVolumePatchArrayOutputWithContext(ctx context.Context) AllowedFlexVolumePatchArrayOutput

type AllowedFlexVolumePatchArrayInput

type AllowedFlexVolumePatchArrayInput interface {
	pulumi.Input

	ToAllowedFlexVolumePatchArrayOutput() AllowedFlexVolumePatchArrayOutput
	ToAllowedFlexVolumePatchArrayOutputWithContext(context.Context) AllowedFlexVolumePatchArrayOutput
}

AllowedFlexVolumePatchArrayInput is an input type that accepts AllowedFlexVolumePatchArray and AllowedFlexVolumePatchArrayOutput values. You can construct a concrete instance of `AllowedFlexVolumePatchArrayInput` via:

AllowedFlexVolumePatchArray{ AllowedFlexVolumePatchArgs{...} }

type AllowedFlexVolumePatchArrayOutput

type AllowedFlexVolumePatchArrayOutput struct{ *pulumi.OutputState }

func (AllowedFlexVolumePatchArrayOutput) ElementType

func (AllowedFlexVolumePatchArrayOutput) Index

func (AllowedFlexVolumePatchArrayOutput) ToAllowedFlexVolumePatchArrayOutput

func (o AllowedFlexVolumePatchArrayOutput) ToAllowedFlexVolumePatchArrayOutput() AllowedFlexVolumePatchArrayOutput

func (AllowedFlexVolumePatchArrayOutput) ToAllowedFlexVolumePatchArrayOutputWithContext

func (o AllowedFlexVolumePatchArrayOutput) ToAllowedFlexVolumePatchArrayOutputWithContext(ctx context.Context) AllowedFlexVolumePatchArrayOutput

type AllowedFlexVolumePatchInput

type AllowedFlexVolumePatchInput interface {
	pulumi.Input

	ToAllowedFlexVolumePatchOutput() AllowedFlexVolumePatchOutput
	ToAllowedFlexVolumePatchOutputWithContext(context.Context) AllowedFlexVolumePatchOutput
}

AllowedFlexVolumePatchInput is an input type that accepts AllowedFlexVolumePatchArgs and AllowedFlexVolumePatchOutput values. You can construct a concrete instance of `AllowedFlexVolumePatchInput` via:

AllowedFlexVolumePatchArgs{...}

type AllowedFlexVolumePatchOutput

type AllowedFlexVolumePatchOutput struct{ *pulumi.OutputState }

AllowedFlexVolume represents a single Flexvolume that is allowed to be used.

func (AllowedFlexVolumePatchOutput) Driver

driver is the name of the Flexvolume driver.

func (AllowedFlexVolumePatchOutput) ElementType

func (AllowedFlexVolumePatchOutput) ToAllowedFlexVolumePatchOutput

func (o AllowedFlexVolumePatchOutput) ToAllowedFlexVolumePatchOutput() AllowedFlexVolumePatchOutput

func (AllowedFlexVolumePatchOutput) ToAllowedFlexVolumePatchOutputWithContext

func (o AllowedFlexVolumePatchOutput) ToAllowedFlexVolumePatchOutputWithContext(ctx context.Context) AllowedFlexVolumePatchOutput

type AllowedHostPath

type AllowedHostPath struct {
	// pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.
	//
	// Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`
	PathPrefix *string `pulumi:"pathPrefix"`
	// when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
	ReadOnly *bool `pulumi:"readOnly"`
}

AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.

type AllowedHostPathArgs

type AllowedHostPathArgs struct {
	// pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.
	//
	// Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`
	PathPrefix pulumi.StringPtrInput `pulumi:"pathPrefix"`
	// when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
	ReadOnly pulumi.BoolPtrInput `pulumi:"readOnly"`
}

AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.

func (AllowedHostPathArgs) ElementType

func (AllowedHostPathArgs) ElementType() reflect.Type

func (AllowedHostPathArgs) ToAllowedHostPathOutput

func (i AllowedHostPathArgs) ToAllowedHostPathOutput() AllowedHostPathOutput

func (AllowedHostPathArgs) ToAllowedHostPathOutputWithContext

func (i AllowedHostPathArgs) ToAllowedHostPathOutputWithContext(ctx context.Context) AllowedHostPathOutput

type AllowedHostPathArray

type AllowedHostPathArray []AllowedHostPathInput

func (AllowedHostPathArray) ElementType

func (AllowedHostPathArray) ElementType() reflect.Type

func (AllowedHostPathArray) ToAllowedHostPathArrayOutput

func (i AllowedHostPathArray) ToAllowedHostPathArrayOutput() AllowedHostPathArrayOutput

func (AllowedHostPathArray) ToAllowedHostPathArrayOutputWithContext

func (i AllowedHostPathArray) ToAllowedHostPathArrayOutputWithContext(ctx context.Context) AllowedHostPathArrayOutput

type AllowedHostPathArrayInput

type AllowedHostPathArrayInput interface {
	pulumi.Input

	ToAllowedHostPathArrayOutput() AllowedHostPathArrayOutput
	ToAllowedHostPathArrayOutputWithContext(context.Context) AllowedHostPathArrayOutput
}

AllowedHostPathArrayInput is an input type that accepts AllowedHostPathArray and AllowedHostPathArrayOutput values. You can construct a concrete instance of `AllowedHostPathArrayInput` via:

AllowedHostPathArray{ AllowedHostPathArgs{...} }

type AllowedHostPathArrayOutput

type AllowedHostPathArrayOutput struct{ *pulumi.OutputState }

func (AllowedHostPathArrayOutput) ElementType

func (AllowedHostPathArrayOutput) ElementType() reflect.Type

func (AllowedHostPathArrayOutput) Index

func (AllowedHostPathArrayOutput) ToAllowedHostPathArrayOutput

func (o AllowedHostPathArrayOutput) ToAllowedHostPathArrayOutput() AllowedHostPathArrayOutput

func (AllowedHostPathArrayOutput) ToAllowedHostPathArrayOutputWithContext

func (o AllowedHostPathArrayOutput) ToAllowedHostPathArrayOutputWithContext(ctx context.Context) AllowedHostPathArrayOutput

type AllowedHostPathInput

type AllowedHostPathInput interface {
	pulumi.Input

	ToAllowedHostPathOutput() AllowedHostPathOutput
	ToAllowedHostPathOutputWithContext(context.Context) AllowedHostPathOutput
}

AllowedHostPathInput is an input type that accepts AllowedHostPathArgs and AllowedHostPathOutput values. You can construct a concrete instance of `AllowedHostPathInput` via:

AllowedHostPathArgs{...}

type AllowedHostPathOutput

type AllowedHostPathOutput struct{ *pulumi.OutputState }

AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.

func (AllowedHostPathOutput) ElementType

func (AllowedHostPathOutput) ElementType() reflect.Type

func (AllowedHostPathOutput) PathPrefix

pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.

Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`

func (AllowedHostPathOutput) ReadOnly

when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.

func (AllowedHostPathOutput) ToAllowedHostPathOutput

func (o AllowedHostPathOutput) ToAllowedHostPathOutput() AllowedHostPathOutput

func (AllowedHostPathOutput) ToAllowedHostPathOutputWithContext

func (o AllowedHostPathOutput) ToAllowedHostPathOutputWithContext(ctx context.Context) AllowedHostPathOutput

type AllowedHostPathPatch

type AllowedHostPathPatch struct {
	// pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.
	//
	// Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`
	PathPrefix *string `pulumi:"pathPrefix"`
	// when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
	ReadOnly *bool `pulumi:"readOnly"`
}

AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.

type AllowedHostPathPatchArgs

type AllowedHostPathPatchArgs struct {
	// pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.
	//
	// Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`
	PathPrefix pulumi.StringPtrInput `pulumi:"pathPrefix"`
	// when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
	ReadOnly pulumi.BoolPtrInput `pulumi:"readOnly"`
}

AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.

func (AllowedHostPathPatchArgs) ElementType

func (AllowedHostPathPatchArgs) ElementType() reflect.Type

func (AllowedHostPathPatchArgs) ToAllowedHostPathPatchOutput

func (i AllowedHostPathPatchArgs) ToAllowedHostPathPatchOutput() AllowedHostPathPatchOutput

func (AllowedHostPathPatchArgs) ToAllowedHostPathPatchOutputWithContext

func (i AllowedHostPathPatchArgs) ToAllowedHostPathPatchOutputWithContext(ctx context.Context) AllowedHostPathPatchOutput

type AllowedHostPathPatchArray

type AllowedHostPathPatchArray []AllowedHostPathPatchInput

func (AllowedHostPathPatchArray) ElementType

func (AllowedHostPathPatchArray) ElementType() reflect.Type

func (AllowedHostPathPatchArray) ToAllowedHostPathPatchArrayOutput

func (i AllowedHostPathPatchArray) ToAllowedHostPathPatchArrayOutput() AllowedHostPathPatchArrayOutput

func (AllowedHostPathPatchArray) ToAllowedHostPathPatchArrayOutputWithContext

func (i AllowedHostPathPatchArray) ToAllowedHostPathPatchArrayOutputWithContext(ctx context.Context) AllowedHostPathPatchArrayOutput

type AllowedHostPathPatchArrayInput

type AllowedHostPathPatchArrayInput interface {
	pulumi.Input

	ToAllowedHostPathPatchArrayOutput() AllowedHostPathPatchArrayOutput
	ToAllowedHostPathPatchArrayOutputWithContext(context.Context) AllowedHostPathPatchArrayOutput
}

AllowedHostPathPatchArrayInput is an input type that accepts AllowedHostPathPatchArray and AllowedHostPathPatchArrayOutput values. You can construct a concrete instance of `AllowedHostPathPatchArrayInput` via:

AllowedHostPathPatchArray{ AllowedHostPathPatchArgs{...} }

type AllowedHostPathPatchArrayOutput

type AllowedHostPathPatchArrayOutput struct{ *pulumi.OutputState }

func (AllowedHostPathPatchArrayOutput) ElementType

func (AllowedHostPathPatchArrayOutput) Index

func (AllowedHostPathPatchArrayOutput) ToAllowedHostPathPatchArrayOutput

func (o AllowedHostPathPatchArrayOutput) ToAllowedHostPathPatchArrayOutput() AllowedHostPathPatchArrayOutput

func (AllowedHostPathPatchArrayOutput) ToAllowedHostPathPatchArrayOutputWithContext

func (o AllowedHostPathPatchArrayOutput) ToAllowedHostPathPatchArrayOutputWithContext(ctx context.Context) AllowedHostPathPatchArrayOutput

type AllowedHostPathPatchInput

type AllowedHostPathPatchInput interface {
	pulumi.Input

	ToAllowedHostPathPatchOutput() AllowedHostPathPatchOutput
	ToAllowedHostPathPatchOutputWithContext(context.Context) AllowedHostPathPatchOutput
}

AllowedHostPathPatchInput is an input type that accepts AllowedHostPathPatchArgs and AllowedHostPathPatchOutput values. You can construct a concrete instance of `AllowedHostPathPatchInput` via:

AllowedHostPathPatchArgs{...}

type AllowedHostPathPatchOutput

type AllowedHostPathPatchOutput struct{ *pulumi.OutputState }

AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.

func (AllowedHostPathPatchOutput) ElementType

func (AllowedHostPathPatchOutput) ElementType() reflect.Type

func (AllowedHostPathPatchOutput) PathPrefix

pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.

Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`

func (AllowedHostPathPatchOutput) ReadOnly

when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.

func (AllowedHostPathPatchOutput) ToAllowedHostPathPatchOutput

func (o AllowedHostPathPatchOutput) ToAllowedHostPathPatchOutput() AllowedHostPathPatchOutput

func (AllowedHostPathPatchOutput) ToAllowedHostPathPatchOutputWithContext

func (o AllowedHostPathPatchOutput) ToAllowedHostPathPatchOutputWithContext(ctx context.Context) AllowedHostPathPatchOutput

type Eviction

type Eviction struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// DeleteOptions may be provided
	DeleteOptions *metav1.DeleteOptions `pulumi:"deleteOptions"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// ObjectMeta describes the pod that is being evicted.
	Metadata *metav1.ObjectMeta `pulumi:"metadata"`
}

Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod. A request to cause such an eviction is created by POSTing to .../pods/<pod name>/evictions.

type EvictionArgs

type EvictionArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// DeleteOptions may be provided
	DeleteOptions metav1.DeleteOptionsPtrInput `pulumi:"deleteOptions"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// ObjectMeta describes the pod that is being evicted.
	Metadata metav1.ObjectMetaPtrInput `pulumi:"metadata"`
}

Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod. A request to cause such an eviction is created by POSTing to .../pods/<pod name>/evictions.

func (EvictionArgs) ElementType

func (EvictionArgs) ElementType() reflect.Type

func (EvictionArgs) ToEvictionOutput

func (i EvictionArgs) ToEvictionOutput() EvictionOutput

func (EvictionArgs) ToEvictionOutputWithContext

func (i EvictionArgs) ToEvictionOutputWithContext(ctx context.Context) EvictionOutput

type EvictionInput

type EvictionInput interface {
	pulumi.Input

	ToEvictionOutput() EvictionOutput
	ToEvictionOutputWithContext(context.Context) EvictionOutput
}

EvictionInput is an input type that accepts EvictionArgs and EvictionOutput values. You can construct a concrete instance of `EvictionInput` via:

EvictionArgs{...}

type EvictionOutput

type EvictionOutput struct{ *pulumi.OutputState }

Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod. A request to cause such an eviction is created by POSTing to .../pods/<pod name>/evictions.

func (EvictionOutput) ApiVersion

func (o EvictionOutput) ApiVersion() pulumi.StringPtrOutput

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (EvictionOutput) DeleteOptions

func (o EvictionOutput) DeleteOptions() metav1.DeleteOptionsPtrOutput

DeleteOptions may be provided

func (EvictionOutput) ElementType

func (EvictionOutput) ElementType() reflect.Type

func (EvictionOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (EvictionOutput) Metadata

ObjectMeta describes the pod that is being evicted.

func (EvictionOutput) ToEvictionOutput

func (o EvictionOutput) ToEvictionOutput() EvictionOutput

func (EvictionOutput) ToEvictionOutputWithContext

func (o EvictionOutput) ToEvictionOutputWithContext(ctx context.Context) EvictionOutput

type EvictionPatch

type EvictionPatch struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// DeleteOptions may be provided
	DeleteOptions *metav1.DeleteOptionsPatch `pulumi:"deleteOptions"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// ObjectMeta describes the pod that is being evicted.
	Metadata *metav1.ObjectMetaPatch `pulumi:"metadata"`
}

Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod. A request to cause such an eviction is created by POSTing to .../pods/<pod name>/evictions.

type EvictionPatchArgs

type EvictionPatchArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// DeleteOptions may be provided
	DeleteOptions metav1.DeleteOptionsPatchPtrInput `pulumi:"deleteOptions"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// ObjectMeta describes the pod that is being evicted.
	Metadata metav1.ObjectMetaPatchPtrInput `pulumi:"metadata"`
}

Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod. A request to cause such an eviction is created by POSTing to .../pods/<pod name>/evictions.

func (EvictionPatchArgs) ElementType

func (EvictionPatchArgs) ElementType() reflect.Type

func (EvictionPatchArgs) ToEvictionPatchOutput

func (i EvictionPatchArgs) ToEvictionPatchOutput() EvictionPatchOutput

func (EvictionPatchArgs) ToEvictionPatchOutputWithContext

func (i EvictionPatchArgs) ToEvictionPatchOutputWithContext(ctx context.Context) EvictionPatchOutput

type EvictionPatchInput

type EvictionPatchInput interface {
	pulumi.Input

	ToEvictionPatchOutput() EvictionPatchOutput
	ToEvictionPatchOutputWithContext(context.Context) EvictionPatchOutput
}

EvictionPatchInput is an input type that accepts EvictionPatchArgs and EvictionPatchOutput values. You can construct a concrete instance of `EvictionPatchInput` via:

EvictionPatchArgs{...}

type EvictionPatchOutput

type EvictionPatchOutput struct{ *pulumi.OutputState }

Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod. A request to cause such an eviction is created by POSTing to .../pods/<pod name>/evictions.

func (EvictionPatchOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (EvictionPatchOutput) DeleteOptions

DeleteOptions may be provided

func (EvictionPatchOutput) ElementType

func (EvictionPatchOutput) ElementType() reflect.Type

func (EvictionPatchOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (EvictionPatchOutput) Metadata

ObjectMeta describes the pod that is being evicted.

func (EvictionPatchOutput) ToEvictionPatchOutput

func (o EvictionPatchOutput) ToEvictionPatchOutput() EvictionPatchOutput

func (EvictionPatchOutput) ToEvictionPatchOutputWithContext

func (o EvictionPatchOutput) ToEvictionPatchOutputWithContext(ctx context.Context) EvictionPatchOutput

type FSGroupStrategyOptions

type FSGroupStrategyOptions struct {
	// ranges are the allowed ranges of fs groups.  If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRange `pulumi:"ranges"`
	// rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
	Rule *string `pulumi:"rule"`
}

FSGroupStrategyOptions defines the strategy type and options used to create the strategy.

type FSGroupStrategyOptionsArgs

type FSGroupStrategyOptionsArgs struct {
	// ranges are the allowed ranges of fs groups.  If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangeArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
}

FSGroupStrategyOptions defines the strategy type and options used to create the strategy.

func (FSGroupStrategyOptionsArgs) ElementType

func (FSGroupStrategyOptionsArgs) ElementType() reflect.Type

func (FSGroupStrategyOptionsArgs) ToFSGroupStrategyOptionsOutput

func (i FSGroupStrategyOptionsArgs) ToFSGroupStrategyOptionsOutput() FSGroupStrategyOptionsOutput

func (FSGroupStrategyOptionsArgs) ToFSGroupStrategyOptionsOutputWithContext

func (i FSGroupStrategyOptionsArgs) ToFSGroupStrategyOptionsOutputWithContext(ctx context.Context) FSGroupStrategyOptionsOutput

func (FSGroupStrategyOptionsArgs) ToFSGroupStrategyOptionsPtrOutput

func (i FSGroupStrategyOptionsArgs) ToFSGroupStrategyOptionsPtrOutput() FSGroupStrategyOptionsPtrOutput

func (FSGroupStrategyOptionsArgs) ToFSGroupStrategyOptionsPtrOutputWithContext

func (i FSGroupStrategyOptionsArgs) ToFSGroupStrategyOptionsPtrOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPtrOutput

type FSGroupStrategyOptionsInput

type FSGroupStrategyOptionsInput interface {
	pulumi.Input

	ToFSGroupStrategyOptionsOutput() FSGroupStrategyOptionsOutput
	ToFSGroupStrategyOptionsOutputWithContext(context.Context) FSGroupStrategyOptionsOutput
}

FSGroupStrategyOptionsInput is an input type that accepts FSGroupStrategyOptionsArgs and FSGroupStrategyOptionsOutput values. You can construct a concrete instance of `FSGroupStrategyOptionsInput` via:

FSGroupStrategyOptionsArgs{...}

type FSGroupStrategyOptionsOutput

type FSGroupStrategyOptionsOutput struct{ *pulumi.OutputState }

FSGroupStrategyOptions defines the strategy type and options used to create the strategy.

func (FSGroupStrategyOptionsOutput) ElementType

func (FSGroupStrategyOptionsOutput) Ranges

ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.

func (FSGroupStrategyOptionsOutput) Rule

rule is the strategy that will dictate what FSGroup is used in the SecurityContext.

func (FSGroupStrategyOptionsOutput) ToFSGroupStrategyOptionsOutput

func (o FSGroupStrategyOptionsOutput) ToFSGroupStrategyOptionsOutput() FSGroupStrategyOptionsOutput

func (FSGroupStrategyOptionsOutput) ToFSGroupStrategyOptionsOutputWithContext

func (o FSGroupStrategyOptionsOutput) ToFSGroupStrategyOptionsOutputWithContext(ctx context.Context) FSGroupStrategyOptionsOutput

func (FSGroupStrategyOptionsOutput) ToFSGroupStrategyOptionsPtrOutput

func (o FSGroupStrategyOptionsOutput) ToFSGroupStrategyOptionsPtrOutput() FSGroupStrategyOptionsPtrOutput

func (FSGroupStrategyOptionsOutput) ToFSGroupStrategyOptionsPtrOutputWithContext

func (o FSGroupStrategyOptionsOutput) ToFSGroupStrategyOptionsPtrOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPtrOutput

type FSGroupStrategyOptionsPatch

type FSGroupStrategyOptionsPatch struct {
	// ranges are the allowed ranges of fs groups.  If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRangePatch `pulumi:"ranges"`
	// rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
	Rule *string `pulumi:"rule"`
}

FSGroupStrategyOptions defines the strategy type and options used to create the strategy.

type FSGroupStrategyOptionsPatchArgs

type FSGroupStrategyOptionsPatchArgs struct {
	// ranges are the allowed ranges of fs groups.  If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangePatchArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
}

FSGroupStrategyOptions defines the strategy type and options used to create the strategy.

func (FSGroupStrategyOptionsPatchArgs) ElementType

func (FSGroupStrategyOptionsPatchArgs) ToFSGroupStrategyOptionsPatchOutput

func (i FSGroupStrategyOptionsPatchArgs) ToFSGroupStrategyOptionsPatchOutput() FSGroupStrategyOptionsPatchOutput

func (FSGroupStrategyOptionsPatchArgs) ToFSGroupStrategyOptionsPatchOutputWithContext

func (i FSGroupStrategyOptionsPatchArgs) ToFSGroupStrategyOptionsPatchOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPatchOutput

func (FSGroupStrategyOptionsPatchArgs) ToFSGroupStrategyOptionsPatchPtrOutput

func (i FSGroupStrategyOptionsPatchArgs) ToFSGroupStrategyOptionsPatchPtrOutput() FSGroupStrategyOptionsPatchPtrOutput

func (FSGroupStrategyOptionsPatchArgs) ToFSGroupStrategyOptionsPatchPtrOutputWithContext

func (i FSGroupStrategyOptionsPatchArgs) ToFSGroupStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPatchPtrOutput

type FSGroupStrategyOptionsPatchInput

type FSGroupStrategyOptionsPatchInput interface {
	pulumi.Input

	ToFSGroupStrategyOptionsPatchOutput() FSGroupStrategyOptionsPatchOutput
	ToFSGroupStrategyOptionsPatchOutputWithContext(context.Context) FSGroupStrategyOptionsPatchOutput
}

FSGroupStrategyOptionsPatchInput is an input type that accepts FSGroupStrategyOptionsPatchArgs and FSGroupStrategyOptionsPatchOutput values. You can construct a concrete instance of `FSGroupStrategyOptionsPatchInput` via:

FSGroupStrategyOptionsPatchArgs{...}

type FSGroupStrategyOptionsPatchOutput

type FSGroupStrategyOptionsPatchOutput struct{ *pulumi.OutputState }

FSGroupStrategyOptions defines the strategy type and options used to create the strategy.

func (FSGroupStrategyOptionsPatchOutput) ElementType

func (FSGroupStrategyOptionsPatchOutput) Ranges

ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.

func (FSGroupStrategyOptionsPatchOutput) Rule

rule is the strategy that will dictate what FSGroup is used in the SecurityContext.

func (FSGroupStrategyOptionsPatchOutput) ToFSGroupStrategyOptionsPatchOutput

func (o FSGroupStrategyOptionsPatchOutput) ToFSGroupStrategyOptionsPatchOutput() FSGroupStrategyOptionsPatchOutput

func (FSGroupStrategyOptionsPatchOutput) ToFSGroupStrategyOptionsPatchOutputWithContext

func (o FSGroupStrategyOptionsPatchOutput) ToFSGroupStrategyOptionsPatchOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPatchOutput

func (FSGroupStrategyOptionsPatchOutput) ToFSGroupStrategyOptionsPatchPtrOutput

func (o FSGroupStrategyOptionsPatchOutput) ToFSGroupStrategyOptionsPatchPtrOutput() FSGroupStrategyOptionsPatchPtrOutput

func (FSGroupStrategyOptionsPatchOutput) ToFSGroupStrategyOptionsPatchPtrOutputWithContext

func (o FSGroupStrategyOptionsPatchOutput) ToFSGroupStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPatchPtrOutput

type FSGroupStrategyOptionsPatchPtrInput

type FSGroupStrategyOptionsPatchPtrInput interface {
	pulumi.Input

	ToFSGroupStrategyOptionsPatchPtrOutput() FSGroupStrategyOptionsPatchPtrOutput
	ToFSGroupStrategyOptionsPatchPtrOutputWithContext(context.Context) FSGroupStrategyOptionsPatchPtrOutput
}

FSGroupStrategyOptionsPatchPtrInput is an input type that accepts FSGroupStrategyOptionsPatchArgs, FSGroupStrategyOptionsPatchPtr and FSGroupStrategyOptionsPatchPtrOutput values. You can construct a concrete instance of `FSGroupStrategyOptionsPatchPtrInput` via:

        FSGroupStrategyOptionsPatchArgs{...}

or:

        nil

type FSGroupStrategyOptionsPatchPtrOutput

type FSGroupStrategyOptionsPatchPtrOutput struct{ *pulumi.OutputState }

func (FSGroupStrategyOptionsPatchPtrOutput) Elem

func (FSGroupStrategyOptionsPatchPtrOutput) ElementType

func (FSGroupStrategyOptionsPatchPtrOutput) Ranges

ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.

func (FSGroupStrategyOptionsPatchPtrOutput) Rule

rule is the strategy that will dictate what FSGroup is used in the SecurityContext.

func (FSGroupStrategyOptionsPatchPtrOutput) ToFSGroupStrategyOptionsPatchPtrOutput

func (o FSGroupStrategyOptionsPatchPtrOutput) ToFSGroupStrategyOptionsPatchPtrOutput() FSGroupStrategyOptionsPatchPtrOutput

func (FSGroupStrategyOptionsPatchPtrOutput) ToFSGroupStrategyOptionsPatchPtrOutputWithContext

func (o FSGroupStrategyOptionsPatchPtrOutput) ToFSGroupStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPatchPtrOutput

type FSGroupStrategyOptionsPtrInput

type FSGroupStrategyOptionsPtrInput interface {
	pulumi.Input

	ToFSGroupStrategyOptionsPtrOutput() FSGroupStrategyOptionsPtrOutput
	ToFSGroupStrategyOptionsPtrOutputWithContext(context.Context) FSGroupStrategyOptionsPtrOutput
}

FSGroupStrategyOptionsPtrInput is an input type that accepts FSGroupStrategyOptionsArgs, FSGroupStrategyOptionsPtr and FSGroupStrategyOptionsPtrOutput values. You can construct a concrete instance of `FSGroupStrategyOptionsPtrInput` via:

        FSGroupStrategyOptionsArgs{...}

or:

        nil

type FSGroupStrategyOptionsPtrOutput

type FSGroupStrategyOptionsPtrOutput struct{ *pulumi.OutputState }

func (FSGroupStrategyOptionsPtrOutput) Elem

func (FSGroupStrategyOptionsPtrOutput) ElementType

func (FSGroupStrategyOptionsPtrOutput) Ranges

ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.

func (FSGroupStrategyOptionsPtrOutput) Rule

rule is the strategy that will dictate what FSGroup is used in the SecurityContext.

func (FSGroupStrategyOptionsPtrOutput) ToFSGroupStrategyOptionsPtrOutput

func (o FSGroupStrategyOptionsPtrOutput) ToFSGroupStrategyOptionsPtrOutput() FSGroupStrategyOptionsPtrOutput

func (FSGroupStrategyOptionsPtrOutput) ToFSGroupStrategyOptionsPtrOutputWithContext

func (o FSGroupStrategyOptionsPtrOutput) ToFSGroupStrategyOptionsPtrOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPtrOutput

type HostPortRange

type HostPortRange struct {
	// max is the end of the range, inclusive.
	Max int `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min int `pulumi:"min"`
}

HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.

type HostPortRangeArgs

type HostPortRangeArgs struct {
	// max is the end of the range, inclusive.
	Max pulumi.IntInput `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min pulumi.IntInput `pulumi:"min"`
}

HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.

func (HostPortRangeArgs) ElementType

func (HostPortRangeArgs) ElementType() reflect.Type

func (HostPortRangeArgs) ToHostPortRangeOutput

func (i HostPortRangeArgs) ToHostPortRangeOutput() HostPortRangeOutput

func (HostPortRangeArgs) ToHostPortRangeOutputWithContext

func (i HostPortRangeArgs) ToHostPortRangeOutputWithContext(ctx context.Context) HostPortRangeOutput

type HostPortRangeArray

type HostPortRangeArray []HostPortRangeInput

func (HostPortRangeArray) ElementType

func (HostPortRangeArray) ElementType() reflect.Type

func (HostPortRangeArray) ToHostPortRangeArrayOutput

func (i HostPortRangeArray) ToHostPortRangeArrayOutput() HostPortRangeArrayOutput

func (HostPortRangeArray) ToHostPortRangeArrayOutputWithContext

func (i HostPortRangeArray) ToHostPortRangeArrayOutputWithContext(ctx context.Context) HostPortRangeArrayOutput

type HostPortRangeArrayInput

type HostPortRangeArrayInput interface {
	pulumi.Input

	ToHostPortRangeArrayOutput() HostPortRangeArrayOutput
	ToHostPortRangeArrayOutputWithContext(context.Context) HostPortRangeArrayOutput
}

HostPortRangeArrayInput is an input type that accepts HostPortRangeArray and HostPortRangeArrayOutput values. You can construct a concrete instance of `HostPortRangeArrayInput` via:

HostPortRangeArray{ HostPortRangeArgs{...} }

type HostPortRangeArrayOutput

type HostPortRangeArrayOutput struct{ *pulumi.OutputState }

func (HostPortRangeArrayOutput) ElementType

func (HostPortRangeArrayOutput) ElementType() reflect.Type

func (HostPortRangeArrayOutput) Index

func (HostPortRangeArrayOutput) ToHostPortRangeArrayOutput

func (o HostPortRangeArrayOutput) ToHostPortRangeArrayOutput() HostPortRangeArrayOutput

func (HostPortRangeArrayOutput) ToHostPortRangeArrayOutputWithContext

func (o HostPortRangeArrayOutput) ToHostPortRangeArrayOutputWithContext(ctx context.Context) HostPortRangeArrayOutput

type HostPortRangeInput

type HostPortRangeInput interface {
	pulumi.Input

	ToHostPortRangeOutput() HostPortRangeOutput
	ToHostPortRangeOutputWithContext(context.Context) HostPortRangeOutput
}

HostPortRangeInput is an input type that accepts HostPortRangeArgs and HostPortRangeOutput values. You can construct a concrete instance of `HostPortRangeInput` via:

HostPortRangeArgs{...}

type HostPortRangeOutput

type HostPortRangeOutput struct{ *pulumi.OutputState }

HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.

func (HostPortRangeOutput) ElementType

func (HostPortRangeOutput) ElementType() reflect.Type

func (HostPortRangeOutput) Max

max is the end of the range, inclusive.

func (HostPortRangeOutput) Min

min is the start of the range, inclusive.

func (HostPortRangeOutput) ToHostPortRangeOutput

func (o HostPortRangeOutput) ToHostPortRangeOutput() HostPortRangeOutput

func (HostPortRangeOutput) ToHostPortRangeOutputWithContext

func (o HostPortRangeOutput) ToHostPortRangeOutputWithContext(ctx context.Context) HostPortRangeOutput

type HostPortRangePatch

type HostPortRangePatch struct {
	// max is the end of the range, inclusive.
	Max *int `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min *int `pulumi:"min"`
}

HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.

type HostPortRangePatchArgs

type HostPortRangePatchArgs struct {
	// max is the end of the range, inclusive.
	Max pulumi.IntPtrInput `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min pulumi.IntPtrInput `pulumi:"min"`
}

HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.

func (HostPortRangePatchArgs) ElementType

func (HostPortRangePatchArgs) ElementType() reflect.Type

func (HostPortRangePatchArgs) ToHostPortRangePatchOutput

func (i HostPortRangePatchArgs) ToHostPortRangePatchOutput() HostPortRangePatchOutput

func (HostPortRangePatchArgs) ToHostPortRangePatchOutputWithContext

func (i HostPortRangePatchArgs) ToHostPortRangePatchOutputWithContext(ctx context.Context) HostPortRangePatchOutput

type HostPortRangePatchArray

type HostPortRangePatchArray []HostPortRangePatchInput

func (HostPortRangePatchArray) ElementType

func (HostPortRangePatchArray) ElementType() reflect.Type

func (HostPortRangePatchArray) ToHostPortRangePatchArrayOutput

func (i HostPortRangePatchArray) ToHostPortRangePatchArrayOutput() HostPortRangePatchArrayOutput

func (HostPortRangePatchArray) ToHostPortRangePatchArrayOutputWithContext

func (i HostPortRangePatchArray) ToHostPortRangePatchArrayOutputWithContext(ctx context.Context) HostPortRangePatchArrayOutput

type HostPortRangePatchArrayInput

type HostPortRangePatchArrayInput interface {
	pulumi.Input

	ToHostPortRangePatchArrayOutput() HostPortRangePatchArrayOutput
	ToHostPortRangePatchArrayOutputWithContext(context.Context) HostPortRangePatchArrayOutput
}

HostPortRangePatchArrayInput is an input type that accepts HostPortRangePatchArray and HostPortRangePatchArrayOutput values. You can construct a concrete instance of `HostPortRangePatchArrayInput` via:

HostPortRangePatchArray{ HostPortRangePatchArgs{...} }

type HostPortRangePatchArrayOutput

type HostPortRangePatchArrayOutput struct{ *pulumi.OutputState }

func (HostPortRangePatchArrayOutput) ElementType

func (HostPortRangePatchArrayOutput) Index

func (HostPortRangePatchArrayOutput) ToHostPortRangePatchArrayOutput

func (o HostPortRangePatchArrayOutput) ToHostPortRangePatchArrayOutput() HostPortRangePatchArrayOutput

func (HostPortRangePatchArrayOutput) ToHostPortRangePatchArrayOutputWithContext

func (o HostPortRangePatchArrayOutput) ToHostPortRangePatchArrayOutputWithContext(ctx context.Context) HostPortRangePatchArrayOutput

type HostPortRangePatchInput

type HostPortRangePatchInput interface {
	pulumi.Input

	ToHostPortRangePatchOutput() HostPortRangePatchOutput
	ToHostPortRangePatchOutputWithContext(context.Context) HostPortRangePatchOutput
}

HostPortRangePatchInput is an input type that accepts HostPortRangePatchArgs and HostPortRangePatchOutput values. You can construct a concrete instance of `HostPortRangePatchInput` via:

HostPortRangePatchArgs{...}

type HostPortRangePatchOutput

type HostPortRangePatchOutput struct{ *pulumi.OutputState }

HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.

func (HostPortRangePatchOutput) ElementType

func (HostPortRangePatchOutput) ElementType() reflect.Type

func (HostPortRangePatchOutput) Max

max is the end of the range, inclusive.

func (HostPortRangePatchOutput) Min

min is the start of the range, inclusive.

func (HostPortRangePatchOutput) ToHostPortRangePatchOutput

func (o HostPortRangePatchOutput) ToHostPortRangePatchOutput() HostPortRangePatchOutput

func (HostPortRangePatchOutput) ToHostPortRangePatchOutputWithContext

func (o HostPortRangePatchOutput) ToHostPortRangePatchOutputWithContext(ctx context.Context) HostPortRangePatchOutput

type IDRange

type IDRange struct {
	// max is the end of the range, inclusive.
	Max int `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min int `pulumi:"min"`
}

IDRange provides a min/max of an allowed range of IDs.

type IDRangeArgs

type IDRangeArgs struct {
	// max is the end of the range, inclusive.
	Max pulumi.IntInput `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min pulumi.IntInput `pulumi:"min"`
}

IDRange provides a min/max of an allowed range of IDs.

func (IDRangeArgs) ElementType

func (IDRangeArgs) ElementType() reflect.Type

func (IDRangeArgs) ToIDRangeOutput

func (i IDRangeArgs) ToIDRangeOutput() IDRangeOutput

func (IDRangeArgs) ToIDRangeOutputWithContext

func (i IDRangeArgs) ToIDRangeOutputWithContext(ctx context.Context) IDRangeOutput

type IDRangeArray

type IDRangeArray []IDRangeInput

func (IDRangeArray) ElementType

func (IDRangeArray) ElementType() reflect.Type

func (IDRangeArray) ToIDRangeArrayOutput

func (i IDRangeArray) ToIDRangeArrayOutput() IDRangeArrayOutput

func (IDRangeArray) ToIDRangeArrayOutputWithContext

func (i IDRangeArray) ToIDRangeArrayOutputWithContext(ctx context.Context) IDRangeArrayOutput

type IDRangeArrayInput

type IDRangeArrayInput interface {
	pulumi.Input

	ToIDRangeArrayOutput() IDRangeArrayOutput
	ToIDRangeArrayOutputWithContext(context.Context) IDRangeArrayOutput
}

IDRangeArrayInput is an input type that accepts IDRangeArray and IDRangeArrayOutput values. You can construct a concrete instance of `IDRangeArrayInput` via:

IDRangeArray{ IDRangeArgs{...} }

type IDRangeArrayOutput

type IDRangeArrayOutput struct{ *pulumi.OutputState }

func (IDRangeArrayOutput) ElementType

func (IDRangeArrayOutput) ElementType() reflect.Type

func (IDRangeArrayOutput) Index

func (IDRangeArrayOutput) ToIDRangeArrayOutput

func (o IDRangeArrayOutput) ToIDRangeArrayOutput() IDRangeArrayOutput

func (IDRangeArrayOutput) ToIDRangeArrayOutputWithContext

func (o IDRangeArrayOutput) ToIDRangeArrayOutputWithContext(ctx context.Context) IDRangeArrayOutput

type IDRangeInput

type IDRangeInput interface {
	pulumi.Input

	ToIDRangeOutput() IDRangeOutput
	ToIDRangeOutputWithContext(context.Context) IDRangeOutput
}

IDRangeInput is an input type that accepts IDRangeArgs and IDRangeOutput values. You can construct a concrete instance of `IDRangeInput` via:

IDRangeArgs{...}

type IDRangeOutput

type IDRangeOutput struct{ *pulumi.OutputState }

IDRange provides a min/max of an allowed range of IDs.

func (IDRangeOutput) ElementType

func (IDRangeOutput) ElementType() reflect.Type

func (IDRangeOutput) Max

func (o IDRangeOutput) Max() pulumi.IntOutput

max is the end of the range, inclusive.

func (IDRangeOutput) Min

func (o IDRangeOutput) Min() pulumi.IntOutput

min is the start of the range, inclusive.

func (IDRangeOutput) ToIDRangeOutput

func (o IDRangeOutput) ToIDRangeOutput() IDRangeOutput

func (IDRangeOutput) ToIDRangeOutputWithContext

func (o IDRangeOutput) ToIDRangeOutputWithContext(ctx context.Context) IDRangeOutput

type IDRangePatch

type IDRangePatch struct {
	// max is the end of the range, inclusive.
	Max *int `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min *int `pulumi:"min"`
}

IDRange provides a min/max of an allowed range of IDs.

type IDRangePatchArgs

type IDRangePatchArgs struct {
	// max is the end of the range, inclusive.
	Max pulumi.IntPtrInput `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min pulumi.IntPtrInput `pulumi:"min"`
}

IDRange provides a min/max of an allowed range of IDs.

func (IDRangePatchArgs) ElementType

func (IDRangePatchArgs) ElementType() reflect.Type

func (IDRangePatchArgs) ToIDRangePatchOutput

func (i IDRangePatchArgs) ToIDRangePatchOutput() IDRangePatchOutput

func (IDRangePatchArgs) ToIDRangePatchOutputWithContext

func (i IDRangePatchArgs) ToIDRangePatchOutputWithContext(ctx context.Context) IDRangePatchOutput

type IDRangePatchArray

type IDRangePatchArray []IDRangePatchInput

func (IDRangePatchArray) ElementType

func (IDRangePatchArray) ElementType() reflect.Type

func (IDRangePatchArray) ToIDRangePatchArrayOutput

func (i IDRangePatchArray) ToIDRangePatchArrayOutput() IDRangePatchArrayOutput

func (IDRangePatchArray) ToIDRangePatchArrayOutputWithContext

func (i IDRangePatchArray) ToIDRangePatchArrayOutputWithContext(ctx context.Context) IDRangePatchArrayOutput

type IDRangePatchArrayInput

type IDRangePatchArrayInput interface {
	pulumi.Input

	ToIDRangePatchArrayOutput() IDRangePatchArrayOutput
	ToIDRangePatchArrayOutputWithContext(context.Context) IDRangePatchArrayOutput
}

IDRangePatchArrayInput is an input type that accepts IDRangePatchArray and IDRangePatchArrayOutput values. You can construct a concrete instance of `IDRangePatchArrayInput` via:

IDRangePatchArray{ IDRangePatchArgs{...} }

type IDRangePatchArrayOutput

type IDRangePatchArrayOutput struct{ *pulumi.OutputState }

func (IDRangePatchArrayOutput) ElementType

func (IDRangePatchArrayOutput) ElementType() reflect.Type

func (IDRangePatchArrayOutput) Index

func (IDRangePatchArrayOutput) ToIDRangePatchArrayOutput

func (o IDRangePatchArrayOutput) ToIDRangePatchArrayOutput() IDRangePatchArrayOutput

func (IDRangePatchArrayOutput) ToIDRangePatchArrayOutputWithContext

func (o IDRangePatchArrayOutput) ToIDRangePatchArrayOutputWithContext(ctx context.Context) IDRangePatchArrayOutput

type IDRangePatchInput

type IDRangePatchInput interface {
	pulumi.Input

	ToIDRangePatchOutput() IDRangePatchOutput
	ToIDRangePatchOutputWithContext(context.Context) IDRangePatchOutput
}

IDRangePatchInput is an input type that accepts IDRangePatchArgs and IDRangePatchOutput values. You can construct a concrete instance of `IDRangePatchInput` via:

IDRangePatchArgs{...}

type IDRangePatchOutput

type IDRangePatchOutput struct{ *pulumi.OutputState }

IDRange provides a min/max of an allowed range of IDs.

func (IDRangePatchOutput) ElementType

func (IDRangePatchOutput) ElementType() reflect.Type

func (IDRangePatchOutput) Max

max is the end of the range, inclusive.

func (IDRangePatchOutput) Min

min is the start of the range, inclusive.

func (IDRangePatchOutput) ToIDRangePatchOutput

func (o IDRangePatchOutput) ToIDRangePatchOutput() IDRangePatchOutput

func (IDRangePatchOutput) ToIDRangePatchOutputWithContext

func (o IDRangePatchOutput) ToIDRangePatchOutputWithContext(ctx context.Context) IDRangePatchOutput

type PodDisruptionBudget

type PodDisruptionBudget struct {
	pulumi.CustomResourceState

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringOutput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringOutput     `pulumi:"kind"`
	Metadata metav1.ObjectMetaOutput `pulumi:"metadata"`
	// Specification of the desired behavior of the PodDisruptionBudget.
	Spec PodDisruptionBudgetSpecOutput `pulumi:"spec"`
	// Most recently observed status of the PodDisruptionBudget.
	Status PodDisruptionBudgetStatusPtrOutput `pulumi:"status"`
}

PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods

func GetPodDisruptionBudget

func GetPodDisruptionBudget(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PodDisruptionBudgetState, opts ...pulumi.ResourceOption) (*PodDisruptionBudget, error)

GetPodDisruptionBudget gets an existing PodDisruptionBudget resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPodDisruptionBudget

func NewPodDisruptionBudget(ctx *pulumi.Context,
	name string, args *PodDisruptionBudgetArgs, opts ...pulumi.ResourceOption) (*PodDisruptionBudget, error)

NewPodDisruptionBudget registers a new resource with the given unique name, arguments, and options.

func (*PodDisruptionBudget) ElementType

func (*PodDisruptionBudget) ElementType() reflect.Type

func (*PodDisruptionBudget) ToPodDisruptionBudgetOutput

func (i *PodDisruptionBudget) ToPodDisruptionBudgetOutput() PodDisruptionBudgetOutput

func (*PodDisruptionBudget) ToPodDisruptionBudgetOutputWithContext

func (i *PodDisruptionBudget) ToPodDisruptionBudgetOutputWithContext(ctx context.Context) PodDisruptionBudgetOutput

type PodDisruptionBudgetArgs

type PodDisruptionBudgetArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput
	Metadata metav1.ObjectMetaPtrInput
	// Specification of the desired behavior of the PodDisruptionBudget.
	Spec PodDisruptionBudgetSpecPtrInput
}

The set of arguments for constructing a PodDisruptionBudget resource.

func (PodDisruptionBudgetArgs) ElementType

func (PodDisruptionBudgetArgs) ElementType() reflect.Type

type PodDisruptionBudgetArray

type PodDisruptionBudgetArray []PodDisruptionBudgetInput

func (PodDisruptionBudgetArray) ElementType

func (PodDisruptionBudgetArray) ElementType() reflect.Type

func (PodDisruptionBudgetArray) ToPodDisruptionBudgetArrayOutput

func (i PodDisruptionBudgetArray) ToPodDisruptionBudgetArrayOutput() PodDisruptionBudgetArrayOutput

func (PodDisruptionBudgetArray) ToPodDisruptionBudgetArrayOutputWithContext

func (i PodDisruptionBudgetArray) ToPodDisruptionBudgetArrayOutputWithContext(ctx context.Context) PodDisruptionBudgetArrayOutput

type PodDisruptionBudgetArrayInput

type PodDisruptionBudgetArrayInput interface {
	pulumi.Input

	ToPodDisruptionBudgetArrayOutput() PodDisruptionBudgetArrayOutput
	ToPodDisruptionBudgetArrayOutputWithContext(context.Context) PodDisruptionBudgetArrayOutput
}

PodDisruptionBudgetArrayInput is an input type that accepts PodDisruptionBudgetArray and PodDisruptionBudgetArrayOutput values. You can construct a concrete instance of `PodDisruptionBudgetArrayInput` via:

PodDisruptionBudgetArray{ PodDisruptionBudgetArgs{...} }

type PodDisruptionBudgetArrayOutput

type PodDisruptionBudgetArrayOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetArrayOutput) ElementType

func (PodDisruptionBudgetArrayOutput) Index

func (PodDisruptionBudgetArrayOutput) ToPodDisruptionBudgetArrayOutput

func (o PodDisruptionBudgetArrayOutput) ToPodDisruptionBudgetArrayOutput() PodDisruptionBudgetArrayOutput

func (PodDisruptionBudgetArrayOutput) ToPodDisruptionBudgetArrayOutputWithContext

func (o PodDisruptionBudgetArrayOutput) ToPodDisruptionBudgetArrayOutputWithContext(ctx context.Context) PodDisruptionBudgetArrayOutput

type PodDisruptionBudgetInput

type PodDisruptionBudgetInput interface {
	pulumi.Input

	ToPodDisruptionBudgetOutput() PodDisruptionBudgetOutput
	ToPodDisruptionBudgetOutputWithContext(ctx context.Context) PodDisruptionBudgetOutput
}

type PodDisruptionBudgetList

type PodDisruptionBudgetList struct {
	pulumi.CustomResourceState

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringOutput                `pulumi:"apiVersion"`
	Items      PodDisruptionBudgetTypeArrayOutput `pulumi:"items"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringOutput   `pulumi:"kind"`
	Metadata metav1.ListMetaOutput `pulumi:"metadata"`
}

PodDisruptionBudgetList is a collection of PodDisruptionBudgets.

func GetPodDisruptionBudgetList

func GetPodDisruptionBudgetList(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PodDisruptionBudgetListState, opts ...pulumi.ResourceOption) (*PodDisruptionBudgetList, error)

GetPodDisruptionBudgetList gets an existing PodDisruptionBudgetList resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPodDisruptionBudgetList

func NewPodDisruptionBudgetList(ctx *pulumi.Context,
	name string, args *PodDisruptionBudgetListArgs, opts ...pulumi.ResourceOption) (*PodDisruptionBudgetList, error)

NewPodDisruptionBudgetList registers a new resource with the given unique name, arguments, and options.

func (*PodDisruptionBudgetList) ElementType

func (*PodDisruptionBudgetList) ElementType() reflect.Type

func (*PodDisruptionBudgetList) ToPodDisruptionBudgetListOutput

func (i *PodDisruptionBudgetList) ToPodDisruptionBudgetListOutput() PodDisruptionBudgetListOutput

func (*PodDisruptionBudgetList) ToPodDisruptionBudgetListOutputWithContext

func (i *PodDisruptionBudgetList) ToPodDisruptionBudgetListOutputWithContext(ctx context.Context) PodDisruptionBudgetListOutput

type PodDisruptionBudgetListArgs

type PodDisruptionBudgetListArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput
	Items      PodDisruptionBudgetTypeArrayInput
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput
	Metadata metav1.ListMetaPtrInput
}

The set of arguments for constructing a PodDisruptionBudgetList resource.

func (PodDisruptionBudgetListArgs) ElementType

type PodDisruptionBudgetListArray

type PodDisruptionBudgetListArray []PodDisruptionBudgetListInput

func (PodDisruptionBudgetListArray) ElementType

func (PodDisruptionBudgetListArray) ToPodDisruptionBudgetListArrayOutput

func (i PodDisruptionBudgetListArray) ToPodDisruptionBudgetListArrayOutput() PodDisruptionBudgetListArrayOutput

func (PodDisruptionBudgetListArray) ToPodDisruptionBudgetListArrayOutputWithContext

func (i PodDisruptionBudgetListArray) ToPodDisruptionBudgetListArrayOutputWithContext(ctx context.Context) PodDisruptionBudgetListArrayOutput

type PodDisruptionBudgetListArrayInput

type PodDisruptionBudgetListArrayInput interface {
	pulumi.Input

	ToPodDisruptionBudgetListArrayOutput() PodDisruptionBudgetListArrayOutput
	ToPodDisruptionBudgetListArrayOutputWithContext(context.Context) PodDisruptionBudgetListArrayOutput
}

PodDisruptionBudgetListArrayInput is an input type that accepts PodDisruptionBudgetListArray and PodDisruptionBudgetListArrayOutput values. You can construct a concrete instance of `PodDisruptionBudgetListArrayInput` via:

PodDisruptionBudgetListArray{ PodDisruptionBudgetListArgs{...} }

type PodDisruptionBudgetListArrayOutput

type PodDisruptionBudgetListArrayOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetListArrayOutput) ElementType

func (PodDisruptionBudgetListArrayOutput) Index

func (PodDisruptionBudgetListArrayOutput) ToPodDisruptionBudgetListArrayOutput

func (o PodDisruptionBudgetListArrayOutput) ToPodDisruptionBudgetListArrayOutput() PodDisruptionBudgetListArrayOutput

func (PodDisruptionBudgetListArrayOutput) ToPodDisruptionBudgetListArrayOutputWithContext

func (o PodDisruptionBudgetListArrayOutput) ToPodDisruptionBudgetListArrayOutputWithContext(ctx context.Context) PodDisruptionBudgetListArrayOutput

type PodDisruptionBudgetListInput

type PodDisruptionBudgetListInput interface {
	pulumi.Input

	ToPodDisruptionBudgetListOutput() PodDisruptionBudgetListOutput
	ToPodDisruptionBudgetListOutputWithContext(ctx context.Context) PodDisruptionBudgetListOutput
}

type PodDisruptionBudgetListMap

type PodDisruptionBudgetListMap map[string]PodDisruptionBudgetListInput

func (PodDisruptionBudgetListMap) ElementType

func (PodDisruptionBudgetListMap) ElementType() reflect.Type

func (PodDisruptionBudgetListMap) ToPodDisruptionBudgetListMapOutput

func (i PodDisruptionBudgetListMap) ToPodDisruptionBudgetListMapOutput() PodDisruptionBudgetListMapOutput

func (PodDisruptionBudgetListMap) ToPodDisruptionBudgetListMapOutputWithContext

func (i PodDisruptionBudgetListMap) ToPodDisruptionBudgetListMapOutputWithContext(ctx context.Context) PodDisruptionBudgetListMapOutput

type PodDisruptionBudgetListMapInput

type PodDisruptionBudgetListMapInput interface {
	pulumi.Input

	ToPodDisruptionBudgetListMapOutput() PodDisruptionBudgetListMapOutput
	ToPodDisruptionBudgetListMapOutputWithContext(context.Context) PodDisruptionBudgetListMapOutput
}

PodDisruptionBudgetListMapInput is an input type that accepts PodDisruptionBudgetListMap and PodDisruptionBudgetListMapOutput values. You can construct a concrete instance of `PodDisruptionBudgetListMapInput` via:

PodDisruptionBudgetListMap{ "key": PodDisruptionBudgetListArgs{...} }

type PodDisruptionBudgetListMapOutput

type PodDisruptionBudgetListMapOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetListMapOutput) ElementType

func (PodDisruptionBudgetListMapOutput) MapIndex

func (PodDisruptionBudgetListMapOutput) ToPodDisruptionBudgetListMapOutput

func (o PodDisruptionBudgetListMapOutput) ToPodDisruptionBudgetListMapOutput() PodDisruptionBudgetListMapOutput

func (PodDisruptionBudgetListMapOutput) ToPodDisruptionBudgetListMapOutputWithContext

func (o PodDisruptionBudgetListMapOutput) ToPodDisruptionBudgetListMapOutputWithContext(ctx context.Context) PodDisruptionBudgetListMapOutput

type PodDisruptionBudgetListOutput

type PodDisruptionBudgetListOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetListOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodDisruptionBudgetListOutput) ElementType

func (PodDisruptionBudgetListOutput) Items

func (PodDisruptionBudgetListOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodDisruptionBudgetListOutput) Metadata

func (PodDisruptionBudgetListOutput) ToPodDisruptionBudgetListOutput

func (o PodDisruptionBudgetListOutput) ToPodDisruptionBudgetListOutput() PodDisruptionBudgetListOutput

func (PodDisruptionBudgetListOutput) ToPodDisruptionBudgetListOutputWithContext

func (o PodDisruptionBudgetListOutput) ToPodDisruptionBudgetListOutputWithContext(ctx context.Context) PodDisruptionBudgetListOutput

type PodDisruptionBudgetListState

type PodDisruptionBudgetListState struct {
}

func (PodDisruptionBudgetListState) ElementType

type PodDisruptionBudgetListType

type PodDisruptionBudgetListType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string                   `pulumi:"apiVersion"`
	Items      []PodDisruptionBudgetType `pulumi:"items"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     *string          `pulumi:"kind"`
	Metadata *metav1.ListMeta `pulumi:"metadata"`
}

PodDisruptionBudgetList is a collection of PodDisruptionBudgets.

type PodDisruptionBudgetListTypeArgs

type PodDisruptionBudgetListTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput             `pulumi:"apiVersion"`
	Items      PodDisruptionBudgetTypeArrayInput `pulumi:"items"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput   `pulumi:"kind"`
	Metadata metav1.ListMetaPtrInput `pulumi:"metadata"`
}

PodDisruptionBudgetList is a collection of PodDisruptionBudgets.

func (PodDisruptionBudgetListTypeArgs) ElementType

func (PodDisruptionBudgetListTypeArgs) ToPodDisruptionBudgetListTypeOutput

func (i PodDisruptionBudgetListTypeArgs) ToPodDisruptionBudgetListTypeOutput() PodDisruptionBudgetListTypeOutput

func (PodDisruptionBudgetListTypeArgs) ToPodDisruptionBudgetListTypeOutputWithContext

func (i PodDisruptionBudgetListTypeArgs) ToPodDisruptionBudgetListTypeOutputWithContext(ctx context.Context) PodDisruptionBudgetListTypeOutput

type PodDisruptionBudgetListTypeInput

type PodDisruptionBudgetListTypeInput interface {
	pulumi.Input

	ToPodDisruptionBudgetListTypeOutput() PodDisruptionBudgetListTypeOutput
	ToPodDisruptionBudgetListTypeOutputWithContext(context.Context) PodDisruptionBudgetListTypeOutput
}

PodDisruptionBudgetListTypeInput is an input type that accepts PodDisruptionBudgetListTypeArgs and PodDisruptionBudgetListTypeOutput values. You can construct a concrete instance of `PodDisruptionBudgetListTypeInput` via:

PodDisruptionBudgetListTypeArgs{...}

type PodDisruptionBudgetListTypeOutput

type PodDisruptionBudgetListTypeOutput struct{ *pulumi.OutputState }

PodDisruptionBudgetList is a collection of PodDisruptionBudgets.

func (PodDisruptionBudgetListTypeOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodDisruptionBudgetListTypeOutput) ElementType

func (PodDisruptionBudgetListTypeOutput) Items

func (PodDisruptionBudgetListTypeOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodDisruptionBudgetListTypeOutput) Metadata

func (PodDisruptionBudgetListTypeOutput) ToPodDisruptionBudgetListTypeOutput

func (o PodDisruptionBudgetListTypeOutput) ToPodDisruptionBudgetListTypeOutput() PodDisruptionBudgetListTypeOutput

func (PodDisruptionBudgetListTypeOutput) ToPodDisruptionBudgetListTypeOutputWithContext

func (o PodDisruptionBudgetListTypeOutput) ToPodDisruptionBudgetListTypeOutputWithContext(ctx context.Context) PodDisruptionBudgetListTypeOutput

type PodDisruptionBudgetMap

type PodDisruptionBudgetMap map[string]PodDisruptionBudgetInput

func (PodDisruptionBudgetMap) ElementType

func (PodDisruptionBudgetMap) ElementType() reflect.Type

func (PodDisruptionBudgetMap) ToPodDisruptionBudgetMapOutput

func (i PodDisruptionBudgetMap) ToPodDisruptionBudgetMapOutput() PodDisruptionBudgetMapOutput

func (PodDisruptionBudgetMap) ToPodDisruptionBudgetMapOutputWithContext

func (i PodDisruptionBudgetMap) ToPodDisruptionBudgetMapOutputWithContext(ctx context.Context) PodDisruptionBudgetMapOutput

type PodDisruptionBudgetMapInput

type PodDisruptionBudgetMapInput interface {
	pulumi.Input

	ToPodDisruptionBudgetMapOutput() PodDisruptionBudgetMapOutput
	ToPodDisruptionBudgetMapOutputWithContext(context.Context) PodDisruptionBudgetMapOutput
}

PodDisruptionBudgetMapInput is an input type that accepts PodDisruptionBudgetMap and PodDisruptionBudgetMapOutput values. You can construct a concrete instance of `PodDisruptionBudgetMapInput` via:

PodDisruptionBudgetMap{ "key": PodDisruptionBudgetArgs{...} }

type PodDisruptionBudgetMapOutput

type PodDisruptionBudgetMapOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetMapOutput) ElementType

func (PodDisruptionBudgetMapOutput) MapIndex

func (PodDisruptionBudgetMapOutput) ToPodDisruptionBudgetMapOutput

func (o PodDisruptionBudgetMapOutput) ToPodDisruptionBudgetMapOutput() PodDisruptionBudgetMapOutput

func (PodDisruptionBudgetMapOutput) ToPodDisruptionBudgetMapOutputWithContext

func (o PodDisruptionBudgetMapOutput) ToPodDisruptionBudgetMapOutputWithContext(ctx context.Context) PodDisruptionBudgetMapOutput

type PodDisruptionBudgetOutput

type PodDisruptionBudgetOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodDisruptionBudgetOutput) ElementType

func (PodDisruptionBudgetOutput) ElementType() reflect.Type

func (PodDisruptionBudgetOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodDisruptionBudgetOutput) Metadata

func (PodDisruptionBudgetOutput) Spec

Specification of the desired behavior of the PodDisruptionBudget.

func (PodDisruptionBudgetOutput) Status

Most recently observed status of the PodDisruptionBudget.

func (PodDisruptionBudgetOutput) ToPodDisruptionBudgetOutput

func (o PodDisruptionBudgetOutput) ToPodDisruptionBudgetOutput() PodDisruptionBudgetOutput

func (PodDisruptionBudgetOutput) ToPodDisruptionBudgetOutputWithContext

func (o PodDisruptionBudgetOutput) ToPodDisruptionBudgetOutputWithContext(ctx context.Context) PodDisruptionBudgetOutput

type PodDisruptionBudgetPatch

type PodDisruptionBudgetPatch struct {
	pulumi.CustomResourceState

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrOutput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrOutput          `pulumi:"kind"`
	Metadata metav1.ObjectMetaPatchPtrOutput `pulumi:"metadata"`
	// Specification of the desired behavior of the PodDisruptionBudget.
	Spec PodDisruptionBudgetSpecPatchPtrOutput `pulumi:"spec"`
	// Most recently observed status of the PodDisruptionBudget.
	Status PodDisruptionBudgetStatusPatchPtrOutput `pulumi:"status"`
}

Patch resources are used to modify existing Kubernetes resources by using Server-Side Apply updates. The name of the resource must be specified, but all other properties are optional. More than one patch may be applied to the same resource, and a random FieldManager name will be used for each Patch resource. Conflicts will result in an error by default, but can be forced using the "pulumi.com/patchForce" annotation. See the [Server-Side Apply Docs](https://www.pulumi.com/registry/packages/kubernetes/how-to-guides/managing-resources-with-server-side-apply/) for additional information about using Server-Side Apply to manage Kubernetes resources with Pulumi. PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods

func GetPodDisruptionBudgetPatch

func GetPodDisruptionBudgetPatch(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PodDisruptionBudgetPatchState, opts ...pulumi.ResourceOption) (*PodDisruptionBudgetPatch, error)

GetPodDisruptionBudgetPatch gets an existing PodDisruptionBudgetPatch resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPodDisruptionBudgetPatch

func NewPodDisruptionBudgetPatch(ctx *pulumi.Context,
	name string, args *PodDisruptionBudgetPatchArgs, opts ...pulumi.ResourceOption) (*PodDisruptionBudgetPatch, error)

NewPodDisruptionBudgetPatch registers a new resource with the given unique name, arguments, and options.

func (*PodDisruptionBudgetPatch) ElementType

func (*PodDisruptionBudgetPatch) ElementType() reflect.Type

func (*PodDisruptionBudgetPatch) ToPodDisruptionBudgetPatchOutput

func (i *PodDisruptionBudgetPatch) ToPodDisruptionBudgetPatchOutput() PodDisruptionBudgetPatchOutput

func (*PodDisruptionBudgetPatch) ToPodDisruptionBudgetPatchOutputWithContext

func (i *PodDisruptionBudgetPatch) ToPodDisruptionBudgetPatchOutputWithContext(ctx context.Context) PodDisruptionBudgetPatchOutput

type PodDisruptionBudgetPatchArgs

type PodDisruptionBudgetPatchArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput
	Metadata metav1.ObjectMetaPatchPtrInput
	// Specification of the desired behavior of the PodDisruptionBudget.
	Spec PodDisruptionBudgetSpecPatchPtrInput
}

The set of arguments for constructing a PodDisruptionBudgetPatch resource.

func (PodDisruptionBudgetPatchArgs) ElementType

type PodDisruptionBudgetPatchArray

type PodDisruptionBudgetPatchArray []PodDisruptionBudgetPatchInput

func (PodDisruptionBudgetPatchArray) ElementType

func (PodDisruptionBudgetPatchArray) ToPodDisruptionBudgetPatchArrayOutput

func (i PodDisruptionBudgetPatchArray) ToPodDisruptionBudgetPatchArrayOutput() PodDisruptionBudgetPatchArrayOutput

func (PodDisruptionBudgetPatchArray) ToPodDisruptionBudgetPatchArrayOutputWithContext

func (i PodDisruptionBudgetPatchArray) ToPodDisruptionBudgetPatchArrayOutputWithContext(ctx context.Context) PodDisruptionBudgetPatchArrayOutput

type PodDisruptionBudgetPatchArrayInput

type PodDisruptionBudgetPatchArrayInput interface {
	pulumi.Input

	ToPodDisruptionBudgetPatchArrayOutput() PodDisruptionBudgetPatchArrayOutput
	ToPodDisruptionBudgetPatchArrayOutputWithContext(context.Context) PodDisruptionBudgetPatchArrayOutput
}

PodDisruptionBudgetPatchArrayInput is an input type that accepts PodDisruptionBudgetPatchArray and PodDisruptionBudgetPatchArrayOutput values. You can construct a concrete instance of `PodDisruptionBudgetPatchArrayInput` via:

PodDisruptionBudgetPatchArray{ PodDisruptionBudgetPatchArgs{...} }

type PodDisruptionBudgetPatchArrayOutput

type PodDisruptionBudgetPatchArrayOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetPatchArrayOutput) ElementType

func (PodDisruptionBudgetPatchArrayOutput) Index

func (PodDisruptionBudgetPatchArrayOutput) ToPodDisruptionBudgetPatchArrayOutput

func (o PodDisruptionBudgetPatchArrayOutput) ToPodDisruptionBudgetPatchArrayOutput() PodDisruptionBudgetPatchArrayOutput

func (PodDisruptionBudgetPatchArrayOutput) ToPodDisruptionBudgetPatchArrayOutputWithContext

func (o PodDisruptionBudgetPatchArrayOutput) ToPodDisruptionBudgetPatchArrayOutputWithContext(ctx context.Context) PodDisruptionBudgetPatchArrayOutput

type PodDisruptionBudgetPatchInput

type PodDisruptionBudgetPatchInput interface {
	pulumi.Input

	ToPodDisruptionBudgetPatchOutput() PodDisruptionBudgetPatchOutput
	ToPodDisruptionBudgetPatchOutputWithContext(ctx context.Context) PodDisruptionBudgetPatchOutput
}

type PodDisruptionBudgetPatchMap

type PodDisruptionBudgetPatchMap map[string]PodDisruptionBudgetPatchInput

func (PodDisruptionBudgetPatchMap) ElementType

func (PodDisruptionBudgetPatchMap) ToPodDisruptionBudgetPatchMapOutput

func (i PodDisruptionBudgetPatchMap) ToPodDisruptionBudgetPatchMapOutput() PodDisruptionBudgetPatchMapOutput

func (PodDisruptionBudgetPatchMap) ToPodDisruptionBudgetPatchMapOutputWithContext

func (i PodDisruptionBudgetPatchMap) ToPodDisruptionBudgetPatchMapOutputWithContext(ctx context.Context) PodDisruptionBudgetPatchMapOutput

type PodDisruptionBudgetPatchMapInput

type PodDisruptionBudgetPatchMapInput interface {
	pulumi.Input

	ToPodDisruptionBudgetPatchMapOutput() PodDisruptionBudgetPatchMapOutput
	ToPodDisruptionBudgetPatchMapOutputWithContext(context.Context) PodDisruptionBudgetPatchMapOutput
}

PodDisruptionBudgetPatchMapInput is an input type that accepts PodDisruptionBudgetPatchMap and PodDisruptionBudgetPatchMapOutput values. You can construct a concrete instance of `PodDisruptionBudgetPatchMapInput` via:

PodDisruptionBudgetPatchMap{ "key": PodDisruptionBudgetPatchArgs{...} }

type PodDisruptionBudgetPatchMapOutput

type PodDisruptionBudgetPatchMapOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetPatchMapOutput) ElementType

func (PodDisruptionBudgetPatchMapOutput) MapIndex

func (PodDisruptionBudgetPatchMapOutput) ToPodDisruptionBudgetPatchMapOutput

func (o PodDisruptionBudgetPatchMapOutput) ToPodDisruptionBudgetPatchMapOutput() PodDisruptionBudgetPatchMapOutput

func (PodDisruptionBudgetPatchMapOutput) ToPodDisruptionBudgetPatchMapOutputWithContext

func (o PodDisruptionBudgetPatchMapOutput) ToPodDisruptionBudgetPatchMapOutputWithContext(ctx context.Context) PodDisruptionBudgetPatchMapOutput

type PodDisruptionBudgetPatchOutput

type PodDisruptionBudgetPatchOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetPatchOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodDisruptionBudgetPatchOutput) ElementType

func (PodDisruptionBudgetPatchOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodDisruptionBudgetPatchOutput) Metadata

func (PodDisruptionBudgetPatchOutput) Spec

Specification of the desired behavior of the PodDisruptionBudget.

func (PodDisruptionBudgetPatchOutput) Status

Most recently observed status of the PodDisruptionBudget.

func (PodDisruptionBudgetPatchOutput) ToPodDisruptionBudgetPatchOutput

func (o PodDisruptionBudgetPatchOutput) ToPodDisruptionBudgetPatchOutput() PodDisruptionBudgetPatchOutput

func (PodDisruptionBudgetPatchOutput) ToPodDisruptionBudgetPatchOutputWithContext

func (o PodDisruptionBudgetPatchOutput) ToPodDisruptionBudgetPatchOutputWithContext(ctx context.Context) PodDisruptionBudgetPatchOutput

type PodDisruptionBudgetPatchState

type PodDisruptionBudgetPatchState struct {
}

func (PodDisruptionBudgetPatchState) ElementType

type PodDisruptionBudgetPatchType

type PodDisruptionBudgetPatchType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     *string                 `pulumi:"kind"`
	Metadata *metav1.ObjectMetaPatch `pulumi:"metadata"`
	// Specification of the desired behavior of the PodDisruptionBudget.
	Spec *PodDisruptionBudgetSpecPatch `pulumi:"spec"`
	// Most recently observed status of the PodDisruptionBudget.
	Status *PodDisruptionBudgetStatusPatch `pulumi:"status"`
}

PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods

type PodDisruptionBudgetPatchTypeArgs

type PodDisruptionBudgetPatchTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput          `pulumi:"kind"`
	Metadata metav1.ObjectMetaPatchPtrInput `pulumi:"metadata"`
	// Specification of the desired behavior of the PodDisruptionBudget.
	Spec PodDisruptionBudgetSpecPatchPtrInput `pulumi:"spec"`
	// Most recently observed status of the PodDisruptionBudget.
	Status PodDisruptionBudgetStatusPatchPtrInput `pulumi:"status"`
}

PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods

func (PodDisruptionBudgetPatchTypeArgs) ElementType

func (PodDisruptionBudgetPatchTypeArgs) ToPodDisruptionBudgetPatchTypeOutput

func (i PodDisruptionBudgetPatchTypeArgs) ToPodDisruptionBudgetPatchTypeOutput() PodDisruptionBudgetPatchTypeOutput

func (PodDisruptionBudgetPatchTypeArgs) ToPodDisruptionBudgetPatchTypeOutputWithContext

func (i PodDisruptionBudgetPatchTypeArgs) ToPodDisruptionBudgetPatchTypeOutputWithContext(ctx context.Context) PodDisruptionBudgetPatchTypeOutput

type PodDisruptionBudgetPatchTypeInput

type PodDisruptionBudgetPatchTypeInput interface {
	pulumi.Input

	ToPodDisruptionBudgetPatchTypeOutput() PodDisruptionBudgetPatchTypeOutput
	ToPodDisruptionBudgetPatchTypeOutputWithContext(context.Context) PodDisruptionBudgetPatchTypeOutput
}

PodDisruptionBudgetPatchTypeInput is an input type that accepts PodDisruptionBudgetPatchTypeArgs and PodDisruptionBudgetPatchTypeOutput values. You can construct a concrete instance of `PodDisruptionBudgetPatchTypeInput` via:

PodDisruptionBudgetPatchTypeArgs{...}

type PodDisruptionBudgetPatchTypeOutput

type PodDisruptionBudgetPatchTypeOutput struct{ *pulumi.OutputState }

PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods

func (PodDisruptionBudgetPatchTypeOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodDisruptionBudgetPatchTypeOutput) ElementType

func (PodDisruptionBudgetPatchTypeOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodDisruptionBudgetPatchTypeOutput) Metadata

func (PodDisruptionBudgetPatchTypeOutput) Spec

Specification of the desired behavior of the PodDisruptionBudget.

func (PodDisruptionBudgetPatchTypeOutput) Status

Most recently observed status of the PodDisruptionBudget.

func (PodDisruptionBudgetPatchTypeOutput) ToPodDisruptionBudgetPatchTypeOutput

func (o PodDisruptionBudgetPatchTypeOutput) ToPodDisruptionBudgetPatchTypeOutput() PodDisruptionBudgetPatchTypeOutput

func (PodDisruptionBudgetPatchTypeOutput) ToPodDisruptionBudgetPatchTypeOutputWithContext

func (o PodDisruptionBudgetPatchTypeOutput) ToPodDisruptionBudgetPatchTypeOutputWithContext(ctx context.Context) PodDisruptionBudgetPatchTypeOutput

type PodDisruptionBudgetSpec

type PodDisruptionBudgetSpec struct {
	// An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
	MaxUnavailable interface{} `pulumi:"maxUnavailable"`
	// An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod.  So for example you can prevent all voluntary evictions by specifying "100%".
	MinAvailable interface{} `pulumi:"minAvailable"`
	// Label query over pods whose evictions are managed by the disruption budget.
	Selector *metav1.LabelSelector `pulumi:"selector"`
}

PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.

type PodDisruptionBudgetSpecArgs

type PodDisruptionBudgetSpecArgs struct {
	// An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
	MaxUnavailable pulumi.Input `pulumi:"maxUnavailable"`
	// An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod.  So for example you can prevent all voluntary evictions by specifying "100%".
	MinAvailable pulumi.Input `pulumi:"minAvailable"`
	// Label query over pods whose evictions are managed by the disruption budget.
	Selector metav1.LabelSelectorPtrInput `pulumi:"selector"`
}

PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.

func (PodDisruptionBudgetSpecArgs) ElementType

func (PodDisruptionBudgetSpecArgs) ToPodDisruptionBudgetSpecOutput

func (i PodDisruptionBudgetSpecArgs) ToPodDisruptionBudgetSpecOutput() PodDisruptionBudgetSpecOutput

func (PodDisruptionBudgetSpecArgs) ToPodDisruptionBudgetSpecOutputWithContext

func (i PodDisruptionBudgetSpecArgs) ToPodDisruptionBudgetSpecOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecOutput

func (PodDisruptionBudgetSpecArgs) ToPodDisruptionBudgetSpecPtrOutput

func (i PodDisruptionBudgetSpecArgs) ToPodDisruptionBudgetSpecPtrOutput() PodDisruptionBudgetSpecPtrOutput

func (PodDisruptionBudgetSpecArgs) ToPodDisruptionBudgetSpecPtrOutputWithContext

func (i PodDisruptionBudgetSpecArgs) ToPodDisruptionBudgetSpecPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPtrOutput

type PodDisruptionBudgetSpecInput

type PodDisruptionBudgetSpecInput interface {
	pulumi.Input

	ToPodDisruptionBudgetSpecOutput() PodDisruptionBudgetSpecOutput
	ToPodDisruptionBudgetSpecOutputWithContext(context.Context) PodDisruptionBudgetSpecOutput
}

PodDisruptionBudgetSpecInput is an input type that accepts PodDisruptionBudgetSpecArgs and PodDisruptionBudgetSpecOutput values. You can construct a concrete instance of `PodDisruptionBudgetSpecInput` via:

PodDisruptionBudgetSpecArgs{...}

type PodDisruptionBudgetSpecOutput

type PodDisruptionBudgetSpecOutput struct{ *pulumi.OutputState }

PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.

func (PodDisruptionBudgetSpecOutput) ElementType

func (PodDisruptionBudgetSpecOutput) MaxUnavailable

func (o PodDisruptionBudgetSpecOutput) MaxUnavailable() pulumi.AnyOutput

An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".

func (PodDisruptionBudgetSpecOutput) MinAvailable

An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying "100%".

func (PodDisruptionBudgetSpecOutput) Selector

Label query over pods whose evictions are managed by the disruption budget.

func (PodDisruptionBudgetSpecOutput) ToPodDisruptionBudgetSpecOutput

func (o PodDisruptionBudgetSpecOutput) ToPodDisruptionBudgetSpecOutput() PodDisruptionBudgetSpecOutput

func (PodDisruptionBudgetSpecOutput) ToPodDisruptionBudgetSpecOutputWithContext

func (o PodDisruptionBudgetSpecOutput) ToPodDisruptionBudgetSpecOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecOutput

func (PodDisruptionBudgetSpecOutput) ToPodDisruptionBudgetSpecPtrOutput

func (o PodDisruptionBudgetSpecOutput) ToPodDisruptionBudgetSpecPtrOutput() PodDisruptionBudgetSpecPtrOutput

func (PodDisruptionBudgetSpecOutput) ToPodDisruptionBudgetSpecPtrOutputWithContext

func (o PodDisruptionBudgetSpecOutput) ToPodDisruptionBudgetSpecPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPtrOutput

type PodDisruptionBudgetSpecPatch

type PodDisruptionBudgetSpecPatch struct {
	// An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
	MaxUnavailable interface{} `pulumi:"maxUnavailable"`
	// An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod.  So for example you can prevent all voluntary evictions by specifying "100%".
	MinAvailable interface{} `pulumi:"minAvailable"`
	// Label query over pods whose evictions are managed by the disruption budget.
	Selector *metav1.LabelSelectorPatch `pulumi:"selector"`
}

PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.

type PodDisruptionBudgetSpecPatchArgs

type PodDisruptionBudgetSpecPatchArgs struct {
	// An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
	MaxUnavailable pulumi.Input `pulumi:"maxUnavailable"`
	// An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod.  So for example you can prevent all voluntary evictions by specifying "100%".
	MinAvailable pulumi.Input `pulumi:"minAvailable"`
	// Label query over pods whose evictions are managed by the disruption budget.
	Selector metav1.LabelSelectorPatchPtrInput `pulumi:"selector"`
}

PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.

func (PodDisruptionBudgetSpecPatchArgs) ElementType

func (PodDisruptionBudgetSpecPatchArgs) ToPodDisruptionBudgetSpecPatchOutput

func (i PodDisruptionBudgetSpecPatchArgs) ToPodDisruptionBudgetSpecPatchOutput() PodDisruptionBudgetSpecPatchOutput

func (PodDisruptionBudgetSpecPatchArgs) ToPodDisruptionBudgetSpecPatchOutputWithContext

func (i PodDisruptionBudgetSpecPatchArgs) ToPodDisruptionBudgetSpecPatchOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPatchOutput

func (PodDisruptionBudgetSpecPatchArgs) ToPodDisruptionBudgetSpecPatchPtrOutput

func (i PodDisruptionBudgetSpecPatchArgs) ToPodDisruptionBudgetSpecPatchPtrOutput() PodDisruptionBudgetSpecPatchPtrOutput

func (PodDisruptionBudgetSpecPatchArgs) ToPodDisruptionBudgetSpecPatchPtrOutputWithContext

func (i PodDisruptionBudgetSpecPatchArgs) ToPodDisruptionBudgetSpecPatchPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPatchPtrOutput

type PodDisruptionBudgetSpecPatchInput

type PodDisruptionBudgetSpecPatchInput interface {
	pulumi.Input

	ToPodDisruptionBudgetSpecPatchOutput() PodDisruptionBudgetSpecPatchOutput
	ToPodDisruptionBudgetSpecPatchOutputWithContext(context.Context) PodDisruptionBudgetSpecPatchOutput
}

PodDisruptionBudgetSpecPatchInput is an input type that accepts PodDisruptionBudgetSpecPatchArgs and PodDisruptionBudgetSpecPatchOutput values. You can construct a concrete instance of `PodDisruptionBudgetSpecPatchInput` via:

PodDisruptionBudgetSpecPatchArgs{...}

type PodDisruptionBudgetSpecPatchOutput

type PodDisruptionBudgetSpecPatchOutput struct{ *pulumi.OutputState }

PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.

func (PodDisruptionBudgetSpecPatchOutput) ElementType

func (PodDisruptionBudgetSpecPatchOutput) MaxUnavailable

An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".

func (PodDisruptionBudgetSpecPatchOutput) MinAvailable

An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying "100%".

func (PodDisruptionBudgetSpecPatchOutput) Selector

Label query over pods whose evictions are managed by the disruption budget.

func (PodDisruptionBudgetSpecPatchOutput) ToPodDisruptionBudgetSpecPatchOutput

func (o PodDisruptionBudgetSpecPatchOutput) ToPodDisruptionBudgetSpecPatchOutput() PodDisruptionBudgetSpecPatchOutput

func (PodDisruptionBudgetSpecPatchOutput) ToPodDisruptionBudgetSpecPatchOutputWithContext

func (o PodDisruptionBudgetSpecPatchOutput) ToPodDisruptionBudgetSpecPatchOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPatchOutput

func (PodDisruptionBudgetSpecPatchOutput) ToPodDisruptionBudgetSpecPatchPtrOutput

func (o PodDisruptionBudgetSpecPatchOutput) ToPodDisruptionBudgetSpecPatchPtrOutput() PodDisruptionBudgetSpecPatchPtrOutput

func (PodDisruptionBudgetSpecPatchOutput) ToPodDisruptionBudgetSpecPatchPtrOutputWithContext

func (o PodDisruptionBudgetSpecPatchOutput) ToPodDisruptionBudgetSpecPatchPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPatchPtrOutput

type PodDisruptionBudgetSpecPatchPtrInput

type PodDisruptionBudgetSpecPatchPtrInput interface {
	pulumi.Input

	ToPodDisruptionBudgetSpecPatchPtrOutput() PodDisruptionBudgetSpecPatchPtrOutput
	ToPodDisruptionBudgetSpecPatchPtrOutputWithContext(context.Context) PodDisruptionBudgetSpecPatchPtrOutput
}

PodDisruptionBudgetSpecPatchPtrInput is an input type that accepts PodDisruptionBudgetSpecPatchArgs, PodDisruptionBudgetSpecPatchPtr and PodDisruptionBudgetSpecPatchPtrOutput values. You can construct a concrete instance of `PodDisruptionBudgetSpecPatchPtrInput` via:

        PodDisruptionBudgetSpecPatchArgs{...}

or:

        nil

type PodDisruptionBudgetSpecPatchPtrOutput

type PodDisruptionBudgetSpecPatchPtrOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetSpecPatchPtrOutput) Elem

func (PodDisruptionBudgetSpecPatchPtrOutput) ElementType

func (PodDisruptionBudgetSpecPatchPtrOutput) MaxUnavailable

An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".

func (PodDisruptionBudgetSpecPatchPtrOutput) MinAvailable

An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying "100%".

func (PodDisruptionBudgetSpecPatchPtrOutput) Selector

Label query over pods whose evictions are managed by the disruption budget.

func (PodDisruptionBudgetSpecPatchPtrOutput) ToPodDisruptionBudgetSpecPatchPtrOutput

func (o PodDisruptionBudgetSpecPatchPtrOutput) ToPodDisruptionBudgetSpecPatchPtrOutput() PodDisruptionBudgetSpecPatchPtrOutput

func (PodDisruptionBudgetSpecPatchPtrOutput) ToPodDisruptionBudgetSpecPatchPtrOutputWithContext

func (o PodDisruptionBudgetSpecPatchPtrOutput) ToPodDisruptionBudgetSpecPatchPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPatchPtrOutput

type PodDisruptionBudgetSpecPtrInput

type PodDisruptionBudgetSpecPtrInput interface {
	pulumi.Input

	ToPodDisruptionBudgetSpecPtrOutput() PodDisruptionBudgetSpecPtrOutput
	ToPodDisruptionBudgetSpecPtrOutputWithContext(context.Context) PodDisruptionBudgetSpecPtrOutput
}

PodDisruptionBudgetSpecPtrInput is an input type that accepts PodDisruptionBudgetSpecArgs, PodDisruptionBudgetSpecPtr and PodDisruptionBudgetSpecPtrOutput values. You can construct a concrete instance of `PodDisruptionBudgetSpecPtrInput` via:

        PodDisruptionBudgetSpecArgs{...}

or:

        nil

type PodDisruptionBudgetSpecPtrOutput

type PodDisruptionBudgetSpecPtrOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetSpecPtrOutput) Elem

func (PodDisruptionBudgetSpecPtrOutput) ElementType

func (PodDisruptionBudgetSpecPtrOutput) MaxUnavailable

An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".

func (PodDisruptionBudgetSpecPtrOutput) MinAvailable

An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying "100%".

func (PodDisruptionBudgetSpecPtrOutput) Selector

Label query over pods whose evictions are managed by the disruption budget.

func (PodDisruptionBudgetSpecPtrOutput) ToPodDisruptionBudgetSpecPtrOutput

func (o PodDisruptionBudgetSpecPtrOutput) ToPodDisruptionBudgetSpecPtrOutput() PodDisruptionBudgetSpecPtrOutput

func (PodDisruptionBudgetSpecPtrOutput) ToPodDisruptionBudgetSpecPtrOutputWithContext

func (o PodDisruptionBudgetSpecPtrOutput) ToPodDisruptionBudgetSpecPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPtrOutput

type PodDisruptionBudgetState

type PodDisruptionBudgetState struct {
}

func (PodDisruptionBudgetState) ElementType

func (PodDisruptionBudgetState) ElementType() reflect.Type

type PodDisruptionBudgetStatus

type PodDisruptionBudgetStatus struct {
	// current number of healthy pods
	CurrentHealthy int `pulumi:"currentHealthy"`
	// minimum desired number of healthy pods
	DesiredHealthy int `pulumi:"desiredHealthy"`
	// DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
	DisruptedPods map[string]string `pulumi:"disruptedPods"`
	// Number of pod disruptions that are currently allowed.
	DisruptionsAllowed int `pulumi:"disruptionsAllowed"`
	// total number of pods counted by this disruption budget
	ExpectedPods int `pulumi:"expectedPods"`
	// Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.
	ObservedGeneration *int `pulumi:"observedGeneration"`
}

PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.

type PodDisruptionBudgetStatusArgs

type PodDisruptionBudgetStatusArgs struct {
	// current number of healthy pods
	CurrentHealthy pulumi.IntInput `pulumi:"currentHealthy"`
	// minimum desired number of healthy pods
	DesiredHealthy pulumi.IntInput `pulumi:"desiredHealthy"`
	// DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
	DisruptedPods pulumi.StringMapInput `pulumi:"disruptedPods"`
	// Number of pod disruptions that are currently allowed.
	DisruptionsAllowed pulumi.IntInput `pulumi:"disruptionsAllowed"`
	// total number of pods counted by this disruption budget
	ExpectedPods pulumi.IntInput `pulumi:"expectedPods"`
	// Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.
	ObservedGeneration pulumi.IntPtrInput `pulumi:"observedGeneration"`
}

PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.

func (PodDisruptionBudgetStatusArgs) ElementType

func (PodDisruptionBudgetStatusArgs) ToPodDisruptionBudgetStatusOutput

func (i PodDisruptionBudgetStatusArgs) ToPodDisruptionBudgetStatusOutput() PodDisruptionBudgetStatusOutput

func (PodDisruptionBudgetStatusArgs) ToPodDisruptionBudgetStatusOutputWithContext

func (i PodDisruptionBudgetStatusArgs) ToPodDisruptionBudgetStatusOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusOutput

func (PodDisruptionBudgetStatusArgs) ToPodDisruptionBudgetStatusPtrOutput

func (i PodDisruptionBudgetStatusArgs) ToPodDisruptionBudgetStatusPtrOutput() PodDisruptionBudgetStatusPtrOutput

func (PodDisruptionBudgetStatusArgs) ToPodDisruptionBudgetStatusPtrOutputWithContext

func (i PodDisruptionBudgetStatusArgs) ToPodDisruptionBudgetStatusPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPtrOutput

type PodDisruptionBudgetStatusInput

type PodDisruptionBudgetStatusInput interface {
	pulumi.Input

	ToPodDisruptionBudgetStatusOutput() PodDisruptionBudgetStatusOutput
	ToPodDisruptionBudgetStatusOutputWithContext(context.Context) PodDisruptionBudgetStatusOutput
}

PodDisruptionBudgetStatusInput is an input type that accepts PodDisruptionBudgetStatusArgs and PodDisruptionBudgetStatusOutput values. You can construct a concrete instance of `PodDisruptionBudgetStatusInput` via:

PodDisruptionBudgetStatusArgs{...}

type PodDisruptionBudgetStatusOutput

type PodDisruptionBudgetStatusOutput struct{ *pulumi.OutputState }

PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.

func (PodDisruptionBudgetStatusOutput) CurrentHealthy

current number of healthy pods

func (PodDisruptionBudgetStatusOutput) DesiredHealthy

minimum desired number of healthy pods

func (PodDisruptionBudgetStatusOutput) DisruptedPods

DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.

func (PodDisruptionBudgetStatusOutput) DisruptionsAllowed

func (o PodDisruptionBudgetStatusOutput) DisruptionsAllowed() pulumi.IntOutput

Number of pod disruptions that are currently allowed.

func (PodDisruptionBudgetStatusOutput) ElementType

func (PodDisruptionBudgetStatusOutput) ExpectedPods

total number of pods counted by this disruption budget

func (PodDisruptionBudgetStatusOutput) ObservedGeneration

func (o PodDisruptionBudgetStatusOutput) ObservedGeneration() pulumi.IntPtrOutput

Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.

func (PodDisruptionBudgetStatusOutput) ToPodDisruptionBudgetStatusOutput

func (o PodDisruptionBudgetStatusOutput) ToPodDisruptionBudgetStatusOutput() PodDisruptionBudgetStatusOutput

func (PodDisruptionBudgetStatusOutput) ToPodDisruptionBudgetStatusOutputWithContext

func (o PodDisruptionBudgetStatusOutput) ToPodDisruptionBudgetStatusOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusOutput

func (PodDisruptionBudgetStatusOutput) ToPodDisruptionBudgetStatusPtrOutput

func (o PodDisruptionBudgetStatusOutput) ToPodDisruptionBudgetStatusPtrOutput() PodDisruptionBudgetStatusPtrOutput

func (PodDisruptionBudgetStatusOutput) ToPodDisruptionBudgetStatusPtrOutputWithContext

func (o PodDisruptionBudgetStatusOutput) ToPodDisruptionBudgetStatusPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPtrOutput

type PodDisruptionBudgetStatusPatch

type PodDisruptionBudgetStatusPatch struct {
	// current number of healthy pods
	CurrentHealthy *int `pulumi:"currentHealthy"`
	// minimum desired number of healthy pods
	DesiredHealthy *int `pulumi:"desiredHealthy"`
	// DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
	DisruptedPods map[string]string `pulumi:"disruptedPods"`
	// Number of pod disruptions that are currently allowed.
	DisruptionsAllowed *int `pulumi:"disruptionsAllowed"`
	// total number of pods counted by this disruption budget
	ExpectedPods *int `pulumi:"expectedPods"`
	// Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.
	ObservedGeneration *int `pulumi:"observedGeneration"`
}

PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.

type PodDisruptionBudgetStatusPatchArgs

type PodDisruptionBudgetStatusPatchArgs struct {
	// current number of healthy pods
	CurrentHealthy pulumi.IntPtrInput `pulumi:"currentHealthy"`
	// minimum desired number of healthy pods
	DesiredHealthy pulumi.IntPtrInput `pulumi:"desiredHealthy"`
	// DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
	DisruptedPods pulumi.StringMapInput `pulumi:"disruptedPods"`
	// Number of pod disruptions that are currently allowed.
	DisruptionsAllowed pulumi.IntPtrInput `pulumi:"disruptionsAllowed"`
	// total number of pods counted by this disruption budget
	ExpectedPods pulumi.IntPtrInput `pulumi:"expectedPods"`
	// Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.
	ObservedGeneration pulumi.IntPtrInput `pulumi:"observedGeneration"`
}

PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.

func (PodDisruptionBudgetStatusPatchArgs) ElementType

func (PodDisruptionBudgetStatusPatchArgs) ToPodDisruptionBudgetStatusPatchOutput

func (i PodDisruptionBudgetStatusPatchArgs) ToPodDisruptionBudgetStatusPatchOutput() PodDisruptionBudgetStatusPatchOutput

func (PodDisruptionBudgetStatusPatchArgs) ToPodDisruptionBudgetStatusPatchOutputWithContext

func (i PodDisruptionBudgetStatusPatchArgs) ToPodDisruptionBudgetStatusPatchOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPatchOutput

func (PodDisruptionBudgetStatusPatchArgs) ToPodDisruptionBudgetStatusPatchPtrOutput

func (i PodDisruptionBudgetStatusPatchArgs) ToPodDisruptionBudgetStatusPatchPtrOutput() PodDisruptionBudgetStatusPatchPtrOutput

func (PodDisruptionBudgetStatusPatchArgs) ToPodDisruptionBudgetStatusPatchPtrOutputWithContext

func (i PodDisruptionBudgetStatusPatchArgs) ToPodDisruptionBudgetStatusPatchPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPatchPtrOutput

type PodDisruptionBudgetStatusPatchInput

type PodDisruptionBudgetStatusPatchInput interface {
	pulumi.Input

	ToPodDisruptionBudgetStatusPatchOutput() PodDisruptionBudgetStatusPatchOutput
	ToPodDisruptionBudgetStatusPatchOutputWithContext(context.Context) PodDisruptionBudgetStatusPatchOutput
}

PodDisruptionBudgetStatusPatchInput is an input type that accepts PodDisruptionBudgetStatusPatchArgs and PodDisruptionBudgetStatusPatchOutput values. You can construct a concrete instance of `PodDisruptionBudgetStatusPatchInput` via:

PodDisruptionBudgetStatusPatchArgs{...}

type PodDisruptionBudgetStatusPatchOutput

type PodDisruptionBudgetStatusPatchOutput struct{ *pulumi.OutputState }

PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.

func (PodDisruptionBudgetStatusPatchOutput) CurrentHealthy

current number of healthy pods

func (PodDisruptionBudgetStatusPatchOutput) DesiredHealthy

minimum desired number of healthy pods

func (PodDisruptionBudgetStatusPatchOutput) DisruptedPods

DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.

func (PodDisruptionBudgetStatusPatchOutput) DisruptionsAllowed

Number of pod disruptions that are currently allowed.

func (PodDisruptionBudgetStatusPatchOutput) ElementType

func (PodDisruptionBudgetStatusPatchOutput) ExpectedPods

total number of pods counted by this disruption budget

func (PodDisruptionBudgetStatusPatchOutput) ObservedGeneration

Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.

func (PodDisruptionBudgetStatusPatchOutput) ToPodDisruptionBudgetStatusPatchOutput

func (o PodDisruptionBudgetStatusPatchOutput) ToPodDisruptionBudgetStatusPatchOutput() PodDisruptionBudgetStatusPatchOutput

func (PodDisruptionBudgetStatusPatchOutput) ToPodDisruptionBudgetStatusPatchOutputWithContext

func (o PodDisruptionBudgetStatusPatchOutput) ToPodDisruptionBudgetStatusPatchOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPatchOutput

func (PodDisruptionBudgetStatusPatchOutput) ToPodDisruptionBudgetStatusPatchPtrOutput

func (o PodDisruptionBudgetStatusPatchOutput) ToPodDisruptionBudgetStatusPatchPtrOutput() PodDisruptionBudgetStatusPatchPtrOutput

func (PodDisruptionBudgetStatusPatchOutput) ToPodDisruptionBudgetStatusPatchPtrOutputWithContext

func (o PodDisruptionBudgetStatusPatchOutput) ToPodDisruptionBudgetStatusPatchPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPatchPtrOutput

type PodDisruptionBudgetStatusPatchPtrInput

type PodDisruptionBudgetStatusPatchPtrInput interface {
	pulumi.Input

	ToPodDisruptionBudgetStatusPatchPtrOutput() PodDisruptionBudgetStatusPatchPtrOutput
	ToPodDisruptionBudgetStatusPatchPtrOutputWithContext(context.Context) PodDisruptionBudgetStatusPatchPtrOutput
}

PodDisruptionBudgetStatusPatchPtrInput is an input type that accepts PodDisruptionBudgetStatusPatchArgs, PodDisruptionBudgetStatusPatchPtr and PodDisruptionBudgetStatusPatchPtrOutput values. You can construct a concrete instance of `PodDisruptionBudgetStatusPatchPtrInput` via:

        PodDisruptionBudgetStatusPatchArgs{...}

or:

        nil

type PodDisruptionBudgetStatusPatchPtrOutput

type PodDisruptionBudgetStatusPatchPtrOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetStatusPatchPtrOutput) CurrentHealthy

current number of healthy pods

func (PodDisruptionBudgetStatusPatchPtrOutput) DesiredHealthy

minimum desired number of healthy pods

func (PodDisruptionBudgetStatusPatchPtrOutput) DisruptedPods

DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.

func (PodDisruptionBudgetStatusPatchPtrOutput) DisruptionsAllowed

Number of pod disruptions that are currently allowed.

func (PodDisruptionBudgetStatusPatchPtrOutput) Elem

func (PodDisruptionBudgetStatusPatchPtrOutput) ElementType

func (PodDisruptionBudgetStatusPatchPtrOutput) ExpectedPods

total number of pods counted by this disruption budget

func (PodDisruptionBudgetStatusPatchPtrOutput) ObservedGeneration

Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.

func (PodDisruptionBudgetStatusPatchPtrOutput) ToPodDisruptionBudgetStatusPatchPtrOutput

func (o PodDisruptionBudgetStatusPatchPtrOutput) ToPodDisruptionBudgetStatusPatchPtrOutput() PodDisruptionBudgetStatusPatchPtrOutput

func (PodDisruptionBudgetStatusPatchPtrOutput) ToPodDisruptionBudgetStatusPatchPtrOutputWithContext

func (o PodDisruptionBudgetStatusPatchPtrOutput) ToPodDisruptionBudgetStatusPatchPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPatchPtrOutput

type PodDisruptionBudgetStatusPtrInput

type PodDisruptionBudgetStatusPtrInput interface {
	pulumi.Input

	ToPodDisruptionBudgetStatusPtrOutput() PodDisruptionBudgetStatusPtrOutput
	ToPodDisruptionBudgetStatusPtrOutputWithContext(context.Context) PodDisruptionBudgetStatusPtrOutput
}

PodDisruptionBudgetStatusPtrInput is an input type that accepts PodDisruptionBudgetStatusArgs, PodDisruptionBudgetStatusPtr and PodDisruptionBudgetStatusPtrOutput values. You can construct a concrete instance of `PodDisruptionBudgetStatusPtrInput` via:

        PodDisruptionBudgetStatusArgs{...}

or:

        nil

type PodDisruptionBudgetStatusPtrOutput

type PodDisruptionBudgetStatusPtrOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetStatusPtrOutput) CurrentHealthy

current number of healthy pods

func (PodDisruptionBudgetStatusPtrOutput) DesiredHealthy

minimum desired number of healthy pods

func (PodDisruptionBudgetStatusPtrOutput) DisruptedPods

DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.

func (PodDisruptionBudgetStatusPtrOutput) DisruptionsAllowed

Number of pod disruptions that are currently allowed.

func (PodDisruptionBudgetStatusPtrOutput) Elem

func (PodDisruptionBudgetStatusPtrOutput) ElementType

func (PodDisruptionBudgetStatusPtrOutput) ExpectedPods

total number of pods counted by this disruption budget

func (PodDisruptionBudgetStatusPtrOutput) ObservedGeneration

Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.

func (PodDisruptionBudgetStatusPtrOutput) ToPodDisruptionBudgetStatusPtrOutput

func (o PodDisruptionBudgetStatusPtrOutput) ToPodDisruptionBudgetStatusPtrOutput() PodDisruptionBudgetStatusPtrOutput

func (PodDisruptionBudgetStatusPtrOutput) ToPodDisruptionBudgetStatusPtrOutputWithContext

func (o PodDisruptionBudgetStatusPtrOutput) ToPodDisruptionBudgetStatusPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPtrOutput

type PodDisruptionBudgetType

type PodDisruptionBudgetType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     *string            `pulumi:"kind"`
	Metadata *metav1.ObjectMeta `pulumi:"metadata"`
	// Specification of the desired behavior of the PodDisruptionBudget.
	Spec *PodDisruptionBudgetSpec `pulumi:"spec"`
	// Most recently observed status of the PodDisruptionBudget.
	Status *PodDisruptionBudgetStatus `pulumi:"status"`
}

PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods

type PodDisruptionBudgetTypeArgs

type PodDisruptionBudgetTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput     `pulumi:"kind"`
	Metadata metav1.ObjectMetaPtrInput `pulumi:"metadata"`
	// Specification of the desired behavior of the PodDisruptionBudget.
	Spec PodDisruptionBudgetSpecPtrInput `pulumi:"spec"`
	// Most recently observed status of the PodDisruptionBudget.
	Status PodDisruptionBudgetStatusPtrInput `pulumi:"status"`
}

PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods

func (PodDisruptionBudgetTypeArgs) ElementType

func (PodDisruptionBudgetTypeArgs) ToPodDisruptionBudgetTypeOutput

func (i PodDisruptionBudgetTypeArgs) ToPodDisruptionBudgetTypeOutput() PodDisruptionBudgetTypeOutput

func (PodDisruptionBudgetTypeArgs) ToPodDisruptionBudgetTypeOutputWithContext

func (i PodDisruptionBudgetTypeArgs) ToPodDisruptionBudgetTypeOutputWithContext(ctx context.Context) PodDisruptionBudgetTypeOutput

type PodDisruptionBudgetTypeArray

type PodDisruptionBudgetTypeArray []PodDisruptionBudgetTypeInput

func (PodDisruptionBudgetTypeArray) ElementType

func (PodDisruptionBudgetTypeArray) ToPodDisruptionBudgetTypeArrayOutput

func (i PodDisruptionBudgetTypeArray) ToPodDisruptionBudgetTypeArrayOutput() PodDisruptionBudgetTypeArrayOutput

func (PodDisruptionBudgetTypeArray) ToPodDisruptionBudgetTypeArrayOutputWithContext

func (i PodDisruptionBudgetTypeArray) ToPodDisruptionBudgetTypeArrayOutputWithContext(ctx context.Context) PodDisruptionBudgetTypeArrayOutput

type PodDisruptionBudgetTypeArrayInput

type PodDisruptionBudgetTypeArrayInput interface {
	pulumi.Input

	ToPodDisruptionBudgetTypeArrayOutput() PodDisruptionBudgetTypeArrayOutput
	ToPodDisruptionBudgetTypeArrayOutputWithContext(context.Context) PodDisruptionBudgetTypeArrayOutput
}

PodDisruptionBudgetTypeArrayInput is an input type that accepts PodDisruptionBudgetTypeArray and PodDisruptionBudgetTypeArrayOutput values. You can construct a concrete instance of `PodDisruptionBudgetTypeArrayInput` via:

PodDisruptionBudgetTypeArray{ PodDisruptionBudgetTypeArgs{...} }

type PodDisruptionBudgetTypeArrayOutput

type PodDisruptionBudgetTypeArrayOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetTypeArrayOutput) ElementType

func (PodDisruptionBudgetTypeArrayOutput) Index

func (PodDisruptionBudgetTypeArrayOutput) ToPodDisruptionBudgetTypeArrayOutput

func (o PodDisruptionBudgetTypeArrayOutput) ToPodDisruptionBudgetTypeArrayOutput() PodDisruptionBudgetTypeArrayOutput

func (PodDisruptionBudgetTypeArrayOutput) ToPodDisruptionBudgetTypeArrayOutputWithContext

func (o PodDisruptionBudgetTypeArrayOutput) ToPodDisruptionBudgetTypeArrayOutputWithContext(ctx context.Context) PodDisruptionBudgetTypeArrayOutput

type PodDisruptionBudgetTypeInput

type PodDisruptionBudgetTypeInput interface {
	pulumi.Input

	ToPodDisruptionBudgetTypeOutput() PodDisruptionBudgetTypeOutput
	ToPodDisruptionBudgetTypeOutputWithContext(context.Context) PodDisruptionBudgetTypeOutput
}

PodDisruptionBudgetTypeInput is an input type that accepts PodDisruptionBudgetTypeArgs and PodDisruptionBudgetTypeOutput values. You can construct a concrete instance of `PodDisruptionBudgetTypeInput` via:

PodDisruptionBudgetTypeArgs{...}

type PodDisruptionBudgetTypeOutput

type PodDisruptionBudgetTypeOutput struct{ *pulumi.OutputState }

PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods

func (PodDisruptionBudgetTypeOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodDisruptionBudgetTypeOutput) ElementType

func (PodDisruptionBudgetTypeOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodDisruptionBudgetTypeOutput) Metadata

func (PodDisruptionBudgetTypeOutput) Spec

Specification of the desired behavior of the PodDisruptionBudget.

func (PodDisruptionBudgetTypeOutput) Status

Most recently observed status of the PodDisruptionBudget.

func (PodDisruptionBudgetTypeOutput) ToPodDisruptionBudgetTypeOutput

func (o PodDisruptionBudgetTypeOutput) ToPodDisruptionBudgetTypeOutput() PodDisruptionBudgetTypeOutput

func (PodDisruptionBudgetTypeOutput) ToPodDisruptionBudgetTypeOutputWithContext

func (o PodDisruptionBudgetTypeOutput) ToPodDisruptionBudgetTypeOutputWithContext(ctx context.Context) PodDisruptionBudgetTypeOutput

type PodSecurityPolicy

type PodSecurityPolicy struct {
	pulumi.CustomResourceState

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringOutput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringOutput `pulumi:"kind"`
	// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaOutput `pulumi:"metadata"`
	// spec defines the policy enforced.
	Spec PodSecurityPolicySpecOutput `pulumi:"spec"`
}

PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.

func GetPodSecurityPolicy

func GetPodSecurityPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PodSecurityPolicyState, opts ...pulumi.ResourceOption) (*PodSecurityPolicy, error)

GetPodSecurityPolicy gets an existing PodSecurityPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPodSecurityPolicy

func NewPodSecurityPolicy(ctx *pulumi.Context,
	name string, args *PodSecurityPolicyArgs, opts ...pulumi.ResourceOption) (*PodSecurityPolicy, error)

NewPodSecurityPolicy registers a new resource with the given unique name, arguments, and options.

func (*PodSecurityPolicy) ElementType

func (*PodSecurityPolicy) ElementType() reflect.Type

func (*PodSecurityPolicy) ToPodSecurityPolicyOutput

func (i *PodSecurityPolicy) ToPodSecurityPolicyOutput() PodSecurityPolicyOutput

func (*PodSecurityPolicy) ToPodSecurityPolicyOutputWithContext

func (i *PodSecurityPolicy) ToPodSecurityPolicyOutputWithContext(ctx context.Context) PodSecurityPolicyOutput

type PodSecurityPolicyArgs

type PodSecurityPolicyArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput
	// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPtrInput
	// spec defines the policy enforced.
	Spec PodSecurityPolicySpecPtrInput
}

The set of arguments for constructing a PodSecurityPolicy resource.

func (PodSecurityPolicyArgs) ElementType

func (PodSecurityPolicyArgs) ElementType() reflect.Type

type PodSecurityPolicyArray

type PodSecurityPolicyArray []PodSecurityPolicyInput

func (PodSecurityPolicyArray) ElementType

func (PodSecurityPolicyArray) ElementType() reflect.Type

func (PodSecurityPolicyArray) ToPodSecurityPolicyArrayOutput

func (i PodSecurityPolicyArray) ToPodSecurityPolicyArrayOutput() PodSecurityPolicyArrayOutput

func (PodSecurityPolicyArray) ToPodSecurityPolicyArrayOutputWithContext

func (i PodSecurityPolicyArray) ToPodSecurityPolicyArrayOutputWithContext(ctx context.Context) PodSecurityPolicyArrayOutput

type PodSecurityPolicyArrayInput

type PodSecurityPolicyArrayInput interface {
	pulumi.Input

	ToPodSecurityPolicyArrayOutput() PodSecurityPolicyArrayOutput
	ToPodSecurityPolicyArrayOutputWithContext(context.Context) PodSecurityPolicyArrayOutput
}

PodSecurityPolicyArrayInput is an input type that accepts PodSecurityPolicyArray and PodSecurityPolicyArrayOutput values. You can construct a concrete instance of `PodSecurityPolicyArrayInput` via:

PodSecurityPolicyArray{ PodSecurityPolicyArgs{...} }

type PodSecurityPolicyArrayOutput

type PodSecurityPolicyArrayOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyArrayOutput) ElementType

func (PodSecurityPolicyArrayOutput) Index

func (PodSecurityPolicyArrayOutput) ToPodSecurityPolicyArrayOutput

func (o PodSecurityPolicyArrayOutput) ToPodSecurityPolicyArrayOutput() PodSecurityPolicyArrayOutput

func (PodSecurityPolicyArrayOutput) ToPodSecurityPolicyArrayOutputWithContext

func (o PodSecurityPolicyArrayOutput) ToPodSecurityPolicyArrayOutputWithContext(ctx context.Context) PodSecurityPolicyArrayOutput

type PodSecurityPolicyInput

type PodSecurityPolicyInput interface {
	pulumi.Input

	ToPodSecurityPolicyOutput() PodSecurityPolicyOutput
	ToPodSecurityPolicyOutputWithContext(ctx context.Context) PodSecurityPolicyOutput
}

type PodSecurityPolicyList

type PodSecurityPolicyList struct {
	pulumi.CustomResourceState

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringOutput `pulumi:"apiVersion"`
	// items is a list of schema objects.
	Items PodSecurityPolicyTypeArrayOutput `pulumi:"items"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringOutput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ListMetaOutput `pulumi:"metadata"`
}

PodSecurityPolicyList is a list of PodSecurityPolicy objects.

func GetPodSecurityPolicyList

func GetPodSecurityPolicyList(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PodSecurityPolicyListState, opts ...pulumi.ResourceOption) (*PodSecurityPolicyList, error)

GetPodSecurityPolicyList gets an existing PodSecurityPolicyList resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPodSecurityPolicyList

func NewPodSecurityPolicyList(ctx *pulumi.Context,
	name string, args *PodSecurityPolicyListArgs, opts ...pulumi.ResourceOption) (*PodSecurityPolicyList, error)

NewPodSecurityPolicyList registers a new resource with the given unique name, arguments, and options.

func (*PodSecurityPolicyList) ElementType

func (*PodSecurityPolicyList) ElementType() reflect.Type

func (*PodSecurityPolicyList) ToPodSecurityPolicyListOutput

func (i *PodSecurityPolicyList) ToPodSecurityPolicyListOutput() PodSecurityPolicyListOutput

func (*PodSecurityPolicyList) ToPodSecurityPolicyListOutputWithContext

func (i *PodSecurityPolicyList) ToPodSecurityPolicyListOutputWithContext(ctx context.Context) PodSecurityPolicyListOutput

type PodSecurityPolicyListArgs

type PodSecurityPolicyListArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput
	// items is a list of schema objects.
	Items PodSecurityPolicyTypeArrayInput
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ListMetaPtrInput
}

The set of arguments for constructing a PodSecurityPolicyList resource.

func (PodSecurityPolicyListArgs) ElementType

func (PodSecurityPolicyListArgs) ElementType() reflect.Type

type PodSecurityPolicyListArray

type PodSecurityPolicyListArray []PodSecurityPolicyListInput

func (PodSecurityPolicyListArray) ElementType

func (PodSecurityPolicyListArray) ElementType() reflect.Type

func (PodSecurityPolicyListArray) ToPodSecurityPolicyListArrayOutput

func (i PodSecurityPolicyListArray) ToPodSecurityPolicyListArrayOutput() PodSecurityPolicyListArrayOutput

func (PodSecurityPolicyListArray) ToPodSecurityPolicyListArrayOutputWithContext

func (i PodSecurityPolicyListArray) ToPodSecurityPolicyListArrayOutputWithContext(ctx context.Context) PodSecurityPolicyListArrayOutput

type PodSecurityPolicyListArrayInput

type PodSecurityPolicyListArrayInput interface {
	pulumi.Input

	ToPodSecurityPolicyListArrayOutput() PodSecurityPolicyListArrayOutput
	ToPodSecurityPolicyListArrayOutputWithContext(context.Context) PodSecurityPolicyListArrayOutput
}

PodSecurityPolicyListArrayInput is an input type that accepts PodSecurityPolicyListArray and PodSecurityPolicyListArrayOutput values. You can construct a concrete instance of `PodSecurityPolicyListArrayInput` via:

PodSecurityPolicyListArray{ PodSecurityPolicyListArgs{...} }

type PodSecurityPolicyListArrayOutput

type PodSecurityPolicyListArrayOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyListArrayOutput) ElementType

func (PodSecurityPolicyListArrayOutput) Index

func (PodSecurityPolicyListArrayOutput) ToPodSecurityPolicyListArrayOutput

func (o PodSecurityPolicyListArrayOutput) ToPodSecurityPolicyListArrayOutput() PodSecurityPolicyListArrayOutput

func (PodSecurityPolicyListArrayOutput) ToPodSecurityPolicyListArrayOutputWithContext

func (o PodSecurityPolicyListArrayOutput) ToPodSecurityPolicyListArrayOutputWithContext(ctx context.Context) PodSecurityPolicyListArrayOutput

type PodSecurityPolicyListInput

type PodSecurityPolicyListInput interface {
	pulumi.Input

	ToPodSecurityPolicyListOutput() PodSecurityPolicyListOutput
	ToPodSecurityPolicyListOutputWithContext(ctx context.Context) PodSecurityPolicyListOutput
}

type PodSecurityPolicyListMap

type PodSecurityPolicyListMap map[string]PodSecurityPolicyListInput

func (PodSecurityPolicyListMap) ElementType

func (PodSecurityPolicyListMap) ElementType() reflect.Type

func (PodSecurityPolicyListMap) ToPodSecurityPolicyListMapOutput

func (i PodSecurityPolicyListMap) ToPodSecurityPolicyListMapOutput() PodSecurityPolicyListMapOutput

func (PodSecurityPolicyListMap) ToPodSecurityPolicyListMapOutputWithContext

func (i PodSecurityPolicyListMap) ToPodSecurityPolicyListMapOutputWithContext(ctx context.Context) PodSecurityPolicyListMapOutput

type PodSecurityPolicyListMapInput

type PodSecurityPolicyListMapInput interface {
	pulumi.Input

	ToPodSecurityPolicyListMapOutput() PodSecurityPolicyListMapOutput
	ToPodSecurityPolicyListMapOutputWithContext(context.Context) PodSecurityPolicyListMapOutput
}

PodSecurityPolicyListMapInput is an input type that accepts PodSecurityPolicyListMap and PodSecurityPolicyListMapOutput values. You can construct a concrete instance of `PodSecurityPolicyListMapInput` via:

PodSecurityPolicyListMap{ "key": PodSecurityPolicyListArgs{...} }

type PodSecurityPolicyListMapOutput

type PodSecurityPolicyListMapOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyListMapOutput) ElementType

func (PodSecurityPolicyListMapOutput) MapIndex

func (PodSecurityPolicyListMapOutput) ToPodSecurityPolicyListMapOutput

func (o PodSecurityPolicyListMapOutput) ToPodSecurityPolicyListMapOutput() PodSecurityPolicyListMapOutput

func (PodSecurityPolicyListMapOutput) ToPodSecurityPolicyListMapOutputWithContext

func (o PodSecurityPolicyListMapOutput) ToPodSecurityPolicyListMapOutputWithContext(ctx context.Context) PodSecurityPolicyListMapOutput

type PodSecurityPolicyListOutput

type PodSecurityPolicyListOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyListOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodSecurityPolicyListOutput) ElementType

func (PodSecurityPolicyListOutput) Items

items is a list of schema objects.

func (PodSecurityPolicyListOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodSecurityPolicyListOutput) ToPodSecurityPolicyListOutput

func (o PodSecurityPolicyListOutput) ToPodSecurityPolicyListOutput() PodSecurityPolicyListOutput

func (PodSecurityPolicyListOutput) ToPodSecurityPolicyListOutputWithContext

func (o PodSecurityPolicyListOutput) ToPodSecurityPolicyListOutputWithContext(ctx context.Context) PodSecurityPolicyListOutput

type PodSecurityPolicyListState

type PodSecurityPolicyListState struct {
}

func (PodSecurityPolicyListState) ElementType

func (PodSecurityPolicyListState) ElementType() reflect.Type

type PodSecurityPolicyListType

type PodSecurityPolicyListType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// items is a list of schema objects.
	Items []PodSecurityPolicyType `pulumi:"items"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata *metav1.ListMeta `pulumi:"metadata"`
}

PodSecurityPolicyList is a list of PodSecurityPolicy objects.

type PodSecurityPolicyListTypeArgs

type PodSecurityPolicyListTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// items is a list of schema objects.
	Items PodSecurityPolicyTypeArrayInput `pulumi:"items"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ListMetaPtrInput `pulumi:"metadata"`
}

PodSecurityPolicyList is a list of PodSecurityPolicy objects.

func (PodSecurityPolicyListTypeArgs) ElementType

func (PodSecurityPolicyListTypeArgs) ToPodSecurityPolicyListTypeOutput

func (i PodSecurityPolicyListTypeArgs) ToPodSecurityPolicyListTypeOutput() PodSecurityPolicyListTypeOutput

func (PodSecurityPolicyListTypeArgs) ToPodSecurityPolicyListTypeOutputWithContext

func (i PodSecurityPolicyListTypeArgs) ToPodSecurityPolicyListTypeOutputWithContext(ctx context.Context) PodSecurityPolicyListTypeOutput

type PodSecurityPolicyListTypeInput

type PodSecurityPolicyListTypeInput interface {
	pulumi.Input

	ToPodSecurityPolicyListTypeOutput() PodSecurityPolicyListTypeOutput
	ToPodSecurityPolicyListTypeOutputWithContext(context.Context) PodSecurityPolicyListTypeOutput
}

PodSecurityPolicyListTypeInput is an input type that accepts PodSecurityPolicyListTypeArgs and PodSecurityPolicyListTypeOutput values. You can construct a concrete instance of `PodSecurityPolicyListTypeInput` via:

PodSecurityPolicyListTypeArgs{...}

type PodSecurityPolicyListTypeOutput

type PodSecurityPolicyListTypeOutput struct{ *pulumi.OutputState }

PodSecurityPolicyList is a list of PodSecurityPolicy objects.

func (PodSecurityPolicyListTypeOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodSecurityPolicyListTypeOutput) ElementType

func (PodSecurityPolicyListTypeOutput) Items

items is a list of schema objects.

func (PodSecurityPolicyListTypeOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodSecurityPolicyListTypeOutput) ToPodSecurityPolicyListTypeOutput

func (o PodSecurityPolicyListTypeOutput) ToPodSecurityPolicyListTypeOutput() PodSecurityPolicyListTypeOutput

func (PodSecurityPolicyListTypeOutput) ToPodSecurityPolicyListTypeOutputWithContext

func (o PodSecurityPolicyListTypeOutput) ToPodSecurityPolicyListTypeOutputWithContext(ctx context.Context) PodSecurityPolicyListTypeOutput

type PodSecurityPolicyMap

type PodSecurityPolicyMap map[string]PodSecurityPolicyInput

func (PodSecurityPolicyMap) ElementType

func (PodSecurityPolicyMap) ElementType() reflect.Type

func (PodSecurityPolicyMap) ToPodSecurityPolicyMapOutput

func (i PodSecurityPolicyMap) ToPodSecurityPolicyMapOutput() PodSecurityPolicyMapOutput

func (PodSecurityPolicyMap) ToPodSecurityPolicyMapOutputWithContext

func (i PodSecurityPolicyMap) ToPodSecurityPolicyMapOutputWithContext(ctx context.Context) PodSecurityPolicyMapOutput

type PodSecurityPolicyMapInput

type PodSecurityPolicyMapInput interface {
	pulumi.Input

	ToPodSecurityPolicyMapOutput() PodSecurityPolicyMapOutput
	ToPodSecurityPolicyMapOutputWithContext(context.Context) PodSecurityPolicyMapOutput
}

PodSecurityPolicyMapInput is an input type that accepts PodSecurityPolicyMap and PodSecurityPolicyMapOutput values. You can construct a concrete instance of `PodSecurityPolicyMapInput` via:

PodSecurityPolicyMap{ "key": PodSecurityPolicyArgs{...} }

type PodSecurityPolicyMapOutput

type PodSecurityPolicyMapOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyMapOutput) ElementType

func (PodSecurityPolicyMapOutput) ElementType() reflect.Type

func (PodSecurityPolicyMapOutput) MapIndex

func (PodSecurityPolicyMapOutput) ToPodSecurityPolicyMapOutput

func (o PodSecurityPolicyMapOutput) ToPodSecurityPolicyMapOutput() PodSecurityPolicyMapOutput

func (PodSecurityPolicyMapOutput) ToPodSecurityPolicyMapOutputWithContext

func (o PodSecurityPolicyMapOutput) ToPodSecurityPolicyMapOutputWithContext(ctx context.Context) PodSecurityPolicyMapOutput

type PodSecurityPolicyOutput

type PodSecurityPolicyOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodSecurityPolicyOutput) ElementType

func (PodSecurityPolicyOutput) ElementType() reflect.Type

func (PodSecurityPolicyOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodSecurityPolicyOutput) Spec

spec defines the policy enforced.

func (PodSecurityPolicyOutput) ToPodSecurityPolicyOutput

func (o PodSecurityPolicyOutput) ToPodSecurityPolicyOutput() PodSecurityPolicyOutput

func (PodSecurityPolicyOutput) ToPodSecurityPolicyOutputWithContext

func (o PodSecurityPolicyOutput) ToPodSecurityPolicyOutputWithContext(ctx context.Context) PodSecurityPolicyOutput

type PodSecurityPolicyPatch

type PodSecurityPolicyPatch struct {
	pulumi.CustomResourceState

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrOutput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrOutput `pulumi:"kind"`
	// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPatchPtrOutput `pulumi:"metadata"`
	// spec defines the policy enforced.
	Spec PodSecurityPolicySpecPatchPtrOutput `pulumi:"spec"`
}

Patch resources are used to modify existing Kubernetes resources by using Server-Side Apply updates. The name of the resource must be specified, but all other properties are optional. More than one patch may be applied to the same resource, and a random FieldManager name will be used for each Patch resource. Conflicts will result in an error by default, but can be forced using the "pulumi.com/patchForce" annotation. See the [Server-Side Apply Docs](https://www.pulumi.com/registry/packages/kubernetes/how-to-guides/managing-resources-with-server-side-apply/) for additional information about using Server-Side Apply to manage Kubernetes resources with Pulumi. PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.

func GetPodSecurityPolicyPatch

func GetPodSecurityPolicyPatch(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PodSecurityPolicyPatchState, opts ...pulumi.ResourceOption) (*PodSecurityPolicyPatch, error)

GetPodSecurityPolicyPatch gets an existing PodSecurityPolicyPatch resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPodSecurityPolicyPatch

func NewPodSecurityPolicyPatch(ctx *pulumi.Context,
	name string, args *PodSecurityPolicyPatchArgs, opts ...pulumi.ResourceOption) (*PodSecurityPolicyPatch, error)

NewPodSecurityPolicyPatch registers a new resource with the given unique name, arguments, and options.

func (*PodSecurityPolicyPatch) ElementType

func (*PodSecurityPolicyPatch) ElementType() reflect.Type

func (*PodSecurityPolicyPatch) ToPodSecurityPolicyPatchOutput

func (i *PodSecurityPolicyPatch) ToPodSecurityPolicyPatchOutput() PodSecurityPolicyPatchOutput

func (*PodSecurityPolicyPatch) ToPodSecurityPolicyPatchOutputWithContext

func (i *PodSecurityPolicyPatch) ToPodSecurityPolicyPatchOutputWithContext(ctx context.Context) PodSecurityPolicyPatchOutput

type PodSecurityPolicyPatchArgs

type PodSecurityPolicyPatchArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput
	// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPatchPtrInput
	// spec defines the policy enforced.
	Spec PodSecurityPolicySpecPatchPtrInput
}

The set of arguments for constructing a PodSecurityPolicyPatch resource.

func (PodSecurityPolicyPatchArgs) ElementType

func (PodSecurityPolicyPatchArgs) ElementType() reflect.Type

type PodSecurityPolicyPatchArray

type PodSecurityPolicyPatchArray []PodSecurityPolicyPatchInput

func (PodSecurityPolicyPatchArray) ElementType

func (PodSecurityPolicyPatchArray) ToPodSecurityPolicyPatchArrayOutput

func (i PodSecurityPolicyPatchArray) ToPodSecurityPolicyPatchArrayOutput() PodSecurityPolicyPatchArrayOutput

func (PodSecurityPolicyPatchArray) ToPodSecurityPolicyPatchArrayOutputWithContext

func (i PodSecurityPolicyPatchArray) ToPodSecurityPolicyPatchArrayOutputWithContext(ctx context.Context) PodSecurityPolicyPatchArrayOutput

type PodSecurityPolicyPatchArrayInput

type PodSecurityPolicyPatchArrayInput interface {
	pulumi.Input

	ToPodSecurityPolicyPatchArrayOutput() PodSecurityPolicyPatchArrayOutput
	ToPodSecurityPolicyPatchArrayOutputWithContext(context.Context) PodSecurityPolicyPatchArrayOutput
}

PodSecurityPolicyPatchArrayInput is an input type that accepts PodSecurityPolicyPatchArray and PodSecurityPolicyPatchArrayOutput values. You can construct a concrete instance of `PodSecurityPolicyPatchArrayInput` via:

PodSecurityPolicyPatchArray{ PodSecurityPolicyPatchArgs{...} }

type PodSecurityPolicyPatchArrayOutput

type PodSecurityPolicyPatchArrayOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyPatchArrayOutput) ElementType

func (PodSecurityPolicyPatchArrayOutput) Index

func (PodSecurityPolicyPatchArrayOutput) ToPodSecurityPolicyPatchArrayOutput

func (o PodSecurityPolicyPatchArrayOutput) ToPodSecurityPolicyPatchArrayOutput() PodSecurityPolicyPatchArrayOutput

func (PodSecurityPolicyPatchArrayOutput) ToPodSecurityPolicyPatchArrayOutputWithContext

func (o PodSecurityPolicyPatchArrayOutput) ToPodSecurityPolicyPatchArrayOutputWithContext(ctx context.Context) PodSecurityPolicyPatchArrayOutput

type PodSecurityPolicyPatchInput

type PodSecurityPolicyPatchInput interface {
	pulumi.Input

	ToPodSecurityPolicyPatchOutput() PodSecurityPolicyPatchOutput
	ToPodSecurityPolicyPatchOutputWithContext(ctx context.Context) PodSecurityPolicyPatchOutput
}

type PodSecurityPolicyPatchMap

type PodSecurityPolicyPatchMap map[string]PodSecurityPolicyPatchInput

func (PodSecurityPolicyPatchMap) ElementType

func (PodSecurityPolicyPatchMap) ElementType() reflect.Type

func (PodSecurityPolicyPatchMap) ToPodSecurityPolicyPatchMapOutput

func (i PodSecurityPolicyPatchMap) ToPodSecurityPolicyPatchMapOutput() PodSecurityPolicyPatchMapOutput

func (PodSecurityPolicyPatchMap) ToPodSecurityPolicyPatchMapOutputWithContext

func (i PodSecurityPolicyPatchMap) ToPodSecurityPolicyPatchMapOutputWithContext(ctx context.Context) PodSecurityPolicyPatchMapOutput

type PodSecurityPolicyPatchMapInput

type PodSecurityPolicyPatchMapInput interface {
	pulumi.Input

	ToPodSecurityPolicyPatchMapOutput() PodSecurityPolicyPatchMapOutput
	ToPodSecurityPolicyPatchMapOutputWithContext(context.Context) PodSecurityPolicyPatchMapOutput
}

PodSecurityPolicyPatchMapInput is an input type that accepts PodSecurityPolicyPatchMap and PodSecurityPolicyPatchMapOutput values. You can construct a concrete instance of `PodSecurityPolicyPatchMapInput` via:

PodSecurityPolicyPatchMap{ "key": PodSecurityPolicyPatchArgs{...} }

type PodSecurityPolicyPatchMapOutput

type PodSecurityPolicyPatchMapOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyPatchMapOutput) ElementType

func (PodSecurityPolicyPatchMapOutput) MapIndex

func (PodSecurityPolicyPatchMapOutput) ToPodSecurityPolicyPatchMapOutput

func (o PodSecurityPolicyPatchMapOutput) ToPodSecurityPolicyPatchMapOutput() PodSecurityPolicyPatchMapOutput

func (PodSecurityPolicyPatchMapOutput) ToPodSecurityPolicyPatchMapOutputWithContext

func (o PodSecurityPolicyPatchMapOutput) ToPodSecurityPolicyPatchMapOutputWithContext(ctx context.Context) PodSecurityPolicyPatchMapOutput

type PodSecurityPolicyPatchOutput

type PodSecurityPolicyPatchOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyPatchOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodSecurityPolicyPatchOutput) ElementType

func (PodSecurityPolicyPatchOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodSecurityPolicyPatchOutput) Spec

spec defines the policy enforced.

func (PodSecurityPolicyPatchOutput) ToPodSecurityPolicyPatchOutput

func (o PodSecurityPolicyPatchOutput) ToPodSecurityPolicyPatchOutput() PodSecurityPolicyPatchOutput

func (PodSecurityPolicyPatchOutput) ToPodSecurityPolicyPatchOutputWithContext

func (o PodSecurityPolicyPatchOutput) ToPodSecurityPolicyPatchOutputWithContext(ctx context.Context) PodSecurityPolicyPatchOutput

type PodSecurityPolicyPatchState

type PodSecurityPolicyPatchState struct {
}

func (PodSecurityPolicyPatchState) ElementType

type PodSecurityPolicyPatchType

type PodSecurityPolicyPatchType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata *metav1.ObjectMetaPatch `pulumi:"metadata"`
	// spec defines the policy enforced.
	Spec *PodSecurityPolicySpecPatch `pulumi:"spec"`
}

PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.

type PodSecurityPolicyPatchTypeArgs

type PodSecurityPolicyPatchTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPatchPtrInput `pulumi:"metadata"`
	// spec defines the policy enforced.
	Spec PodSecurityPolicySpecPatchPtrInput `pulumi:"spec"`
}

PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.

func (PodSecurityPolicyPatchTypeArgs) ElementType

func (PodSecurityPolicyPatchTypeArgs) ToPodSecurityPolicyPatchTypeOutput

func (i PodSecurityPolicyPatchTypeArgs) ToPodSecurityPolicyPatchTypeOutput() PodSecurityPolicyPatchTypeOutput

func (PodSecurityPolicyPatchTypeArgs) ToPodSecurityPolicyPatchTypeOutputWithContext

func (i PodSecurityPolicyPatchTypeArgs) ToPodSecurityPolicyPatchTypeOutputWithContext(ctx context.Context) PodSecurityPolicyPatchTypeOutput

type PodSecurityPolicyPatchTypeInput

type PodSecurityPolicyPatchTypeInput interface {
	pulumi.Input

	ToPodSecurityPolicyPatchTypeOutput() PodSecurityPolicyPatchTypeOutput
	ToPodSecurityPolicyPatchTypeOutputWithContext(context.Context) PodSecurityPolicyPatchTypeOutput
}

PodSecurityPolicyPatchTypeInput is an input type that accepts PodSecurityPolicyPatchTypeArgs and PodSecurityPolicyPatchTypeOutput values. You can construct a concrete instance of `PodSecurityPolicyPatchTypeInput` via:

PodSecurityPolicyPatchTypeArgs{...}

type PodSecurityPolicyPatchTypeOutput

type PodSecurityPolicyPatchTypeOutput struct{ *pulumi.OutputState }

PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.

func (PodSecurityPolicyPatchTypeOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodSecurityPolicyPatchTypeOutput) ElementType

func (PodSecurityPolicyPatchTypeOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodSecurityPolicyPatchTypeOutput) Spec

spec defines the policy enforced.

func (PodSecurityPolicyPatchTypeOutput) ToPodSecurityPolicyPatchTypeOutput

func (o PodSecurityPolicyPatchTypeOutput) ToPodSecurityPolicyPatchTypeOutput() PodSecurityPolicyPatchTypeOutput

func (PodSecurityPolicyPatchTypeOutput) ToPodSecurityPolicyPatchTypeOutputWithContext

func (o PodSecurityPolicyPatchTypeOutput) ToPodSecurityPolicyPatchTypeOutputWithContext(ctx context.Context) PodSecurityPolicyPatchTypeOutput

type PodSecurityPolicySpec

type PodSecurityPolicySpec struct {
	// allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
	AllowPrivilegeEscalation *bool `pulumi:"allowPrivilegeEscalation"`
	// AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
	AllowedCSIDrivers []AllowedCSIDriver `pulumi:"allowedCSIDrivers"`
	// allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
	AllowedCapabilities []string `pulumi:"allowedCapabilities"`
	// allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.
	AllowedFlexVolumes []AllowedFlexVolume `pulumi:"allowedFlexVolumes"`
	// allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.
	AllowedHostPaths []AllowedHostPath `pulumi:"allowedHostPaths"`
	// AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
	AllowedProcMountTypes []string `pulumi:"allowedProcMountTypes"`
	// allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
	//
	// Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
	AllowedUnsafeSysctls []string `pulumi:"allowedUnsafeSysctls"`
	// defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.  You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
	DefaultAddCapabilities []string `pulumi:"defaultAddCapabilities"`
	// defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
	DefaultAllowPrivilegeEscalation *bool `pulumi:"defaultAllowPrivilegeEscalation"`
	// forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
	//
	// Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
	ForbiddenSysctls []string `pulumi:"forbiddenSysctls"`
	// fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
	FsGroup FSGroupStrategyOptions `pulumi:"fsGroup"`
	// hostIPC determines if the policy allows the use of HostIPC in the pod spec.
	HostIPC *bool `pulumi:"hostIPC"`
	// hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
	HostNetwork *bool `pulumi:"hostNetwork"`
	// hostPID determines if the policy allows the use of HostPID in the pod spec.
	HostPID *bool `pulumi:"hostPID"`
	// hostPorts determines which host port ranges are allowed to be exposed.
	HostPorts []HostPortRange `pulumi:"hostPorts"`
	// privileged determines if a pod can request to be run as privileged.
	Privileged *bool `pulumi:"privileged"`
	// readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.  If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
	ReadOnlyRootFilesystem *bool `pulumi:"readOnlyRootFilesystem"`
	// requiredDropCapabilities are the capabilities that will be dropped from the container.  These are required to be dropped and cannot be added.
	RequiredDropCapabilities []string `pulumi:"requiredDropCapabilities"`
	// RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.
	RunAsGroup *RunAsGroupStrategyOptions `pulumi:"runAsGroup"`
	// runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
	RunAsUser RunAsUserStrategyOptions `pulumi:"runAsUser"`
	// runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.
	RuntimeClass *RuntimeClassStrategyOptions `pulumi:"runtimeClass"`
	// seLinux is the strategy that will dictate the allowable labels that may be set.
	SeLinux SELinuxStrategyOptions `pulumi:"seLinux"`
	// supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
	SupplementalGroups SupplementalGroupsStrategyOptions `pulumi:"supplementalGroups"`
	// volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
	Volumes []string `pulumi:"volumes"`
}

PodSecurityPolicySpec defines the policy enforced.

type PodSecurityPolicySpecArgs

type PodSecurityPolicySpecArgs struct {
	// allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
	AllowPrivilegeEscalation pulumi.BoolPtrInput `pulumi:"allowPrivilegeEscalation"`
	// AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
	AllowedCSIDrivers AllowedCSIDriverArrayInput `pulumi:"allowedCSIDrivers"`
	// allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
	AllowedCapabilities pulumi.StringArrayInput `pulumi:"allowedCapabilities"`
	// allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.
	AllowedFlexVolumes AllowedFlexVolumeArrayInput `pulumi:"allowedFlexVolumes"`
	// allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.
	AllowedHostPaths AllowedHostPathArrayInput `pulumi:"allowedHostPaths"`
	// AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
	AllowedProcMountTypes pulumi.StringArrayInput `pulumi:"allowedProcMountTypes"`
	// allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
	//
	// Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
	AllowedUnsafeSysctls pulumi.StringArrayInput `pulumi:"allowedUnsafeSysctls"`
	// defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.  You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
	DefaultAddCapabilities pulumi.StringArrayInput `pulumi:"defaultAddCapabilities"`
	// defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
	DefaultAllowPrivilegeEscalation pulumi.BoolPtrInput `pulumi:"defaultAllowPrivilegeEscalation"`
	// forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
	//
	// Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
	ForbiddenSysctls pulumi.StringArrayInput `pulumi:"forbiddenSysctls"`
	// fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
	FsGroup FSGroupStrategyOptionsInput `pulumi:"fsGroup"`
	// hostIPC determines if the policy allows the use of HostIPC in the pod spec.
	HostIPC pulumi.BoolPtrInput `pulumi:"hostIPC"`
	// hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
	HostNetwork pulumi.BoolPtrInput `pulumi:"hostNetwork"`
	// hostPID determines if the policy allows the use of HostPID in the pod spec.
	HostPID pulumi.BoolPtrInput `pulumi:"hostPID"`
	// hostPorts determines which host port ranges are allowed to be exposed.
	HostPorts HostPortRangeArrayInput `pulumi:"hostPorts"`
	// privileged determines if a pod can request to be run as privileged.
	Privileged pulumi.BoolPtrInput `pulumi:"privileged"`
	// readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.  If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
	ReadOnlyRootFilesystem pulumi.BoolPtrInput `pulumi:"readOnlyRootFilesystem"`
	// requiredDropCapabilities are the capabilities that will be dropped from the container.  These are required to be dropped and cannot be added.
	RequiredDropCapabilities pulumi.StringArrayInput `pulumi:"requiredDropCapabilities"`
	// RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.
	RunAsGroup RunAsGroupStrategyOptionsPtrInput `pulumi:"runAsGroup"`
	// runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
	RunAsUser RunAsUserStrategyOptionsInput `pulumi:"runAsUser"`
	// runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.
	RuntimeClass RuntimeClassStrategyOptionsPtrInput `pulumi:"runtimeClass"`
	// seLinux is the strategy that will dictate the allowable labels that may be set.
	SeLinux SELinuxStrategyOptionsInput `pulumi:"seLinux"`
	// supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
	SupplementalGroups SupplementalGroupsStrategyOptionsInput `pulumi:"supplementalGroups"`
	// volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
	Volumes pulumi.StringArrayInput `pulumi:"volumes"`
}

PodSecurityPolicySpec defines the policy enforced.

func (PodSecurityPolicySpecArgs) ElementType

func (PodSecurityPolicySpecArgs) ElementType() reflect.Type

func (PodSecurityPolicySpecArgs) ToPodSecurityPolicySpecOutput

func (i PodSecurityPolicySpecArgs) ToPodSecurityPolicySpecOutput() PodSecurityPolicySpecOutput

func (PodSecurityPolicySpecArgs) ToPodSecurityPolicySpecOutputWithContext

func (i PodSecurityPolicySpecArgs) ToPodSecurityPolicySpecOutputWithContext(ctx context.Context) PodSecurityPolicySpecOutput

func (PodSecurityPolicySpecArgs) ToPodSecurityPolicySpecPtrOutput

func (i PodSecurityPolicySpecArgs) ToPodSecurityPolicySpecPtrOutput() PodSecurityPolicySpecPtrOutput

func (PodSecurityPolicySpecArgs) ToPodSecurityPolicySpecPtrOutputWithContext

func (i PodSecurityPolicySpecArgs) ToPodSecurityPolicySpecPtrOutputWithContext(ctx context.Context) PodSecurityPolicySpecPtrOutput

type PodSecurityPolicySpecInput

type PodSecurityPolicySpecInput interface {
	pulumi.Input

	ToPodSecurityPolicySpecOutput() PodSecurityPolicySpecOutput
	ToPodSecurityPolicySpecOutputWithContext(context.Context) PodSecurityPolicySpecOutput
}

PodSecurityPolicySpecInput is an input type that accepts PodSecurityPolicySpecArgs and PodSecurityPolicySpecOutput values. You can construct a concrete instance of `PodSecurityPolicySpecInput` via:

PodSecurityPolicySpecArgs{...}

type PodSecurityPolicySpecOutput

type PodSecurityPolicySpecOutput struct{ *pulumi.OutputState }

PodSecurityPolicySpec defines the policy enforced.

func (PodSecurityPolicySpecOutput) AllowPrivilegeEscalation

func (o PodSecurityPolicySpecOutput) AllowPrivilegeEscalation() pulumi.BoolPtrOutput

allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.

func (PodSecurityPolicySpecOutput) AllowedCSIDrivers

AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.

func (PodSecurityPolicySpecOutput) AllowedCapabilities

func (o PodSecurityPolicySpecOutput) AllowedCapabilities() pulumi.StringArrayOutput

allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.

func (PodSecurityPolicySpecOutput) AllowedFlexVolumes

allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.

func (PodSecurityPolicySpecOutput) AllowedHostPaths

allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.

func (PodSecurityPolicySpecOutput) AllowedProcMountTypes

func (o PodSecurityPolicySpecOutput) AllowedProcMountTypes() pulumi.StringArrayOutput

AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.

func (PodSecurityPolicySpecOutput) AllowedUnsafeSysctls

func (o PodSecurityPolicySpecOutput) AllowedUnsafeSysctls() pulumi.StringArrayOutput

allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.

Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.

func (PodSecurityPolicySpecOutput) DefaultAddCapabilities

func (o PodSecurityPolicySpecOutput) DefaultAddCapabilities() pulumi.StringArrayOutput

defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.

func (PodSecurityPolicySpecOutput) DefaultAllowPrivilegeEscalation

func (o PodSecurityPolicySpecOutput) DefaultAllowPrivilegeEscalation() pulumi.BoolPtrOutput

defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.

func (PodSecurityPolicySpecOutput) ElementType

func (PodSecurityPolicySpecOutput) ForbiddenSysctls

forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.

Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.

func (PodSecurityPolicySpecOutput) FsGroup

fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.

func (PodSecurityPolicySpecOutput) HostIPC

hostIPC determines if the policy allows the use of HostIPC in the pod spec.

func (PodSecurityPolicySpecOutput) HostNetwork

hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.

func (PodSecurityPolicySpecOutput) HostPID

hostPID determines if the policy allows the use of HostPID in the pod spec.

func (PodSecurityPolicySpecOutput) HostPorts

hostPorts determines which host port ranges are allowed to be exposed.

func (PodSecurityPolicySpecOutput) Privileged

privileged determines if a pod can request to be run as privileged.

func (PodSecurityPolicySpecOutput) ReadOnlyRootFilesystem

func (o PodSecurityPolicySpecOutput) ReadOnlyRootFilesystem() pulumi.BoolPtrOutput

readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.

func (PodSecurityPolicySpecOutput) RequiredDropCapabilities

func (o PodSecurityPolicySpecOutput) RequiredDropCapabilities() pulumi.StringArrayOutput

requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.

func (PodSecurityPolicySpecOutput) RunAsGroup

RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.

func (PodSecurityPolicySpecOutput) RunAsUser

runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.

func (PodSecurityPolicySpecOutput) RuntimeClass

runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.

func (PodSecurityPolicySpecOutput) SeLinux

seLinux is the strategy that will dictate the allowable labels that may be set.

func (PodSecurityPolicySpecOutput) SupplementalGroups

supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.

func (PodSecurityPolicySpecOutput) ToPodSecurityPolicySpecOutput

func (o PodSecurityPolicySpecOutput) ToPodSecurityPolicySpecOutput() PodSecurityPolicySpecOutput

func (PodSecurityPolicySpecOutput) ToPodSecurityPolicySpecOutputWithContext

func (o PodSecurityPolicySpecOutput) ToPodSecurityPolicySpecOutputWithContext(ctx context.Context) PodSecurityPolicySpecOutput

func (PodSecurityPolicySpecOutput) ToPodSecurityPolicySpecPtrOutput

func (o PodSecurityPolicySpecOutput) ToPodSecurityPolicySpecPtrOutput() PodSecurityPolicySpecPtrOutput

func (PodSecurityPolicySpecOutput) ToPodSecurityPolicySpecPtrOutputWithContext

func (o PodSecurityPolicySpecOutput) ToPodSecurityPolicySpecPtrOutputWithContext(ctx context.Context) PodSecurityPolicySpecPtrOutput

func (PodSecurityPolicySpecOutput) Volumes

volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.

type PodSecurityPolicySpecPatch

type PodSecurityPolicySpecPatch struct {
	// allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
	AllowPrivilegeEscalation *bool `pulumi:"allowPrivilegeEscalation"`
	// AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
	AllowedCSIDrivers []AllowedCSIDriverPatch `pulumi:"allowedCSIDrivers"`
	// allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
	AllowedCapabilities []string `pulumi:"allowedCapabilities"`
	// allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.
	AllowedFlexVolumes []AllowedFlexVolumePatch `pulumi:"allowedFlexVolumes"`
	// allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.
	AllowedHostPaths []AllowedHostPathPatch `pulumi:"allowedHostPaths"`
	// AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
	AllowedProcMountTypes []string `pulumi:"allowedProcMountTypes"`
	// allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
	//
	// Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
	AllowedUnsafeSysctls []string `pulumi:"allowedUnsafeSysctls"`
	// defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.  You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
	DefaultAddCapabilities []string `pulumi:"defaultAddCapabilities"`
	// defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
	DefaultAllowPrivilegeEscalation *bool `pulumi:"defaultAllowPrivilegeEscalation"`
	// forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
	//
	// Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
	ForbiddenSysctls []string `pulumi:"forbiddenSysctls"`
	// fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
	FsGroup *FSGroupStrategyOptionsPatch `pulumi:"fsGroup"`
	// hostIPC determines if the policy allows the use of HostIPC in the pod spec.
	HostIPC *bool `pulumi:"hostIPC"`
	// hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
	HostNetwork *bool `pulumi:"hostNetwork"`
	// hostPID determines if the policy allows the use of HostPID in the pod spec.
	HostPID *bool `pulumi:"hostPID"`
	// hostPorts determines which host port ranges are allowed to be exposed.
	HostPorts []HostPortRangePatch `pulumi:"hostPorts"`
	// privileged determines if a pod can request to be run as privileged.
	Privileged *bool `pulumi:"privileged"`
	// readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.  If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
	ReadOnlyRootFilesystem *bool `pulumi:"readOnlyRootFilesystem"`
	// requiredDropCapabilities are the capabilities that will be dropped from the container.  These are required to be dropped and cannot be added.
	RequiredDropCapabilities []string `pulumi:"requiredDropCapabilities"`
	// RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.
	RunAsGroup *RunAsGroupStrategyOptionsPatch `pulumi:"runAsGroup"`
	// runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
	RunAsUser *RunAsUserStrategyOptionsPatch `pulumi:"runAsUser"`
	// runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.
	RuntimeClass *RuntimeClassStrategyOptionsPatch `pulumi:"runtimeClass"`
	// seLinux is the strategy that will dictate the allowable labels that may be set.
	SeLinux *SELinuxStrategyOptionsPatch `pulumi:"seLinux"`
	// supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
	SupplementalGroups *SupplementalGroupsStrategyOptionsPatch `pulumi:"supplementalGroups"`
	// volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
	Volumes []string `pulumi:"volumes"`
}

PodSecurityPolicySpec defines the policy enforced.

type PodSecurityPolicySpecPatchArgs

type PodSecurityPolicySpecPatchArgs struct {
	// allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
	AllowPrivilegeEscalation pulumi.BoolPtrInput `pulumi:"allowPrivilegeEscalation"`
	// AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
	AllowedCSIDrivers AllowedCSIDriverPatchArrayInput `pulumi:"allowedCSIDrivers"`
	// allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
	AllowedCapabilities pulumi.StringArrayInput `pulumi:"allowedCapabilities"`
	// allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.
	AllowedFlexVolumes AllowedFlexVolumePatchArrayInput `pulumi:"allowedFlexVolumes"`
	// allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.
	AllowedHostPaths AllowedHostPathPatchArrayInput `pulumi:"allowedHostPaths"`
	// AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
	AllowedProcMountTypes pulumi.StringArrayInput `pulumi:"allowedProcMountTypes"`
	// allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
	//
	// Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
	AllowedUnsafeSysctls pulumi.StringArrayInput `pulumi:"allowedUnsafeSysctls"`
	// defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.  You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
	DefaultAddCapabilities pulumi.StringArrayInput `pulumi:"defaultAddCapabilities"`
	// defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
	DefaultAllowPrivilegeEscalation pulumi.BoolPtrInput `pulumi:"defaultAllowPrivilegeEscalation"`
	// forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
	//
	// Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
	ForbiddenSysctls pulumi.StringArrayInput `pulumi:"forbiddenSysctls"`
	// fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
	FsGroup FSGroupStrategyOptionsPatchPtrInput `pulumi:"fsGroup"`
	// hostIPC determines if the policy allows the use of HostIPC in the pod spec.
	HostIPC pulumi.BoolPtrInput `pulumi:"hostIPC"`
	// hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
	HostNetwork pulumi.BoolPtrInput `pulumi:"hostNetwork"`
	// hostPID determines if the policy allows the use of HostPID in the pod spec.
	HostPID pulumi.BoolPtrInput `pulumi:"hostPID"`
	// hostPorts determines which host port ranges are allowed to be exposed.
	HostPorts HostPortRangePatchArrayInput `pulumi:"hostPorts"`
	// privileged determines if a pod can request to be run as privileged.
	Privileged pulumi.BoolPtrInput `pulumi:"privileged"`
	// readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.  If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
	ReadOnlyRootFilesystem pulumi.BoolPtrInput `pulumi:"readOnlyRootFilesystem"`
	// requiredDropCapabilities are the capabilities that will be dropped from the container.  These are required to be dropped and cannot be added.
	RequiredDropCapabilities pulumi.StringArrayInput `pulumi:"requiredDropCapabilities"`
	// RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.
	RunAsGroup RunAsGroupStrategyOptionsPatchPtrInput `pulumi:"runAsGroup"`
	// runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
	RunAsUser RunAsUserStrategyOptionsPatchPtrInput `pulumi:"runAsUser"`
	// runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.
	RuntimeClass RuntimeClassStrategyOptionsPatchPtrInput `pulumi:"runtimeClass"`
	// seLinux is the strategy that will dictate the allowable labels that may be set.
	SeLinux SELinuxStrategyOptionsPatchPtrInput `pulumi:"seLinux"`
	// supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
	SupplementalGroups SupplementalGroupsStrategyOptionsPatchPtrInput `pulumi:"supplementalGroups"`
	// volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
	Volumes pulumi.StringArrayInput `pulumi:"volumes"`
}

PodSecurityPolicySpec defines the policy enforced.

func (PodSecurityPolicySpecPatchArgs) ElementType

func (PodSecurityPolicySpecPatchArgs) ToPodSecurityPolicySpecPatchOutput

func (i PodSecurityPolicySpecPatchArgs) ToPodSecurityPolicySpecPatchOutput() PodSecurityPolicySpecPatchOutput

func (PodSecurityPolicySpecPatchArgs) ToPodSecurityPolicySpecPatchOutputWithContext

func (i PodSecurityPolicySpecPatchArgs) ToPodSecurityPolicySpecPatchOutputWithContext(ctx context.Context) PodSecurityPolicySpecPatchOutput

func (PodSecurityPolicySpecPatchArgs) ToPodSecurityPolicySpecPatchPtrOutput

func (i PodSecurityPolicySpecPatchArgs) ToPodSecurityPolicySpecPatchPtrOutput() PodSecurityPolicySpecPatchPtrOutput

func (PodSecurityPolicySpecPatchArgs) ToPodSecurityPolicySpecPatchPtrOutputWithContext

func (i PodSecurityPolicySpecPatchArgs) ToPodSecurityPolicySpecPatchPtrOutputWithContext(ctx context.Context) PodSecurityPolicySpecPatchPtrOutput

type PodSecurityPolicySpecPatchInput

type PodSecurityPolicySpecPatchInput interface {
	pulumi.Input

	ToPodSecurityPolicySpecPatchOutput() PodSecurityPolicySpecPatchOutput
	ToPodSecurityPolicySpecPatchOutputWithContext(context.Context) PodSecurityPolicySpecPatchOutput
}

PodSecurityPolicySpecPatchInput is an input type that accepts PodSecurityPolicySpecPatchArgs and PodSecurityPolicySpecPatchOutput values. You can construct a concrete instance of `PodSecurityPolicySpecPatchInput` via:

PodSecurityPolicySpecPatchArgs{...}

type PodSecurityPolicySpecPatchOutput

type PodSecurityPolicySpecPatchOutput struct{ *pulumi.OutputState }

PodSecurityPolicySpec defines the policy enforced.

func (PodSecurityPolicySpecPatchOutput) AllowPrivilegeEscalation

func (o PodSecurityPolicySpecPatchOutput) AllowPrivilegeEscalation() pulumi.BoolPtrOutput

allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.

func (PodSecurityPolicySpecPatchOutput) AllowedCSIDrivers

AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.

func (PodSecurityPolicySpecPatchOutput) AllowedCapabilities

allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.

func (PodSecurityPolicySpecPatchOutput) AllowedFlexVolumes

allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.

func (PodSecurityPolicySpecPatchOutput) AllowedHostPaths

allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.

func (PodSecurityPolicySpecPatchOutput) AllowedProcMountTypes

func (o PodSecurityPolicySpecPatchOutput) AllowedProcMountTypes() pulumi.StringArrayOutput

AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.

func (PodSecurityPolicySpecPatchOutput) AllowedUnsafeSysctls

allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.

Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.

func (PodSecurityPolicySpecPatchOutput) DefaultAddCapabilities

func (o PodSecurityPolicySpecPatchOutput) DefaultAddCapabilities() pulumi.StringArrayOutput

defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.

func (PodSecurityPolicySpecPatchOutput) DefaultAllowPrivilegeEscalation

func (o PodSecurityPolicySpecPatchOutput) DefaultAllowPrivilegeEscalation() pulumi.BoolPtrOutput

defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.

func (PodSecurityPolicySpecPatchOutput) ElementType

func (PodSecurityPolicySpecPatchOutput) ForbiddenSysctls

forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.

Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.

func (PodSecurityPolicySpecPatchOutput) FsGroup

fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.

func (PodSecurityPolicySpecPatchOutput) HostIPC

hostIPC determines if the policy allows the use of HostIPC in the pod spec.

func (PodSecurityPolicySpecPatchOutput) HostNetwork

hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.

func (PodSecurityPolicySpecPatchOutput) HostPID

hostPID determines if the policy allows the use of HostPID in the pod spec.

func (PodSecurityPolicySpecPatchOutput) HostPorts

hostPorts determines which host port ranges are allowed to be exposed.

func (PodSecurityPolicySpecPatchOutput) Privileged

privileged determines if a pod can request to be run as privileged.

func (PodSecurityPolicySpecPatchOutput) ReadOnlyRootFilesystem

func (o PodSecurityPolicySpecPatchOutput) ReadOnlyRootFilesystem() pulumi.BoolPtrOutput

readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.

func (PodSecurityPolicySpecPatchOutput) RequiredDropCapabilities

func (o PodSecurityPolicySpecPatchOutput) RequiredDropCapabilities() pulumi.StringArrayOutput

requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.

func (PodSecurityPolicySpecPatchOutput) RunAsGroup

RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.

func (PodSecurityPolicySpecPatchOutput) RunAsUser

runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.

func (PodSecurityPolicySpecPatchOutput) RuntimeClass

runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.

func (PodSecurityPolicySpecPatchOutput) SeLinux

seLinux is the strategy that will dictate the allowable labels that may be set.

func (PodSecurityPolicySpecPatchOutput) SupplementalGroups

supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.

func (PodSecurityPolicySpecPatchOutput) ToPodSecurityPolicySpecPatchOutput

func (o PodSecurityPolicySpecPatchOutput) ToPodSecurityPolicySpecPatchOutput() PodSecurityPolicySpecPatchOutput

func (PodSecurityPolicySpecPatchOutput) ToPodSecurityPolicySpecPatchOutputWithContext

func (o PodSecurityPolicySpecPatchOutput) ToPodSecurityPolicySpecPatchOutputWithContext(ctx context.Context) PodSecurityPolicySpecPatchOutput

func (PodSecurityPolicySpecPatchOutput) ToPodSecurityPolicySpecPatchPtrOutput

func (o PodSecurityPolicySpecPatchOutput) ToPodSecurityPolicySpecPatchPtrOutput() PodSecurityPolicySpecPatchPtrOutput

func (PodSecurityPolicySpecPatchOutput) ToPodSecurityPolicySpecPatchPtrOutputWithContext

func (o PodSecurityPolicySpecPatchOutput) ToPodSecurityPolicySpecPatchPtrOutputWithContext(ctx context.Context) PodSecurityPolicySpecPatchPtrOutput

func (PodSecurityPolicySpecPatchOutput) Volumes

volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.

type PodSecurityPolicySpecPatchPtrInput

type PodSecurityPolicySpecPatchPtrInput interface {
	pulumi.Input

	ToPodSecurityPolicySpecPatchPtrOutput() PodSecurityPolicySpecPatchPtrOutput
	ToPodSecurityPolicySpecPatchPtrOutputWithContext(context.Context) PodSecurityPolicySpecPatchPtrOutput
}

PodSecurityPolicySpecPatchPtrInput is an input type that accepts PodSecurityPolicySpecPatchArgs, PodSecurityPolicySpecPatchPtr and PodSecurityPolicySpecPatchPtrOutput values. You can construct a concrete instance of `PodSecurityPolicySpecPatchPtrInput` via:

        PodSecurityPolicySpecPatchArgs{...}

or:

        nil

type PodSecurityPolicySpecPatchPtrOutput

type PodSecurityPolicySpecPatchPtrOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicySpecPatchPtrOutput) AllowPrivilegeEscalation

func (o PodSecurityPolicySpecPatchPtrOutput) AllowPrivilegeEscalation() pulumi.BoolPtrOutput

allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.

func (PodSecurityPolicySpecPatchPtrOutput) AllowedCSIDrivers

AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.

func (PodSecurityPolicySpecPatchPtrOutput) AllowedCapabilities

allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.

func (PodSecurityPolicySpecPatchPtrOutput) AllowedFlexVolumes

allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.

func (PodSecurityPolicySpecPatchPtrOutput) AllowedHostPaths

allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.

func (PodSecurityPolicySpecPatchPtrOutput) AllowedProcMountTypes

AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.

func (PodSecurityPolicySpecPatchPtrOutput) AllowedUnsafeSysctls

allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.

Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.

func (PodSecurityPolicySpecPatchPtrOutput) DefaultAddCapabilities

defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.

func (PodSecurityPolicySpecPatchPtrOutput) DefaultAllowPrivilegeEscalation

func (o PodSecurityPolicySpecPatchPtrOutput) DefaultAllowPrivilegeEscalation() pulumi.BoolPtrOutput

defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.

func (PodSecurityPolicySpecPatchPtrOutput) Elem

func (PodSecurityPolicySpecPatchPtrOutput) ElementType

func (PodSecurityPolicySpecPatchPtrOutput) ForbiddenSysctls

forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.

Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.

func (PodSecurityPolicySpecPatchPtrOutput) FsGroup

fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.

func (PodSecurityPolicySpecPatchPtrOutput) HostIPC

hostIPC determines if the policy allows the use of HostIPC in the pod spec.

func (PodSecurityPolicySpecPatchPtrOutput) HostNetwork

hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.

func (PodSecurityPolicySpecPatchPtrOutput) HostPID

hostPID determines if the policy allows the use of HostPID in the pod spec.

func (PodSecurityPolicySpecPatchPtrOutput) HostPorts

hostPorts determines which host port ranges are allowed to be exposed.

func (PodSecurityPolicySpecPatchPtrOutput) Privileged

privileged determines if a pod can request to be run as privileged.

func (PodSecurityPolicySpecPatchPtrOutput) ReadOnlyRootFilesystem

func (o PodSecurityPolicySpecPatchPtrOutput) ReadOnlyRootFilesystem() pulumi.BoolPtrOutput

readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.

func (PodSecurityPolicySpecPatchPtrOutput) RequiredDropCapabilities

func (o PodSecurityPolicySpecPatchPtrOutput) RequiredDropCapabilities() pulumi.StringArrayOutput

requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.

func (PodSecurityPolicySpecPatchPtrOutput) RunAsGroup

RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.

func (PodSecurityPolicySpecPatchPtrOutput) RunAsUser

runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.

func (PodSecurityPolicySpecPatchPtrOutput) RuntimeClass

runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.

func (PodSecurityPolicySpecPatchPtrOutput) SeLinux

seLinux is the strategy that will dictate the allowable labels that may be set.

func (PodSecurityPolicySpecPatchPtrOutput) SupplementalGroups

supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.

func (PodSecurityPolicySpecPatchPtrOutput) ToPodSecurityPolicySpecPatchPtrOutput

func (o PodSecurityPolicySpecPatchPtrOutput) ToPodSecurityPolicySpecPatchPtrOutput() PodSecurityPolicySpecPatchPtrOutput

func (PodSecurityPolicySpecPatchPtrOutput) ToPodSecurityPolicySpecPatchPtrOutputWithContext

func (o PodSecurityPolicySpecPatchPtrOutput) ToPodSecurityPolicySpecPatchPtrOutputWithContext(ctx context.Context) PodSecurityPolicySpecPatchPtrOutput

func (PodSecurityPolicySpecPatchPtrOutput) Volumes

volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.

type PodSecurityPolicySpecPtrInput

type PodSecurityPolicySpecPtrInput interface {
	pulumi.Input

	ToPodSecurityPolicySpecPtrOutput() PodSecurityPolicySpecPtrOutput
	ToPodSecurityPolicySpecPtrOutputWithContext(context.Context) PodSecurityPolicySpecPtrOutput
}

PodSecurityPolicySpecPtrInput is an input type that accepts PodSecurityPolicySpecArgs, PodSecurityPolicySpecPtr and PodSecurityPolicySpecPtrOutput values. You can construct a concrete instance of `PodSecurityPolicySpecPtrInput` via:

        PodSecurityPolicySpecArgs{...}

or:

        nil

type PodSecurityPolicySpecPtrOutput

type PodSecurityPolicySpecPtrOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicySpecPtrOutput) AllowPrivilegeEscalation

func (o PodSecurityPolicySpecPtrOutput) AllowPrivilegeEscalation() pulumi.BoolPtrOutput

allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.

func (PodSecurityPolicySpecPtrOutput) AllowedCSIDrivers

AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.

func (PodSecurityPolicySpecPtrOutput) AllowedCapabilities

allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.

func (PodSecurityPolicySpecPtrOutput) AllowedFlexVolumes

allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.

func (PodSecurityPolicySpecPtrOutput) AllowedHostPaths

allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.

func (PodSecurityPolicySpecPtrOutput) AllowedProcMountTypes

func (o PodSecurityPolicySpecPtrOutput) AllowedProcMountTypes() pulumi.StringArrayOutput

AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.

func (PodSecurityPolicySpecPtrOutput) AllowedUnsafeSysctls

func (o PodSecurityPolicySpecPtrOutput) AllowedUnsafeSysctls() pulumi.StringArrayOutput

allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.

Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.

func (PodSecurityPolicySpecPtrOutput) DefaultAddCapabilities

func (o PodSecurityPolicySpecPtrOutput) DefaultAddCapabilities() pulumi.StringArrayOutput

defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.

func (PodSecurityPolicySpecPtrOutput) DefaultAllowPrivilegeEscalation

func (o PodSecurityPolicySpecPtrOutput) DefaultAllowPrivilegeEscalation() pulumi.BoolPtrOutput

defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.

func (PodSecurityPolicySpecPtrOutput) Elem

func (PodSecurityPolicySpecPtrOutput) ElementType

func (PodSecurityPolicySpecPtrOutput) ForbiddenSysctls

forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.

Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.

func (PodSecurityPolicySpecPtrOutput) FsGroup

fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.

func (PodSecurityPolicySpecPtrOutput) HostIPC

hostIPC determines if the policy allows the use of HostIPC in the pod spec.

func (PodSecurityPolicySpecPtrOutput) HostNetwork

hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.

func (PodSecurityPolicySpecPtrOutput) HostPID

hostPID determines if the policy allows the use of HostPID in the pod spec.

func (PodSecurityPolicySpecPtrOutput) HostPorts

hostPorts determines which host port ranges are allowed to be exposed.

func (PodSecurityPolicySpecPtrOutput) Privileged

privileged determines if a pod can request to be run as privileged.

func (PodSecurityPolicySpecPtrOutput) ReadOnlyRootFilesystem

func (o PodSecurityPolicySpecPtrOutput) ReadOnlyRootFilesystem() pulumi.BoolPtrOutput

readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.

func (PodSecurityPolicySpecPtrOutput) RequiredDropCapabilities

func (o PodSecurityPolicySpecPtrOutput) RequiredDropCapabilities() pulumi.StringArrayOutput

requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.

func (PodSecurityPolicySpecPtrOutput) RunAsGroup

RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.

func (PodSecurityPolicySpecPtrOutput) RunAsUser

runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.

func (PodSecurityPolicySpecPtrOutput) RuntimeClass

runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.

func (PodSecurityPolicySpecPtrOutput) SeLinux

seLinux is the strategy that will dictate the allowable labels that may be set.

func (PodSecurityPolicySpecPtrOutput) SupplementalGroups

supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.

func (PodSecurityPolicySpecPtrOutput) ToPodSecurityPolicySpecPtrOutput

func (o PodSecurityPolicySpecPtrOutput) ToPodSecurityPolicySpecPtrOutput() PodSecurityPolicySpecPtrOutput

func (PodSecurityPolicySpecPtrOutput) ToPodSecurityPolicySpecPtrOutputWithContext

func (o PodSecurityPolicySpecPtrOutput) ToPodSecurityPolicySpecPtrOutputWithContext(ctx context.Context) PodSecurityPolicySpecPtrOutput

func (PodSecurityPolicySpecPtrOutput) Volumes

volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.

type PodSecurityPolicyState

type PodSecurityPolicyState struct {
}

func (PodSecurityPolicyState) ElementType

func (PodSecurityPolicyState) ElementType() reflect.Type

type PodSecurityPolicyType

type PodSecurityPolicyType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata *metav1.ObjectMeta `pulumi:"metadata"`
	// spec defines the policy enforced.
	Spec *PodSecurityPolicySpec `pulumi:"spec"`
}

PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.

type PodSecurityPolicyTypeArgs

type PodSecurityPolicyTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPtrInput `pulumi:"metadata"`
	// spec defines the policy enforced.
	Spec PodSecurityPolicySpecPtrInput `pulumi:"spec"`
}

PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.

func (PodSecurityPolicyTypeArgs) ElementType

func (PodSecurityPolicyTypeArgs) ElementType() reflect.Type

func (PodSecurityPolicyTypeArgs) ToPodSecurityPolicyTypeOutput

func (i PodSecurityPolicyTypeArgs) ToPodSecurityPolicyTypeOutput() PodSecurityPolicyTypeOutput

func (PodSecurityPolicyTypeArgs) ToPodSecurityPolicyTypeOutputWithContext

func (i PodSecurityPolicyTypeArgs) ToPodSecurityPolicyTypeOutputWithContext(ctx context.Context) PodSecurityPolicyTypeOutput

type PodSecurityPolicyTypeArray

type PodSecurityPolicyTypeArray []PodSecurityPolicyTypeInput

func (PodSecurityPolicyTypeArray) ElementType

func (PodSecurityPolicyTypeArray) ElementType() reflect.Type

func (PodSecurityPolicyTypeArray) ToPodSecurityPolicyTypeArrayOutput

func (i PodSecurityPolicyTypeArray) ToPodSecurityPolicyTypeArrayOutput() PodSecurityPolicyTypeArrayOutput

func (PodSecurityPolicyTypeArray) ToPodSecurityPolicyTypeArrayOutputWithContext

func (i PodSecurityPolicyTypeArray) ToPodSecurityPolicyTypeArrayOutputWithContext(ctx context.Context) PodSecurityPolicyTypeArrayOutput

type PodSecurityPolicyTypeArrayInput

type PodSecurityPolicyTypeArrayInput interface {
	pulumi.Input

	ToPodSecurityPolicyTypeArrayOutput() PodSecurityPolicyTypeArrayOutput
	ToPodSecurityPolicyTypeArrayOutputWithContext(context.Context) PodSecurityPolicyTypeArrayOutput
}

PodSecurityPolicyTypeArrayInput is an input type that accepts PodSecurityPolicyTypeArray and PodSecurityPolicyTypeArrayOutput values. You can construct a concrete instance of `PodSecurityPolicyTypeArrayInput` via:

PodSecurityPolicyTypeArray{ PodSecurityPolicyTypeArgs{...} }

type PodSecurityPolicyTypeArrayOutput

type PodSecurityPolicyTypeArrayOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyTypeArrayOutput) ElementType

func (PodSecurityPolicyTypeArrayOutput) Index

func (PodSecurityPolicyTypeArrayOutput) ToPodSecurityPolicyTypeArrayOutput

func (o PodSecurityPolicyTypeArrayOutput) ToPodSecurityPolicyTypeArrayOutput() PodSecurityPolicyTypeArrayOutput

func (PodSecurityPolicyTypeArrayOutput) ToPodSecurityPolicyTypeArrayOutputWithContext

func (o PodSecurityPolicyTypeArrayOutput) ToPodSecurityPolicyTypeArrayOutputWithContext(ctx context.Context) PodSecurityPolicyTypeArrayOutput

type PodSecurityPolicyTypeInput

type PodSecurityPolicyTypeInput interface {
	pulumi.Input

	ToPodSecurityPolicyTypeOutput() PodSecurityPolicyTypeOutput
	ToPodSecurityPolicyTypeOutputWithContext(context.Context) PodSecurityPolicyTypeOutput
}

PodSecurityPolicyTypeInput is an input type that accepts PodSecurityPolicyTypeArgs and PodSecurityPolicyTypeOutput values. You can construct a concrete instance of `PodSecurityPolicyTypeInput` via:

PodSecurityPolicyTypeArgs{...}

type PodSecurityPolicyTypeOutput

type PodSecurityPolicyTypeOutput struct{ *pulumi.OutputState }

PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.

func (PodSecurityPolicyTypeOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (PodSecurityPolicyTypeOutput) ElementType

func (PodSecurityPolicyTypeOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (PodSecurityPolicyTypeOutput) Spec

spec defines the policy enforced.

func (PodSecurityPolicyTypeOutput) ToPodSecurityPolicyTypeOutput

func (o PodSecurityPolicyTypeOutput) ToPodSecurityPolicyTypeOutput() PodSecurityPolicyTypeOutput

func (PodSecurityPolicyTypeOutput) ToPodSecurityPolicyTypeOutputWithContext

func (o PodSecurityPolicyTypeOutput) ToPodSecurityPolicyTypeOutputWithContext(ctx context.Context) PodSecurityPolicyTypeOutput

type RunAsGroupStrategyOptions

type RunAsGroupStrategyOptions struct {
	// ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRange `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
	Rule string `pulumi:"rule"`
}

RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.

type RunAsGroupStrategyOptionsArgs

type RunAsGroupStrategyOptionsArgs struct {
	// ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangeArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
	Rule pulumi.StringInput `pulumi:"rule"`
}

RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.

func (RunAsGroupStrategyOptionsArgs) ElementType

func (RunAsGroupStrategyOptionsArgs) ToRunAsGroupStrategyOptionsOutput

func (i RunAsGroupStrategyOptionsArgs) ToRunAsGroupStrategyOptionsOutput() RunAsGroupStrategyOptionsOutput

func (RunAsGroupStrategyOptionsArgs) ToRunAsGroupStrategyOptionsOutputWithContext

func (i RunAsGroupStrategyOptionsArgs) ToRunAsGroupStrategyOptionsOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsOutput

func (RunAsGroupStrategyOptionsArgs) ToRunAsGroupStrategyOptionsPtrOutput

func (i RunAsGroupStrategyOptionsArgs) ToRunAsGroupStrategyOptionsPtrOutput() RunAsGroupStrategyOptionsPtrOutput

func (RunAsGroupStrategyOptionsArgs) ToRunAsGroupStrategyOptionsPtrOutputWithContext

func (i RunAsGroupStrategyOptionsArgs) ToRunAsGroupStrategyOptionsPtrOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPtrOutput

type RunAsGroupStrategyOptionsInput

type RunAsGroupStrategyOptionsInput interface {
	pulumi.Input

	ToRunAsGroupStrategyOptionsOutput() RunAsGroupStrategyOptionsOutput
	ToRunAsGroupStrategyOptionsOutputWithContext(context.Context) RunAsGroupStrategyOptionsOutput
}

RunAsGroupStrategyOptionsInput is an input type that accepts RunAsGroupStrategyOptionsArgs and RunAsGroupStrategyOptionsOutput values. You can construct a concrete instance of `RunAsGroupStrategyOptionsInput` via:

RunAsGroupStrategyOptionsArgs{...}

type RunAsGroupStrategyOptionsOutput

type RunAsGroupStrategyOptionsOutput struct{ *pulumi.OutputState }

RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.

func (RunAsGroupStrategyOptionsOutput) ElementType

func (RunAsGroupStrategyOptionsOutput) Ranges

ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.

func (RunAsGroupStrategyOptionsOutput) Rule

rule is the strategy that will dictate the allowable RunAsGroup values that may be set.

func (RunAsGroupStrategyOptionsOutput) ToRunAsGroupStrategyOptionsOutput

func (o RunAsGroupStrategyOptionsOutput) ToRunAsGroupStrategyOptionsOutput() RunAsGroupStrategyOptionsOutput

func (RunAsGroupStrategyOptionsOutput) ToRunAsGroupStrategyOptionsOutputWithContext

func (o RunAsGroupStrategyOptionsOutput) ToRunAsGroupStrategyOptionsOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsOutput

func (RunAsGroupStrategyOptionsOutput) ToRunAsGroupStrategyOptionsPtrOutput

func (o RunAsGroupStrategyOptionsOutput) ToRunAsGroupStrategyOptionsPtrOutput() RunAsGroupStrategyOptionsPtrOutput

func (RunAsGroupStrategyOptionsOutput) ToRunAsGroupStrategyOptionsPtrOutputWithContext

func (o RunAsGroupStrategyOptionsOutput) ToRunAsGroupStrategyOptionsPtrOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPtrOutput

type RunAsGroupStrategyOptionsPatch

type RunAsGroupStrategyOptionsPatch struct {
	// ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRangePatch `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
	Rule *string `pulumi:"rule"`
}

RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.

type RunAsGroupStrategyOptionsPatchArgs

type RunAsGroupStrategyOptionsPatchArgs struct {
	// ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangePatchArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
}

RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.

func (RunAsGroupStrategyOptionsPatchArgs) ElementType

func (RunAsGroupStrategyOptionsPatchArgs) ToRunAsGroupStrategyOptionsPatchOutput

func (i RunAsGroupStrategyOptionsPatchArgs) ToRunAsGroupStrategyOptionsPatchOutput() RunAsGroupStrategyOptionsPatchOutput

func (RunAsGroupStrategyOptionsPatchArgs) ToRunAsGroupStrategyOptionsPatchOutputWithContext

func (i RunAsGroupStrategyOptionsPatchArgs) ToRunAsGroupStrategyOptionsPatchOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPatchOutput

func (RunAsGroupStrategyOptionsPatchArgs) ToRunAsGroupStrategyOptionsPatchPtrOutput

func (i RunAsGroupStrategyOptionsPatchArgs) ToRunAsGroupStrategyOptionsPatchPtrOutput() RunAsGroupStrategyOptionsPatchPtrOutput

func (RunAsGroupStrategyOptionsPatchArgs) ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext

func (i RunAsGroupStrategyOptionsPatchArgs) ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPatchPtrOutput

type RunAsGroupStrategyOptionsPatchInput

type RunAsGroupStrategyOptionsPatchInput interface {
	pulumi.Input

	ToRunAsGroupStrategyOptionsPatchOutput() RunAsGroupStrategyOptionsPatchOutput
	ToRunAsGroupStrategyOptionsPatchOutputWithContext(context.Context) RunAsGroupStrategyOptionsPatchOutput
}

RunAsGroupStrategyOptionsPatchInput is an input type that accepts RunAsGroupStrategyOptionsPatchArgs and RunAsGroupStrategyOptionsPatchOutput values. You can construct a concrete instance of `RunAsGroupStrategyOptionsPatchInput` via:

RunAsGroupStrategyOptionsPatchArgs{...}

type RunAsGroupStrategyOptionsPatchOutput

type RunAsGroupStrategyOptionsPatchOutput struct{ *pulumi.OutputState }

RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.

func (RunAsGroupStrategyOptionsPatchOutput) ElementType

func (RunAsGroupStrategyOptionsPatchOutput) Ranges

ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.

func (RunAsGroupStrategyOptionsPatchOutput) Rule

rule is the strategy that will dictate the allowable RunAsGroup values that may be set.

func (RunAsGroupStrategyOptionsPatchOutput) ToRunAsGroupStrategyOptionsPatchOutput

func (o RunAsGroupStrategyOptionsPatchOutput) ToRunAsGroupStrategyOptionsPatchOutput() RunAsGroupStrategyOptionsPatchOutput

func (RunAsGroupStrategyOptionsPatchOutput) ToRunAsGroupStrategyOptionsPatchOutputWithContext

func (o RunAsGroupStrategyOptionsPatchOutput) ToRunAsGroupStrategyOptionsPatchOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPatchOutput

func (RunAsGroupStrategyOptionsPatchOutput) ToRunAsGroupStrategyOptionsPatchPtrOutput

func (o RunAsGroupStrategyOptionsPatchOutput) ToRunAsGroupStrategyOptionsPatchPtrOutput() RunAsGroupStrategyOptionsPatchPtrOutput

func (RunAsGroupStrategyOptionsPatchOutput) ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext

func (o RunAsGroupStrategyOptionsPatchOutput) ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPatchPtrOutput

type RunAsGroupStrategyOptionsPatchPtrInput

type RunAsGroupStrategyOptionsPatchPtrInput interface {
	pulumi.Input

	ToRunAsGroupStrategyOptionsPatchPtrOutput() RunAsGroupStrategyOptionsPatchPtrOutput
	ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext(context.Context) RunAsGroupStrategyOptionsPatchPtrOutput
}

RunAsGroupStrategyOptionsPatchPtrInput is an input type that accepts RunAsGroupStrategyOptionsPatchArgs, RunAsGroupStrategyOptionsPatchPtr and RunAsGroupStrategyOptionsPatchPtrOutput values. You can construct a concrete instance of `RunAsGroupStrategyOptionsPatchPtrInput` via:

        RunAsGroupStrategyOptionsPatchArgs{...}

or:

        nil

type RunAsGroupStrategyOptionsPatchPtrOutput

type RunAsGroupStrategyOptionsPatchPtrOutput struct{ *pulumi.OutputState }

func (RunAsGroupStrategyOptionsPatchPtrOutput) Elem

func (RunAsGroupStrategyOptionsPatchPtrOutput) ElementType

func (RunAsGroupStrategyOptionsPatchPtrOutput) Ranges

ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.

func (RunAsGroupStrategyOptionsPatchPtrOutput) Rule

rule is the strategy that will dictate the allowable RunAsGroup values that may be set.

func (RunAsGroupStrategyOptionsPatchPtrOutput) ToRunAsGroupStrategyOptionsPatchPtrOutput

func (o RunAsGroupStrategyOptionsPatchPtrOutput) ToRunAsGroupStrategyOptionsPatchPtrOutput() RunAsGroupStrategyOptionsPatchPtrOutput

func (RunAsGroupStrategyOptionsPatchPtrOutput) ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext

func (o RunAsGroupStrategyOptionsPatchPtrOutput) ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPatchPtrOutput

type RunAsGroupStrategyOptionsPtrInput

type RunAsGroupStrategyOptionsPtrInput interface {
	pulumi.Input

	ToRunAsGroupStrategyOptionsPtrOutput() RunAsGroupStrategyOptionsPtrOutput
	ToRunAsGroupStrategyOptionsPtrOutputWithContext(context.Context) RunAsGroupStrategyOptionsPtrOutput
}

RunAsGroupStrategyOptionsPtrInput is an input type that accepts RunAsGroupStrategyOptionsArgs, RunAsGroupStrategyOptionsPtr and RunAsGroupStrategyOptionsPtrOutput values. You can construct a concrete instance of `RunAsGroupStrategyOptionsPtrInput` via:

        RunAsGroupStrategyOptionsArgs{...}

or:

        nil

type RunAsGroupStrategyOptionsPtrOutput

type RunAsGroupStrategyOptionsPtrOutput struct{ *pulumi.OutputState }

func (RunAsGroupStrategyOptionsPtrOutput) Elem

func (RunAsGroupStrategyOptionsPtrOutput) ElementType

func (RunAsGroupStrategyOptionsPtrOutput) Ranges

ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.

func (RunAsGroupStrategyOptionsPtrOutput) Rule

rule is the strategy that will dictate the allowable RunAsGroup values that may be set.

func (RunAsGroupStrategyOptionsPtrOutput) ToRunAsGroupStrategyOptionsPtrOutput

func (o RunAsGroupStrategyOptionsPtrOutput) ToRunAsGroupStrategyOptionsPtrOutput() RunAsGroupStrategyOptionsPtrOutput

func (RunAsGroupStrategyOptionsPtrOutput) ToRunAsGroupStrategyOptionsPtrOutputWithContext

func (o RunAsGroupStrategyOptionsPtrOutput) ToRunAsGroupStrategyOptionsPtrOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPtrOutput

type RunAsUserStrategyOptions

type RunAsUserStrategyOptions struct {
	// ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRange `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsUser values that may be set.
	Rule string `pulumi:"rule"`
}

RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.

type RunAsUserStrategyOptionsArgs

type RunAsUserStrategyOptionsArgs struct {
	// ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangeArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsUser values that may be set.
	Rule pulumi.StringInput `pulumi:"rule"`
}

RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.

func (RunAsUserStrategyOptionsArgs) ElementType

func (RunAsUserStrategyOptionsArgs) ToRunAsUserStrategyOptionsOutput

func (i RunAsUserStrategyOptionsArgs) ToRunAsUserStrategyOptionsOutput() RunAsUserStrategyOptionsOutput

func (RunAsUserStrategyOptionsArgs) ToRunAsUserStrategyOptionsOutputWithContext

func (i RunAsUserStrategyOptionsArgs) ToRunAsUserStrategyOptionsOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsOutput

func (RunAsUserStrategyOptionsArgs) ToRunAsUserStrategyOptionsPtrOutput

func (i RunAsUserStrategyOptionsArgs) ToRunAsUserStrategyOptionsPtrOutput() RunAsUserStrategyOptionsPtrOutput

func (RunAsUserStrategyOptionsArgs) ToRunAsUserStrategyOptionsPtrOutputWithContext

func (i RunAsUserStrategyOptionsArgs) ToRunAsUserStrategyOptionsPtrOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPtrOutput

type RunAsUserStrategyOptionsInput

type RunAsUserStrategyOptionsInput interface {
	pulumi.Input

	ToRunAsUserStrategyOptionsOutput() RunAsUserStrategyOptionsOutput
	ToRunAsUserStrategyOptionsOutputWithContext(context.Context) RunAsUserStrategyOptionsOutput
}

RunAsUserStrategyOptionsInput is an input type that accepts RunAsUserStrategyOptionsArgs and RunAsUserStrategyOptionsOutput values. You can construct a concrete instance of `RunAsUserStrategyOptionsInput` via:

RunAsUserStrategyOptionsArgs{...}

type RunAsUserStrategyOptionsOutput

type RunAsUserStrategyOptionsOutput struct{ *pulumi.OutputState }

RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.

func (RunAsUserStrategyOptionsOutput) ElementType

func (RunAsUserStrategyOptionsOutput) Ranges

ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.

func (RunAsUserStrategyOptionsOutput) Rule

rule is the strategy that will dictate the allowable RunAsUser values that may be set.

func (RunAsUserStrategyOptionsOutput) ToRunAsUserStrategyOptionsOutput

func (o RunAsUserStrategyOptionsOutput) ToRunAsUserStrategyOptionsOutput() RunAsUserStrategyOptionsOutput

func (RunAsUserStrategyOptionsOutput) ToRunAsUserStrategyOptionsOutputWithContext

func (o RunAsUserStrategyOptionsOutput) ToRunAsUserStrategyOptionsOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsOutput

func (RunAsUserStrategyOptionsOutput) ToRunAsUserStrategyOptionsPtrOutput

func (o RunAsUserStrategyOptionsOutput) ToRunAsUserStrategyOptionsPtrOutput() RunAsUserStrategyOptionsPtrOutput

func (RunAsUserStrategyOptionsOutput) ToRunAsUserStrategyOptionsPtrOutputWithContext

func (o RunAsUserStrategyOptionsOutput) ToRunAsUserStrategyOptionsPtrOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPtrOutput

type RunAsUserStrategyOptionsPatch

type RunAsUserStrategyOptionsPatch struct {
	// ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRangePatch `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsUser values that may be set.
	Rule *string `pulumi:"rule"`
}

RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.

type RunAsUserStrategyOptionsPatchArgs

type RunAsUserStrategyOptionsPatchArgs struct {
	// ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangePatchArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsUser values that may be set.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
}

RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.

func (RunAsUserStrategyOptionsPatchArgs) ElementType

func (RunAsUserStrategyOptionsPatchArgs) ToRunAsUserStrategyOptionsPatchOutput

func (i RunAsUserStrategyOptionsPatchArgs) ToRunAsUserStrategyOptionsPatchOutput() RunAsUserStrategyOptionsPatchOutput

func (RunAsUserStrategyOptionsPatchArgs) ToRunAsUserStrategyOptionsPatchOutputWithContext

func (i RunAsUserStrategyOptionsPatchArgs) ToRunAsUserStrategyOptionsPatchOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPatchOutput

func (RunAsUserStrategyOptionsPatchArgs) ToRunAsUserStrategyOptionsPatchPtrOutput

func (i RunAsUserStrategyOptionsPatchArgs) ToRunAsUserStrategyOptionsPatchPtrOutput() RunAsUserStrategyOptionsPatchPtrOutput

func (RunAsUserStrategyOptionsPatchArgs) ToRunAsUserStrategyOptionsPatchPtrOutputWithContext

func (i RunAsUserStrategyOptionsPatchArgs) ToRunAsUserStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPatchPtrOutput

type RunAsUserStrategyOptionsPatchInput

type RunAsUserStrategyOptionsPatchInput interface {
	pulumi.Input

	ToRunAsUserStrategyOptionsPatchOutput() RunAsUserStrategyOptionsPatchOutput
	ToRunAsUserStrategyOptionsPatchOutputWithContext(context.Context) RunAsUserStrategyOptionsPatchOutput
}

RunAsUserStrategyOptionsPatchInput is an input type that accepts RunAsUserStrategyOptionsPatchArgs and RunAsUserStrategyOptionsPatchOutput values. You can construct a concrete instance of `RunAsUserStrategyOptionsPatchInput` via:

RunAsUserStrategyOptionsPatchArgs{...}

type RunAsUserStrategyOptionsPatchOutput

type RunAsUserStrategyOptionsPatchOutput struct{ *pulumi.OutputState }

RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.

func (RunAsUserStrategyOptionsPatchOutput) ElementType

func (RunAsUserStrategyOptionsPatchOutput) Ranges

ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.

func (RunAsUserStrategyOptionsPatchOutput) Rule

rule is the strategy that will dictate the allowable RunAsUser values that may be set.

func (RunAsUserStrategyOptionsPatchOutput) ToRunAsUserStrategyOptionsPatchOutput

func (o RunAsUserStrategyOptionsPatchOutput) ToRunAsUserStrategyOptionsPatchOutput() RunAsUserStrategyOptionsPatchOutput

func (RunAsUserStrategyOptionsPatchOutput) ToRunAsUserStrategyOptionsPatchOutputWithContext

func (o RunAsUserStrategyOptionsPatchOutput) ToRunAsUserStrategyOptionsPatchOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPatchOutput

func (RunAsUserStrategyOptionsPatchOutput) ToRunAsUserStrategyOptionsPatchPtrOutput

func (o RunAsUserStrategyOptionsPatchOutput) ToRunAsUserStrategyOptionsPatchPtrOutput() RunAsUserStrategyOptionsPatchPtrOutput

func (RunAsUserStrategyOptionsPatchOutput) ToRunAsUserStrategyOptionsPatchPtrOutputWithContext

func (o RunAsUserStrategyOptionsPatchOutput) ToRunAsUserStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPatchPtrOutput

type RunAsUserStrategyOptionsPatchPtrInput

type RunAsUserStrategyOptionsPatchPtrInput interface {
	pulumi.Input

	ToRunAsUserStrategyOptionsPatchPtrOutput() RunAsUserStrategyOptionsPatchPtrOutput
	ToRunAsUserStrategyOptionsPatchPtrOutputWithContext(context.Context) RunAsUserStrategyOptionsPatchPtrOutput
}

RunAsUserStrategyOptionsPatchPtrInput is an input type that accepts RunAsUserStrategyOptionsPatchArgs, RunAsUserStrategyOptionsPatchPtr and RunAsUserStrategyOptionsPatchPtrOutput values. You can construct a concrete instance of `RunAsUserStrategyOptionsPatchPtrInput` via:

        RunAsUserStrategyOptionsPatchArgs{...}

or:

        nil

type RunAsUserStrategyOptionsPatchPtrOutput

type RunAsUserStrategyOptionsPatchPtrOutput struct{ *pulumi.OutputState }

func (RunAsUserStrategyOptionsPatchPtrOutput) Elem

func (RunAsUserStrategyOptionsPatchPtrOutput) ElementType

func (RunAsUserStrategyOptionsPatchPtrOutput) Ranges

ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.

func (RunAsUserStrategyOptionsPatchPtrOutput) Rule

rule is the strategy that will dictate the allowable RunAsUser values that may be set.

func (RunAsUserStrategyOptionsPatchPtrOutput) ToRunAsUserStrategyOptionsPatchPtrOutput

func (o RunAsUserStrategyOptionsPatchPtrOutput) ToRunAsUserStrategyOptionsPatchPtrOutput() RunAsUserStrategyOptionsPatchPtrOutput

func (RunAsUserStrategyOptionsPatchPtrOutput) ToRunAsUserStrategyOptionsPatchPtrOutputWithContext

func (o RunAsUserStrategyOptionsPatchPtrOutput) ToRunAsUserStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPatchPtrOutput

type RunAsUserStrategyOptionsPtrInput

type RunAsUserStrategyOptionsPtrInput interface {
	pulumi.Input

	ToRunAsUserStrategyOptionsPtrOutput() RunAsUserStrategyOptionsPtrOutput
	ToRunAsUserStrategyOptionsPtrOutputWithContext(context.Context) RunAsUserStrategyOptionsPtrOutput
}

RunAsUserStrategyOptionsPtrInput is an input type that accepts RunAsUserStrategyOptionsArgs, RunAsUserStrategyOptionsPtr and RunAsUserStrategyOptionsPtrOutput values. You can construct a concrete instance of `RunAsUserStrategyOptionsPtrInput` via:

        RunAsUserStrategyOptionsArgs{...}

or:

        nil

type RunAsUserStrategyOptionsPtrOutput

type RunAsUserStrategyOptionsPtrOutput struct{ *pulumi.OutputState }

func (RunAsUserStrategyOptionsPtrOutput) Elem

func (RunAsUserStrategyOptionsPtrOutput) ElementType

func (RunAsUserStrategyOptionsPtrOutput) Ranges

ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.

func (RunAsUserStrategyOptionsPtrOutput) Rule

rule is the strategy that will dictate the allowable RunAsUser values that may be set.

func (RunAsUserStrategyOptionsPtrOutput) ToRunAsUserStrategyOptionsPtrOutput

func (o RunAsUserStrategyOptionsPtrOutput) ToRunAsUserStrategyOptionsPtrOutput() RunAsUserStrategyOptionsPtrOutput

func (RunAsUserStrategyOptionsPtrOutput) ToRunAsUserStrategyOptionsPtrOutputWithContext

func (o RunAsUserStrategyOptionsPtrOutput) ToRunAsUserStrategyOptionsPtrOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPtrOutput

type RuntimeClassStrategyOptions

type RuntimeClassStrategyOptions struct {
	// allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
	AllowedRuntimeClassNames []string `pulumi:"allowedRuntimeClassNames"`
	// defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
	DefaultRuntimeClassName *string `pulumi:"defaultRuntimeClassName"`
}

RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.

type RuntimeClassStrategyOptionsArgs

type RuntimeClassStrategyOptionsArgs struct {
	// allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
	AllowedRuntimeClassNames pulumi.StringArrayInput `pulumi:"allowedRuntimeClassNames"`
	// defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
	DefaultRuntimeClassName pulumi.StringPtrInput `pulumi:"defaultRuntimeClassName"`
}

RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.

func (RuntimeClassStrategyOptionsArgs) ElementType

func (RuntimeClassStrategyOptionsArgs) ToRuntimeClassStrategyOptionsOutput

func (i RuntimeClassStrategyOptionsArgs) ToRuntimeClassStrategyOptionsOutput() RuntimeClassStrategyOptionsOutput

func (RuntimeClassStrategyOptionsArgs) ToRuntimeClassStrategyOptionsOutputWithContext

func (i RuntimeClassStrategyOptionsArgs) ToRuntimeClassStrategyOptionsOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsOutput

func (RuntimeClassStrategyOptionsArgs) ToRuntimeClassStrategyOptionsPtrOutput

func (i RuntimeClassStrategyOptionsArgs) ToRuntimeClassStrategyOptionsPtrOutput() RuntimeClassStrategyOptionsPtrOutput

func (RuntimeClassStrategyOptionsArgs) ToRuntimeClassStrategyOptionsPtrOutputWithContext

func (i RuntimeClassStrategyOptionsArgs) ToRuntimeClassStrategyOptionsPtrOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPtrOutput

type RuntimeClassStrategyOptionsInput

type RuntimeClassStrategyOptionsInput interface {
	pulumi.Input

	ToRuntimeClassStrategyOptionsOutput() RuntimeClassStrategyOptionsOutput
	ToRuntimeClassStrategyOptionsOutputWithContext(context.Context) RuntimeClassStrategyOptionsOutput
}

RuntimeClassStrategyOptionsInput is an input type that accepts RuntimeClassStrategyOptionsArgs and RuntimeClassStrategyOptionsOutput values. You can construct a concrete instance of `RuntimeClassStrategyOptionsInput` via:

RuntimeClassStrategyOptionsArgs{...}

type RuntimeClassStrategyOptionsOutput

type RuntimeClassStrategyOptionsOutput struct{ *pulumi.OutputState }

RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.

func (RuntimeClassStrategyOptionsOutput) AllowedRuntimeClassNames

func (o RuntimeClassStrategyOptionsOutput) AllowedRuntimeClassNames() pulumi.StringArrayOutput

allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.

func (RuntimeClassStrategyOptionsOutput) DefaultRuntimeClassName

func (o RuntimeClassStrategyOptionsOutput) DefaultRuntimeClassName() pulumi.StringPtrOutput

defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.

func (RuntimeClassStrategyOptionsOutput) ElementType

func (RuntimeClassStrategyOptionsOutput) ToRuntimeClassStrategyOptionsOutput

func (o RuntimeClassStrategyOptionsOutput) ToRuntimeClassStrategyOptionsOutput() RuntimeClassStrategyOptionsOutput

func (RuntimeClassStrategyOptionsOutput) ToRuntimeClassStrategyOptionsOutputWithContext

func (o RuntimeClassStrategyOptionsOutput) ToRuntimeClassStrategyOptionsOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsOutput

func (RuntimeClassStrategyOptionsOutput) ToRuntimeClassStrategyOptionsPtrOutput

func (o RuntimeClassStrategyOptionsOutput) ToRuntimeClassStrategyOptionsPtrOutput() RuntimeClassStrategyOptionsPtrOutput

func (RuntimeClassStrategyOptionsOutput) ToRuntimeClassStrategyOptionsPtrOutputWithContext

func (o RuntimeClassStrategyOptionsOutput) ToRuntimeClassStrategyOptionsPtrOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPtrOutput

type RuntimeClassStrategyOptionsPatch

type RuntimeClassStrategyOptionsPatch struct {
	// allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
	AllowedRuntimeClassNames []string `pulumi:"allowedRuntimeClassNames"`
	// defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
	DefaultRuntimeClassName *string `pulumi:"defaultRuntimeClassName"`
}

RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.

type RuntimeClassStrategyOptionsPatchArgs

type RuntimeClassStrategyOptionsPatchArgs struct {
	// allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
	AllowedRuntimeClassNames pulumi.StringArrayInput `pulumi:"allowedRuntimeClassNames"`
	// defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
	DefaultRuntimeClassName pulumi.StringPtrInput `pulumi:"defaultRuntimeClassName"`
}

RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.

func (RuntimeClassStrategyOptionsPatchArgs) ElementType

func (RuntimeClassStrategyOptionsPatchArgs) ToRuntimeClassStrategyOptionsPatchOutput

func (i RuntimeClassStrategyOptionsPatchArgs) ToRuntimeClassStrategyOptionsPatchOutput() RuntimeClassStrategyOptionsPatchOutput

func (RuntimeClassStrategyOptionsPatchArgs) ToRuntimeClassStrategyOptionsPatchOutputWithContext

func (i RuntimeClassStrategyOptionsPatchArgs) ToRuntimeClassStrategyOptionsPatchOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPatchOutput

func (RuntimeClassStrategyOptionsPatchArgs) ToRuntimeClassStrategyOptionsPatchPtrOutput

func (i RuntimeClassStrategyOptionsPatchArgs) ToRuntimeClassStrategyOptionsPatchPtrOutput() RuntimeClassStrategyOptionsPatchPtrOutput

func (RuntimeClassStrategyOptionsPatchArgs) ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext

func (i RuntimeClassStrategyOptionsPatchArgs) ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPatchPtrOutput

type RuntimeClassStrategyOptionsPatchInput

type RuntimeClassStrategyOptionsPatchInput interface {
	pulumi.Input

	ToRuntimeClassStrategyOptionsPatchOutput() RuntimeClassStrategyOptionsPatchOutput
	ToRuntimeClassStrategyOptionsPatchOutputWithContext(context.Context) RuntimeClassStrategyOptionsPatchOutput
}

RuntimeClassStrategyOptionsPatchInput is an input type that accepts RuntimeClassStrategyOptionsPatchArgs and RuntimeClassStrategyOptionsPatchOutput values. You can construct a concrete instance of `RuntimeClassStrategyOptionsPatchInput` via:

RuntimeClassStrategyOptionsPatchArgs{...}

type RuntimeClassStrategyOptionsPatchOutput

type RuntimeClassStrategyOptionsPatchOutput struct{ *pulumi.OutputState }

RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.

func (RuntimeClassStrategyOptionsPatchOutput) AllowedRuntimeClassNames

allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.

func (RuntimeClassStrategyOptionsPatchOutput) DefaultRuntimeClassName

defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.

func (RuntimeClassStrategyOptionsPatchOutput) ElementType

func (RuntimeClassStrategyOptionsPatchOutput) ToRuntimeClassStrategyOptionsPatchOutput

func (o RuntimeClassStrategyOptionsPatchOutput) ToRuntimeClassStrategyOptionsPatchOutput() RuntimeClassStrategyOptionsPatchOutput

func (RuntimeClassStrategyOptionsPatchOutput) ToRuntimeClassStrategyOptionsPatchOutputWithContext

func (o RuntimeClassStrategyOptionsPatchOutput) ToRuntimeClassStrategyOptionsPatchOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPatchOutput

func (RuntimeClassStrategyOptionsPatchOutput) ToRuntimeClassStrategyOptionsPatchPtrOutput

func (o RuntimeClassStrategyOptionsPatchOutput) ToRuntimeClassStrategyOptionsPatchPtrOutput() RuntimeClassStrategyOptionsPatchPtrOutput

func (RuntimeClassStrategyOptionsPatchOutput) ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext

func (o RuntimeClassStrategyOptionsPatchOutput) ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPatchPtrOutput

type RuntimeClassStrategyOptionsPatchPtrInput

type RuntimeClassStrategyOptionsPatchPtrInput interface {
	pulumi.Input

	ToRuntimeClassStrategyOptionsPatchPtrOutput() RuntimeClassStrategyOptionsPatchPtrOutput
	ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext(context.Context) RuntimeClassStrategyOptionsPatchPtrOutput
}

RuntimeClassStrategyOptionsPatchPtrInput is an input type that accepts RuntimeClassStrategyOptionsPatchArgs, RuntimeClassStrategyOptionsPatchPtr and RuntimeClassStrategyOptionsPatchPtrOutput values. You can construct a concrete instance of `RuntimeClassStrategyOptionsPatchPtrInput` via:

        RuntimeClassStrategyOptionsPatchArgs{...}

or:

        nil

type RuntimeClassStrategyOptionsPatchPtrOutput

type RuntimeClassStrategyOptionsPatchPtrOutput struct{ *pulumi.OutputState }

func (RuntimeClassStrategyOptionsPatchPtrOutput) AllowedRuntimeClassNames

allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.

func (RuntimeClassStrategyOptionsPatchPtrOutput) DefaultRuntimeClassName

defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.

func (RuntimeClassStrategyOptionsPatchPtrOutput) Elem

func (RuntimeClassStrategyOptionsPatchPtrOutput) ElementType

func (RuntimeClassStrategyOptionsPatchPtrOutput) ToRuntimeClassStrategyOptionsPatchPtrOutput

func (o RuntimeClassStrategyOptionsPatchPtrOutput) ToRuntimeClassStrategyOptionsPatchPtrOutput() RuntimeClassStrategyOptionsPatchPtrOutput

func (RuntimeClassStrategyOptionsPatchPtrOutput) ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext

func (o RuntimeClassStrategyOptionsPatchPtrOutput) ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPatchPtrOutput

type RuntimeClassStrategyOptionsPtrInput

type RuntimeClassStrategyOptionsPtrInput interface {
	pulumi.Input

	ToRuntimeClassStrategyOptionsPtrOutput() RuntimeClassStrategyOptionsPtrOutput
	ToRuntimeClassStrategyOptionsPtrOutputWithContext(context.Context) RuntimeClassStrategyOptionsPtrOutput
}

RuntimeClassStrategyOptionsPtrInput is an input type that accepts RuntimeClassStrategyOptionsArgs, RuntimeClassStrategyOptionsPtr and RuntimeClassStrategyOptionsPtrOutput values. You can construct a concrete instance of `RuntimeClassStrategyOptionsPtrInput` via:

        RuntimeClassStrategyOptionsArgs{...}

or:

        nil

type RuntimeClassStrategyOptionsPtrOutput

type RuntimeClassStrategyOptionsPtrOutput struct{ *pulumi.OutputState }

func (RuntimeClassStrategyOptionsPtrOutput) AllowedRuntimeClassNames

func (o RuntimeClassStrategyOptionsPtrOutput) AllowedRuntimeClassNames() pulumi.StringArrayOutput

allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.

func (RuntimeClassStrategyOptionsPtrOutput) DefaultRuntimeClassName

func (o RuntimeClassStrategyOptionsPtrOutput) DefaultRuntimeClassName() pulumi.StringPtrOutput

defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.

func (RuntimeClassStrategyOptionsPtrOutput) Elem

func (RuntimeClassStrategyOptionsPtrOutput) ElementType

func (RuntimeClassStrategyOptionsPtrOutput) ToRuntimeClassStrategyOptionsPtrOutput

func (o RuntimeClassStrategyOptionsPtrOutput) ToRuntimeClassStrategyOptionsPtrOutput() RuntimeClassStrategyOptionsPtrOutput

func (RuntimeClassStrategyOptionsPtrOutput) ToRuntimeClassStrategyOptionsPtrOutputWithContext

func (o RuntimeClassStrategyOptionsPtrOutput) ToRuntimeClassStrategyOptionsPtrOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPtrOutput

type SELinuxStrategyOptions

type SELinuxStrategyOptions struct {
	// rule is the strategy that will dictate the allowable labels that may be set.
	Rule string `pulumi:"rule"`
	// seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
	SeLinuxOptions *corev1.SELinuxOptions `pulumi:"seLinuxOptions"`
}

SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.

type SELinuxStrategyOptionsArgs

type SELinuxStrategyOptionsArgs struct {
	// rule is the strategy that will dictate the allowable labels that may be set.
	Rule pulumi.StringInput `pulumi:"rule"`
	// seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
	SeLinuxOptions corev1.SELinuxOptionsPtrInput `pulumi:"seLinuxOptions"`
}

SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.

func (SELinuxStrategyOptionsArgs) ElementType

func (SELinuxStrategyOptionsArgs) ElementType() reflect.Type

func (SELinuxStrategyOptionsArgs) ToSELinuxStrategyOptionsOutput

func (i SELinuxStrategyOptionsArgs) ToSELinuxStrategyOptionsOutput() SELinuxStrategyOptionsOutput

func (SELinuxStrategyOptionsArgs) ToSELinuxStrategyOptionsOutputWithContext

func (i SELinuxStrategyOptionsArgs) ToSELinuxStrategyOptionsOutputWithContext(ctx context.Context) SELinuxStrategyOptionsOutput

func (SELinuxStrategyOptionsArgs) ToSELinuxStrategyOptionsPtrOutput

func (i SELinuxStrategyOptionsArgs) ToSELinuxStrategyOptionsPtrOutput() SELinuxStrategyOptionsPtrOutput

func (SELinuxStrategyOptionsArgs) ToSELinuxStrategyOptionsPtrOutputWithContext

func (i SELinuxStrategyOptionsArgs) ToSELinuxStrategyOptionsPtrOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPtrOutput

type SELinuxStrategyOptionsInput

type SELinuxStrategyOptionsInput interface {
	pulumi.Input

	ToSELinuxStrategyOptionsOutput() SELinuxStrategyOptionsOutput
	ToSELinuxStrategyOptionsOutputWithContext(context.Context) SELinuxStrategyOptionsOutput
}

SELinuxStrategyOptionsInput is an input type that accepts SELinuxStrategyOptionsArgs and SELinuxStrategyOptionsOutput values. You can construct a concrete instance of `SELinuxStrategyOptionsInput` via:

SELinuxStrategyOptionsArgs{...}

type SELinuxStrategyOptionsOutput

type SELinuxStrategyOptionsOutput struct{ *pulumi.OutputState }

SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.

func (SELinuxStrategyOptionsOutput) ElementType

func (SELinuxStrategyOptionsOutput) Rule

rule is the strategy that will dictate the allowable labels that may be set.

func (SELinuxStrategyOptionsOutput) SeLinuxOptions

seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/

func (SELinuxStrategyOptionsOutput) ToSELinuxStrategyOptionsOutput

func (o SELinuxStrategyOptionsOutput) ToSELinuxStrategyOptionsOutput() SELinuxStrategyOptionsOutput

func (SELinuxStrategyOptionsOutput) ToSELinuxStrategyOptionsOutputWithContext

func (o SELinuxStrategyOptionsOutput) ToSELinuxStrategyOptionsOutputWithContext(ctx context.Context) SELinuxStrategyOptionsOutput

func (SELinuxStrategyOptionsOutput) ToSELinuxStrategyOptionsPtrOutput

func (o SELinuxStrategyOptionsOutput) ToSELinuxStrategyOptionsPtrOutput() SELinuxStrategyOptionsPtrOutput

func (SELinuxStrategyOptionsOutput) ToSELinuxStrategyOptionsPtrOutputWithContext

func (o SELinuxStrategyOptionsOutput) ToSELinuxStrategyOptionsPtrOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPtrOutput

type SELinuxStrategyOptionsPatch

type SELinuxStrategyOptionsPatch struct {
	// rule is the strategy that will dictate the allowable labels that may be set.
	Rule *string `pulumi:"rule"`
	// seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
	SeLinuxOptions *corev1.SELinuxOptionsPatch `pulumi:"seLinuxOptions"`
}

SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.

type SELinuxStrategyOptionsPatchArgs

type SELinuxStrategyOptionsPatchArgs struct {
	// rule is the strategy that will dictate the allowable labels that may be set.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
	// seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
	SeLinuxOptions corev1.SELinuxOptionsPatchPtrInput `pulumi:"seLinuxOptions"`
}

SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.

func (SELinuxStrategyOptionsPatchArgs) ElementType

func (SELinuxStrategyOptionsPatchArgs) ToSELinuxStrategyOptionsPatchOutput

func (i SELinuxStrategyOptionsPatchArgs) ToSELinuxStrategyOptionsPatchOutput() SELinuxStrategyOptionsPatchOutput

func (SELinuxStrategyOptionsPatchArgs) ToSELinuxStrategyOptionsPatchOutputWithContext

func (i SELinuxStrategyOptionsPatchArgs) ToSELinuxStrategyOptionsPatchOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPatchOutput

func (SELinuxStrategyOptionsPatchArgs) ToSELinuxStrategyOptionsPatchPtrOutput

func (i SELinuxStrategyOptionsPatchArgs) ToSELinuxStrategyOptionsPatchPtrOutput() SELinuxStrategyOptionsPatchPtrOutput

func (SELinuxStrategyOptionsPatchArgs) ToSELinuxStrategyOptionsPatchPtrOutputWithContext

func (i SELinuxStrategyOptionsPatchArgs) ToSELinuxStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPatchPtrOutput

type SELinuxStrategyOptionsPatchInput

type SELinuxStrategyOptionsPatchInput interface {
	pulumi.Input

	ToSELinuxStrategyOptionsPatchOutput() SELinuxStrategyOptionsPatchOutput
	ToSELinuxStrategyOptionsPatchOutputWithContext(context.Context) SELinuxStrategyOptionsPatchOutput
}

SELinuxStrategyOptionsPatchInput is an input type that accepts SELinuxStrategyOptionsPatchArgs and SELinuxStrategyOptionsPatchOutput values. You can construct a concrete instance of `SELinuxStrategyOptionsPatchInput` via:

SELinuxStrategyOptionsPatchArgs{...}

type SELinuxStrategyOptionsPatchOutput

type SELinuxStrategyOptionsPatchOutput struct{ *pulumi.OutputState }

SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.

func (SELinuxStrategyOptionsPatchOutput) ElementType

func (SELinuxStrategyOptionsPatchOutput) Rule

rule is the strategy that will dictate the allowable labels that may be set.

func (SELinuxStrategyOptionsPatchOutput) SeLinuxOptions

seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/

func (SELinuxStrategyOptionsPatchOutput) ToSELinuxStrategyOptionsPatchOutput

func (o SELinuxStrategyOptionsPatchOutput) ToSELinuxStrategyOptionsPatchOutput() SELinuxStrategyOptionsPatchOutput

func (SELinuxStrategyOptionsPatchOutput) ToSELinuxStrategyOptionsPatchOutputWithContext

func (o SELinuxStrategyOptionsPatchOutput) ToSELinuxStrategyOptionsPatchOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPatchOutput

func (SELinuxStrategyOptionsPatchOutput) ToSELinuxStrategyOptionsPatchPtrOutput

func (o SELinuxStrategyOptionsPatchOutput) ToSELinuxStrategyOptionsPatchPtrOutput() SELinuxStrategyOptionsPatchPtrOutput

func (SELinuxStrategyOptionsPatchOutput) ToSELinuxStrategyOptionsPatchPtrOutputWithContext

func (o SELinuxStrategyOptionsPatchOutput) ToSELinuxStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPatchPtrOutput

type SELinuxStrategyOptionsPatchPtrInput

type SELinuxStrategyOptionsPatchPtrInput interface {
	pulumi.Input

	ToSELinuxStrategyOptionsPatchPtrOutput() SELinuxStrategyOptionsPatchPtrOutput
	ToSELinuxStrategyOptionsPatchPtrOutputWithContext(context.Context) SELinuxStrategyOptionsPatchPtrOutput
}

SELinuxStrategyOptionsPatchPtrInput is an input type that accepts SELinuxStrategyOptionsPatchArgs, SELinuxStrategyOptionsPatchPtr and SELinuxStrategyOptionsPatchPtrOutput values. You can construct a concrete instance of `SELinuxStrategyOptionsPatchPtrInput` via:

        SELinuxStrategyOptionsPatchArgs{...}

or:

        nil

type SELinuxStrategyOptionsPatchPtrOutput

type SELinuxStrategyOptionsPatchPtrOutput struct{ *pulumi.OutputState }

func (SELinuxStrategyOptionsPatchPtrOutput) Elem

func (SELinuxStrategyOptionsPatchPtrOutput) ElementType

func (SELinuxStrategyOptionsPatchPtrOutput) Rule

rule is the strategy that will dictate the allowable labels that may be set.

func (SELinuxStrategyOptionsPatchPtrOutput) SeLinuxOptions

seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/

func (SELinuxStrategyOptionsPatchPtrOutput) ToSELinuxStrategyOptionsPatchPtrOutput

func (o SELinuxStrategyOptionsPatchPtrOutput) ToSELinuxStrategyOptionsPatchPtrOutput() SELinuxStrategyOptionsPatchPtrOutput

func (SELinuxStrategyOptionsPatchPtrOutput) ToSELinuxStrategyOptionsPatchPtrOutputWithContext

func (o SELinuxStrategyOptionsPatchPtrOutput) ToSELinuxStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPatchPtrOutput

type SELinuxStrategyOptionsPtrInput

type SELinuxStrategyOptionsPtrInput interface {
	pulumi.Input

	ToSELinuxStrategyOptionsPtrOutput() SELinuxStrategyOptionsPtrOutput
	ToSELinuxStrategyOptionsPtrOutputWithContext(context.Context) SELinuxStrategyOptionsPtrOutput
}

SELinuxStrategyOptionsPtrInput is an input type that accepts SELinuxStrategyOptionsArgs, SELinuxStrategyOptionsPtr and SELinuxStrategyOptionsPtrOutput values. You can construct a concrete instance of `SELinuxStrategyOptionsPtrInput` via:

        SELinuxStrategyOptionsArgs{...}

or:

        nil

type SELinuxStrategyOptionsPtrOutput

type SELinuxStrategyOptionsPtrOutput struct{ *pulumi.OutputState }

func (SELinuxStrategyOptionsPtrOutput) Elem

func (SELinuxStrategyOptionsPtrOutput) ElementType

func (SELinuxStrategyOptionsPtrOutput) Rule

rule is the strategy that will dictate the allowable labels that may be set.

func (SELinuxStrategyOptionsPtrOutput) SeLinuxOptions

seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/

func (SELinuxStrategyOptionsPtrOutput) ToSELinuxStrategyOptionsPtrOutput

func (o SELinuxStrategyOptionsPtrOutput) ToSELinuxStrategyOptionsPtrOutput() SELinuxStrategyOptionsPtrOutput

func (SELinuxStrategyOptionsPtrOutput) ToSELinuxStrategyOptionsPtrOutputWithContext

func (o SELinuxStrategyOptionsPtrOutput) ToSELinuxStrategyOptionsPtrOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPtrOutput

type SupplementalGroupsStrategyOptions

type SupplementalGroupsStrategyOptions struct {
	// ranges are the allowed ranges of supplemental groups.  If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRange `pulumi:"ranges"`
	// rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
	Rule *string `pulumi:"rule"`
}

SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.

type SupplementalGroupsStrategyOptionsArgs

type SupplementalGroupsStrategyOptionsArgs struct {
	// ranges are the allowed ranges of supplemental groups.  If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangeArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
}

SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.

func (SupplementalGroupsStrategyOptionsArgs) ElementType

func (SupplementalGroupsStrategyOptionsArgs) ToSupplementalGroupsStrategyOptionsOutput

func (i SupplementalGroupsStrategyOptionsArgs) ToSupplementalGroupsStrategyOptionsOutput() SupplementalGroupsStrategyOptionsOutput

func (SupplementalGroupsStrategyOptionsArgs) ToSupplementalGroupsStrategyOptionsOutputWithContext

func (i SupplementalGroupsStrategyOptionsArgs) ToSupplementalGroupsStrategyOptionsOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsOutput

func (SupplementalGroupsStrategyOptionsArgs) ToSupplementalGroupsStrategyOptionsPtrOutput

func (i SupplementalGroupsStrategyOptionsArgs) ToSupplementalGroupsStrategyOptionsPtrOutput() SupplementalGroupsStrategyOptionsPtrOutput

func (SupplementalGroupsStrategyOptionsArgs) ToSupplementalGroupsStrategyOptionsPtrOutputWithContext

func (i SupplementalGroupsStrategyOptionsArgs) ToSupplementalGroupsStrategyOptionsPtrOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPtrOutput

type SupplementalGroupsStrategyOptionsInput

type SupplementalGroupsStrategyOptionsInput interface {
	pulumi.Input

	ToSupplementalGroupsStrategyOptionsOutput() SupplementalGroupsStrategyOptionsOutput
	ToSupplementalGroupsStrategyOptionsOutputWithContext(context.Context) SupplementalGroupsStrategyOptionsOutput
}

SupplementalGroupsStrategyOptionsInput is an input type that accepts SupplementalGroupsStrategyOptionsArgs and SupplementalGroupsStrategyOptionsOutput values. You can construct a concrete instance of `SupplementalGroupsStrategyOptionsInput` via:

SupplementalGroupsStrategyOptionsArgs{...}

type SupplementalGroupsStrategyOptionsOutput

type SupplementalGroupsStrategyOptionsOutput struct{ *pulumi.OutputState }

SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.

func (SupplementalGroupsStrategyOptionsOutput) ElementType

func (SupplementalGroupsStrategyOptionsOutput) Ranges

ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.

func (SupplementalGroupsStrategyOptionsOutput) Rule

rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.

func (SupplementalGroupsStrategyOptionsOutput) ToSupplementalGroupsStrategyOptionsOutput

func (o SupplementalGroupsStrategyOptionsOutput) ToSupplementalGroupsStrategyOptionsOutput() SupplementalGroupsStrategyOptionsOutput

func (SupplementalGroupsStrategyOptionsOutput) ToSupplementalGroupsStrategyOptionsOutputWithContext

func (o SupplementalGroupsStrategyOptionsOutput) ToSupplementalGroupsStrategyOptionsOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsOutput

func (SupplementalGroupsStrategyOptionsOutput) ToSupplementalGroupsStrategyOptionsPtrOutput

func (o SupplementalGroupsStrategyOptionsOutput) ToSupplementalGroupsStrategyOptionsPtrOutput() SupplementalGroupsStrategyOptionsPtrOutput

func (SupplementalGroupsStrategyOptionsOutput) ToSupplementalGroupsStrategyOptionsPtrOutputWithContext

func (o SupplementalGroupsStrategyOptionsOutput) ToSupplementalGroupsStrategyOptionsPtrOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPtrOutput

type SupplementalGroupsStrategyOptionsPatch

type SupplementalGroupsStrategyOptionsPatch struct {
	// ranges are the allowed ranges of supplemental groups.  If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRangePatch `pulumi:"ranges"`
	// rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
	Rule *string `pulumi:"rule"`
}

SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.

type SupplementalGroupsStrategyOptionsPatchArgs

type SupplementalGroupsStrategyOptionsPatchArgs struct {
	// ranges are the allowed ranges of supplemental groups.  If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangePatchArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
}

SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.

func (SupplementalGroupsStrategyOptionsPatchArgs) ElementType

func (SupplementalGroupsStrategyOptionsPatchArgs) ToSupplementalGroupsStrategyOptionsPatchOutput

func (i SupplementalGroupsStrategyOptionsPatchArgs) ToSupplementalGroupsStrategyOptionsPatchOutput() SupplementalGroupsStrategyOptionsPatchOutput

func (SupplementalGroupsStrategyOptionsPatchArgs) ToSupplementalGroupsStrategyOptionsPatchOutputWithContext

func (i SupplementalGroupsStrategyOptionsPatchArgs) ToSupplementalGroupsStrategyOptionsPatchOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPatchOutput

func (SupplementalGroupsStrategyOptionsPatchArgs) ToSupplementalGroupsStrategyOptionsPatchPtrOutput

func (i SupplementalGroupsStrategyOptionsPatchArgs) ToSupplementalGroupsStrategyOptionsPatchPtrOutput() SupplementalGroupsStrategyOptionsPatchPtrOutput

func (SupplementalGroupsStrategyOptionsPatchArgs) ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext

func (i SupplementalGroupsStrategyOptionsPatchArgs) ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPatchPtrOutput

type SupplementalGroupsStrategyOptionsPatchInput

type SupplementalGroupsStrategyOptionsPatchInput interface {
	pulumi.Input

	ToSupplementalGroupsStrategyOptionsPatchOutput() SupplementalGroupsStrategyOptionsPatchOutput
	ToSupplementalGroupsStrategyOptionsPatchOutputWithContext(context.Context) SupplementalGroupsStrategyOptionsPatchOutput
}

SupplementalGroupsStrategyOptionsPatchInput is an input type that accepts SupplementalGroupsStrategyOptionsPatchArgs and SupplementalGroupsStrategyOptionsPatchOutput values. You can construct a concrete instance of `SupplementalGroupsStrategyOptionsPatchInput` via:

SupplementalGroupsStrategyOptionsPatchArgs{...}

type SupplementalGroupsStrategyOptionsPatchOutput

type SupplementalGroupsStrategyOptionsPatchOutput struct{ *pulumi.OutputState }

SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.

func (SupplementalGroupsStrategyOptionsPatchOutput) ElementType

func (SupplementalGroupsStrategyOptionsPatchOutput) Ranges

ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.

func (SupplementalGroupsStrategyOptionsPatchOutput) Rule

rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.

func (SupplementalGroupsStrategyOptionsPatchOutput) ToSupplementalGroupsStrategyOptionsPatchOutput

func (o SupplementalGroupsStrategyOptionsPatchOutput) ToSupplementalGroupsStrategyOptionsPatchOutput() SupplementalGroupsStrategyOptionsPatchOutput

func (SupplementalGroupsStrategyOptionsPatchOutput) ToSupplementalGroupsStrategyOptionsPatchOutputWithContext

func (o SupplementalGroupsStrategyOptionsPatchOutput) ToSupplementalGroupsStrategyOptionsPatchOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPatchOutput

func (SupplementalGroupsStrategyOptionsPatchOutput) ToSupplementalGroupsStrategyOptionsPatchPtrOutput

func (o SupplementalGroupsStrategyOptionsPatchOutput) ToSupplementalGroupsStrategyOptionsPatchPtrOutput() SupplementalGroupsStrategyOptionsPatchPtrOutput

func (SupplementalGroupsStrategyOptionsPatchOutput) ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext

func (o SupplementalGroupsStrategyOptionsPatchOutput) ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPatchPtrOutput

type SupplementalGroupsStrategyOptionsPatchPtrInput

type SupplementalGroupsStrategyOptionsPatchPtrInput interface {
	pulumi.Input

	ToSupplementalGroupsStrategyOptionsPatchPtrOutput() SupplementalGroupsStrategyOptionsPatchPtrOutput
	ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext(context.Context) SupplementalGroupsStrategyOptionsPatchPtrOutput
}

SupplementalGroupsStrategyOptionsPatchPtrInput is an input type that accepts SupplementalGroupsStrategyOptionsPatchArgs, SupplementalGroupsStrategyOptionsPatchPtr and SupplementalGroupsStrategyOptionsPatchPtrOutput values. You can construct a concrete instance of `SupplementalGroupsStrategyOptionsPatchPtrInput` via:

        SupplementalGroupsStrategyOptionsPatchArgs{...}

or:

        nil

type SupplementalGroupsStrategyOptionsPatchPtrOutput

type SupplementalGroupsStrategyOptionsPatchPtrOutput struct{ *pulumi.OutputState }

func (SupplementalGroupsStrategyOptionsPatchPtrOutput) Elem

func (SupplementalGroupsStrategyOptionsPatchPtrOutput) ElementType

func (SupplementalGroupsStrategyOptionsPatchPtrOutput) Ranges

ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.

func (SupplementalGroupsStrategyOptionsPatchPtrOutput) Rule

rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.

func (SupplementalGroupsStrategyOptionsPatchPtrOutput) ToSupplementalGroupsStrategyOptionsPatchPtrOutput

func (o SupplementalGroupsStrategyOptionsPatchPtrOutput) ToSupplementalGroupsStrategyOptionsPatchPtrOutput() SupplementalGroupsStrategyOptionsPatchPtrOutput

func (SupplementalGroupsStrategyOptionsPatchPtrOutput) ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext

func (o SupplementalGroupsStrategyOptionsPatchPtrOutput) ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPatchPtrOutput

type SupplementalGroupsStrategyOptionsPtrInput

type SupplementalGroupsStrategyOptionsPtrInput interface {
	pulumi.Input

	ToSupplementalGroupsStrategyOptionsPtrOutput() SupplementalGroupsStrategyOptionsPtrOutput
	ToSupplementalGroupsStrategyOptionsPtrOutputWithContext(context.Context) SupplementalGroupsStrategyOptionsPtrOutput
}

SupplementalGroupsStrategyOptionsPtrInput is an input type that accepts SupplementalGroupsStrategyOptionsArgs, SupplementalGroupsStrategyOptionsPtr and SupplementalGroupsStrategyOptionsPtrOutput values. You can construct a concrete instance of `SupplementalGroupsStrategyOptionsPtrInput` via:

        SupplementalGroupsStrategyOptionsArgs{...}

or:

        nil

type SupplementalGroupsStrategyOptionsPtrOutput

type SupplementalGroupsStrategyOptionsPtrOutput struct{ *pulumi.OutputState }

func (SupplementalGroupsStrategyOptionsPtrOutput) Elem

func (SupplementalGroupsStrategyOptionsPtrOutput) ElementType

func (SupplementalGroupsStrategyOptionsPtrOutput) Ranges

ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.

func (SupplementalGroupsStrategyOptionsPtrOutput) Rule

rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.

func (SupplementalGroupsStrategyOptionsPtrOutput) ToSupplementalGroupsStrategyOptionsPtrOutput

func (o SupplementalGroupsStrategyOptionsPtrOutput) ToSupplementalGroupsStrategyOptionsPtrOutput() SupplementalGroupsStrategyOptionsPtrOutput

func (SupplementalGroupsStrategyOptionsPtrOutput) ToSupplementalGroupsStrategyOptionsPtrOutputWithContext

func (o SupplementalGroupsStrategyOptionsPtrOutput) ToSupplementalGroupsStrategyOptionsPtrOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPtrOutput

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL